xref: /OK3568_Linux_fs/kernel/net/ipv4/ipcomp.c (revision 4882a59341e53eb6f0b4789bf948001014eff981)
1*4882a593Smuzhiyun // SPDX-License-Identifier: GPL-2.0-or-later
2*4882a593Smuzhiyun /*
3*4882a593Smuzhiyun  * IP Payload Compression Protocol (IPComp) - RFC3173.
4*4882a593Smuzhiyun  *
5*4882a593Smuzhiyun  * Copyright (c) 2003 James Morris <jmorris@intercode.com.au>
6*4882a593Smuzhiyun  *
7*4882a593Smuzhiyun  * Todo:
8*4882a593Smuzhiyun  *   - Tunable compression parameters.
9*4882a593Smuzhiyun  *   - Compression stats.
10*4882a593Smuzhiyun  *   - Adaptive compression.
11*4882a593Smuzhiyun  */
12*4882a593Smuzhiyun #include <linux/module.h>
13*4882a593Smuzhiyun #include <linux/err.h>
14*4882a593Smuzhiyun #include <linux/rtnetlink.h>
15*4882a593Smuzhiyun #include <net/ip.h>
16*4882a593Smuzhiyun #include <net/xfrm.h>
17*4882a593Smuzhiyun #include <net/icmp.h>
18*4882a593Smuzhiyun #include <net/ipcomp.h>
19*4882a593Smuzhiyun #include <net/protocol.h>
20*4882a593Smuzhiyun #include <net/sock.h>
21*4882a593Smuzhiyun 
ipcomp4_err(struct sk_buff * skb,u32 info)22*4882a593Smuzhiyun static int ipcomp4_err(struct sk_buff *skb, u32 info)
23*4882a593Smuzhiyun {
24*4882a593Smuzhiyun 	struct net *net = dev_net(skb->dev);
25*4882a593Smuzhiyun 	__be32 spi;
26*4882a593Smuzhiyun 	const struct iphdr *iph = (const struct iphdr *)skb->data;
27*4882a593Smuzhiyun 	struct ip_comp_hdr *ipch = (struct ip_comp_hdr *)(skb->data+(iph->ihl<<2));
28*4882a593Smuzhiyun 	struct xfrm_state *x;
29*4882a593Smuzhiyun 
30*4882a593Smuzhiyun 	switch (icmp_hdr(skb)->type) {
31*4882a593Smuzhiyun 	case ICMP_DEST_UNREACH:
32*4882a593Smuzhiyun 		if (icmp_hdr(skb)->code != ICMP_FRAG_NEEDED)
33*4882a593Smuzhiyun 			return 0;
34*4882a593Smuzhiyun 	case ICMP_REDIRECT:
35*4882a593Smuzhiyun 		break;
36*4882a593Smuzhiyun 	default:
37*4882a593Smuzhiyun 		return 0;
38*4882a593Smuzhiyun 	}
39*4882a593Smuzhiyun 
40*4882a593Smuzhiyun 	spi = htonl(ntohs(ipch->cpi));
41*4882a593Smuzhiyun 	x = xfrm_state_lookup(net, skb->mark, (const xfrm_address_t *)&iph->daddr,
42*4882a593Smuzhiyun 			      spi, IPPROTO_COMP, AF_INET);
43*4882a593Smuzhiyun 	if (!x)
44*4882a593Smuzhiyun 		return 0;
45*4882a593Smuzhiyun 
46*4882a593Smuzhiyun 	if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH)
47*4882a593Smuzhiyun 		ipv4_update_pmtu(skb, net, info, 0, IPPROTO_COMP);
48*4882a593Smuzhiyun 	else
49*4882a593Smuzhiyun 		ipv4_redirect(skb, net, 0, IPPROTO_COMP);
50*4882a593Smuzhiyun 	xfrm_state_put(x);
51*4882a593Smuzhiyun 
52*4882a593Smuzhiyun 	return 0;
53*4882a593Smuzhiyun }
54*4882a593Smuzhiyun 
55*4882a593Smuzhiyun /* We always hold one tunnel user reference to indicate a tunnel */
ipcomp_tunnel_create(struct xfrm_state * x)56*4882a593Smuzhiyun static struct xfrm_state *ipcomp_tunnel_create(struct xfrm_state *x)
57*4882a593Smuzhiyun {
58*4882a593Smuzhiyun 	struct net *net = xs_net(x);
59*4882a593Smuzhiyun 	struct xfrm_state *t;
60*4882a593Smuzhiyun 
61*4882a593Smuzhiyun 	t = xfrm_state_alloc(net);
62*4882a593Smuzhiyun 	if (!t)
63*4882a593Smuzhiyun 		goto out;
