]> bbs.cooldavid.org Git - net-next-2.6.git/blame - net/ipv4/inet_diag.c
git://bbs.cooldavid.org / net-next-2.6.git / blame
? search:
summary | shortlog | log | commit | commitdiff | tree
blob | blame (incremental) | history | HEAD
[SK_BUFF]: Convert skb->tail to sk_buff_data_t
[net-next-2.6.git] / net / ipv4 / inet_diag.c
CommitLineData
1da177e4 1/*
73c1f4a0 2 * inet_diag.c Module for monitoring INET transport protocols sockets.
1da177e4 3 *
73c1f4a0 4 * Version: $Id: inet_diag.c,v 1.3 2002/02/01 22:01:04 davem Exp $
1da177e4
LT		 5 *
6 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
7 *
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
12 */
13
1da177e4
LT		 14#include <linux/module.h>
15#include <linux/types.h>
16#include <linux/fcntl.h>
17#include <linux/random.h>
18#include <linux/cache.h>
19#include <linux/init.h>
20#include <linux/time.h>
21
22#include <net/icmp.h>
23#include <net/tcp.h>
24#include <net/ipv6.h>
25#include <net/inet_common.h>
505cbfc5
ACM		 26#include <net/inet_connection_sock.h>
27#include <net/inet_hashtables.h>
28#include <net/inet_timewait_sock.h>
29#include <net/inet6_hashtables.h>
1da177e4
LT		 30
31#include <linux/inet.h>
32#include <linux/stddef.h>
33
a8c2190e 34#include <linux/inet_diag.h>
1da177e4 35
4f5736c4
ACM		 36static const struct inet_diag_handler **inet_diag_table;
37
73c1f4a0 38struct inet_diag_entry {
9f855299
AV		 39 __be32 *saddr;
40 __be32 *daddr;
1da177e4
LT		 41 u16 sport;
42 u16 dport;
43 u16 family;
44 u16 userlocks;
45};
46
73c1f4a0 47static struct sock *idiagnl;
1da177e4 48
73c1f4a0 49#define INET_DIAG_PUT(skb, attrtype, attrlen) \
7c99c909 50 RTA_DATA(__RTA_PUT(skb, attrtype, attrlen))
1da177e4 51
dff2c035
ACM		 52static int inet_csk_diag_fill(struct sock *sk,
53 struct sk_buff *skb,
54 int ext, u32 pid, u32 seq, u16 nlmsg_flags,
55 const struct nlmsghdr *unlh)
1da177e4 56{
463c84b9 57 const struct inet_sock *inet = inet_sk(sk);
463c84b9 58 const struct inet_connection_sock *icsk = inet_csk(sk);
73c1f4a0 59 struct inet_diag_msg *r;
1da177e4 60 struct nlmsghdr *nlh;
4f5736c4 61 void *info = NULL;
73c1f4a0 62 struct inet_diag_meminfo *minfo = NULL;
27a884dc 63 unsigned char *b = skb_tail_pointer(skb);
4f5736c4
ACM		 64 const struct inet_diag_handler *handler;
65
66 handler = inet_diag_table[unlh->nlmsg_type];
67 BUG_ON(handler == NULL);
1da177e4 68
540722ff 69 nlh = NLMSG_PUT(skb, pid, seq, unlh->nlmsg_type, sizeof(*r));
1da177e4 70 nlh->nlmsg_flags = nlmsg_flags;
4f5736c4 71
1da177e4 72 r = NLMSG_DATA(nlh);
c7d58aab
ACM		 73 BUG_ON(sk->sk_state == TCP_TIME_WAIT);
74
75 if (ext & (1 << (INET_DIAG_MEMINFO - 1)))
76 minfo = INET_DIAG_PUT(skb, INET_DIAG_MEMINFO, sizeof(*minfo));
77
78 if (ext & (1 << (INET_DIAG_INFO - 1)))
79 info = INET_DIAG_PUT(skb, INET_DIAG_INFO,
80 handler->idiag_info_size);
81
82 if ((ext & (1 << (INET_DIAG_CONG - 1))) && icsk->icsk_ca_ops) {
83 const size_t len = strlen(icsk->icsk_ca_ops->name);
84
85 strcpy(INET_DIAG_PUT(skb, INET_DIAG_CONG, len + 1),
86 icsk->icsk_ca_ops->name);
1da177e4 87 }
c7d58aab 88
73c1f4a0
ACM		 89 r->idiag_family = sk->sk_family;
90 r->idiag_state = sk->sk_state;
91 r->idiag_timer = 0;
92 r->idiag_retrans = 0;
1da177e4 93
73c1f4a0
ACM		 94 r->id.idiag_if = sk->sk_bound_dev_if;
95 r->id.idiag_cookie[0] = (u32)(unsigned long)sk;
96 r->id.idiag_cookie[1] = (u32)(((unsigned long)sk >> 31) >> 1);
1da177e4 97
73c1f4a0
ACM		 98 r->id.idiag_sport = inet->sport;
99 r->id.idiag_dport = inet->dport;
100 r->id.idiag_src[0] = inet->rcv_saddr;
101 r->id.idiag_dst[0] = inet->daddr;
1da177e4 102
