]>
Commit | Line | Data |
---|---|---|
1da177e4 LT |
1 | /* |
2 | * xfrm6_output.c - Common IPsec encapsulation code for IPv6. | |
3 | * Copyright (C) 2002 USAGI/WIDE Project | |
4 | * Copyright (c) 2004 Herbert Xu <herbert@gondor.apana.org.au> | |
1ab1457c | 5 | * |
1da177e4 LT |
6 | * This program is free software; you can redistribute it and/or |
7 | * modify it under the terms of the GNU General Public License | |
8 | * as published by the Free Software Foundation; either version | |
9 | * 2 of the License, or (at your option) any later version. | |
10 | */ | |
11 | ||
406ef77c | 12 | #include <linux/if_ether.h> |
36cf9acf HX |
13 | #include <linux/kernel.h> |
14 | #include <linux/module.h> | |
1da177e4 | 15 | #include <linux/skbuff.h> |
1da177e4 | 16 | #include <linux/icmpv6.h> |
16a6677f | 17 | #include <linux/netfilter_ipv6.h> |
36cf9acf | 18 | #include <net/dst.h> |
1da177e4 LT |
19 | #include <net/ipv6.h> |
20 | #include <net/xfrm.h> | |
21 | ||
aee5adb4 MN |
22 | int xfrm6_find_1stfragopt(struct xfrm_state *x, struct sk_buff *skb, |
23 | u8 **prevhdr) | |
24 | { | |
25 | return ip6_find_1stfragopt(skb, prevhdr); | |
26 | } | |
27 | ||
7159039a YH |
28 | EXPORT_SYMBOL(xfrm6_find_1stfragopt); |
29 | ||
1da177e4 LT |
30 | static int xfrm6_tunnel_check_size(struct sk_buff *skb) |
31 | { | |
32 | int mtu, ret = 0; | |
33 | struct dst_entry *dst = skb->dst; | |
34 | ||
35 | mtu = dst_mtu(dst); | |
36 | if (mtu < IPV6_MIN_MTU) | |
37 | mtu = IPV6_MIN_MTU; | |
38 | ||
39 | if (skb->len > mtu) { | |
180e4250 | 40 | skb->dev = dst->dev; |
1da177e4 LT |
41 | icmpv6_send(skb, ICMPV6_PKT_TOOBIG, 0, mtu, skb->dev); |
42 | ret = -EMSGSIZE; | |
43 | } | |
44 | ||
45 | return ret; | |
46 | } | |
47 | ||
36cf9acf HX |
48 | int xfrm6_extract_output(struct xfrm_state *x, struct sk_buff *skb) |
49 | { | |
50 | int err; | |
51 | ||
52 | err = xfrm6_tunnel_check_size(skb); | |
53 | if (err) | |
54 | return err; | |
55 | ||
227620e2 | 56 | IP6CB(skb)->nhoff = offsetof(struct ipv6hdr, nexthdr); |
36cf9acf HX |
57 | return xfrm6_extract_header(skb); |
58 | } | |
59 | ||
60 | int xfrm6_prepare_output(struct xfrm_state *x, struct sk_buff *skb) | |
61 | { | |
62 | int err; | |
63 | ||
64 | err = x->inner_mode->afinfo->extract_output(x, skb); | |
65 | if (err) | |
66 | return err; | |
67 | ||
68 | memset(IP6CB(skb), 0, sizeof(*IP6CB(skb))); | |
862b82c6 HX |
69 | #ifdef CONFIG_NETFILTER |
70 | IP6CB(skb)->flags |= IP6SKB_XFRM_TRANSFORMED; | |
71 | #endif | |
36cf9acf HX |
72 | |
73 | skb->protocol = htons(ETH_P_IPV6); | |
74 | ||
75 | return x->outer_mode->output2(x, skb); | |
76 | } | |
77 | EXPORT_SYMBOL(xfrm6_prepare_output); | |
78 | ||
09b8f7a9 HX |
79 | static int xfrm6_output_finish(struct sk_buff *skb) |
80 | { | |
862b82c6 HX |
81 | #ifdef CONFIG_NETFILTER |
82 | IP6CB(skb)->flags |= IP6SKB_XFRM_TRANSFORMED; | |
83 | #endif | |
09b8f7a9 | 84 | |
679e898a | 85 | skb->protocol = htons(ETH_P_IPV6); |
862b82c6 | 86 | return xfrm_output(skb); |
09b8f7a9 HX |
87 | } |
88 | ||
16a6677f PM |
89 | int xfrm6_output(struct sk_buff *skb) |
90 | { | |
91 | return NF_HOOK(PF_INET6, NF_IP6_POST_ROUTING, skb, NULL, skb->dst->dev, | |
92 | xfrm6_output_finish); | |
93 | } |