cregit-Linux how code gets into the kernel

Release 4.7 net/ipv4/ip_forward.c

Directory: net/ipv4
/*
 * INET         An implementation of the TCP/IP protocol suite for the LINUX
 *              operating system.  INET is implemented using the  BSD Socket
 *              interface as the means of communication with the user level.
 *
 *              The IP forwarding functionality.
 *
 * Authors:     see ip.c
 *
 * Fixes:
 *              Many            :       Split from ip.c , see ip_input.c for
 *                                      history.
 *              Dave Gregorich  :       NULL ip_rt_put fix for multicast
 *                                      routing.
 *              Jos Vos         :       Add call_out_firewall before sending,
 *                                      use output device for accounting.
 *              Jos Vos         :       Call forward firewall after routing
 *                                      (always use output device).
 *              Mike McLagan    :       Routing by source
 */

#include <linux/types.h>
#include <linux/mm.h>
#include <linux/skbuff.h>
#include <linux/ip.h>
#include <linux/icmp.h>
#include <linux/netdevice.h>
#include <linux/slab.h>
#include <net/sock.h>
#include <net/ip.h>
#include <net/tcp.h>
#include <net/udp.h>
#include <net/icmp.h>
#include <linux/tcp.h>
#include <linux/udp.h>
#include <linux/netfilter_ipv4.h>
#include <net/checksum.h>
#include <linux/route.h>
#include <net/route.h>
#include <net/xfrm.h>


static bool ip_exceeds_mtu(const struct sk_buff *skb, unsigned int mtu) { if (skb->len <= mtu) return false; if (unlikely((ip_hdr(skb)->frag_off & htons(IP_DF)) == 0)) return false; /* original fragment exceeds mtu and DF is set */ if (unlikely(IPCB(skb)->frag_max_size > mtu)) return true; if (skb->ignore_df) return false; if (skb_is_gso(skb) && skb_gso_network_seglen(skb) <= mtu) return false; return true; }

Contributors

PersonTokensPropCommitsCommitProp
florian westphalflorian westphal98100.00%2100.00%
Total98100.00%2100.00%


static int ip_forward_finish(struct net *net, struct sock *sk, struct sk_buff *skb) { struct ip_options *opt = &(IPCB(skb)->opt); __IP_INC_STATS(net, IPSTATS_MIB_OUTFORWDATAGRAMS); __IP_ADD_STATS(net, IPSTATS_MIB_OUTOCTETS, skb->len); if (unlikely(opt->optlen)) ip_forward_options(skb); return dst_output(net, sk, skb); }

Contributors

PersonTokensPropCommitsCommitProp
pre-gitpre-git4557.69%531.25%
eric w. biedermaneric w. biederman1012.82%425.00%
vincent bernatvincent bernat911.54%16.25%
david s. millerdavid s. miller78.97%16.25%
alexey kuznetsovalexey kuznetsov33.85%16.25%
eric dumazeteric dumazet22.56%212.50%
hideaki yoshifujihideaki yoshifuji11.28%16.25%
pavel emelianovpavel emelianov11.28%16.25%
Total78100.00%16100.00%