505cbfc5 103#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
73c1f4a0 104 if (r->idiag_family == AF_INET6) {
1da177e4
LT		 105 struct ipv6_pinfo *np = inet6_sk(sk);
106
73c1f4a0 107 ipv6_addr_copy((struct in6_addr *)r->id.idiag_src,
1da177e4 108 &np->rcv_saddr);
73c1f4a0 109 ipv6_addr_copy((struct in6_addr *)r->id.idiag_dst,
1da177e4
LT		 110 &np->daddr);
111 }
112#endif
113
a8c2190e 114#define EXPIRES_IN_MS(tmo) ((tmo - jiffies) * 1000 + HZ - 1) / HZ
1da177e4 115
463c84b9 116 if (icsk->icsk_pending == ICSK_TIME_RETRANS) {
73c1f4a0
ACM		 117 r->idiag_timer = 1;
118 r->idiag_retrans = icsk->icsk_retransmits;
119 r->idiag_expires = EXPIRES_IN_MS(icsk->icsk_timeout);
463c84b9 120 } else if (icsk->icsk_pending == ICSK_TIME_PROBE0) {
73c1f4a0
ACM		 121 r->idiag_timer = 4;
122 r->idiag_retrans = icsk->icsk_probes_out;
123 r->idiag_expires = EXPIRES_IN_MS(icsk->icsk_timeout);
1da177e4 124 } else if (timer_pending(&sk->sk_timer)) {
73c1f4a0
ACM		 125 r->idiag_timer = 2;
126 r->idiag_retrans = icsk->icsk_probes_out;
127 r->idiag_expires = EXPIRES_IN_MS(sk->sk_timer.expires);
1da177e4 128 } else {
73c1f4a0
ACM		 129 r->idiag_timer = 0;
130 r->idiag_expires = 0;
1da177e4
LT		 131 }
132#undef EXPIRES_IN_MS
540722ff 133
73c1f4a0
ACM		 134 r->idiag_uid = sock_i_uid(sk);
135 r->idiag_inode = sock_i_ino(sk);
1da177e4
LT		 136
137 if (minfo) {
73c1f4a0
ACM		 138 minfo->idiag_rmem = atomic_read(&sk->sk_rmem_alloc);
139 minfo->idiag_wmem = sk->sk_wmem_queued;
140 minfo->idiag_fmem = sk->sk_forward_alloc;
141 minfo->idiag_tmem = atomic_read(&sk->sk_wmem_alloc);
1da177e4
LT		 142 }
143
4f5736c4 144 handler->idiag_get_info(sk, r, info);
1da177e4 145
6687e988
ACM		 146 if (sk->sk_state < TCP_TIME_WAIT &&
147 icsk->icsk_ca_ops && icsk->icsk_ca_ops->get_info)
148 icsk->icsk_ca_ops->get_info(sk, ext, skb);
1da177e4 149
27a884dc 150 nlh->nlmsg_len = skb_tail_pointer(skb) - b;
1da177e4
LT		 151 return skb->len;
152
7c99c909 153rtattr_failure:
1da177e4
LT		 154nlmsg_failure:
155 skb_trim(skb, b - skb->data);
26932566 156 return -EMSGSIZE;
1da177e4
LT		 157}
158
c7d58aab
ACM		 159static int inet_twsk_diag_fill(struct inet_timewait_sock *tw,
160 struct sk_buff *skb, int ext, u32 pid,
161 u32 seq, u16 nlmsg_flags,
162 const struct nlmsghdr *unlh)
163{
164 long tmo;
165 struct inet_diag_msg *r;
27a884dc 166 const unsigned char *previous_tail = skb_tail_pointer(skb);
c7d58aab
ACM		 167 struct nlmsghdr *nlh = NLMSG_PUT(skb, pid, seq,
168 unlh->nlmsg_type, sizeof(*r));
169
170 r = NLMSG_DATA(nlh);
171 BUG_ON(tw->tw_state != TCP_TIME_WAIT);
172
173 nlh->nlmsg_flags = nlmsg_flags;
174
175 tmo = tw->tw_ttd - jiffies;
176 if (tmo < 0)
177 tmo = 0;
178
179 r->idiag_family = tw->tw_family;
180 r->idiag_state = tw->tw_state;
181 r->idiag_timer = 0;
182 r->idiag_retrans = 0;
183 r->id.idiag_if = tw->tw_bound_dev_if;
184 r->id.idiag_cookie[0] = (u32)(unsigned long)tw;
185 r->id.idiag_cookie[1] = (u32)(((unsigned long)tw >> 31) >> 1);
186 r->id.idiag_sport = tw->tw_sport;
187 r->id.idiag_dport = tw->tw_dport;
188 r->id.idiag_src[0] = tw->tw_rcv_saddr;
189 r->id.idiag_dst[0] = tw->tw_daddr;
190 r->idiag_state = tw->tw_substate;
191 r->idiag_timer = 3;
192 r->idiag_expires = (tmo * 1000 + HZ - 1) / HZ;
193 r->idiag_rqueue = 0;
194 r->idiag_wqueue = 0;
195 r->idiag_uid = 0;
196 r->idiag_inode = 0;
197#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
198 if (tw->tw_family == AF_INET6) {
199 const struct inet6_timewait_sock *tw6 =
200 inet6_twsk((struct sock *)tw);
201
202 ipv6_addr_copy((struct in6_addr *)r->id.idiag_src,
203 &tw6->tw_v6_rcv_saddr);
