1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * common code for virtio vsock
4 *
5 * Copyright (C) 2013-2015 Red Hat, Inc.
6 * Author: Asias He <asias@redhat.com>
7 * Stefan Hajnoczi <stefanha@redhat.com>
8 */
9 #include <linux/spinlock.h>
10 #include <linux/module.h>
11 #include <linux/sched/signal.h>
12 #include <linux/ctype.h>
13 #include <linux/list.h>
14 #include <linux/virtio_vsock.h>
15 #include <uapi/linux/vsockmon.h>
16
17 #include <net/sock.h>
18 #include <net/af_vsock.h>
19
20 #define CREATE_TRACE_POINTS
21 #include <trace/events/vsock_virtio_transport_common.h>
22
23 /* How long to wait for graceful shutdown of a connection */
24 #define VSOCK_CLOSE_TIMEOUT (8 * HZ)
25
26 /* Threshold for detecting small packets to copy */
27 #define GOOD_COPY_LEN 128
28
29 static const struct virtio_transport *
virtio_transport_get_ops(struct vsock_sock * vsk)30 virtio_transport_get_ops(struct vsock_sock *vsk)
31 {
32 const struct vsock_transport *t = vsock_core_get_transport(vsk);
33
34 if (WARN_ON(!t))
35 return NULL;
36
37 return container_of(t, struct virtio_transport, transport);
38 }
39
40 /* Returns a new packet on success, otherwise returns NULL.
41 *
42 * If NULL is returned, errp is set to a negative errno.
43 */
44 static struct sk_buff *
virtio_transport_alloc_skb(struct virtio_vsock_pkt_info * info,size_t len,u32 src_cid,u32 src_port,u32 dst_cid,u32 dst_port)45 virtio_transport_alloc_skb(struct virtio_vsock_pkt_info *info,
46 size_t len,
47 u32 src_cid,
48 u32 src_port,
49 u32 dst_cid,
50 u32 dst_port)
51 {
52 const size_t skb_len = VIRTIO_VSOCK_SKB_HEADROOM + len;
53 struct virtio_vsock_hdr *hdr;
54 struct sk_buff *skb;
55 void *payload;
56 int err;
57
58 skb = virtio_vsock_alloc_skb(skb_len, GFP_KERNEL);
59 if (!skb)
60 return NULL;
61
62 hdr = virtio_vsock_hdr(skb);
63 hdr->type = cpu_to_le16(info->type);
64 hdr->op = cpu_to_le16(info->op);
65 hdr->src_cid = cpu_to_le64(src_cid);
66 hdr->dst_cid = cpu_to_le64(dst_cid);
67 hdr->src_port = cpu_to_le32(src_port);
68 hdr->dst_port = cpu_to_le32(dst_port);
69 hdr->flags = cpu_to_le32(info->flags);
70 hdr->len = cpu_to_le32(len);
71 hdr->buf_alloc = cpu_to_le32(0);
72 hdr->fwd_cnt = cpu_to_le32(0);
73
74 if (info->msg && len > 0) {
75 payload = skb_put(skb, len);
76 err = memcpy_from_msg(payload, info->msg, len);
77 if (err)
78 goto out;
79
80 if (msg_data_left(info->msg) == 0 &&
81 info->type == VIRTIO_VSOCK_TYPE_SEQPACKET) {
82 hdr->flags |= cpu_to_le32(VIRTIO_VSOCK_SEQ_EOM);
83
84 if (info->msg->msg_flags & MSG_EOR)
85 hdr->flags |= cpu_to_le32(VIRTIO_VSOCK_SEQ_EOR);
86 }
87 }
88
89 if (info->reply)
90 virtio_vsock_skb_set_reply(skb);
91
92 trace_virtio_transport_alloc_pkt(src_cid, src_port,
93 dst_cid, dst_port,
94 len,
95 info->type,
96 info->op,
97 info->flags);
98
99 if (info->vsk && !skb_set_owner_sk_safe(skb, sk_vsock(info->vsk))) {
100 WARN_ONCE(1, "failed to allocate skb on vsock socket with sk_refcnt == 0\n");
101 goto out;
102 }
103
104 return skb;
105
106 out:
107 kfree_skb(skb);
108 return NULL;
109 }
110
111 /* Packet capture */
virtio_transport_build_skb(void * opaque)112 static struct sk_buff *virtio_transport_build_skb(void *opaque)
113 {
114 struct virtio_vsock_hdr *pkt_hdr;
115 struct sk_buff *pkt = opaque;
116 struct af_vsockmon_hdr *hdr;
117 struct sk_buff *skb;
118 size_t payload_len;
119 void *payload_buf;
120
121 /* A packet could be split to fit the RX buffer, so we can retrieve
122 * the payload length from the header and the buffer pointer taking
123 * care of the offset in the original packet.
124 */
125 pkt_hdr = virtio_vsock_hdr(pkt);
126 payload_len = pkt->len;
127 payload_buf = pkt->data;
128
129 skb = alloc_skb(sizeof(*hdr) + sizeof(*pkt_hdr) + payload_len,
130 GFP_ATOMIC);
131 if (!skb)
132 return NULL;
133
134 hdr = skb_put(skb, sizeof(*hdr));
135
136 /* pkt->hdr is little-endian so no need to byteswap here */
137 hdr->src_cid = pkt_hdr->src_cid;
138 hdr->src_port = pkt_hdr->src_port;
139 hdr->dst_cid = pkt_hdr->dst_cid;
140 hdr->dst_port = pkt_hdr->dst_port;
141
142 hdr->transport = cpu_to_le16(AF_VSOCK_TRANSPORT_VIRTIO);
143 hdr->len = cpu_to_le16(sizeof(*pkt_hdr));
144 memset(hdr->reserved, 0, sizeof(hdr->reserved));
145
146 switch (le16_to_cpu(pkt_hdr->op)) {
147 case VIRTIO_VSOCK_OP_REQUEST:
148 case VIRTIO_VSOCK_OP_RESPONSE:
149 hdr->op = cpu_to_le16(AF_VSOCK_OP_CONNECT);
150 break;
151 case VIRTIO_VSOCK_OP_RST:
152 case VIRTIO_VSOCK_OP_SHUTDOWN:
153 hdr->op = cpu_to_le16(AF_VSOCK_OP_DISCONNECT);
154 break;
155 case VIRTIO_VSOCK_OP_RW:
156 hdr->op = cpu_to_le16(AF_VSOCK_OP_PAYLOAD);
157 break;
158 case VIRTIO_VSOCK_OP_CREDIT_UPDATE:
159 case VIRTIO_VSOCK_OP_CREDIT_REQUEST:
160 hdr->op = cpu_to_le16(AF_VSOCK_OP_CONTROL);
161 break;
162 default:
163 hdr->op = cpu_to_le16(AF_VSOCK_OP_UNKNOWN);
164 break;
165 }
166
167 skb_put_data(skb, pkt_hdr, sizeof(*pkt_hdr));
168
169 if (payload_len) {
170 skb_put_data(skb, payload_buf, payload_len);
171 }
172
173 return skb;
174 }
175
virtio_transport_deliver_tap_pkt(struct sk_buff * skb)176 void virtio_transport_deliver_tap_pkt(struct sk_buff *skb)
177 {
178 if (virtio_vsock_skb_tap_delivered(skb))
179 return;
180
181 vsock_deliver_tap(virtio_transport_build_skb, skb);
182 virtio_vsock_skb_set_tap_delivered(skb);
183 }
184 EXPORT_SYMBOL_GPL(virtio_transport_deliver_tap_pkt);
185
virtio_transport_get_type(struct sock * sk)186 static u16 virtio_transport_get_type(struct sock *sk)
187 {
188 if (sk->sk_type == SOCK_STREAM)
189 return VIRTIO_VSOCK_TYPE_STREAM;
190 else
191 return VIRTIO_VSOCK_TYPE_SEQPACKET;
192 }
193
194 /* This function can only be used on connecting/connected sockets,
195 * since a socket assigned to a transport is required.
