• Home
  • Line#
  • Scopes#
  • Navigate#
  • Raw
  • Download
1 /* SPDX-License-Identifier: GPL-2.0 */
2 /* Copyright (c) 2017 - 2018 Covalent IO, Inc. http://covalent.io */
3 
4 #ifndef _LINUX_SKMSG_H
5 #define _LINUX_SKMSG_H
6 
7 #include <linux/bpf.h>
8 #include <linux/filter.h>
9 #include <linux/scatterlist.h>
10 #include <linux/skbuff.h>
11 
12 #include <net/sock.h>
13 #include <net/tcp.h>
14 #include <net/strparser.h>
15 
16 #define MAX_MSG_FRAGS			MAX_SKB_FRAGS
17 #define NR_MSG_FRAG_IDS			(MAX_MSG_FRAGS + 1)
18 
19 enum __sk_action {
20 	__SK_DROP = 0,
21 	__SK_PASS,
22 	__SK_REDIRECT,
23 	__SK_NONE,
24 };
25 
26 struct sk_msg_sg {
27 	u32				start;
28 	u32				curr;
29 	u32				end;
30 	u32				size;
31 	u32				copybreak;
32 	unsigned long			copy;
33 	/* The extra two elements:
34 	 * 1) used for chaining the front and sections when the list becomes
35 	 *    partitioned (e.g. end < start). The crypto APIs require the
36 	 *    chaining;
37 	 * 2) to chain tailer SG entries after the message.
38 	 */
39 	struct scatterlist		data[MAX_MSG_FRAGS + 2];
40 };
41 static_assert(BITS_PER_LONG >= NR_MSG_FRAG_IDS);
42 
43 /* UAPI in filter.c depends on struct sk_msg_sg being first element. */
44 struct sk_msg {
45 	struct sk_msg_sg		sg;
46 	void				*data;
47 	void				*data_end;
48 	u32				apply_bytes;
49 	u32				cork_bytes;
50 	u32				flags;
51 	struct sk_buff			*skb;
52 	struct sock			*sk_redir;
53 	struct sock			*sk;
54 	struct list_head		list;
55 };
56 
57 struct sk_psock_progs {
58 	struct bpf_prog			*msg_parser;
59 	struct bpf_prog			*stream_parser;
60 	struct bpf_prog			*stream_verdict;
61 	struct bpf_prog			*skb_verdict;
62 };
63 
64 enum sk_psock_state_bits {
65 	SK_PSOCK_TX_ENABLED,
66 	SK_PSOCK_RX_STRP_ENABLED,
67 };
68 
69 struct sk_psock_link {
70 	struct list_head		list;
71 	struct bpf_map			*map;
72 	void				*link_raw;
73 };
74 
75 struct sk_psock_work_state {
76 	struct sk_buff			*skb;
77 	u32				len;
78 	u32				off;
79 };
80 
81 struct sk_psock {
82 	struct sock			*sk;
83 	struct sock			*sk_redir;
84 	u32				apply_bytes;
85 	u32				cork_bytes;
86 	u32				eval;
87 	bool				redir_ingress; /* undefined if sk_redir is null */
88 	struct sk_msg			*cork;
89 	struct sk_psock_progs		progs;
90 #if IS_ENABLED(CONFIG_BPF_STREAM_PARSER)
91 	struct strparser		strp;
92 #endif
93 	struct sk_buff_head		ingress_skb;
94 	struct list_head		ingress_msg;
95 	spinlock_t			ingress_lock;
96 	unsigned long			state;
97 	struct list_head		link;
98 	spinlock_t			link_lock;
99 	refcount_t			refcnt;
100 	void (*saved_unhash)(struct sock *sk);
101 	void (*saved_destroy)(struct sock *sk);
102 	void (*saved_close)(struct sock *sk, long timeout);
103 	void (*saved_write_space)(struct sock *sk);
104 	void (*saved_data_ready)(struct sock *sk);
105 	int  (*psock_update_sk_prot)(struct sock *sk, struct sk_psock *psock,
106 				     bool restore);
107 	struct proto			*sk_proto;
108 	struct mutex			work_mutex;
109 	struct sk_psock_work_state	work_state;
110 	struct work_struct		work;
111 	struct rcu_work			rwork;
112 };
113 
