• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /*
2  *	RAW sockets for IPv6
3  *	Linux INET6 implementation
4  *
5  *	Authors:
6  *	Pedro Roque		<roque@di.fc.ul.pt>
7  *
8  *	Adapted from linux/net/ipv4/raw.c
9  *
10  *	Fixes:
11  *	Hideaki YOSHIFUJI	:	sin6_scope_id support
12  *	YOSHIFUJI,H.@USAGI	:	raw checksum (RFC2292(bis) compliance)
13  *	Kazunori MIYAZAWA @USAGI:	change process style to use ip6_append_data
14  *
15  *	This program is free software; you can redistribute it and/or
16  *      modify it under the terms of the GNU General Public License
17  *      as published by the Free Software Foundation; either version
18  *      2 of the License, or (at your option) any later version.
19  */
20 
21 #include <linux/errno.h>
22 #include <linux/types.h>
23 #include <linux/socket.h>
24 #include <linux/slab.h>
25 #include <linux/sockios.h>
26 #include <linux/net.h>
27 #include <linux/in6.h>
28 #include <linux/netdevice.h>
29 #include <linux/if_arp.h>
30 #include <linux/icmpv6.h>
31 #include <linux/netfilter.h>
32 #include <linux/netfilter_ipv6.h>
33 #include <linux/skbuff.h>
34 #include <linux/compat.h>
35 #include <asm/uaccess.h>
36 #include <asm/ioctls.h>
37 
38 #include <net/net_namespace.h>
39 #include <net/ip.h>
40 #include <net/sock.h>
41 #include <net/snmp.h>
42 
43 #include <net/ipv6.h>
44 #include <net/ndisc.h>
45 #include <net/protocol.h>
46 #include <net/ip6_route.h>
47 #include <net/ip6_checksum.h>
48 #include <net/addrconf.h>
49 #include <net/transp_v6.h>
50 #include <net/udp.h>
51 #include <net/inet_common.h>
52 #include <net/tcp_states.h>
53 #if IS_ENABLED(CONFIG_IPV6_MIP6)
54 #include <net/mip6.h>
55 #endif
56 #include <linux/mroute6.h>
57 
58 #include <net/raw.h>
59 #include <net/rawv6.h>
60 #include <net/xfrm.h>
61 
62 #include <linux/proc_fs.h>
63 #include <linux/seq_file.h>
64 #include <linux/export.h>
65 
66 #define	ICMPV6_HDRLEN	4	/* ICMPv6 header, RFC 4443 Section 2.1 */
67 
68 static struct raw_hashinfo raw_v6_hashinfo = {
69 	.lock = __RW_LOCK_UNLOCKED(raw_v6_hashinfo.lock),
70 };
71 
__raw_v6_lookup(struct net * net,struct sock * sk,unsigned short num,const struct in6_addr * loc_addr,const struct in6_addr * rmt_addr,int dif)72 static struct sock *__raw_v6_lookup(struct net *net, struct sock *sk,
73 		unsigned short num, const struct in6_addr *loc_addr,
74 		const struct in6_addr *rmt_addr, int dif)
75 {
76 	bool is_multicast = ipv6_addr_is_multicast(loc_addr);
77 
78 	sk_for_each_from(sk)
79 		if (inet_sk(sk)->inet_num == num) {
80 
81 			if (!net_eq(sock_net(sk), net))
82 				continue;
83 
84 			if (!ipv6_addr_any(&sk->sk_v6_daddr) &&
85 			    !ipv6_addr_equal(&sk->sk_v6_daddr, rmt_addr))
86 				continue;
87 
88 			if (sk->sk_bound_dev_if && sk->sk_bound_dev_if != dif)
89 				continue;
90 
91 			if (!ipv6_addr_any(&sk->sk_v6_rcv_saddr)) {
92 				if (ipv6_addr_equal(&sk->sk_v6_rcv_saddr, loc_addr))
93 					goto found;
94 				if (is_multicast &&
95 				    inet6_mc_check(sk, loc_addr, rmt_addr))
96 					goto found;
97 				continue;
98 			}
99 			goto found;
100 		}
101 	sk = NULL;
102 found:
103 	return sk;
104 }
105 
106 /*
107  *	0 - deliver
108  *	1 - block
109  */
icmpv6_filter(const struct sock * sk,const struct sk_buff * skb)110 static int icmpv6_filter(const struct sock *sk, const struct sk_buff *skb)
111 {
112 	struct icmp6hdr _hdr;
113 	const struct icmp6hdr *hdr;
114 
115 	/* We require only the four bytes of the ICMPv6 header, not any
116 	 * additional bytes of message body in "struct icmp6hdr".
117 	 */
118 	hdr = skb_header_pointer(skb, skb_transport_offset(skb),
119 				 ICMPV6_HDRLEN, &_hdr);
120 	if (hdr) {
121 		const __u32 *data = &raw6_sk(sk)->filter.data[0];
122 		unsigned int type = hdr->icmp6_type;
123 
124 		return (data[type >> 5] & (1U << (type & 31))) != 0;
125 	}
126 	return 1;
127 }
128 
129 #if IS_ENABLED(CONFIG_IPV6_MIP6)
130 typedef int mh_filter_t(struct sock *sock, struct sk_buff *skb);
131 
132 static mh_filter_t __rcu *mh_filter __read_mostly;
133 
rawv6_mh_filter_register(mh_filter_t filter)134 int rawv6_mh_filter_register(mh_filter_t filter)
135 {
136 	rcu_assign_pointer(mh_filter, filter);
137 	return 0;
138 }
139 EXPORT_SYMBOL(rawv6_mh_filter_register);
140 
rawv6_mh_filter_unregister(mh_filter_t filter)141 int rawv6_mh_filter_unregister(mh_filter_t filter)
142 {
143 	RCU_INIT_POINTER(mh_filter, NULL);
144 	synchronize_rcu();
145 	return 0;
146 }
147 EXPORT_SYMBOL(rawv6_mh_filter_unregister);
148 
149 #endif
150 
151 /*
152  *	demultiplex raw sockets.
153  *	(should consider queueing the skb in the sock receive_queue
154  *	without calling rawv6.c)
155  *
156  *	Caller owns SKB so we must make clones.
