tipc: safely copy UDP netlink data from user
[deliverable/linux.git] / net / tipc / udp_media.c
1 /* net/tipc/udp_media.c: IP bearer support for TIPC
2 *
3 * Copyright (c) 2015, Ericsson AB
4 * All rights reserved.
5 *
6 * Redistribution and use in source and binary forms, with or without
7 * modification, are permitted provided that the following conditions are met:
8 *
9 * 1. Redistributions of source code must retain the above copyright
10 * notice, this list of conditions and the following disclaimer.
11 * 2. Redistributions in binary form must reproduce the above copyright
12 * notice, this list of conditions and the following disclaimer in the
13 * documentation and/or other materials provided with the distribution.
14 * 3. Neither the names of the copyright holders nor the names of its
15 * contributors may be used to endorse or promote products derived from
16 * this software without specific prior written permission.
17 *
18 * Alternatively, this software may be distributed under the terms of the
19 * GNU General Public License ("GPL") version 2 as published by the Free
20 * Software Foundation.
21 *
22 * THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
23 * AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
24 * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
25 * ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE
26 * LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR
27 * CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF
28 * SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS
29 * INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN
30 * CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE)
31 * ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE
32 * POSSIBILITY OF SUCH DAMAGE.
33 */
34
35 #include <linux/socket.h>
36 #include <linux/ip.h>
37 #include <linux/udp.h>
38 #include <linux/inet.h>
39 #include <linux/inetdevice.h>
40 #include <linux/igmp.h>
41 #include <linux/kernel.h>
42 #include <linux/workqueue.h>
43 #include <linux/list.h>
44 #include <net/sock.h>
45 #include <net/ip.h>
46 #include <net/udp_tunnel.h>
47 #include <net/addrconf.h>
48 #include <linux/tipc_netlink.h>
49 #include "core.h"
50 #include "bearer.h"
51
52 /* IANA assigned UDP port */
53 #define UDP_PORT_DEFAULT 6118
54
55 #define UDP_MIN_HEADROOM 28
56
57 static const struct nla_policy tipc_nl_udp_policy[TIPC_NLA_UDP_MAX + 1] = {
58 [TIPC_NLA_UDP_UNSPEC] = {.type = NLA_UNSPEC},
59 [TIPC_NLA_UDP_LOCAL] = {.type = NLA_BINARY,
60 .len = sizeof(struct sockaddr_storage)},
61 [TIPC_NLA_UDP_REMOTE] = {.type = NLA_BINARY,
62 .len = sizeof(struct sockaddr_storage)},
63 };
64
65 /**
66 * struct udp_media_addr - IP/UDP addressing information
67 *
68 * This is the bearer level originating address used in neighbor discovery
69 * messages, and all fields should be in network byte order
70 */
71 struct udp_media_addr {
72 __be16 proto;
73 __be16 udp_port;
74 union {
75 struct in_addr ipv4;
76 struct in6_addr ipv6;
77 };
78 };
79
80 /**
81 * struct udp_bearer - ip/udp bearer data structure
82 * @bearer: associated generic tipc bearer
83 * @ubsock: bearer associated socket
84 * @ifindex: local address scope
85 * @work: used to schedule deferred work on a bearer
86 */
87 struct udp_bearer {
88 struct tipc_bearer __rcu *bearer;
89 struct socket *ubsock;
90 u32 ifindex;
91 struct work_struct work;
92 };
93
94 /* udp_media_addr_set - convert a ip/udp address to a TIPC media address */
95 static void tipc_udp_media_addr_set(struct tipc_media_addr *addr,
