Release 4.18 net/ipv6/netfilter.c

/*
 * IPv6 specific functions of netfilter core
 *
 * Rusty Russell (C) 2000 -- This code is GPL.
 * Patrick McHardy (C) 2006-2012
 */
#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/ipv6.h>
#include <linux/netfilter.h>
#include <linux/netfilter_ipv6.h>
#include <linux/export.h>
#include <net/addrconf.h>
#include <net/dst.h>
#include <net/ipv6.h>
#include <net/ip6_route.h>
#include <net/xfrm.h>
#include <net/ip6_checksum.h>
#include <net/netfilter/nf_queue.h>



int ip6_route_me_harder(struct net *net, struct sk_buff *skb)
{
	const struct ipv6hdr *iph = ipv6_hdr(skb);
	struct sock *sk = sk_to_full_sk(skb->sk);
	unsigned int hh_len;
	struct dst_entry *dst;
	struct flowi6 fl6 = {
		.flowi6_oif = sk ? sk->sk_bound_dev_if : 0,
		.flowi6_mark = skb->mark,
		.flowi6_uid = sock_net_uid(net, sk),
		.daddr = iph->daddr,
		.saddr = iph->saddr,
        };
	int err;

	dst = ip6_route_output(net, sk, &fl6);
	err = dst->error;
	if (err) {
		IP6_INC_STATS(net, ip6_dst_idev(dst), IPSTATS_MIB_OUTNOROUTES);
		net_dbg_ratelimited("ip6_route_me_harder: No more route\n");
		dst_release(dst);
		return err;
	}

	/* Drop old route. */
	skb_dst_drop(skb);

	skb_dst_set(skb, dst);

#ifdef CONFIG_XFRM
	if (!(IP6CB(skb)->flags & IP6SKB_XFRM_TRANSFORMED) &&
	    xfrm_decode_session(skb, flowi6_to_flowi(&fl6), AF_INET6) == 0) {
		skb_dst_set(skb, NULL);
		dst = xfrm_lookup(net, dst, flowi6_to_flowi(&fl6), sk, 0);
		if (IS_ERR(dst))
			return PTR_ERR(dst);
		skb_dst_set(skb, dst);
	}
#endif

	/* Change in oif may mean change in hh_len. */
	hh_len = skb_dst(skb)->dev->hard_header_len;
	if (skb_headroom(skb) < hh_len &&
	    pskb_expand_head(skb, HH_DATA_ALIGN(hh_len - skb_headroom(skb)),
			     0, GFP_ATOMIC))
		return -ENOMEM;

	return 0;
}
Contributors
Person
Tokens
Prop
Commits
CommitProp
Patrick McHardy
94
32.53%
3
15.79%
Harald Welte
59
20.42%
1
5.26%
Ulrich Weber
47
16.26%
1
5.26%
Eric Dumazet
24
8.30%
3
15.79%
David S. Miller
24
8.30%
2
10.53%
Lorenzo Colitti
10
3.46%
1
5.26%
Sergey Popovich
10
3.46%
1
5.26%
Yasuyuki Kozakai
6
2.08%
1
5.26%
Eric W. Biedermann
5
1.73%
1
5.26%
Alexey Dobriyan
4
1.38%
2
10.53%
Arnaldo Carvalho de Melo
3
1.04%
1
5.26%
Joe Perches
2
0.69%
1
5.26%
Daniel Lezcano
1
0.35%
1
5.26%
Total
289
100.00%
19
100.00%

EXPORT_SYMBOL(ip6_route_me_harder);



static int nf_ip6_reroute(struct sk_buff *skb,
			  const struct nf_queue_entry *entry)
{
	struct ip6_rt_info *rt_info = nf_queue_entry_reroute(entry);

	if (entry->state.hook == NF_INET_LOCAL_OUT) {
		const struct ipv6hdr *iph = ipv6_hdr(skb);
		if (!ipv6_addr_equal(&iph->daddr, &rt_info->daddr) ||
		    !ipv6_addr_equal(&iph->saddr, &rt_info->saddr) ||
		    skb->mark != rt_info->mark)
			return ip6_route_me_harder(entry->state.net, skb);
	}
	return 0;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Harald Welte
73
70.87%
1
9.09%
Eric Leblond
8
7.77%
1
9.09%
Patrick McHardy
7
6.80%
3
27.27%
Pablo Neira Ayuso
4
3.88%
1
9.09%
Arnaldo Carvalho de Melo
3
2.91%
1
9.09%
Herbert Xu
3
2.91%
1
9.09%
David S. Miller
2
1.94%
1
9.09%
Eric W. Biedermann
2
1.94%
1
9.09%
Eric Dumazet
1
0.97%
1
9.09%
Total
103
100.00%
11
100.00%



static int nf_ip6_route(struct net *net, struct dst_entry **dst,
			struct flowi *fl, bool strict)
{
	static const struct ipv6_pinfo fake_pinfo;
	static const struct inet_sock fake_sk = {
		/* makes ip6_route_output set RT6_LOOKUP_F_IFACE: */
		.sk.sk_bound_dev_if = 1,
		.pinet6 = (struct ipv6_pinfo *) &fake_pinfo,
        };
	const void *sk = strict ? &fake_sk : NULL;
	struct dst_entry *result;
	int err;

	result = ip6_route_output(net, sk, &fl->u.ip6);
	err = result->error;
	if (err)
		dst_release(result);
	else
		*dst = result;
	return err;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Florian Westphal
85
72.03%
3
50.00%
Patrick McHardy
27
22.88%
1
16.67%
David S. Miller
5
4.24%
1
16.67%
Daniel Lezcano
1
0.85%
1
16.67%
Total
118
100.00%
6
100.00%