204 ipv6_addr_copy((struct in6_addr *)r->id.idiag_dst,
205 &tw6->tw_v6_daddr);
206 }
207#endif
27a884dc 208 nlh->nlmsg_len = skb_tail_pointer(skb) - previous_tail;
c7d58aab
ACM		 209 return skb->len;
210nlmsg_failure:
211 skb_trim(skb, previous_tail - skb->data);
26932566 212 return -EMSGSIZE;
c7d58aab
ACM		 213}
214
dff2c035
ACM		 215static int sk_diag_fill(struct sock *sk, struct sk_buff *skb,
216 int ext, u32 pid, u32 seq, u16 nlmsg_flags,
217 const struct nlmsghdr *unlh)
218{
219 if (sk->sk_state == TCP_TIME_WAIT)
220 return inet_twsk_diag_fill((struct inet_timewait_sock *)sk,
221 skb, ext, pid, seq, nlmsg_flags,
222 unlh);
223 return inet_csk_diag_fill(sk, skb, ext, pid, seq, nlmsg_flags, unlh);
224}
225
4e852c02
ACM		 226static int inet_diag_get_exact(struct sk_buff *in_skb,
227 const struct nlmsghdr *nlh)
1da177e4
LT		 228{
229 int err;
230 struct sock *sk;
73c1f4a0 231 struct inet_diag_req *req = NLMSG_DATA(nlh);
1da177e4 232 struct sk_buff *rep;
4f5736c4
ACM		 233 struct inet_hashinfo *hashinfo;
234 const struct inet_diag_handler *handler;
235
236 handler = inet_diag_table[nlh->nlmsg_type];
237 BUG_ON(handler == NULL);
238 hashinfo = handler->idiag_hashinfo;
239
73c1f4a0
ACM		 240 if (req->idiag_family == AF_INET) {
241 sk = inet_lookup(hashinfo, req->id.idiag_dst[0],
242 req->id.idiag_dport, req->id.idiag_src[0],
243 req->id.idiag_sport, req->id.idiag_if);
1da177e4 244 }
505cbfc5 245#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
73c1f4a0 246 else if (req->idiag_family == AF_INET6) {
505cbfc5 247 sk = inet6_lookup(hashinfo,
73c1f4a0
ACM		 248 (struct in6_addr *)req->id.idiag_dst,
249 req->id.idiag_dport,
250 (struct in6_addr *)req->id.idiag_src,
251 req->id.idiag_sport,
252 req->id.idiag_if);
1da177e4
LT		 253 }
254#endif
255 else {
256 return -EINVAL;
257 }
258
259 if (sk == NULL)
260 return -ENOENT;
261
262 err = -ESTALE;
73c1f4a0
ACM		 263 if ((req->id.idiag_cookie[0] != INET_DIAG_NOCOOKIE ||
264 req->id.idiag_cookie[1] != INET_DIAG_NOCOOKIE) &&
265 ((u32)(unsigned long)sk != req->id.idiag_cookie[0] ||
266 (u32)((((unsigned long)sk) >> 31) >> 1) != req->id.idiag_cookie[1]))
1da177e4
LT		 267 goto out;
268
269 err = -ENOMEM;
73c1f4a0
ACM		 270 rep = alloc_skb(NLMSG_SPACE((sizeof(struct inet_diag_msg) +
271 sizeof(struct inet_diag_meminfo) +
4f5736c4
ACM		 272 handler->idiag_info_size + 64)),
273 GFP_KERNEL);
1da177e4
LT		 274 if (!rep)
275 goto out;
276
26932566
PM		 277 err = sk_diag_fill(sk, rep, req->idiag_ext,
278 NETLINK_CB(in_skb).pid,
279 nlh->nlmsg_seq, 0, nlh);
280 if (err < 0) {
281 WARN_ON(err == -EMSGSIZE);
282 kfree_skb(rep);
283 goto out;
284 }
73c1f4a0
ACM		 285 err = netlink_unicast(idiagnl, rep, NETLINK_CB(in_skb).pid,
286 MSG_DONTWAIT);
1da177e4
LT		 287 if (err > 0)
288 err = 0;
289
290out:
291 if (sk) {
292 if (sk->sk_state == TCP_TIME_WAIT)
8feaf0c0 293 inet_twsk_put((struct inet_timewait_sock *)sk);
1da177e4
LT		 294 else
295 sock_put(sk);
296 }
297 return err;
298}
299
9f855299 300static int bitstring_match(const __be32 *a1, const __be32 *a2, int bits)
1da177e4
LT		 301{
302 int words = bits >> 5;
303
304 bits &= 0x1f;
305
306 if (words) {
307 if (memcmp(a1, a2, words << 2))
308 return 0;
309 }
310 if (bits) {
9f855299
AV		 311 __be32 w1, w2;
312 __be32 mask;
1da177e4
LT		 313
314 w1 = a1[words];
315 w2 = a2[words];
316
317 mask = htonl((0xffffffff) << (32 - bits));
318
319 if ((w1 ^ w2) & mask)
320 return 0;
321 }
322
323 return 1;
324}
325
326
73c1f4a0 327static int inet_diag_bc_run(const void *bc, int len,
4e852c02 328 const struct inet_diag_entry *entry)
1da177e4
LT		 329{
