cregit-Linux how code gets into the kernel

Release 4.8 net/ipv4/netfilter/nf_defrag_ipv4.c

/* (C) 1999-2001 Paul `Rusty' Russell
 * (C) 2002-2004 Netfilter Core Team <coreteam@netfilter.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/types.h>
#include <linux/ip.h>
#include <linux/netfilter.h>
#include <linux/module.h>
#include <linux/skbuff.h>
#include <net/route.h>
#include <net/ip.h>

#include <linux/netfilter_bridge.h>
#include <linux/netfilter_ipv4.h>
#include <net/netfilter/ipv4/nf_defrag_ipv4.h>
#if IS_ENABLED(CONFIG_NF_CONNTRACK)
#include <net/netfilter/nf_conntrack.h>
#endif
#include <net/netfilter/nf_conntrack_zones.h>


static int nf_ct_ipv4_gather_frags(struct net *net, struct sk_buff *skb, u_int32_t user) { int err; local_bh_disable(); err = ip_defrag(net, skb, user); local_bh_enable(); if (!err) skb->ignore_df = 1; return err; }

Contributors

PersonTokensPropCommitsCommitProp
kovacs krisztiankovacs krisztian4075.47%125.00%
eric w. biedermaneric w. biederman713.21%125.00%
florian westphalflorian westphal59.43%125.00%
americo wangamerico wang11.89%125.00%
Total53100.00%4100.00%


static enum ip_defrag_users nf_ct_defrag_user(unsigned int hooknum, struct sk_buff *skb) { u16 zone_id = NF_CT_DEFAULT_ZONE_ID; #if IS_ENABLED(CONFIG_NF_CONNTRACK) if (skb->nfct) { enum ip_conntrack_info ctinfo; const struct nf_conn *ct = nf_ct_get(skb, &ctinfo); zone_id = nf_ct_zone_id(nf_ct_zone(ct), CTINFO2DIR(ctinfo)); } #endif if (nf_bridge_in_prerouting(skb)) return IP_DEFRAG_CONNTRACK_BRIDGE_IN + zone_id; if (hooknum == NF_INET_PRE_ROUTING) return IP_DEFRAG_CONNTRACK_IN + zone_id; else return IP_DEFRAG_CONNTRACK_OUT + zone_id; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy6060.61%342.86%
daniel borkmanndaniel borkmann3535.35%228.57%
florian westphalflorian westphal33.03%114.29%
duan jiongduan jiong11.01%114.29%
Total99100.00%7100.00%


static unsigned int ipv4_conntrack_defrag(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { struct sock *sk = skb->sk; if (sk && sk_fullsock(sk) && (sk->sk_family == PF_INET) && inet_sk(sk)->nodefrag) return NF_ACCEPT; #if IS_ENABLED(CONFIG_NF_CONNTRACK) #if !IS_ENABLED(CONFIG_NF_NAT) /* Previously seen (loopback)? Ignore. Do this before fragment check. */ if (skb->nfct && !nf_ct_is_template((struct nf_conn *)skb->nfct)) return NF_ACCEPT; #endif #endif /* Gather fragments. */ if (ip_is_fragment(ip_hdr(skb))) { enum ip_defrag_users user = nf_ct_defrag_user(state->hook, skb); if (nf_ct_ipv4_gather_frags(state->net, skb, user)) return NF_STOLEN; } return NF_ACCEPT; }

Contributors

PersonTokensPropCommitsCommitProp
kovacs krisztiankovacs krisztian5941.26%17.14%
patrick mchardypatrick mchardy3423.78%428.57%
jiri olsajiri olsa2718.88%214.29%
eric dumazeteric dumazet96.29%17.14%
eric w. biedermaneric w. biederman85.59%321.43%
david s. millerdavid s. miller21.40%17.14%
duan jiongduan jiong21.40%17.14%
paul gortmakerpaul gortmaker21.40%17.14%
Total143100.00%14100.00%

static struct nf_hook_ops ipv4_defrag_ops[] = { { .hook = ipv4_conntrack_defrag, .pf = NFPROTO_IPV4, .hooknum = NF_INET_PRE_ROUTING, .priority = NF_IP_PRI_CONNTRACK_DEFRAG, }, { .hook = ipv4_conntrack_defrag, .pf = NFPROTO_IPV4, .hooknum = NF_INET_LOCAL_OUT, .priority = NF_IP_PRI_CONNTRACK_DEFRAG, }, };
static int __init nf_defrag_init(void) { return nf_register_hooks(ipv4_defrag_ops, ARRAY_SIZE(ipv4_defrag_ops)); }

Contributors

PersonTokensPropCommitsCommitProp
kovacs krisztiankovacs krisztian20100.00%1100.00%
Total20100.00%1100.00%


static void __exit nf_defrag_fini(void) { nf_unregister_hooks(ipv4_defrag_ops, ARRAY_SIZE(ipv4_defrag_ops)); }

Contributors

PersonTokensPropCommitsCommitProp
kovacs krisztiankovacs krisztian19100.00%1100.00%
Total19100.00%1100.00%


void nf_defrag_ipv4_enable(void) { }

Contributors

PersonTokensPropCommitsCommitProp
kovacs krisztiankovacs krisztian6100.00%1100.00%
Total6100.00%1100.00%

EXPORT_SYMBOL_GPL(nf_defrag_ipv4_enable); module_init(nf_defrag_init); module_exit(nf_defrag_fini); MODULE_LICENSE("GPL");

Overall Contributors

PersonTokensPropCommitsCommitProp
kovacs krisztiankovacs krisztian24152.74%14.35%
patrick mchardypatrick mchardy10923.85%626.09%
daniel borkmanndaniel borkmann357.66%28.70%
jiri olsajiri olsa275.91%28.70%
eric w. biedermaneric w. biederman153.28%313.04%
florian westphalflorian westphal102.19%313.04%
eric dumazeteric dumazet91.97%14.35%
duan jiongduan jiong40.88%14.35%
david s. millerdavid s. miller20.44%14.35%
paul gortmakerpaul gortmaker20.44%14.35%
alban crequyalban crequy20.44%14.35%
americo wangamerico wang10.22%14.35%
Total457100.00%23100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.