[mirror_ubuntu-eoan-kernel.git] / net / ipv6 / xfrm6_state.c

/*
 * xfrm6_state.c: based on xfrm4_state.c
 *
 * Authors:
 *	Mitsuru KANDA @USAGI
 * 	Kazunori MIYAZAWA @USAGI
 * 	Kunihiro Ishiguro <kunihiro@ipinfusion.com>
 * 		IPv6 support
 * 	YOSHIFUJI Hideaki @USAGI
 * 		Split up af-specific portion
 *
 */

#include <net/xfrm.h>
#include <linux/pfkeyv2.h>
#include <linux/ipsec.h>
#include <linux/netfilter_ipv6.h>
#include <net/dsfield.h>
#include <net/ipv6.h>
#include <net/addrconf.h>

static struct xfrm_state_afinfo xfrm6_state_afinfo;

static void
__xfrm6_init_tempsel(struct xfrm_state *x, struct flowi *fl,
		     struct xfrm_tmpl *tmpl,
		     xfrm_address_t *daddr, xfrm_address_t *saddr)
{
	/* Initialize temporary selector matching only
	 * to current session. */
	ipv6_addr_copy((struct in6_addr *)&x->sel.daddr, &fl->fl6_dst);
	ipv6_addr_copy((struct in6_addr *)&x->sel.saddr, &fl->fl6_src);
	x->sel.dport = xfrm_flowi_dport(fl);
	x->sel.dport_mask = htons(0xffff);
	x->sel.sport = xfrm_flowi_sport(fl);
	x->sel.sport_mask = htons(0xffff);
	x->sel.family = AF_INET6;
	x->sel.prefixlen_d = 128;
	x->sel.prefixlen_s = 128;
	x->sel.proto = fl->proto;
	x->sel.ifindex = fl->oif;
	x->id = tmpl->id;
	if (ipv6_addr_any((struct in6_addr*)&x->id.daddr))
		memcpy(&x->id.daddr, daddr, sizeof(x->sel.daddr));
	memcpy(&x->props.saddr, &tmpl->saddr, sizeof(x->props.saddr));
	if (ipv6_addr_any((struct in6_addr*)&x->props.saddr))
		memcpy(&x->props.saddr, saddr, sizeof(x->props.saddr));
	x->props.mode = tmpl->mode;
	x->props.reqid = tmpl->reqid;
	x->props.family = AF_INET6;
}

/* distribution counting sort function for xfrm_state and xfrm_tmpl */
static int
__xfrm6_sort(void **dst, void **src, int n, int (*cmp)(void *p), int maxclass)
{
	int i;
	int class[XFRM_MAX_DEPTH];
	int count[maxclass];

	memset(count, 0, sizeof(count));

	for (i = 0; i < n; i++) {
		int c;
		class[i] = c = cmp(src[i]);
		count[c]++;
	}

	for (i = 2; i < maxclass; i++)
		count[i] += count[i - 1];

	for (i = 0; i < n; i++) {
		dst[count[class[i] - 1]++] = src[i];
		src[i] = 0;
	}

	return 0;
}

/*
 * Rule for xfrm_state:
 *
 * rule 1: select IPsec transport except AH
 * rule 2: select MIPv6 RO or inbound trigger
 * rule 3: select IPsec transport AH
 * rule 4: select IPsec tunnel
 * rule 5: others
 */
static int __xfrm6_state_sort_cmp(void *p)
{
	struct xfrm_state *v = p;

	switch (v->props.mode) {
	case XFRM_MODE_TRANSPORT:
		if (v->id.proto != IPPROTO_AH)
			return 1;
		else
			return 3;
#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
	case XFRM_MODE_ROUTEOPTIMIZATION:
	case XFRM_MODE_IN_TRIGGER:
		return 2;
#endif
	case XFRM_MODE_TUNNEL:
	case XFRM_MODE_BEET:
		return 4;
	}
	return 5;
}

static int
__xfrm6_state_sort(struct xfrm_state **dst, struct xfrm_state **src, int n)
{
	return __xfrm6_sort((void **)dst, (void **)src, n,
			    __xfrm6_state_sort_cmp, 6);
}

