[mirror_ubuntu-bionic-kernel.git] / net / ipv6 / xfrm6_state.c

/*
 * xfrm6_state.c: based on xfrm4_state.c
 *
 * Authors:
 *	Mitsuru KANDA @USAGI
 * 	Kazunori MIYAZAWA @USAGI
 * 	Kunihiro Ishiguro <kunihiro@ipinfusion.com>
 * 		IPv6 support
 * 	YOSHIFUJI Hideaki @USAGI
 * 		Split up af-specific portion
 *
 */

#include <net/xfrm.h>
#include <linux/pfkeyv2.h>
#include <linux/ipsec.h>
#include <net/ipv6.h>
#include <net/addrconf.h>

static struct xfrm_state_afinfo xfrm6_state_afinfo;

static void
__xfrm6_init_tempsel(struct xfrm_state *x, struct flowi *fl,
		     struct xfrm_tmpl *tmpl,
		     xfrm_address_t *daddr, xfrm_address_t *saddr)
{
	/* Initialize temporary selector matching only
	 * to current session. */
	ipv6_addr_copy((struct in6_addr *)&x->sel.daddr, &fl->fl6_dst);
	ipv6_addr_copy((struct in6_addr *)&x->sel.saddr, &fl->fl6_src);
	x->sel.dport = xfrm_flowi_dport(fl);
	x->sel.dport_mask = htons(0xffff);
	x->sel.sport = xfrm_flowi_sport(fl);
	x->sel.sport_mask = htons(0xffff);
	x->sel.prefixlen_d = 128;
	x->sel.prefixlen_s = 128;
	x->sel.proto = fl->proto;
	x->sel.ifindex = fl->oif;
	x->id = tmpl->id;
	if (ipv6_addr_any((struct in6_addr*)&x->id.daddr))
		memcpy(&x->id.daddr, daddr, sizeof(x->sel.daddr));
	memcpy(&x->props.saddr, &tmpl->saddr, sizeof(x->props.saddr));
	if (ipv6_addr_any((struct in6_addr*)&x->props.saddr))
		memcpy(&x->props.saddr, saddr, sizeof(x->props.saddr));
	x->props.mode = tmpl->mode;
	x->props.reqid = tmpl->reqid;
	x->props.family = AF_INET6;
}

static int
__xfrm6_state_sort(struct xfrm_state **dst, struct xfrm_state **src, int n)
{
	int i;
	int j = 0;

	/* Rule 1: select IPsec transport except AH */
	for (i = 0; i < n; i++) {
		if (src[i]->props.mode == XFRM_MODE_TRANSPORT &&
		    src[i]->id.proto != IPPROTO_AH) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (j == n)
		goto end;

	/* Rule 2: select MIPv6 RO or inbound trigger */
#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
	for (i = 0; i < n; i++) {
		if (src[i] &&
		    (src[i]->props.mode == XFRM_MODE_ROUTEOPTIMIZATION ||
		     src[i]->props.mode == XFRM_MODE_IN_TRIGGER)) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (j == n)
		goto end;
#endif

	/* Rule 3: select IPsec transport AH */
	for (i = 0; i < n; i++) {
		if (src[i] &&
		    src[i]->props.mode == XFRM_MODE_TRANSPORT &&
		    src[i]->id.proto == IPPROTO_AH) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (j == n)
		goto end;

	/* Rule 4: select IPsec tunnel */
	for (i = 0; i < n; i++) {
		if (src[i] &&
		    (src[i]->props.mode == XFRM_MODE_TUNNEL ||
		     src[i]->props.mode == XFRM_MODE_BEET)) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (likely(j == n))
		goto end;

	/* Final rule */
	for (i = 0; i < n; i++) {
		if (src[i]) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}

 end:
	return 0;
}

static int
__xfrm6_tmpl_sort(struct xfrm_tmpl **dst, struct xfrm_tmpl **src, int n)
{
	int i;
	int j = 0;

	/* Rule 1: select IPsec transport */
	for (i = 0; i < n; i++) {
		if (src[i]->mode == XFRM_MODE_TRANSPORT) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (j == n)
		goto end;

	/* Rule 2: select MIPv6 RO or inbound trigger */
#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
	for (i = 0; i < n; i++) {
		if (src[i] &&
		    (src[i]->mode == XFRM_MODE_ROUTEOPTIMIZATION ||
		     src[i]->mode == XFRM_MODE_IN_TRIGGER)) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (j == n)
		goto end;
#endif