96 struct udp_media_addr *ua)
97 {
98 memset(addr, 0, sizeof(struct tipc_media_addr));
99 addr->media_id = TIPC_MEDIA_TYPE_UDP;
100 memcpy(addr->value, ua, sizeof(struct udp_media_addr));
101 if (ntohs(ua->proto) == ETH_P_IP) {
102 if (ipv4_is_multicast(ua->ipv4.s_addr))
103 addr->broadcast = 1;
104 } else if (ntohs(ua->proto) == ETH_P_IPV6) {
105 if (ipv6_addr_type(&ua->ipv6) & IPV6_ADDR_MULTICAST)
106 addr->broadcast = 1;
107 } else {
108 pr_err("Invalid UDP media address\n");
109 }
110 }
111
112 /* tipc_udp_addr2str - convert ip/udp address to string */
113 static int tipc_udp_addr2str(struct tipc_media_addr *a, char *buf, int size)
114 {
115 struct udp_media_addr *ua = (struct udp_media_addr *)&a->value;
116
117 if (ntohs(ua->proto) == ETH_P_IP)
118 snprintf(buf, size, "%pI4:%u", &ua->ipv4, ntohs(ua->udp_port));
119 else if (ntohs(ua->proto) == ETH_P_IPV6)
120 snprintf(buf, size, "%pI6:%u", &ua->ipv6, ntohs(ua->udp_port));
121 else
122 pr_err("Invalid UDP media address\n");
123 return 0;
124 }
125
126 /* tipc_udp_msg2addr - extract an ip/udp address from a TIPC ndisc message */
127 static int tipc_udp_msg2addr(struct tipc_bearer *b, struct tipc_media_addr *a,
128 char *msg)
129 {
130 struct udp_media_addr *ua;
131
132 ua = (struct udp_media_addr *) (msg + TIPC_MEDIA_ADDR_OFFSET);
133 if (msg[TIPC_MEDIA_TYPE_OFFSET] != TIPC_MEDIA_TYPE_UDP)
134 return -EINVAL;
135 tipc_udp_media_addr_set(a, ua);
136 return 0;
137 }
138
139 /* tipc_udp_addr2msg - write an ip/udp address to a TIPC ndisc message */
140 static int tipc_udp_addr2msg(char *msg, struct tipc_media_addr *a)
141 {
142 memset(msg, 0, TIPC_MEDIA_INFO_SIZE);
143 msg[TIPC_MEDIA_TYPE_OFFSET] = TIPC_MEDIA_TYPE_UDP;
144 memcpy(msg + TIPC_MEDIA_ADDR_OFFSET, a->value,
145 sizeof(struct udp_media_addr));
146 return 0;
147 }
148
149 /* tipc_send_msg - enqueue a send request */
150 static int tipc_udp_send_msg(struct net *net, struct sk_buff *skb,
151 struct tipc_bearer *b,
152 struct tipc_media_addr *dest)
153 {
154 int ttl, err = 0;
155 struct udp_bearer *ub;
156 struct udp_media_addr *dst = (struct udp_media_addr *)&dest->value;
157 struct udp_media_addr *src = (struct udp_media_addr *)&b->addr.value;
158 struct rtable *rt;
159
160 if (skb_headroom(skb) < UDP_MIN_HEADROOM) {
161 err = pskb_expand_head(skb, UDP_MIN_HEADROOM, 0, GFP_ATOMIC);
162 if (err)
163 goto tx_error;
164 }
165
166 skb_set_inner_protocol(skb, htons(ETH_P_TIPC));
167 ub = rcu_dereference_rtnl(b->media_ptr);
168 if (!ub) {
169 err = -ENODEV;
170 goto tx_error;
171 }
172 if (dst->proto == htons(ETH_P_IP)) {
173 struct flowi4 fl = {
174 .daddr = dst->ipv4.s_addr,
175 .saddr = src->ipv4.s_addr,
176 .flowi4_mark = skb->mark,
177 .flowi4_proto = IPPROTO_UDP
178 };
179 rt = ip_route_output_key(net, &fl);
180 if (IS_ERR(rt)) {
181 err = PTR_ERR(rt);
182 goto tx_error;
183 }
184
185 skb->dev = rt->dst.dev;
186 ttl = ip4_dst_hoplimit(&rt->dst);
187 udp_tunnel_xmit_skb(rt, ub->ubsock->sk, skb, src->ipv4.s_addr,
188 dst->ipv4.s_addr, 0, ttl, 0, src->udp_port,
189 dst->udp_port, false, true);
190 #if IS_ENABLED(CONFIG_IPV6)
191 } else {
192 struct dst_entry *ndst;
193 struct flowi6 fl6 = {
194 .flowi6_oif = ub->ifindex,
195 .daddr = dst->ipv6,
196 .saddr = src->ipv6,
197 .flowi6_proto = IPPROTO_UDP
198 };
199 err = ipv6_stub->ipv6_dst_lookup(net, ub->ubsock->sk, &ndst,
200 &fl6);
201 if (err)
202 goto tx_error;
203 ttl = ip6_dst_hoplimit(ndst);
204 err = udp_tunnel6_xmit_skb(ndst, ub->ubsock->sk, skb,
205 ndst->dev, &src->ipv6,
206 &dst->ipv6, 0, ttl, src->udp_port,
