]> git.proxmox.com Git - mirror_ubuntu-zesty-kernel.git/blame - net/sctp/socket.c
sctp: fix checkpatch errors with open brace '{' and trailing statements
[mirror_ubuntu-zesty-kernel.git] / net / sctp / socket.c
CommitLineData
60c778b2 1/* SCTP kernel implementation
1da177e4
LT
2 * (C) Copyright IBM Corp. 2001, 2004
3 * Copyright (c) 1999-2000 Cisco, Inc.
4 * Copyright (c) 1999-2001 Motorola, Inc.
5 * Copyright (c) 2001-2003 Intel Corp.
6 * Copyright (c) 2001-2002 Nokia, Inc.
7 * Copyright (c) 2001 La Monte H.P. Yarroll
8 *
60c778b2 9 * This file is part of the SCTP kernel implementation
1da177e4
LT
10 *
11 * These functions interface with the sockets layer to implement the
12 * SCTP Extensions for the Sockets API.
13 *
14 * Note that the descriptions from the specification are USER level
15 * functions--this file is the functions which populate the struct proto
16 * for SCTP which is the BOTTOM of the sockets interface.
17 *
60c778b2 18 * This SCTP implementation is free software;
1da177e4
LT
19 * you can redistribute it and/or modify it under the terms of
20 * the GNU General Public License as published by
21 * the Free Software Foundation; either version 2, or (at your option)
22 * any later version.
23 *
60c778b2 24 * This SCTP implementation is distributed in the hope that it
1da177e4
LT
25 * will be useful, but WITHOUT ANY WARRANTY; without even the implied
26 * ************************
27 * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
28 * See the GNU General Public License for more details.
29 *
30 * You should have received a copy of the GNU General Public License
4b2f13a2
JK
31 * along with GNU CC; see the file COPYING. If not, see
32 * <http://www.gnu.org/licenses/>.
1da177e4
LT
33 *
34 * Please send any bug reports or fixes you make to the
35 * email address(es):
91705c61 36 * lksctp developers <linux-sctp@vger.kernel.org>
1da177e4 37 *
1da177e4
LT
38 * Written or modified by:
39 * La Monte H.P. Yarroll <piggy@acm.org>
40 * Narasimha Budihal <narsi@refcode.org>
41 * Karl Knutson <karl@athena.chicago.il.us>
42 * Jon Grimm <jgrimm@us.ibm.com>
43 * Xingang Guo <xingang.guo@intel.com>
44 * Daisy Chang <daisyc@us.ibm.com>
45 * Sridhar Samudrala <samudrala@us.ibm.com>
46 * Inaky Perez-Gonzalez <inaky.gonzalez@intel.com>
47 * Ardelle Fan <ardelle.fan@intel.com>
48 * Ryan Layer <rmlayer@us.ibm.com>
49 * Anup Pemmaiah <pemmaiah@cc.usu.edu>
50 * Kevin Gao <kevin.gao@intel.com>
1da177e4
LT
51 */
52
145ce502
JP
53#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
54
1da177e4
LT
55#include <linux/types.h>
56#include <linux/kernel.h>
57#include <linux/wait.h>
58#include <linux/time.h>
59#include <linux/ip.h>
4fc268d2 60#include <linux/capability.h>
1da177e4
LT
61#include <linux/fcntl.h>
62#include <linux/poll.h>
63#include <linux/init.h>
64#include <linux/crypto.h>
5a0e3ad6 65#include <linux/slab.h>
56b31d1c 66#include <linux/file.h>
1da177e4
LT
67
68#include <net/ip.h>
69#include <net/icmp.h>
70#include <net/route.h>
71#include <net/ipv6.h>
72#include <net/inet_common.h>
73
74#include <linux/socket.h> /* for sa_family_t */
bc3b2d7f 75#include <linux/export.h>
1da177e4
LT
76#include <net/sock.h>
77#include <net/sctp/sctp.h>
78#include <net/sctp/sm.h>
79
1da177e4
LT
80/* Forward declarations for internal helper functions. */
81static int sctp_writeable(struct sock *sk);
82static void sctp_wfree(struct sk_buff *skb);
83static int sctp_wait_for_sndbuf(struct sctp_association *, long *timeo_p,
84 size_t msg_len);
26ac8e5f 85static int sctp_wait_for_packet(struct sock *sk, int *err, long *timeo_p);
1da177e4
LT
86static int sctp_wait_for_connect(struct sctp_association *, long *timeo_p);
87static int sctp_wait_for_accept(struct sock *sk, long timeo);
88static void sctp_wait_for_close(struct sock *sk, long timeo);
0a2fbac1 89static void sctp_destruct_sock(struct sock *sk);
1da177e4
LT
90static struct sctp_af *sctp_sockaddr_af(struct sctp_sock *opt,
91 union sctp_addr *addr, int len);
92static int sctp_bindx_add(struct sock *, struct sockaddr *, int);
93static int sctp_bindx_rem(struct sock *, struct sockaddr *, int);
94static int sctp_send_asconf_add_ip(struct sock *, struct sockaddr *, int);
95static int sctp_send_asconf_del_ip(struct sock *, struct sockaddr *, int);
96static int sctp_send_asconf(struct sctp_association *asoc,
97 struct sctp_chunk *chunk);
98static int sctp_do_bind(struct sock *, union sctp_addr *, int);
99static int sctp_autobind(struct sock *sk);
100static void sctp_sock_migrate(struct sock *, struct sock *,
101 struct sctp_association *, sctp_socket_type_t);
1da177e4 102
4d93df0a 103extern struct kmem_cache *sctp_bucket_cachep;
8d987e5c 104extern long sysctl_sctp_mem[3];
4d93df0a
NH
105extern int sysctl_sctp_rmem[3];
106extern int sysctl_sctp_wmem[3];
107
b6fa1a4d 108static int sctp_memory_pressure;
8d987e5c 109static atomic_long_t sctp_memory_allocated;
1748376b 110struct percpu_counter sctp_sockets_allocated;
4d93df0a 111
5c52ba17 112static void sctp_enter_memory_pressure(struct sock *sk)
4d93df0a
NH
113{
114 sctp_memory_pressure = 1;
115}
116
117
1da177e4
LT
118/* Get the sndbuf space available at the time on the association. */
119static inline int sctp_wspace(struct sctp_association *asoc)
120{
4d93df0a 121 int amt;
1da177e4 122
4d93df0a
NH
123 if (asoc->ep->sndbuf_policy)
124 amt = asoc->sndbuf_used;
125 else
31e6d363 126 amt = sk_wmem_alloc_get(asoc->base.sk);
4d93df0a
NH
127
128 if (amt >= asoc->base.sk->sk_sndbuf) {
129 if (asoc->base.sk->sk_userlocks & SOCK_SNDBUF_LOCK)
130 amt = 0;
131 else {
132 amt = sk_stream_wspace(asoc->base.sk);
133 if (amt < 0)
134 amt = 0;
135 }
4eb701df 136 } else {
4d93df0a 137 amt = asoc->base.sk->sk_sndbuf - amt;
4eb701df 138 }
1da177e4
LT
139 return amt;
140}
141
142/* Increment the used sndbuf space count of the corresponding association by
143 * the size of the outgoing data chunk.
144 * Also, set the skb destructor for sndbuf accounting later.
145 *
146 * Since it is always 1-1 between chunk and skb, and also a new skb is always
147 * allocated for chunk bundling in sctp_packet_transmit(), we can use the
148 * destructor in the data chunk skb for the purpose of the sndbuf space
149 * tracking.
150 */
151static inline void sctp_set_owner_w(struct sctp_chunk *chunk)
152{
153 struct sctp_association *asoc = chunk->asoc;
154 struct sock *sk = asoc->base.sk;
155
156 /* The sndbuf space is tracked per association. */
157 sctp_association_hold(asoc);
158
4eb701df
NH
159 skb_set_owner_w(chunk->skb, sk);
160
1da177e4
LT
161 chunk->skb->destructor = sctp_wfree;
162 /* Save the chunk pointer in skb for sctp_wfree to use later. */
163 *((struct sctp_chunk **)(chunk->skb->cb)) = chunk;
164
4eb701df
NH
165 asoc->sndbuf_used += SCTP_DATA_SNDSIZE(chunk) +
166 sizeof(struct sk_buff) +
167 sizeof(struct sctp_chunk);
168
4eb701df 169 atomic_add(sizeof(struct sctp_chunk), &sk->sk_wmem_alloc);
3ab224be
HA
170 sk->sk_wmem_queued += chunk->skb->truesize;
171 sk_mem_charge(sk, chunk->skb->truesize);
1da177e4
LT
172}
173
174/* Verify that this is a valid address. */
175static inline int sctp_verify_addr(struct sock *sk, union sctp_addr *addr,
176 int len)
177{
178 struct sctp_af *af;
179
180 /* Verify basic sockaddr. */
181 af = sctp_sockaddr_af(sctp_sk(sk), addr, len);
182 if (!af)
183 return -EINVAL;
184
185 /* Is this a valid SCTP address? */
5636bef7 186 if (!af->addr_valid(addr, sctp_sk(sk), NULL))
1da177e4
LT
187 return -EINVAL;
188
189 if (!sctp_sk(sk)->pf->send_verify(sctp_sk(sk), (addr)))
190 return -EINVAL;
191
192 return 0;
193}
194
195/* Look up the association by its id. If this is not a UDP-style
196 * socket, the ID field is always ignored.
197 */
198struct sctp_association *sctp_id2assoc(struct sock *sk, sctp_assoc_t id)
199{
200 struct sctp_association *asoc = NULL;
201
202 /* If this is not a UDP-style socket, assoc id should be ignored. */
203 if (!sctp_style(sk, UDP)) {
204 /* Return NULL if the socket state is not ESTABLISHED. It
205 * could be a TCP-style listening socket or a socket which
206 * hasn't yet called connect() to establish an association.
207 */
208 if (!sctp_sstate(sk, ESTABLISHED))
209 return NULL;
210
211 /* Get the first and the only association from the list. */
212 if (!list_empty(&sctp_sk(sk)->ep->asocs))
213 asoc = list_entry(sctp_sk(sk)->ep->asocs.next,
214 struct sctp_association, asocs);
215 return asoc;
216 }
217
218 /* Otherwise this is a UDP-style socket. */
219 if (!id || (id == (sctp_assoc_t)-1))
220 return NULL;
221
222 spin_lock_bh(&sctp_assocs_id_lock);
223 asoc = (struct sctp_association *)idr_find(&sctp_assocs_id, (int)id);
224 spin_unlock_bh(&sctp_assocs_id_lock);
225
226 if (!asoc || (asoc->base.sk != sk) || asoc->base.dead)
227 return NULL;
228
229 return asoc;
230}
231
232/* Look up the transport from an address and an assoc id. If both address and
233 * id are specified, the associations matching the address and the id should be
234 * the same.
235 */
236static struct sctp_transport *sctp_addr_id2transport(struct sock *sk,
237 struct sockaddr_storage *addr,
238 sctp_assoc_t id)
239{
240 struct sctp_association *addr_asoc = NULL, *id_asoc = NULL;
241 struct sctp_transport *transport;
242 union sctp_addr *laddr = (union sctp_addr *)addr;
243
1da177e4 244 addr_asoc = sctp_endpoint_lookup_assoc(sctp_sk(sk)->ep,
cd4ff034 245 laddr,
1da177e4 246 &transport);
1da177e4
LT
247
248 if (!addr_asoc)
249 return NULL;
250
251 id_asoc = sctp_id2assoc(sk, id);
252 if (id_asoc && (id_asoc != addr_asoc))
253 return NULL;
254
255 sctp_get_pf_specific(sk->sk_family)->addr_v4map(sctp_sk(sk),
256 (union sctp_addr *)addr);
257
258 return transport;
259}
260
261/* API 3.1.2 bind() - UDP Style Syntax
262 * The syntax of bind() is,
263 *
264 * ret = bind(int sd, struct sockaddr *addr, int addrlen);
265 *
266 * sd - the socket descriptor returned by socket().
267 * addr - the address structure (struct sockaddr_in or struct
268 * sockaddr_in6 [RFC 2553]),
269 * addr_len - the size of the address structure.
270 */
dda91928 271static int sctp_bind(struct sock *sk, struct sockaddr *addr, int addr_len)
1da177e4
LT
272{
273 int retval = 0;
274
275 sctp_lock_sock(sk);
276
bb33381d
DB
277 pr_debug("%s: sk:%p, addr:%p, addr_len:%d\n", __func__, sk,
278 addr, addr_len);
1da177e4
LT
279
280 /* Disallow binding twice. */
281 if (!sctp_sk(sk)->ep->base.bind_addr.port)
3f7a87d2 282 retval = sctp_do_bind(sk, (union sctp_addr *)addr,
1da177e4
LT
283 addr_len);
284 else
285 retval = -EINVAL;
286
287 sctp_release_sock(sk);
288
289 return retval;
290}
291
292static long sctp_get_port_local(struct sock *, union sctp_addr *);
293
294/* Verify this is a valid sockaddr. */
295static struct sctp_af *sctp_sockaddr_af(struct sctp_sock *opt,
296 union sctp_addr *addr, int len)
297{
298 struct sctp_af *af;
299
300 /* Check minimum size. */
301 if (len < sizeof (struct sockaddr))
302 return NULL;
303
7dab83de
VY
304 /* V4 mapped address are really of AF_INET family */
305 if (addr->sa.sa_family == AF_INET6 &&
306 ipv6_addr_v4mapped(&addr->v6.sin6_addr)) {
307 if (!opt->pf->af_supported(AF_INET, opt))
308 return NULL;
309 } else {
310 /* Does this PF support this AF? */
311 if (!opt->pf->af_supported(addr->sa.sa_family, opt))
312 return NULL;
313 }
1da177e4
LT
314
315 /* If we get this far, af is valid. */
316 af = sctp_get_af_specific(addr->sa.sa_family);
317
318 if (len < af->sockaddr_len)
319 return NULL;
320
321 return af;
322}
323
324/* Bind a local address either to an endpoint or to an association. */
dda91928 325static int sctp_do_bind(struct sock *sk, union sctp_addr *addr, int len)
1da177e4 326{
3594698a 327 struct net *net = sock_net(sk);
1da177e4
LT
328 struct sctp_sock *sp = sctp_sk(sk);
329 struct sctp_endpoint *ep = sp->ep;
330 struct sctp_bind_addr *bp = &ep->base.bind_addr;
331 struct sctp_af *af;
332 unsigned short snum;
333 int ret = 0;
334
1da177e4
LT
335 /* Common sockaddr verification. */
336 af = sctp_sockaddr_af(sp, addr, len);
3f7a87d2 337 if (!af) {
bb33381d
DB
338 pr_debug("%s: sk:%p, newaddr:%p, len:%d EINVAL\n",
339 __func__, sk, addr, len);
1da177e4 340 return -EINVAL;
3f7a87d2
FF
341 }
342
343 snum = ntohs(addr->v4.sin_port);
344
bb33381d
DB
345 pr_debug("%s: sk:%p, new addr:%pISc, port:%d, new port:%d, len:%d\n",
346 __func__, sk, &addr->sa, bp->port, snum, len);
1da177e4
LT
347
348 /* PF specific bind() address verification. */
349 if (!sp->pf->bind_verify(sp, addr))
350 return -EADDRNOTAVAIL;
351
8b358056
VY
352 /* We must either be unbound, or bind to the same port.
353 * It's OK to allow 0 ports if we are already bound.
354 * We'll just inhert an already bound port in this case
355 */
356 if (bp->port) {
357 if (!snum)
358 snum = bp->port;
359 else if (snum != bp->port) {
bb33381d
DB
360 pr_debug("%s: new port %d doesn't match existing port "
361 "%d\n", __func__, snum, bp->port);
8b358056
VY
362 return -EINVAL;
363 }
1da177e4
LT
364 }
365
3594698a
EB
366 if (snum && snum < PROT_SOCK &&
367 !ns_capable(net->user_ns, CAP_NET_BIND_SERVICE))
1da177e4
LT
368 return -EACCES;
369
4e54064e
VY
370 /* See if the address matches any of the addresses we may have
371 * already bound before checking against other endpoints.
372 */
373 if (sctp_bind_addr_match(bp, addr, sp))
374 return -EINVAL;
375
1da177e4
LT
376 /* Make sure we are allowed to bind here.
377 * The function sctp_get_port_local() does duplicate address
378 * detection.
379 */
2772b495 380 addr->v4.sin_port = htons(snum);
1da177e4 381 if ((ret = sctp_get_port_local(sk, addr))) {
4e54064e 382 return -EADDRINUSE;
1da177e4
LT
383 }
384
385 /* Refresh ephemeral port. */
386 if (!bp->port)
c720c7e8 387 bp->port = inet_sk(sk)->inet_num;
1da177e4 388
559cf710
VY
389 /* Add the address to the bind address list.
390 * Use GFP_ATOMIC since BHs will be disabled.
391 */
f57d96b2 392 ret = sctp_add_bind_addr(bp, addr, SCTP_ADDR_SRC, GFP_ATOMIC);
1da177e4
LT
393
394 /* Copy back into socket for getsockname() use. */
395 if (!ret) {
c720c7e8 396 inet_sk(sk)->inet_sport = htons(inet_sk(sk)->inet_num);
1da177e4
LT
397 af->to_sk_saddr(addr, sk);
398 }
399
400 return ret;
401}
402
403 /* ADDIP Section 4.1.1 Congestion Control of ASCONF Chunks
404 *
d808ad9a 405 * R1) One and only one ASCONF Chunk MAY be in transit and unacknowledged
1da177e4 406 * at any one time. If a sender, after sending an ASCONF chunk, decides
d808ad9a 407 * it needs to transfer another ASCONF Chunk, it MUST wait until the
1da177e4 408 * ASCONF-ACK Chunk returns from the previous ASCONF Chunk before sending a
d808ad9a
YH
409 * subsequent ASCONF. Note this restriction binds each side, so at any
410 * time two ASCONF may be in-transit on any given association (one sent
1da177e4
LT
411 * from each endpoint).
412 */
413static int sctp_send_asconf(struct sctp_association *asoc,
414 struct sctp_chunk *chunk)
415{
55e26eb9 416 struct net *net = sock_net(asoc->base.sk);
1da177e4
LT
417 int retval = 0;
418
419 /* If there is an outstanding ASCONF chunk, queue it for later
420 * transmission.
d808ad9a 421 */
1da177e4 422 if (asoc->addip_last_asconf) {
79af02c2 423 list_add_tail(&chunk->list, &asoc->addip_chunk_list);
d808ad9a 424 goto out;
1da177e4
LT
425 }
426
427 /* Hold the chunk until an ASCONF_ACK is received. */
428 sctp_chunk_hold(chunk);
55e26eb9 429 retval = sctp_primitive_ASCONF(net, asoc, chunk);
1da177e4
LT
430 if (retval)
431 sctp_chunk_free(chunk);
432 else
433 asoc->addip_last_asconf = chunk;
434
435out:
436 return retval;
437}
438
439/* Add a list of addresses as bind addresses to local endpoint or
440 * association.
441 *
442 * Basically run through each address specified in the addrs/addrcnt
443 * array/length pair, determine if it is IPv6 or IPv4 and call
444 * sctp_do_bind() on it.
445 *
446 * If any of them fails, then the operation will be reversed and the
447 * ones that were added will be removed.
448 *
449 * Only sctp_setsockopt_bindx() is supposed to call this function.
450 */
04675210 451static int sctp_bindx_add(struct sock *sk, struct sockaddr *addrs, int addrcnt)
1da177e4
LT
452{
453 int cnt;
454 int retval = 0;
455 void *addr_buf;
456 struct sockaddr *sa_addr;
457 struct sctp_af *af;
458
bb33381d
DB
459 pr_debug("%s: sk:%p, addrs:%p, addrcnt:%d\n", __func__, sk,
460 addrs, addrcnt);
1da177e4
LT
461
462 addr_buf = addrs;
463 for (cnt = 0; cnt < addrcnt; cnt++) {
464 /* The list may contain either IPv4 or IPv6 address;
465 * determine the address length for walking thru the list.
466 */
ea110733 467 sa_addr = addr_buf;
1da177e4
LT
468 af = sctp_get_af_specific(sa_addr->sa_family);
469 if (!af) {
470 retval = -EINVAL;
471 goto err_bindx_add;
472 }
473
d808ad9a 474 retval = sctp_do_bind(sk, (union sctp_addr *)sa_addr,
1da177e4
LT
475 af->sockaddr_len);
476
477 addr_buf += af->sockaddr_len;
478
479err_bindx_add:
480 if (retval < 0) {
481 /* Failed. Cleanup the ones that have been added */
482 if (cnt > 0)
483 sctp_bindx_rem(sk, addrs, cnt);
484 return retval;
485 }
486 }
487
488 return retval;
489}
490
491/* Send an ASCONF chunk with Add IP address parameters to all the peers of the
492 * associations that are part of the endpoint indicating that a list of local
493 * addresses are added to the endpoint.
494 *
d808ad9a 495 * If any of the addresses is already in the bind address list of the
1da177e4
LT
496 * association, we do not send the chunk for that association. But it will not
497 * affect other associations.
498 *
499 * Only sctp_setsockopt_bindx() is supposed to call this function.
500 */
d808ad9a 501static int sctp_send_asconf_add_ip(struct sock *sk,
1da177e4
LT
502 struct sockaddr *addrs,
503 int addrcnt)
504{
e1fc3b14 505 struct net *net = sock_net(sk);
1da177e4
LT
506 struct sctp_sock *sp;
507 struct sctp_endpoint *ep;
508 struct sctp_association *asoc;
509 struct sctp_bind_addr *bp;
510 struct sctp_chunk *chunk;
511 struct sctp_sockaddr_entry *laddr;
512 union sctp_addr *addr;
dc022a98 513 union sctp_addr saveaddr;
1da177e4
LT
514 void *addr_buf;
515 struct sctp_af *af;
1da177e4
LT
516 struct list_head *p;
517 int i;
518 int retval = 0;
519
e1fc3b14 520 if (!net->sctp.addip_enable)
1da177e4
LT
521 return retval;
522
523 sp = sctp_sk(sk);
524 ep = sp->ep;
525
bb33381d
DB
526 pr_debug("%s: sk:%p, addrs:%p, addrcnt:%d\n",
527 __func__, sk, addrs, addrcnt);
1da177e4 528
9dbc15f0 529 list_for_each_entry(asoc, &ep->asocs, asocs) {
1da177e4
LT
530 if (!asoc->peer.asconf_capable)
531 continue;
532
533 if (asoc->peer.addip_disabled_mask & SCTP_PARAM_ADD_IP)
534 continue;
535
536 if (!sctp_state(asoc, ESTABLISHED))
537 continue;
538
539 /* Check if any address in the packed array of addresses is
d808ad9a
YH
540 * in the bind address list of the association. If so,
541 * do not send the asconf chunk to its peer, but continue with
1da177e4
LT
542 * other associations.
543 */
544 addr_buf = addrs;
545 for (i = 0; i < addrcnt; i++) {
ea110733 546 addr = addr_buf;
1da177e4
LT
547 af = sctp_get_af_specific(addr->v4.sin_family);
548 if (!af) {
549 retval = -EINVAL;
550 goto out;
551 }
552
553 if (sctp_assoc_lookup_laddr(asoc, addr))
554 break;
555
556 addr_buf += af->sockaddr_len;
557 }
558 if (i < addrcnt)
559 continue;
560
559cf710
VY
561 /* Use the first valid address in bind addr list of
562 * association as Address Parameter of ASCONF CHUNK.
1da177e4 563 */
1da177e4
LT
564 bp = &asoc->base.bind_addr;
565 p = bp->address_list.next;
566 laddr = list_entry(p, struct sctp_sockaddr_entry, list);
5ae955cf 567 chunk = sctp_make_asconf_update_ip(asoc, &laddr->a, addrs,
1da177e4
LT
568 addrcnt, SCTP_PARAM_ADD_IP);
569 if (!chunk) {
570 retval = -ENOMEM;
571 goto out;
572 }
573
dc022a98
SS
574 /* Add the new addresses to the bind address list with
575 * use_as_src set to 0.