330 while (len > 0) {
331 int yes = 1;
73c1f4a0 332 const struct inet_diag_bc_op *op = bc;
1da177e4
LT		 333
334 switch (op->code) {
73c1f4a0 335 case INET_DIAG_BC_NOP:
1da177e4 336 break;
73c1f4a0 337 case INET_DIAG_BC_JMP:
1da177e4
LT		 338 yes = 0;
339 break;
73c1f4a0 340 case INET_DIAG_BC_S_GE:
1da177e4
LT		 341 yes = entry->sport >= op[1].no;
342 break;
73c1f4a0 343 case INET_DIAG_BC_S_LE:
1da177e4
LT		 344 yes = entry->dport <= op[1].no;
345 break;
73c1f4a0 346 case INET_DIAG_BC_D_GE:
1da177e4
LT		 347 yes = entry->dport >= op[1].no;
348 break;
73c1f4a0 349 case INET_DIAG_BC_D_LE:
1da177e4
LT		 350 yes = entry->dport <= op[1].no;
351 break;
73c1f4a0 352 case INET_DIAG_BC_AUTO:
1da177e4
LT		 353 yes = !(entry->userlocks & SOCK_BINDPORT_LOCK);
354 break;
73c1f4a0 355 case INET_DIAG_BC_S_COND:
a8c2190e
ACM		 356 case INET_DIAG_BC_D_COND: {
357 struct inet_diag_hostcond *cond;
9f855299 358 __be32 *addr;
1da177e4 359
a8c2190e 360 cond = (struct inet_diag_hostcond *)(op + 1);
1da177e4 361 if (cond->port != -1 &&
73c1f4a0 362 cond->port != (op->code == INET_DIAG_BC_S_COND ?
1da177e4
LT		 363 entry->sport : entry->dport)) {
364 yes = 0;
365 break;
366 }
4e852c02 367
1da177e4
LT		 368 if (cond->prefix_len == 0)
369 break;
370
73c1f4a0 371 if (op->code == INET_DIAG_BC_S_COND)
1da177e4
LT		 372 addr = entry->saddr;
373 else
374 addr = entry->daddr;
375
4e852c02
ACM		 376 if (bitstring_match(addr, cond->addr,
377 cond->prefix_len))
1da177e4
LT		 378 break;
379 if (entry->family == AF_INET6 &&
380 cond->family == AF_INET) {
381 if (addr[0] == 0 && addr[1] == 0 &&
382 addr[2] == htonl(0xffff) &&
a8c2190e 383 bitstring_match(addr + 3, cond->addr,
e905a9ed 384 cond->prefix_len))
1da177e4
LT		 385 break;
386 }
387 yes = 0;
388 break;
389 }
390 }
391
4e852c02 392 if (yes) {
1da177e4
LT		 393 len -= op->yes;
394 bc += op->yes;
395 } else {
396 len -= op->no;
397 bc += op->no;
398 }
399 }
400 return (len == 0);
401}
402
403static int valid_cc(const void *bc, int len, int cc)
404{
405 while (len >= 0) {
73c1f4a0 406 const struct inet_diag_bc_op *op = bc;
1da177e4
LT		 407
408 if (cc > len)
409 return 0;
410 if (cc == len)
411 return 1;
412 if (op->yes < 4)
413 return 0;
414 len -= op->yes;
415 bc += op->yes;
416 }
417 return 0;
418}
419
73c1f4a0 420static int inet_diag_bc_audit(const void *bytecode, int bytecode_len)
1da177e4
LT		 421{
422 const unsigned char *bc = bytecode;
423 int len = bytecode_len;
424
425 while (len > 0) {
a8c2190e 426 struct inet_diag_bc_op *op = (struct inet_diag_bc_op *)bc;
1da177e4
LT		 427
428//printk("BC: %d %d %d {%d} / %d\n", op->code, op->yes, op->no, op[1].no, len);
429 switch (op->code) {
73c1f4a0
ACM		 430 case INET_DIAG_BC_AUTO:
431 case INET_DIAG_BC_S_COND:
432 case INET_DIAG_BC_D_COND:
433 case INET_DIAG_BC_S_GE:
434 case INET_DIAG_BC_S_LE:
435 case INET_DIAG_BC_D_GE:
436 case INET_DIAG_BC_D_LE:
a8c2190e 437 if (op->yes < 4 || op->yes > len + 4)
1da177e4 438 return -EINVAL;
73c1f4a0 439 case INET_DIAG_BC_JMP:
a8c2190e 440 if (op->no < 4 || op->no > len + 4)
1da177e4
LT		 441 return -EINVAL;
442 if (op->no < len &&
a8c2190e 443 !valid_cc(bytecode, bytecode_len, len - op->no))
1da177e4
LT		 444 return -EINVAL;
445 break;
73c1f4a0 446 case INET_DIAG_BC_NOP:
a8c2190e 447 if (op->yes < 4 || op->yes > len + 4)
1da177e4
LT		 448 return -EINVAL;
449 break;
450 default:
451 return -EINVAL;
452 }
4e852c02 453 bc += op->yes;
1da177e4
LT		 454 len -= op->yes;
455 }
456 return len == 0 ? 0 : -EINVAL;
457}
458
dff2c035
ACM		 459static int inet_csk_diag_dump(struct sock *sk,
460 struct sk_buff *skb,