/*
 * Rule for xfrm_tmpl:
 *
 * rule 1: select IPsec transport
 * rule 2: select MIPv6 RO or inbound trigger
 * rule 3: select IPsec tunnel
 * rule 4: others
 */
static int __xfrm6_tmpl_sort_cmp(void *p)
{
	struct xfrm_tmpl *v = p;
	switch (v->mode) {
	case XFRM_MODE_TRANSPORT:
		return 1;
#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
	case XFRM_MODE_ROUTEOPTIMIZATION:
	case XFRM_MODE_IN_TRIGGER:
		return 2;
#endif
	case XFRM_MODE_TUNNEL:
	case XFRM_MODE_BEET:
		return 3;
	}
	return 4;
}

static int
__xfrm6_tmpl_sort(struct xfrm_tmpl **dst, struct xfrm_tmpl **src, int n)
{
	return __xfrm6_sort((void **)dst, (void **)src, n,
			    __xfrm6_tmpl_sort_cmp, 5);
}

int xfrm6_extract_header(struct sk_buff *skb)
{
	struct ipv6hdr *iph = ipv6_hdr(skb);

	XFRM_MODE_SKB_CB(skb)->ihl = sizeof(*iph);
	XFRM_MODE_SKB_CB(skb)->id = 0;
	XFRM_MODE_SKB_CB(skb)->frag_off = htons(IP_DF);
	XFRM_MODE_SKB_CB(skb)->tos = ipv6_get_dsfield(iph);
	XFRM_MODE_SKB_CB(skb)->ttl = iph->hop_limit;
	XFRM_MODE_SKB_CB(skb)->optlen = 0;
	memcpy(XFRM_MODE_SKB_CB(skb)->flow_lbl, iph->flow_lbl,
	       sizeof(XFRM_MODE_SKB_CB(skb)->flow_lbl));

	return 0;
}

static struct xfrm_state_afinfo xfrm6_state_afinfo = {
	.family			= AF_INET6,
	.proto			= IPPROTO_IPV6,
	.eth_proto		= htons(ETH_P_IPV6),
	.owner			= THIS_MODULE,
	.init_tempsel		= __xfrm6_init_tempsel,
	.tmpl_sort		= __xfrm6_tmpl_sort,
	.state_sort		= __xfrm6_state_sort,
	.output			= xfrm6_output,
	.extract_input		= xfrm6_extract_input,
	.extract_output		= xfrm6_extract_output,
	.transport_finish	= xfrm6_transport_finish,
};

int __init xfrm6_state_init(void)
{
	return xfrm_state_register_afinfo(&xfrm6_state_afinfo);
}