1da177e4 576 */
dc022a98
SS
577 addr_buf = addrs;
578 for (i = 0; i < addrcnt; i++) {
ea110733 579 addr = addr_buf;
dc022a98
SS
580 af = sctp_get_af_specific(addr->v4.sin_family);
581 memcpy(&saveaddr, addr, af->sockaddr_len);
f57d96b2
VY
582 retval = sctp_add_bind_addr(bp, &saveaddr,
583 SCTP_ADDR_NEW, GFP_ATOMIC);
dc022a98
SS
584 addr_buf += af->sockaddr_len;
585 }
8a07eb0a
MH
586 if (asoc->src_out_of_asoc_ok) {
587 struct sctp_transport *trans;
588
589 list_for_each_entry(trans,
590 &asoc->peer.transport_addr_list, transports) {
591 /* Clear the source and route cache */
592 dst_release(trans->dst);
593 trans->cwnd = min(4*asoc->pathmtu, max_t(__u32,
594 2*asoc->pathmtu, 4380));
595 trans->ssthresh = asoc->peer.i.a_rwnd;
596 trans->rto = asoc->rto_initial;
196d6759 597 sctp_max_rto(asoc, trans);
8a07eb0a
MH
598 trans->rtt = trans->srtt = trans->rttvar = 0;
599 sctp_transport_route(trans, NULL,
600 sctp_sk(asoc->base.sk));
601 }
602 }
603 retval = sctp_send_asconf(asoc, chunk);
1da177e4
LT
604 }
605
606out:
607 return retval;
608}
609
610/* Remove a list of addresses from bind addresses list. Do not remove the
611 * last address.
612 *
613 * Basically run through each address specified in the addrs/addrcnt
614 * array/length pair, determine if it is IPv6 or IPv4 and call
615 * sctp_del_bind() on it.
616 *
617 * If any of them fails, then the operation will be reversed and the
618 * ones that were removed will be added back.
619 *
620 * At least one address has to be left; if only one address is
621 * available, the operation will return -EBUSY.
622 *
623 * Only sctp_setsockopt_bindx() is supposed to call this function.
624 */
04675210 625static int sctp_bindx_rem(struct sock *sk, struct sockaddr *addrs, int addrcnt)
1da177e4
LT
626{
627 struct sctp_sock *sp = sctp_sk(sk);
628 struct sctp_endpoint *ep = sp->ep;
629 int cnt;
630 struct sctp_bind_addr *bp = &ep->base.bind_addr;
631 int retval = 0;
1da177e4 632 void *addr_buf;
c9a08505 633 union sctp_addr *sa_addr;
1da177e4
LT
634 struct sctp_af *af;
635
bb33381d
DB
636 pr_debug("%s: sk:%p, addrs:%p, addrcnt:%d\n",
637 __func__, sk, addrs, addrcnt);
1da177e4
LT
638
639 addr_buf = addrs;
640 for (cnt = 0; cnt < addrcnt; cnt++) {
641 /* If the bind address list is empty or if there is only one
642 * bind address, there is nothing more to be removed (we need
643 * at least one address here).
644 */
645 if (list_empty(&bp->address_list) ||
646 (sctp_list_single_entry(&bp->address_list))) {
647 retval = -EBUSY;
648 goto err_bindx_rem;
649 }
650
ea110733 651 sa_addr = addr_buf;
c9a08505 652 af = sctp_get_af_specific(sa_addr->sa.sa_family);
1da177e4
LT
653 if (!af) {
654 retval = -EINVAL;
655 goto err_bindx_rem;
656 }
0304ff8a
PG
657
658 if (!af->addr_valid(sa_addr, sp, NULL)) {
659 retval = -EADDRNOTAVAIL;
660 goto err_bindx_rem;
661 }
662
ee9cbaca
VY
663 if (sa_addr->v4.sin_port &&
664 sa_addr->v4.sin_port != htons(bp->port)) {
1da177e4
LT
665 retval = -EINVAL;
666 goto err_bindx_rem;
667 }
668
ee9cbaca
VY
669 if (!sa_addr->v4.sin_port)
670 sa_addr->v4.sin_port = htons(bp->port);
671
1da177e4
LT
672 /* FIXME - There is probably a need to check if sk->sk_saddr and
673 * sk->sk_rcv_addr are currently set to one of the addresses to
674 * be removed. This is something which needs to be looked into
675 * when we are fixing the outstanding issues with multi-homing
676 * socket routing and failover schemes. Refer to comments in
677 * sctp_do_bind(). -daisy
678 */
0ed90fb0 679 retval = sctp_del_bind_addr(bp, sa_addr);
1da177e4
LT
680
681 addr_buf += af->sockaddr_len;
682err_bindx_rem:
683 if (retval < 0) {
684 /* Failed. Add the ones that has been removed back */
685 if (cnt > 0)
686 sctp_bindx_add(sk, addrs, cnt);
687 return retval;
688 }
689 }
690
691 return retval;
692}
693
694/* Send an ASCONF chunk with Delete IP address parameters to all the peers of
695 * the associations that are part of the endpoint indicating that a list of
696 * local addresses are removed from the endpoint.
697 *
d808ad9a 698 * If any of the addresses is already in the bind address list of the
1da177e4
LT
699 * association, we do not send the chunk for that association. But it will not
700 * affect other associations.
701 *
702 * Only sctp_setsockopt_bindx() is supposed to call this function.
703 */
704static int sctp_send_asconf_del_ip(struct sock *sk,
705 struct sockaddr *addrs,
706 int addrcnt)
707{
e1fc3b14 708 struct net *net = sock_net(sk);
1da177e4
LT
709 struct sctp_sock *sp;
710 struct sctp_endpoint *ep;
711 struct sctp_association *asoc;
dc022a98 712 struct sctp_transport *transport;
1da177e4
LT
713 struct sctp_bind_addr *bp;
714 struct sctp_chunk *chunk;
715 union sctp_addr *laddr;
716 void *addr_buf;
717 struct sctp_af *af;
dc022a98 718 struct sctp_sockaddr_entry *saddr;
1da177e4
LT
719 int i;
720 int retval = 0;
8a07eb0a 721 int stored = 0;
1da177e4 722
8a07eb0a 723 chunk = NULL;
e1fc3b14 724 if (!net->sctp.addip_enable)
1da177e4
LT
725 return retval;
726
727 sp = sctp_sk(sk);
728 ep = sp->ep;
729
bb33381d
DB
730 pr_debug("%s: sk:%p, addrs:%p, addrcnt:%d\n",
731 __func__, sk, addrs, addrcnt);
1da177e4 732
9dbc15f0 733 list_for_each_entry(asoc, &ep->asocs, asocs) {
1da177e4
LT
734
735 if (!asoc->peer.asconf_capable)
736 continue;
737
738 if (asoc->peer.addip_disabled_mask & SCTP_PARAM_DEL_IP)
739 continue;
740
741 if (!sctp_state(asoc, ESTABLISHED))
742 continue;
743
744 /* Check if any address in the packed array of addresses is
d808ad9a 745 * not present in the bind address list of the association.
1da177e4
LT
746 * If so, do not send the asconf chunk to its peer, but
747 * continue with other associations.
748 */
749 addr_buf = addrs;
750 for (i = 0; i < addrcnt; i++) {
ea110733 751 laddr = addr_buf;
1da177e4
LT
752 af = sctp_get_af_specific(laddr->v4.sin_family);
753 if (!af) {
754 retval = -EINVAL;
755 goto out;
756 }
757
758 if (!sctp_assoc_lookup_laddr(asoc, laddr))
759 break;
760
761 addr_buf += af->sockaddr_len;
762 }
763 if (i < addrcnt)
764 continue;
765
766 /* Find one address in the association's bind address list
767 * that is not in the packed array of addresses. This is to
768 * make sure that we do not delete all the addresses in the
769 * association.
770 */
1da177e4
LT
771 bp = &asoc->base.bind_addr;
772 laddr = sctp_find_unmatch_addr(bp, (union sctp_addr *)addrs,
773 addrcnt, sp);
8a07eb0a
MH
774 if ((laddr == NULL) && (addrcnt == 1)) {
775 if (asoc->asconf_addr_del_pending)
776 continue;
777 asoc->asconf_addr_del_pending =
778 kzalloc(sizeof(union sctp_addr), GFP_ATOMIC);
6d65e5ee
MH
779 if (asoc->asconf_addr_del_pending == NULL) {
780 retval = -ENOMEM;
781 goto out;
782 }
8a07eb0a
MH
783 asoc->asconf_addr_del_pending->sa.sa_family =
784 addrs->sa_family;
785 asoc->asconf_addr_del_pending->v4.sin_port =
786 htons(bp->port);
787 if (addrs->sa_family == AF_INET) {
788 struct sockaddr_in *sin;
789
790 sin = (struct sockaddr_in *)addrs;
791 asoc->asconf_addr_del_pending->v4.sin_addr.s_addr = sin->sin_addr.s_addr;
792 } else if (addrs->sa_family == AF_INET6) {
793 struct sockaddr_in6 *sin6;
794
795 sin6 = (struct sockaddr_in6 *)addrs;
4e3fd7a0 796 asoc->asconf_addr_del_pending->v6.sin6_addr = sin6->sin6_addr;
8a07eb0a 797 }
bb33381d
DB
798
799 pr_debug("%s: keep the last address asoc:%p %pISc at %p\n",
800 __func__, asoc, &asoc->asconf_addr_del_pending->sa,
801 asoc->asconf_addr_del_pending);
802
8a07eb0a
MH
803 asoc->src_out_of_asoc_ok = 1;
804 stored = 1;
805 goto skip_mkasconf;
806 }
1da177e4 807
88362ad8
DB
808 if (laddr == NULL)
809 return -EINVAL;
810
559cf710
VY
811 /* We do not need RCU protection throughout this loop
812 * because this is done under a socket lock from the
813 * setsockopt call.
814 */
1da177e4
LT
815 chunk = sctp_make_asconf_update_ip(asoc, laddr, addrs, addrcnt,
816 SCTP_PARAM_DEL_IP);
817 if (!chunk) {
818 retval = -ENOMEM;
819 goto out;
820 }
821
8a07eb0a 822skip_mkasconf:
dc022a98
SS
823 /* Reset use_as_src flag for the addresses in the bind address
824 * list that are to be deleted.
825 */
dc022a98
SS
826 addr_buf = addrs;
827 for (i = 0; i < addrcnt; i++) {
ea110733 828 laddr = addr_buf;
dc022a98 829 af = sctp_get_af_specific(laddr->v4.sin_family);
559cf710 830 list_for_each_entry(saddr, &bp->address_list, list) {
5f242a13 831 if (sctp_cmp_addr_exact(&saddr->a, laddr))
f57d96b2 832 saddr->state = SCTP_ADDR_DEL;
dc022a98
SS
833 }
834 addr_buf += af->sockaddr_len;
835 }
1da177e4 836
dc022a98
SS
837 /* Update the route and saddr entries for all the transports
838 * as some of the addresses in the bind address list are
839 * about to be deleted and cannot be used as source addresses.
1da177e4 840 */
9dbc15f0
RD
841 list_for_each_entry(transport, &asoc->peer.transport_addr_list,
842 transports) {
dc022a98
SS
843 dst_release(transport->dst);
844 sctp_transport_route(transport, NULL,
845 sctp_sk(asoc->base.sk));
846 }
847
8a07eb0a
MH
848 if (stored)
849 /* We don't need to transmit ASCONF */
850 continue;
dc022a98 851 retval = sctp_send_asconf(asoc, chunk);
1da177e4
LT
852 }
853out:
854 return retval;
855}
856
9f7d653b
MH
857/* set addr events to assocs in the endpoint. ep and addr_wq must be locked */
858int sctp_asconf_mgmt(struct sctp_sock *sp, struct sctp_sockaddr_entry *addrw)
859{
860 struct sock *sk = sctp_opt2sk(sp);
861 union sctp_addr *addr;
862 struct sctp_af *af;
863
864 /* It is safe to write port space in caller. */
865 addr = &addrw->a;
866 addr->v4.sin_port = htons(sp->ep->base.bind_addr.port);
867 af = sctp_get_af_specific(addr->sa.sa_family);
868 if (!af)
869 return -EINVAL;
870 if (sctp_verify_addr(sk, addr, af->sockaddr_len))
871 return -EINVAL;
872
873 if (addrw->state == SCTP_ADDR_NEW)
874 return sctp_send_asconf_add_ip(sk, (struct sockaddr *)addr, 1);
875 else
876 return sctp_send_asconf_del_ip(sk, (struct sockaddr *)addr, 1);
877}
878
1da177e4
LT
879/* Helper for tunneling sctp_bindx() requests through sctp_setsockopt()
880 *
881 * API 8.1
882 * int sctp_bindx(int sd, struct sockaddr *addrs, int addrcnt,
883 * int flags);
884 *
885 * If sd is an IPv4 socket, the addresses passed must be IPv4 addresses.
886 * If the sd is an IPv6 socket, the addresses passed can either be IPv4
887 * or IPv6 addresses.
888 *
889 * A single address may be specified as INADDR_ANY or IN6ADDR_ANY, see
890 * Section 3.1.2 for this usage.
891 *
892 * addrs is a pointer to an array of one or more socket addresses. Each
893 * address is contained in its appropriate structure (i.e. struct
894 * sockaddr_in or struct sockaddr_in6) the family of the address type
23c435f7 895 * must be used to distinguish the address length (note that this
1da177e4
LT
896 * representation is termed a "packed array" of addresses). The caller
897 * specifies the number of addresses in the array with addrcnt.
898 *
899 * On success, sctp_bindx() returns 0. On failure, sctp_bindx() returns
900 * -1, and sets errno to the appropriate error code.
901 *
902 * For SCTP, the port given in each socket address must be the same, or
903 * sctp_bindx() will fail, setting errno to EINVAL.
904 *
905 * The flags parameter is formed from the bitwise OR of zero or more of
906 * the following currently defined flags:
907 *
908 * SCTP_BINDX_ADD_ADDR
909 *
910 * SCTP_BINDX_REM_ADDR
911 *
912 * SCTP_BINDX_ADD_ADDR directs SCTP to add the given addresses to the
913 * association, and SCTP_BINDX_REM_ADDR directs SCTP to remove the given
914 * addresses from the association. The two flags are mutually exclusive;
915 * if both are given, sctp_bindx() will fail with EINVAL. A caller may
916 * not remove all addresses from an association; sctp_bindx() will
917 * reject such an attempt with EINVAL.
918 *
919 * An application can use sctp_bindx(SCTP_BINDX_ADD_ADDR) to associate
920 * additional addresses with an endpoint after calling bind(). Or use
921 * sctp_bindx(SCTP_BINDX_REM_ADDR) to remove some addresses a listening
922 * socket is associated with so that no new association accepted will be
923 * associated with those addresses. If the endpoint supports dynamic
924 * address a SCTP_BINDX_REM_ADDR or SCTP_BINDX_ADD_ADDR may cause a
925 * endpoint to send the appropriate message to the peer to change the
926 * peers address lists.
927 *
928 * Adding and removing addresses from a connected association is
929 * optional functionality. Implementations that do not support this
930 * functionality should return EOPNOTSUPP.
931 *
932 * Basically do nothing but copying the addresses from user to kernel
933 * land and invoking either sctp_bindx_add() or sctp_bindx_rem() on the sk.
3f7a87d2
FF
934 * This is used for tunneling the sctp_bindx() request through sctp_setsockopt()
935 * from userspace.
1da177e4
LT
936 *
937 * We don't use copy_from_user() for optimization: we first do the
938 * sanity checks (buffer size -fast- and access check-healthy
939 * pointer); if all of those succeed, then we can alloc the memory
940 * (expensive operation) needed to copy the data to kernel. Then we do
941 * the copying without checking the user space area
942 * (__copy_from_user()).
943 *
944 * On exit there is no need to do sockfd_put(), sys_setsockopt() does
945 * it.
946 *
947 * sk The sk of the socket
948 * addrs The pointer to the addresses in user land
949 * addrssize Size of the addrs buffer
950 * op Operation to perform (add or remove, see the flags of
951 * sctp_bindx)
952 *
953 * Returns 0 if ok, <0 errno code on error.
954 */
26ac8e5f 955static int sctp_setsockopt_bindx(struct sock *sk,
dda91928
DB
956 struct sockaddr __user *addrs,
957 int addrs_size, int op)
1da177e4
LT
958{
959 struct sockaddr *kaddrs;
960 int err;
961 int addrcnt = 0;
962 int walk_size = 0;
963 struct sockaddr *sa_addr;
964 void *addr_buf;
965 struct sctp_af *af;
966
bb33381d
DB
967 pr_debug("%s: sk:%p addrs:%p addrs_size:%d opt:%d\n",
968 __func__, sk, addrs, addrs_size, op);
1da177e4
LT
969
970 if (unlikely(addrs_size <= 0))
971 return -EINVAL;
972
973 /* Check the user passed a healthy pointer. */
974 if (unlikely(!access_ok(VERIFY_READ, addrs, addrs_size)))
975 return -EFAULT;
976
977 /* Alloc space for the address array in kernel memory. */
8b3a7005 978 kaddrs = kmalloc(addrs_size, GFP_KERNEL);
1da177e4
LT
979 if (unlikely(!kaddrs))
980 return -ENOMEM;
981
982 if (__copy_from_user(kaddrs, addrs, addrs_size)) {
983 kfree(kaddrs);
984 return -EFAULT;
985 }
986
d808ad9a 987 /* Walk through the addrs buffer and count the number of addresses. */
1da177e4
LT
988 addr_buf = kaddrs;
989 while (walk_size < addrs_size) {
d7e0d19a
DR
990 if (walk_size + sizeof(sa_family_t) > addrs_size) {
991 kfree(kaddrs);
992 return -EINVAL;
993 }
994
ea110733 995 sa_addr = addr_buf;
1da177e4
LT
996 af = sctp_get_af_specific(sa_addr->sa_family);
997
998 /* If the address family is not supported or if this address
999 * causes the address buffer to overflow return EINVAL.
d808ad9a 1000 */
1da177e4
LT
1001 if (!af || (walk_size + af->sockaddr_len) > addrs_size) {
1002 kfree(kaddrs);
1003 return -EINVAL;
1004 }
1005 addrcnt++;
1006 addr_buf += af->sockaddr_len;
1007 walk_size += af->sockaddr_len;
1008 }
1009
1010 /* Do the work. */
1011 switch (op) {
1012 case SCTP_BINDX_ADD_ADDR:
1013 err = sctp_bindx_add(sk, kaddrs, addrcnt);
1014 if (err)
1015 goto out;
1016 err = sctp_send_asconf_add_ip(sk, kaddrs, addrcnt);
1017 break;
1018
1019 case SCTP_BINDX_REM_ADDR:
1020 err = sctp_bindx_rem(sk, kaddrs, addrcnt);
1021 if (err)
1022 goto out;
1023 err = sctp_send_asconf_del_ip(sk, kaddrs, addrcnt);
1024 break;
1025
1026 default:
1027 err = -EINVAL;
1028 break;
3ff50b79 1029 }
1da177e4
LT
1030
1031out:
1032 kfree(kaddrs);
1033
1034 return err;
1035}
1036
3f7a87d2
FF
1037/* __sctp_connect(struct sock* sk, struct sockaddr *kaddrs, int addrs_size)
1038 *
1039 * Common routine for handling connect() and sctp_connectx().
1040 * Connect will come in with just a single address.
1041 */
26ac8e5f 1042static int __sctp_connect(struct sock *sk,
3f7a87d2 1043 struct sockaddr *kaddrs,
88a0a948
VY
1044 int addrs_size,
1045 sctp_assoc_t *assoc_id)
3f7a87d2 1046{
55e26eb9 1047 struct net *net = sock_net(sk);
3f7a87d2
FF
1048 struct sctp_sock *sp;
1049 struct sctp_endpoint *ep;
1050 struct sctp_association *asoc = NULL;
1051 struct sctp_association *asoc2;
1052 struct sctp_transport *transport;
1053 union sctp_addr to;
1054 struct sctp_af *af;
1055 sctp_scope_t scope;
1056 long timeo;
1057 int err = 0;
1058 int addrcnt = 0;
1059 int walk_size = 0;
e4d1feab 1060 union sctp_addr *sa_addr = NULL;
3f7a87d2 1061 void *addr_buf;
16d00fb7 1062 unsigned short port;
f50f95ca 1063 unsigned int f_flags = 0;
3f7a87d2
FF
1064
1065 sp = sctp_sk(sk);
1066 ep = sp->ep;
1067
1068 /* connect() cannot be done on a socket that is already in ESTABLISHED
1069 * state - UDP-style peeled off socket or a TCP-style socket that
1070 * is already connected.
1071 * It cannot be done even on a TCP-style listening socket.
1072 */
1073 if (sctp_sstate(sk, ESTABLISHED) ||
1074 (sctp_style(sk, TCP) && sctp_sstate(sk, LISTENING))) {
1075 err = -EISCONN;
1076 goto out_free;
1077 }
1078
1079 /* Walk through the addrs buffer and count the number of addresses. */
1080 addr_buf = kaddrs;
1081 while (walk_size < addrs_size) {
d7e0d19a
DR
1082 if (walk_size + sizeof(sa_family_t) > addrs_size) {
1083 err = -EINVAL;
1084 goto out_free;
1085 }
1086
ea110733 1087 sa_addr = addr_buf;
4bdf4b5f 1088 af = sctp_get_af_specific(sa_addr->sa.sa_family);
3f7a87d2
FF
1089
1090 /* If the address family is not supported or if this address
1091 * causes the address buffer to overflow return EINVAL.
1092 */
1093 if (!af || (walk_size + af->sockaddr_len) > addrs_size) {
1094 err = -EINVAL;
1095 goto out_free;
1096 }
1097
d7e0d19a
DR
1098 port = ntohs(sa_addr->v4.sin_port);
1099
e4d1feab
VY
1100 /* Save current address so we can work with it */
1101 memcpy(&to, sa_addr, af->sockaddr_len);
1102
1103 err = sctp_verify_addr(sk, &to, af->sockaddr_len);
3f7a87d2
FF
1104 if (err)
1105 goto out_free;
1106
16d00fb7
VY
1107 /* Make sure the destination port is correctly set
1108 * in all addresses.
1109 */
524fba6c
WY
1110 if (asoc && asoc->peer.port && asoc->peer.port != port) {
1111 err = -EINVAL;
16d00fb7 1112 goto out_free;
524fba6c 1113 }
3f7a87d2
FF
1114
1115 /* Check if there already is a matching association on the
1116 * endpoint (other than the one created here).
1117 */
e4d1feab 1118 asoc2 = sctp_endpoint_lookup_assoc(ep, &to, &transport);
3f7a87d2
FF
1119 if (asoc2 && asoc2 != asoc) {
1120 if (asoc2->state >= SCTP_STATE_ESTABLISHED)
1121 err = -EISCONN;
1122 else
1123 err = -EALREADY;
1124 goto out_free;
1125 }
1126
1127 /* If we could not find a matching association on the endpoint,
1128 * make sure that there is no peeled-off association matching
1129 * the peer address even on another socket.
1130 */
e4d1feab 1131 if (sctp_endpoint_is_peeled_off(ep, &to)) {
3f7a87d2
FF
1132 err = -EADDRNOTAVAIL;
1133 goto out_free;
1134 }
1135
1136 if (!asoc) {
1137 /* If a bind() or sctp_bindx() is not called prior to
1138 * an sctp_connectx() call, the system picks an
1139 * ephemeral port and will choose an address set
1140 * equivalent to binding with a wildcard address.
1141 */
1142 if (!ep->base.bind_addr.port) {
1143 if (sctp_autobind(sk)) {
1144 err = -EAGAIN;
1145 goto out_free;
1146 }
64a0c1c8
ISJ
1147 } else {
1148 /*
d808ad9a
YH
1149 * If an unprivileged user inherits a 1-many
1150 * style socket with open associations on a
1151 * privileged port, it MAY be permitted to
1152 * accept new associations, but it SHOULD NOT
64a0c1c8
ISJ
1153 * be permitted to open new associations.
1154 */
1155 if (ep->base.bind_addr.port < PROT_SOCK &&
3594698a 1156 !ns_capable(net->user_ns, CAP_NET_BIND_SERVICE)) {
64a0c1c8
ISJ
1157 err = -EACCES;
1158 goto out_free;
1159 }
3f7a87d2
FF
1160 }
1161
e4d1feab 1162 scope = sctp_scope(&to);
3f7a87d2
FF
1163 asoc = sctp_association_new(ep, sk, scope, GFP_KERNEL);
1164 if (!asoc) {
1165 err = -ENOMEM;
1166 goto out_free;
1167 }
409b95af
VY
1168
1169 err = sctp_assoc_set_bind_addr_from_ep(asoc, scope,
1170 GFP_KERNEL);
1171 if (err < 0) {
1172 goto out_free;
1173 }
1174
3f7a87d2
FF
1175 }
1176
1177 /* Prime the peer's transport structures. */
e4d1feab 1178 transport = sctp_assoc_add_peer(asoc, &to, GFP_KERNEL,
3f7a87d2
FF
1179 SCTP_UNKNOWN);
1180 if (!transport) {
1181 err = -ENOMEM;
1182 goto out_free;
1183 }
1184
1185 addrcnt++;
1186 addr_buf += af->sockaddr_len;
1187 walk_size += af->sockaddr_len;
1188 }
1189
c6ba68a2
VY
1190 /* In case the user of sctp_connectx() wants an association
1191 * id back, assign one now.