114 int sk_msg_alloc(struct sock *sk, struct sk_msg *msg, int len,
115 		 int elem_first_coalesce);
116 int sk_msg_clone(struct sock *sk, struct sk_msg *dst, struct sk_msg *src,
117 		 u32 off, u32 len);
118 void sk_msg_trim(struct sock *sk, struct sk_msg *msg, int len);
119 int sk_msg_free(struct sock *sk, struct sk_msg *msg);
120 int sk_msg_free_nocharge(struct sock *sk, struct sk_msg *msg);
121 void sk_msg_free_partial(struct sock *sk, struct sk_msg *msg, u32 bytes);
122 void sk_msg_free_partial_nocharge(struct sock *sk, struct sk_msg *msg,
123 				  u32 bytes);
124 
125 void sk_msg_return(struct sock *sk, struct sk_msg *msg, int bytes);
126 void sk_msg_return_zero(struct sock *sk, struct sk_msg *msg, int bytes);
127 
128 int sk_msg_zerocopy_from_iter(struct sock *sk, struct iov_iter *from,
129 			      struct sk_msg *msg, u32 bytes);
130 int sk_msg_memcopy_from_iter(struct sock *sk, struct iov_iter *from,
131 			     struct sk_msg *msg, u32 bytes);
132 int sk_msg_recvmsg(struct sock *sk, struct sk_psock *psock, struct msghdr *msg,
133 		   int len, int flags);
134 bool sk_msg_is_readable(struct sock *sk);
135 
sk_msg_check_to_free(struct sk_msg * msg,u32 i,u32 bytes)136 static inline void sk_msg_check_to_free(struct sk_msg *msg, u32 i, u32 bytes)
137 {
138 	WARN_ON(i == msg->sg.end && bytes);
139 }
140 
sk_msg_apply_bytes(struct sk_psock * psock,u32 bytes)141 static inline void sk_msg_apply_bytes(struct sk_psock *psock, u32 bytes)
142 {
143 	if (psock->apply_bytes) {
144 		if (psock->apply_bytes < bytes)
145 			psock->apply_bytes = 0;
146 		else
147 			psock->apply_bytes -= bytes;
148 	}
149 }
150 
sk_msg_iter_dist(u32 start,u32 end)151 static inline u32 sk_msg_iter_dist(u32 start, u32 end)
152 {
153 	return end >= start ? end - start : end + (NR_MSG_FRAG_IDS - start);
154 }
155 
156 #define sk_msg_iter_var_prev(var)			\
157 	do {						\
158 		if (var == 0)				\
159 			var = NR_MSG_FRAG_IDS - 1;	\
160 		else					\
161 			var--;				\
162 	} while (0)
163 
164 #define sk_msg_iter_var_next(var)			\
165 	do {						\
166 		var++;					\
167 		if (var == NR_MSG_FRAG_IDS)		\
168 			var = 0;			\
169 	} while (0)
170 
171 #define sk_msg_iter_prev(msg, which)			\
172 	sk_msg_iter_var_prev(msg->sg.which)
173 
174 #define sk_msg_iter_next(msg, which)			\
175 	sk_msg_iter_var_next(msg->sg.which)
176 
sk_msg_clear_meta(struct sk_msg * msg)177 static inline void sk_msg_clear_meta(struct sk_msg *msg)
178 {
179 	memset(&msg->sg, 0, offsetofend(struct sk_msg_sg, copy));
180 }
181 
sk_msg_init(struct sk_msg * msg)182 static inline void sk_msg_init(struct sk_msg *msg)
183 {
184 	BUILD_BUG_ON(ARRAY_SIZE(msg->sg.data) - 1 != NR_MSG_FRAG_IDS);
185 	memset(msg, 0, sizeof(*msg));
186 	sg_init_marker(msg->sg.data, NR_MSG_FRAG_IDS);
187 }
188 
sk_msg_xfer(struct sk_msg * dst,struct sk_msg * src,int which,u32 size)189 static inline void sk_msg_xfer(struct sk_msg *dst, struct sk_msg *src,
190 			       int which, u32 size)
191 {
192 	dst->sg.data[which] = src->sg.data[which];
193 	dst->sg.data[which].length  = size;
194 	dst->sg.size		   += size;
195 	src->sg.size		   -= size;