196 *
197 * Do not use on listener sockets!
198 */
virtio_transport_send_pkt_info(struct vsock_sock * vsk,struct virtio_vsock_pkt_info * info)199 static int virtio_transport_send_pkt_info(struct vsock_sock *vsk,
200 struct virtio_vsock_pkt_info *info)
201 {
202 u32 src_cid, src_port, dst_cid, dst_port;
203 const struct virtio_transport *t_ops;
204 struct virtio_vsock_sock *vvs;
205 u32 pkt_len = info->pkt_len;
206 u32 rest_len;
207 int ret;
208
209 info->type = virtio_transport_get_type(sk_vsock(vsk));
210
211 t_ops = virtio_transport_get_ops(vsk);
212 if (unlikely(!t_ops))
213 return -EFAULT;
214
215 src_cid = t_ops->transport.get_local_cid();
216 src_port = vsk->local_addr.svm_port;
217 if (!info->remote_cid) {
218 dst_cid = vsk->remote_addr.svm_cid;
219 dst_port = vsk->remote_addr.svm_port;
220 } else {
221 dst_cid = info->remote_cid;
222 dst_port = info->remote_port;
223 }
224
225 vvs = vsk->trans;
226
227 /* virtio_transport_get_credit might return less than pkt_len credit */
228 pkt_len = virtio_transport_get_credit(vvs, pkt_len);
229
230 /* Do not send zero length OP_RW pkt */
231 if (pkt_len == 0 && info->op == VIRTIO_VSOCK_OP_RW)
232 return pkt_len;
233
234 rest_len = pkt_len;
235
236 do {
237 struct sk_buff *skb;
238 size_t skb_len;
239
240 skb_len = min_t(u32, VIRTIO_VSOCK_MAX_PKT_BUF_SIZE, rest_len);
241
242 skb = virtio_transport_alloc_skb(info, skb_len,
243 src_cid, src_port,
244 dst_cid, dst_port);
245 if (!skb) {
246 ret = -ENOMEM;
247 break;
248 }
249
250 virtio_transport_inc_tx_pkt(vvs, skb);
251
252 ret = t_ops->send_pkt(skb);
253 if (ret < 0)
254 break;
255
256 /* Both virtio and vhost 'send_pkt()' returns 'skb_len',
257 * but for reliability use 'ret' instead of 'skb_len'.
258 * Also if partial send happens (e.g. 'ret' != 'skb_len')
259 * somehow, we break this loop, but account such returned
260 * value in 'virtio_transport_put_credit()'.
261 */
262 rest_len -= ret;
263
264 if (WARN_ONCE(ret != skb_len,
265 "'send_pkt()' returns %i, but %zu expected\n",
266 ret, skb_len))
267 break;
268 } while (rest_len);
269
270 virtio_transport_put_credit(vvs, rest_len);
271
272 /* Return number of bytes, if any data has been sent. */
273 if (rest_len != pkt_len)
274 ret = pkt_len - rest_len;
275
276 return ret;
277 }
278
virtio_transport_inc_rx_pkt(struct virtio_vsock_sock * vvs,u32 len)279 static bool virtio_transport_inc_rx_pkt(struct virtio_vsock_sock *vvs,
280 u32 len)
281 {
282 if (vvs->rx_bytes + len > vvs->buf_alloc)
283 return false;
284
285 vvs->rx_bytes += len;
286 return true;
287 }
288
virtio_transport_dec_rx_pkt(struct virtio_vsock_sock * vvs,u32 len)289 static void virtio_transport_dec_rx_pkt(struct virtio_vsock_sock *vvs,
290 u32 len)
291 {
292 vvs->rx_bytes -= len;
293 vvs->fwd_cnt += len;
294 }
295
virtio_transport_inc_tx_pkt(struct virtio_vsock_sock * vvs,struct sk_buff * skb)296 void virtio_transport_inc_tx_pkt(struct virtio_vsock_sock *vvs, struct sk_buff *skb)
297 {
298 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
299
300 spin_lock_bh(&vvs->rx_lock);
301 vvs->last_fwd_cnt = vvs->fwd_cnt;
302 hdr->fwd_cnt = cpu_to_le32(vvs->fwd_cnt);
303 hdr->buf_alloc = cpu_to_le32(vvs->buf_alloc);
304 spin_unlock_bh(&vvs->rx_lock);
305 }
306 EXPORT_SYMBOL_GPL(virtio_transport_inc_tx_pkt);
307
virtio_transport_get_credit(struct virtio_vsock_sock * vvs,u32 credit)308 u32 virtio_transport_get_credit(struct virtio_vsock_sock *vvs, u32 credit)
309 {
310 u32 ret;
311
312 if (!credit)
313 return 0;
314
315 spin_lock_bh(&vvs->tx_lock);
316 ret = vvs->peer_buf_alloc - (vvs->tx_cnt - vvs->peer_fwd_cnt);
317 if (ret > credit)
318 ret = credit;
319 vvs->tx_cnt += ret;
320 spin_unlock_bh(&vvs->tx_lock);
321
322 return ret;
323 }
324 EXPORT_SYMBOL_GPL(virtio_transport_get_credit);
325
virtio_transport_put_credit(struct virtio_vsock_sock * vvs,u32 credit)326 void virtio_transport_put_credit(struct virtio_vsock_sock *vvs, u32 credit)
327 {
328 if (!credit)
329 return;
330
331 spin_lock_bh(&vvs->tx_lock);
332 vvs->tx_cnt -= credit;
333 spin_unlock_bh(&vvs->tx_lock);
334 }
335 EXPORT_SYMBOL_GPL(virtio_transport_put_credit);
336
virtio_transport_send_credit_update(struct vsock_sock * vsk)337 static int virtio_transport_send_credit_update(struct vsock_sock *vsk)
338 {
339 struct virtio_vsock_pkt_info info = {
340 .op = VIRTIO_VSOCK_OP_CREDIT_UPDATE,
341 .vsk = vsk,
342 };
343
344 return virtio_transport_send_pkt_info(vsk, &info);
345 }
346
347 static ssize_t
virtio_transport_stream_do_peek(struct vsock_sock * vsk,struct msghdr * msg,size_t len)348 virtio_transport_stream_do_peek(struct vsock_sock *vsk,
349 struct msghdr *msg,
350 size_t len)
351 {
352 struct virtio_vsock_sock *vvs = vsk->trans;
353 struct sk_buff *skb;
354 size_t total = 0;
355 int err;
356
357 spin_lock_bh(&vvs->rx_lock);
358
359 skb_queue_walk(&vvs->rx_queue, skb) {
360 size_t bytes;
361
362 bytes = len - total;
363 if (bytes > skb->len)
364 bytes = skb->len;
365
366 spin_unlock_bh(&vvs->rx_lock);
367
368 /* sk_lock is held by caller so no one else can dequeue.
369 * Unlock rx_lock since memcpy_to_msg() may sleep.
370 */
371 err = memcpy_to_msg(msg, skb->data, bytes);
372 if (err)
373 goto out;
374
375 total += bytes;
376
377 spin_lock_bh(&vvs->rx_lock);
378
379 if (total == len)
380 break;
381 }
382
383 spin_unlock_bh(&vvs->rx_lock);
384
385 return total;
386
387 out:
388 if (total)
389 err = total;
390 return err;
391 }
392
393 static ssize_t
virtio_transport_stream_do_dequeue(struct vsock_sock * vsk,struct msghdr * msg,size_t len)394 virtio_transport_stream_do_dequeue(struct vsock_sock *vsk,
395 struct msghdr *msg,
396 size_t len)
397 {
398 struct virtio_vsock_sock *vvs = vsk->trans;
399 size_t bytes, total = 0;
400 struct sk_buff *skb;
401 u32 fwd_cnt_delta;
402 bool low_rx_bytes;
403 int err = -EFAULT;
404 u32 free_space;
405
406 spin_lock_bh(&vvs->rx_lock);
407
408 if (WARN_ONCE(skb_queue_empty(&vvs->rx_queue) && vvs->rx_bytes,
409 "rx_queue is empty, but rx_bytes is non-zero\n")) {
410 spin_unlock_bh(&vvs->rx_lock);
411 return err;
412 }
413
414 while (total < len && !skb_queue_empty(&vvs->rx_queue)) {
415 skb = skb_peek(&vvs->rx_queue);
416
417 bytes = len - total;
418 if (bytes > skb->len)
419 bytes = skb->len;
420
421 /* sk_lock is held by caller so no one else can dequeue.