	/* Rule 3: select IPsec tunnel */
	for (i = 0; i < n; i++) {
		if (src[i] &&
		    (src[i]->mode == XFRM_MODE_TUNNEL ||
		     src[i]->mode == XFRM_MODE_BEET)) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}
	if (likely(j == n))
		goto end;

	/* Final rule */
	for (i = 0; i < n; i++) {
		if (src[i]) {
			dst[j++] = src[i];
			src[i] = NULL;
		}
	}

 end:
	return 0;
}

static struct xfrm_state_afinfo xfrm6_state_afinfo = {
	.family			= AF_INET6,
	.owner			= THIS_MODULE,
	.init_tempsel		= __xfrm6_init_tempsel,
	.tmpl_sort		= __xfrm6_tmpl_sort,
	.state_sort		= __xfrm6_state_sort,
	.output			= xfrm6_output,
};

void __init xfrm6_state_init(void)
{
	xfrm_state_register_afinfo(&xfrm6_state_afinfo);
}

void xfrm6_state_fini(void)
{
	xfrm_state_unregister_afinfo(&xfrm6_state_afinfo);
}
Commit	Line	Data
1da177e4 LT	1	/*
	2	* xfrm6_state.c: based on xfrm4_state.c
	3	*
	4	* Authors:
	5	* Mitsuru KANDA @USAGI
	6	* Kazunori MIYAZAWA @USAGI
	7	* Kunihiro Ishiguro <kunihiro@ipinfusion.com>
	8	* IPv6 support
	9	* YOSHIFUJI Hideaki @USAGI
	10	* Split up af-specific portion
1ab1457c	11	*
1da177e4 LT	12	*/
	13
	14	#include <net/xfrm.h>
	15	#include <linux/pfkeyv2.h>
	16	#include <linux/ipsec.h>
	17	#include <net/ipv6.h>
ee51b1b6	18	#include <net/addrconf.h>
1da177e4 LT	19
	20	static struct xfrm_state_afinfo xfrm6_state_afinfo;
	21
	22	static void
	23	__xfrm6_init_tempsel(struct xfrm_state x, struct flowi fl,
	24	struct xfrm_tmpl *tmpl,
	25	xfrm_address_t daddr, xfrm_address_t saddr)
	26	{
	27	/* Initialize temporary selector matching only
	28	* to current session. */
	29	ipv6_addr_copy((struct in6_addr *)&x->sel.daddr, &fl->fl6_dst);
	30	ipv6_addr_copy((struct in6_addr *)&x->sel.saddr, &fl->fl6_src);
	31	x->sel.dport = xfrm_flowi_dport(fl);
8f83f23e	32	x->sel.dport_mask = htons(0xffff);
1da177e4	33	x->sel.sport = xfrm_flowi_sport(fl);
8f83f23e	34	x->sel.sport_mask = htons(0xffff);
1da177e4 LT	35	x->sel.prefixlen_d = 128;
	36	x->sel.prefixlen_s = 128;
	37	x->sel.proto = fl->proto;
	38	x->sel.ifindex = fl->oif;
	39	x->id = tmpl->id;
	40	if (ipv6_addr_any((struct in6_addr*)&x->id.daddr))
	41	memcpy(&x->id.daddr, daddr, sizeof(x->sel.daddr));
	42	memcpy(&x->props.saddr, &tmpl->saddr, sizeof(x->props.saddr));
	43	if (ipv6_addr_any((struct in6_addr*)&x->props.saddr))
	44	memcpy(&x->props.saddr, saddr, sizeof(x->props.saddr));
	45	x->props.mode = tmpl->mode;
	46	x->props.reqid = tmpl->reqid;
	47	x->props.family = AF_INET6;
	48	}
	49
58c949d1 MN	50	static int
	51	__xfrm6_state_sort(struct xfrm_state dst, struct xfrm_state src, int n)
	52	{
	53	int i;
	54	int j = 0;
	55
	56	/* Rule 1: select IPsec transport except AH */
	57	for (i = 0; i < n; i++) {
	58	if (src[i]->props.mode == XFRM_MODE_TRANSPORT &&
	59	src[i]->id.proto != IPPROTO_AH) {
	60	dst[j++] = src[i];
	61	src[i] = NULL;
	62	}
	63	}
	64	if (j == n)
	65	goto end;
	66
64d9fdda	67	/* Rule 2: select MIPv6 RO or inbound trigger */