196 	src->sg.data[which].length -= size;
197 	src->sg.data[which].offset += size;
198 }
199 
sk_msg_xfer_full(struct sk_msg * dst,struct sk_msg * src)200 static inline void sk_msg_xfer_full(struct sk_msg *dst, struct sk_msg *src)
201 {
202 	memcpy(dst, src, sizeof(*src));
203 	sk_msg_init(src);
204 }
205 
sk_msg_full(const struct sk_msg * msg)206 static inline bool sk_msg_full(const struct sk_msg *msg)
207 {
208 	return sk_msg_iter_dist(msg->sg.start, msg->sg.end) == MAX_MSG_FRAGS;
209 }
210 
sk_msg_elem_used(const struct sk_msg * msg)211 static inline u32 sk_msg_elem_used(const struct sk_msg *msg)
212 {
213 	return sk_msg_iter_dist(msg->sg.start, msg->sg.end);
214 }
215 
sk_msg_elem(struct sk_msg * msg,int which)216 static inline struct scatterlist *sk_msg_elem(struct sk_msg *msg, int which)
217 {
218 	return &msg->sg.data[which];
219 }
220 
sk_msg_elem_cpy(struct sk_msg * msg,int which)221 static inline struct scatterlist sk_msg_elem_cpy(struct sk_msg *msg, int which)
222 {
223 	return msg->sg.data[which];
224 }
225 
sk_msg_page(struct sk_msg * msg,int which)226 static inline struct page *sk_msg_page(struct sk_msg *msg, int which)
227 {
228 	return sg_page(sk_msg_elem(msg, which));
229 }
230 
sk_msg_to_ingress(const struct sk_msg * msg)231 static inline bool sk_msg_to_ingress(const struct sk_msg *msg)
232 {
233 	return msg->flags & BPF_F_INGRESS;
234 }
235 
sk_msg_compute_data_pointers(struct sk_msg * msg)236 static inline void sk_msg_compute_data_pointers(struct sk_msg *msg)
237 {
238 	struct scatterlist *sge = sk_msg_elem(msg, msg->sg.start);
239 
240 	if (test_bit(msg->sg.start, &msg->sg.copy)) {
241 		msg->data = NULL;
242 		msg->data_end = NULL;
243 	} else {
244 		msg->data = sg_virt(sge);
245 		msg->data_end = msg->data + sge->length;
246 	}
247 }
248 
sk_msg_page_add(struct sk_msg * msg,struct page * page,u32 len,u32 offset)249 static inline void sk_msg_page_add(struct sk_msg *msg, struct page *page,
250 				   u32 len, u32 offset)
251 {
252 	struct scatterlist *sge;
253 
254 	get_page(page);
255 	sge = sk_msg_elem(msg, msg->sg.end);
256 	sg_set_page(sge, page, len, offset);
257 	sg_unmark_end(sge);
258 
259 	__set_bit(msg->sg.end, &msg->sg.copy);
260 	msg->sg.size += len;
261 	sk_msg_iter_next(msg, end);
262 }
263 
sk_msg_sg_copy(struct sk_msg * msg,u32 i,bool copy_state)264 static inline void sk_msg_sg_copy(struct sk_msg *msg, u32 i, bool copy_state)
265 {
266 	do {
267 		if (copy_state)
268 			__set_bit(i, &msg->sg.copy);
269 		else
270 			__clear_bit(i, &msg->sg.copy);
271 		sk_msg_iter_var_next(i);
272 		if (i == msg->sg.end)
273 			break;
274 	} while (1);
275 }
276 
sk_msg_sg_copy_set(struct sk_msg * msg,u32 start)277 static inline void sk_msg_sg_copy_set(struct sk_msg *msg, u32 start)
278 {
279 	sk_msg_sg_copy(msg, start, true);
280 }
281 
sk_msg_sg_copy_clear(struct sk_msg * msg,u32 start)282 static inline void sk_msg_sg_copy_clear(struct sk_msg *msg, u32 start)
283 {
284 	sk_msg_sg_copy(msg, start, false);
285 }
286 
sk_psock(const struct sock * sk)287 static inline struct sk_psock *sk_psock(const struct sock *sk)