422 * Unlock rx_lock since memcpy_to_msg() may sleep.
423 */
424 spin_unlock_bh(&vvs->rx_lock);
425
426 err = memcpy_to_msg(msg, skb->data, bytes);
427 if (err)
428 goto out;
429
430 spin_lock_bh(&vvs->rx_lock);
431
432 total += bytes;
433 skb_pull(skb, bytes);
434
435 if (skb->len == 0) {
436 u32 pkt_len = le32_to_cpu(virtio_vsock_hdr(skb)->len);
437
438 virtio_transport_dec_rx_pkt(vvs, pkt_len);
439 __skb_unlink(skb, &vvs->rx_queue);
440 consume_skb(skb);
441 }
442 }
443
444 fwd_cnt_delta = vvs->fwd_cnt - vvs->last_fwd_cnt;
445 free_space = vvs->buf_alloc - fwd_cnt_delta;
446 low_rx_bytes = (vvs->rx_bytes <
447 sock_rcvlowat(sk_vsock(vsk), 0, INT_MAX));
448
449 spin_unlock_bh(&vvs->rx_lock);
450
451 /* To reduce the number of credit update messages,
452 * don't update credits as long as lots of space is available.
453 * Note: the limit chosen here is arbitrary. Setting the limit
454 * too high causes extra messages. Too low causes transmitter
455 * stalls. As stalls are in theory more expensive than extra
456 * messages, we set the limit to a high value. TODO: experiment
457 * with different values. Also send credit update message when
458 * number of bytes in rx queue is not enough to wake up reader.
459 */
460 if (fwd_cnt_delta &&
461 (free_space < VIRTIO_VSOCK_MAX_PKT_BUF_SIZE || low_rx_bytes))
462 virtio_transport_send_credit_update(vsk);
463
464 return total;
465
466 out:
467 if (total)
468 err = total;
469 return err;
470 }
471
472 static ssize_t
virtio_transport_seqpacket_do_peek(struct vsock_sock * vsk,struct msghdr * msg)473 virtio_transport_seqpacket_do_peek(struct vsock_sock *vsk,
474 struct msghdr *msg)
475 {
476 struct virtio_vsock_sock *vvs = vsk->trans;
477 struct sk_buff *skb;
478 size_t total, len;
479
480 spin_lock_bh(&vvs->rx_lock);
481
482 if (!vvs->msg_count) {
483 spin_unlock_bh(&vvs->rx_lock);
484 return 0;
485 }
486
487 total = 0;
488 len = msg_data_left(msg);
489
490 skb_queue_walk(&vvs->rx_queue, skb) {
491 struct virtio_vsock_hdr *hdr;
492
493 if (total < len) {
494 size_t bytes;
495 int err;
496
497 bytes = len - total;
498 if (bytes > skb->len)
499 bytes = skb->len;
500
501 spin_unlock_bh(&vvs->rx_lock);
502
503 /* sk_lock is held by caller so no one else can dequeue.
504 * Unlock rx_lock since memcpy_to_msg() may sleep.
505 */
506 err = memcpy_to_msg(msg, skb->data, bytes);
507 if (err)
508 return err;
509
510 spin_lock_bh(&vvs->rx_lock);
511 }
512
513 total += skb->len;
514 hdr = virtio_vsock_hdr(skb);
515
516 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SEQ_EOM) {
517 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SEQ_EOR)
518 msg->msg_flags |= MSG_EOR;
519
520 break;
521 }
522 }
523
524 spin_unlock_bh(&vvs->rx_lock);
525
526 return total;
527 }
528
virtio_transport_seqpacket_do_dequeue(struct vsock_sock * vsk,struct msghdr * msg,int flags)529 static int virtio_transport_seqpacket_do_dequeue(struct vsock_sock *vsk,
530 struct msghdr *msg,
531 int flags)
532 {
533 struct virtio_vsock_sock *vvs = vsk->trans;
534 int dequeued_len = 0;
535 size_t user_buf_len = msg_data_left(msg);
536 bool msg_ready = false;
537 struct sk_buff *skb;
538
539 spin_lock_bh(&vvs->rx_lock);
540
541 if (vvs->msg_count == 0) {
542 spin_unlock_bh(&vvs->rx_lock);
543 return 0;
544 }
545
546 while (!msg_ready) {
547 struct virtio_vsock_hdr *hdr;
548 size_t pkt_len;
549
550 skb = __skb_dequeue(&vvs->rx_queue);
551 if (!skb)
552 break;
553 hdr = virtio_vsock_hdr(skb);
554 pkt_len = (size_t)le32_to_cpu(hdr->len);
555
556 if (dequeued_len >= 0) {
557 size_t bytes_to_copy;
558
559 bytes_to_copy = min(user_buf_len, pkt_len);
560
561 if (bytes_to_copy) {
562 int err;
563
564 /* sk_lock is held by caller so no one else can dequeue.
565 * Unlock rx_lock since memcpy_to_msg() may sleep.
566 */
567 spin_unlock_bh(&vvs->rx_lock);
568
569 err = memcpy_to_msg(msg, skb->data, bytes_to_copy);
570 if (err) {
571 /* Copy of message failed. Rest of
572 * fragments will be freed without copy.
