]> git.proxmox.com Git - mirror_ubuntu-jammy-kernel.git/blame - net/ipv6/ping.c
net/tls: fix slab-out-of-bounds bug in decrypt_internal
[mirror_ubuntu-jammy-kernel.git] / net / ipv6 / ping.c
CommitLineData
2874c5fd 1// SPDX-License-Identifier: GPL-2.0-or-later
6d0bfe22
LC
2/*
3 * INET An implementation of the TCP/IP protocol suite for the LINUX
4 * operating system. INET is implemented using the BSD Socket
5 * interface as the means of communication with the user level.
6 *
7 * "Ping" sockets
8 *
6d0bfe22
LC
9 * Based on ipv4/ping.c code.
10 *
11 * Authors: Lorenzo Colitti (IPv6 support)
12 * Vasiliy Kulikov / Openwall (IPv4 implementation, for Linux 2.6),
13 * Pavel Kankovsky (IPv4 implementation, for Linux 2.4.32)
6d0bfe22
LC
14 */
15
16#include <net/addrconf.h>
17#include <net/ipv6.h>
18#include <net/ip6_route.h>
19#include <net/protocol.h>
20#include <net/udp.h>
21#include <net/transp_v6.h>
f4550221 22#include <linux/proc_fs.h>
6d0bfe22
LC
23#include <net/ping.h>
24
6d0bfe22 25/* Compatibility glue so we can support IPv6 when it's compiled as a module */
85fbaa75
HFS
26static int dummy_ipv6_recv_error(struct sock *sk, struct msghdr *msg, int len,
27 int *addr_len)
6d0bfe22
LC
28{
29 return -EAFNOSUPPORT;
30}
4b261c75 31static void dummy_ip6_datagram_recv_ctl(struct sock *sk, struct msghdr *msg,
a06a2d37 32 struct sk_buff *skb)
6d0bfe22 33{
6d0bfe22 34}
a06a2d37 35static int dummy_icmpv6_err_convert(u8 type, u8 code, int *err)
6d0bfe22
LC
36{
37 return -EAFNOSUPPORT;
38}
a06a2d37
WF
39static void dummy_ipv6_icmp_error(struct sock *sk, struct sk_buff *skb, int err,
40 __be16 port, u32 info, u8 *payload) {}
41static int dummy_ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
42 const struct net_device *dev, int strict)
6d0bfe22
LC
43{
44 return 0;
45}
46
6579a023 47static int ping_v6_sendmsg(struct sock *sk, struct msghdr *msg, size_t len)
6d0bfe22
LC
48{
49 struct inet_sock *inet = inet_sk(sk);
50 struct ipv6_pinfo *np = inet6_sk(sk);
51 struct icmp6hdr user_icmph;
52 int addr_type;
53 struct in6_addr *daddr;
5e457896 54 int oif = 0;
6d0bfe22
LC
55 struct flowi6 fl6;
56 int err;
6d0bfe22
LC
57 struct dst_entry *dst;
58 struct rt6_info *rt;
59 struct pingfakehdr pfh;
26879da5 60 struct ipcm6_cookie ipc6;
6d0bfe22
LC
61
62 pr_debug("ping_v6_sendmsg(sk=%p,sk->num=%u)\n", inet, inet->inet_num);
63
64 err = ping_common_sendmsg(AF_INET6, msg, len, &user_icmph,
65 sizeof(user_icmph));
66 if (err)
67 return err;
68
69 if (msg->msg_name) {
342dfc30 70 DECLARE_SOCKADDR(struct sockaddr_in6 *, u, msg->msg_name);
9145736d 71 if (msg->msg_namelen < sizeof(*u))
6d0bfe22 72 return -EINVAL;
9145736d
LC
73 if (u->sin6_family != AF_INET6) {
74 return -EAFNOSUPPORT;
6d0bfe22 75 }
6d0bfe22 76 daddr = &(u->sin6_addr);
5e457896
LC
77 if (__ipv6_addr_needs_scope_id(ipv6_addr_type(daddr)))
78 oif = u->sin6_scope_id;
6d0bfe22
LC
79 } else {
80 if (sk->sk_state != TCP_ESTABLISHED)
81 return -EDESTADDRREQ;
efe4208f 82 daddr = &sk->sk_v6_daddr;
6d0bfe22
LC
83 }
84
5e457896
LC