288 {
289 	return __rcu_dereference_sk_user_data_with_flags(sk,
290 							 SK_USER_DATA_PSOCK);
291 }
292 
sk_psock_set_state(struct sk_psock * psock,enum sk_psock_state_bits bit)293 static inline void sk_psock_set_state(struct sk_psock *psock,
294 				      enum sk_psock_state_bits bit)
295 {
296 	set_bit(bit, &psock->state);
297 }
298 
sk_psock_clear_state(struct sk_psock * psock,enum sk_psock_state_bits bit)299 static inline void sk_psock_clear_state(struct sk_psock *psock,
300 					enum sk_psock_state_bits bit)
301 {
302 	clear_bit(bit, &psock->state);
303 }
304 
sk_psock_test_state(const struct sk_psock * psock,enum sk_psock_state_bits bit)305 static inline bool sk_psock_test_state(const struct sk_psock *psock,
306 				       enum sk_psock_state_bits bit)
307 {
308 	return test_bit(bit, &psock->state);
309 }
310 
sock_drop(struct sock * sk,struct sk_buff * skb)311 static inline void sock_drop(struct sock *sk, struct sk_buff *skb)
312 {
313 	sk_drops_add(sk, skb);
314 	kfree_skb(skb);
315 }
316 
sk_psock_queue_msg(struct sk_psock * psock,struct sk_msg * msg)317 static inline void sk_psock_queue_msg(struct sk_psock *psock,
318 				      struct sk_msg *msg)
319 {
320 	spin_lock_bh(&psock->ingress_lock);
321 	if (sk_psock_test_state(psock, SK_PSOCK_TX_ENABLED))
322 		list_add_tail(&msg->list, &psock->ingress_msg);
323 	else {
324 		sk_msg_free(psock->sk, msg);
325 		kfree(msg);
326 	}
327 	spin_unlock_bh(&psock->ingress_lock);
328 }
329 
sk_psock_dequeue_msg(struct sk_psock * psock)330 static inline struct sk_msg *sk_psock_dequeue_msg(struct sk_psock *psock)
331 {
332 	struct sk_msg *msg;
333 
334 	spin_lock_bh(&psock->ingress_lock);
335 	msg = list_first_entry_or_null(&psock->ingress_msg, struct sk_msg, list);
336 	if (msg)
337 		list_del(&msg->list);
338 	spin_unlock_bh(&psock->ingress_lock);
339 	return msg;
340 }
341 
sk_psock_peek_msg(struct sk_psock * psock)342 static inline struct sk_msg *sk_psock_peek_msg(struct sk_psock *psock)
343 {
344 	struct sk_msg *msg;
345 
346 	spin_lock_bh(&psock->ingress_lock);
347 	msg = list_first_entry_or_null(&psock->ingress_msg, struct sk_msg, list);
348 	spin_unlock_bh(&psock->ingress_lock);
349 	return msg;
350 }
351 
sk_psock_next_msg(struct sk_psock * psock,struct sk_msg * msg)352 static inline struct sk_msg *sk_psock_next_msg(struct sk_psock *psock,
353 					       struct sk_msg *msg)
354 {
355 	struct sk_msg *ret;
356 
357 	spin_lock_bh(&psock->ingress_lock);
358 	if (list_is_last(&msg->list, &psock->ingress_msg))
359 		ret = NULL;
360 	else
361 		ret = list_next_entry(msg, list);
362 	spin_unlock_bh(&psock->ingress_lock);
363 	return ret;
364 }
365 
sk_psock_queue_empty(const struct sk_psock * psock)366 static inline bool sk_psock_queue_empty(const struct sk_psock *psock)
367 {
368 	return psock ? list_empty(&psock->ingress_msg) : true;
369 }
370 
kfree_sk_msg(struct sk_msg * msg)371 static inline void kfree_sk_msg(struct sk_msg *msg)
372 {
373 	if (msg->skb)
374 		consume_skb(msg->skb);
375 	kfree(msg);
376 }
377 