1192 */
1193 if (assoc_id) {
1194 err = sctp_assoc_set_id(asoc, GFP_KERNEL);
1195 if (err < 0)
1196 goto out_free;
1197 }
1198
55e26eb9 1199 err = sctp_primitive_ASSOCIATE(net, asoc, NULL);
3f7a87d2
FF
1200 if (err < 0) {
1201 goto out_free;
1202 }
1203
1204 /* Initialize sk's dport and daddr for getpeername() */
c720c7e8 1205 inet_sk(sk)->inet_dport = htons(asoc->peer.port);
e4d1feab
VY
1206 af = sctp_get_af_specific(sa_addr->sa.sa_family);
1207 af->to_sk_daddr(sa_addr, sk);
8de8c873 1208 sk->sk_err = 0;
3f7a87d2 1209
f50f95ca
VY
1210 /* in-kernel sockets don't generally have a file allocated to them
1211 * if all they do is call sock_create_kern().
1212 */
1213 if (sk->sk_socket->file)
1214 f_flags = sk->sk_socket->file->f_flags;
1215
1216 timeo = sock_sndtimeo(sk, f_flags & O_NONBLOCK);
1217
3f7a87d2 1218 err = sctp_wait_for_connect(asoc, &timeo);
c6ba68a2 1219 if ((err == 0 || err == -EINPROGRESS) && assoc_id)
88a0a948 1220 *assoc_id = asoc->assoc_id;
3f7a87d2
FF
1221
1222 /* Don't free association on exit. */
1223 asoc = NULL;
1224
1225out_free:
bb33381d
DB
1226 pr_debug("%s: took out_free path with asoc:%p kaddrs:%p err:%d\n",
1227 __func__, asoc, kaddrs, err);
3f7a87d2 1228
2eebc1e1
NH
1229 if (asoc) {
1230 /* sctp_primitive_ASSOCIATE may have added this association
1231 * To the hash table, try to unhash it, just in case, its a noop
1232 * if it wasn't hashed so we're safe
1233 */
1234 sctp_unhash_established(asoc);
3f7a87d2 1235 sctp_association_free(asoc);
2eebc1e1 1236 }
3f7a87d2
FF
1237 return err;
1238}
1239
1240/* Helper for tunneling sctp_connectx() requests through sctp_setsockopt()
1241 *
1242 * API 8.9
88a0a948
VY
1243 * int sctp_connectx(int sd, struct sockaddr *addrs, int addrcnt,
1244 * sctp_assoc_t *asoc);
3f7a87d2
FF
1245 *
1246 * If sd is an IPv4 socket, the addresses passed must be IPv4 addresses.
1247 * If the sd is an IPv6 socket, the addresses passed can either be IPv4
1248 * or IPv6 addresses.
1249 *
1250 * A single address may be specified as INADDR_ANY or IN6ADDR_ANY, see
1251 * Section 3.1.2 for this usage.
1252 *
1253 * addrs is a pointer to an array of one or more socket addresses. Each
1254 * address is contained in its appropriate structure (i.e. struct
1255 * sockaddr_in or struct sockaddr_in6) the family of the address type
1256 * must be used to distengish the address length (note that this
1257 * representation is termed a "packed array" of addresses). The caller
1258 * specifies the number of addresses in the array with addrcnt.
1259 *
88a0a948
VY
1260 * On success, sctp_connectx() returns 0. It also sets the assoc_id to
1261 * the association id of the new association. On failure, sctp_connectx()
1262 * returns -1, and sets errno to the appropriate error code. The assoc_id
1263 * is not touched by the kernel.
3f7a87d2
FF
1264 *
1265 * For SCTP, the port given in each socket address must be the same, or
1266 * sctp_connectx() will fail, setting errno to EINVAL.
1267 *
1268 * An application can use sctp_connectx to initiate an association with
1269 * an endpoint that is multi-homed. Much like sctp_bindx() this call
1270 * allows a caller to specify multiple addresses at which a peer can be
1271 * reached. The way the SCTP stack uses the list of addresses to set up
25985edc 1272 * the association is implementation dependent. This function only
3f7a87d2
FF
1273 * specifies that the stack will try to make use of all the addresses in
1274 * the list when needed.
1275 *
1276 * Note that the list of addresses passed in is only used for setting up
1277 * the association. It does not necessarily equal the set of addresses
1278 * the peer uses for the resulting association. If the caller wants to
1279 * find out the set of peer addresses, it must use sctp_getpaddrs() to
1280 * retrieve them after the association has been set up.
1281 *
1282 * Basically do nothing but copying the addresses from user to kernel
1283 * land and invoking either sctp_connectx(). This is used for tunneling
1284 * the sctp_connectx() request through sctp_setsockopt() from userspace.
1285 *
1286 * We don't use copy_from_user() for optimization: we first do the
1287 * sanity checks (buffer size -fast- and access check-healthy
1288 * pointer); if all of those succeed, then we can alloc the memory
1289 * (expensive operation) needed to copy the data to kernel. Then we do
1290 * the copying without checking the user space area
1291 * (__copy_from_user()).
1292 *
1293 * On exit there is no need to do sockfd_put(), sys_setsockopt() does
1294 * it.
1295 *
1296 * sk The sk of the socket
1297 * addrs The pointer to the addresses in user land
1298 * addrssize Size of the addrs buffer
1299 *
88a0a948 1300 * Returns >=0 if ok, <0 errno code on error.
3f7a87d2 1301 */
26ac8e5f 1302static int __sctp_setsockopt_connectx(struct sock *sk,
3f7a87d2 1303 struct sockaddr __user *addrs,
88a0a948
VY
1304 int addrs_size,
1305 sctp_assoc_t *assoc_id)
3f7a87d2
FF
1306{
1307 int err = 0;
1308 struct sockaddr *kaddrs;
1309
bb33381d
DB
1310 pr_debug("%s: sk:%p addrs:%p addrs_size:%d\n",
1311 __func__, sk, addrs, addrs_size);
3f7a87d2
FF
1312
1313 if (unlikely(addrs_size <= 0))
1314 return -EINVAL;
1315
1316 /* Check the user passed a healthy pointer. */
1317 if (unlikely(!access_ok(VERIFY_READ, addrs, addrs_size)))
1318 return -EFAULT;
1319
1320 /* Alloc space for the address array in kernel memory. */
8b3a7005 1321 kaddrs = kmalloc(addrs_size, GFP_KERNEL);
3f7a87d2
FF
1322 if (unlikely(!kaddrs))
1323 return -ENOMEM;
1324
1325 if (__copy_from_user(kaddrs, addrs, addrs_size)) {
1326 err = -EFAULT;
1327 } else {
88a0a948 1328 err = __sctp_connect(sk, kaddrs, addrs_size, assoc_id);
3f7a87d2
FF
1329 }
1330
1331 kfree(kaddrs);
88a0a948 1332
3f7a87d2
FF
1333 return err;
1334}
1335
88a0a948
VY
1336/*
1337 * This is an older interface. It's kept for backward compatibility
1338 * to the option that doesn't provide association id.
1339 */
26ac8e5f 1340static int sctp_setsockopt_connectx_old(struct sock *sk,
dda91928
DB
1341 struct sockaddr __user *addrs,
1342 int addrs_size)
88a0a948
VY
1343{
1344 return __sctp_setsockopt_connectx(sk, addrs, addrs_size, NULL);
1345}
1346
1347/*
1348 * New interface for the API. The since the API is done with a socket
1349 * option, to make it simple we feed back the association id is as a return
1350 * indication to the call. Error is always negative and association id is
1351 * always positive.
1352 */
26ac8e5f 1353static int sctp_setsockopt_connectx(struct sock *sk,
dda91928
DB
1354 struct sockaddr __user *addrs,
1355 int addrs_size)
88a0a948
VY
1356{
1357 sctp_assoc_t assoc_id = 0;
1358 int err = 0;
1359
1360 err = __sctp_setsockopt_connectx(sk, addrs, addrs_size, &assoc_id);
1361
1362 if (err)
1363 return err;
1364 else
1365 return assoc_id;
1366}
1367
c6ba68a2 1368/*
f9c67811
VY
1369 * New (hopefully final) interface for the API.
1370 * We use the sctp_getaddrs_old structure so that use-space library
1371 * can avoid any unnecessary allocations. The only defferent part
1372 * is that we store the actual length of the address buffer into the
1373 * addrs_num structure member. That way we can re-use the existing
1374 * code.
c6ba68a2 1375 */
26ac8e5f 1376static int sctp_getsockopt_connectx3(struct sock *sk, int len,
dda91928
DB
1377 char __user *optval,
1378 int __user *optlen)
c6ba68a2 1379{
f9c67811 1380 struct sctp_getaddrs_old param;
c6ba68a2
VY
1381 sctp_assoc_t assoc_id = 0;
1382 int err = 0;
1383
f9c67811 1384 if (len < sizeof(param))
c6ba68a2
VY
1385 return -EINVAL;
1386
f9c67811
VY
1387 if (copy_from_user(&param, optval, sizeof(param)))
1388 return -EFAULT;
1389
c6ba68a2 1390 err = __sctp_setsockopt_connectx(sk,
f9c67811
VY
1391 (struct sockaddr __user *)param.addrs,
1392 param.addr_num, &assoc_id);
c6ba68a2
VY
1393
1394 if (err == 0 || err == -EINPROGRESS) {
1395 if (copy_to_user(optval, &assoc_id, sizeof(assoc_id)))
1396 return -EFAULT;
1397 if (put_user(sizeof(assoc_id), optlen))
1398 return -EFAULT;
1399 }
1400
1401 return err;
1402}
1403
1da177e4
LT
1404/* API 3.1.4 close() - UDP Style Syntax
1405 * Applications use close() to perform graceful shutdown (as described in
1406 * Section 10.1 of [SCTP]) on ALL the associations currently represented
1407 * by a UDP-style socket.
1408 *
1409 * The syntax is
1410 *
1411 * ret = close(int sd);
1412 *
1413 * sd - the socket descriptor of the associations to be closed.
1414 *
1415 * To gracefully shutdown a specific association represented by the
1416 * UDP-style socket, an application should use the sendmsg() call,
1417 * passing no user data, but including the appropriate flag in the
1418 * ancillary data (see Section xxxx).
1419 *
1420 * If sd in the close() call is a branched-off socket representing only
1421 * one association, the shutdown is performed on that association only.
1422 *
1423 * 4.1.6 close() - TCP Style Syntax
1424 *
1425 * Applications use close() to gracefully close down an association.
1426 *
1427 * The syntax is:
1428 *
1429 * int close(int sd);
1430 *
1431 * sd - the socket descriptor of the association to be closed.
1432 *
1433 * After an application calls close() on a socket descriptor, no further
1434 * socket operations will succeed on that descriptor.
1435 *
1436 * API 7.1.4 SO_LINGER
1437 *
1438 * An application using the TCP-style socket can use this option to
1439 * perform the SCTP ABORT primitive. The linger option structure is:
1440 *
1441 * struct linger {
1442 * int l_onoff; // option on/off
1443 * int l_linger; // linger time
1444 * };
1445 *
1446 * To enable the option, set l_onoff to 1. If the l_linger value is set
1447 * to 0, calling close() is the same as the ABORT primitive. If the
1448 * value is set to a negative value, the setsockopt() call will return
1449 * an error. If the value is set to a positive value linger_time, the
1450 * close() can be blocked for at most linger_time ms. If the graceful
1451 * shutdown phase does not finish during this period, close() will
1452 * return but the graceful shutdown phase continues in the system.
1453 */
dda91928 1454static void sctp_close(struct sock *sk, long timeout)
1da177e4 1455{
55e26eb9 1456 struct net *net = sock_net(sk);
1da177e4
LT
1457 struct sctp_endpoint *ep;
1458 struct sctp_association *asoc;
1459 struct list_head *pos, *temp;
cd4fcc70 1460 unsigned int data_was_unread;
1da177e4 1461
bb33381d 1462 pr_debug("%s: sk:%p, timeout:%ld\n", __func__, sk, timeout);
1da177e4
LT
1463
1464 sctp_lock_sock(sk);
1465 sk->sk_shutdown = SHUTDOWN_MASK;
bec9640b 1466 sk->sk_state = SCTP_SS_CLOSING;
1da177e4
LT
1467
1468 ep = sctp_sk(sk)->ep;
1469
cd4fcc70
TG
1470 /* Clean up any skbs sitting on the receive queue. */
1471 data_was_unread = sctp_queue_purge_ulpevents(&sk->sk_receive_queue);
1472 data_was_unread += sctp_queue_purge_ulpevents(&sctp_sk(sk)->pd_lobby);
1473
61c9fed4 1474 /* Walk all associations on an endpoint. */
1da177e4
LT
1475 list_for_each_safe(pos, temp, &ep->asocs) {
1476 asoc = list_entry(pos, struct sctp_association, asocs);
1477
1478 if (sctp_style(sk, TCP)) {
1479 /* A closed association can still be in the list if
1480 * it belongs to a TCP-style listening socket that is
1481 * not yet accepted. If so, free it. If not, send an
1482 * ABORT or SHUTDOWN based on the linger options.
1483 */
1484 if (sctp_state(asoc, CLOSED)) {
1485 sctp_unhash_established(asoc);
1486 sctp_association_free(asoc);
b89498a1
VY
1487 continue;
1488 }
1489 }
1da177e4 1490
cd4fcc70
TG
1491 if (data_was_unread || !skb_queue_empty(&asoc->ulpq.lobby) ||
1492 !skb_queue_empty(&asoc->ulpq.reasm) ||
1493 (sock_flag(sk, SOCK_LINGER) && !sk->sk_lingertime)) {
b9ac8672
SS
1494 struct sctp_chunk *chunk;
1495
1496 chunk = sctp_make_abort_user(asoc, NULL, 0);
1497 if (chunk)
55e26eb9 1498 sctp_primitive_ABORT(net, asoc, chunk);
b9ac8672 1499 } else
55e26eb9 1500 sctp_primitive_SHUTDOWN(net, asoc, NULL);
1da177e4
LT
1501 }
1502
1da177e4
LT
1503 /* On a TCP-style socket, block for at most linger_time if set. */
1504 if (sctp_style(sk, TCP) && timeout)
1505 sctp_wait_for_close(sk, timeout);
1506
1507 /* This will run the backlog queue. */
1508 sctp_release_sock(sk);
1509
1510 /* Supposedly, no process has access to the socket, but
1511 * the net layers still may.
1512 */
1513 sctp_local_bh_disable();
1514 sctp_bh_lock_sock(sk);
1515
1516 /* Hold the sock, since sk_common_release() will put sock_put()
1517 * and we have just a little more cleanup.
1518 */
1519 sock_hold(sk);
1520 sk_common_release(sk);
1521
1522 sctp_bh_unlock_sock(sk);
1523 sctp_local_bh_enable();
1524
1525 sock_put(sk);
1526
1527 SCTP_DBG_OBJCNT_DEC(sock);
1528}
1529
1530/* Handle EPIPE error. */
1531static int sctp_error(struct sock *sk, int flags, int err)
1532{
1533 if (err == -EPIPE)
1534 err = sock_error(sk) ? : -EPIPE;
1535 if (err == -EPIPE && !(flags & MSG_NOSIGNAL))
1536 send_sig(SIGPIPE, current, 0);
1537 return err;
1538}
1539
1540/* API 3.1.3 sendmsg() - UDP Style Syntax
1541 *
1542 * An application uses sendmsg() and recvmsg() calls to transmit data to
1543 * and receive data from its peer.
1544 *
1545 * ssize_t sendmsg(int socket, const struct msghdr *message,
1546 * int flags);
1547 *
1548 * socket - the socket descriptor of the endpoint.
1549 * message - pointer to the msghdr structure which contains a single
1550 * user message and possibly some ancillary data.
1551 *
1552 * See Section 5 for complete description of the data
1553 * structures.
1554 *
1555 * flags - flags sent or received with the user message, see Section
1556 * 5 for complete description of the flags.
1557 *
1558 * Note: This function could use a rewrite especially when explicit
1559 * connect support comes in.
1560 */
1561/* BUG: We do not implement the equivalent of sk_stream_wait_memory(). */
1562
dda91928 1563static int sctp_msghdr_parse(const struct msghdr *, sctp_cmsgs_t *);
1da177e4 1564
dda91928
DB
1565static int sctp_sendmsg(struct kiocb *iocb, struct sock *sk,
1566 struct msghdr *msg, size_t msg_len)
1da177e4 1567{
55e26eb9 1568 struct net *net = sock_net(sk);
1da177e4
LT
1569 struct sctp_sock *sp;
1570 struct sctp_endpoint *ep;
cb3f837b 1571 struct sctp_association *new_asoc = NULL, *asoc = NULL;
1da177e4
LT
1572 struct sctp_transport *transport, *chunk_tp;
1573 struct sctp_chunk *chunk;
dce116ae 1574 union sctp_addr to;
1da177e4 1575 struct sockaddr *msg_name = NULL;
517aa0bc 1576 struct sctp_sndrcvinfo default_sinfo;
1da177e4
LT
1577 struct sctp_sndrcvinfo *sinfo;
1578 struct sctp_initmsg *sinit;
1579 sctp_assoc_t associd = 0;
1580 sctp_cmsgs_t cmsgs = { NULL };
1581 int err;
1582 sctp_scope_t scope;
1583 long timeo;
1584 __u16 sinfo_flags = 0;
1585 struct sctp_datamsg *datamsg;
1da177e4
LT
1586 int msg_flags = msg->msg_flags;
1587
1da177e4
LT
1588 err = 0;
1589 sp = sctp_sk(sk);
1590 ep = sp->ep;
1591
bb33381d
DB
1592 pr_debug("%s: sk:%p, msg:%p, msg_len:%zu ep:%p\n", __func__, sk,
1593 msg, msg_len, ep);
1da177e4
LT
1594
1595 /* We cannot send a message over a TCP-style listening socket. */
1596 if (sctp_style(sk, TCP) && sctp_sstate(sk, LISTENING)) {
1597 err = -EPIPE;
1598 goto out_nounlock;
1599 }
1600
1601 /* Parse out the SCTP CMSGs. */
1602 err = sctp_msghdr_parse(msg, &cmsgs);
1da177e4 1603 if (err) {
bb33381d 1604 pr_debug("%s: msghdr parse err:%x\n", __func__, err);
1da177e4
LT
1605 goto out_nounlock;
1606 }
1607
1608 /* Fetch the destination address for this packet. This
1609 * address only selects the association--it is not necessarily
1610 * the address we will send to.
1611 * For a peeled-off socket, msg_name is ignored.
1612 */
1613 if (!sctp_style(sk, UDP_HIGH_BANDWIDTH) && msg->msg_name) {
1614 int msg_namelen = msg->msg_namelen;
1615
1616 err = sctp_verify_addr(sk, (union sctp_addr *)msg->msg_name,
1617 msg_namelen);
1618 if (err)
1619 return err;
1620
1621 if (msg_namelen > sizeof(to))
1622 msg_namelen = sizeof(to);
1623 memcpy(&to, msg->msg_name, msg_namelen);
1da177e4
LT
1624 msg_name = msg->msg_name;
1625 }
1626
1627 sinfo = cmsgs.info;
1628 sinit = cmsgs.init;
1629
1630 /* Did the user specify SNDRCVINFO? */
1631 if (sinfo) {
1632 sinfo_flags = sinfo->sinfo_flags;
1633 associd = sinfo->sinfo_assoc_id;
1634 }
1635
bb33381d
DB
1636 pr_debug("%s: msg_len:%zu, sinfo_flags:0x%x\n", __func__,
1637 msg_len, sinfo_flags);
1da177e4 1638
eaa5c54d
ISJ
1639 /* SCTP_EOF or SCTP_ABORT cannot be set on a TCP-style socket. */
1640 if (sctp_style(sk, TCP) && (sinfo_flags & (SCTP_EOF | SCTP_ABORT))) {
1da177e4
LT
1641 err = -EINVAL;
1642 goto out_nounlock;
1643 }
1644
eaa5c54d
ISJ
1645 /* If SCTP_EOF is set, no data can be sent. Disallow sending zero
1646 * length messages when SCTP_EOF|SCTP_ABORT is not set.
1647 * If SCTP_ABORT is set, the message length could be non zero with
1da177e4 1648 * the msg_iov set to the user abort reason.
d808ad9a 1649 */
eaa5c54d
ISJ
1650 if (((sinfo_flags & SCTP_EOF) && (msg_len > 0)) ||
1651 (!(sinfo_flags & (SCTP_EOF|SCTP_ABORT)) && (msg_len == 0))) {
1da177e4
LT
1652 err = -EINVAL;
1653 goto out_nounlock;
1654 }
1655
eaa5c54d 1656 /* If SCTP_ADDR_OVER is set, there must be an address
1da177e4
LT
1657 * specified in msg_name.
1658 */
eaa5c54d 1659 if ((sinfo_flags & SCTP_ADDR_OVER) && (!msg->msg_name)) {
1da177e4
LT
1660 err = -EINVAL;
1661 goto out_nounlock;
1662 }
1663
1664 transport = NULL;
1665
bb33381d 1666 pr_debug("%s: about to look up association\n", __func__);
1da177e4
LT
1667
1668 sctp_lock_sock(sk);
1669
1670 /* If a msg_name has been specified, assume this is to be used. */
1671 if (msg_name) {
1672 /* Look for a matching association on the endpoint. */
dce116ae 1673 asoc = sctp_endpoint_lookup_assoc(ep, &to, &transport);
1da177e4
LT
1674 if (!asoc) {
1675 /* If we could not find a matching association on the
1676 * endpoint, make sure that it is not a TCP-style
1677 * socket that already has an association or there is
1678 * no peeled-off association on another socket.
1679 */
1680 if ((sctp_style(sk, TCP) &&
1681 sctp_sstate(sk, ESTABLISHED)) ||
dce116ae 1682 sctp_endpoint_is_peeled_off(ep, &to)) {
1da177e4
LT
1683 err = -EADDRNOTAVAIL;
1684 goto out_unlock;
1685 }
1686 }
1687 } else {
1688 asoc = sctp_id2assoc(sk, associd);
1689 if (!asoc) {
1690 err = -EPIPE;
1691 goto out_unlock;
1692 }
1693 }
1694
1695 if (asoc) {
bb33381d 1696 pr_debug("%s: just looked up association:%p\n", __func__, asoc);
1da177e4
LT
1697
1698 /* We cannot send a message on a TCP-style SCTP_SS_ESTABLISHED
1699 * socket that has an association in CLOSED state. This can
1700 * happen when an accepted socket has an association that is
1701 * already CLOSED.
1702 */
1703 if (sctp_state(asoc, CLOSED) && sctp_style(sk, TCP)) {
1704 err = -EPIPE;
1705 goto out_unlock;
1706 }
1707
eaa5c54d 1708 if (sinfo_flags & SCTP_EOF) {
bb33381d
DB
1709 pr_debug("%s: shutting down association:%p\n",
1710 __func__, asoc);
1711
55e26eb9 1712 sctp_primitive_SHUTDOWN(net, asoc, NULL);
1da177e4
LT
1713 err = 0;
1714 goto out_unlock;
1715 }
eaa5c54d 1716 if (sinfo_flags & SCTP_ABORT) {
c164a9ba
SS
1717
1718 chunk = sctp_make_abort_user(asoc, msg, msg_len);
1719 if (!chunk) {
1720 err = -ENOMEM;
1721 goto out_unlock;
1722 }
1723
bb33381d
DB
1724 pr_debug("%s: aborting association:%p\n",
1725 __func__, asoc);
1726
55e26eb9 1727 sctp_primitive_ABORT(net, asoc, chunk);
1da177e4
LT
1728 err = 0;
1729 goto out_unlock;
1730 }
1731 }
1732
1733 /* Do we need to create the association? */
1734 if (!asoc) {
bb33381d 1735 pr_debug("%s: there is no association yet\n", __func__);
1da177e4 1736
eaa5c54d 1737 if (sinfo_flags & (SCTP_EOF | SCTP_ABORT)) {
1da177e4
LT
1738 err = -EINVAL;
1739 goto out_unlock;
1740 }
1741
1742 /* Check for invalid stream against the stream counts,
1743 * either the default or the user specified stream counts.