573 */
574 dequeued_len = err;
575 } else {
576 user_buf_len -= bytes_to_copy;
577 }
578
579 spin_lock_bh(&vvs->rx_lock);
580 }
581
582 if (dequeued_len >= 0)
583 dequeued_len += pkt_len;
584 }
585
586 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SEQ_EOM) {
587 msg_ready = true;
588 vvs->msg_count--;
589
590 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SEQ_EOR)
591 msg->msg_flags |= MSG_EOR;
592 }
593
594 virtio_transport_dec_rx_pkt(vvs, pkt_len);
595 kfree_skb(skb);
596 }
597
598 spin_unlock_bh(&vvs->rx_lock);
599
600 virtio_transport_send_credit_update(vsk);
601
602 return dequeued_len;
603 }
604
605 ssize_t
virtio_transport_stream_dequeue(struct vsock_sock * vsk,struct msghdr * msg,size_t len,int flags)606 virtio_transport_stream_dequeue(struct vsock_sock *vsk,
607 struct msghdr *msg,
608 size_t len, int flags)
609 {
610 if (flags & MSG_PEEK)
611 return virtio_transport_stream_do_peek(vsk, msg, len);
612 else
613 return virtio_transport_stream_do_dequeue(vsk, msg, len);
614 }
615 EXPORT_SYMBOL_GPL(virtio_transport_stream_dequeue);
616
617 ssize_t
virtio_transport_seqpacket_dequeue(struct vsock_sock * vsk,struct msghdr * msg,int flags)618 virtio_transport_seqpacket_dequeue(struct vsock_sock *vsk,
619 struct msghdr *msg,
620 int flags)
621 {
622 if (flags & MSG_PEEK)
623 return virtio_transport_seqpacket_do_peek(vsk, msg);
624 else
625 return virtio_transport_seqpacket_do_dequeue(vsk, msg, flags);
626 }
627 EXPORT_SYMBOL_GPL(virtio_transport_seqpacket_dequeue);
628
629 int
virtio_transport_seqpacket_enqueue(struct vsock_sock * vsk,struct msghdr * msg,size_t len)630 virtio_transport_seqpacket_enqueue(struct vsock_sock *vsk,
631 struct msghdr *msg,
632 size_t len)
633 {
634 struct virtio_vsock_sock *vvs = vsk->trans;
635
636 spin_lock_bh(&vvs->tx_lock);
637
638 if (len > vvs->peer_buf_alloc) {
639 spin_unlock_bh(&vvs->tx_lock);
640 return -EMSGSIZE;
641 }
642
643 spin_unlock_bh(&vvs->tx_lock);
644
645 return virtio_transport_stream_enqueue(vsk, msg, len);
646 }
647 EXPORT_SYMBOL_GPL(virtio_transport_seqpacket_enqueue);
648
649 int
virtio_transport_dgram_dequeue(struct vsock_sock * vsk,struct msghdr * msg,size_t len,int flags)650 virtio_transport_dgram_dequeue(struct vsock_sock *vsk,
651 struct msghdr *msg,
652 size_t len, int flags)
653 {
654 return -EOPNOTSUPP;
655 }
656 EXPORT_SYMBOL_GPL(virtio_transport_dgram_dequeue);
657
virtio_transport_stream_has_data(struct vsock_sock * vsk)658 s64 virtio_transport_stream_has_data(struct vsock_sock *vsk)
659 {
660 struct virtio_vsock_sock *vvs = vsk->trans;
661 s64 bytes;
662
663 spin_lock_bh(&vvs->rx_lock);
664 bytes = vvs->rx_bytes;
665 spin_unlock_bh(&vvs->rx_lock);
666
667 return bytes;
668 }
669 EXPORT_SYMBOL_GPL(virtio_transport_stream_has_data);
670
virtio_transport_seqpacket_has_data(struct vsock_sock * vsk)671 u32 virtio_transport_seqpacket_has_data(struct vsock_sock *vsk)
672 {
673 struct virtio_vsock_sock *vvs = vsk->trans;
674 u32 msg_count;
675
676 spin_lock_bh(&vvs->rx_lock);
677 msg_count = vvs->msg_count;
678 spin_unlock_bh(&vvs->rx_lock);
679
680 return msg_count;
681 }
682 EXPORT_SYMBOL_GPL(virtio_transport_seqpacket_has_data);
683
virtio_transport_has_space(struct vsock_sock * vsk)684 static s64 virtio_transport_has_space(struct vsock_sock *vsk)
685 {
686 struct virtio_vsock_sock *vvs = vsk->trans;
687 s64 bytes;
688
689 bytes = (s64)vvs->peer_buf_alloc - (vvs->tx_cnt - vvs->peer_fwd_cnt);
690 if (bytes < 0)
691 bytes = 0;
692
693 return bytes;
694 }
695
virtio_transport_stream_has_space(struct vsock_sock * vsk)696 s64 virtio_transport_stream_has_space(struct vsock_sock *vsk)
697 {
698 struct virtio_vsock_sock *vvs = vsk->trans;
699 s64 bytes;
700
701 spin_lock_bh(&vvs->tx_lock);
702 bytes = virtio_transport_has_space(vsk);
703 spin_unlock_bh(&vvs->tx_lock);
704
705 return bytes;
706 }
707 EXPORT_SYMBOL_GPL(virtio_transport_stream_has_space);
708
virtio_transport_do_socket_init(struct vsock_sock * vsk,struct vsock_sock * psk)709 int virtio_transport_do_socket_init(struct vsock_sock *vsk,
710 struct vsock_sock *psk)
711 {
712 struct virtio_vsock_sock *vvs;
713
714 vvs = kzalloc(sizeof(*vvs), GFP_KERNEL);
715 if (!vvs)
716 return -ENOMEM;
717
718 vsk->trans = vvs;
719 vvs->vsk = vsk;
720 if (psk && psk->trans) {
721 struct virtio_vsock_sock *ptrans = psk->trans;
722
723 vvs->peer_buf_alloc = ptrans->peer_buf_alloc;
724 }
725
726 if (vsk->buffer_size > VIRTIO_VSOCK_MAX_BUF_SIZE)
727 vsk->buffer_size = VIRTIO_VSOCK_MAX_BUF_SIZE;
728
729 vvs->buf_alloc = vsk->buffer_size;
730
731 spin_lock_init(&vvs->rx_lock);
732 spin_lock_init(&vvs->tx_lock);
733 skb_queue_head_init(&vvs->rx_queue);
734
735 return 0;
736 }
737 EXPORT_SYMBOL_GPL(virtio_transport_do_socket_init);
738
739 /* sk_lock held by the caller */
virtio_transport_notify_buffer_size(struct vsock_sock * vsk,u64 * val)740 void virtio_transport_notify_buffer_size(struct vsock_sock *vsk, u64 *val)
741 {
742 struct virtio_vsock_sock *vvs = vsk->trans;
743
744 if (*val > VIRTIO_VSOCK_MAX_BUF_SIZE)
745 *val = VIRTIO_VSOCK_MAX_BUF_SIZE;
746
747 vvs->buf_alloc = *val;
748
749 virtio_transport_send_credit_update(vsk);
750 }
751 EXPORT_SYMBOL_GPL(virtio_transport_notify_buffer_size);
752
753 int
virtio_transport_notify_poll_in(struct vsock_sock * vsk,size_t target,bool * data_ready_now)754 virtio_transport_notify_poll_in(struct vsock_sock *vsk,
755 size_t target,
756 bool *data_ready_now)
757 {
758 *data_ready_now = vsock_stream_has_data(vsk) >= target;
759
760 return 0;
761 }
762 EXPORT_SYMBOL_GPL(virtio_transport_notify_poll_in);
763
764 int
virtio_transport_notify_poll_out(struct vsock_sock * vsk,size_t target,bool * space_avail_now)765 virtio_transport_notify_poll_out(struct vsock_sock *vsk,
766 size_t target,
767 bool *space_avail_now)
768 {
769 s64 free_space;
770
771 free_space = vsock_stream_has_space(vsk);
772 if (free_space > 0)
773 *space_avail_now = true;
774 else if (free_space == 0)
775 *space_avail_now = false;
776
777 return 0;
778 }
779 EXPORT_SYMBOL_GPL(virtio_transport_notify_poll_out);
780
virtio_transport_notify_recv_init(struct vsock_sock * vsk,size_t target,struct vsock_transport_recv_notify_data * data)781 int virtio_transport_notify_recv_init(struct vsock_sock *vsk,
782 size_t target, struct vsock_transport_recv_notify_data *data)
783 {
784 return 0;
785 }
786 EXPORT_SYMBOL_GPL(virtio_transport_notify_recv_init);
787
virtio_transport_notify_recv_pre_block(struct vsock_sock * vsk,size_t target,struct vsock_transport_recv_notify_data * data)788 int virtio_transport_notify_recv_pre_block(struct vsock_sock *vsk,
789 size_t target, struct vsock_transport_recv_notify_data *data)
790 {
791 return 0;
792 }
793 EXPORT_SYMBOL_GPL(virtio_transport_notify_recv_pre_block);
794
virtio_transport_notify_recv_pre_dequeue(struct vsock_sock * vsk,size_t target,struct vsock_transport_recv_notify_data * data)795 int virtio_transport_notify_recv_pre_dequeue(struct vsock_sock *vsk,