sk_psock_report_error(struct sk_psock * psock,int err)378 static inline void sk_psock_report_error(struct sk_psock *psock, int err)
379 {
380 	struct sock *sk = psock->sk;
381 
382 	sk->sk_err = err;
383 	sk_error_report(sk);
384 }
385 
386 struct sk_psock *sk_psock_init(struct sock *sk, int node);
387 void sk_psock_stop(struct sk_psock *psock);
388 
389 #if IS_ENABLED(CONFIG_BPF_STREAM_PARSER)
390 int sk_psock_init_strp(struct sock *sk, struct sk_psock *psock);
391 void sk_psock_start_strp(struct sock *sk, struct sk_psock *psock);
392 void sk_psock_stop_strp(struct sock *sk, struct sk_psock *psock);
393 #else
sk_psock_init_strp(struct sock * sk,struct sk_psock * psock)394 static inline int sk_psock_init_strp(struct sock *sk, struct sk_psock *psock)
395 {
396 	return -EOPNOTSUPP;
397 }
398 
sk_psock_start_strp(struct sock * sk,struct sk_psock * psock)399 static inline void sk_psock_start_strp(struct sock *sk, struct sk_psock *psock)
400 {
401 }
402 
sk_psock_stop_strp(struct sock * sk,struct sk_psock * psock)403 static inline void sk_psock_stop_strp(struct sock *sk, struct sk_psock *psock)
404 {
405 }
406 #endif
407 
408 void sk_psock_start_verdict(struct sock *sk, struct sk_psock *psock);
409 void sk_psock_stop_verdict(struct sock *sk, struct sk_psock *psock);
410 
411 int sk_psock_msg_verdict(struct sock *sk, struct sk_psock *psock,
412 			 struct sk_msg *msg);
413 
sk_psock_init_link(void)414 static inline struct sk_psock_link *sk_psock_init_link(void)
415 {
416 	return kzalloc(sizeof(struct sk_psock_link),
417 		       GFP_ATOMIC | __GFP_NOWARN);
418 }
419 
sk_psock_free_link(struct sk_psock_link * link)420 static inline void sk_psock_free_link(struct sk_psock_link *link)
421 {
422 	kfree(link);
423 }
424 
425 struct sk_psock_link *sk_psock_link_pop(struct sk_psock *psock);
426 
sk_psock_cork_free(struct sk_psock * psock)427 static inline void sk_psock_cork_free(struct sk_psock *psock)
428 {
429 	if (psock->cork) {
430 		sk_msg_free(psock->sk, psock->cork);
431 		kfree(psock->cork);
432 		psock->cork = NULL;
433 	}
434 }
435 
sk_psock_restore_proto(struct sock * sk,struct sk_psock * psock)436 static inline void sk_psock_restore_proto(struct sock *sk,
437 					  struct sk_psock *psock)
438 {
439 	if (psock->psock_update_sk_prot)
440 		psock->psock_update_sk_prot(sk, psock, true);
441 }
442 
sk_psock_get(struct sock * sk)443 static inline struct sk_psock *sk_psock_get(struct sock *sk)
444 {
445 	struct sk_psock *psock;
446 
447 	rcu_read_lock();
448 	psock = sk_psock(sk);
449 	if (psock && !refcount_inc_not_zero(&psock->refcnt))
450 		psock = NULL;
451 	rcu_read_unlock();
452 	return psock;
453 }
454 
455 void sk_psock_drop(struct sock *sk, struct sk_psock *psock);
456 
sk_psock_put(struct sock * sk,struct sk_psock * psock)457 static inline void sk_psock_put(struct sock *sk, struct sk_psock *psock)
458 {
459 	if (refcount_dec_and_test(&psock->refcnt))
460 		sk_psock_drop(sk, psock);
461 }
462 
sk_psock_data_ready(struct sock * sk,struct sk_psock * psock)463 static inline void sk_psock_data_ready(struct sock *sk, struct sk_psock *psock)
464 {
465 	if (psock->saved_data_ready)
