]>
git.proxmox.com Git - mirror_ubuntu-hirsute-kernel.git/blob - net/ipv4/xfrm4_output.c
1 // SPDX-License-Identifier: GPL-2.0-or-later
3 * xfrm4_output.c - Common IPsec encapsulation code for IPv4.
4 * Copyright (c) 2004 Herbert Xu <herbert@gondor.apana.org.au>
7 #include <linux/if_ether.h>
8 #include <linux/kernel.h>
9 #include <linux/module.h>
10 #include <linux/skbuff.h>
11 #include <linux/netfilter_ipv4.h>
17 static int xfrm4_tunnel_check_size(struct sk_buff
*skb
)
21 if (IPCB(skb
)->flags
& IPSKB_XFRM_TUNNEL_SIZE
)
24 if (!(ip_hdr(skb
)->frag_off
& htons(IP_DF
)) || skb
->ignore_df
)
27 mtu
= dst_mtu(skb_dst(skb
));
28 if ((!skb_is_gso(skb
) && skb
->len
> mtu
) ||
30 !skb_gso_validate_network_len(skb
, ip_skb_dst_mtu(skb
->sk
, skb
)))) {
31 skb
->protocol
= htons(ETH_P_IP
);
34 xfrm_local_error(skb
, mtu
);
36 icmp_send(skb
, ICMP_DEST_UNREACH
,
37 ICMP_FRAG_NEEDED
, htonl(mtu
));
44 int xfrm4_extract_output(struct xfrm_state
*x
, struct sk_buff
*skb
)
48 err
= xfrm4_tunnel_check_size(skb
);
52 XFRM_MODE_SKB_CB(skb
)->protocol
= ip_hdr(skb
)->protocol
;
54 return xfrm4_extract_header(skb
);
57 int xfrm4_output_finish(struct sock
*sk
, struct sk_buff
*skb
)
59 memset(IPCB(skb
), 0, sizeof(*IPCB(skb
)));
61 IPCB(skb
)->flags
|= IPSKB_XFRM_TRANSFORMED
;
63 return xfrm_output(sk
, skb
);
66 static int __xfrm4_output(struct net
*net
, struct sock
*sk
, struct sk_buff
*skb
)
68 struct xfrm_state
*x
= skb_dst(skb
)->xfrm
;
69 const struct xfrm_state_afinfo
*afinfo
;
70 int ret
= -EAFNOSUPPORT
;
72 #ifdef CONFIG_NETFILTER
74 IPCB(skb
)->flags
|= IPSKB_REROUTED
;
75 return dst_output(net
, sk
, skb
);
80 afinfo
= xfrm_state_afinfo_get_rcu(x
->outer_mode
.family
);
82 ret
= afinfo
->output_finish(sk
, skb
);
90 int xfrm4_output(struct net
*net
, struct sock
*sk
, struct sk_buff
*skb
)
92 return NF_HOOK_COND(NFPROTO_IPV4
, NF_INET_POST_ROUTING
,
93 net
, sk
, skb
, skb
->dev
, skb_dst(skb
)->dev
,
95 !(IPCB(skb
)->flags
& IPSKB_REROUTED
));
98 void xfrm4_local_error(struct sk_buff
*skb
, u32 mtu
)
102 hdr
= skb
->encapsulation
? inner_ip_hdr(skb
) : ip_hdr(skb
);
103 ip_local_error(skb
->sk
, EMSGSIZE
, hdr
->daddr
,
104 inet_sk(skb
->sk
)->inet_dport
, mtu
);