796 size_t target, struct vsock_transport_recv_notify_data *data)
797 {
798 return 0;
799 }
800 EXPORT_SYMBOL_GPL(virtio_transport_notify_recv_pre_dequeue);
801
virtio_transport_notify_recv_post_dequeue(struct vsock_sock * vsk,size_t target,ssize_t copied,bool data_read,struct vsock_transport_recv_notify_data * data)802 int virtio_transport_notify_recv_post_dequeue(struct vsock_sock *vsk,
803 size_t target, ssize_t copied, bool data_read,
804 struct vsock_transport_recv_notify_data *data)
805 {
806 return 0;
807 }
808 EXPORT_SYMBOL_GPL(virtio_transport_notify_recv_post_dequeue);
809
virtio_transport_notify_send_init(struct vsock_sock * vsk,struct vsock_transport_send_notify_data * data)810 int virtio_transport_notify_send_init(struct vsock_sock *vsk,
811 struct vsock_transport_send_notify_data *data)
812 {
813 return 0;
814 }
815 EXPORT_SYMBOL_GPL(virtio_transport_notify_send_init);
816
virtio_transport_notify_send_pre_block(struct vsock_sock * vsk,struct vsock_transport_send_notify_data * data)817 int virtio_transport_notify_send_pre_block(struct vsock_sock *vsk,
818 struct vsock_transport_send_notify_data *data)
819 {
820 return 0;
821 }
822 EXPORT_SYMBOL_GPL(virtio_transport_notify_send_pre_block);
823
virtio_transport_notify_send_pre_enqueue(struct vsock_sock * vsk,struct vsock_transport_send_notify_data * data)824 int virtio_transport_notify_send_pre_enqueue(struct vsock_sock *vsk,
825 struct vsock_transport_send_notify_data *data)
826 {
827 return 0;
828 }
829 EXPORT_SYMBOL_GPL(virtio_transport_notify_send_pre_enqueue);
830
virtio_transport_notify_send_post_enqueue(struct vsock_sock * vsk,ssize_t written,struct vsock_transport_send_notify_data * data)831 int virtio_transport_notify_send_post_enqueue(struct vsock_sock *vsk,
832 ssize_t written, struct vsock_transport_send_notify_data *data)
833 {
834 return 0;
835 }
836 EXPORT_SYMBOL_GPL(virtio_transport_notify_send_post_enqueue);
837
virtio_transport_stream_rcvhiwat(struct vsock_sock * vsk)838 u64 virtio_transport_stream_rcvhiwat(struct vsock_sock *vsk)
839 {
840 return vsk->buffer_size;
841 }
842 EXPORT_SYMBOL_GPL(virtio_transport_stream_rcvhiwat);
843
virtio_transport_stream_is_active(struct vsock_sock * vsk)844 bool virtio_transport_stream_is_active(struct vsock_sock *vsk)
845 {
846 return true;
847 }
848 EXPORT_SYMBOL_GPL(virtio_transport_stream_is_active);
849
virtio_transport_stream_allow(u32 cid,u32 port)850 bool virtio_transport_stream_allow(u32 cid, u32 port)
851 {
852 return true;
853 }
854 EXPORT_SYMBOL_GPL(virtio_transport_stream_allow);
855
virtio_transport_dgram_bind(struct vsock_sock * vsk,struct sockaddr_vm * addr)856 int virtio_transport_dgram_bind(struct vsock_sock *vsk,
857 struct sockaddr_vm *addr)
858 {
859 return -EOPNOTSUPP;
860 }
861 EXPORT_SYMBOL_GPL(virtio_transport_dgram_bind);
862
virtio_transport_dgram_allow(u32 cid,u32 port)863 bool virtio_transport_dgram_allow(u32 cid, u32 port)
864 {
865 return false;
866 }
867 EXPORT_SYMBOL_GPL(virtio_transport_dgram_allow);
868
virtio_transport_connect(struct vsock_sock * vsk)869 int virtio_transport_connect(struct vsock_sock *vsk)
870 {
871 struct virtio_vsock_pkt_info info = {
872 .op = VIRTIO_VSOCK_OP_REQUEST,
873 .vsk = vsk,
874 };
875
876 return virtio_transport_send_pkt_info(vsk, &info);
877 }
878 EXPORT_SYMBOL_GPL(virtio_transport_connect);
879
virtio_transport_shutdown(struct vsock_sock * vsk,int mode)880 int virtio_transport_shutdown(struct vsock_sock *vsk, int mode)
881 {
882 struct virtio_vsock_pkt_info info = {
883 .op = VIRTIO_VSOCK_OP_SHUTDOWN,
884 .flags = (mode & RCV_SHUTDOWN ?
885 VIRTIO_VSOCK_SHUTDOWN_RCV : 0) |
886 (mode & SEND_SHUTDOWN ?
887 VIRTIO_VSOCK_SHUTDOWN_SEND : 0),
888 .vsk = vsk,
889 };
890
891 return virtio_transport_send_pkt_info(vsk, &info);
892 }
893 EXPORT_SYMBOL_GPL(virtio_transport_shutdown);
894
895 int
virtio_transport_dgram_enqueue(struct vsock_sock * vsk,struct sockaddr_vm * remote_addr,struct msghdr * msg,size_t dgram_len)896 virtio_transport_dgram_enqueue(struct vsock_sock *vsk,
897 struct sockaddr_vm *remote_addr,
898 struct msghdr *msg,
899 size_t dgram_len)
900 {
901 return -EOPNOTSUPP;
902 }
903 EXPORT_SYMBOL_GPL(virtio_transport_dgram_enqueue);
904
905 ssize_t
virtio_transport_stream_enqueue(struct vsock_sock * vsk,struct msghdr * msg,size_t len)906 virtio_transport_stream_enqueue(struct vsock_sock *vsk,
907 struct msghdr *msg,
908 size_t len)
909 {
910 struct virtio_vsock_pkt_info info = {
911 .op = VIRTIO_VSOCK_OP_RW,
912 .msg = msg,
913 .pkt_len = len,
914 .vsk = vsk,
915 };
916
917 return virtio_transport_send_pkt_info(vsk, &info);
918 }
919 EXPORT_SYMBOL_GPL(virtio_transport_stream_enqueue);
920
virtio_transport_destruct(struct vsock_sock * vsk)921 void virtio_transport_destruct(struct vsock_sock *vsk)
922 {
923 struct virtio_vsock_sock *vvs = vsk->trans;
924
925 kfree(vvs);
926 vsk->trans = NULL;
927 }
928 EXPORT_SYMBOL_GPL(virtio_transport_destruct);
929
virtio_transport_reset(struct vsock_sock * vsk,struct sk_buff * skb)930 static int virtio_transport_reset(struct vsock_sock *vsk,
931 struct sk_buff *skb)
932 {
933 struct virtio_vsock_pkt_info info = {
934 .op = VIRTIO_VSOCK_OP_RST,
935 .reply = !!skb,
936 .vsk = vsk,
937 };
938
939 /* Send RST only if the original pkt is not a RST pkt */
940 if (skb && le16_to_cpu(virtio_vsock_hdr(skb)->op) == VIRTIO_VSOCK_OP_RST)
941 return 0;
942
943 return virtio_transport_send_pkt_info(vsk, &info);
944 }
945
946 /* Normally packets are associated with a socket. There may be no socket if an
947 * attempt was made to connect to a socket that does not exist.
948 */
virtio_transport_reset_no_sock(const struct virtio_transport * t,struct sk_buff * skb)949 static int virtio_transport_reset_no_sock(const struct virtio_transport *t,
950 struct sk_buff *skb)
951 {
952 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
953 struct virtio_vsock_pkt_info info = {
954 .op = VIRTIO_VSOCK_OP_RST,
955 .type = le16_to_cpu(hdr->type),
956 .reply = true,
957 };
958 struct sk_buff *reply;
959
960 /* Send RST only if the original pkt is not a RST pkt */
961 if (le16_to_cpu(hdr->op) == VIRTIO_VSOCK_OP_RST)
962 return 0;
963
964 if (!t)
965 return -ENOTCONN;
966
967 reply = virtio_transport_alloc_skb(&info, 0,
968 le64_to_cpu(hdr->dst_cid),
969 le32_to_cpu(hdr->dst_port),
970 le64_to_cpu(hdr->src_cid),
971 le32_to_cpu(hdr->src_port));
972 if (!reply)
973 return -ENOMEM;
974
975 return t->send_pkt(reply);
976 }
977
978 /* This function should be called with sk_lock held and SOCK_DONE set */
virtio_transport_remove_sock(struct vsock_sock * vsk)979 static void virtio_transport_remove_sock(struct vsock_sock *vsk)
980 {
981 struct virtio_vsock_sock *vvs = vsk->trans;
982
983 /* We don't need to take rx_lock, as the socket is closing and we are
984 * removing it.