59fbb3a6	68	#if defined(CONFIG_IPV6_MIP6) \|\| defined(CONFIG_IPV6_MIP6_MODULE)
64d9fdda MN	69	for (i = 0; i < n; i++) {
	70	if (src[i] &&
	71	(src[i]->props.mode == XFRM_MODE_ROUTEOPTIMIZATION \|\|
	72	src[i]->props.mode == XFRM_MODE_IN_TRIGGER)) {
	73	dst[j++] = src[i];
	74	src[i] = NULL;
	75	}
	76	}
	77	if (j == n)
	78	goto end;
	79	#endif
58c949d1 MN	80
	81	/* Rule 3: select IPsec transport AH */
	82	for (i = 0; i < n; i++) {
	83	if (src[i] &&
	84	src[i]->props.mode == XFRM_MODE_TRANSPORT &&
	85	src[i]->id.proto == IPPROTO_AH) {
	86	dst[j++] = src[i];
	87	src[i] = NULL;
	88	}
	89	}
	90	if (j == n)
	91	goto end;
	92
	93	/* Rule 4: select IPsec tunnel */
	94	for (i = 0; i < n; i++) {
	95	if (src[i] &&
1bfcb10f HX	96	(src[i]->props.mode == XFRM_MODE_TUNNEL \|\|
1bfcb10f HX	97	src[i]->props.mode == XFRM_MODE_BEET)) {
58c949d1 MN	98	dst[j++] = src[i];
	99	src[i] = NULL;
	100	}
	101	}
	102	if (likely(j == n))
	103	goto end;
	104
	105	/* Final rule */
	106	for (i = 0; i < n; i++) {
	107	if (src[i]) {
	108	dst[j++] = src[i];
	109	src[i] = NULL;
	110	}
	111	}
	112
	113	end:
	114	return 0;
	115	}
	116
	117	static int
	118	__xfrm6_tmpl_sort(struct xfrm_tmpl dst, struct xfrm_tmpl src, int n)
	119	{
	120	int i;
	121	int j = 0;
	122
	123	/* Rule 1: select IPsec transport */
	124	for (i = 0; i < n; i++) {
	125	if (src[i]->mode == XFRM_MODE_TRANSPORT) {
	126	dst[j++] = src[i];
	127	src[i] = NULL;
	128	}
	129	}
	130	if (j == n)
	131	goto end;
	132
64d9fdda	133	/* Rule 2: select MIPv6 RO or inbound trigger */
59fbb3a6	134	#if defined(CONFIG_IPV6_MIP6) \|\| defined(CONFIG_IPV6_MIP6_MODULE)
64d9fdda MN	135	for (i = 0; i < n; i++) {
	136	if (src[i] &&
	137	(src[i]->mode == XFRM_MODE_ROUTEOPTIMIZATION \|\|
	138	src[i]->mode == XFRM_MODE_IN_TRIGGER)) {
	139	dst[j++] = src[i];
	140	src[i] = NULL;
	141	}
	142	}
	143	if (j == n)
	144	goto end;
	145	#endif
58c949d1 MN	146
	147	/* Rule 3: select IPsec tunnel */
	148	for (i = 0; i < n; i++) {
	149	if (src[i] &&
1bfcb10f HX	150	(src[i]->mode == XFRM_MODE_TUNNEL \|\|
1bfcb10f HX	151	src[i]->mode == XFRM_MODE_BEET)) {
58c949d1 MN	152	dst[j++] = src[i];
	153	src[i] = NULL;
	154	}
	155	}
	156	if (likely(j == n))
	157	goto end;
	158
	159	/* Final rule */
	160	for (i = 0; i < n; i++) {
	161	if (src[i]) {
	162	dst[j++] = src[i];
	163	src[i] = NULL;
	164	}
	165	}
	166
	167	end:
	168	return 0;
	169	}
	170
1da177e4 LT	171	static struct xfrm_state_afinfo xfrm6_state_afinfo = {
1da177e4 LT	172	.family = AF_INET6,
17c2a42a	173	.owner = THIS_MODULE,
1da177e4	174	.init_tempsel = __xfrm6_init_tempsel,
58c949d1 MN	175	.tmpl_sort = __xfrm6_tmpl_sort,
58c949d1 MN	176	.state_sort = __xfrm6_state_sort,
cdca7265	177	.output = xfrm6_output,
1da177e4 LT	178	};
	179
	180	void __init xfrm6_state_init(void)
	181	{
	182	xfrm_state_register_afinfo(&xfrm6_state_afinfo);
	183	}
	184
	185	void xfrm6_state_fini(void)
	186	{
	187	xfrm_state_unregister_afinfo(&xfrm6_state_afinfo);
	188	}
	189