157  */
ipv6_raw_deliver(struct sk_buff * skb,int nexthdr)158 static bool ipv6_raw_deliver(struct sk_buff *skb, int nexthdr)
159 {
160 	const struct in6_addr *saddr;
161 	const struct in6_addr *daddr;
162 	struct sock *sk;
163 	bool delivered = false;
164 	__u8 hash;
165 	struct net *net;
166 
167 	saddr = &ipv6_hdr(skb)->saddr;
168 	daddr = saddr + 1;
169 
170 	hash = nexthdr & (RAW_HTABLE_SIZE - 1);
171 
172 	read_lock(&raw_v6_hashinfo.lock);
173 	sk = sk_head(&raw_v6_hashinfo.ht[hash]);
174 
175 	if (sk == NULL)
176 		goto out;
177 
178 	net = dev_net(skb->dev);
179 	sk = __raw_v6_lookup(net, sk, nexthdr, daddr, saddr, inet6_iif(skb));
180 
181 	while (sk) {
182 		int filtered;
183 
184 		delivered = true;
185 		switch (nexthdr) {
186 		case IPPROTO_ICMPV6:
187 			filtered = icmpv6_filter(sk, skb);
188 			break;
189 
190 #if IS_ENABLED(CONFIG_IPV6_MIP6)
191 		case IPPROTO_MH:
192 		{
193 			/* XXX: To validate MH only once for each packet,
194 			 * this is placed here. It should be after checking
195 			 * xfrm policy, however it doesn't. The checking xfrm
196 			 * policy is placed in rawv6_rcv() because it is
197 			 * required for each socket.
198 			 */
199 			mh_filter_t *filter;
200 
201 			filter = rcu_dereference(mh_filter);
202 			filtered = filter ? (*filter)(sk, skb) : 0;
203 			break;
204 		}
205 #endif
206 		default:
207 			filtered = 0;
208 			break;
209 		}
210 
211 		if (filtered < 0)
212 			break;
213 		if (filtered == 0) {
214 			struct sk_buff *clone = skb_clone(skb, GFP_ATOMIC);
215 
216 			/* Not releasing hash table! */
217 			if (clone) {
218 				nf_reset(clone);
219 				rawv6_rcv(sk, clone);
220 			}
221 		}
222 		sk = __raw_v6_lookup(net, sk_next(sk), nexthdr, daddr, saddr,
223 				     inet6_iif(skb));
224 	}
225 out:
226 	read_unlock(&raw_v6_hashinfo.lock);
227 	return delivered;
228 }
229 
raw6_local_deliver(struct sk_buff * skb,int nexthdr)230 bool raw6_local_deliver(struct sk_buff *skb, int nexthdr)
231 {
232 	struct sock *raw_sk;
233 
234 	raw_sk = sk_head(&raw_v6_hashinfo.ht[nexthdr & (RAW_HTABLE_SIZE - 1)]);
235 	if (raw_sk && !ipv6_raw_deliver(skb, nexthdr))
236 		raw_sk = NULL;
237 
238 	return raw_sk != NULL;
239 }
240 
241 /* This cleans up af_inet6 a bit. -DaveM */
rawv6_bind(struct sock * sk,struct sockaddr * uaddr,int addr_len)242 static int rawv6_bind(struct sock *sk, struct sockaddr *uaddr, int addr_len)
243 {
244 	struct inet_sock *inet = inet_sk(sk);
245 	struct ipv6_pinfo *np = inet6_sk(sk);
246 	struct sockaddr_in6 *addr = (struct sockaddr_in6 *) uaddr;
247 	__be32 v4addr = 0;
248 	int addr_type;
249 	int err;
250 
251 	if (addr_len < SIN6_LEN_RFC2133)
252 		return -EINVAL;
253 
254 	if (addr->sin6_family != AF_INET6)
255 		return -EINVAL;
256 
257 	addr_type = ipv6_addr_type(&addr->sin6_addr);
258 
259 	/* Raw sockets are IPv6 only */
260 	if (addr_type == IPV6_ADDR_MAPPED)
261 		return -EADDRNOTAVAIL;
262 
263 	lock_sock(sk);
264 
265 	err = -EINVAL;
266 	if (sk->sk_state != TCP_CLOSE)
267 		goto out;
268 
269 	rcu_read_lock();
270 	/* Check if the address belongs to the host. */
271 	if (addr_type != IPV6_ADDR_ANY) {
272 		struct net_device *dev = NULL;
273 
274 		if (__ipv6_addr_needs_scope_id(addr_type)) {
275 			if (addr_len >= sizeof(struct sockaddr_in6) &&
276 			    addr->sin6_scope_id) {
277 				/* Override any existing binding, if another
278 				 * one is supplied by user.
279 				 */
280 				sk->sk_bound_dev_if = addr->sin6_scope_id;
281 			}
282 
283 			/* Binding to link-local address requires an interface */
284 			if (!sk->sk_bound_dev_if)
285 				goto out_unlock;
286 
287 			err = -ENODEV;
288 			dev = dev_get_by_index_rcu(sock_net(sk),
289 						   sk->sk_bound_dev_if);
290 			if (!dev)
291 				goto out_unlock;
292 		}
293 
294 		/* ipv4 addr of the socket is invalid.  Only the
295 		 * unspecified and mapped address have a v4 equivalent.
296 		 */
297 		v4addr = LOOPBACK4_IPV6;
298 		if (!(addr_type & IPV6_ADDR_MULTICAST))	{
299 			err = -EADDRNOTAVAIL;
300 			if (!ipv6_chk_addr(sock_net(sk), &addr->sin6_addr,
301 					   dev, 0)) {
302 				goto out_unlock;
303 			}
304 		}
305 	}
306 
307 	inet->inet_rcv_saddr = inet->inet_saddr = v4addr;
308 	sk->sk_v6_rcv_saddr = addr->sin6_addr;
309 	if (!(addr_type & IPV6_ADDR_MULTICAST))
310 		np->saddr = addr->sin6_addr;
311 	err = 0;
312 out_unlock:
313 	rcu_read_unlock();
314 out:
315 	release_sock(sk);
316 	return err;
317 }
318 
rawv6_err(struct sock * sk,struct sk_buff * skb,struct inet6_skb_parm * opt,u8 type,u8 code,int offset,__be32 info)319 static void rawv6_err(struct sock *sk, struct sk_buff *skb,
320 	       struct inet6_skb_parm *opt,
321 	       u8 type, u8 code, int offset, __be32 info)
322 {
323 	struct inet_sock *inet = inet_sk(sk);
324 	struct ipv6_pinfo *np = inet6_sk(sk);
325 	int err;
326 	int harderr;
327 
328 	/* Report error on raw socket, if:
329 	   1. User requested recverr.
330 	   2. Socket is connected (otherwise the error indication
331 	      is useless without recverr and error is hard.