1744 */
1745 if (sinfo) {
1746 if (!sinit || (sinit && !sinit->sinit_num_ostreams)) {
1747 /* Check against the defaults. */
1748 if (sinfo->sinfo_stream >=
1749 sp->initmsg.sinit_num_ostreams) {
1750 err = -EINVAL;
1751 goto out_unlock;
1752 }
1753 } else {
1754 /* Check against the requested. */
1755 if (sinfo->sinfo_stream >=
1756 sinit->sinit_num_ostreams) {
1757 err = -EINVAL;
1758 goto out_unlock;
1759 }
1760 }
1761 }
1762
1763 /*
1764 * API 3.1.2 bind() - UDP Style Syntax
1765 * If a bind() or sctp_bindx() is not called prior to a
1766 * sendmsg() call that initiates a new association, the
1767 * system picks an ephemeral port and will choose an address
1768 * set equivalent to binding with a wildcard address.
1769 */
1770 if (!ep->base.bind_addr.port) {
1771 if (sctp_autobind(sk)) {
1772 err = -EAGAIN;
1773 goto out_unlock;
1774 }
64a0c1c8
ISJ
1775 } else {
1776 /*
1777 * If an unprivileged user inherits a one-to-many
1778 * style socket with open associations on a privileged
1779 * port, it MAY be permitted to accept new associations,
1780 * but it SHOULD NOT be permitted to open new
1781 * associations.
1782 */
1783 if (ep->base.bind_addr.port < PROT_SOCK &&
3594698a 1784 !ns_capable(net->user_ns, CAP_NET_BIND_SERVICE)) {
64a0c1c8
ISJ
1785 err = -EACCES;
1786 goto out_unlock;
1787 }
1da177e4
LT
1788 }
1789
1790 scope = sctp_scope(&to);
1791 new_asoc = sctp_association_new(ep, sk, scope, GFP_KERNEL);
1792 if (!new_asoc) {
1793 err = -ENOMEM;
1794 goto out_unlock;
1795 }
1796 asoc = new_asoc;
409b95af
VY
1797 err = sctp_assoc_set_bind_addr_from_ep(asoc, scope, GFP_KERNEL);
1798 if (err < 0) {
1799 err = -ENOMEM;
1800 goto out_free;
1801 }
1da177e4
LT
1802
1803 /* If the SCTP_INIT ancillary data is specified, set all
1804 * the association init values accordingly.
1805 */
1806 if (sinit) {
1807 if (sinit->sinit_num_ostreams) {
1808 asoc->c.sinit_num_ostreams =
1809 sinit->sinit_num_ostreams;
1810 }
1811 if (sinit->sinit_max_instreams) {
1812 asoc->c.sinit_max_instreams =
1813 sinit->sinit_max_instreams;
1814 }
1815 if (sinit->sinit_max_attempts) {
1816 asoc->max_init_attempts
1817 = sinit->sinit_max_attempts;
1818 }
1819 if (sinit->sinit_max_init_timeo) {
d808ad9a 1820 asoc->max_init_timeo =
1da177e4
LT
1821 msecs_to_jiffies(sinit->sinit_max_init_timeo);
1822 }
1823 }
1824
1825 /* Prime the peer's transport structures. */
dce116ae 1826 transport = sctp_assoc_add_peer(asoc, &to, GFP_KERNEL, SCTP_UNKNOWN);
1da177e4
LT
1827 if (!transport) {
1828 err = -ENOMEM;
1829 goto out_free;
1830 }
1da177e4
LT
1831 }
1832
1833 /* ASSERT: we have a valid association at this point. */
bb33381d 1834 pr_debug("%s: we have a valid association\n", __func__);
1da177e4
LT
1835
1836 if (!sinfo) {
1837 /* If the user didn't specify SNDRCVINFO, make up one with
1838 * some defaults.
1839 */
517aa0bc 1840 memset(&default_sinfo, 0, sizeof(default_sinfo));
1da177e4
LT
1841 default_sinfo.sinfo_stream = asoc->default_stream;
1842 default_sinfo.sinfo_flags = asoc->default_flags;
1843 default_sinfo.sinfo_ppid = asoc->default_ppid;
1844 default_sinfo.sinfo_context = asoc->default_context;
1845 default_sinfo.sinfo_timetolive = asoc->default_timetolive;
1846 default_sinfo.sinfo_assoc_id = sctp_assoc2id(asoc);
1847 sinfo = &default_sinfo;
1848 }
1849
1850 /* API 7.1.7, the sndbuf size per association bounds the
1851 * maximum size of data that can be sent in a single send call.
1852 */
1853 if (msg_len > sk->sk_sndbuf) {
1854 err = -EMSGSIZE;
1855 goto out_free;
1856 }
1857
8a479491 1858 if (asoc->pmtu_pending)
02f3d4ce 1859 sctp_assoc_pending_pmtu(sk, asoc);
8a479491 1860
1da177e4
LT
1861 /* If fragmentation is disabled and the message length exceeds the
1862 * association fragmentation point, return EMSGSIZE. The I-D
1863 * does not specify what this error is, but this looks like
1864 * a great fit.
1865 */
1866 if (sctp_sk(sk)->disable_fragments && (msg_len > asoc->frag_point)) {
1867 err = -EMSGSIZE;
1868 goto out_free;
1869 }
1870
afd7614c
JP
1871 /* Check for invalid stream. */
1872 if (sinfo->sinfo_stream >= asoc->c.sinit_num_ostreams) {
1873 err = -EINVAL;
1874 goto out_free;
1da177e4
LT
1875 }
1876
1877 timeo = sock_sndtimeo(sk, msg->msg_flags & MSG_DONTWAIT);
1878 if (!sctp_wspace(asoc)) {
1879 err = sctp_wait_for_sndbuf(asoc, &timeo, msg_len);
1880 if (err)
1881 goto out_free;
1882 }
1883
1884 /* If an address is passed with the sendto/sendmsg call, it is used
1885 * to override the primary destination address in the TCP model, or
eaa5c54d 1886 * when SCTP_ADDR_OVER flag is set in the UDP model.
1da177e4
LT
1887 */
1888 if ((sctp_style(sk, TCP) && msg_name) ||
eaa5c54d 1889 (sinfo_flags & SCTP_ADDR_OVER)) {
dce116ae 1890 chunk_tp = sctp_assoc_lookup_paddr(asoc, &to);
1da177e4
LT
1891 if (!chunk_tp) {
1892 err = -EINVAL;
1893 goto out_free;
1894 }
1895 } else
1896 chunk_tp = NULL;
1897
1898 /* Auto-connect, if we aren't connected already. */
1899 if (sctp_state(asoc, CLOSED)) {
55e26eb9 1900 err = sctp_primitive_ASSOCIATE(net, asoc, NULL);
1da177e4
LT
1901 if (err < 0)
1902 goto out_free;
bb33381d
DB
1903
1904 pr_debug("%s: we associated primitively\n", __func__);
1da177e4
LT
1905 }
1906
1907 /* Break the message into multiple chunks of maximum size. */
1908 datamsg = sctp_datamsg_from_user(asoc, sinfo, msg, msg_len);
6e51fe75
TR
1909 if (IS_ERR(datamsg)) {
1910 err = PTR_ERR(datamsg);
1da177e4
LT
1911 goto out_free;
1912 }
1913
1914 /* Now send the (possibly) fragmented message. */
9dbc15f0 1915 list_for_each_entry(chunk, &datamsg->chunks, frag_list) {
80445cfb 1916 sctp_chunk_hold(chunk);
1da177e4
LT
1917
1918 /* Do accounting for the write space. */
1919 sctp_set_owner_w(chunk);
1920
1921 chunk->transport = chunk_tp;
1da177e4
LT
1922 }
1923
9c5c62be
VY
1924 /* Send it to the lower layers. Note: all chunks
1925 * must either fail or succeed. The lower layer
1926 * works that way today. Keep it that way or this
1927 * breaks.
1928 */
55e26eb9 1929 err = sctp_primitive_SEND(net, asoc, datamsg);
9c5c62be 1930 /* Did the lower layer accept the chunk? */
bb33381d 1931 if (err) {
9c5c62be 1932 sctp_datamsg_free(datamsg);
bb33381d
DB
1933 goto out_free;
1934 }
9c5c62be 1935
bb33381d 1936 pr_debug("%s: we sent primitively\n", __func__);
9c5c62be 1937
bb33381d
DB
1938 sctp_datamsg_put(datamsg);
1939 err = msg_len;
1da177e4
LT
1940
1941 /* If we are already past ASSOCIATE, the lower
1942 * layers are responsible for association cleanup.
1943 */
1944 goto out_unlock;
1945
1946out_free:
2eebc1e1
NH
1947 if (new_asoc) {
1948 sctp_unhash_established(asoc);
1da177e4 1949 sctp_association_free(asoc);
2eebc1e1 1950 }
1da177e4
LT
1951out_unlock:
1952 sctp_release_sock(sk);
1953
1954out_nounlock:
1955 return sctp_error(sk, msg_flags, err);
1956
1957#if 0
1958do_sock_err:
1959 if (msg_len)
1960 err = msg_len;
1961 else
1962 err = sock_error(sk);
1963 goto out;
1964
1965do_interrupted:
1966 if (msg_len)
1967 err = msg_len;
1968 goto out;
1969#endif /* 0 */
1970}
1971
1972/* This is an extended version of skb_pull() that removes the data from the
1973 * start of a skb even when data is spread across the list of skb's in the
1974 * frag_list. len specifies the total amount of data that needs to be removed.
1975 * when 'len' bytes could be removed from the skb, it returns 0.
1976 * If 'len' exceeds the total skb length, it returns the no. of bytes that
1977 * could not be removed.
1978 */
1979static int sctp_skb_pull(struct sk_buff *skb, int len)
1980{
1981 struct sk_buff *list;
1982 int skb_len = skb_headlen(skb);
1983 int rlen;
1984
1985 if (len <= skb_len) {
1986 __skb_pull(skb, len);
1987 return 0;
1988 }
1989 len -= skb_len;
1990 __skb_pull(skb, skb_len);
1991
1b003be3 1992 skb_walk_frags(skb, list) {
1da177e4
LT
1993 rlen = sctp_skb_pull(list, len);
1994 skb->len -= (len-rlen);
1995 skb->data_len -= (len-rlen);
1996
1997 if (!rlen)
1998 return 0;
1999
2000 len = rlen;
2001 }
2002
2003 return len;
2004}
2005
2006/* API 3.1.3 recvmsg() - UDP Style Syntax
2007 *
2008 * ssize_t recvmsg(int socket, struct msghdr *message,
2009 * int flags);
2010 *
2011 * socket - the socket descriptor of the endpoint.
2012 * message - pointer to the msghdr structure which contains a single
2013 * user message and possibly some ancillary data.
2014 *
2015 * See Section 5 for complete description of the data
2016 * structures.
2017 *
2018 * flags - flags sent or received with the user message, see Section
2019 * 5 for complete description of the flags.
2020 */
2021static struct sk_buff *sctp_skb_recv_datagram(struct sock *, int, int, int *);
2022
dda91928
DB
2023static int sctp_recvmsg(struct kiocb *iocb, struct sock *sk,
2024 struct msghdr *msg, size_t len, int noblock,
2025 int flags, int *addr_len)
1da177e4
LT
2026{
2027 struct sctp_ulpevent *event = NULL;
2028 struct sctp_sock *sp = sctp_sk(sk);
2029 struct sk_buff *skb;
2030 int copied;
2031 int err = 0;
2032 int skb_len;
2033
bb33381d
DB
2034 pr_debug("%s: sk:%p, msghdr:%p, len:%zd, noblock:%d, flags:0x%x, "
2035 "addr_len:%p)\n", __func__, sk, msg, len, noblock, flags,
2036 addr_len);
1da177e4
LT
2037
2038 sctp_lock_sock(sk);
2039
2040 if (sctp_style(sk, TCP) && !sctp_sstate(sk, ESTABLISHED)) {
2041 err = -ENOTCONN;
2042 goto out;
2043 }
2044
2045 skb = sctp_skb_recv_datagram(sk, flags, noblock, &err);
2046 if (!skb)
2047 goto out;
2048
2049 /* Get the total length of the skb including any skb's in the
2050 * frag_list.
2051 */
2052 skb_len = skb->len;
2053
2054 copied = skb_len;
2055 if (copied > len)
2056 copied = len;
2057
2058 err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
2059
2060 event = sctp_skb2event(skb);
2061
2062 if (err)
2063 goto out_free;
2064
3b885787 2065 sock_recv_ts_and_drops(msg, sk, skb);
1da177e4
LT
2066 if (sctp_ulpevent_is_notification(event)) {
2067 msg->msg_flags |= MSG_NOTIFICATION;
2068 sp->pf->event_msgname(event, msg->msg_name, addr_len);
2069 } else {
2070 sp->pf->skb_msgname(skb, msg->msg_name, addr_len);
2071 }
2072
2073 /* Check if we allow SCTP_SNDRCVINFO. */
2074 if (sp->subscribe.sctp_data_io_event)
2075 sctp_ulpevent_read_sndrcvinfo(event, msg);
2076#if 0
2077 /* FIXME: we should be calling IP/IPv6 layers. */
2078 if (sk->sk_protinfo.af_inet.cmsg_flags)
2079 ip_cmsg_recv(msg, skb);
2080#endif
2081
2082 err = copied;
2083
2084 /* If skb's length exceeds the user's buffer, update the skb and
2085 * push it back to the receive_queue so that the next call to
2086 * recvmsg() will return the remaining data. Don't set MSG_EOR.
2087 */
2088 if (skb_len > copied) {
2089 msg->msg_flags &= ~MSG_EOR;
2090 if (flags & MSG_PEEK)
2091 goto out_free;
2092 sctp_skb_pull(skb, copied);
2093 skb_queue_head(&sk->sk_receive_queue, skb);
2094
2095 /* When only partial message is copied to the user, increase
2096 * rwnd by that amount. If all the data in the skb is read,
2097 * rwnd is updated when the event is freed.
2098 */
0eca8fee
VY
2099 if (!sctp_ulpevent_is_notification(event))
2100 sctp_assoc_rwnd_increase(event->asoc, copied);
1da177e4
LT
2101 goto out;
2102 } else if ((event->msg_flags & MSG_NOTIFICATION) ||
2103 (event->msg_flags & MSG_EOR))
2104 msg->msg_flags |= MSG_EOR;
2105 else
2106 msg->msg_flags &= ~MSG_EOR;
2107
2108out_free:
2109 if (flags & MSG_PEEK) {
2110 /* Release the skb reference acquired after peeking the skb in
2111 * sctp_skb_recv_datagram().
2112 */
2113 kfree_skb(skb);
2114 } else {
2115 /* Free the event which includes releasing the reference to
2116 * the owner of the skb, freeing the skb and updating the
2117 * rwnd.
2118 */
2119 sctp_ulpevent_free(event);
2120 }
2121out:
2122 sctp_release_sock(sk);
2123 return err;
2124}
2125
2126/* 7.1.12 Enable/Disable message fragmentation (SCTP_DISABLE_FRAGMENTS)
2127 *
2128 * This option is a on/off flag. If enabled no SCTP message
2129 * fragmentation will be performed. Instead if a message being sent
2130 * exceeds the current PMTU size, the message will NOT be sent and
2131 * instead a error will be indicated to the user.
2132 */
2133static int sctp_setsockopt_disable_fragments(struct sock *sk,
b7058842
DM
2134 char __user *optval,
2135 unsigned int optlen)
1da177e4
LT
2136{
2137 int val;
2138
2139 if (optlen < sizeof(int))
2140 return -EINVAL;
2141
2142 if (get_user(val, (int __user *)optval))
2143 return -EFAULT;
2144
2145 sctp_sk(sk)->disable_fragments = (val == 0) ? 0 : 1;
2146
2147 return 0;
2148}
2149
2150static int sctp_setsockopt_events(struct sock *sk, char __user *optval,
b7058842 2151 unsigned int optlen)
1da177e4 2152{
94912301
WY
2153 struct sctp_association *asoc;
2154 struct sctp_ulpevent *event;
2155
7e8616d8 2156 if (optlen > sizeof(struct sctp_event_subscribe))
1da177e4
LT
2157 return -EINVAL;
2158 if (copy_from_user(&sctp_sk(sk)->subscribe, optval, optlen))
2159 return -EFAULT;
94912301
WY
2160
2161 /*
2162 * At the time when a user app subscribes to SCTP_SENDER_DRY_EVENT,
2163 * if there is no data to be sent or retransmit, the stack will
2164 * immediately send up this notification.
2165 */
2166 if (sctp_ulpevent_type_enabled(SCTP_SENDER_DRY_EVENT,
2167 &sctp_sk(sk)->subscribe)) {
2168 asoc = sctp_id2assoc(sk, 0);
2169
2170 if (asoc && sctp_outq_is_empty(&asoc->outqueue)) {
2171 event = sctp_ulpevent_make_sender_dry_event(asoc,
2172 GFP_ATOMIC);
2173 if (!event)
2174 return -ENOMEM;
2175
2176 sctp_ulpq_tail_event(&asoc->ulpq, event);
2177 }
2178 }
2179
1da177e4
LT
2180 return 0;
2181}
2182
2183/* 7.1.8 Automatic Close of associations (SCTP_AUTOCLOSE)
2184 *
2185 * This socket option is applicable to the UDP-style socket only. When
2186 * set it will cause associations that are idle for more than the
2187 * specified number of seconds to automatically close. An association
2188 * being idle is defined an association that has NOT sent or received
2189 * user data. The special value of '0' indicates that no automatic
2190 * close of any associations should be performed. The option expects an
2191 * integer defining the number of seconds of idle time before an
2192 * association is closed.
2193 */
2194static int sctp_setsockopt_autoclose(struct sock *sk, char __user *optval,
b7058842 2195 unsigned int optlen)
1da177e4
LT
2196{
2197 struct sctp_sock *sp = sctp_sk(sk);
9f70f46b 2198 struct net *net = sock_net(sk);
1da177e4
LT
2199
2200 /* Applicable to UDP-style socket only */
2201 if (sctp_style(sk, TCP))
2202 return -EOPNOTSUPP;
2203 if (optlen != sizeof(int))
2204 return -EINVAL;
2205 if (copy_from_user(&sp->autoclose, optval, optlen))
2206 return -EFAULT;
2207
9f70f46b
NH
2208 if (sp->autoclose > net->sctp.max_autoclose)
2209 sp->autoclose = net->sctp.max_autoclose;
2210
1da177e4
LT
2211 return 0;
2212}
2213
2214/* 7.1.13 Peer Address Parameters (SCTP_PEER_ADDR_PARAMS)
2215 *
2216 * Applications can enable or disable heartbeats for any peer address of
2217 * an association, modify an address's heartbeat interval, force a
2218 * heartbeat to be sent immediately, and adjust the address's maximum
2219 * number of retransmissions sent before an address is considered
2220 * unreachable. The following structure is used to access and modify an
2221 * address's parameters:
2222 *
2223 * struct sctp_paddrparams {
52ccb8e9
FF
2224 * sctp_assoc_t spp_assoc_id;
2225 * struct sockaddr_storage spp_address;
2226 * uint32_t spp_hbinterval;
2227 * uint16_t spp_pathmaxrxt;
2228 * uint32_t spp_pathmtu;
2229 * uint32_t spp_sackdelay;
2230 * uint32_t spp_flags;
2231 * };
2232 *
2233 * spp_assoc_id - (one-to-many style socket) This is filled in the
2234 * application, and identifies the association for
2235 * this query.
1da177e4
LT
2236 * spp_address - This specifies which address is of interest.
2237 * spp_hbinterval - This contains the value of the heartbeat interval,
52ccb8e9
FF
2238 * in milliseconds. If a value of zero
2239 * is present in this field then no changes are to
2240 * be made to this parameter.
1da177e4
LT
2241 * spp_pathmaxrxt - This contains the maximum number of
2242 * retransmissions before this address shall be
52ccb8e9
FF
2243 * considered unreachable. If a value of zero
2244 * is present in this field then no changes are to
2245 * be made to this parameter.
2246 * spp_pathmtu - When Path MTU discovery is disabled the value
2247 * specified here will be the "fixed" path mtu.
2248 * Note that if the spp_address field is empty
2249 * then all associations on this address will
2250 * have this fixed path mtu set upon them.
2251 *
2252 * spp_sackdelay - When delayed sack is enabled, this value specifies
2253 * the number of milliseconds that sacks will be delayed
2254 * for. This value will apply to all addresses of an
2255 * association if the spp_address field is empty. Note
2256 * also, that if delayed sack is enabled and this
2257 * value is set to 0, no change is made to the last
2258 * recorded delayed sack timer value.
2259 *
2260 * spp_flags - These flags are used to control various features
2261 * on an association. The flag field may contain
2262 * zero or more of the following options.
2263 *
2264 * SPP_HB_ENABLE - Enable heartbeats on the
2265 * specified address. Note that if the address
2266 * field is empty all addresses for the association
2267 * have heartbeats enabled upon them.
2268 *
2269 * SPP_HB_DISABLE - Disable heartbeats on the
2270 * speicifed address. Note that if the address
2271 * field is empty all addresses for the association
2272 * will have their heartbeats disabled. Note also
2273 * that SPP_HB_ENABLE and SPP_HB_DISABLE are
2274 * mutually exclusive, only one of these two should
2275 * be specified. Enabling both fields will have
2276 * undetermined results.
2277 *
2278 * SPP_HB_DEMAND - Request a user initiated heartbeat
2279 * to be made immediately.
2280 *
bdf3092a
VY
2281 * SPP_HB_TIME_IS_ZERO - Specify's that the time for
2282 * heartbeat delayis to be set to the value of 0
2283 * milliseconds.
2284 *
52ccb8e9
FF
2285 * SPP_PMTUD_ENABLE - This field will enable PMTU
2286 * discovery upon the specified address. Note that
2287 * if the address feild is empty then all addresses
2288 * on the association are effected.
2289 *
2290 * SPP_PMTUD_DISABLE - This field will disable PMTU
2291 * discovery upon the specified address. Note that
2292 * if the address feild is empty then all addresses
2293 * on the association are effected. Not also that
2294 * SPP_PMTUD_ENABLE and SPP_PMTUD_DISABLE are mutually
2295 * exclusive. Enabling both will have undetermined
2296 * results.
2297 *
2298 * SPP_SACKDELAY_ENABLE - Setting this flag turns
2299 * on delayed sack. The time specified in spp_sackdelay
2300 * is used to specify the sack delay for this address. Note
2301 * that if spp_address is empty then all addresses will
2302 * enable delayed sack and take on the sack delay
2303 * value specified in spp_sackdelay.
2304 * SPP_SACKDELAY_DISABLE - Setting this flag turns
2305 * off delayed sack. If the spp_address field is blank then
2306 * delayed sack is disabled for the entire association. Note
2307 * also that this field is mutually exclusive to
2308 * SPP_SACKDELAY_ENABLE, setting both will have undefined
2309 * results.
1da177e4 2310 */
16164366
AB
2311static int sctp_apply_peer_addr_params(struct sctp_paddrparams *params,
2312 struct sctp_transport *trans,
2313 struct sctp_association *asoc,
2314 struct sctp_sock *sp,
2315 int hb_change,
2316 int pmtud_change,
2317 int sackdelay_change)
52ccb8e9
FF
2318{
2319 int error;
2320
2321 if (params->spp_flags & SPP_HB_DEMAND && trans) {
55e26eb9
EB
2322 struct net *net = sock_net(trans->asoc->base.sk);
2323
2324 error = sctp_primitive_REQUESTHEARTBEAT(net, trans->asoc, trans);
52ccb8e9
FF
2325 if (error)
2326 return error;
2327 }
2328
bdf3092a
VY
2329 /* Note that unless the spp_flag is set to SPP_HB_ENABLE the value of
2330 * this field is ignored. Note also that a value of zero indicates
2331 * the current setting should be left unchanged.
2332 */
2333 if (params->spp_flags & SPP_HB_ENABLE) {
2334
2335 /* Re-zero the interval if the SPP_HB_TIME_IS_ZERO is
2336 * set. This lets us use 0 value when this flag
2337 * is set.
2338 */
2339 if (params->spp_flags & SPP_HB_TIME_IS_ZERO)
2340 params->spp_hbinterval = 0;
2341
2342 if (params->spp_hbinterval ||
2343 (params->spp_flags & SPP_HB_TIME_IS_ZERO)) {
2344 if (trans) {
2345 trans->hbinterval =
2346 msecs_to_jiffies(params->spp_hbinterval);
2347 } else if (asoc) {
2348 asoc->hbinterval =
2349 msecs_to_jiffies(params->spp_hbinterval);
2350 } else {
2351 sp->hbinterval = params->spp_hbinterval;
2352 }
52ccb8e9
FF
2353 }
2354 }
2355
2356 if (hb_change) {
2357 if (trans) {
2358 trans->param_flags =
2359 (trans->param_flags & ~SPP_HB) | hb_change;
2360 } else if (asoc) {
2361 asoc->param_flags =
2362 (asoc->param_flags & ~SPP_HB) | hb_change;
2363 } else {
2364 sp->param_flags =
2365 (sp->param_flags & ~SPP_HB) | hb_change;
2366 }
2367 }
2368
bdf3092a
VY
2369 /* When Path MTU discovery is disabled the value specified here will
2370 * be the "fixed" path mtu (i.e. the value of the spp_flags field must
2371 * include the flag SPP_PMTUD_DISABLE for this field to have any
2372 * effect).