void xfrm6_state_fini(void)
{
	xfrm_state_unregister_afinfo(&xfrm6_state_afinfo);
}
Commit	Line	Data
1da177e4 LT	1	/*
	2	* xfrm6_state.c: based on xfrm4_state.c
	3	*
	4	* Authors:
	5	* Mitsuru KANDA @USAGI
	6	* Kazunori MIYAZAWA @USAGI
	7	* Kunihiro Ishiguro <kunihiro@ipinfusion.com>
	8	* IPv6 support
	9	* YOSHIFUJI Hideaki @USAGI
	10	* Split up af-specific portion
1ab1457c	11	*
1da177e4 LT	12	*/
	13
	14	#include <net/xfrm.h>
	15	#include <linux/pfkeyv2.h>
	16	#include <linux/ipsec.h>
862b82c6	17	#include <linux/netfilter_ipv6.h>
36cf9acf	18	#include <net/dsfield.h>
1da177e4	19	#include <net/ipv6.h>
ee51b1b6	20	#include <net/addrconf.h>
1da177e4 LT	21
	22	static struct xfrm_state_afinfo xfrm6_state_afinfo;
	23
	24	static void
	25	__xfrm6_init_tempsel(struct xfrm_state x, struct flowi fl,
	26	struct xfrm_tmpl *tmpl,
	27	xfrm_address_t daddr, xfrm_address_t saddr)
	28	{
	29	/* Initialize temporary selector matching only
	30	* to current session. */
	31	ipv6_addr_copy((struct in6_addr *)&x->sel.daddr, &fl->fl6_dst);
	32	ipv6_addr_copy((struct in6_addr *)&x->sel.saddr, &fl->fl6_src);
	33	x->sel.dport = xfrm_flowi_dport(fl);
8f83f23e	34	x->sel.dport_mask = htons(0xffff);
1da177e4	35	x->sel.sport = xfrm_flowi_sport(fl);
8f83f23e	36	x->sel.sport_mask = htons(0xffff);
79654a76	37	x->sel.family = AF_INET6;
1da177e4 LT	38	x->sel.prefixlen_d = 128;
	39	x->sel.prefixlen_s = 128;
	40	x->sel.proto = fl->proto;
	41	x->sel.ifindex = fl->oif;
	42	x->id = tmpl->id;
	43	if (ipv6_addr_any((struct in6_addr*)&x->id.daddr))
	44	memcpy(&x->id.daddr, daddr, sizeof(x->sel.daddr));
	45	memcpy(&x->props.saddr, &tmpl->saddr, sizeof(x->props.saddr));
	46	if (ipv6_addr_any((struct in6_addr*)&x->props.saddr))
	47	memcpy(&x->props.saddr, saddr, sizeof(x->props.saddr));
	48	x->props.mode = tmpl->mode;
	49	x->props.reqid = tmpl->reqid;
	50	x->props.family = AF_INET6;
	51	}
	52
3b6cdf94	53	/* distribution counting sort function for xfrm_state and xfrm_tmpl */
58c949d1	54	static int
3b6cdf94	55	__xfrm6_sort(void dst, void src, int n, int (cmp)(void p), int maxclass)
58c949d1 MN	56	{
58c949d1 MN	57	int i;
3b6cdf94 YH	58	int class[XFRM_MAX_DEPTH];
3b6cdf94 YH	59	int count[maxclass];
58c949d1	60
3b6cdf94	61	memset(count, 0, sizeof(count));
58c949d1	62
64d9fdda	63	for (i = 0; i < n; i++) {
3b6cdf94 YH	64	int c;
	65	class[i] = c = cmp(src[i]);
	66	count[c]++;
64d9fdda	67	}
58c949d1	68
3b6cdf94 YH	69	for (i = 2; i < maxclass; i++)
3b6cdf94 YH	70	count[i] += count[i - 1];
58c949d1	71
58c949d1	72	for (i = 0; i < n; i++) {
3b6cdf94 YH	73	dst[count[class[i] - 1]++] = src[i];
3b6cdf94 YH	74	src[i] = 0;
58c949d1	75	}
58c949d1	76
58c949d1 MN	77	return 0;
	78	}
	79
3b6cdf94 YH	80	/*
	81	* Rule for xfrm_state:
	82	*
	83	* rule 1: select IPsec transport except AH
	84	* rule 2: select MIPv6 RO or inbound trigger
	85	* rule 3: select IPsec transport AH
	86	* rule 4: select IPsec tunnel
	87	* rule 5: others
	88	*/
	89	static int __xfrm6_state_sort_cmp(void *p)
58c949d1	90	{
3b6cdf94 YH	91	struct xfrm_state *v = p;
	92