466 		psock->saved_data_ready(sk);
467 	else
468 		sk->sk_data_ready(sk);
469 }
470 
psock_set_prog(struct bpf_prog ** pprog,struct bpf_prog * prog)471 static inline void psock_set_prog(struct bpf_prog **pprog,
472 				  struct bpf_prog *prog)
473 {
474 	prog = xchg(pprog, prog);
475 	if (prog)
476 		bpf_prog_put(prog);
477 }
478 
psock_replace_prog(struct bpf_prog ** pprog,struct bpf_prog * prog,struct bpf_prog * old)479 static inline int psock_replace_prog(struct bpf_prog **pprog,
480 				     struct bpf_prog *prog,
481 				     struct bpf_prog *old)
482 {
483 	if (cmpxchg(pprog, old, prog) != old)
484 		return -ENOENT;
485 
486 	if (old)
487 		bpf_prog_put(old);
488 
489 	return 0;
490 }
491 
psock_progs_drop(struct sk_psock_progs * progs)492 static inline void psock_progs_drop(struct sk_psock_progs *progs)
493 {
494 	psock_set_prog(&progs->msg_parser, NULL);
495 	psock_set_prog(&progs->stream_parser, NULL);
496 	psock_set_prog(&progs->stream_verdict, NULL);
497 	psock_set_prog(&progs->skb_verdict, NULL);
498 }
499 
500 int sk_psock_tls_strp_read(struct sk_psock *psock, struct sk_buff *skb);
501 
sk_psock_strp_enabled(struct sk_psock * psock)502 static inline bool sk_psock_strp_enabled(struct sk_psock *psock)
503 {
504 	if (!psock)
505 		return false;
506 	return !!psock->saved_data_ready;
507 }
508 
509 #if IS_ENABLED(CONFIG_NET_SOCK_MSG)
510 
511 #define BPF_F_STRPARSER	(1UL << 1)
512 
513 /* We only have two bits so far. */
514 #define BPF_F_PTR_MASK ~(BPF_F_INGRESS | BPF_F_STRPARSER)
515 
skb_bpf_strparser(const struct sk_buff * skb)516 static inline bool skb_bpf_strparser(const struct sk_buff *skb)
517 {
518 	unsigned long sk_redir = skb->_sk_redir;
519 
520 	return sk_redir & BPF_F_STRPARSER;
521 }
522 
skb_bpf_set_strparser(struct sk_buff * skb)523 static inline void skb_bpf_set_strparser(struct sk_buff *skb)
524 {
525 	skb->_sk_redir |= BPF_F_STRPARSER;
526 }
527 
skb_bpf_ingress(const struct sk_buff * skb)528 static inline bool skb_bpf_ingress(const struct sk_buff *skb)
529 {
530 	unsigned long sk_redir = skb->_sk_redir;
531 
532 	return sk_redir & BPF_F_INGRESS;
533 }
534 
skb_bpf_set_ingress(struct sk_buff * skb)535 static inline void skb_bpf_set_ingress(struct sk_buff *skb)
536 {
537 	skb->_sk_redir |= BPF_F_INGRESS;
538 }
539 
skb_bpf_set_redir(struct sk_buff * skb,struct sock * sk_redir,bool ingress)540 static inline void skb_bpf_set_redir(struct sk_buff *skb, struct sock *sk_redir,
541 				     bool ingress)
542 {
543 	skb->_sk_redir = (unsigned long)sk_redir;
544 	if (ingress)
545 		skb->_sk_redir |= BPF_F_INGRESS;
546 }
547 
skb_bpf_redirect_fetch(const struct sk_buff * skb)548 static inline struct sock *skb_bpf_redirect_fetch(const struct sk_buff *skb)
549 {
550 	unsigned long sk_redir = skb->_sk_redir;
551 
552 	return (struct sock *)(sk_redir & BPF_F_PTR_MASK);
553 }
554 
skb_bpf_redirect_clear(struct sk_buff * skb)555 static inline void skb_bpf_redirect_clear(struct sk_buff *skb)
556 {
557 	skb->_sk_redir = 0;
558 }
559 #endif /* CONFIG_NET_SOCK_MSG */
560 #endif /* _LINUX_SKMSG_H */
561