461 struct netlink_callback *cb)
1da177e4 462{
73c1f4a0 463 struct inet_diag_req *r = NLMSG_DATA(cb->nlh);
1da177e4
LT		 464
465 if (cb->nlh->nlmsg_len > 4 + NLMSG_SPACE(sizeof(*r))) {
73c1f4a0 466 struct inet_diag_entry entry;
1da177e4
LT		 467 struct rtattr *bc = (struct rtattr *)(r + 1);
468 struct inet_sock *inet = inet_sk(sk);
469
470 entry.family = sk->sk_family;
505cbfc5 471#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
1da177e4
LT		 472 if (entry.family == AF_INET6) {
473 struct ipv6_pinfo *np = inet6_sk(sk);
474
475 entry.saddr = np->rcv_saddr.s6_addr32;
476 entry.daddr = np->daddr.s6_addr32;
477 } else
478#endif
479 {
480 entry.saddr = &inet->rcv_saddr;
481 entry.daddr = &inet->daddr;
482 }
483 entry.sport = inet->num;
484 entry.dport = ntohs(inet->dport);
485 entry.userlocks = sk->sk_userlocks;
486
73c1f4a0 487 if (!inet_diag_bc_run(RTA_DATA(bc), RTA_PAYLOAD(bc), &entry))
1da177e4
LT		 488 return 0;
489 }
490
dff2c035
ACM		 491 return inet_csk_diag_fill(sk, skb, r->idiag_ext,
492 NETLINK_CB(cb->skb).pid,
493 cb->nlh->nlmsg_seq, NLM_F_MULTI, cb->nlh);
1da177e4
LT		 494}
495
c7d58aab
ACM		 496static int inet_twsk_diag_dump(struct inet_timewait_sock *tw,
497 struct sk_buff *skb,
498 struct netlink_callback *cb)
499{
500 struct inet_diag_req *r = NLMSG_DATA(cb->nlh);
501
502 if (cb->nlh->nlmsg_len > 4 + NLMSG_SPACE(sizeof(*r))) {
503 struct inet_diag_entry entry;
504 struct rtattr *bc = (struct rtattr *)(r + 1);
505
506 entry.family = tw->tw_family;
507#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
508 if (tw->tw_family == AF_INET6) {
509 struct inet6_timewait_sock *tw6 =
510 inet6_twsk((struct sock *)tw);
511 entry.saddr = tw6->tw_v6_rcv_saddr.s6_addr32;
512 entry.daddr = tw6->tw_v6_daddr.s6_addr32;
513 } else
514#endif
515 {
516 entry.saddr = &tw->tw_rcv_saddr;
517 entry.daddr = &tw->tw_daddr;
518 }
519 entry.sport = tw->tw_num;
520 entry.dport = ntohs(tw->tw_dport);
e905a9ed 521 entry.userlocks = 0;
c7d58aab
ACM		 522
523 if (!inet_diag_bc_run(RTA_DATA(bc), RTA_PAYLOAD(bc), &entry))
524 return 0;
525 }
526
527 return inet_twsk_diag_fill(tw, skb, r->idiag_ext,
528 NETLINK_CB(cb->skb).pid,
529 cb->nlh->nlmsg_seq, NLM_F_MULTI, cb->nlh);
530}
531
73c1f4a0 532static int inet_diag_fill_req(struct sk_buff *skb, struct sock *sk,
4e852c02
ACM		 533 struct request_sock *req, u32 pid, u32 seq,
534 const struct nlmsghdr *unlh)
1da177e4 535{
2e6599cb 536 const struct inet_request_sock *ireq = inet_rsk(req);
1da177e4 537 struct inet_sock *inet = inet_sk(sk);
27a884dc 538 unsigned char *b = skb_tail_pointer(skb);
73c1f4a0 539 struct inet_diag_msg *r;
1da177e4
LT		 540 struct nlmsghdr *nlh;
541 long tmo;
542
540722ff 543 nlh = NLMSG_PUT(skb, pid, seq, unlh->nlmsg_type, sizeof(*r));
1da177e4
LT		 544 nlh->nlmsg_flags = NLM_F_MULTI;
545 r = NLMSG_DATA(nlh);
546
73c1f4a0
ACM		 547 r->idiag_family = sk->sk_family;
548 r->idiag_state = TCP_SYN_RECV;
549 r->idiag_timer = 1;
550 r->idiag_retrans = req->retrans;
1da177e4 551
73c1f4a0
ACM		 552 r->id.idiag_if = sk->sk_bound_dev_if;
553 r->id.idiag_cookie[0] = (u32)(unsigned long)req;
554 r->id.idiag_cookie[1] = (u32)(((unsigned long)req >> 31) >> 1);
1da177e4
LT		 555
556 tmo = req->expires - jiffies;
557 if (tmo < 0)
558 tmo = 0;
559
73c1f4a0
ACM		 560 r->id.idiag_sport = inet->sport;
561 r->id.idiag_dport = ireq->rmt_port;
562 r->id.idiag_src[0] = ireq->loc_addr;
563 r->id.idiag_dst[0] = ireq->rmt_addr;
564 r->idiag_expires = jiffies_to_msecs(tmo);
565 r->idiag_rqueue = 0;
566 r->idiag_wqueue = 0;
567 r->idiag_uid = sock_i_uid(sk);
568 r->idiag_inode = 0;