332 	 */
333 	if (!np->recverr && sk->sk_state != TCP_ESTABLISHED)
334 		return;
335 
336 	harderr = icmpv6_err_convert(type, code, &err);
337 	if (type == ICMPV6_PKT_TOOBIG) {
338 		ip6_sk_update_pmtu(skb, sk, info);
339 		harderr = (np->pmtudisc == IPV6_PMTUDISC_DO);
340 	}
341 	if (type == NDISC_REDIRECT) {
342 		ip6_sk_redirect(skb, sk);
343 		return;
344 	}
345 	if (np->recverr) {
346 		u8 *payload = skb->data;
347 		if (!inet->hdrincl)
348 			payload += offset;
349 		ipv6_icmp_error(sk, skb, err, 0, ntohl(info), payload);
350 	}
351 
352 	if (np->recverr || harderr) {
353 		sk->sk_err = err;
354 		sk->sk_error_report(sk);
355 	}
356 }
357 
raw6_icmp_error(struct sk_buff * skb,int nexthdr,u8 type,u8 code,int inner_offset,__be32 info)358 void raw6_icmp_error(struct sk_buff *skb, int nexthdr,
359 		u8 type, u8 code, int inner_offset, __be32 info)
360 {
361 	struct sock *sk;
362 	int hash;
363 	const struct in6_addr *saddr, *daddr;
364 	struct net *net;
365 
366 	hash = nexthdr & (RAW_HTABLE_SIZE - 1);
367 
368 	read_lock(&raw_v6_hashinfo.lock);
369 	sk = sk_head(&raw_v6_hashinfo.ht[hash]);
370 	if (sk != NULL) {
371 		/* Note: ipv6_hdr(skb) != skb->data */
372 		const struct ipv6hdr *ip6h = (const struct ipv6hdr *)skb->data;
373 		saddr = &ip6h->saddr;
374 		daddr = &ip6h->daddr;
375 		net = dev_net(skb->dev);
376 
377 		while ((sk = __raw_v6_lookup(net, sk, nexthdr, saddr, daddr,
378 						inet6_iif(skb)))) {
379 			rawv6_err(sk, skb, NULL, type, code,
380 					inner_offset, info);
381 			sk = sk_next(sk);
382 		}
383 	}
384 	read_unlock(&raw_v6_hashinfo.lock);
385 }
386 
rawv6_rcv_skb(struct sock * sk,struct sk_buff * skb)387 static inline int rawv6_rcv_skb(struct sock *sk, struct sk_buff *skb)
388 {
389 	if ((raw6_sk(sk)->checksum || rcu_access_pointer(sk->sk_filter)) &&
390 	    skb_checksum_complete(skb)) {
391 		atomic_inc(&sk->sk_drops);
392 		kfree_skb(skb);
393 		return NET_RX_DROP;
394 	}
395 
396 	/* Charge it to the socket. */
397 	skb_dst_drop(skb);
398 	if (sock_queue_rcv_skb(sk, skb) < 0) {
399 		kfree_skb(skb);
400 		return NET_RX_DROP;
401 	}
402 
403 	return 0;
404 }
405 
406 /*
407  *	This is next to useless...
408  *	if we demultiplex in network layer we don't need the extra call
409  *	just to queue the skb...
410  *	maybe we could have the network decide upon a hint if it
411  *	should call raw_rcv for demultiplexing
412  */
rawv6_rcv(struct sock * sk,struct sk_buff * skb)413 int rawv6_rcv(struct sock *sk, struct sk_buff *skb)
414 {
415 	struct inet_sock *inet = inet_sk(sk);
416 	struct raw6_sock *rp = raw6_sk(sk);
417 
418 	if (!xfrm6_policy_check(sk, XFRM_POLICY_IN, skb)) {
419 		atomic_inc(&sk->sk_drops);
420 		kfree_skb(skb);
421 		return NET_RX_DROP;
422 	}
423 
424 	if (!rp->checksum)
425 		skb->ip_summed = CHECKSUM_UNNECESSARY;
426 
427 	if (skb->ip_summed == CHECKSUM_COMPLETE) {
428 		skb_postpull_rcsum(skb, skb_network_header(skb),
429 				   skb_network_header_len(skb));
430 		if (!csum_ipv6_magic(&ipv6_hdr(skb)->saddr,
431 				     &ipv6_hdr(skb)->daddr,
432 				     skb->len, inet->inet_num, skb->csum))
433 			skb->ip_summed = CHECKSUM_UNNECESSARY;
434 	}
435 	if (!skb_csum_unnecessary(skb))
436 		skb->csum = ~csum_unfold(csum_ipv6_magic(&ipv6_hdr(skb)->saddr,
437 							 &ipv6_hdr(skb)->daddr,
438 							 skb->len,
439 							 inet->inet_num, 0));
440 
441 	if (inet->hdrincl) {
442 		if (skb_checksum_complete(skb)) {
443 			atomic_inc(&sk->sk_drops);
444 			kfree_skb(skb);
445 			return NET_RX_DROP;
446 		}
447 	}
448 
449 	rawv6_rcv_skb(sk, skb);
450 	return 0;
451 }
452 
453 
454 /*
455  *	This should be easy, if there is something there
456  *	we return it, otherwise we block.
457  */
458 
rawv6_recvmsg(struct kiocb * iocb,struct sock * sk,struct msghdr * msg,size_t len,int noblock,int flags,int * addr_len)459 static int rawv6_recvmsg(struct kiocb *iocb, struct sock *sk,
460 		  struct msghdr *msg, size_t len,
461 		  int noblock, int flags, int *addr_len)
462 {
463 	struct ipv6_pinfo *np = inet6_sk(sk);
464 	DECLARE_SOCKADDR(struct sockaddr_in6 *, sin6, msg->msg_name);
465 	struct sk_buff *skb;
466 	size_t copied;
467 	int err;
468 
469 	if (flags & MSG_OOB)
470 		return -EOPNOTSUPP;
471 
472 	if (flags & MSG_ERRQUEUE)
473 		return ipv6_recv_error(sk, msg, len, addr_len);
474 
475 	if (np->rxpmtu && np->rxopt.bits.rxpmtu)
476 		return ipv6_recv_rxpmtu(sk, msg, len, addr_len);
477 
478 	skb = skb_recv_datagram(sk, flags, noblock, &err);
479 	if (!skb)
480 		goto out;
481 
482 	copied = skb->len;
483 	if (copied > len) {
484 		copied = len;
485 		msg->msg_flags |= MSG_TRUNC;
486 	}
487 
488 	if (skb_csum_unnecessary(skb)) {
489 		err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
490 	} else if (msg->msg_flags&MSG_TRUNC) {
491 		if (__skb_checksum_complete(skb))
492 			goto csum_copy_err;
493 		err = skb_copy_datagram_iovec(skb, 0, msg->msg_iov, copied);
494 	} else {
495 		err = skb_copy_and_csum_datagram_iovec(skb, 0, msg->msg_iov);
496 		if (err == -EINVAL)
497 			goto csum_copy_err;
498 	}
499 	if (err)
500 		goto out_free;
501 
502 	/* Copy the address. */
503 	if (sin6) {
504 		sin6->sin6_family = AF_INET6;
505 		sin6->sin6_port = 0;
506 		sin6->sin6_addr = ipv6_hdr(skb)->saddr;
507 		sin6->sin6_flowinfo = 0;
508 		sin6->sin6_scope_id = ipv6_iface_scope_id(&sin6->sin6_addr,
509 							  inet6_iif(skb));
510 		*addr_len = sizeof(*sin6);
511 	}
512 
513 	sock_recv_ts_and_drops(msg, sk, skb);
514 
515 	if (np->rxopt.all)
516 		ip6_datagram_recv_ctl(sk, msg, skb);
517 
518 	err = copied;
519 	if (flags & MSG_TRUNC)
520 		err = skb->len;
521 
522 out_free:
523 	skb_free_datagram(sk, skb);
524 out:
525 	return err;
526 
527 csum_copy_err:
528 	skb_kill_datagram(sk, skb, flags);
529 
530 	/* Error for blocking case is chosen to masquerade
531 	   as some normal condition.
