]> bbs.cooldavid.org Git - net-next-2.6.git/blame - net/ipv6/tunnel6.c
filter: optimize sk_run_filter
[net-next-2.6.git] / net / ipv6 / tunnel6.c
CommitLineData
d2acc347
HX
1/*
2 * Copyright (C)2003,2004 USAGI/WIDE Project
3 *
4 * This program is free software; you can redistribute it and/or modify
5 * it under the terms of the GNU General Public License as published by
6 * the Free Software Foundation; either version 2 of the License, or
7 * (at your option) any later version.
8 *
9 * This program is distributed in the hope that it will be useful,
10 * but WITHOUT ANY WARRANTY; without even the implied warranty of
11 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
12 * GNU General Public License for more details.
13 *
14 * You should have received a copy of the GNU General Public License
15 * along with this program; if not, write to the Free Software
16 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
17 *
18 * Authors Mitsuru KANDA <mk@linux-ipv6.org>
19 * YOSHIFUJI Hideaki <yoshfuji@linux-ipv6.org>
20 */
21
50fba2aa 22#include <linux/icmpv6.h>
d2acc347
HX
23#include <linux/init.h>
24#include <linux/module.h>
25#include <linux/mutex.h>
26#include <linux/netdevice.h>
27#include <linux/skbuff.h>
5a0e3ad6 28#include <linux/slab.h>
50fba2aa 29#include <net/ipv6.h>
d2acc347
HX
30#include <net/protocol.h>
31#include <net/xfrm.h>
32
6f0bcf15
ED
33static struct xfrm6_tunnel __rcu *tunnel6_handlers __read_mostly;
34static struct xfrm6_tunnel __rcu *tunnel46_handlers __read_mostly;
d2acc347
HX
35static DEFINE_MUTEX(tunnel6_mutex);
36
73d605d1 37int xfrm6_tunnel_register(struct xfrm6_tunnel *handler, unsigned short family)
d2acc347 38{
6f0bcf15
ED
39 struct xfrm6_tunnel __rcu **pprev;
40 struct xfrm6_tunnel *t;
d2acc347
HX
41 int ret = -EEXIST;
42 int priority = handler->priority;
43
44 mutex_lock(&tunnel6_mutex);
45
73d605d1 46 for (pprev = (family == AF_INET6) ? &tunnel6_handlers : &tunnel46_handlers;
6f0bcf15
ED
47 (t = rcu_dereference_protected(*pprev,
48 lockdep_is_held(&tunnel6_mutex))) != NULL;
49 pprev = &t->next) {
50 if (t->priority > priority)
d2acc347 51 break;
6f0bcf15 52 if (t->priority == priority)
d2acc347
HX
53 goto err;
54 }
55
56 handler->next = *pprev;
49d61e23 57 rcu_assign_pointer(*pprev, handler);
d2acc347
HX
58
59 ret = 0;
60
61err:
62 mutex_unlock(&tunnel6_mutex);
63
64 return ret;
65}
66
67EXPORT_SYMBOL(xfrm6_tunnel_register);
68
73d605d1 69int xfrm6_tunnel_deregister(struct xfrm6_tunnel *handler, unsigned short family)
d2acc347 70{
6f0bcf15
ED
71 struct xfrm6_tunnel __rcu **pprev;
72 struct xfrm6_tunnel *t;
d2acc347
HX
73 int ret = -ENOENT;
74
75 mutex_lock(&tunnel6_mutex);
76
73d605d1 77 for (pprev = (family == AF_INET6) ? &tunnel6_handlers : &tunnel46_handlers;
6f0bcf15
ED
78 (t = rcu_dereference_protected(*pprev,
79 lockdep_is_held(&tunnel6_mutex))) != NULL;
80 pprev = &t->next) {
81 if (t == handler) {
d2acc347
HX
82 *pprev = handler->next;