985 */
986 __skb_queue_purge(&vvs->rx_queue);
987 vsock_remove_sock(vsk);
988 }
989
virtio_transport_wait_close(struct sock * sk,long timeout)990 static void virtio_transport_wait_close(struct sock *sk, long timeout)
991 {
992 if (timeout) {
993 DEFINE_WAIT_FUNC(wait, woken_wake_function);
994
995 add_wait_queue(sk_sleep(sk), &wait);
996
997 do {
998 if (sk_wait_event(sk, &timeout,
999 sock_flag(sk, SOCK_DONE), &wait))
1000 break;
1001 } while (!signal_pending(current) && timeout);
1002
1003 remove_wait_queue(sk_sleep(sk), &wait);
1004 }
1005 }
1006
virtio_transport_do_close(struct vsock_sock * vsk,bool cancel_timeout)1007 static void virtio_transport_do_close(struct vsock_sock *vsk,
1008 bool cancel_timeout)
1009 {
1010 struct sock *sk = sk_vsock(vsk);
1011
1012 sock_set_flag(sk, SOCK_DONE);
1013 vsk->peer_shutdown = SHUTDOWN_MASK;
1014 if (vsock_stream_has_data(vsk) <= 0)
1015 sk->sk_state = TCP_CLOSING;
1016 sk->sk_state_change(sk);
1017
1018 if (vsk->close_work_scheduled &&
1019 (!cancel_timeout || cancel_delayed_work(&vsk->close_work))) {
1020 vsk->close_work_scheduled = false;
1021
1022 virtio_transport_remove_sock(vsk);
1023
1024 /* Release refcnt obtained when we scheduled the timeout */
1025 sock_put(sk);
1026 }
1027 }
1028
virtio_transport_close_timeout(struct work_struct * work)1029 static void virtio_transport_close_timeout(struct work_struct *work)
1030 {
1031 struct vsock_sock *vsk =
1032 container_of(work, struct vsock_sock, close_work.work);
1033 struct sock *sk = sk_vsock(vsk);
1034
1035 sock_hold(sk);
1036 lock_sock(sk);
1037
1038 if (!sock_flag(sk, SOCK_DONE)) {
1039 (void)virtio_transport_reset(vsk, NULL);
1040
1041 virtio_transport_do_close(vsk, false);
1042 }
1043
1044 vsk->close_work_scheduled = false;
1045
1046 release_sock(sk);
1047 sock_put(sk);
1048 }
1049
1050 /* User context, vsk->sk is locked */
virtio_transport_close(struct vsock_sock * vsk)1051 static bool virtio_transport_close(struct vsock_sock *vsk)
1052 {
1053 struct sock *sk = &vsk->sk;
1054
1055 if (!(sk->sk_state == TCP_ESTABLISHED ||
1056 sk->sk_state == TCP_CLOSING))
1057 return true;
1058
1059 /* Already received SHUTDOWN from peer, reply with RST */
1060 if ((vsk->peer_shutdown & SHUTDOWN_MASK) == SHUTDOWN_MASK) {
1061 (void)virtio_transport_reset(vsk, NULL);
1062 return true;
1063 }
1064
1065 if ((sk->sk_shutdown & SHUTDOWN_MASK) != SHUTDOWN_MASK)
1066 (void)virtio_transport_shutdown(vsk, SHUTDOWN_MASK);
1067
1068 if (sock_flag(sk, SOCK_LINGER) && !(current->flags & PF_EXITING))
1069 virtio_transport_wait_close(sk, sk->sk_lingertime);
1070
1071 if (sock_flag(sk, SOCK_DONE)) {
1072 return true;
1073 }
1074
1075 sock_hold(sk);
1076 INIT_DELAYED_WORK(&vsk->close_work,
1077 virtio_transport_close_timeout);
1078 vsk->close_work_scheduled = true;
1079 schedule_delayed_work(&vsk->close_work, VSOCK_CLOSE_TIMEOUT);
1080 return false;
1081 }
1082
virtio_transport_release(struct vsock_sock * vsk)1083 void virtio_transport_release(struct vsock_sock *vsk)
1084 {
1085 struct sock *sk = &vsk->sk;
1086 bool remove_sock = true;
1087
1088 if (sk->sk_type == SOCK_STREAM || sk->sk_type == SOCK_SEQPACKET)
1089 remove_sock = virtio_transport_close(vsk);
1090
1091 if (remove_sock) {
1092 sock_set_flag(sk, SOCK_DONE);
1093 virtio_transport_remove_sock(vsk);
1094 }
1095 }
1096 EXPORT_SYMBOL_GPL(virtio_transport_release);
1097
1098 static int
virtio_transport_recv_connecting(struct sock * sk,struct sk_buff * skb)1099 virtio_transport_recv_connecting(struct sock *sk,
1100 struct sk_buff *skb)
1101 {
1102 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1103 struct vsock_sock *vsk = vsock_sk(sk);
1104 int skerr;
1105 int err;
1106
1107 switch (le16_to_cpu(hdr->op)) {
1108 case VIRTIO_VSOCK_OP_RESPONSE:
1109 sk->sk_state = TCP_ESTABLISHED;
1110 sk->sk_socket->state = SS_CONNECTED;
1111 vsock_insert_connected(vsk);
1112 sk->sk_state_change(sk);
1113 break;
1114 case VIRTIO_VSOCK_OP_INVALID:
1115 break;
1116 case VIRTIO_VSOCK_OP_RST:
1117 skerr = ECONNRESET;
1118 err = 0;
1119 goto destroy;
1120 default:
1121 skerr = EPROTO;
1122 err = -EINVAL;
1123 goto destroy;
1124 }
1125 return 0;
1126
1127 destroy:
1128 virtio_transport_reset(vsk, skb);
1129 sk->sk_state = TCP_CLOSE;
1130 sk->sk_err = skerr;
1131 sk_error_report(sk);
1132 return err;
1133 }
1134
1135 static void
virtio_transport_recv_enqueue(struct vsock_sock * vsk,struct sk_buff * skb)1136 virtio_transport_recv_enqueue(struct vsock_sock *vsk,
1137 struct sk_buff *skb)
1138 {
1139 struct virtio_vsock_sock *vvs = vsk->trans;
1140 bool can_enqueue, free_pkt = false;
1141 struct virtio_vsock_hdr *hdr;
1142 u32 len;
1143
1144 hdr = virtio_vsock_hdr(skb);
1145 len = le32_to_cpu(hdr->len);
1146
1147 spin_lock_bh(&vvs->rx_lock);
1148
1149 can_enqueue = virtio_transport_inc_rx_pkt(vvs, len);
1150 if (!can_enqueue) {
1151 free_pkt = true;
1152 goto out;
1153 }
1154
1155 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SEQ_EOM)
1156 vvs->msg_count++;
1157
1158 /* Try to copy small packets into the buffer of last packet queued,
1159 * to avoid wasting memory queueing the entire buffer with a small
1160 * payload.
1161 */
1162 if (len <= GOOD_COPY_LEN && !skb_queue_empty(&vvs->rx_queue)) {
1163 struct virtio_vsock_hdr *last_hdr;
1164 struct sk_buff *last_skb;
1165
1166 last_skb = skb_peek_tail(&vvs->rx_queue);
1167 last_hdr = virtio_vsock_hdr(last_skb);
1168
1169 /* If there is space in the last packet queued, we copy the
1170 * new packet in its buffer. We avoid this if the last packet
1171 * queued has VIRTIO_VSOCK_SEQ_EOM set, because this is
1172 * delimiter of SEQPACKET message, so 'pkt' is the first packet
1173 * of a new message.