532 	 */
533 	err = (flags&MSG_DONTWAIT) ? -EAGAIN : -EHOSTUNREACH;
534 	goto out;
535 }
536 
rawv6_push_pending_frames(struct sock * sk,struct flowi6 * fl6,struct raw6_sock * rp)537 static int rawv6_push_pending_frames(struct sock *sk, struct flowi6 *fl6,
538 				     struct raw6_sock *rp)
539 {
540 	struct sk_buff *skb;
541 	int err = 0;
542 	int offset;
543 	int len;
544 	int total_len;
545 	__wsum tmp_csum;
546 	__sum16 csum;
547 
548 	if (!rp->checksum)
549 		goto send;
550 
551 	if ((skb = skb_peek(&sk->sk_write_queue)) == NULL)
552 		goto out;
553 
554 	offset = rp->offset;
555 	total_len = inet_sk(sk)->cork.base.length;
556 	if (offset >= total_len - 1) {
557 		err = -EINVAL;
558 		ip6_flush_pending_frames(sk);
559 		goto out;
560 	}
561 
562 	/* should be check HW csum miyazawa */
563 	if (skb_queue_len(&sk->sk_write_queue) == 1) {
564 		/*
565 		 * Only one fragment on the socket.
566 		 */
567 		tmp_csum = skb->csum;
568 	} else {
569 		struct sk_buff *csum_skb = NULL;
570 		tmp_csum = 0;
571 
572 		skb_queue_walk(&sk->sk_write_queue, skb) {
573 			tmp_csum = csum_add(tmp_csum, skb->csum);
574 
575 			if (csum_skb)
576 				continue;
577 
578 			len = skb->len - skb_transport_offset(skb);
579 			if (offset >= len) {
580 				offset -= len;
581 				continue;
582 			}
583 
584 			csum_skb = skb;
585 		}
586 
587 		skb = csum_skb;
588 	}
589 
590 	offset += skb_transport_offset(skb);
591 	BUG_ON(skb_copy_bits(skb, offset, &csum, 2));
592 
593 	/* in case cksum was not initialized */
594 	if (unlikely(csum))
595 		tmp_csum = csum_sub(tmp_csum, csum_unfold(csum));
596 
597 	csum = csum_ipv6_magic(&fl6->saddr, &fl6->daddr,
598 			       total_len, fl6->flowi6_proto, tmp_csum);
599 
600 	if (csum == 0 && fl6->flowi6_proto == IPPROTO_UDP)
601 		csum = CSUM_MANGLED_0;
602 
603 	BUG_ON(skb_store_bits(skb, offset, &csum, 2));
604 
605 send:
606 	err = ip6_push_pending_frames(sk);
607 out:
608 	return err;
609 }
610 
rawv6_send_hdrinc(struct sock * sk,void * from,int length,struct flowi6 * fl6,struct dst_entry ** dstp,unsigned int flags)611 static int rawv6_send_hdrinc(struct sock *sk, void *from, int length,
612 			struct flowi6 *fl6, struct dst_entry **dstp,
613 			unsigned int flags)
614 {
615 	struct ipv6_pinfo *np = inet6_sk(sk);
616 	struct ipv6hdr *iph;
617 	struct sk_buff *skb;
618 	int err;
619 	struct rt6_info *rt = (struct rt6_info *)*dstp;
620 	int hlen = LL_RESERVED_SPACE(rt->dst.dev);
621 	int tlen = rt->dst.dev->needed_tailroom;
622 
623 	if (length > rt->dst.dev->mtu) {
624 		ipv6_local_error(sk, EMSGSIZE, fl6, rt->dst.dev->mtu);
625 		return -EMSGSIZE;
626 	}
627 	if (length < sizeof(struct ipv6hdr))
628 		return -EINVAL;
629 	if (flags&MSG_PROBE)
630 		goto out;
631 
632 	skb = sock_alloc_send_skb(sk,
633 				  length + hlen + tlen + 15,
634 				  flags & MSG_DONTWAIT, &err);
635 	if (skb == NULL)
636 		goto error;
637 	skb_reserve(skb, hlen);
638 
639 	skb->protocol = htons(ETH_P_IPV6);
640 	skb->priority = sk->sk_priority;
641 	skb->mark = sk->sk_mark;
642 	skb_dst_set(skb, &rt->dst);
643 	*dstp = NULL;
644 
645 	skb_put(skb, length);
646 	skb_reset_network_header(skb);
647 	iph = ipv6_hdr(skb);
648 
649 	skb->ip_summed = CHECKSUM_NONE;
650 
651 	skb->transport_header = skb->network_header;
652 	err = memcpy_fromiovecend((void *)iph, from, 0, length);
653 	if (err)
654 		goto error_fault;
655 
656 	IP6_UPD_PO_STATS(sock_net(sk), rt->rt6i_idev, IPSTATS_MIB_OUT, skb->len);
657 	err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL,
658 		      rt->dst.dev, dst_output);
659 	if (err > 0)
660 		err = net_xmit_errno(err);
661 	if (err)
662 		goto error;
663 out:
664 	return 0;
665 
666 error_fault:
667 	err = -EFAULT;
668 	kfree_skb(skb);
669 error:
670 	IP6_INC_STATS(sock_net(sk), rt->rt6i_idev, IPSTATS_MIB_OUTDISCARDS);
671 	if (err == -ENOBUFS && !np->recverr)
672 		err = 0;
673 	return err;
674 }
675 
rawv6_probe_proto_opt(struct flowi6 * fl6,struct msghdr * msg)676 static int rawv6_probe_proto_opt(struct flowi6 *fl6, struct msghdr *msg)
677 {
678 	struct iovec *iov;
679 	u8 __user *type = NULL;
680 	u8 __user *code = NULL;
681 	u8 len = 0;
682 	int probed = 0;
683 	int i;
684 
685 	if (!msg->msg_iov)
686 		return 0;
687 
688 	for (i = 0; i < msg->msg_iovlen; i++) {
689 		iov = &msg->msg_iov[i];
690 		if (!iov)
691 			continue;
692 
693 		switch (fl6->flowi6_proto) {
694 		case IPPROTO_ICMPV6:
695 			/* check if one-byte field is readable or not. */
696 			if (iov->iov_base && iov->iov_len < 1)
697 				break;
698 
699 			if (!type) {
700 				type = iov->iov_base;
701 				/* check if code field is readable or not. */
702 				if (iov->iov_len > 1)
703 					code = type + 1;
704 			} else if (!code)
705 				code = iov->iov_base;
706 
707 			if (type && code) {
708 				if (get_user(fl6->fl6_icmp_type, type) ||
709 				    get_user(fl6->fl6_icmp_code, code))
710 					return -EFAULT;
711 				probed = 1;
712 			}
713 			break;
714 		case IPPROTO_MH:
715 			if (iov->iov_base && iov->iov_len < 1)
716 				break;
717 			/* check if type field is readable or not. */
718 			if (iov->iov_len > 2 - len) {