64*4882a593Smuzhiyun 
65*4882a593Smuzhiyun 	t->id.proto = IPPROTO_IPIP;
66*4882a593Smuzhiyun 	t->id.spi = x->props.saddr.a4;
67*4882a593Smuzhiyun 	t->id.daddr.a4 = x->id.daddr.a4;
68*4882a593Smuzhiyun 	memcpy(&t->sel, &x->sel, sizeof(t->sel));
69*4882a593Smuzhiyun 	t->props.family = AF_INET;
70*4882a593Smuzhiyun 	t->props.mode = x->props.mode;
71*4882a593Smuzhiyun 	t->props.saddr.a4 = x->props.saddr.a4;
72*4882a593Smuzhiyun 	t->props.flags = x->props.flags;
73*4882a593Smuzhiyun 	t->props.extra_flags = x->props.extra_flags;
74*4882a593Smuzhiyun 	memcpy(&t->mark, &x->mark, sizeof(t->mark));
75*4882a593Smuzhiyun 	t->if_id = x->if_id;
76*4882a593Smuzhiyun 
77*4882a593Smuzhiyun 	if (xfrm_init_state(t))
78*4882a593Smuzhiyun 		goto error;
79*4882a593Smuzhiyun 
80*4882a593Smuzhiyun 	atomic_set(&t->tunnel_users, 1);
81*4882a593Smuzhiyun out:
82*4882a593Smuzhiyun 	return t;
83*4882a593Smuzhiyun 
84*4882a593Smuzhiyun error:
85*4882a593Smuzhiyun 	t->km.state = XFRM_STATE_DEAD;
86*4882a593Smuzhiyun 	xfrm_state_put(t);
87*4882a593Smuzhiyun 	t = NULL;
88*4882a593Smuzhiyun 	goto out;
89*4882a593Smuzhiyun }
90*4882a593Smuzhiyun 
91*4882a593Smuzhiyun /*
92*4882a593Smuzhiyun  * Must be protected by xfrm_cfg_mutex.  State and tunnel user references are
93*4882a593Smuzhiyun  * always incremented on success.
94*4882a593Smuzhiyun  */
ipcomp_tunnel_attach(struct xfrm_state * x)95*4882a593Smuzhiyun static int ipcomp_tunnel_attach(struct xfrm_state *x)
96*4882a593Smuzhiyun {
97*4882a593Smuzhiyun 	struct net *net = xs_net(x);
98*4882a593Smuzhiyun 	int err = 0;
99*4882a593Smuzhiyun 	struct xfrm_state *t;
100*4882a593Smuzhiyun 	u32 mark = x->mark.v & x->mark.m;
101*4882a593Smuzhiyun 
102*4882a593Smuzhiyun 	t = xfrm_state_lookup(net, mark, (xfrm_address_t *)&x->id.daddr.a4,
103*4882a593Smuzhiyun 			      x->props.saddr.a4, IPPROTO_IPIP, AF_INET);
104*4882a593Smuzhiyun 	if (!t) {
105*4882a593Smuzhiyun 		t = ipcomp_tunnel_create(x);
106*4882a593Smuzhiyun 		if (!t) {
107*4882a593Smuzhiyun 			err = -EINVAL;
108*4882a593Smuzhiyun 			goto out;
109*4882a593Smuzhiyun 		}
110*4882a593Smuzhiyun 		xfrm_state_insert(t);
111*4882a593Smuzhiyun 		xfrm_state_hold(t);
112*4882a593Smuzhiyun 	}
113*4882a593Smuzhiyun 	x->tunnel = t;
114*4882a593Smuzhiyun 	atomic_inc(&t->tunnel_users);
115*4882a593Smuzhiyun out:
116*4882a593Smuzhiyun 	return err;
117*4882a593Smuzhiyun }
118*4882a593Smuzhiyun 
ipcomp4_init_state(struct xfrm_state * x)119*4882a593Smuzhiyun static int ipcomp4_init_state(struct xfrm_state *x)
120*4882a593Smuzhiyun {
121*4882a593Smuzhiyun 	int err = -EINVAL;
122*4882a593Smuzhiyun 
123*4882a593Smuzhiyun 	x->props.header_len = 0;
124*4882a593Smuzhiyun 	switch (x->props.mode) {
125*4882a593Smuzhiyun 	case XFRM_MODE_TRANSPORT:
126*4882a593Smuzhiyun 		break;
127*4882a593Smuzhiyun 	case XFRM_MODE_TUNNEL:
128*4882a593Smuzhiyun 		x->props.header_len += sizeof(struct iphdr);
129*4882a593Smuzhiyun 		break;
130*4882a593Smuzhiyun 	default:
131*4882a593Smuzhiyun 		goto out;
132*4882a593Smuzhiyun 	}
133*4882a593Smuzhiyun 
134*4882a593Smuzhiyun 	err = ipcomp_init_state(x);