85 if (!oif)
86 oif = sk->sk_bound_dev_if;
87
88 if (!oif)
89 oif = np->sticky_pktinfo.ipi6_ifindex;
90
91 if (!oif && ipv6_addr_is_multicast(daddr))
92 oif = np->mcast_oif;
93 else if (!oif)
94 oif = np->ucast_oif;
6d0bfe22
LC
95
96 addr_type = ipv6_addr_type(daddr);
5e457896
LC
97 if ((__ipv6_addr_needs_scope_id(addr_type) && !oif) ||
98 (addr_type & IPV6_ADDR_MAPPED) ||
99 (oif && sk->sk_bound_dev_if && oif != sk->sk_bound_dev_if))
6d0bfe22
LC
100 return -EINVAL;
101
102 /* TODO: use ip6_datagram_send_ctl to get options from cmsg */
103
104 memset(&fl6, 0, sizeof(fl6));
105
106 fl6.flowi6_proto = IPPROTO_ICMPV6;
107 fl6.saddr = np->saddr;
108 fl6.daddr = *daddr;
5e457896 109 fl6.flowi6_oif = oif;
bf439b31 110 fl6.flowi6_mark = sk->sk_mark;
e2d118a1 111 fl6.flowi6_uid = sk->sk_uid;
6d0bfe22
LC
112 fl6.fl6_icmp_type = user_icmph.icmp6_type;
113 fl6.fl6_icmp_code = user_icmph.icmp6_code;
3df98d79 114 security_sk_classify_flow(sk, flowi6_to_flowi_common(&fl6));
6d0bfe22 115
b515430a 116 ipcm6_init_sk(&ipc6, np);
cd8700e4 117 ipc6.sockc.mark = sk->sk_mark;
38b7097b
HFS
118 fl6.flowlabel = ip6_make_flowinfo(ipc6.tclass, fl6.flowlabel);
119
96818159 120 dst = ip6_sk_dst_lookup_flow(sk, &fl6, daddr, false);
6d0bfe22
LC
121 if (IS_ERR(dst))
122 return PTR_ERR(dst);
123 rt = (struct rt6_info *) dst;
124
6d0bfe22
LC
125 if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr))
126 fl6.flowi6_oif = np->mcast_oif;
127 else if (!fl6.flowi6_oif)
128 fl6.flowi6_oif = np->ucast_oif;
129
130 pfh.icmph.type = user_icmph.icmp6_type;
131 pfh.icmph.code = user_icmph.icmp6_code;
132 pfh.icmph.checksum = 0;
133 pfh.icmph.un.echo.id = inet->inet_sport;
134 pfh.icmph.un.echo.sequence = user_icmph.icmp6_sequence;
cacdc7d2 135 pfh.msg = msg;
6d0bfe22
LC
136 pfh.wcheck = 0;
137 pfh.family = AF_INET6;
138
26879da5 139 ipc6.hlimit = ip6_sk_dst_hoplimit(np, &fl6, dst);
6d0bfe22 140
a1bdc455 141 lock_sock(sk);
6d0bfe22 142 err = ip6_append_data(sk, ping_getfrag, &pfh, len,
26879da5 143 0, &ipc6, &fl6, rt,
5fdaa88d 144 MSG_DONTWAIT);
6d0bfe22
LC
145
146 if (err) {
43a43b60
HFS
147 ICMP6_INC_STATS(sock_net(sk), rt->rt6i_idev,
148 ICMP6_MIB_OUTERRORS);
6d0bfe22
LC
149 ip6_flush_pending_frames(sk);
150 } else {
4e64b1ed
JP
151 icmpv6_push_pending_frames(sk, &fl6,
152 (struct icmp6hdr *)&pfh.icmph, len);
6d0bfe22 153 }
a1bdc455 154 release_sock(sk);
6d0bfe22 155
03c2778a
DJ
156 dst_release(dst);
157
fbfe80c8
LC
158 if (err)
159 return err;
160
161 return len;
6d0bfe22 162}
d862e546 163
6579a023
HY
164struct proto pingv6_prot = {
165 .name = "PINGv6",
166 .owner = THIS_MODULE,
167 .init = ping_init_sock,
168 .close = ping_close,
169 .connect = ip6_datagram_connect_v6_only,
286c72de 170 .disconnect = __udp_disconnect,
6579a023
HY
171 .setsockopt = ipv6_setsockopt,
172 .getsockopt = ipv6_getsockopt,
173 .sendmsg = ping_v6_sendmsg,
174 .recvmsg = ping_recvmsg,
175 .bind = ping_bind,
176 .backlog_rcv = ping_queue_rcv_skb,
177 .hash = ping_hash,
178 .unhash = ping_unhash,
179 .get_port = ping_get_port,