2373 */
2374 if ((params->spp_flags & SPP_PMTUD_DISABLE) && params->spp_pathmtu) {
52ccb8e9
FF
2375 if (trans) {
2376 trans->pathmtu = params->spp_pathmtu;
02f3d4ce 2377 sctp_assoc_sync_pmtu(sctp_opt2sk(sp), asoc);
52ccb8e9
FF
2378 } else if (asoc) {
2379 asoc->pathmtu = params->spp_pathmtu;
f68b2e05 2380 sctp_frag_point(asoc, params->spp_pathmtu);
52ccb8e9
FF
2381 } else {
2382 sp->pathmtu = params->spp_pathmtu;
2383 }
2384 }
2385
2386 if (pmtud_change) {
2387 if (trans) {
2388 int update = (trans->param_flags & SPP_PMTUD_DISABLE) &&
2389 (params->spp_flags & SPP_PMTUD_ENABLE);
2390 trans->param_flags =
2391 (trans->param_flags & ~SPP_PMTUD) | pmtud_change;
2392 if (update) {
9914ae3c 2393 sctp_transport_pmtu(trans, sctp_opt2sk(sp));
02f3d4ce 2394 sctp_assoc_sync_pmtu(sctp_opt2sk(sp), asoc);
52ccb8e9
FF
2395 }
2396 } else if (asoc) {
2397 asoc->param_flags =
2398 (asoc->param_flags & ~SPP_PMTUD) | pmtud_change;
2399 } else {
2400 sp->param_flags =
2401 (sp->param_flags & ~SPP_PMTUD) | pmtud_change;
2402 }
2403 }
2404
bdf3092a
VY
2405 /* Note that unless the spp_flag is set to SPP_SACKDELAY_ENABLE the
2406 * value of this field is ignored. Note also that a value of zero
2407 * indicates the current setting should be left unchanged.
2408 */
2409 if ((params->spp_flags & SPP_SACKDELAY_ENABLE) && params->spp_sackdelay) {
52ccb8e9
FF
2410 if (trans) {
2411 trans->sackdelay =
2412 msecs_to_jiffies(params->spp_sackdelay);
2413 } else if (asoc) {
2414 asoc->sackdelay =
2415 msecs_to_jiffies(params->spp_sackdelay);
2416 } else {
2417 sp->sackdelay = params->spp_sackdelay;
2418 }
2419 }
2420
2421 if (sackdelay_change) {
2422 if (trans) {
2423 trans->param_flags =
2424 (trans->param_flags & ~SPP_SACKDELAY) |
2425 sackdelay_change;
2426 } else if (asoc) {
2427 asoc->param_flags =
2428 (asoc->param_flags & ~SPP_SACKDELAY) |
2429 sackdelay_change;
2430 } else {
2431 sp->param_flags =
2432 (sp->param_flags & ~SPP_SACKDELAY) |
2433 sackdelay_change;
2434 }
2435 }
2436
37051f73
APO
2437 /* Note that a value of zero indicates the current setting should be
2438 left unchanged.
bdf3092a 2439 */
37051f73 2440 if (params->spp_pathmaxrxt) {
52ccb8e9
FF
2441 if (trans) {
2442 trans->pathmaxrxt = params->spp_pathmaxrxt;
2443 } else if (asoc) {
2444 asoc->pathmaxrxt = params->spp_pathmaxrxt;
2445 } else {
2446 sp->pathmaxrxt = params->spp_pathmaxrxt;
2447 }
2448 }
2449
2450 return 0;
2451}
2452
1da177e4 2453static int sctp_setsockopt_peer_addr_params(struct sock *sk,
b7058842
DM
2454 char __user *optval,
2455 unsigned int optlen)
1da177e4 2456{
52ccb8e9
FF
2457 struct sctp_paddrparams params;
2458 struct sctp_transport *trans = NULL;
2459 struct sctp_association *asoc = NULL;
2460 struct sctp_sock *sp = sctp_sk(sk);
1da177e4 2461 int error;
52ccb8e9 2462 int hb_change, pmtud_change, sackdelay_change;
1da177e4
LT
2463
2464 if (optlen != sizeof(struct sctp_paddrparams))
cb3f837b 2465 return -EINVAL;
52ccb8e9 2466
1da177e4
LT
2467 if (copy_from_user(&params, optval, optlen))
2468 return -EFAULT;
2469
52ccb8e9
FF
2470 /* Validate flags and value parameters. */
2471 hb_change = params.spp_flags & SPP_HB;
2472 pmtud_change = params.spp_flags & SPP_PMTUD;
2473 sackdelay_change = params.spp_flags & SPP_SACKDELAY;
2474
2475 if (hb_change == SPP_HB ||
2476 pmtud_change == SPP_PMTUD ||
2477 sackdelay_change == SPP_SACKDELAY ||
2478 params.spp_sackdelay > 500 ||
f64f9e71
JP
2479 (params.spp_pathmtu &&
2480 params.spp_pathmtu < SCTP_DEFAULT_MINSEGMENT))
52ccb8e9 2481 return -EINVAL;
1da177e4 2482
52ccb8e9
FF
2483 /* If an address other than INADDR_ANY is specified, and
2484 * no transport is found, then the request is invalid.
2485 */
cb3f837b 2486 if (!sctp_is_any(sk, (union sctp_addr *)&params.spp_address)) {
52ccb8e9
FF
2487 trans = sctp_addr_id2transport(sk, &params.spp_address,
2488 params.spp_assoc_id);
2489 if (!trans)
1da177e4 2490 return -EINVAL;
1da177e4
LT
2491 }
2492
52ccb8e9
FF
2493 /* Get association, if assoc_id != 0 and the socket is a one
2494 * to many style socket, and an association was not found, then
2495 * the id was invalid.
2496 */
2497 asoc = sctp_id2assoc(sk, params.spp_assoc_id);
2498 if (!asoc && params.spp_assoc_id && sctp_style(sk, UDP))
1da177e4
LT
2499 return -EINVAL;
2500
52ccb8e9
FF
2501 /* Heartbeat demand can only be sent on a transport or
2502 * association, but not a socket.
1da177e4 2503 */
52ccb8e9
FF
2504 if (params.spp_flags & SPP_HB_DEMAND && !trans && !asoc)
2505 return -EINVAL;
2506
2507 /* Process parameters. */
2508 error = sctp_apply_peer_addr_params(&params, trans, asoc, sp,
2509 hb_change, pmtud_change,
2510 sackdelay_change);
1da177e4 2511
52ccb8e9
FF
2512 if (error)
2513 return error;
2514
2515 /* If changes are for association, also apply parameters to each
2516 * transport.
1da177e4 2517 */
52ccb8e9 2518 if (!trans && asoc) {
9dbc15f0
RD
2519 list_for_each_entry(trans, &asoc->peer.transport_addr_list,
2520 transports) {
52ccb8e9
FF
2521 sctp_apply_peer_addr_params(&params, trans, asoc, sp,
2522 hb_change, pmtud_change,
2523 sackdelay_change);
2524 }
2525 }
1da177e4
LT
2526
2527 return 0;
2528}
2529
d364d927
WY
2530/*
2531 * 7.1.23. Get or set delayed ack timer (SCTP_DELAYED_SACK)
2532 *
2533 * This option will effect the way delayed acks are performed. This
2534 * option allows you to get or set the delayed ack time, in
2535 * milliseconds. It also allows changing the delayed ack frequency.
2536 * Changing the frequency to 1 disables the delayed sack algorithm. If
2537 * the assoc_id is 0, then this sets or gets the endpoints default
2538 * values. If the assoc_id field is non-zero, then the set or get
2539 * effects the specified association for the one to many model (the
2540 * assoc_id field is ignored by the one to one model). Note that if
2541 * sack_delay or sack_freq are 0 when setting this option, then the
2542 * current values will remain unchanged.
2543 *
2544 * struct sctp_sack_info {
2545 * sctp_assoc_t sack_assoc_id;
2546 * uint32_t sack_delay;
2547 * uint32_t sack_freq;
2548 * };
2549 *
2550 * sack_assoc_id - This parameter, indicates which association the user
2551 * is performing an action upon. Note that if this field's value is
2552 * zero then the endpoints default value is changed (effecting future
2553 * associations only).
2554 *
2555 * sack_delay - This parameter contains the number of milliseconds that
2556 * the user is requesting the delayed ACK timer be set to. Note that
2557 * this value is defined in the standard to be between 200 and 500
2558 * milliseconds.
2559 *
2560 * sack_freq - This parameter contains the number of packets that must
2561 * be received before a sack is sent without waiting for the delay
2562 * timer to expire. The default value for this is 2, setting this
2563 * value to 1 will disable the delayed sack algorithm.
7708610b
FF
2564 */
2565
d364d927 2566static int sctp_setsockopt_delayed_ack(struct sock *sk,
b7058842 2567 char __user *optval, unsigned int optlen)
7708610b 2568{
d364d927 2569 struct sctp_sack_info params;
7708610b
FF
2570 struct sctp_transport *trans = NULL;
2571 struct sctp_association *asoc = NULL;
2572 struct sctp_sock *sp = sctp_sk(sk);
2573
d364d927
WY
2574 if (optlen == sizeof(struct sctp_sack_info)) {
2575 if (copy_from_user(&params, optval, optlen))
2576 return -EFAULT;
7708610b 2577
d364d927
WY
2578 if (params.sack_delay == 0 && params.sack_freq == 0)
2579 return 0;
2580 } else if (optlen == sizeof(struct sctp_assoc_value)) {
145ce502
JP
2581 pr_warn("Use of struct sctp_assoc_value in delayed_ack socket option deprecated\n");
2582 pr_warn("Use struct sctp_sack_info instead\n");
d364d927
WY
2583 if (copy_from_user(&params, optval, optlen))
2584 return -EFAULT;
2585
2586 if (params.sack_delay == 0)
2587 params.sack_freq = 1;
2588 else
2589 params.sack_freq = 0;
2590 } else
cb3f837b 2591 return -EINVAL;
7708610b
FF
2592
2593 /* Validate value parameter. */
d364d927 2594 if (params.sack_delay > 500)
7708610b
FF
2595 return -EINVAL;
2596
d364d927 2597 /* Get association, if sack_assoc_id != 0 and the socket is a one
7708610b
FF
2598 * to many style socket, and an association was not found, then
2599 * the id was invalid.
d808ad9a 2600 */
d364d927
WY
2601 asoc = sctp_id2assoc(sk, params.sack_assoc_id);
2602 if (!asoc && params.sack_assoc_id && sctp_style(sk, UDP))
7708610b
FF
2603 return -EINVAL;
2604
d364d927 2605 if (params.sack_delay) {
7708610b
FF
2606 if (asoc) {
2607 asoc->sackdelay =
d364d927 2608 msecs_to_jiffies(params.sack_delay);
d808ad9a 2609 asoc->param_flags =
7708610b
FF
2610 (asoc->param_flags & ~SPP_SACKDELAY) |
2611 SPP_SACKDELAY_ENABLE;
2612 } else {
d364d927 2613 sp->sackdelay = params.sack_delay;
d808ad9a 2614 sp->param_flags =
7708610b
FF
2615 (sp->param_flags & ~SPP_SACKDELAY) |
2616 SPP_SACKDELAY_ENABLE;
2617 }
d364d927
WY
2618 }
2619
2620 if (params.sack_freq == 1) {
7708610b 2621 if (asoc) {
d808ad9a 2622 asoc->param_flags =
7708610b
FF
2623 (asoc->param_flags & ~SPP_SACKDELAY) |
2624 SPP_SACKDELAY_DISABLE;
2625 } else {
d808ad9a 2626 sp->param_flags =
7708610b
FF
2627 (sp->param_flags & ~SPP_SACKDELAY) |
2628 SPP_SACKDELAY_DISABLE;
2629 }
d364d927
WY
2630 } else if (params.sack_freq > 1) {
2631 if (asoc) {
2632 asoc->sackfreq = params.sack_freq;
2633 asoc->param_flags =
2634 (asoc->param_flags & ~SPP_SACKDELAY) |
2635 SPP_SACKDELAY_ENABLE;
2636 } else {
2637 sp->sackfreq = params.sack_freq;
2638 sp->param_flags =
2639 (sp->param_flags & ~SPP_SACKDELAY) |
2640 SPP_SACKDELAY_ENABLE;
2641 }
7708610b
FF
2642 }
2643
2644 /* If change is for association, also apply to each transport. */
2645 if (asoc) {
9dbc15f0
RD
2646 list_for_each_entry(trans, &asoc->peer.transport_addr_list,
2647 transports) {
d364d927 2648 if (params.sack_delay) {
7708610b 2649 trans->sackdelay =
d364d927 2650 msecs_to_jiffies(params.sack_delay);
d808ad9a 2651 trans->param_flags =
7708610b
FF
2652 (trans->param_flags & ~SPP_SACKDELAY) |
2653 SPP_SACKDELAY_ENABLE;
d364d927 2654 }
7bfe8bdb 2655 if (params.sack_freq == 1) {
d808ad9a 2656 trans->param_flags =
7708610b
FF
2657 (trans->param_flags & ~SPP_SACKDELAY) |
2658 SPP_SACKDELAY_DISABLE;
d364d927
WY
2659 } else if (params.sack_freq > 1) {
2660 trans->sackfreq = params.sack_freq;
2661 trans->param_flags =
2662 (trans->param_flags & ~SPP_SACKDELAY) |
2663 SPP_SACKDELAY_ENABLE;
7708610b
FF
2664 }
2665 }
2666 }
d808ad9a 2667
7708610b
FF
2668 return 0;
2669}
2670
1da177e4
LT
2671/* 7.1.3 Initialization Parameters (SCTP_INITMSG)
2672 *
2673 * Applications can specify protocol parameters for the default association
2674 * initialization. The option name argument to setsockopt() and getsockopt()
2675 * is SCTP_INITMSG.
2676 *
2677 * Setting initialization parameters is effective only on an unconnected
2678 * socket (for UDP-style sockets only future associations are effected
2679 * by the change). With TCP-style sockets, this option is inherited by
2680 * sockets derived from a listener socket.
2681 */
b7058842 2682static int sctp_setsockopt_initmsg(struct sock *sk, char __user *optval, unsigned int optlen)
1da177e4
LT
2683{
2684 struct sctp_initmsg sinit;
2685 struct sctp_sock *sp = sctp_sk(sk);
2686
2687 if (optlen != sizeof(struct sctp_initmsg))
2688 return -EINVAL;
2689 if (copy_from_user(&sinit, optval, optlen))
2690 return -EFAULT;
2691
2692 if (sinit.sinit_num_ostreams)
d808ad9a 2693 sp->initmsg.sinit_num_ostreams = sinit.sinit_num_ostreams;
1da177e4 2694 if (sinit.sinit_max_instreams)
d808ad9a 2695 sp->initmsg.sinit_max_instreams = sinit.sinit_max_instreams;
1da177e4 2696 if (sinit.sinit_max_attempts)
d808ad9a 2697 sp->initmsg.sinit_max_attempts = sinit.sinit_max_attempts;
1da177e4 2698 if (sinit.sinit_max_init_timeo)
d808ad9a 2699 sp->initmsg.sinit_max_init_timeo = sinit.sinit_max_init_timeo;
1da177e4
LT
2700
2701 return 0;
2702}
2703
2704/*
2705 * 7.1.14 Set default send parameters (SCTP_DEFAULT_SEND_PARAM)
2706 *
2707 * Applications that wish to use the sendto() system call may wish to
2708 * specify a default set of parameters that would normally be supplied
2709 * through the inclusion of ancillary data. This socket option allows
2710 * such an application to set the default sctp_sndrcvinfo structure.
2711 * The application that wishes to use this socket option simply passes
2712 * in to this call the sctp_sndrcvinfo structure defined in Section
2713 * 5.2.2) The input parameters accepted by this call include
2714 * sinfo_stream, sinfo_flags, sinfo_ppid, sinfo_context,
2715 * sinfo_timetolive. The user must provide the sinfo_assoc_id field in
2716 * to this call if the caller is using the UDP model.
2717 */
2718static int sctp_setsockopt_default_send_param(struct sock *sk,
b7058842
DM
2719 char __user *optval,
2720 unsigned int optlen)
1da177e4
LT
2721{
2722 struct sctp_sndrcvinfo info;
2723 struct sctp_association *asoc;
2724 struct sctp_sock *sp = sctp_sk(sk);
2725
2726 if (optlen != sizeof(struct sctp_sndrcvinfo))
2727 return -EINVAL;
2728 if (copy_from_user(&info, optval, optlen))
2729 return -EFAULT;
2730
2731 asoc = sctp_id2assoc(sk, info.sinfo_assoc_id);
2732 if (!asoc && info.sinfo_assoc_id && sctp_style(sk, UDP))
2733 return -EINVAL;
2734
2735 if (asoc) {
2736 asoc->default_stream = info.sinfo_stream;
2737 asoc->default_flags = info.sinfo_flags;
2738 asoc->default_ppid = info.sinfo_ppid;
2739 asoc->default_context = info.sinfo_context;
2740 asoc->default_timetolive = info.sinfo_timetolive;
2741 } else {
2742 sp->default_stream = info.sinfo_stream;
2743 sp->default_flags = info.sinfo_flags;
2744 sp->default_ppid = info.sinfo_ppid;
2745 sp->default_context = info.sinfo_context;
2746 sp->default_timetolive = info.sinfo_timetolive;
2747 }
2748
2749 return 0;
2750}
2751
2752/* 7.1.10 Set Primary Address (SCTP_PRIMARY_ADDR)
2753 *
2754 * Requests that the local SCTP stack use the enclosed peer address as
2755 * the association primary. The enclosed address must be one of the
2756 * association peer's addresses.
2757 */
2758static int sctp_setsockopt_primary_addr(struct sock *sk, char __user *optval,
b7058842 2759 unsigned int optlen)
1da177e4
LT
2760{
2761 struct sctp_prim prim;
2762 struct sctp_transport *trans;
2763
2764 if (optlen != sizeof(struct sctp_prim))
2765 return -EINVAL;
2766
2767 if (copy_from_user(&prim, optval, sizeof(struct sctp_prim)))
2768 return -EFAULT;
2769
2770 trans = sctp_addr_id2transport(sk, &prim.ssp_addr, prim.ssp_assoc_id);
2771 if (!trans)
2772 return -EINVAL;
2773
2774 sctp_assoc_set_primary(trans->asoc, trans);
2775
2776 return 0;
2777}
2778
2779/*
2780 * 7.1.5 SCTP_NODELAY
2781 *
2782 * Turn on/off any Nagle-like algorithm. This means that packets are
2783 * generally sent as soon as possible and no unnecessary delays are
2784 * introduced, at the cost of more packets in the network. Expects an
2785 * integer boolean flag.
2786 */
2787static int sctp_setsockopt_nodelay(struct sock *sk, char __user *optval,
b7058842 2788 unsigned int optlen)
1da177e4
LT
2789{
2790 int val;
2791
2792 if (optlen < sizeof(int))
2793 return -EINVAL;
2794 if (get_user(val, (int __user *)optval))
2795 return -EFAULT;
2796
2797 sctp_sk(sk)->nodelay = (val == 0) ? 0 : 1;
2798 return 0;
2799}
2800
2801/*
2802 *
2803 * 7.1.1 SCTP_RTOINFO
2804 *
2805 * The protocol parameters used to initialize and bound retransmission
2806 * timeout (RTO) are tunable. sctp_rtoinfo structure is used to access
2807 * and modify these parameters.
2808 * All parameters are time values, in milliseconds. A value of 0, when
2809 * modifying the parameters, indicates that the current value should not
2810 * be changed.
2811 *
2812 */
b7058842
DM
2813static int sctp_setsockopt_rtoinfo(struct sock *sk, char __user *optval, unsigned int optlen)
2814{
1da177e4
LT
2815 struct sctp_rtoinfo rtoinfo;
2816 struct sctp_association *asoc;
85f935d4 2817 unsigned long rto_min, rto_max;
2818 struct sctp_sock *sp = sctp_sk(sk);
1da177e4
LT
2819
2820 if (optlen != sizeof (struct sctp_rtoinfo))
2821 return -EINVAL;
2822
2823 if (copy_from_user(&rtoinfo, optval, optlen))
2824 return -EFAULT;
2825
2826 asoc = sctp_id2assoc(sk, rtoinfo.srto_assoc_id);
2827
2828 /* Set the values to the specific association */
2829 if (!asoc && rtoinfo.srto_assoc_id && sctp_style(sk, UDP))
2830 return -EINVAL;
2831
85f935d4 2832 rto_max = rtoinfo.srto_max;
2833 rto_min = rtoinfo.srto_min;
2834
2835 if (rto_max)
2836 rto_max = asoc ? msecs_to_jiffies(rto_max) : rto_max;
2837 else
2838 rto_max = asoc ? asoc->rto_max : sp->rtoinfo.srto_max;
2839
2840 if (rto_min)
2841 rto_min = asoc ? msecs_to_jiffies(rto_min) : rto_min;
2842 else
2843 rto_min = asoc ? asoc->rto_min : sp->rtoinfo.srto_min;
2844
2845 if (rto_min > rto_max)
2846 return -EINVAL;
2847
1da177e4
LT
2848 if (asoc) {
2849 if (rtoinfo.srto_initial != 0)
d808ad9a 2850 asoc->rto_initial =
1da177e4 2851 msecs_to_jiffies(rtoinfo.srto_initial);
85f935d4 2852 asoc->rto_max = rto_max;
2853 asoc->rto_min = rto_min;
1da177e4
LT
2854 } else {
2855 /* If there is no association or the association-id = 0
2856 * set the values to the endpoint.
2857 */
1da177e4
LT
2858 if (rtoinfo.srto_initial != 0)
2859 sp->rtoinfo.srto_initial = rtoinfo.srto_initial;
85f935d4 2860 sp->rtoinfo.srto_max = rto_max;
2861 sp->rtoinfo.srto_min = rto_min;
1da177e4
LT
2862 }
2863
2864 return 0;
2865}
2866
2867/*
2868 *
2869 * 7.1.2 SCTP_ASSOCINFO
2870 *
59c51591 2871 * This option is used to tune the maximum retransmission attempts
1da177e4
LT
2872 * of the association.
2873 * Returns an error if the new association retransmission value is
2874 * greater than the sum of the retransmission value of the peer.
2875 * See [SCTP] for more information.
2876 *
2877 */
b7058842 2878static int sctp_setsockopt_associnfo(struct sock *sk, char __user *optval, unsigned int optlen)
1da177e4
LT
2879{
2880
2881 struct sctp_assocparams assocparams;
2882 struct sctp_association *asoc;
2883
2884 if (optlen != sizeof(struct sctp_assocparams))
2885 return -EINVAL;
2886 if (copy_from_user(&assocparams, optval, optlen))
2887 return -EFAULT;
2888
2889 asoc = sctp_id2assoc(sk, assocparams.sasoc_assoc_id);
2890
2891 if (!asoc && assocparams.sasoc_assoc_id && sctp_style(sk, UDP))
2892 return -EINVAL;
2893
2894 /* Set the values to the specific association */
2895 if (asoc) {
402d68c4
VY
2896 if (assocparams.sasoc_asocmaxrxt != 0) {
2897 __u32 path_sum = 0;
2898 int paths = 0;
402d68c4
VY
2899 struct sctp_transport *peer_addr;
2900
9dbc15f0
RD
2901 list_for_each_entry(peer_addr, &asoc->peer.transport_addr_list,
2902 transports) {
402d68c4
VY
2903 path_sum += peer_addr->pathmaxrxt;
2904 paths++;
2905 }
2906
025dfdaf 2907 /* Only validate asocmaxrxt if we have more than
402d68c4
VY
2908 * one path/transport. We do this because path
2909 * retransmissions are only counted when we have more
2910 * then one path.
2911 */
2912 if (paths > 1 &&
2913 assocparams.sasoc_asocmaxrxt > path_sum)
2914 return -EINVAL;
2915
1da177e4 2916 asoc->max_retrans = assocparams.sasoc_asocmaxrxt;
402d68c4
VY
2917 }
2918
52db882f
DB
2919 if (assocparams.sasoc_cookie_life != 0)
2920 asoc->cookie_life = ms_to_ktime(assocparams.sasoc_cookie_life);
1da177e4
LT
2921 } else {
2922 /* Set the values to the endpoint */
2923 struct sctp_sock *sp = sctp_sk(sk);
2924
2925 if (assocparams.sasoc_asocmaxrxt != 0)
2926 sp->assocparams.sasoc_asocmaxrxt =
2927 assocparams.sasoc_asocmaxrxt;
2928 if (assocparams.sasoc_cookie_life != 0)
2929 sp->assocparams.sasoc_cookie_life =
2930 assocparams.sasoc_cookie_life;
2931 }
2932 return 0;
2933}
2934
2935/*
2936 * 7.1.16 Set/clear IPv4 mapped addresses (SCTP_I_WANT_MAPPED_V4_ADDR)
2937 *
2938 * This socket option is a boolean flag which turns on or off mapped V4
2939 * addresses. If this option is turned on and the socket is type
2940 * PF_INET6, then IPv4 addresses will be mapped to V6 representation.