1174 */
1175 if (skb->len < skb_tailroom(last_skb) &&
1176 !(le32_to_cpu(last_hdr->flags) & VIRTIO_VSOCK_SEQ_EOM)) {
1177 memcpy(skb_put(last_skb, skb->len), skb->data, skb->len);
1178 free_pkt = true;
1179 last_hdr->flags |= hdr->flags;
1180 le32_add_cpu(&last_hdr->len, len);
1181 goto out;
1182 }
1183 }
1184
1185 __skb_queue_tail(&vvs->rx_queue, skb);
1186
1187 out:
1188 spin_unlock_bh(&vvs->rx_lock);
1189 if (free_pkt)
1190 kfree_skb(skb);
1191 }
1192
1193 static int
virtio_transport_recv_connected(struct sock * sk,struct sk_buff * skb)1194 virtio_transport_recv_connected(struct sock *sk,
1195 struct sk_buff *skb)
1196 {
1197 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1198 struct vsock_sock *vsk = vsock_sk(sk);
1199 int err = 0;
1200
1201 switch (le16_to_cpu(hdr->op)) {
1202 case VIRTIO_VSOCK_OP_RW:
1203 virtio_transport_recv_enqueue(vsk, skb);
1204 vsock_data_ready(sk);
1205 return err;
1206 case VIRTIO_VSOCK_OP_CREDIT_REQUEST:
1207 virtio_transport_send_credit_update(vsk);
1208 break;
1209 case VIRTIO_VSOCK_OP_CREDIT_UPDATE:
1210 sk->sk_write_space(sk);
1211 break;
1212 case VIRTIO_VSOCK_OP_SHUTDOWN:
1213 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SHUTDOWN_RCV)
1214 vsk->peer_shutdown |= RCV_SHUTDOWN;
1215 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SHUTDOWN_SEND)
1216 vsk->peer_shutdown |= SEND_SHUTDOWN;
1217 if (vsk->peer_shutdown == SHUTDOWN_MASK) {
1218 if (vsock_stream_has_data(vsk) <= 0 && !sock_flag(sk, SOCK_DONE)) {
1219 (void)virtio_transport_reset(vsk, NULL);
1220 virtio_transport_do_close(vsk, true);
1221 }
1222 /* Remove this socket anyway because the remote peer sent
1223 * the shutdown. This way a new connection will succeed
1224 * if the remote peer uses the same source port,
1225 * even if the old socket is still unreleased, but now disconnected.
1226 */
1227 vsock_remove_sock(vsk);
1228 }
1229 if (le32_to_cpu(virtio_vsock_hdr(skb)->flags))
1230 sk->sk_state_change(sk);
1231 break;
1232 case VIRTIO_VSOCK_OP_RST:
1233 virtio_transport_do_close(vsk, true);
1234 break;
1235 default:
1236 err = -EINVAL;
1237 break;
1238 }
1239
1240 kfree_skb(skb);
1241 return err;
1242 }
1243
1244 static void
virtio_transport_recv_disconnecting(struct sock * sk,struct sk_buff * skb)1245 virtio_transport_recv_disconnecting(struct sock *sk,
1246 struct sk_buff *skb)
1247 {
1248 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1249 struct vsock_sock *vsk = vsock_sk(sk);
1250
1251 if (le16_to_cpu(hdr->op) == VIRTIO_VSOCK_OP_RST)
1252 virtio_transport_do_close(vsk, true);
1253 }
1254
1255 static int
virtio_transport_send_response(struct vsock_sock * vsk,struct sk_buff * skb)1256 virtio_transport_send_response(struct vsock_sock *vsk,
1257 struct sk_buff *skb)
1258 {
1259 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1260 struct virtio_vsock_pkt_info info = {
1261 .op = VIRTIO_VSOCK_OP_RESPONSE,
1262 .remote_cid = le64_to_cpu(hdr->src_cid),
1263 .remote_port = le32_to_cpu(hdr->src_port),
1264 .reply = true,
1265 .vsk = vsk,
1266 };
1267
1268 return virtio_transport_send_pkt_info(vsk, &info);
1269 }
1270
virtio_transport_space_update(struct sock * sk,struct sk_buff * skb)1271 static bool virtio_transport_space_update(struct sock *sk,
1272 struct sk_buff *skb)
1273 {
1274 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1275 struct vsock_sock *vsk = vsock_sk(sk);
1276 struct virtio_vsock_sock *vvs = vsk->trans;
1277 bool space_available;
1278
1279 /* Listener sockets are not associated with any transport, so we are
1280 * not able to take the state to see if there is space available in the
1281 * remote peer, but since they are only used to receive requests, we
1282 * can assume that there is always space available in the other peer.
1283 */
1284 if (!vvs)
1285 return true;
1286
1287 /* buf_alloc and fwd_cnt is always included in the hdr */
1288 spin_lock_bh(&vvs->tx_lock);
1289 vvs->peer_buf_alloc = le32_to_cpu(hdr->buf_alloc);
1290 vvs->peer_fwd_cnt = le32_to_cpu(hdr->fwd_cnt);
1291 space_available = virtio_transport_has_space(vsk);
1292 spin_unlock_bh(&vvs->tx_lock);
1293 return space_available;
1294 }
1295
1296 /* Handle server socket */
1297 static int
virtio_transport_recv_listen(struct sock * sk,struct sk_buff * skb,struct virtio_transport * t)1298 virtio_transport_recv_listen(struct sock *sk, struct sk_buff *skb,
1299 struct virtio_transport *t)
1300 {
1301 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1302 struct vsock_sock *vsk = vsock_sk(sk);
1303 struct vsock_sock *vchild;
1304 struct sock *child;
1305 int ret;
1306
1307 if (le16_to_cpu(hdr->op) != VIRTIO_VSOCK_OP_REQUEST) {
1308 virtio_transport_reset_no_sock(t, skb);
1309 return -EINVAL;
1310 }
1311
1312 if (sk_acceptq_is_full(sk)) {
1313 virtio_transport_reset_no_sock(t, skb);
1314 return -ENOMEM;
1315 }
1316
1317 /* __vsock_release() might have already flushed accept_queue.
1318 * Subsequent enqueues would lead to a memory leak.
1319 */
1320 if (sk->sk_shutdown == SHUTDOWN_MASK) {
1321 virtio_transport_reset_no_sock(t, skb);
1322 return -ESHUTDOWN;
1323 }
1324
1325 child = vsock_create_connected(sk);
1326 if (!child) {
1327 virtio_transport_reset_no_sock(t, skb);
1328 return -ENOMEM;
1329 }
1330
1331 sk_acceptq_added(sk);
1332
1333 lock_sock_nested(child, SINGLE_DEPTH_NESTING);
1334
1335 child->sk_state = TCP_ESTABLISHED;
1336
1337 vchild = vsock_sk(child);
1338 vsock_addr_init(&vchild->local_addr, le64_to_cpu(hdr->dst_cid),
1339 le32_to_cpu(hdr->dst_port));
1340 vsock_addr_init(&vchild->remote_addr, le64_to_cpu(hdr->src_cid),
1341 le32_to_cpu(hdr->src_port));
1342
1343 ret = vsock_assign_transport(vchild, vsk);
1344 /* Transport assigned (looking at remote_addr) must be the same
1345 * where we received the request.
1346 */
1347 if (ret || vchild->transport != &t->transport) {
1348 release_sock(child);
1349 virtio_transport_reset_no_sock(t, skb);
1350 sock_put(child);
1351 return ret;
1352 }
1353
1354 if (virtio_transport_space_update(child, skb))
1355 child->sk_write_space(child);
1356
1357 vsock_insert_connected(vchild);
1358 vsock_enqueue_accept(sk, child);
1359 virtio_transport_send_response(vchild, skb);
1360
1361 release_sock(child);
1362
1363 sk->sk_data_ready(sk);
1364 return 0;
1365 }
1366
virtio_transport_valid_type(u16 type)1367 static bool virtio_transport_valid_type(u16 type)
1368 {
1369 return (type == VIRTIO_VSOCK_TYPE_STREAM) ||
1370 (type == VIRTIO_VSOCK_TYPE_SEQPACKET);
1371 }
1372
1373 /* We are under the virtio-vsock's vsock->rx_lock or vhost-vsock's vq->mutex
1374 * lock.