	93	switch (v->props.mode) {
	94	case XFRM_MODE_TRANSPORT:
	95	if (v->id.proto != IPPROTO_AH)
	96	return 1;
	97	else
	98	return 3;
59fbb3a6	99	#if defined(CONFIG_IPV6_MIP6) \|\| defined(CONFIG_IPV6_MIP6_MODULE)
3b6cdf94 YH	100	case XFRM_MODE_ROUTEOPTIMIZATION:
	101	case XFRM_MODE_IN_TRIGGER:
	102	return 2;
64d9fdda	103	#endif
3b6cdf94 YH	104	case XFRM_MODE_TUNNEL:
	105	case XFRM_MODE_BEET:
	106	return 4;
58c949d1	107	}
3b6cdf94 YH	108	return 5;
3b6cdf94 YH	109	}
58c949d1	110
3b6cdf94 YH	111	static int
	112	__xfrm6_state_sort(struct xfrm_state dst, struct xfrm_state src, int n)
	113	{
	114	return __xfrm6_sort((void )dst, (void )src, n,
	115	__xfrm6_state_sort_cmp, 6);
	116	}
	117
	118	/*
	119	* Rule for xfrm_tmpl:
	120	*
	121	* rule 1: select IPsec transport
	122	* rule 2: select MIPv6 RO or inbound trigger
	123	* rule 3: select IPsec tunnel
	124	* rule 4: others
	125	*/
	126	static int __xfrm6_tmpl_sort_cmp(void *p)
	127	{
	128	struct xfrm_tmpl *v = p;
	129	switch (v->mode) {
	130	case XFRM_MODE_TRANSPORT:
	131	return 1;
	132	#if defined(CONFIG_IPV6_MIP6) \|\| defined(CONFIG_IPV6_MIP6_MODULE)
	133	case XFRM_MODE_ROUTEOPTIMIZATION:
	134	case XFRM_MODE_IN_TRIGGER:
	135	return 2;
	136	#endif
	137	case XFRM_MODE_TUNNEL:
	138	case XFRM_MODE_BEET:
	139	return 3;
58c949d1	140	}
3b6cdf94 YH	141	return 4;
3b6cdf94 YH	142	}
58c949d1	143
3b6cdf94 YH	144	static int
	145	__xfrm6_tmpl_sort(struct xfrm_tmpl dst, struct xfrm_tmpl src, int n)
	146	{
	147	return __xfrm6_sort((void )dst, (void )src, n,
	148	__xfrm6_tmpl_sort_cmp, 5);
58c949d1 MN	149	}
58c949d1 MN	150
36cf9acf HX	151	int xfrm6_extract_header(struct sk_buff *skb)
	152	{
	153	struct ipv6hdr *iph = ipv6_hdr(skb);
	154
732c8bd5	155	XFRM_MODE_SKB_CB(skb)->ihl = sizeof(*iph);
36cf9acf HX	156	XFRM_MODE_SKB_CB(skb)->id = 0;
	157	XFRM_MODE_SKB_CB(skb)->frag_off = htons(IP_DF);
	158	XFRM_MODE_SKB_CB(skb)->tos = ipv6_get_dsfield(iph);
	159	XFRM_MODE_SKB_CB(skb)->ttl = iph->hop_limit;
732c8bd5	160	XFRM_MODE_SKB_CB(skb)->optlen = 0;
36cf9acf HX	161	memcpy(XFRM_MODE_SKB_CB(skb)->flow_lbl, iph->flow_lbl,
	162	sizeof(XFRM_MODE_SKB_CB(skb)->flow_lbl));
	163
	164	return 0;
	165	}
	166
1da177e4 LT	167	static struct xfrm_state_afinfo xfrm6_state_afinfo = {
1da177e4 LT	168	.family = AF_INET6,
36cf9acf	169	.proto = IPPROTO_IPV6,
227620e2	170	.eth_proto = htons(ETH_P_IPV6),
17c2a42a	171	.owner = THIS_MODULE,
1da177e4	172	.init_tempsel = __xfrm6_init_tempsel,
58c949d1 MN	173	.tmpl_sort = __xfrm6_tmpl_sort,
58c949d1 MN	174	.state_sort = __xfrm6_state_sort,
cdca7265	175	.output = xfrm6_output,
227620e2	176	.extract_input = xfrm6_extract_input,
36cf9acf	177	.extract_output = xfrm6_extract_output,
716062fd	178	.transport_finish = xfrm6_transport_finish,
1da177e4 LT	179	};
1da177e4 LT	180
0013caba	181	int __init xfrm6_state_init(void)
1da177e4	182	{
0013caba	183	return xfrm_state_register_afinfo(&xfrm6_state_afinfo);
1da177e4 LT	184	}
	185
	186	void xfrm6_state_fini(void)
	187	{
	188	xfrm_state_unregister_afinfo(&xfrm6_state_afinfo);
	189	}
	190