2941 * If this option is turned off, then no mapping will be done of V4
2942 * addresses and a user will receive both PF_INET6 and PF_INET type
2943 * addresses on the socket.
2944 */
b7058842 2945static int sctp_setsockopt_mappedv4(struct sock *sk, char __user *optval, unsigned int optlen)
1da177e4
LT
2946{
2947 int val;
2948 struct sctp_sock *sp = sctp_sk(sk);
2949
2950 if (optlen < sizeof(int))
2951 return -EINVAL;
2952 if (get_user(val, (int __user *)optval))
2953 return -EFAULT;
2954 if (val)
2955 sp->v4mapped = 1;
2956 else
2957 sp->v4mapped = 0;
2958
2959 return 0;
2960}
2961
2962/*
e89c2095
WY
2963 * 8.1.16. Get or Set the Maximum Fragmentation Size (SCTP_MAXSEG)
2964 * This option will get or set the maximum size to put in any outgoing
2965 * SCTP DATA chunk. If a message is larger than this size it will be
1da177e4
LT
2966 * fragmented by SCTP into the specified size. Note that the underlying
2967 * SCTP implementation may fragment into smaller sized chunks when the
2968 * PMTU of the underlying association is smaller than the value set by
e89c2095
WY
2969 * the user. The default value for this option is '0' which indicates
2970 * the user is NOT limiting fragmentation and only the PMTU will effect
2971 * SCTP's choice of DATA chunk size. Note also that values set larger
2972 * than the maximum size of an IP datagram will effectively let SCTP
2973 * control fragmentation (i.e. the same as setting this option to 0).
2974 *
2975 * The following structure is used to access and modify this parameter:
2976 *
2977 * struct sctp_assoc_value {
2978 * sctp_assoc_t assoc_id;
2979 * uint32_t assoc_value;
2980 * };
2981 *
2982 * assoc_id: This parameter is ignored for one-to-one style sockets.
2983 * For one-to-many style sockets this parameter indicates which
2984 * association the user is performing an action upon. Note that if
2985 * this field's value is zero then the endpoints default value is
2986 * changed (effecting future associations only).
2987 * assoc_value: This parameter specifies the maximum size in bytes.
1da177e4 2988 */
b7058842 2989static int sctp_setsockopt_maxseg(struct sock *sk, char __user *optval, unsigned int optlen)
1da177e4 2990{
e89c2095 2991 struct sctp_assoc_value params;
1da177e4 2992 struct sctp_association *asoc;
1da177e4
LT
2993 struct sctp_sock *sp = sctp_sk(sk);
2994 int val;
2995
e89c2095 2996 if (optlen == sizeof(int)) {
145ce502
JP
2997 pr_warn("Use of int in maxseg socket option deprecated\n");
2998 pr_warn("Use struct sctp_assoc_value instead\n");
e89c2095
WY
2999 if (copy_from_user(&val, optval, optlen))
3000 return -EFAULT;
3001 params.assoc_id = 0;
3002 } else if (optlen == sizeof(struct sctp_assoc_value)) {
3003 if (copy_from_user(&params, optval, optlen))
3004 return -EFAULT;
3005 val = params.assoc_value;
3006 } else
1da177e4 3007 return -EINVAL;
e89c2095 3008
96a33998 3009 if ((val != 0) && ((val < 8) || (val > SCTP_MAX_CHUNK_LEN)))
1da177e4 3010 return -EINVAL;
1da177e4 3011
e89c2095
WY
3012 asoc = sctp_id2assoc(sk, params.assoc_id);
3013 if (!asoc && params.assoc_id && sctp_style(sk, UDP))
3014 return -EINVAL;
3015
3016 if (asoc) {
3017 if (val == 0) {
3018 val = asoc->pathmtu;
3019 val -= sp->pf->af->net_header_len;
3020 val -= sizeof(struct sctphdr) +
3021 sizeof(struct sctp_data_chunk);
3022 }
f68b2e05
VY
3023 asoc->user_frag = val;
3024 asoc->frag_point = sctp_frag_point(asoc, asoc->pathmtu);
e89c2095
WY
3025 } else {
3026 sp->user_frag = val;
1da177e4
LT
3027 }
3028
3029 return 0;
3030}
3031
3032
3033/*
3034 * 7.1.9 Set Peer Primary Address (SCTP_SET_PEER_PRIMARY_ADDR)
3035 *
3036 * Requests that the peer mark the enclosed address as the association
3037 * primary. The enclosed address must be one of the association's
3038 * locally bound addresses. The following structure is used to make a
3039 * set primary request:
3040 */
3041static int sctp_setsockopt_peer_primary_addr(struct sock *sk, char __user *optval,
b7058842 3042 unsigned int optlen)
1da177e4 3043{
e1fc3b14 3044 struct net *net = sock_net(sk);
1da177e4 3045 struct sctp_sock *sp;
1da177e4
LT
3046 struct sctp_association *asoc = NULL;
3047 struct sctp_setpeerprim prim;
3048 struct sctp_chunk *chunk;
40a01039 3049 struct sctp_af *af;
1da177e4
LT
3050 int err;
3051
3052 sp = sctp_sk(sk);
1da177e4 3053
e1fc3b14 3054 if (!net->sctp.addip_enable)
1da177e4
LT
3055 return -EPERM;
3056
3057 if (optlen != sizeof(struct sctp_setpeerprim))
3058 return -EINVAL;
3059
3060 if (copy_from_user(&prim, optval, optlen))
3061 return -EFAULT;
3062
3063 asoc = sctp_id2assoc(sk, prim.sspp_assoc_id);
d808ad9a 3064 if (!asoc)
1da177e4
LT
3065 return -EINVAL;
3066
3067 if (!asoc->peer.asconf_capable)
3068 return -EPERM;
3069
3070 if (asoc->peer.addip_disabled_mask & SCTP_PARAM_SET_PRIMARY)
3071 return -EPERM;
3072
3073 if (!sctp_state(asoc, ESTABLISHED))
3074 return -ENOTCONN;
3075
40a01039
WY
3076 af = sctp_get_af_specific(prim.sspp_addr.ss_family);
3077 if (!af)
3078 return -EINVAL;
3079
3080 if (!af->addr_valid((union sctp_addr *)&prim.sspp_addr, sp, NULL))
3081 return -EADDRNOTAVAIL;
3082
1da177e4
LT
3083 if (!sctp_assoc_lookup_laddr(asoc, (union sctp_addr *)&prim.sspp_addr))
3084 return -EADDRNOTAVAIL;
3085
3086 /* Create an ASCONF chunk with SET_PRIMARY parameter */
3087 chunk = sctp_make_asconf_set_prim(asoc,
3088 (union sctp_addr *)&prim.sspp_addr);
3089 if (!chunk)
3090 return -ENOMEM;
3091
3092 err = sctp_send_asconf(asoc, chunk);
3093
bb33381d 3094 pr_debug("%s: we set peer primary addr primitively\n", __func__);
1da177e4
LT
3095
3096 return err;
3097}
3098
0f3fffd8 3099static int sctp_setsockopt_adaptation_layer(struct sock *sk, char __user *optval,
b7058842 3100 unsigned int optlen)
1da177e4 3101{
0f3fffd8 3102 struct sctp_setadaptation adaptation;
1da177e4 3103
0f3fffd8 3104 if (optlen != sizeof(struct sctp_setadaptation))
1da177e4 3105 return -EINVAL;
0f3fffd8 3106 if (copy_from_user(&adaptation, optval, optlen))
1da177e4
LT
3107 return -EFAULT;
3108
0f3fffd8 3109 sctp_sk(sk)->adaptation_ind = adaptation.ssb_adaptation_ind;
1da177e4
LT
3110
3111 return 0;
3112}
3113
6ab792f5
ISJ
3114/*
3115 * 7.1.29. Set or Get the default context (SCTP_CONTEXT)
3116 *
3117 * The context field in the sctp_sndrcvinfo structure is normally only
3118 * used when a failed message is retrieved holding the value that was
3119 * sent down on the actual send call. This option allows the setting of
3120 * a default context on an association basis that will be received on
3121 * reading messages from the peer. This is especially helpful in the
3122 * one-2-many model for an application to keep some reference to an
3123 * internal state machine that is processing messages on the
3124 * association. Note that the setting of this value only effects
3125 * received messages from the peer and does not effect the value that is
3126 * saved with outbound messages.
3127 */
3128static int sctp_setsockopt_context(struct sock *sk, char __user *optval,
b7058842 3129 unsigned int optlen)
6ab792f5
ISJ
3130{
3131 struct sctp_assoc_value params;
3132 struct sctp_sock *sp;
3133 struct sctp_association *asoc;
3134
3135 if (optlen != sizeof(struct sctp_assoc_value))
3136 return -EINVAL;
3137 if (copy_from_user(&params, optval, optlen))
3138 return -EFAULT;
3139
3140 sp = sctp_sk(sk);
3141
3142 if (params.assoc_id != 0) {
3143 asoc = sctp_id2assoc(sk, params.assoc_id);
3144 if (!asoc)
3145 return -EINVAL;
3146 asoc->default_rcv_context = params.assoc_value;
3147 } else {
3148 sp->default_rcv_context = params.assoc_value;
3149 }
3150
3151 return 0;
3152}
3153
b6e1331f
VY
3154/*
3155 * 7.1.24. Get or set fragmented interleave (SCTP_FRAGMENT_INTERLEAVE)
3156 *
3157 * This options will at a minimum specify if the implementation is doing
3158 * fragmented interleave. Fragmented interleave, for a one to many
3159 * socket, is when subsequent calls to receive a message may return
3160 * parts of messages from different associations. Some implementations
3161 * may allow you to turn this value on or off. If so, when turned off,
3162 * no fragment interleave will occur (which will cause a head of line
3163 * blocking amongst multiple associations sharing the same one to many
3164 * socket). When this option is turned on, then each receive call may
3165 * come from a different association (thus the user must receive data
3166 * with the extended calls (e.g. sctp_recvmsg) to keep track of which
3167 * association each receive belongs to.
3168 *
3169 * This option takes a boolean value. A non-zero value indicates that
3170 * fragmented interleave is on. A value of zero indicates that
3171 * fragmented interleave is off.
3172 *
3173 * Note that it is important that an implementation that allows this
3174 * option to be turned on, have it off by default. Otherwise an unaware
3175 * application using the one to many model may become confused and act
3176 * incorrectly.
3177 */
3178static int sctp_setsockopt_fragment_interleave(struct sock *sk,
3179 char __user *optval,
b7058842 3180 unsigned int optlen)
b6e1331f
VY
3181{
3182 int val;
3183
3184 if (optlen != sizeof(int))
3185 return -EINVAL;
3186 if (get_user(val, (int __user *)optval))
3187 return -EFAULT;
3188
3189 sctp_sk(sk)->frag_interleave = (val == 0) ? 0 : 1;
3190
3191 return 0;
3192}
3193
d49d91d7 3194/*
8510b937 3195 * 8.1.21. Set or Get the SCTP Partial Delivery Point
d49d91d7 3196 * (SCTP_PARTIAL_DELIVERY_POINT)
8510b937 3197 *
d49d91d7
VY
3198 * This option will set or get the SCTP partial delivery point. This
3199 * point is the size of a message where the partial delivery API will be
3200 * invoked to help free up rwnd space for the peer. Setting this to a
8510b937 3201 * lower value will cause partial deliveries to happen more often. The
d49d91d7 3202 * calls argument is an integer that sets or gets the partial delivery
8510b937
WY
3203 * point. Note also that the call will fail if the user attempts to set
3204 * this value larger than the socket receive buffer size.
3205 *
3206 * Note that any single message having a length smaller than or equal to
3207 * the SCTP partial delivery point will be delivered in one single read
3208 * call as long as the user provided buffer is large enough to hold the
3209 * message.
d49d91d7
VY
3210 */
3211static int sctp_setsockopt_partial_delivery_point(struct sock *sk,
3212 char __user *optval,
b7058842 3213 unsigned int optlen)
d49d91d7
VY
3214{
3215 u32 val;
3216
3217 if (optlen != sizeof(u32))
3218 return -EINVAL;
3219 if (get_user(val, (int __user *)optval))
3220 return -EFAULT;
3221
8510b937
WY
3222 /* Note: We double the receive buffer from what the user sets
3223 * it to be, also initial rwnd is based on rcvbuf/2.
3224 */
3225 if (val > (sk->sk_rcvbuf >> 1))
3226 return -EINVAL;
3227
d49d91d7
VY
3228 sctp_sk(sk)->pd_point = val;
3229
3230 return 0; /* is this the right error code? */
3231}
3232
70331571
VY
3233/*
3234 * 7.1.28. Set or Get the maximum burst (SCTP_MAX_BURST)
3235 *
3236 * This option will allow a user to change the maximum burst of packets
3237 * that can be emitted by this association. Note that the default value
3238 * is 4, and some implementations may restrict this setting so that it
3239 * can only be lowered.
3240 *
3241 * NOTE: This text doesn't seem right. Do this on a socket basis with
3242 * future associations inheriting the socket value.
3243 */
3244static int sctp_setsockopt_maxburst(struct sock *sk,
3245 char __user *optval,
b7058842 3246 unsigned int optlen)
70331571 3247{
219b99a9
NH
3248 struct sctp_assoc_value params;
3249 struct sctp_sock *sp;
3250 struct sctp_association *asoc;
70331571 3251 int val;
219b99a9 3252 int assoc_id = 0;
70331571 3253
219b99a9 3254 if (optlen == sizeof(int)) {
145ce502
JP
3255 pr_warn("Use of int in max_burst socket option deprecated\n");
3256 pr_warn("Use struct sctp_assoc_value instead\n");
219b99a9
NH
3257 if (copy_from_user(&val, optval, optlen))
3258 return -EFAULT;
3259 } else if (optlen == sizeof(struct sctp_assoc_value)) {
3260 if (copy_from_user(&params, optval, optlen))
3261 return -EFAULT;
3262 val = params.assoc_value;
3263 assoc_id = params.assoc_id;
3264 } else
70331571
VY
3265 return -EINVAL;
3266
219b99a9
NH
3267 sp = sctp_sk(sk);
3268
3269 if (assoc_id != 0) {
3270 asoc = sctp_id2assoc(sk, assoc_id);
3271 if (!asoc)
3272 return -EINVAL;
3273 asoc->max_burst = val;
3274 } else
3275 sp->max_burst = val;
70331571
VY
3276
3277 return 0;
3278}
3279
65b07e5d
VY
3280/*
3281 * 7.1.18. Add a chunk that must be authenticated (SCTP_AUTH_CHUNK)
3282 *
3283 * This set option adds a chunk type that the user is requesting to be
3284 * received only in an authenticated way. Changes to the list of chunks
3285 * will only effect future associations on the socket.
3286 */
3287static int sctp_setsockopt_auth_chunk(struct sock *sk,
b7058842
DM
3288 char __user *optval,
3289 unsigned int optlen)
65b07e5d 3290{
e1fc3b14 3291 struct net *net = sock_net(sk);
65b07e5d
VY
3292 struct sctp_authchunk val;
3293
e1fc3b14 3294 if (!net->sctp.auth_enable)
5e739d17
VY
3295 return -EACCES;
3296
65b07e5d
VY
3297 if (optlen != sizeof(struct sctp_authchunk))
3298 return -EINVAL;
3299 if (copy_from_user(&val, optval, optlen))
3300 return -EFAULT;
3301
3302 switch (val.sauth_chunk) {
7fd71b1e
JP
3303 case SCTP_CID_INIT:
3304 case SCTP_CID_INIT_ACK:
3305 case SCTP_CID_SHUTDOWN_COMPLETE:
3306 case SCTP_CID_AUTH:
3307 return -EINVAL;
65b07e5d
VY
3308 }
3309
3310 /* add this chunk id to the endpoint */
3311 return sctp_auth_ep_add_chunkid(sctp_sk(sk)->ep, val.sauth_chunk);
3312}
3313
3314/*
3315 * 7.1.19. Get or set the list of supported HMAC Identifiers (SCTP_HMAC_IDENT)
3316 *
3317 * This option gets or sets the list of HMAC algorithms that the local
3318 * endpoint requires the peer to use.
3319 */
3320static int sctp_setsockopt_hmac_ident(struct sock *sk,
b7058842
DM
3321 char __user *optval,
3322 unsigned int optlen)
65b07e5d 3323{
e1fc3b14 3324 struct net *net = sock_net(sk);
65b07e5d 3325 struct sctp_hmacalgo *hmacs;
d9724055 3326 u32 idents;
65b07e5d
VY
3327 int err;
3328
e1fc3b14 3329 if (!net->sctp.auth_enable)
5e739d17
VY
3330 return -EACCES;
3331
65b07e5d
VY
3332 if (optlen < sizeof(struct sctp_hmacalgo))
3333 return -EINVAL;
3334
cb3f837b 3335 hmacs = memdup_user(optval, optlen);
934253a7
SW
3336 if (IS_ERR(hmacs))
3337 return PTR_ERR(hmacs);
65b07e5d 3338
d9724055
VY
3339 idents = hmacs->shmac_num_idents;
3340 if (idents == 0 || idents > SCTP_AUTH_NUM_HMACS ||
3341 (idents * sizeof(u16)) > (optlen - sizeof(struct sctp_hmacalgo))) {
65b07e5d
VY
3342 err = -EINVAL;
3343 goto out;
3344 }
3345
3346 err = sctp_auth_ep_set_hmacs(sctp_sk(sk)->ep, hmacs);
3347out:
3348 kfree(hmacs);
3349 return err;
3350}
3351
3352/*
3353 * 7.1.20. Set a shared key (SCTP_AUTH_KEY)
3354 *
3355 * This option will set a shared secret key which is used to build an
3356 * association shared key.
3357 */
3358static int sctp_setsockopt_auth_key(struct sock *sk,
3359 char __user *optval,
b7058842 3360 unsigned int optlen)
65b07e5d 3361{
e1fc3b14 3362 struct net *net = sock_net(sk);
65b07e5d
VY
3363 struct sctp_authkey *authkey;
3364 struct sctp_association *asoc;
3365 int ret;
3366
e1fc3b14 3367 if (!net->sctp.auth_enable)
5e739d17
VY
3368 return -EACCES;
3369
65b07e5d
VY
3370 if (optlen <= sizeof(struct sctp_authkey))
3371 return -EINVAL;
3372
cb3f837b 3373 authkey = memdup_user(optval, optlen);
934253a7
SW
3374 if (IS_ERR(authkey))
3375 return PTR_ERR(authkey);
65b07e5d 3376
328fc47e 3377 if (authkey->sca_keylength > optlen - sizeof(struct sctp_authkey)) {
30c2235c
VY
3378 ret = -EINVAL;
3379 goto out;
3380 }
3381
65b07e5d
VY
3382 asoc = sctp_id2assoc(sk, authkey->sca_assoc_id);
3383 if (!asoc && authkey->sca_assoc_id && sctp_style(sk, UDP)) {
3384 ret = -EINVAL;
3385 goto out;
3386 }
3387
3388 ret = sctp_auth_set_key(sctp_sk(sk)->ep, asoc, authkey);
3389out:
6ba542a2 3390 kzfree(authkey);
65b07e5d
VY
3391 return ret;
3392}
3393
3394/*
3395 * 7.1.21. Get or set the active shared key (SCTP_AUTH_ACTIVE_KEY)
3396 *
3397 * This option will get or set the active shared key to be used to build
3398 * the association shared key.
3399 */
3400static int sctp_setsockopt_active_key(struct sock *sk,
b7058842
DM
3401 char __user *optval,
3402 unsigned int optlen)
65b07e5d 3403{
e1fc3b14 3404 struct net *net = sock_net(sk);
65b07e5d
VY
3405 struct sctp_authkeyid val;
3406 struct sctp_association *asoc;
3407
e1fc3b14 3408 if (!net->sctp.auth_enable)
5e739d17
VY
3409 return -EACCES;
3410
65b07e5d
VY
3411 if (optlen != sizeof(struct sctp_authkeyid))
3412 return -EINVAL;
3413 if (copy_from_user(&val, optval, optlen))
3414 return -EFAULT;
3415
3416 asoc = sctp_id2assoc(sk, val.scact_assoc_id);
3417 if (!asoc && val.scact_assoc_id && sctp_style(sk, UDP))
3418 return -EINVAL;
3419
3420 return sctp_auth_set_active_key(sctp_sk(sk)->ep, asoc,
3421 val.scact_keynumber);
3422}
3423
3424/*
3425 * 7.1.22. Delete a shared key (SCTP_AUTH_DELETE_KEY)
3426 *
3427 * This set option will delete a shared secret key from use.
3428 */
3429static int sctp_setsockopt_del_key(struct sock *sk,
b7058842
DM
3430 char __user *optval,
3431 unsigned int optlen)
65b07e5d 3432{
e1fc3b14 3433 struct net *net = sock_net(sk);
65b07e5d
VY
3434 struct sctp_authkeyid val;
3435 struct sctp_association *asoc;
3436
e1fc3b14 3437 if (!net->sctp.auth_enable)
5e739d17
VY
3438 return -EACCES;
3439
65b07e5d
VY
3440 if (optlen != sizeof(struct sctp_authkeyid))
3441 return -EINVAL;
3442 if (copy_from_user(&val, optval, optlen))
3443 return -EFAULT;
3444
3445 asoc = sctp_id2assoc(sk, val.scact_assoc_id);
3446 if (!asoc && val.scact_assoc_id && sctp_style(sk, UDP))
3447 return -EINVAL;
3448
3449 return sctp_auth_del_key_id(sctp_sk(sk)->ep, asoc,
3450 val.scact_keynumber);
3451
3452}
3453
7dc04d71
MH
3454/*
3455 * 8.1.23 SCTP_AUTO_ASCONF
3456 *
3457 * This option will enable or disable the use of the automatic generation of
3458 * ASCONF chunks to add and delete addresses to an existing association. Note
3459 * that this option has two caveats namely: a) it only affects sockets that
3460 * are bound to all addresses available to the SCTP stack, and b) the system
3461 * administrator may have an overriding control that turns the ASCONF feature
3462 * off no matter what setting the socket option may have.
3463 * This option expects an integer boolean flag, where a non-zero value turns on
3464 * the option, and a zero value turns off the option.
3465 * Note. In this implementation, socket operation overrides default parameter
3466 * being set by sysctl as well as FreeBSD implementation
3467 */
3468static int sctp_setsockopt_auto_asconf(struct sock *sk, char __user *optval,
3469 unsigned int optlen)
3470{
3471 int val;
3472 struct sctp_sock *sp = sctp_sk(sk);
3473
3474 if (optlen < sizeof(int))
3475 return -EINVAL;
3476 if (get_user(val, (int __user *)optval))
3477 return -EFAULT;
3478 if (!sctp_is_ep_boundall(sk) && val)
3479 return -EINVAL;
3480 if ((val && sp->do_auto_asconf) || (!val && !sp->do_auto_asconf))
3481 return 0;
3482
3483 if (val == 0 && sp->do_auto_asconf) {
3484 list_del(&sp->auto_asconf_list);
3485 sp->do_auto_asconf = 0;
3486 } else if (val && !sp->do_auto_asconf) {
3487 list_add_tail(&sp->auto_asconf_list,
4db67e80 3488 &sock_net(sk)->sctp.auto_asconf_splist);
7dc04d71
MH
3489 sp->do_auto_asconf = 1;
3490 }
3491 return 0;
3492}
3493
65b07e5d 3494
5aa93bcf
NH
3495/*
3496 * SCTP_PEER_ADDR_THLDS
3497 *
3498 * This option allows us to alter the partially failed threshold for one or all
3499 * transports in an association. See Section 6.1 of:
3500 * http://www.ietf.org/id/draft-nishida-tsvwg-sctp-failover-05.txt
3501 */
3502static int sctp_setsockopt_paddr_thresholds(struct sock *sk,
3503 char __user *optval,
3504 unsigned int optlen)
3505{
3506 struct sctp_paddrthlds val;
3507 struct sctp_transport *trans;
3508 struct sctp_association *asoc;
3509
3510 if (optlen < sizeof(struct sctp_paddrthlds))
3511 return -EINVAL;
3512 if (copy_from_user(&val, (struct sctp_paddrthlds __user *)optval,
3513 sizeof(struct sctp_paddrthlds)))
3514 return -EFAULT;
3515
3516
3517 if (sctp_is_any(sk, (const union sctp_addr *)&val.spt_address)) {
3518 asoc = sctp_id2assoc(sk, val.spt_assoc_id);
3519 if (!asoc)
3520 return -ENOENT;
3521 list_for_each_entry(trans, &asoc->peer.transport_addr_list,
3522 transports) {
3523 if (val.spt_pathmaxrxt)
3524 trans->pathmaxrxt = val.spt_pathmaxrxt;
3525 trans->pf_retrans = val.spt_pathpfthld;
3526 }
3527
3528 if (val.spt_pathmaxrxt)
3529 asoc->pathmaxrxt = val.spt_pathmaxrxt;
3530 asoc->pf_retrans = val.spt_pathpfthld;
3531 } else {
3532 trans = sctp_addr_id2transport(sk, &val.spt_address,
3533 val.spt_assoc_id);
3534 if (!trans)
3535 return -ENOENT;
3536
3537 if (val.spt_pathmaxrxt)
3538 trans->pathmaxrxt = val.spt_pathmaxrxt;
3539 trans->pf_retrans = val.spt_pathpfthld;
3540 }
3541
3542 return 0;
3543}
3544
1da177e4
LT
3545/* API 6.2 setsockopt(), getsockopt()
3546 *
3547 * Applications use setsockopt() and getsockopt() to set or retrieve
3548 * socket options. Socket options are used to change the default
3549 * behavior of sockets calls. They are described in Section 7.