180 .obj_size = sizeof(struct raw6_sock),
181};
182EXPORT_SYMBOL_GPL(pingv6_prot);
183
184static struct inet_protosw pingv6_protosw = {
185 .type = SOCK_DGRAM,
186 .protocol = IPPROTO_ICMPV6,
187 .prot = &pingv6_prot,
77d4b1d3 188 .ops = &inet6_sockraw_ops,
6579a023
HY
189 .flags = INET_PROTOSW_REUSE,
190};
191
d862e546
LC
192#ifdef CONFIG_PROC_FS
193static void *ping_v6_seq_start(struct seq_file *seq, loff_t *pos)
194{
195 return ping_seq_start(seq, pos, AF_INET6);
196}
197
a06a2d37 198static int ping_v6_seq_show(struct seq_file *seq, void *v)
d862e546
LC
199{
200 if (v == SEQ_START_TOKEN) {
201 seq_puts(seq, IPV6_SEQ_DGRAM_HEADER);
202 } else {
203 int bucket = ((struct ping_iter_state *) seq->private)->bucket;
204 struct inet_sock *inet = inet_sk(v);
205 __u16 srcp = ntohs(inet->inet_sport);
206 __u16 destp = ntohs(inet->inet_dport);
207 ip6_dgram_sock_seq_show(seq, v, srcp, destp, bucket);
208 }
209 return 0;
210}
211
f4550221
CH
212static const struct seq_operations ping_v6_seq_ops = {
213 .start = ping_v6_seq_start,
214 .show = ping_v6_seq_show,
215 .next = ping_seq_next,
216 .stop = ping_seq_stop,
217};
218
d862e546
LC
219static int __net_init ping_v6_proc_init_net(struct net *net)
220{
c3506372
CH
221 if (!proc_create_net("icmp6", 0444, net->proc_net, &ping_v6_seq_ops,
222 sizeof(struct ping_iter_state)))
f4550221
CH
223 return -ENOMEM;
224 return 0;
d862e546
LC
225}
226
d23dbc47 227static void __net_exit ping_v6_proc_exit_net(struct net *net)
d862e546 228{
f4550221 229 remove_proc_entry("icmp6", net->proc_net);
d862e546
LC
230}
231
232static struct pernet_operations ping_v6_net_ops = {
233 .init = ping_v6_proc_init_net,
234 .exit = ping_v6_proc_exit_net,
235};
236#endif
237
238int __init pingv6_init(void)
239{
240#ifdef CONFIG_PROC_FS
241 int ret = register_pernet_subsys(&ping_v6_net_ops);
242 if (ret)
243 return ret;
244#endif
245 pingv6_ops.ipv6_recv_error = ipv6_recv_error;
4b261c75
HFS
246 pingv6_ops.ip6_datagram_recv_common_ctl = ip6_datagram_recv_common_ctl;
247 pingv6_ops.ip6_datagram_recv_specific_ctl =
248 ip6_datagram_recv_specific_ctl;
d862e546
LC
249 pingv6_ops.icmpv6_err_convert = icmpv6_err_convert;
250 pingv6_ops.ipv6_icmp_error = ipv6_icmp_error;
251 pingv6_ops.ipv6_chk_addr = ipv6_chk_addr;
252 return inet6_register_protosw(&pingv6_protosw);
253}
254
255/* This never gets called because it's not possible to unload the ipv6 module,
256 * but just in case.
257 */
258void pingv6_exit(void)
259{
260 pingv6_ops.ipv6_recv_error = dummy_ipv6_recv_error;
4b261c75
HFS
261 pingv6_ops.ip6_datagram_recv_common_ctl = dummy_ip6_datagram_recv_ctl;
262 pingv6_ops.ip6_datagram_recv_specific_ctl = dummy_ip6_datagram_recv_ctl;
d862e546
LC
263 pingv6_ops.icmpv6_err_convert = dummy_icmpv6_err_convert;
264 pingv6_ops.ipv6_icmp_error = dummy_ipv6_icmp_error;
265 pingv6_ops.ipv6_chk_addr = dummy_ipv6_chk_addr;
266#ifdef CONFIG_PROC_FS
267 unregister_pernet_subsys(&ping_v6_net_ops);
268#endif
269 inet6_unregister_protosw(&pingv6_protosw);
270}