207 dst->udp_port, false);
208 #endif
209 }
210 return err;
211
212 tx_error:
213 kfree_skb(skb);
214 return err;
215 }
216
217 /* tipc_udp_recv - read data from bearer socket */
218 static int tipc_udp_recv(struct sock *sk, struct sk_buff *skb)
219 {
220 struct udp_bearer *ub;
221 struct tipc_bearer *b;
222
223 ub = rcu_dereference_sk_user_data(sk);
224 if (!ub) {
225 pr_err_ratelimited("Failed to get UDP bearer reference");
226 kfree_skb(skb);
227 return 0;
228 }
229
230 skb_pull(skb, sizeof(struct udphdr));
231 rcu_read_lock();
232 b = rcu_dereference_rtnl(ub->bearer);
233
234 if (b) {
235 tipc_rcv(sock_net(sk), skb, b);
236 rcu_read_unlock();
237 return 0;
238 }
239 rcu_read_unlock();
240 kfree_skb(skb);
241 return 0;
242 }
243
244 static int enable_mcast(struct udp_bearer *ub, struct udp_media_addr *remote)
245 {
246 int err = 0;
247 struct ip_mreqn mreqn;
248 struct sock *sk = ub->ubsock->sk;
249
250 if (ntohs(remote->proto) == ETH_P_IP) {
251 if (!ipv4_is_multicast(remote->ipv4.s_addr))
252 return 0;
253 mreqn.imr_multiaddr = remote->ipv4;
254 mreqn.imr_ifindex = ub->ifindex;
255 err = ip_mc_join_group(sk, &mreqn);
256 #if IS_ENABLED(CONFIG_IPV6)
257 } else {
258 if (!ipv6_addr_is_multicast(&remote->ipv6))
259 return 0;
260 err = ipv6_stub->ipv6_sock_mc_join(sk, ub->ifindex,
261 &remote->ipv6);
262 #endif
263 }
264 return err;
265 }
266
267 /**
268 * parse_options - build local/remote addresses from configuration
269 * @attrs: netlink config data
270 * @ub: UDP bearer instance
271 * @local: local bearer IP address/port
272 * @remote: peer or multicast IP/port
273 */
274 static int parse_options(struct nlattr *attrs[], struct udp_bearer *ub,
275 struct udp_media_addr *local,
276 struct udp_media_addr *remote)
277 {
278 struct nlattr *opts[TIPC_NLA_UDP_MAX + 1];
279 struct sockaddr_storage sa_local, sa_remote;
280
281 if (!attrs[TIPC_NLA_BEARER_UDP_OPTS])
282 goto err;
283 if (nla_parse_nested(opts, TIPC_NLA_UDP_MAX,
284 attrs[TIPC_NLA_BEARER_UDP_OPTS],
285 tipc_nl_udp_policy))
286 goto err;
287 if (opts[TIPC_NLA_UDP_LOCAL] && opts[TIPC_NLA_UDP_REMOTE]) {
288 nla_memcpy(&sa_local, opts[TIPC_NLA_UDP_LOCAL],
289 sizeof(sa_local));
290 nla_memcpy(&sa_remote, opts[TIPC_NLA_UDP_REMOTE],
291 sizeof(sa_remote));
292 } else {
293 err:
294 pr_err("Invalid UDP bearer configuration");
295 return -EINVAL;
296 }
297 if ((sa_local.ss_family & sa_remote.ss_family) == AF_INET) {
298 struct sockaddr_in *ip4;
299
300 ip4 = (struct sockaddr_in *)&sa_local;
301 local->proto = htons(ETH_P_IP);
302 local->udp_port = ip4->sin_port;
303 local->ipv4.s_addr = ip4->sin_addr.s_addr;
304
305 ip4 = (struct sockaddr_in *)&sa_remote;
306 remote->proto = htons(ETH_P_IP);
307 remote->udp_port = ip4->sin_port;
308 remote->ipv4.s_addr = ip4->sin_addr.s_addr;
309 return 0;
310
311 #if IS_ENABLED(CONFIG_IPV6)
312 } else if ((sa_local.ss_family & sa_remote.ss_family) == AF_INET6) {
313 struct sockaddr_in6 *ip6;
314
315 ip6 = (struct sockaddr_in6 *)&sa_local;
316 local->proto = htons(ETH_P_IPV6);
317 local->udp_port = ip6->sin6_port;
318 memcpy(&local->ipv6, &ip6->sin6_addr, sizeof(struct in6_addr));
319 ub->ifindex = ip6->sin6_scope_id;
320
321 ip6 = (struct sockaddr_in6 *)&sa_remote;
322 remote->proto = htons(ETH_P_IPV6);
323 remote->udp_port = ip6->sin6_port;
324 memcpy(&remote->ipv6, &ip6->sin6_addr, sizeof(struct in6_addr));
325 return 0;
326 #endif
327 }
328 return -EADDRNOTAVAIL;
329 }
330
331 /**
332 * tipc_udp_enable - callback to create a new udp bearer instance
333 * @net: network namespace