505cbfc5 569#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
73c1f4a0
ACM		 570 if (r->idiag_family == AF_INET6) {
571 ipv6_addr_copy((struct in6_addr *)r->id.idiag_src,
ca304b61 572 &inet6_rsk(req)->loc_addr);
73c1f4a0 573 ipv6_addr_copy((struct in6_addr *)r->id.idiag_dst,
ca304b61 574 &inet6_rsk(req)->rmt_addr);
1da177e4
LT		 575 }
576#endif
27a884dc 577 nlh->nlmsg_len = skb_tail_pointer(skb) - b;
1da177e4
LT		 578
579 return skb->len;
580
581nlmsg_failure:
582 skb_trim(skb, b - skb->data);
583 return -1;
584}
585
73c1f4a0 586static int inet_diag_dump_reqs(struct sk_buff *skb, struct sock *sk,
4e852c02 587 struct netlink_callback *cb)
1da177e4 588{
73c1f4a0
ACM		 589 struct inet_diag_entry entry;
590 struct inet_diag_req *r = NLMSG_DATA(cb->nlh);
463c84b9 591 struct inet_connection_sock *icsk = inet_csk(sk);
2ad69c55 592 struct listen_sock *lopt;
1da177e4
LT		 593 struct rtattr *bc = NULL;
594 struct inet_sock *inet = inet_sk(sk);
595 int j, s_j;
596 int reqnum, s_reqnum;
597 int err = 0;
598
599 s_j = cb->args[3];
600 s_reqnum = cb->args[4];
601
602 if (s_j > 0)
603 s_j--;
604
605 entry.family = sk->sk_family;
606
463c84b9 607 read_lock_bh(&icsk->icsk_accept_queue.syn_wait_lock);
1da177e4 608
463c84b9 609 lopt = icsk->icsk_accept_queue.listen_opt;
1da177e4
LT		 610 if (!lopt || !lopt->qlen)
611 goto out;
612
613 if (cb->nlh->nlmsg_len > 4 + NLMSG_SPACE(sizeof(*r))) {
614 bc = (struct rtattr *)(r + 1);
615 entry.sport = inet->num;
616 entry.userlocks = sk->sk_userlocks;
617 }
618
540722ff 619 for (j = s_j; j < lopt->nr_table_entries; j++) {
60236fdd 620 struct request_sock *req, *head = lopt->syn_table[j];
1da177e4
LT		 621
622 reqnum = 0;
623 for (req = head; req; reqnum++, req = req->dl_next) {
2e6599cb
ACM		 624 struct inet_request_sock *ireq = inet_rsk(req);
625
1da177e4
LT		 626 if (reqnum < s_reqnum)
627 continue;
73c1f4a0
ACM		 628 if (r->id.idiag_dport != ireq->rmt_port &&
629 r->id.idiag_dport)
1da177e4
LT		 630 continue;
631
632 if (bc) {
633 entry.saddr =
505cbfc5 634#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
1da177e4 635 (entry.family == AF_INET6) ?
ca304b61 636 inet6_rsk(req)->loc_addr.s6_addr32 :
1da177e4 637#endif
2e6599cb 638 &ireq->loc_addr;
4e852c02 639 entry.daddr =
505cbfc5 640#if defined(CONFIG_IPV6) || defined (CONFIG_IPV6_MODULE)
1da177e4 641 (entry.family == AF_INET6) ?
ca304b61 642 inet6_rsk(req)->rmt_addr.s6_addr32 :
1da177e4 643#endif
2e6599cb
ACM		 644 &ireq->rmt_addr;
645 entry.dport = ntohs(ireq->rmt_port);
1da177e4 646
73c1f4a0 647 if (!inet_diag_bc_run(RTA_DATA(bc),
1da177e4
LT		 648 RTA_PAYLOAD(bc), &entry))
649 continue;
650 }
651
73c1f4a0 652 err = inet_diag_fill_req(skb, sk, req,
1da177e4 653 NETLINK_CB(cb->skb).pid,
540722ff 654 cb->nlh->nlmsg_seq, cb->nlh);
1da177e4
LT		 655 if (err < 0) {
656 cb->args[3] = j + 1;
657 cb->args[4] = reqnum;
658 goto out;
659 }
660 }
661
662 s_reqnum = 0;
663 }
664
665out:
463c84b9 666 read_unlock_bh(&icsk->icsk_accept_queue.syn_wait_lock);
1da177e4
LT		 667
668 return err;
669}
670
73c1f4a0 671static int inet_diag_dump(struct sk_buff *skb, struct netlink_callback *cb)
1da177e4
LT		 672{
673 int i, num;
674 int s_i, s_num;
73c1f4a0 675 struct inet_diag_req *r = NLMSG_DATA(cb->nlh);
4f5736c4 676 const struct inet_diag_handler *handler;
540722ff 677 struct inet_hashinfo *hashinfo;
1da177e4 678
4f5736c4
ACM		 679 handler = inet_diag_table[cb->nlh->nlmsg_type];
680 BUG_ON(handler == NULL);
681 hashinfo = handler->idiag_hashinfo;
4e852c02 682
1da177e4
LT		 683 s_i = cb->args[1];
684 s_num = num = cb->args[2];
4f5736c4 685