719 				u8 __user *p = iov->iov_base;
720 				if (get_user(fl6->fl6_mh_type, &p[2 - len]))
721 					return -EFAULT;
722 				probed = 1;
723 			} else
724 				len += iov->iov_len;
725 
726 			break;
727 		default:
728 			probed = 1;
729 			break;
730 		}
731 		if (probed)
732 			break;
733 	}
734 	return 0;
735 }
736 
rawv6_sendmsg(struct kiocb * iocb,struct sock * sk,struct msghdr * msg,size_t len)737 static int rawv6_sendmsg(struct kiocb *iocb, struct sock *sk,
738 		   struct msghdr *msg, size_t len)
739 {
740 	struct ipv6_txoptions *opt_to_free = NULL;
741 	struct ipv6_txoptions opt_space;
742 	DECLARE_SOCKADDR(struct sockaddr_in6 *, sin6, msg->msg_name);
743 	struct in6_addr *daddr, *final_p, final;
744 	struct inet_sock *inet = inet_sk(sk);
745 	struct ipv6_pinfo *np = inet6_sk(sk);
746 	struct raw6_sock *rp = raw6_sk(sk);
747 	struct ipv6_txoptions *opt = NULL;
748 	struct ip6_flowlabel *flowlabel = NULL;
749 	struct dst_entry *dst = NULL;
750 	struct flowi6 fl6;
751 	int addr_len = msg->msg_namelen;
752 	int hlimit = -1;
753 	int tclass = -1;
754 	int dontfrag = -1;
755 	u16 proto;
756 	int err;
757 
758 	/* Rough check on arithmetic overflow,
759 	   better check is made in ip6_append_data().
760 	 */
761 	if (len > INT_MAX)
762 		return -EMSGSIZE;
763 
764 	/* Mirror BSD error message compatibility */
765 	if (msg->msg_flags & MSG_OOB)
766 		return -EOPNOTSUPP;
767 
768 	/*
769 	 *	Get and verify the address.
770 	 */
771 	memset(&fl6, 0, sizeof(fl6));
772 
773 	fl6.flowi6_mark = sk->sk_mark;
774 	fl6.flowi6_uid = sk->sk_uid;
775 
776 	if (sin6) {
777 		if (addr_len < SIN6_LEN_RFC2133)
778 			return -EINVAL;
779 
780 		if (sin6->sin6_family && sin6->sin6_family != AF_INET6)
781 			return -EAFNOSUPPORT;
782 
783 		/* port is the proto value [0..255] carried in nexthdr */
784 		proto = ntohs(sin6->sin6_port);
785 
786 		if (!proto)
787 			proto = inet->inet_num;
788 		else if (proto != inet->inet_num)
789 			return -EINVAL;
790 
791 		if (proto > 255)
792 			return -EINVAL;
793 
794 		daddr = &sin6->sin6_addr;
795 		if (np->sndflow) {
796 			fl6.flowlabel = sin6->sin6_flowinfo&IPV6_FLOWINFO_MASK;
797 			if (fl6.flowlabel&IPV6_FLOWLABEL_MASK) {
798 				flowlabel = fl6_sock_lookup(sk, fl6.flowlabel);
799 				if (flowlabel == NULL)
800 					return -EINVAL;
801 			}
802 		}
803 
804 		/*
805 		 * Otherwise it will be difficult to maintain
806 		 * sk->sk_dst_cache.
807 		 */
808 		if (sk->sk_state == TCP_ESTABLISHED &&
809 		    ipv6_addr_equal(daddr, &sk->sk_v6_daddr))
810 			daddr = &sk->sk_v6_daddr;
811 
812 		if (addr_len >= sizeof(struct sockaddr_in6) &&
813 		    sin6->sin6_scope_id &&
814 		    __ipv6_addr_needs_scope_id(__ipv6_addr_type(daddr)))
815 			fl6.flowi6_oif = sin6->sin6_scope_id;
816 	} else {
817 		if (sk->sk_state != TCP_ESTABLISHED)
818 			return -EDESTADDRREQ;
819 
820 		proto = inet->inet_num;
821 		daddr = &sk->sk_v6_daddr;
822 		fl6.flowlabel = np->flow_label;
823 	}
824 
825 	if (fl6.flowi6_oif == 0)
826 		fl6.flowi6_oif = sk->sk_bound_dev_if;
827 
828 	if (msg->msg_controllen) {
829 		opt = &opt_space;
830 		memset(opt, 0, sizeof(struct ipv6_txoptions));
831 		opt->tot_len = sizeof(struct ipv6_txoptions);
832 
833 		err = ip6_datagram_send_ctl(sock_net(sk), sk, msg, &fl6, opt,
834 					    &hlimit, &tclass, &dontfrag);
835 		if (err < 0) {
836 			fl6_sock_release(flowlabel);
837 			return err;
838 		}
839 		if ((fl6.flowlabel&IPV6_FLOWLABEL_MASK) && !flowlabel) {
840 			flowlabel = fl6_sock_lookup(sk, fl6.flowlabel);
841 			if (flowlabel == NULL)
842 				return -EINVAL;
843 		}
844 		if (!(opt->opt_nflen|opt->opt_flen))
845 			opt = NULL;
846 	}
847 	if (!opt) {
848 		opt = txopt_get(np);
849 		opt_to_free = opt;
850 	}
851 	if (flowlabel)
852 		opt = fl6_merge_options(&opt_space, flowlabel, opt);
853 	opt = ipv6_fixup_options(&opt_space, opt);
854 
855 	fl6.flowi6_proto = proto;
856 	err = rawv6_probe_proto_opt(&fl6, msg);
857 	if (err)
858 		goto out;
859 
860 	if (!ipv6_addr_any(daddr))
861 		fl6.daddr = *daddr;
862 	else
863 		fl6.daddr.s6_addr[15] = 0x1; /* :: means loopback (BSD'ism) */
864 	if (ipv6_addr_any(&fl6.saddr) && !ipv6_addr_any(&np->saddr))
865 		fl6.saddr = np->saddr;
866 
867 	final_p = fl6_update_dst(&fl6, opt, &final);
868 
869 	if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr))
870 		fl6.flowi6_oif = np->mcast_oif;
871 	else if (!fl6.flowi6_oif)
872 		fl6.flowi6_oif = np->ucast_oif;
873 	security_sk_classify_flow(sk, flowi6_to_flowi(&fl6));
874 
875 	dst = ip6_dst_lookup_flow(sk, &fl6, final_p);
876 	if (IS_ERR(dst)) {
877 		err = PTR_ERR(dst);
878 		goto out;
879 	}
880 	if (hlimit < 0)
881 		hlimit = ip6_sk_dst_hoplimit(np, &fl6, dst);
882 
883 	if (tclass < 0)
884 		tclass = np->tclass;
885 
886 	if (dontfrag < 0)
887 		dontfrag = np->dontfrag;
888 
889 	if (msg->msg_flags&MSG_CONFIRM)
890 		goto do_confirm;
891 
892 back_from_confirm:
893 	if (inet->hdrincl)
894 		err = rawv6_send_hdrinc(sk, msg->msg_iov, len, &fl6, &dst, msg->msg_flags);
895 	else {
896 		lock_sock(sk);
897 		err = ip6_append_data(sk, ip_generic_getfrag, msg->msg_iov,