3550 *
3551 * The syntax is:
3552 *
3553 * ret = getsockopt(int sd, int level, int optname, void __user *optval,
3554 * int __user *optlen);
3555 * ret = setsockopt(int sd, int level, int optname, const void __user *optval,
3556 * int optlen);
3557 *
3558 * sd - the socket descript.
3559 * level - set to IPPROTO_SCTP for all SCTP options.
3560 * optname - the option name.
3561 * optval - the buffer to store the value of the option.
3562 * optlen - the size of the buffer.
3563 */
dda91928
DB
3564static int sctp_setsockopt(struct sock *sk, int level, int optname,
3565 char __user *optval, unsigned int optlen)
1da177e4
LT
3566{
3567 int retval = 0;
3568
bb33381d 3569 pr_debug("%s: sk:%p, optname:%d\n", __func__, sk, optname);
1da177e4
LT
3570
3571 /* I can hardly begin to describe how wrong this is. This is
3572 * so broken as to be worse than useless. The API draft
3573 * REALLY is NOT helpful here... I am not convinced that the
3574 * semantics of setsockopt() with a level OTHER THAN SOL_SCTP
3575 * are at all well-founded.
3576 */
3577 if (level != SOL_SCTP) {
3578 struct sctp_af *af = sctp_sk(sk)->pf->af;
3579 retval = af->setsockopt(sk, level, optname, optval, optlen);
3580 goto out_nounlock;
3581 }
3582
3583 sctp_lock_sock(sk);
3584
3585 switch (optname) {
3586 case SCTP_SOCKOPT_BINDX_ADD:
3587 /* 'optlen' is the size of the addresses buffer. */
3588 retval = sctp_setsockopt_bindx(sk, (struct sockaddr __user *)optval,
3589 optlen, SCTP_BINDX_ADD_ADDR);
3590 break;
3591
3592 case SCTP_SOCKOPT_BINDX_REM:
3593 /* 'optlen' is the size of the addresses buffer. */
3594 retval = sctp_setsockopt_bindx(sk, (struct sockaddr __user *)optval,
3595 optlen, SCTP_BINDX_REM_ADDR);
3596 break;
3597
88a0a948
VY
3598 case SCTP_SOCKOPT_CONNECTX_OLD:
3599 /* 'optlen' is the size of the addresses buffer. */
3600 retval = sctp_setsockopt_connectx_old(sk,
3601 (struct sockaddr __user *)optval,
3602 optlen);
3603 break;
3604
3f7a87d2
FF
3605 case SCTP_SOCKOPT_CONNECTX:
3606 /* 'optlen' is the size of the addresses buffer. */
88a0a948
VY
3607 retval = sctp_setsockopt_connectx(sk,
3608 (struct sockaddr __user *)optval,
3609 optlen);
3f7a87d2
FF
3610 break;
3611
1da177e4
LT
3612 case SCTP_DISABLE_FRAGMENTS:
3613 retval = sctp_setsockopt_disable_fragments(sk, optval, optlen);
3614 break;
3615
3616 case SCTP_EVENTS:
3617 retval = sctp_setsockopt_events(sk, optval, optlen);
3618 break;
3619
3620 case SCTP_AUTOCLOSE:
3621 retval = sctp_setsockopt_autoclose(sk, optval, optlen);
3622 break;
3623
3624 case SCTP_PEER_ADDR_PARAMS:
3625 retval = sctp_setsockopt_peer_addr_params(sk, optval, optlen);
3626 break;
3627
4580ccc0 3628 case SCTP_DELAYED_SACK:
d364d927 3629 retval = sctp_setsockopt_delayed_ack(sk, optval, optlen);
7708610b 3630 break;
d49d91d7
VY
3631 case SCTP_PARTIAL_DELIVERY_POINT:
3632 retval = sctp_setsockopt_partial_delivery_point(sk, optval, optlen);
3633 break;
7708610b 3634
1da177e4
LT
3635 case SCTP_INITMSG:
3636 retval = sctp_setsockopt_initmsg(sk, optval, optlen);
3637 break;
3638 case SCTP_DEFAULT_SEND_PARAM:
3639 retval = sctp_setsockopt_default_send_param(sk, optval,
3640 optlen);
3641 break;
3642 case SCTP_PRIMARY_ADDR:
3643 retval = sctp_setsockopt_primary_addr(sk, optval, optlen);
3644 break;
3645 case SCTP_SET_PEER_PRIMARY_ADDR:
3646 retval = sctp_setsockopt_peer_primary_addr(sk, optval, optlen);
3647 break;
3648 case SCTP_NODELAY:
3649 retval = sctp_setsockopt_nodelay(sk, optval, optlen);
3650 break;
3651 case SCTP_RTOINFO:
3652 retval = sctp_setsockopt_rtoinfo(sk, optval, optlen);
3653 break;
3654 case SCTP_ASSOCINFO:
3655 retval = sctp_setsockopt_associnfo(sk, optval, optlen);
3656 break;
3657 case SCTP_I_WANT_MAPPED_V4_ADDR:
3658 retval = sctp_setsockopt_mappedv4(sk, optval, optlen);
3659 break;
3660 case SCTP_MAXSEG:
3661 retval = sctp_setsockopt_maxseg(sk, optval, optlen);
3662 break;
0f3fffd8
ISJ
3663 case SCTP_ADAPTATION_LAYER:
3664 retval = sctp_setsockopt_adaptation_layer(sk, optval, optlen);
1da177e4 3665 break;
6ab792f5
ISJ
3666 case SCTP_CONTEXT:
3667 retval = sctp_setsockopt_context(sk, optval, optlen);
3668 break;
b6e1331f
VY
3669 case SCTP_FRAGMENT_INTERLEAVE:
3670 retval = sctp_setsockopt_fragment_interleave(sk, optval, optlen);
3671 break;
70331571
VY
3672 case SCTP_MAX_BURST:
3673 retval = sctp_setsockopt_maxburst(sk, optval, optlen);
3674 break;
65b07e5d
VY
3675 case SCTP_AUTH_CHUNK:
3676 retval = sctp_setsockopt_auth_chunk(sk, optval, optlen);
3677 break;
3678 case SCTP_HMAC_IDENT:
3679 retval = sctp_setsockopt_hmac_ident(sk, optval, optlen);
3680 break;
3681 case SCTP_AUTH_KEY:
3682 retval = sctp_setsockopt_auth_key(sk, optval, optlen);
3683 break;
3684 case SCTP_AUTH_ACTIVE_KEY:
3685 retval = sctp_setsockopt_active_key(sk, optval, optlen);
3686 break;
3687 case SCTP_AUTH_DELETE_KEY:
3688 retval = sctp_setsockopt_del_key(sk, optval, optlen);
3689 break;
7dc04d71
MH
3690 case SCTP_AUTO_ASCONF:
3691 retval = sctp_setsockopt_auto_asconf(sk, optval, optlen);
3692 break;
5aa93bcf
NH
3693 case SCTP_PEER_ADDR_THLDS:
3694 retval = sctp_setsockopt_paddr_thresholds(sk, optval, optlen);
3695 break;
1da177e4
LT
3696 default:
3697 retval = -ENOPROTOOPT;
3698 break;
3ff50b79 3699 }
1da177e4
LT
3700
3701 sctp_release_sock(sk);
3702
3703out_nounlock:
3704 return retval;
3705}
3706
3707/* API 3.1.6 connect() - UDP Style Syntax
3708 *
3709 * An application may use the connect() call in the UDP model to initiate an
3710 * association without sending data.
3711 *
3712 * The syntax is:
3713 *
3714 * ret = connect(int sd, const struct sockaddr *nam, socklen_t len);
3715 *
3716 * sd: the socket descriptor to have a new association added to.
3717 *
3718 * nam: the address structure (either struct sockaddr_in or struct
3719 * sockaddr_in6 defined in RFC2553 [7]).
3720 *
3721 * len: the size of the address.
3722 */
dda91928
DB
3723static int sctp_connect(struct sock *sk, struct sockaddr *addr,
3724 int addr_len)
1da177e4 3725{
1da177e4 3726 int err = 0;
3f7a87d2 3727 struct sctp_af *af;
1da177e4
LT
3728
3729 sctp_lock_sock(sk);
3730
bb33381d
DB
3731 pr_debug("%s: sk:%p, sockaddr:%p, addr_len:%d\n", __func__, sk,
3732 addr, addr_len);
1da177e4 3733
3f7a87d2
FF
3734 /* Validate addr_len before calling common connect/connectx routine. */
3735 af = sctp_get_af_specific(addr->sa_family);
3736 if (!af || addr_len < af->sockaddr_len) {
3737 err = -EINVAL;
3738 } else {
3739 /* Pass correct addr len to common routine (so it knows there
3740 * is only one address being passed.
3741 */
88a0a948 3742 err = __sctp_connect(sk, addr, af->sockaddr_len, NULL);
1da177e4
LT
3743 }
3744
1da177e4 3745 sctp_release_sock(sk);
1da177e4
LT
3746 return err;
3747}
3748
3749/* FIXME: Write comments. */
dda91928 3750static int sctp_disconnect(struct sock *sk, int flags)
1da177e4
LT
3751{
3752 return -EOPNOTSUPP; /* STUB */
3753}
3754
3755/* 4.1.4 accept() - TCP Style Syntax
3756 *
3757 * Applications use accept() call to remove an established SCTP
3758 * association from the accept queue of the endpoint. A new socket
3759 * descriptor will be returned from accept() to represent the newly
3760 * formed association.
3761 */
dda91928 3762static struct sock *sctp_accept(struct sock *sk, int flags, int *err)
1da177e4
LT
3763{
3764 struct sctp_sock *sp;
3765 struct sctp_endpoint *ep;
3766 struct sock *newsk = NULL;
3767 struct sctp_association *asoc;
3768 long timeo;
3769 int error = 0;
3770
3771 sctp_lock_sock(sk);
3772
3773 sp = sctp_sk(sk);
3774 ep = sp->ep;
3775
3776 if (!sctp_style(sk, TCP)) {
3777 error = -EOPNOTSUPP;
3778 goto out;
3779 }
3780
3781 if (!sctp_sstate(sk, LISTENING)) {
3782 error = -EINVAL;
3783 goto out;
3784 }
3785
8abfedd8 3786 timeo = sock_rcvtimeo(sk, flags & O_NONBLOCK);
1da177e4
LT
3787
3788 error = sctp_wait_for_accept(sk, timeo);
3789 if (error)
3790 goto out;
3791
3792 /* We treat the list of associations on the endpoint as the accept
3793 * queue and pick the first association on the list.
3794 */
3795 asoc = list_entry(ep->asocs.next, struct sctp_association, asocs);
3796
3797 newsk = sp->pf->create_accept_sk(sk, asoc);
3798 if (!newsk) {
3799 error = -ENOMEM;
3800 goto out;
3801 }
3802
3803 /* Populate the fields of the newsk from the oldsk and migrate the
3804 * asoc to the newsk.
3805 */
3806 sctp_sock_migrate(sk, newsk, asoc, SCTP_SOCKET_TCP);
3807
3808out:
3809 sctp_release_sock(sk);
d808ad9a 3810 *err = error;
1da177e4
LT
3811 return newsk;
3812}
3813
3814/* The SCTP ioctl handler. */
dda91928 3815static int sctp_ioctl(struct sock *sk, int cmd, unsigned long arg)
1da177e4 3816{
65040c33
DEFP
3817 int rc = -ENOTCONN;
3818
3819 sctp_lock_sock(sk);
3820
3821 /*
3822 * SEQPACKET-style sockets in LISTENING state are valid, for
3823 * SCTP, so only discard TCP-style sockets in LISTENING state.
3824 */
3825 if (sctp_style(sk, TCP) && sctp_sstate(sk, LISTENING))
3826 goto out;
3827
3828 switch (cmd) {
3829 case SIOCINQ: {
3830 struct sk_buff *skb;
3831 unsigned int amount = 0;
3832
3833 skb = skb_peek(&sk->sk_receive_queue);
3834 if (skb != NULL) {
3835 /*
3836 * We will only return the amount of this packet since
3837 * that is all that will be read.
3838 */
3839 amount = skb->len;
3840 }
3841 rc = put_user(amount, (int __user *)arg);
65040c33 3842 break;
9a7241c2 3843 }
65040c33
DEFP
3844 default:
3845 rc = -ENOIOCTLCMD;
3846 break;
3847 }
3848out:
3849 sctp_release_sock(sk);
3850 return rc;
1da177e4
LT
3851}
3852
3853/* This is the function which gets called during socket creation to
3854 * initialized the SCTP-specific portion of the sock.
3855 * The sock structure should already be zero-filled memory.
3856 */
dda91928 3857static int sctp_init_sock(struct sock *sk)
1da177e4 3858{
e1fc3b14 3859 struct net *net = sock_net(sk);
1da177e4
LT
3860 struct sctp_sock *sp;
3861
bb33381d 3862 pr_debug("%s: sk:%p\n", __func__, sk);
1da177e4
LT
3863
3864 sp = sctp_sk(sk);
3865
3866 /* Initialize the SCTP per socket area. */
3867 switch (sk->sk_type) {
3868 case SOCK_SEQPACKET:
3869 sp->type = SCTP_SOCKET_UDP;
3870 break;
3871 case SOCK_STREAM:
3872 sp->type = SCTP_SOCKET_TCP;
3873 break;
3874 default:
3875 return -ESOCKTNOSUPPORT;
3876 }
3877
3878 /* Initialize default send parameters. These parameters can be
3879 * modified with the SCTP_DEFAULT_SEND_PARAM socket option.
3880 */
3881 sp->default_stream = 0;
3882 sp->default_ppid = 0;
3883 sp->default_flags = 0;
3884 sp->default_context = 0;
3885 sp->default_timetolive = 0;
3886
6ab792f5 3887 sp->default_rcv_context = 0;
e1fc3b14 3888 sp->max_burst = net->sctp.max_burst;
6ab792f5 3889
3c68198e
NH
3890 sp->sctp_hmac_alg = net->sctp.sctp_hmac_alg;
3891
1da177e4
LT
3892 /* Initialize default setup parameters. These parameters
3893 * can be modified with the SCTP_INITMSG socket option or
3894 * overridden by the SCTP_INIT CMSG.
3895 */
3896 sp->initmsg.sinit_num_ostreams = sctp_max_outstreams;
3897 sp->initmsg.sinit_max_instreams = sctp_max_instreams;
e1fc3b14
EB
3898 sp->initmsg.sinit_max_attempts = net->sctp.max_retrans_init;
3899 sp->initmsg.sinit_max_init_timeo = net->sctp.rto_max;
1da177e4
LT
3900
3901 /* Initialize default RTO related parameters. These parameters can
3902 * be modified for with the SCTP_RTOINFO socket option.
3903 */
e1fc3b14
EB
3904 sp->rtoinfo.srto_initial = net->sctp.rto_initial;
3905 sp->rtoinfo.srto_max = net->sctp.rto_max;
3906 sp->rtoinfo.srto_min = net->sctp.rto_min;
1da177e4
LT
3907
3908 /* Initialize default association related parameters. These parameters
3909 * can be modified with the SCTP_ASSOCINFO socket option.
3910 */
e1fc3b14 3911 sp->assocparams.sasoc_asocmaxrxt = net->sctp.max_retrans_association;
1da177e4
LT
3912 sp->assocparams.sasoc_number_peer_destinations = 0;
3913 sp->assocparams.sasoc_peer_rwnd = 0;
3914 sp->assocparams.sasoc_local_rwnd = 0;
e1fc3b14 3915 sp->assocparams.sasoc_cookie_life = net->sctp.valid_cookie_life;
1da177e4
LT
3916
3917 /* Initialize default event subscriptions. By default, all the
d808ad9a 3918 * options are off.
1da177e4
LT
3919 */
3920 memset(&sp->subscribe, 0, sizeof(struct sctp_event_subscribe));
3921
3922 /* Default Peer Address Parameters. These defaults can
3923 * be modified via SCTP_PEER_ADDR_PARAMS
3924 */
e1fc3b14
EB
3925 sp->hbinterval = net->sctp.hb_interval;
3926 sp->pathmaxrxt = net->sctp.max_retrans_path;
52ccb8e9 3927 sp->pathmtu = 0; // allow default discovery
e1fc3b14 3928 sp->sackdelay = net->sctp.sack_timeout;
7bfe8bdb 3929 sp->sackfreq = 2;
52ccb8e9 3930 sp->param_flags = SPP_HB_ENABLE |
d808ad9a
YH
3931 SPP_PMTUD_ENABLE |
3932 SPP_SACKDELAY_ENABLE;
1da177e4
LT
3933
3934 /* If enabled no SCTP message fragmentation will be performed.
3935 * Configure through SCTP_DISABLE_FRAGMENTS socket option.
3936 */
3937 sp->disable_fragments = 0;
3938
208edef6
SS
3939 /* Enable Nagle algorithm by default. */
3940 sp->nodelay = 0;
1da177e4
LT
3941
3942 /* Enable by default. */
3943 sp->v4mapped = 1;
3944
3945 /* Auto-close idle associations after the configured
3946 * number of seconds. A value of 0 disables this
3947 * feature. Configure through the SCTP_AUTOCLOSE socket option,
3948 * for UDP-style sockets only.
3949 */
3950 sp->autoclose = 0;
3951
3952 /* User specified fragmentation limit. */
3953 sp->user_frag = 0;
3954
0f3fffd8 3955 sp->adaptation_ind = 0;
1da177e4
LT
3956
3957 sp->pf = sctp_get_pf_specific(sk->sk_family);
3958
3959 /* Control variables for partial data delivery. */
b6e1331f 3960 atomic_set(&sp->pd_mode, 0);
1da177e4 3961 skb_queue_head_init(&sp->pd_lobby);
b6e1331f 3962 sp->frag_interleave = 0;
1da177e4
LT
3963
3964 /* Create a per socket endpoint structure. Even if we
3965 * change the data structure relationships, this may still
3966 * be useful for storing pre-connect address information.
3967 */
c164b838
DB
3968 sp->ep = sctp_endpoint_new(sk, GFP_KERNEL);
3969 if (!sp->ep)
1da177e4
LT
3970 return -ENOMEM;
3971
1da177e4
LT
3972 sp->hmac = NULL;
3973
0a2fbac1
DB
3974 sk->sk_destruct = sctp_destruct_sock;
3975
1da177e4 3976 SCTP_DBG_OBJCNT_INC(sock);
6f756a8c
DM
3977
3978 local_bh_disable();
81419d86 3979 percpu_counter_inc(&sctp_sockets_allocated);
e1fc3b14
EB
3980 sock_prot_inuse_add(net, sk->sk_prot, 1);
3981 if (net->sctp.default_auto_asconf) {
9f7d653b 3982 list_add_tail(&sp->auto_asconf_list,
e1fc3b14 3983 &net->sctp.auto_asconf_splist);
9f7d653b
MH
3984 sp->do_auto_asconf = 1;
3985 } else
3986 sp->do_auto_asconf = 0;
6f756a8c
DM
3987 local_bh_enable();
3988
1da177e4
LT
3989 return 0;
3990}
3991
3992/* Cleanup any SCTP per socket resources. */
dda91928 3993static void sctp_destroy_sock(struct sock *sk)
1da177e4 3994{
9f7d653b 3995 struct sctp_sock *sp;
1da177e4 3996
bb33381d 3997 pr_debug("%s: sk:%p\n", __func__, sk);
1da177e4
LT
3998
3999 /* Release our hold on the endpoint. */
9f7d653b 4000 sp = sctp_sk(sk);
1abd165e
DB
4001 /* This could happen during socket init, thus we bail out
4002 * early, since the rest of the below is not setup either.
4003 */
4004 if (sp->ep == NULL)
4005 return;
4006
9f7d653b
MH
4007 if (sp->do_auto_asconf) {
4008 sp->do_auto_asconf = 0;
4009 list_del(&sp->auto_asconf_list);
4010 }
4011 sctp_endpoint_free(sp->ep);
5bc0b3bf 4012 local_bh_disable();
81419d86 4013 percpu_counter_dec(&sctp_sockets_allocated);
9a57f7fa 4014 sock_prot_inuse_add(sock_net(sk), sk->sk_prot, -1);
5bc0b3bf 4015 local_bh_enable();
1da177e4
LT
4016}
4017
0a2fbac1
DB
4018/* Triggered when there are no references on the socket anymore */
4019static void sctp_destruct_sock(struct sock *sk)
4020{
4021 struct sctp_sock *sp = sctp_sk(sk);
4022
4023 /* Free up the HMAC transform. */
4024 crypto_free_hash(sp->hmac);
4025
4026 inet_sock_destruct(sk);
4027}
4028
1da177e4
LT
4029/* API 4.1.7 shutdown() - TCP Style Syntax
4030 * int shutdown(int socket, int how);
4031 *
4032 * sd - the socket descriptor of the association to be closed.
4033 * how - Specifies the type of shutdown. The values are
4034 * as follows:
4035 * SHUT_RD
4036 * Disables further receive operations. No SCTP
4037 * protocol action is taken.
4038 * SHUT_WR
4039 * Disables further send operations, and initiates
4040 * the SCTP shutdown sequence.
4041 * SHUT_RDWR
4042 * Disables further send and receive operations
4043 * and initiates the SCTP shutdown sequence.
4044 */
dda91928 4045static void sctp_shutdown(struct sock *sk, int how)
1da177e4 4046{
55e26eb9 4047 struct net *net = sock_net(sk);
1da177e4
LT
4048 struct sctp_endpoint *ep;
4049 struct sctp_association *asoc;
4050
4051 if (!sctp_style(sk, TCP))
4052 return;
4053
4054 if (how & SEND_SHUTDOWN) {
4055 ep = sctp_sk(sk)->ep;
4056 if (!list_empty(&ep->asocs)) {
4057 asoc = list_entry(ep->asocs.next,
4058 struct sctp_association, asocs);
55e26eb9 4059 sctp_primitive_SHUTDOWN(net, asoc, NULL);
1da177e4
LT
4060 }
4061 }
4062}
4063
4064/* 7.2.1 Association Status (SCTP_STATUS)
4065
4066 * Applications can retrieve current status information about an
4067 * association, including association state, peer receiver window size,
4068 * number of unacked data chunks, and number of data chunks pending
4069 * receipt. This information is read-only.