83 ret = 0;
84 break;
85 }
86 }
87
88 mutex_unlock(&tunnel6_mutex);
89
90 synchronize_net();
91
92 return ret;
93}
94
95EXPORT_SYMBOL(xfrm6_tunnel_deregister);
96
875168a9
ED
97#define for_each_tunnel_rcu(head, handler) \
98 for (handler = rcu_dereference(head); \
99 handler != NULL; \
100 handler = rcu_dereference(handler->next)) \
101
e5bbef20 102static int tunnel6_rcv(struct sk_buff *skb)
d2acc347 103{
d2acc347
HX
104 struct xfrm6_tunnel *handler;
105
50fba2aa
HX
106 if (!pskb_may_pull(skb, sizeof(struct ipv6hdr)))
107 goto drop;
108
875168a9 109 for_each_tunnel_rcu(tunnel6_handlers, handler)
d2acc347
HX
110 if (!handler->handler(skb))
111 return 0;
112
3ffe533c 113 icmpv6_send(skb, ICMPV6_DEST_UNREACH, ICMPV6_PORT_UNREACH, 0);
50fba2aa
HX
114
115drop:
d2acc347
HX
116 kfree_skb(skb);
117 return 0;
118}
119
e5bbef20 120static int tunnel46_rcv(struct sk_buff *skb)
73d605d1 121{
73d605d1
KM
122 struct xfrm6_tunnel *handler;
123
82836372 124 if (!pskb_may_pull(skb, sizeof(struct iphdr)))
73d605d1
KM
125 goto drop;
126
875168a9 127 for_each_tunnel_rcu(tunnel46_handlers, handler)
73d605d1
KM
128 if (!handler->handler(skb))
129 return 0;
130
3ffe533c 131 icmpv6_send(skb, ICMPV6_DEST_UNREACH, ICMPV6_PORT_UNREACH, 0);
73d605d1
KM
132
133drop:
134 kfree_skb(skb);
135 return 0;
136}
137
d2acc347 138static void tunnel6_err(struct sk_buff *skb, struct inet6_skb_parm *opt,
d5fdd6ba 139 u8 type, u8 code, int offset, __be32 info)
d2acc347
HX
140{
141 struct xfrm6_tunnel *handler;
142
875168a9 143 for_each_tunnel_rcu(tunnel6_handlers, handler)
d2acc347
HX
144 if (!handler->err_handler(skb, opt, type, code, offset, info))
145 break;
146}
147
41135cc8 148static const struct inet6_protocol tunnel6_protocol = {
d2acc347
HX
149 .handler = tunnel6_rcv,
150 .err_handler = tunnel6_err,
151 .flags = INET6_PROTO_NOPOLICY|INET6_PROTO_FINAL,
152};
153
41135cc8 154static const struct inet6_protocol tunnel46_protocol = {
73d605d1
KM
155 .handler = tunnel46_rcv,
156 .err_handler = tunnel6_err,
157 .flags = INET6_PROTO_NOPOLICY|INET6_PROTO_FINAL,
158};
159
d2acc347
HX
160static int __init tunnel6_init(void)
161{
162 if (inet6_add_protocol(&tunnel6_protocol, IPPROTO_IPV6)) {
163 printk(KERN_ERR "tunnel6 init(): can't add protocol\n");
164 return -EAGAIN;
165 }
73d605d1
KM
166 if (inet6_add_protocol(&tunnel46_protocol, IPPROTO_IPIP)) {
167 printk(KERN_ERR "tunnel6 init(): can't add protocol\n");
168 inet6_del_protocol(&tunnel6_protocol, IPPROTO_IPV6);
169 return -EAGAIN;
170 }
d2acc347
HX
171 return 0;
172}
173
174static void __exit tunnel6_fini(void)
175{
73d605d1
KM
176 if (inet6_del_protocol(&tunnel46_protocol, IPPROTO_IPIP))
177 printk(KERN_ERR "tunnel6 close: can't remove protocol\n");
d2acc347
HX
178 if (inet6_del_protocol(&tunnel6_protocol, IPPROTO_IPV6))
179 printk(KERN_ERR "tunnel6 close: can't remove protocol\n");
180}
181
182module_init(tunnel6_init);
183module_exit(tunnel6_fini);
184MODULE_LICENSE("GPL");