898 			len, 0, hlimit, tclass, opt, &fl6, (struct rt6_info *)dst,
899 			msg->msg_flags, dontfrag);
900 
901 		if (err)
902 			ip6_flush_pending_frames(sk);
903 		else if (!(msg->msg_flags & MSG_MORE))
904 			err = rawv6_push_pending_frames(sk, &fl6, rp);
905 		release_sock(sk);
906 	}
907 done:
908 	dst_release(dst);
909 out:
910 	fl6_sock_release(flowlabel);
911 	txopt_put(opt_to_free);
912 	return err < 0 ? err : len;
913 do_confirm:
914 	dst_confirm(dst);
915 	if (!(msg->msg_flags & MSG_PROBE) || len)
916 		goto back_from_confirm;
917 	err = 0;
918 	goto done;
919 }
920 
rawv6_seticmpfilter(struct sock * sk,int level,int optname,char __user * optval,int optlen)921 static int rawv6_seticmpfilter(struct sock *sk, int level, int optname,
922 			       char __user *optval, int optlen)
923 {
924 	switch (optname) {
925 	case ICMPV6_FILTER:
926 		if (optlen > sizeof(struct icmp6_filter))
927 			optlen = sizeof(struct icmp6_filter);
928 		if (copy_from_user(&raw6_sk(sk)->filter, optval, optlen))
929 			return -EFAULT;
930 		return 0;
931 	default:
932 		return -ENOPROTOOPT;
933 	}
934 
935 	return 0;
936 }
937 
rawv6_geticmpfilter(struct sock * sk,int level,int optname,char __user * optval,int __user * optlen)938 static int rawv6_geticmpfilter(struct sock *sk, int level, int optname,
939 			       char __user *optval, int __user *optlen)
940 {
941 	int len;
942 
943 	switch (optname) {
944 	case ICMPV6_FILTER:
945 		if (get_user(len, optlen))
946 			return -EFAULT;
947 		if (len < 0)
948 			return -EINVAL;
949 		if (len > sizeof(struct icmp6_filter))
950 			len = sizeof(struct icmp6_filter);
951 		if (put_user(len, optlen))
952 			return -EFAULT;
953 		if (copy_to_user(optval, &raw6_sk(sk)->filter, len))
954 			return -EFAULT;
955 		return 0;
956 	default:
957 		return -ENOPROTOOPT;
958 	}
959 
960 	return 0;
961 }
962 
963 
do_rawv6_setsockopt(struct sock * sk,int level,int optname,char __user * optval,unsigned int optlen)964 static int do_rawv6_setsockopt(struct sock *sk, int level, int optname,
965 			    char __user *optval, unsigned int optlen)
966 {
967 	struct raw6_sock *rp = raw6_sk(sk);
968 	int val;
969 
970 	if (get_user(val, (int __user *)optval))
971 		return -EFAULT;
972 
973 	switch (optname) {
974 	case IPV6_CHECKSUM:
975 		if (inet_sk(sk)->inet_num == IPPROTO_ICMPV6 &&
976 		    level == IPPROTO_IPV6) {
977 			/*
978 			 * RFC3542 tells that IPV6_CHECKSUM socket
979 			 * option in the IPPROTO_IPV6 level is not
980 			 * allowed on ICMPv6 sockets.
981 			 * If you want to set it, use IPPROTO_RAW
982 			 * level IPV6_CHECKSUM socket option
983 			 * (Linux extension).
984 			 */
985 			return -EINVAL;
986 		}
987 
988 		/* You may get strange result with a positive odd offset;
989 		   RFC2292bis agrees with me. */
990 		if (val > 0 && (val&1))
991 			return -EINVAL;
992 		if (val < 0) {
993 			rp->checksum = 0;
994 		} else {
995 			rp->checksum = 1;
996 			rp->offset = val;
997 		}
998 
999 		return 0;
1000 
1001 	default:
1002 		return -ENOPROTOOPT;
1003 	}
1004 }
1005 
rawv6_setsockopt(struct sock * sk,int level,int optname,char __user * optval,unsigned int optlen)1006 static int rawv6_setsockopt(struct sock *sk, int level, int optname,
1007 			  char __user *optval, unsigned int optlen)
1008 {
1009 	switch (level) {
1010 	case SOL_RAW:
1011 		break;
1012 
1013 	case SOL_ICMPV6:
1014 		if (inet_sk(sk)->inet_num != IPPROTO_ICMPV6)
1015 			return -EOPNOTSUPP;
1016 		return rawv6_seticmpfilter(sk, level, optname, optval, optlen);
1017 	case SOL_IPV6:
1018 		if (optname == IPV6_CHECKSUM)
1019 			break;
1020 	default:
1021 		return ipv6_setsockopt(sk, level, optname, optval, optlen);
1022 	}
1023 
1024 	return do_rawv6_setsockopt(sk, level, optname, optval, optlen);
1025 }
1026 
1027 #ifdef CONFIG_COMPAT
compat_rawv6_setsockopt(struct sock * sk,int level,int optname,char __user * optval,unsigned int optlen)1028 static int compat_rawv6_setsockopt(struct sock *sk, int level, int optname,
1029 				   char __user *optval, unsigned int optlen)
1030 {
1031 	switch (level) {
1032 	case SOL_RAW:
1033 		break;
1034 	case SOL_ICMPV6:
1035 		if (inet_sk(sk)->inet_num != IPPROTO_ICMPV6)
1036 			return -EOPNOTSUPP;
1037 		return rawv6_seticmpfilter(sk, level, optname, optval, optlen);
1038 	case SOL_IPV6:
1039 		if (optname == IPV6_CHECKSUM)
1040 			break;
1041 	default:
1042 		return compat_ipv6_setsockopt(sk, level, optname,
1043 					      optval, optlen);
1044 	}
1045 	return do_rawv6_setsockopt(sk, level, optname, optval, optlen);
1046 }
1047 #endif
1048 
do_rawv6_getsockopt(struct sock * sk,int level,int optname,char __user * optval,int __user * optlen)1049 static int do_rawv6_getsockopt(struct sock *sk, int level, int optname,
1050 			    char __user *optval, int __user *optlen)
1051 {
1052 	struct raw6_sock *rp = raw6_sk(sk);
1053 	int val, len;
1054 
1055 	if (get_user(len, optlen))
1056 		return -EFAULT;
1057 
1058 	switch (optname) {
1059 	case IPV6_CHECKSUM:
1060 		/*
1061 		 * We allow getsockopt() for IPPROTO_IPV6-level
1062 		 * IPV6_CHECKSUM socket option on ICMPv6 sockets
1063 		 * since RFC3542 is silent about it.