1375 */
virtio_transport_recv_pkt(struct virtio_transport * t,struct sk_buff * skb)1376 void virtio_transport_recv_pkt(struct virtio_transport *t,
1377 struct sk_buff *skb)
1378 {
1379 struct virtio_vsock_hdr *hdr = virtio_vsock_hdr(skb);
1380 struct sockaddr_vm src, dst;
1381 struct vsock_sock *vsk;
1382 struct sock *sk;
1383 bool space_available;
1384
1385 vsock_addr_init(&src, le64_to_cpu(hdr->src_cid),
1386 le32_to_cpu(hdr->src_port));
1387 vsock_addr_init(&dst, le64_to_cpu(hdr->dst_cid),
1388 le32_to_cpu(hdr->dst_port));
1389
1390 trace_virtio_transport_recv_pkt(src.svm_cid, src.svm_port,
1391 dst.svm_cid, dst.svm_port,
1392 le32_to_cpu(hdr->len),
1393 le16_to_cpu(hdr->type),
1394 le16_to_cpu(hdr->op),
1395 le32_to_cpu(hdr->flags),
1396 le32_to_cpu(hdr->buf_alloc),
1397 le32_to_cpu(hdr->fwd_cnt));
1398
1399 if (!virtio_transport_valid_type(le16_to_cpu(hdr->type))) {
1400 (void)virtio_transport_reset_no_sock(t, skb);
1401 goto free_pkt;
1402 }
1403
1404 /* The socket must be in connected or bound table
1405 * otherwise send reset back
1406 */
1407 sk = vsock_find_connected_socket(&src, &dst);
1408 if (!sk) {
1409 sk = vsock_find_bound_socket(&dst);
1410 if (!sk) {
1411 (void)virtio_transport_reset_no_sock(t, skb);
1412 goto free_pkt;
1413 }
1414 }
1415
1416 if (virtio_transport_get_type(sk) != le16_to_cpu(hdr->type)) {
1417 (void)virtio_transport_reset_no_sock(t, skb);
1418 sock_put(sk);
1419 goto free_pkt;
1420 }
1421
1422 if (!skb_set_owner_sk_safe(skb, sk)) {
1423 WARN_ONCE(1, "receiving vsock socket has sk_refcnt == 0\n");
1424 goto free_pkt;
1425 }
1426
1427 vsk = vsock_sk(sk);
1428
1429 lock_sock(sk);
1430
1431 /* Check if sk has been closed before lock_sock */
1432 if (sock_flag(sk, SOCK_DONE)) {
1433 (void)virtio_transport_reset_no_sock(t, skb);
1434 release_sock(sk);
1435 sock_put(sk);
1436 goto free_pkt;
1437 }
1438
1439 space_available = virtio_transport_space_update(sk, skb);
1440
1441 /* Update CID in case it has changed after a transport reset event */
1442 if (vsk->local_addr.svm_cid != VMADDR_CID_ANY)
1443 vsk->local_addr.svm_cid = dst.svm_cid;
1444
1445 if (space_available)
1446 sk->sk_write_space(sk);
1447
1448 switch (sk->sk_state) {
1449 case TCP_LISTEN:
1450 virtio_transport_recv_listen(sk, skb, t);
1451 kfree_skb(skb);
1452 break;
1453 case TCP_SYN_SENT:
1454 virtio_transport_recv_connecting(sk, skb);
1455 kfree_skb(skb);
1456 break;
1457 case TCP_ESTABLISHED:
1458 virtio_transport_recv_connected(sk, skb);
1459 break;
1460 case TCP_CLOSING:
1461 virtio_transport_recv_disconnecting(sk, skb);
1462 kfree_skb(skb);
1463 break;
1464 default:
1465 (void)virtio_transport_reset_no_sock(t, skb);
1466 kfree_skb(skb);
1467 break;
1468 }
1469
1470 release_sock(sk);
1471
1472 /* Release refcnt obtained when we fetched this socket out of the
1473 * bound or connected list.
1474 */
1475 sock_put(sk);
1476 return;
1477
1478 free_pkt:
1479 kfree_skb(skb);
1480 }
1481 EXPORT_SYMBOL_GPL(virtio_transport_recv_pkt);
1482
1483 /* Remove skbs found in a queue that have a vsk that matches.
1484 *
1485 * Each skb is freed.
1486 *
1487 * Returns the count of skbs that were reply packets.
1488 */
virtio_transport_purge_skbs(void * vsk,struct sk_buff_head * queue)1489 int virtio_transport_purge_skbs(void *vsk, struct sk_buff_head *queue)
1490 {
1491 struct sk_buff_head freeme;
1492 struct sk_buff *skb, *tmp;
1493 int cnt = 0;
1494
1495 skb_queue_head_init(&freeme);
1496
1497 spin_lock_bh(&queue->lock);
1498 skb_queue_walk_safe(queue, skb, tmp) {
1499 if (vsock_sk(skb->sk) != vsk)
1500 continue;
1501
1502 __skb_unlink(skb, queue);
1503 __skb_queue_tail(&freeme, skb);
1504
1505 if (virtio_vsock_skb_reply(skb))
1506 cnt++;
1507 }
1508 spin_unlock_bh(&queue->lock);
1509
1510 __skb_queue_purge(&freeme);
1511
1512 return cnt;
1513 }
1514 EXPORT_SYMBOL_GPL(virtio_transport_purge_skbs);
1515
virtio_transport_read_skb(struct vsock_sock * vsk,skb_read_actor_t recv_actor)1516 int virtio_transport_read_skb(struct vsock_sock *vsk, skb_read_actor_t recv_actor)
1517 {
1518 struct virtio_vsock_sock *vvs = vsk->trans;
1519 struct sock *sk = sk_vsock(vsk);
1520 struct virtio_vsock_hdr *hdr;
1521 struct sk_buff *skb;
1522 int off = 0;
1523 int err;
1524
1525 spin_lock_bh(&vvs->rx_lock);
1526 /* Use __skb_recv_datagram() for race-free handling of the receive. It
1527 * works for types other than dgrams.
1528 */
1529 skb = __skb_recv_datagram(sk, &vvs->rx_queue, MSG_DONTWAIT, &off, &err);
1530 if (!skb) {
1531 spin_unlock_bh(&vvs->rx_lock);
1532 return err;
1533 }
1534
1535 hdr = virtio_vsock_hdr(skb);
1536 if (le32_to_cpu(hdr->flags) & VIRTIO_VSOCK_SEQ_EOM)
1537 vvs->msg_count--;
1538
1539 virtio_transport_dec_rx_pkt(vvs, le32_to_cpu(hdr->len));
1540 spin_unlock_bh(&vvs->rx_lock);
1541
1542 virtio_transport_send_credit_update(vsk);
1543
1544 return recv_actor(sk, skb);
1545 }
1546 EXPORT_SYMBOL_GPL(virtio_transport_read_skb);
1547
virtio_transport_notify_set_rcvlowat(struct vsock_sock * vsk,int val)1548 int virtio_transport_notify_set_rcvlowat(struct vsock_sock *vsk, int val)
1549 {
1550 struct virtio_vsock_sock *vvs = vsk->trans;
1551 bool send_update;
1552
1553 spin_lock_bh(&vvs->rx_lock);
1554
1555 /* If number of available bytes is less than new SO_RCVLOWAT value,
1556 * kick sender to send more data, because sender may sleep in its
1557 * 'send()' syscall waiting for enough space at our side. Also
1558 * don't send credit update when peer already knows actual value -
1559 * such transmission will be useless.
1560 */
1561 send_update = (vvs->rx_bytes < val) &&
1562 (vvs->fwd_cnt != vvs->last_fwd_cnt);
1563
1564 spin_unlock_bh(&vvs->rx_lock);
1565
1566 if (send_update) {
1567 int err;
1568
1569 err = virtio_transport_send_credit_update(vsk);
1570 if (err < 0)
1571 return err;
1572 }
1573
1574 return 0;
1575 }
1576 EXPORT_SYMBOL_GPL(virtio_transport_notify_set_rcvlowat);
1577
1578 MODULE_LICENSE("GPL v2");
1579 MODULE_AUTHOR("Asias He");
1580 MODULE_DESCRIPTION("common code for virtio vsock");
1581