334 * @b: pointer to generic tipc_bearer
335 * @attrs: netlink bearer configuration
336 *
337 * validate the bearer parameters and initialize the udp bearer
338 * rtnl_lock should be held
339 */
340 static int tipc_udp_enable(struct net *net, struct tipc_bearer *b,
341 struct nlattr *attrs[])
342 {
343 int err = -EINVAL;
344 struct udp_bearer *ub;
345 struct udp_media_addr *remote;
346 struct udp_media_addr local = {0};
347 struct udp_port_cfg udp_conf = {0};
348 struct udp_tunnel_sock_cfg tuncfg = {NULL};
349
350 ub = kzalloc(sizeof(*ub), GFP_ATOMIC);
351 if (!ub)
352 return -ENOMEM;
353
354 remote = (struct udp_media_addr *)&b->bcast_addr.value;
355 memset(remote, 0, sizeof(struct udp_media_addr));
356 err = parse_options(attrs, ub, &local, remote);
357 if (err)
358 goto err;
359
360 b->bcast_addr.media_id = TIPC_MEDIA_TYPE_UDP;
361 b->bcast_addr.broadcast = 1;
362 rcu_assign_pointer(b->media_ptr, ub);
363 rcu_assign_pointer(ub->bearer, b);
364 tipc_udp_media_addr_set(&b->addr, &local);
365 if (local.proto == htons(ETH_P_IP)) {
366 struct net_device *dev;
367
368 dev = __ip_dev_find(net, local.ipv4.s_addr, false);
369 if (!dev) {
370 err = -ENODEV;
371 goto err;
372 }
373 udp_conf.family = AF_INET;
374 udp_conf.local_ip.s_addr = htonl(INADDR_ANY);
375 udp_conf.use_udp_checksums = false;
376 ub->ifindex = dev->ifindex;
377 b->mtu = dev->mtu - sizeof(struct iphdr)
378 - sizeof(struct udphdr);
379 #if IS_ENABLED(CONFIG_IPV6)
380 } else if (local.proto == htons(ETH_P_IPV6)) {
381 udp_conf.family = AF_INET6;
382 udp_conf.use_udp6_tx_checksums = true;
383 udp_conf.use_udp6_rx_checksums = true;
384 udp_conf.local_ip6 = in6addr_any;
385 b->mtu = 1280;
386 #endif
387 } else {
388 err = -EAFNOSUPPORT;
389 goto err;
390 }
391 udp_conf.local_udp_port = local.udp_port;
392 err = udp_sock_create(net, &udp_conf, &ub->ubsock);
393 if (err)
394 goto err;
395 tuncfg.sk_user_data = ub;
396 tuncfg.encap_type = 1;
397 tuncfg.encap_rcv = tipc_udp_recv;
398 tuncfg.encap_destroy = NULL;
399 setup_udp_tunnel_sock(net, ub->ubsock, &tuncfg);
400
401 if (enable_mcast(ub, remote))
402 goto err;
403 return 0;
404 err:
405 kfree(ub);
406 return err;
407 }
408
409 /* cleanup_bearer - break the socket/bearer association */
410 static void cleanup_bearer(struct work_struct *work)
411 {
412 struct udp_bearer *ub = container_of(work, struct udp_bearer, work);
413
414 if (ub->ubsock)
415 udp_tunnel_sock_release(ub->ubsock);
416 synchronize_net();
417 kfree(ub);
418 }
419
420 /* tipc_udp_disable - detach bearer from socket */
421 static void tipc_udp_disable(struct tipc_bearer *b)
422 {
423 struct udp_bearer *ub;
424
425 ub = rcu_dereference_rtnl(b->media_ptr);
426 if (!ub) {
427 pr_err("UDP bearer instance not found\n");
428 return;
429 }
430 if (ub->ubsock)
431 sock_set_flag(ub->ubsock->sk, SOCK_DEAD);
432 RCU_INIT_POINTER(ub->bearer, NULL);
433
434 /* sock_release need to be done outside of rtnl lock */
435 INIT_WORK(&ub->work, cleanup_bearer);
436 schedule_work(&ub->work);
437 }
438
439 struct tipc_media udp_media_info = {
440 .send_msg = tipc_udp_send_msg,
441 .enable_media = tipc_udp_enable,
442 .disable_media = tipc_udp_disable,
443 .addr2str = tipc_udp_addr2str,
444 .addr2msg = tipc_udp_addr2msg,
445 .msg2addr = tipc_udp_msg2addr,
446 .priority = TIPC_DEF_LINK_PRI,
447 .tolerance = TIPC_DEF_LINK_TOL,
448 .window = TIPC_DEF_LINK_WIN,
449 .type_id = TIPC_MEDIA_TYPE_UDP,
450 .hwaddr_len = 0,
451 .name = "udp"
452 };
This page took 0.039887 seconds and 6 git commands to generate.