1064 		 */
1065 		if (rp->checksum == 0)
1066 			val = -1;
1067 		else
1068 			val = rp->offset;
1069 		break;
1070 
1071 	default:
1072 		return -ENOPROTOOPT;
1073 	}
1074 
1075 	len = min_t(unsigned int, sizeof(int), len);
1076 
1077 	if (put_user(len, optlen))
1078 		return -EFAULT;
1079 	if (copy_to_user(optval, &val, len))
1080 		return -EFAULT;
1081 	return 0;
1082 }
1083 
rawv6_getsockopt(struct sock * sk,int level,int optname,char __user * optval,int __user * optlen)1084 static int rawv6_getsockopt(struct sock *sk, int level, int optname,
1085 			  char __user *optval, int __user *optlen)
1086 {
1087 	switch (level) {
1088 	case SOL_RAW:
1089 		break;
1090 
1091 	case SOL_ICMPV6:
1092 		if (inet_sk(sk)->inet_num != IPPROTO_ICMPV6)
1093 			return -EOPNOTSUPP;
1094 		return rawv6_geticmpfilter(sk, level, optname, optval, optlen);
1095 	case SOL_IPV6:
1096 		if (optname == IPV6_CHECKSUM)
1097 			break;
1098 	default:
1099 		return ipv6_getsockopt(sk, level, optname, optval, optlen);
1100 	}
1101 
1102 	return do_rawv6_getsockopt(sk, level, optname, optval, optlen);
1103 }
1104 
1105 #ifdef CONFIG_COMPAT
compat_rawv6_getsockopt(struct sock * sk,int level,int optname,char __user * optval,int __user * optlen)1106 static int compat_rawv6_getsockopt(struct sock *sk, int level, int optname,
1107 				   char __user *optval, int __user *optlen)
1108 {
1109 	switch (level) {
1110 	case SOL_RAW:
1111 		break;
1112 	case SOL_ICMPV6:
1113 		if (inet_sk(sk)->inet_num != IPPROTO_ICMPV6)
1114 			return -EOPNOTSUPP;
1115 		return rawv6_geticmpfilter(sk, level, optname, optval, optlen);
1116 	case SOL_IPV6:
1117 		if (optname == IPV6_CHECKSUM)
1118 			break;
1119 	default:
1120 		return compat_ipv6_getsockopt(sk, level, optname,
1121 					      optval, optlen);
1122 	}
1123 	return do_rawv6_getsockopt(sk, level, optname, optval, optlen);
1124 }
1125 #endif
1126 
rawv6_ioctl(struct sock * sk,int cmd,unsigned long arg)1127 static int rawv6_ioctl(struct sock *sk, int cmd, unsigned long arg)
1128 {
1129 	switch (cmd) {
1130 	case SIOCOUTQ: {
1131 		int amount = sk_wmem_alloc_get(sk);
1132 
1133 		return put_user(amount, (int __user *)arg);
1134 	}
1135 	case SIOCINQ: {
1136 		struct sk_buff *skb;
1137 		int amount = 0;
1138 
1139 		spin_lock_bh(&sk->sk_receive_queue.lock);
1140 		skb = skb_peek(&sk->sk_receive_queue);
1141 		if (skb != NULL)
1142 			amount = skb_tail_pointer(skb) -
1143 				skb_transport_header(skb);
1144 		spin_unlock_bh(&sk->sk_receive_queue.lock);
1145 		return put_user(amount, (int __user *)arg);
1146 	}
1147 
1148 	default:
1149 #ifdef CONFIG_IPV6_MROUTE
1150 		return ip6mr_ioctl(sk, cmd, (void __user *)arg);
1151 #else
1152 		return -ENOIOCTLCMD;
1153 #endif
1154 	}
1155 }
1156 
1157 #ifdef CONFIG_COMPAT
compat_rawv6_ioctl(struct sock * sk,unsigned int cmd,unsigned long arg)1158 static int compat_rawv6_ioctl(struct sock *sk, unsigned int cmd, unsigned long arg)
1159 {
1160 	switch (cmd) {
1161 	case SIOCOUTQ:
1162 	case SIOCINQ:
1163 		return -ENOIOCTLCMD;
1164 	default:
1165 #ifdef CONFIG_IPV6_MROUTE
1166 		return ip6mr_compat_ioctl(sk, cmd, compat_ptr(arg));
1167 #else
1168 		return -ENOIOCTLCMD;
1169 #endif
1170 	}
1171 }
1172 #endif
1173 
rawv6_close(struct sock * sk,long timeout)1174 static void rawv6_close(struct sock *sk, long timeout)
1175 {
1176 	if (inet_sk(sk)->inet_num == IPPROTO_RAW)
1177 		ip6_ra_control(sk, -1);
1178 	ip6mr_sk_done(sk);
1179 	sk_common_release(sk);
1180 }
1181 
raw6_destroy(struct sock * sk)1182 static void raw6_destroy(struct sock *sk)
1183 {
1184 	lock_sock(sk);
1185 	ip6_flush_pending_frames(sk);
1186 	release_sock(sk);
1187 
1188 	inet6_destroy_sock(sk);
1189 }
1190 
rawv6_init_sk(struct sock * sk)1191 static int rawv6_init_sk(struct sock *sk)
1192 {
1193 	struct raw6_sock *rp = raw6_sk(sk);
1194 
1195 	switch (inet_sk(sk)->inet_num) {
1196 	case IPPROTO_ICMPV6:
1197 		rp->checksum = 1;
1198 		rp->offset   = 2;
1199 		break;
1200 	case IPPROTO_MH:
1201 		rp->checksum = 1;
1202 		rp->offset   = 4;
1203 		break;
1204 	default:
1205 		break;
1206 	}
1207 	return 0;
1208 }
1209 
1210 struct proto rawv6_prot = {
1211 	.name		   = "RAWv6",
1212 	.owner		   = THIS_MODULE,
1213 	.close		   = rawv6_close,