4070 */
4071static int sctp_getsockopt_sctp_status(struct sock *sk, int len,
4072 char __user *optval,
4073 int __user *optlen)
4074{
4075 struct sctp_status status;
4076 struct sctp_association *asoc = NULL;
4077 struct sctp_transport *transport;
4078 sctp_assoc_t associd;
4079 int retval = 0;
4080
408f22e8 4081 if (len < sizeof(status)) {
1da177e4
LT
4082 retval = -EINVAL;
4083 goto out;
4084 }
4085
408f22e8
NH
4086 len = sizeof(status);
4087 if (copy_from_user(&status, optval, len)) {
1da177e4
LT
4088 retval = -EFAULT;
4089 goto out;
4090 }
4091
4092 associd = status.sstat_assoc_id;
4093 asoc = sctp_id2assoc(sk, associd);
4094 if (!asoc) {
4095 retval = -EINVAL;
4096 goto out;
4097 }
4098
4099 transport = asoc->peer.primary_path;
4100
4101 status.sstat_assoc_id = sctp_assoc2id(asoc);
4102 status.sstat_state = asoc->state;
4103 status.sstat_rwnd = asoc->peer.rwnd;
4104 status.sstat_unackdata = asoc->unack_data;
4105
4106 status.sstat_penddata = sctp_tsnmap_pending(&asoc->peer.tsn_map);
4107 status.sstat_instrms = asoc->c.sinit_max_instreams;
4108 status.sstat_outstrms = asoc->c.sinit_num_ostreams;
4109 status.sstat_fragmentation_point = asoc->frag_point;
4110 status.sstat_primary.spinfo_assoc_id = sctp_assoc2id(transport->asoc);
8cec6b80
AV
4111 memcpy(&status.sstat_primary.spinfo_address, &transport->ipaddr,
4112 transport->af_specific->sockaddr_len);
1da177e4
LT
4113 /* Map ipv4 address into v4-mapped-on-v6 address. */
4114 sctp_get_pf_specific(sk->sk_family)->addr_v4map(sctp_sk(sk),
4115 (union sctp_addr *)&status.sstat_primary.spinfo_address);
3f7a87d2 4116 status.sstat_primary.spinfo_state = transport->state;
1da177e4
LT
4117 status.sstat_primary.spinfo_cwnd = transport->cwnd;
4118 status.sstat_primary.spinfo_srtt = transport->srtt;
4119 status.sstat_primary.spinfo_rto = jiffies_to_msecs(transport->rto);
52ccb8e9 4120 status.sstat_primary.spinfo_mtu = transport->pathmtu;
1da177e4 4121
3f7a87d2
FF
4122 if (status.sstat_primary.spinfo_state == SCTP_UNKNOWN)
4123 status.sstat_primary.spinfo_state = SCTP_ACTIVE;
4124
1da177e4
LT
4125 if (put_user(len, optlen)) {
4126 retval = -EFAULT;
4127 goto out;
4128 }
4129
bb33381d
DB
4130 pr_debug("%s: len:%d, state:%d, rwnd:%d, assoc_id:%d\n",
4131 __func__, len, status.sstat_state, status.sstat_rwnd,
4132 status.sstat_assoc_id);
1da177e4
LT
4133
4134 if (copy_to_user(optval, &status, len)) {
4135 retval = -EFAULT;
4136 goto out;
4137 }
4138
4139out:
a02cec21 4140 return retval;
1da177e4
LT
4141}
4142
4143
4144/* 7.2.2 Peer Address Information (SCTP_GET_PEER_ADDR_INFO)
4145 *
4146 * Applications can retrieve information about a specific peer address
4147 * of an association, including its reachability state, congestion
4148 * window, and retransmission timer values. This information is
4149 * read-only.
4150 */
4151static int sctp_getsockopt_peer_addr_info(struct sock *sk, int len,
4152 char __user *optval,
4153 int __user *optlen)
4154{
4155 struct sctp_paddrinfo pinfo;
4156 struct sctp_transport *transport;
4157 int retval = 0;
4158
408f22e8 4159 if (len < sizeof(pinfo)) {
1da177e4
LT
4160 retval = -EINVAL;
4161 goto out;
4162 }
4163
408f22e8
NH
4164 len = sizeof(pinfo);
4165 if (copy_from_user(&pinfo, optval, len)) {
1da177e4
LT
4166 retval = -EFAULT;
4167 goto out;
4168 }
4169
4170 transport = sctp_addr_id2transport(sk, &pinfo.spinfo_address,
4171 pinfo.spinfo_assoc_id);
4172 if (!transport)
4173 return -EINVAL;
4174
4175 pinfo.spinfo_assoc_id = sctp_assoc2id(transport->asoc);
3f7a87d2 4176 pinfo.spinfo_state = transport->state;
1da177e4
LT
4177 pinfo.spinfo_cwnd = transport->cwnd;
4178 pinfo.spinfo_srtt = transport->srtt;
4179 pinfo.spinfo_rto = jiffies_to_msecs(transport->rto);
52ccb8e9 4180 pinfo.spinfo_mtu = transport->pathmtu;
1da177e4 4181
3f7a87d2
FF
4182 if (pinfo.spinfo_state == SCTP_UNKNOWN)
4183 pinfo.spinfo_state = SCTP_ACTIVE;
4184
1da177e4
LT
4185 if (put_user(len, optlen)) {
4186 retval = -EFAULT;
4187 goto out;
4188 }
4189
4190 if (copy_to_user(optval, &pinfo, len)) {
4191 retval = -EFAULT;
4192 goto out;
4193 }
4194
4195out:
a02cec21 4196 return retval;
1da177e4
LT
4197}
4198
4199/* 7.1.12 Enable/Disable message fragmentation (SCTP_DISABLE_FRAGMENTS)
4200 *
4201 * This option is a on/off flag. If enabled no SCTP message
4202 * fragmentation will be performed. Instead if a message being sent
4203 * exceeds the current PMTU size, the message will NOT be sent and
4204 * instead a error will be indicated to the user.
4205 */
4206static int sctp_getsockopt_disable_fragments(struct sock *sk, int len,
4207 char __user *optval, int __user *optlen)
4208{
4209 int val;
4210
4211 if (len < sizeof(int))
4212 return -EINVAL;
4213
4214 len = sizeof(int);
4215 val = (sctp_sk(sk)->disable_fragments == 1);
4216 if (put_user(len, optlen))
4217 return -EFAULT;
4218 if (copy_to_user(optval, &val, len))
4219 return -EFAULT;
4220 return 0;
4221}
4222
4223/* 7.1.15 Set notification and ancillary events (SCTP_EVENTS)
4224 *
4225 * This socket option is used to specify various notifications and
4226 * ancillary data the user wishes to receive.
4227 */
4228static int sctp_getsockopt_events(struct sock *sk, int len, char __user *optval,
4229 int __user *optlen)
4230{
acdd5985 4231 if (len <= 0)
1da177e4 4232 return -EINVAL;
acdd5985
TG
4233 if (len > sizeof(struct sctp_event_subscribe))
4234 len = sizeof(struct sctp_event_subscribe);
408f22e8
NH
4235 if (put_user(len, optlen))
4236 return -EFAULT;
1da177e4
LT
4237 if (copy_to_user(optval, &sctp_sk(sk)->subscribe, len))
4238 return -EFAULT;
4239 return 0;
4240}
4241
4242/* 7.1.8 Automatic Close of associations (SCTP_AUTOCLOSE)
4243 *
4244 * This socket option is applicable to the UDP-style socket only. When
4245 * set it will cause associations that are idle for more than the
4246 * specified number of seconds to automatically close. An association
4247 * being idle is defined an association that has NOT sent or received
4248 * user data. The special value of '0' indicates that no automatic
4249 * close of any associations should be performed. The option expects an
4250 * integer defining the number of seconds of idle time before an
4251 * association is closed.
4252 */
4253static int sctp_getsockopt_autoclose(struct sock *sk, int len, char __user *optval, int __user *optlen)
4254{
4255 /* Applicable to UDP-style socket only */
4256 if (sctp_style(sk, TCP))
4257 return -EOPNOTSUPP;
408f22e8 4258 if (len < sizeof(int))
1da177e4 4259 return -EINVAL;
408f22e8
NH
4260 len = sizeof(int);
4261 if (put_user(len, optlen))
4262 return -EFAULT;
4263 if (copy_to_user(optval, &sctp_sk(sk)->autoclose, sizeof(int)))
1da177e4
LT
4264 return -EFAULT;
4265 return 0;
4266}
4267
4268/* Helper routine to branch off an association to a new socket. */
0343c554 4269int sctp_do_peeloff(struct sock *sk, sctp_assoc_t id, struct socket **sockp)
1da177e4 4270{
0343c554 4271 struct sctp_association *asoc = sctp_id2assoc(sk, id);
1da177e4 4272 struct socket *sock;
d570ee49 4273 struct sctp_af *af;
1da177e4
LT
4274 int err = 0;
4275
0343c554
BP
4276 if (!asoc)
4277 return -EINVAL;
4278
1da177e4
LT
4279 /* An association cannot be branched off from an already peeled-off
4280 * socket, nor is this supported for tcp style sockets.
4281 */
4282 if (!sctp_style(sk, UDP))
4283 return -EINVAL;
4284
4285 /* Create a new socket. */
4286 err = sock_create(sk->sk_family, SOCK_SEQPACKET, IPPROTO_SCTP, &sock);
4287 if (err < 0)
4288 return err;
4289
914e1c8b 4290 sctp_copy_sock(sock->sk, sk, asoc);
4f444308
VY
4291
4292 /* Make peeled-off sockets more like 1-1 accepted sockets.
4293 * Set the daddr and initialize id to something more random
4294 */
d570ee49
VY
4295 af = sctp_get_af_specific(asoc->peer.primary_addr.sa.sa_family);
4296 af->to_sk_daddr(&asoc->peer.primary_addr, sk);
914e1c8b
VY
4297
4298 /* Populate the fields of the newsk from the oldsk and migrate the
4299 * asoc to the newsk.
4300 */
4301 sctp_sock_migrate(sk, sock->sk, asoc, SCTP_SOCKET_UDP_HIGH_BANDWIDTH);
4f444308 4302
1da177e4
LT
4303 *sockp = sock;
4304
4305 return err;
4306}
0343c554 4307EXPORT_SYMBOL(sctp_do_peeloff);
1da177e4
LT
4308
4309static int sctp_getsockopt_peeloff(struct sock *sk, int len, char __user *optval, int __user *optlen)
4310{
4311 sctp_peeloff_arg_t peeloff;
4312 struct socket *newsock;
56b31d1c 4313 struct file *newfile;
1da177e4 4314 int retval = 0;
1da177e4 4315
408f22e8 4316 if (len < sizeof(sctp_peeloff_arg_t))
1da177e4 4317 return -EINVAL;
408f22e8 4318 len = sizeof(sctp_peeloff_arg_t);
1da177e4
LT
4319 if (copy_from_user(&peeloff, optval, len))
4320 return -EFAULT;
4321
0343c554 4322 retval = sctp_do_peeloff(sk, peeloff.associd, &newsock);
1da177e4
LT
4323 if (retval < 0)
4324 goto out;
4325
4326 /* Map the socket to an unused fd that can be returned to the user. */
8a59bd3e 4327 retval = get_unused_fd_flags(0);
1da177e4
LT
4328 if (retval < 0) {
4329 sock_release(newsock);
4330 goto out;
4331 }
4332
aab174f0 4333 newfile = sock_alloc_file(newsock, 0, NULL);
56b31d1c
AV
4334 if (unlikely(IS_ERR(newfile))) {
4335 put_unused_fd(retval);
4336 sock_release(newsock);
4337 return PTR_ERR(newfile);
4338 }
4339
bb33381d
DB
4340 pr_debug("%s: sk:%p, newsk:%p, sd:%d\n", __func__, sk, newsock->sk,
4341 retval);
1da177e4
LT
4342
4343 /* Return the fd mapped to the new socket. */
56b31d1c
AV
4344 if (put_user(len, optlen)) {
4345 fput(newfile);
4346 put_unused_fd(retval);
4347 return -EFAULT;
4348 }
1da177e4 4349 peeloff.sd = retval;
56b31d1c
AV
4350 if (copy_to_user(optval, &peeloff, len)) {
4351 fput(newfile);
4352 put_unused_fd(retval);
408f22e8 4353 return -EFAULT;
56b31d1c
AV
4354 }
4355 fd_install(retval, newfile);
1da177e4
LT
4356out:
4357 return retval;
4358}
4359
4360/* 7.1.13 Peer Address Parameters (SCTP_PEER_ADDR_PARAMS)
4361 *
4362 * Applications can enable or disable heartbeats for any peer address of
4363 * an association, modify an address's heartbeat interval, force a
4364 * heartbeat to be sent immediately, and adjust the address's maximum
4365 * number of retransmissions sent before an address is considered
4366 * unreachable. The following structure is used to access and modify an
4367 * address's parameters:
4368 *
4369 * struct sctp_paddrparams {
52ccb8e9
FF
4370 * sctp_assoc_t spp_assoc_id;
4371 * struct sockaddr_storage spp_address;
4372 * uint32_t spp_hbinterval;
4373 * uint16_t spp_pathmaxrxt;
4374 * uint32_t spp_pathmtu;
4375 * uint32_t spp_sackdelay;
4376 * uint32_t spp_flags;
4377 * };
4378 *
4379 * spp_assoc_id - (one-to-many style socket) This is filled in the
4380 * application, and identifies the association for
4381 * this query.
1da177e4
LT
4382 * spp_address - This specifies which address is of interest.
4383 * spp_hbinterval - This contains the value of the heartbeat interval,
52ccb8e9
FF
4384 * in milliseconds. If a value of zero
4385 * is present in this field then no changes are to
4386 * be made to this parameter.
1da177e4
LT
4387 * spp_pathmaxrxt - This contains the maximum number of
4388 * retransmissions before this address shall be
52ccb8e9
FF
4389 * considered unreachable. If a value of zero
4390 * is present in this field then no changes are to
4391 * be made to this parameter.
4392 * spp_pathmtu - When Path MTU discovery is disabled the value
4393 * specified here will be the "fixed" path mtu.
4394 * Note that if the spp_address field is empty
4395 * then all associations on this address will
4396 * have this fixed path mtu set upon them.
4397 *
4398 * spp_sackdelay - When delayed sack is enabled, this value specifies
4399 * the number of milliseconds that sacks will be delayed
4400 * for. This value will apply to all addresses of an
4401 * association if the spp_address field is empty. Note
4402 * also, that if delayed sack is enabled and this
4403 * value is set to 0, no change is made to the last
4404 * recorded delayed sack timer value.
4405 *
4406 * spp_flags - These flags are used to control various features
4407 * on an association. The flag field may contain
4408 * zero or more of the following options.
4409 *
4410 * SPP_HB_ENABLE - Enable heartbeats on the
4411 * specified address. Note that if the address
4412 * field is empty all addresses for the association
4413 * have heartbeats enabled upon them.
4414 *
4415 * SPP_HB_DISABLE - Disable heartbeats on the
4416 * speicifed address. Note that if the address
4417 * field is empty all addresses for the association
4418 * will have their heartbeats disabled. Note also
4419 * that SPP_HB_ENABLE and SPP_HB_DISABLE are
4420 * mutually exclusive, only one of these two should
4421 * be specified. Enabling both fields will have
4422 * undetermined results.
4423 *
4424 * SPP_HB_DEMAND - Request a user initiated heartbeat
4425 * to be made immediately.
4426 *
4427 * SPP_PMTUD_ENABLE - This field will enable PMTU
4428 * discovery upon the specified address. Note that
4429 * if the address feild is empty then all addresses
4430 * on the association are effected.
4431 *
4432 * SPP_PMTUD_DISABLE - This field will disable PMTU
4433 * discovery upon the specified address. Note that
4434 * if the address feild is empty then all addresses
4435 * on the association are effected. Not also that
4436 * SPP_PMTUD_ENABLE and SPP_PMTUD_DISABLE are mutually
4437 * exclusive. Enabling both will have undetermined
4438 * results.
4439 *
4440 * SPP_SACKDELAY_ENABLE - Setting this flag turns
4441 * on delayed sack. The time specified in spp_sackdelay
4442 * is used to specify the sack delay for this address. Note
4443 * that if spp_address is empty then all addresses will
4444 * enable delayed sack and take on the sack delay
4445 * value specified in spp_sackdelay.
4446 * SPP_SACKDELAY_DISABLE - Setting this flag turns
4447 * off delayed sack. If the spp_address field is blank then
4448 * delayed sack is disabled for the entire association. Note
4449 * also that this field is mutually exclusive to
4450 * SPP_SACKDELAY_ENABLE, setting both will have undefined
4451 * results.
1da177e4
LT
4452 */
4453static int sctp_getsockopt_peer_addr_params(struct sock *sk, int len,
52ccb8e9 4454 char __user *optval, int __user *optlen)
1da177e4 4455{
52ccb8e9
FF
4456 struct sctp_paddrparams params;
4457 struct sctp_transport *trans = NULL;
4458 struct sctp_association *asoc = NULL;
4459 struct sctp_sock *sp = sctp_sk(sk);
1da177e4 4460
408f22e8 4461 if (len < sizeof(struct sctp_paddrparams))
1da177e4 4462 return -EINVAL;
408f22e8 4463 len = sizeof(struct sctp_paddrparams);
1da177e4
LT
4464 if (copy_from_user(&params, optval, len))
4465 return -EFAULT;
4466
52ccb8e9
FF
4467 /* If an address other than INADDR_ANY is specified, and
4468 * no transport is found, then the request is invalid.
1da177e4 4469 */
cb3f837b 4470 if (!sctp_is_any(sk, (union sctp_addr *)&params.spp_address)) {
52ccb8e9
FF
4471 trans = sctp_addr_id2transport(sk, &params.spp_address,
4472 params.spp_assoc_id);
4473 if (!trans) {
bb33381d 4474 pr_debug("%s: failed no transport\n", __func__);
52ccb8e9
FF
4475 return -EINVAL;
4476 }
1da177e4
LT
4477 }
4478
52ccb8e9
FF
4479 /* Get association, if assoc_id != 0 and the socket is a one
4480 * to many style socket, and an association was not found, then
4481 * the id was invalid.
4482 */
4483 asoc = sctp_id2assoc(sk, params.spp_assoc_id);
4484 if (!asoc && params.spp_assoc_id && sctp_style(sk, UDP)) {
bb33381d 4485 pr_debug("%s: failed no association\n", __func__);
1da177e4 4486 return -EINVAL;
52ccb8e9 4487 }
1da177e4 4488
52ccb8e9
FF
4489 if (trans) {
4490 /* Fetch transport values. */
4491 params.spp_hbinterval = jiffies_to_msecs(trans->hbinterval);
4492 params.spp_pathmtu = trans->pathmtu;
4493 params.spp_pathmaxrxt = trans->pathmaxrxt;
4494 params.spp_sackdelay = jiffies_to_msecs(trans->sackdelay);
4495
4496 /*draft-11 doesn't say what to return in spp_flags*/
4497 params.spp_flags = trans->param_flags;
4498 } else if (asoc) {
4499 /* Fetch association values. */
4500 params.spp_hbinterval = jiffies_to_msecs(asoc->hbinterval);
4501 params.spp_pathmtu = asoc->pathmtu;
4502 params.spp_pathmaxrxt = asoc->pathmaxrxt;
4503 params.spp_sackdelay = jiffies_to_msecs(asoc->sackdelay);
4504
4505 /*draft-11 doesn't say what to return in spp_flags*/
4506 params.spp_flags = asoc->param_flags;
4507 } else {
4508 /* Fetch socket values. */
4509 params.spp_hbinterval = sp->hbinterval;
4510 params.spp_pathmtu = sp->pathmtu;
4511 params.spp_sackdelay = sp->sackdelay;
4512 params.spp_pathmaxrxt = sp->pathmaxrxt;
1da177e4 4513
52ccb8e9
FF
4514 /*draft-11 doesn't say what to return in spp_flags*/
4515 params.spp_flags = sp->param_flags;
4516 }
1da177e4 4517
1da177e4
LT
4518 if (copy_to_user(optval, &params, len))
4519 return -EFAULT;
4520
4521 if (put_user(len, optlen))
4522 return -EFAULT;
4523
4524 return 0;
4525}
4526
d364d927
WY
4527/*
4528 * 7.1.23. Get or set delayed ack timer (SCTP_DELAYED_SACK)
4529 *
4530 * This option will effect the way delayed acks are performed. This
4531 * option allows you to get or set the delayed ack time, in
4532 * milliseconds. It also allows changing the delayed ack frequency.
4533 * Changing the frequency to 1 disables the delayed sack algorithm. If
4534 * the assoc_id is 0, then this sets or gets the endpoints default
4535 * values. If the assoc_id field is non-zero, then the set or get
4536 * effects the specified association for the one to many model (the
4537 * assoc_id field is ignored by the one to one model). Note that if
4538 * sack_delay or sack_freq are 0 when setting this option, then the
4539 * current values will remain unchanged.
4540 *
4541 * struct sctp_sack_info {
4542 * sctp_assoc_t sack_assoc_id;
4543 * uint32_t sack_delay;
4544 * uint32_t sack_freq;
4545 * };
7708610b 4546 *
d364d927
WY
4547 * sack_assoc_id - This parameter, indicates which association the user
4548 * is performing an action upon. Note that if this field's value is
4549 * zero then the endpoints default value is changed (effecting future
4550 * associations only).
7708610b 4551 *
d364d927
WY
4552 * sack_delay - This parameter contains the number of milliseconds that
4553 * the user is requesting the delayed ACK timer be set to. Note that
4554 * this value is defined in the standard to be between 200 and 500
4555 * milliseconds.
7708610b 4556 *
d364d927
WY
4557 * sack_freq - This parameter contains the number of packets that must
4558 * be received before a sack is sent without waiting for the delay
4559 * timer to expire. The default value for this is 2, setting this
4560 * value to 1 will disable the delayed sack algorithm.
7708610b 4561 */
d364d927 4562static int sctp_getsockopt_delayed_ack(struct sock *sk, int len,
7708610b
FF
4563 char __user *optval,
4564 int __user *optlen)
4565{
d364d927 4566 struct sctp_sack_info params;
7708610b
FF
4567 struct sctp_association *asoc = NULL;
4568 struct sctp_sock *sp = sctp_sk(sk);
4569
d364d927
WY
4570 if (len >= sizeof(struct sctp_sack_info)) {
4571 len = sizeof(struct sctp_sack_info);
7708610b 4572
d364d927
WY
4573 if (copy_from_user(&params, optval, len))
4574 return -EFAULT;
4575 } else if (len == sizeof(struct sctp_assoc_value)) {
145ce502
JP
4576 pr_warn("Use of struct sctp_assoc_value in delayed_ack socket option deprecated\n");
4577 pr_warn("Use struct sctp_sack_info instead\n");
d364d927
WY
4578 if (copy_from_user(&params, optval, len))
4579 return -EFAULT;
4580 } else
cb3f837b 4581 return -EINVAL;
7708610b 4582
d364d927 4583 /* Get association, if sack_assoc_id != 0 and the socket is a one
7708610b
FF
4584 * to many style socket, and an association was not found, then
4585 * the id was invalid.
d808ad9a 4586 */
d364d927
WY
4587 asoc = sctp_id2assoc(sk, params.sack_assoc_id);
4588 if (!asoc && params.sack_assoc_id && sctp_style(sk, UDP))
7708610b
FF
4589 return -EINVAL;
4590
4591 if (asoc) {
4592 /* Fetch association values. */
d364d927
WY
4593 if (asoc->param_flags & SPP_SACKDELAY_ENABLE) {
4594 params.sack_delay = jiffies_to_msecs(
7708610b 4595 asoc->sackdelay);
d364d927
WY
4596 params.sack_freq = asoc->sackfreq;
4597
4598 } else {
4599 params.sack_delay = 0;
4600 params.sack_freq = 1;
4601 }
7708610b
FF
4602 } else {
4603 /* Fetch socket values. */
d364d927
WY
4604 if (sp->param_flags & SPP_SACKDELAY_ENABLE) {
4605 params.sack_delay = sp->sackdelay;
4606 params.sack_freq = sp->sackfreq;
4607 } else {
4608 params.sack_delay = 0;
4609 params.sack_freq = 1;
4610 }
7708610b
FF
4611 }
4612
4613 if (copy_to_user(optval, &params, len))
4614 return -EFAULT;
4615
4616 if (put_user(len, optlen))
4617 return -EFAULT;
4618
4619 return 0;
4620}
4621
1da177e4
LT
4622/* 7.1.3 Initialization Parameters (SCTP_INITMSG)
4623 *
4624 * Applications can specify protocol parameters for the default association
4625 * initialization. The option name argument to setsockopt() and getsockopt()
4626 * is SCTP_INITMSG.
4627 *
4628 * Setting initialization parameters is effective only on an unconnected
4629 * socket (for UDP-style sockets only future associations are effected
4630 * by the change). With TCP-style sockets, this option is inherited by
4631 * sockets derived from a listener socket.
4632 */
4633static int sctp_getsockopt_initmsg(struct sock *sk, int len, char __user *optval, int __user *optlen)
4634{
408f22e8 4635 if (len < sizeof(struct sctp_initmsg))
1da177e4 4636 return -EINVAL;
408f22e8
NH
4637 len = sizeof(struct sctp_initmsg);
4638 if (put_user(len, optlen))
4639 return -EFAULT;
1da177e4
LT
4640 if (copy_to_user(optval, &sctp_sk(sk)->initmsg, len))
4641 return -EFAULT;
4642 return 0;
4643}
4644