__sum16 nf_ip6_checksum(struct sk_buff *skb, unsigned int hook,
			     unsigned int dataoff, u_int8_t protocol)
{
	const struct ipv6hdr *ip6h = ipv6_hdr(skb);
	__sum16 csum = 0;

	switch (skb->ip_summed) {
	case CHECKSUM_COMPLETE:
		if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN)
			break;
		if (!csum_ipv6_magic(&ip6h->saddr, &ip6h->daddr,
				     skb->len - dataoff, protocol,
				     csum_sub(skb->csum,
					      skb_checksum(skb, 0,
							   dataoff, 0)))) {
			skb->ip_summed = CHECKSUM_UNNECESSARY;
			break;
		}
		/* fall through */
	case CHECKSUM_NONE:
		skb->csum = ~csum_unfold(
				csum_ipv6_magic(&ip6h->saddr, &ip6h->daddr,
					     skb->len - dataoff,
					     protocol,
					     csum_sub(0,
						      skb_checksum(skb, 0,
								   dataoff, 0))));
		csum = __skb_checksum_complete(skb);
	}
	return csum;
}
Contributors
Person
Tokens
Prop
Commits
CommitProp
Patrick McHardy
160
94.67%
3
42.86%
Al Viro
5
2.96%
2
28.57%
Arnaldo Carvalho de Melo
3
1.78%
1
14.29%
Eric Dumazet
1
0.59%
1
14.29%
Total
169
100.00%
7
100.00%

EXPORT_SYMBOL(nf_ip6_checksum);



static __sum16 nf_ip6_checksum_partial(struct sk_buff *skb, unsigned int hook,
				       unsigned int dataoff, unsigned int len,
				       u_int8_t protocol)
{
	const struct ipv6hdr *ip6h = ipv6_hdr(skb);
	__wsum hsum;
	__sum16 csum = 0;

	switch (skb->ip_summed) {
	case CHECKSUM_COMPLETE:
		if (len == skb->len - dataoff)
			return nf_ip6_checksum(skb, hook, dataoff, protocol);
		/* fall through */
	case CHECKSUM_NONE:
		hsum = skb_checksum(skb, 0, dataoff, 0);
		skb->csum = ~csum_unfold(csum_ipv6_magic(&ip6h->saddr,
							 &ip6h->daddr,
							 skb->len - dataoff,
							 protocol,
							 csum_sub(0, hsum)));
		skb->ip_summed = CHECKSUM_NONE;
		return __skb_checksum_complete_head(skb, dataoff + len);
	}
	return csum;
}
Contributors
Person
Tokens
Prop
Commits
CommitProp
Patrick McHardy
147
98.00%
1
33.33%
Shan Wei
2
1.33%
1
33.33%
Eric Dumazet
1
0.67%
1
33.33%
Total
150
100.00%
3
100.00%

;


static const struct nf_ipv6_ops ipv6ops = {
	.chk_addr		= ipv6_chk_addr,
	.route_input    	= ip6_route_input,
	.fragment		= ip6_fragment,
	.checksum		= nf_ip6_checksum,
	.checksum_partial	= nf_ip6_checksum_partial,
	.route			= nf_ip6_route,
	.reroute		= nf_ip6_reroute,
};



int __init ipv6_netfilter_init(void)
{
	RCU_INIT_POINTER(nf_ipv6_ops, &ipv6ops);
	return 0;
}

Contributors
Person
Tokens
Prop
Commits
CommitProp
Harald Welte
10
52.63%
1
33.33%
Florian Westphal
8
42.11%
1
33.33%
Pablo Neira Ayuso
1
5.26%
1
33.33%
Total
19
100.00%
3
100.00%

/* This can be called from inet6_init() on errors, so it cannot
 * be marked __exit. -DaveM
 */


void ipv6_netfilter_fini(void)
{
	RCU_INIT_POINTER(nf_ipv6_ops, NULL);
}
Contributors
Person
Tokens
Prop
Commits
CommitProp
Harald Welte
7
50.00%
1
50.00%
Florian Westphal
7
50.00%
1
50.00%
Total
14
100.00%
2
100.00%

Overall Contributors
Person
Tokens
Prop
Commits
CommitProp
Patrick McHardy
449
46.92%
13
26.00%
Harald Welte
177
18.50%
2
4.00%
Florian Westphal
115
12.02%
4
8.00%
Ulrich Weber
47
4.91%
1
2.00%
David S. Miller
32
3.34%
4
8.00%
Eric Dumazet
27
2.82%
3
6.00%
Pablo Neira Ayuso
26
2.72%
5
10.00%
Bernhard Thaler
10
1.04%
2
4.00%
Sergey Popovich
10
1.04%
1
2.00%
Lorenzo Colitti
10
1.04%
1
2.00%
Arnaldo Carvalho de Melo
9
0.94%
1
2.00%
Eric Leblond
8
0.84%
1
2.00%
Eric W. Biedermann
7
0.73%
1
2.00%
Yasuyuki Kozakai
6
0.63%
1
2.00%
Al Viro
5
0.52%
2
4.00%
Alexey Dobriyan
4
0.42%
2
4.00%
Brian Haley
3
0.31%
1
2.00%
Paul Gortmaker
3
0.31%
1
2.00%
Herbert Xu
3
0.31%
1
2.00%
Joe Perches
2
0.21%
1
2.00%
Shan Wei
2
0.21%
1
2.00%
Daniel Lezcano
2
0.21%
1
2.00%
Total
957
100.00%
50
100.00%
Directory: net/ipv6

Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.