int ip_forward(struct sk_buff *skb) { u32 mtu; struct iphdr *iph; /* Our header */ struct rtable *rt; /* Route we use */ struct ip_options *opt = &(IPCB(skb)->opt); struct net *net; /* that should never happen */ if (skb->pkt_type != PACKET_HOST) goto drop; if (unlikely(skb->sk)) goto drop; if (skb_warn_if_lro(skb)) goto drop; if (!xfrm4_policy_check(NULL, XFRM_POLICY_FWD, skb)) goto drop; if (IPCB(skb)->opt.router_alert && ip_call_ra_chain(skb)) return NET_RX_SUCCESS; skb_forward_csum(skb); net = dev_net(skb->dev); /* * According to the RFC, we must first decrease the TTL field. If * that reaches zero, we must reply an ICMP control message telling * that the packet's lifetime expired. */ if (ip_hdr(skb)->ttl <= 1) goto too_many_hops; if (!xfrm4_route_forward(skb)) goto drop; rt = skb_rtable(skb); if (opt->is_strictroute && rt->rt_uses_gateway) goto sr_failed; IPCB(skb)->flags |= IPSKB_FORWARDED; mtu = ip_dst_mtu_maybe_forward(&rt->dst, true); if (ip_exceeds_mtu(skb, mtu)) { IP_INC_STATS(net, IPSTATS_MIB_FRAGFAILS); icmp_send(skb, ICMP_DEST_UNREACH, ICMP_FRAG_NEEDED, htonl(mtu)); goto drop; } /* We are about to mangle packet. Copy it! */ if (skb_cow(skb, LL_RESERVED_SPACE(rt->dst.dev)+rt->dst.header_len)) goto drop; iph = ip_hdr(skb); /* Decrease ttl after skb cow done */ ip_decrease_ttl(iph); /* * We now generate an ICMP HOST REDIRECT giving the route * we calculated. */ if (IPCB(skb)->flags & IPSKB_DOREDIRECT && !opt->srr && !skb_sec_path(skb)) ip_rt_send_redirect(skb); skb->priority = rt_tos2priority(iph->tos); return NF_HOOK(NFPROTO_IPV4, NF_INET_FORWARD, net, NULL, skb, skb->dev, rt->dst.dev, ip_forward_finish); sr_failed: /* * Strict routing permits no gatewaying */ icmp_send(skb, ICMP_DEST_UNREACH, ICMP_SR_FAILED, 0); goto drop; too_many_hops: /* Tell the sender its packet died... */ __IP_INC_STATS(net, IPSTATS_MIB_INHDRERRORS); icmp_send(skb, ICMP_TIME_EXCEEDED, ICMP_EXC_TTL, 0); drop: kfree_skb(skb); return NET_RX_DROP; }

Contributors

PersonTokensPropCommitsCommitProp
pre-gitpre-git16743.83%1229.27%
alexey kuznetsovalexey kuznetsov6015.75%49.76%
john heffnerjohn heffner369.45%12.44%
hannes frederic sowahannes frederic sowa246.30%24.88%
eric w. biedermaneric w. biederman184.72%24.88%
denis kirjanovdenis kirjanov123.15%12.44%
sebastian pohnsebastian pohn123.15%12.44%
ben hutchingsben hutchings102.62%12.44%
arnaldo carvalho de meloarnaldo carvalho de melo61.57%12.44%
linus torvaldslinus torvalds51.31%12.44%
eric dumazeteric dumazet41.05%24.88%
wei dongwei dong41.05%12.44%
herbert xuherbert xu30.79%12.44%
masahide nakamuramasahide nakamura30.79%12.44%
florian westphalflorian westphal30.79%12.44%
alexey dobriyanalexey dobriyan30.79%12.44%
pavel emelianovpavel emelianov20.52%24.88%
thomas grafthomas graf20.52%12.44%
hideaki yoshifujihideaki yoshifuji20.52%12.44%
david s. millerdavid s. miller20.52%12.44%
patrick mchardypatrick mchardy10.26%12.44%
jan engelhardtjan engelhardt10.26%12.44%
julian anastasovjulian anastasov10.26%12.44%
Total381100.00%41100.00%


Overall Contributors

PersonTokensPropCommitsCommitProp
pre-gitpre-git26342.76%1527.27%
florian westphalflorian westphal10116.42%23.64%
alexey kuznetsovalexey kuznetsov6610.73%59.09%
john heffnerjohn heffner365.85%11.82%
eric w. biedermaneric w. biederman284.55%610.91%
hannes frederic sowahannes frederic sowa243.90%23.64%
denis kirjanovdenis kirjanov121.95%11.82%
sebastian pohnsebastian pohn121.95%11.82%
ben hutchingsben hutchings101.63%11.82%
david s. millerdavid s. miller91.46%11.82%
vincent bernatvincent bernat91.46%11.82%
arnaldo carvalho de meloarnaldo carvalho de melo60.98%11.82%
eric dumazeteric dumazet60.98%35.45%
linus torvaldslinus torvalds50.81%11.82%
wei dongwei dong40.65%11.82%
herbert xuherbert xu30.49%11.82%
pavel emelianovpavel emelianov30.49%23.64%
hideaki yoshifujihideaki yoshifuji30.49%23.64%
masahide nakamuramasahide nakamura30.49%11.82%
tejun heotejun heo30.49%11.82%
alexey dobriyanalexey dobriyan30.49%11.82%
thomas grafthomas graf20.33%11.82%
patrick mchardypatrick mchardy10.16%11.82%
jan engelhardtjan engelhardt10.16%11.82%
julian anastasovjulian anastasov10.16%11.82%
adrian bunkadrian bunk10.16%11.82%
Total615100.00%55100.00%
Directory: net/ipv4
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
{% endraw %}