1da177e4 686 if (cb->args[0] == 0) {
73c1f4a0 687 if (!(r->idiag_states & (TCPF_LISTEN | TCPF_SYN_RECV)))
1da177e4 688 goto skip_listen_ht;
540722ff
ACM		 689
690 inet_listen_lock(hashinfo);
0f7ff927 691 for (i = s_i; i < INET_LHTABLE_SIZE; i++) {
1da177e4
LT		 692 struct sock *sk;
693 struct hlist_node *node;
694
695 num = 0;
540722ff 696 sk_for_each(sk, node, &hashinfo->listening_hash[i]) {
1da177e4
LT		 697 struct inet_sock *inet = inet_sk(sk);
698
699 if (num < s_num) {
700 num++;
701 continue;
702 }
703
73c1f4a0
ACM		 704 if (r->id.idiag_sport != inet->sport &&
705 r->id.idiag_sport)
1da177e4
LT		 706 goto next_listen;
707
73c1f4a0
ACM		 708 if (!(r->idiag_states & TCPF_LISTEN) ||
709 r->id.idiag_dport ||
1da177e4
LT		 710 cb->args[3] > 0)
711 goto syn_recv;
712
dff2c035 713 if (inet_csk_diag_dump(sk, skb, cb) < 0) {
540722ff 714 inet_listen_unlock(hashinfo);
1da177e4
LT		 715 goto done;
716 }
717
718syn_recv:
73c1f4a0 719 if (!(r->idiag_states & TCPF_SYN_RECV))
1da177e4
LT		 720 goto next_listen;
721
73c1f4a0 722 if (inet_diag_dump_reqs(skb, sk, cb) < 0) {
540722ff 723 inet_listen_unlock(hashinfo);
1da177e4
LT		 724 goto done;
725 }
726
727next_listen:
728 cb->args[3] = 0;
729 cb->args[4] = 0;
730 ++num;
731 }
732
733 s_num = 0;
734 cb->args[3] = 0;
735 cb->args[4] = 0;
736 }
540722ff 737 inet_listen_unlock(hashinfo);
1da177e4
LT		 738skip_listen_ht:
739 cb->args[0] = 1;
740 s_i = num = s_num = 0;
741 }
742
73c1f4a0 743 if (!(r->idiag_states & ~(TCPF_LISTEN | TCPF_SYN_RECV)))
1da177e4
LT		 744 return skb->len;
745
540722ff
ACM		 746 for (i = s_i; i < hashinfo->ehash_size; i++) {
747 struct inet_ehash_bucket *head = &hashinfo->ehash[i];
1da177e4
LT		 748 struct sock *sk;
749 struct hlist_node *node;
750
751 if (i > s_i)
752 s_num = 0;
753
754 read_lock_bh(&head->lock);
1da177e4
LT		 755 num = 0;
756 sk_for_each(sk, node, &head->chain) {
757 struct inet_sock *inet = inet_sk(sk);
758
759 if (num < s_num)
760 goto next_normal;
73c1f4a0 761 if (!(r->idiag_states & (1 << sk->sk_state)))
1da177e4 762 goto next_normal;
73c1f4a0
ACM		 763 if (r->id.idiag_sport != inet->sport &&
764 r->id.idiag_sport)
1da177e4 765 goto next_normal;
4e852c02
ACM		 766 if (r->id.idiag_dport != inet->dport &&
767 r->id.idiag_dport)
1da177e4 768 goto next_normal;
dff2c035 769 if (inet_csk_diag_dump(sk, skb, cb) < 0) {
1da177e4
LT		 770 read_unlock_bh(&head->lock);
771 goto done;
772 }
773next_normal:
774 ++num;
775 }
776
73c1f4a0 777 if (r->idiag_states & TCPF_TIME_WAIT) {
c7d58aab
ACM		 778 struct inet_timewait_sock *tw;
779
780 inet_twsk_for_each(tw, node,
dbca9b27 781 &head->twchain) {
1da177e4
LT		 782
783 if (num < s_num)
784 goto next_dying;
7dbf0755 785 if (r->id.idiag_sport != tw->tw_sport &&
73c1f4a0 786 r->id.idiag_sport)
1da177e4 787 goto next_dying;
7dbf0755 788 if (r->id.idiag_dport != tw->tw_dport &&
73c1f4a0 789 r->id.idiag_dport)
1da177e4 790 goto next_dying;
c7d58aab 791 if (inet_twsk_diag_dump(tw, skb, cb) < 0) {
1da177e4
LT		 792 read_unlock_bh(&head->lock);
793 goto done;
794 }
795next_dying:
796 ++num;
797 }
798 }
799 read_unlock_bh(&head->lock);
800 }
801
802done:
803 cb->args[1] = i;
804 cb->args[2] = num;
805 return skb->len;
806}
807
4e852c02 808static inline int inet_diag_rcv_msg(struct sk_buff *skb, struct nlmsghdr *nlh)
1da177e4
LT		 809{
810 if (!(nlh->nlmsg_flags&NLM_F_REQUEST))
811 return 0;
812
4f5736c4 813 if (nlh->nlmsg_type >= INET_DIAG_GETSOCK_MAX)
1da177e4
LT		 814 goto err_inval;
815
4f5736c4
ACM		 816 if (inet_diag_table[nlh->nlmsg_type] == NULL)
817 return -ENOENT;
818