1214 	.destroy	   = raw6_destroy,
1215 	.connect	   = ip6_datagram_connect_v6_only,
1216 	.disconnect	   = udp_disconnect,
1217 	.ioctl		   = rawv6_ioctl,
1218 	.init		   = rawv6_init_sk,
1219 	.setsockopt	   = rawv6_setsockopt,
1220 	.getsockopt	   = rawv6_getsockopt,
1221 	.sendmsg	   = rawv6_sendmsg,
1222 	.recvmsg	   = rawv6_recvmsg,
1223 	.bind		   = rawv6_bind,
1224 	.backlog_rcv	   = rawv6_rcv_skb,
1225 	.hash		   = raw_hash_sk,
1226 	.unhash		   = raw_unhash_sk,
1227 	.obj_size	   = sizeof(struct raw6_sock),
1228 	.h.raw_hash	   = &raw_v6_hashinfo,
1229 #ifdef CONFIG_COMPAT
1230 	.compat_setsockopt = compat_rawv6_setsockopt,
1231 	.compat_getsockopt = compat_rawv6_getsockopt,
1232 	.compat_ioctl	   = compat_rawv6_ioctl,
1233 #endif
1234 };
1235 
1236 #ifdef CONFIG_PROC_FS
raw6_seq_show(struct seq_file * seq,void * v)1237 static int raw6_seq_show(struct seq_file *seq, void *v)
1238 {
1239 	if (v == SEQ_START_TOKEN) {
1240 		seq_puts(seq, IPV6_SEQ_DGRAM_HEADER);
1241 	} else {
1242 		struct sock *sp = v;
1243 		__u16 srcp  = inet_sk(sp)->inet_num;
1244 		ip6_dgram_sock_seq_show(seq, v, srcp, 0,
1245 					raw_seq_private(seq)->bucket);
1246 	}
1247 	return 0;
1248 }
1249 
1250 static const struct seq_operations raw6_seq_ops = {
1251 	.start =	raw_seq_start,
1252 	.next =		raw_seq_next,
1253 	.stop =		raw_seq_stop,
1254 	.show =		raw6_seq_show,
1255 };
1256 
raw6_seq_open(struct inode * inode,struct file * file)1257 static int raw6_seq_open(struct inode *inode, struct file *file)
1258 {
1259 	return raw_seq_open(inode, file, &raw_v6_hashinfo, &raw6_seq_ops);
1260 }
1261 
1262 static const struct file_operations raw6_seq_fops = {
1263 	.owner =	THIS_MODULE,
1264 	.open =		raw6_seq_open,
1265 	.read =		seq_read,
1266 	.llseek =	seq_lseek,
1267 	.release =	seq_release_net,
1268 };
1269 
raw6_init_net(struct net * net)1270 static int __net_init raw6_init_net(struct net *net)
1271 {
1272 	if (!proc_create("raw6", S_IRUGO, net->proc_net, &raw6_seq_fops))
1273 		return -ENOMEM;
1274 
1275 	return 0;
1276 }
1277 
raw6_exit_net(struct net * net)1278 static void __net_exit raw6_exit_net(struct net *net)
1279 {
1280 	remove_proc_entry("raw6", net->proc_net);
1281 }
1282 
1283 static struct pernet_operations raw6_net_ops = {
1284 	.init = raw6_init_net,
1285 	.exit = raw6_exit_net,
1286 };
1287 
raw6_proc_init(void)1288 int __init raw6_proc_init(void)
1289 {
1290 	return register_pernet_subsys(&raw6_net_ops);
1291 }
1292 
raw6_proc_exit(void)1293 void raw6_proc_exit(void)
1294 {
1295 	unregister_pernet_subsys(&raw6_net_ops);
1296 }
1297 #endif	/* CONFIG_PROC_FS */
1298 
1299 /* Same as inet6_dgram_ops, sans udp_poll.  */
1300 const struct proto_ops inet6_sockraw_ops = {
1301 	.family		   = PF_INET6,
1302 	.owner		   = THIS_MODULE,
1303 	.release	   = inet6_release,
1304 	.bind		   = inet6_bind,
1305 	.connect	   = inet_dgram_connect,	/* ok		*/
1306 	.socketpair	   = sock_no_socketpair,	/* a do nothing	*/
1307 	.accept		   = sock_no_accept,		/* a do nothing	*/
1308 	.getname	   = inet6_getname,
1309 	.poll		   = datagram_poll,		/* ok		*/
1310 	.ioctl		   = inet6_ioctl,		/* must change  */
1311 	.listen		   = sock_no_listen,		/* ok		*/
1312 	.shutdown	   = inet_shutdown,		/* ok		*/
1313 	.setsockopt	   = sock_common_setsockopt,	/* ok		*/
1314 	.getsockopt	   = sock_common_getsockopt,	/* ok		*/
1315 	.sendmsg	   = inet_sendmsg,		/* ok		*/
1316 	.recvmsg	   = sock_common_recvmsg,	/* ok		*/
1317 	.mmap		   = sock_no_mmap,
1318 	.sendpage	   = sock_no_sendpage,
1319 #ifdef CONFIG_COMPAT
1320 	.compat_setsockopt = compat_sock_common_setsockopt,
1321 	.compat_getsockopt = compat_sock_common_getsockopt,
1322 #endif
1323 };
1324 
1325 static struct inet_protosw rawv6_protosw = {
1326 	.type		= SOCK_RAW,
1327 	.protocol	= IPPROTO_IP,	/* wild card */
1328 	.prot		= &rawv6_prot,
1329 	.ops		= &inet6_sockraw_ops,
1330 	.flags		= INET_PROTOSW_REUSE,
1331 };
1332 
rawv6_init(void)1333 int __init rawv6_init(void)
1334 {
1335 	int ret;
1336 
1337 	ret = inet6_register_protosw(&rawv6_protosw);
1338 	if (ret)
1339 		goto out;
1340 out:
1341 	return ret;
1342 }
1343 
rawv6_exit(void)1344 void rawv6_exit(void)
1345 {
1346 	inet6_unregister_protosw(&rawv6_protosw);
1347 }
1348