135*4882a593Smuzhiyun 	if (err)
136*4882a593Smuzhiyun 		goto out;
137*4882a593Smuzhiyun 
138*4882a593Smuzhiyun 	if (x->props.mode == XFRM_MODE_TUNNEL) {
139*4882a593Smuzhiyun 		err = ipcomp_tunnel_attach(x);
140*4882a593Smuzhiyun 		if (err)
141*4882a593Smuzhiyun 			goto out;
142*4882a593Smuzhiyun 	}
143*4882a593Smuzhiyun 
144*4882a593Smuzhiyun 	err = 0;
145*4882a593Smuzhiyun out:
146*4882a593Smuzhiyun 	return err;
147*4882a593Smuzhiyun }
148*4882a593Smuzhiyun 
ipcomp4_rcv_cb(struct sk_buff * skb,int err)149*4882a593Smuzhiyun static int ipcomp4_rcv_cb(struct sk_buff *skb, int err)
150*4882a593Smuzhiyun {
151*4882a593Smuzhiyun 	return 0;
152*4882a593Smuzhiyun }
153*4882a593Smuzhiyun 
154*4882a593Smuzhiyun static const struct xfrm_type ipcomp_type = {
155*4882a593Smuzhiyun 	.description	= "IPCOMP4",
156*4882a593Smuzhiyun 	.owner		= THIS_MODULE,
157*4882a593Smuzhiyun 	.proto	     	= IPPROTO_COMP,
158*4882a593Smuzhiyun 	.init_state	= ipcomp4_init_state,
159*4882a593Smuzhiyun 	.destructor	= ipcomp_destroy,
160*4882a593Smuzhiyun 	.input		= ipcomp_input,
161*4882a593Smuzhiyun 	.output		= ipcomp_output
162*4882a593Smuzhiyun };
163*4882a593Smuzhiyun 
164*4882a593Smuzhiyun static struct xfrm4_protocol ipcomp4_protocol = {
165*4882a593Smuzhiyun 	.handler	=	xfrm4_rcv,
166*4882a593Smuzhiyun 	.input_handler	=	xfrm_input,
167*4882a593Smuzhiyun 	.cb_handler	=	ipcomp4_rcv_cb,
168*4882a593Smuzhiyun 	.err_handler	=	ipcomp4_err,
169*4882a593Smuzhiyun 	.priority	=	0,
170*4882a593Smuzhiyun };
171*4882a593Smuzhiyun 
ipcomp4_init(void)172*4882a593Smuzhiyun static int __init ipcomp4_init(void)
173*4882a593Smuzhiyun {
174*4882a593Smuzhiyun 	if (xfrm_register_type(&ipcomp_type, AF_INET) < 0) {
175*4882a593Smuzhiyun 		pr_info("%s: can't add xfrm type\n", __func__);
176*4882a593Smuzhiyun 		return -EAGAIN;
177*4882a593Smuzhiyun 	}
178*4882a593Smuzhiyun 	if (xfrm4_protocol_register(&ipcomp4_protocol, IPPROTO_COMP) < 0) {
179*4882a593Smuzhiyun 		pr_info("%s: can't add protocol\n", __func__);
180*4882a593Smuzhiyun 		xfrm_unregister_type(&ipcomp_type, AF_INET);
181*4882a593Smuzhiyun 		return -EAGAIN;
182*4882a593Smuzhiyun 	}
183*4882a593Smuzhiyun 	return 0;
184*4882a593Smuzhiyun }
185*4882a593Smuzhiyun 
ipcomp4_fini(void)186*4882a593Smuzhiyun static void __exit ipcomp4_fini(void)
187*4882a593Smuzhiyun {
188*4882a593Smuzhiyun 	if (xfrm4_protocol_deregister(&ipcomp4_protocol, IPPROTO_COMP) < 0)
189*4882a593Smuzhiyun 		pr_info("%s: can't remove protocol\n", __func__);
190*4882a593Smuzhiyun 	xfrm_unregister_type(&ipcomp_type, AF_INET);
191*4882a593Smuzhiyun }
192*4882a593Smuzhiyun 
193*4882a593Smuzhiyun module_init(ipcomp4_init);
194*4882a593Smuzhiyun module_exit(ipcomp4_fini);
195*4882a593Smuzhiyun 
196*4882a593Smuzhiyun MODULE_LICENSE("GPL");
197*4882a593Smuzhiyun MODULE_DESCRIPTION("IP Payload Compression Protocol (IPComp/IPv4) - RFC3173");
198*4882a593Smuzhiyun MODULE_AUTHOR("James Morris <jmorris@intercode.com.au>");
199*4882a593Smuzhiyun 
200*4882a593Smuzhiyun MODULE_ALIAS_XFRM_TYPE(AF_INET, XFRM_PROTO_COMP);
201