73c1f4a0 819 if (NLMSG_LENGTH(sizeof(struct inet_diag_req)) > skb->len)
1da177e4
LT		 820 goto err_inval;
821
822 if (nlh->nlmsg_flags&NLM_F_DUMP) {
73c1f4a0
ACM		 823 if (nlh->nlmsg_len >
824 (4 + NLMSG_SPACE(sizeof(struct inet_diag_req)))) {
825 struct rtattr *rta = (void *)(NLMSG_DATA(nlh) +
826 sizeof(struct inet_diag_req));
827 if (rta->rta_type != INET_DIAG_REQ_BYTECODE ||
1da177e4 828 rta->rta_len < 8 ||
73c1f4a0
ACM		 829 rta->rta_len >
830 (nlh->nlmsg_len -
831 NLMSG_SPACE(sizeof(struct inet_diag_req))))
1da177e4 832 goto err_inval;
73c1f4a0 833 if (inet_diag_bc_audit(RTA_DATA(rta), RTA_PAYLOAD(rta)))
1da177e4
LT		 834 goto err_inval;
835 }
73c1f4a0 836 return netlink_dump_start(idiagnl, skb, nlh,
a8f74b22 837 inet_diag_dump, NULL);
4e852c02 838 } else
73c1f4a0 839 return inet_diag_get_exact(skb, nlh);
1da177e4
LT		 840
841err_inval:
842 return -EINVAL;
843}
844
845
73c1f4a0 846static inline void inet_diag_rcv_skb(struct sk_buff *skb)
1da177e4 847{
1da177e4 848 if (skb->len >= NLMSG_SPACE(0)) {
4e852c02
ACM		 849 int err;
850 struct nlmsghdr *nlh = (struct nlmsghdr *)skb->data;
851
852 if (nlh->nlmsg_len < sizeof(*nlh) ||
853 skb->len < nlh->nlmsg_len)
1da177e4 854 return;
73c1f4a0 855 err = inet_diag_rcv_msg(skb, nlh);
4e852c02 856 if (err || nlh->nlmsg_flags & NLM_F_ACK)
1da177e4
LT		 857 netlink_ack(skb, nlh, err);
858 }
859}
860
73c1f4a0 861static void inet_diag_rcv(struct sock *sk, int len)
1da177e4
LT		 862{
863 struct sk_buff *skb;
2a0a6ebe 864 unsigned int qlen = skb_queue_len(&sk->sk_receive_queue);
1da177e4 865
2a0a6ebe 866 while (qlen-- && (skb = skb_dequeue(&sk->sk_receive_queue))) {
73c1f4a0 867 inet_diag_rcv_skb(skb);
1da177e4
LT		 868 kfree_skb(skb);
869 }
870}
871
4f5736c4
ACM		 872static DEFINE_SPINLOCK(inet_diag_register_lock);
873
874int inet_diag_register(const struct inet_diag_handler *h)
875{
876 const __u16 type = h->idiag_type;
877 int err = -EINVAL;
878
879 if (type >= INET_DIAG_GETSOCK_MAX)
880 goto out;
881
882 spin_lock(&inet_diag_register_lock);
883 err = -EEXIST;
884 if (inet_diag_table[type] == NULL) {
885 inet_diag_table[type] = h;
886 err = 0;
887 }
888 spin_unlock(&inet_diag_register_lock);
889out:
890 return err;
891}
892EXPORT_SYMBOL_GPL(inet_diag_register);
893
894void inet_diag_unregister(const struct inet_diag_handler *h)
895{
896 const __u16 type = h->idiag_type;
897
898 if (type >= INET_DIAG_GETSOCK_MAX)
899 return;
900
901 spin_lock(&inet_diag_register_lock);
902 inet_diag_table[type] = NULL;
903 spin_unlock(&inet_diag_register_lock);
904
905 synchronize_rcu();
906}
907EXPORT_SYMBOL_GPL(inet_diag_unregister);
908
73c1f4a0 909static int __init inet_diag_init(void)
1da177e4 910{
4f5736c4
ACM		 911 const int inet_diag_table_size = (INET_DIAG_GETSOCK_MAX *
912 sizeof(struct inet_diag_handler *));
913 int err = -ENOMEM;
914
0da974f4 915 inet_diag_table = kzalloc(inet_diag_table_size, GFP_KERNEL);
4f5736c4
ACM		 916 if (!inet_diag_table)
917 goto out;
918
06628607 919 idiagnl = netlink_kernel_create(NETLINK_INET_DIAG, 0, inet_diag_rcv,
73c1f4a0
ACM		 920 THIS_MODULE);
921 if (idiagnl == NULL)
4f5736c4 922 goto out_free_table;
17b085ea 923 err = 0;
4f5736c4
ACM		 924out:
925 return err;
4f5736c4
ACM		 926out_free_table:
927 kfree(inet_diag_table);
928 goto out;
1da177e4
LT		 929}
930
73c1f4a0 931static void __exit inet_diag_exit(void)
1da177e4 932{
73c1f4a0 933 sock_release(idiagnl->sk_socket);
4f5736c4 934 kfree(inet_diag_table);
1da177e4
LT		 935}
936
73c1f4a0
ACM		 937module_init(inet_diag_init);
938module_exit(inet_diag_exit);
1da177e4 939MODULE_LICENSE("GPL");
Clone of davem's net-next-2.6 tree