xref: /openbmc/linux/net/ipv4/ip_output.c (revision 70e7341673a47fb1525cfc7d6651cc98b5348928)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds  * INET		An implementation of the TCP/IP protocol suite for the LINUX
31da177e4SLinus Torvalds  *		operating system.  INET is implemented using the  BSD Socket
41da177e4SLinus Torvalds  *		interface as the means of communication with the user level.
51da177e4SLinus Torvalds  *
61da177e4SLinus Torvalds  *		The Internet Protocol (IP) output module.
71da177e4SLinus Torvalds  *
802c30a84SJesper Juhl  * Authors:	Ross Biro
91da177e4SLinus Torvalds  *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
101da177e4SLinus Torvalds  *		Donald Becker, <becker@super.org>
111da177e4SLinus Torvalds  *		Alan Cox, <Alan.Cox@linux.org>
121da177e4SLinus Torvalds  *		Richard Underwood
131da177e4SLinus Torvalds  *		Stefan Becker, <stefanb@yello.ping.de>
141da177e4SLinus Torvalds  *		Jorge Cwik, <jorge@laser.satlink.net>
151da177e4SLinus Torvalds  *		Arnt Gulbrandsen, <agulbra@nvg.unit.no>
161da177e4SLinus Torvalds  *		Hirokazu Takahashi, <taka@valinux.co.jp>
171da177e4SLinus Torvalds  *
181da177e4SLinus Torvalds  *	See ip_input.c for original log
191da177e4SLinus Torvalds  *
201da177e4SLinus Torvalds  *	Fixes:
211da177e4SLinus Torvalds  *		Alan Cox	:	Missing nonblock feature in ip_build_xmit.
221da177e4SLinus Torvalds  *		Mike Kilburn	:	htons() missing in ip_build_xmit.
231da177e4SLinus Torvalds  *		Bradford Johnson:	Fix faulty handling of some frames when
241da177e4SLinus Torvalds  *					no route is found.
251da177e4SLinus Torvalds  *		Alexander Demenshin:	Missing sk/skb free in ip_queue_xmit
261da177e4SLinus Torvalds  *					(in case if packet not accepted by
271da177e4SLinus Torvalds  *					output firewall rules)
281da177e4SLinus Torvalds  *		Mike McLagan	:	Routing by source
291da177e4SLinus Torvalds  *		Alexey Kuznetsov:	use new route cache
301da177e4SLinus Torvalds  *		Andi Kleen:		Fix broken PMTU recovery and remove
311da177e4SLinus Torvalds  *					some redundant tests.
321da177e4SLinus Torvalds  *	Vitaly E. Lavrov	:	Transparent proxy revived after year coma.
331da177e4SLinus Torvalds  *		Andi Kleen	: 	Replace ip_reply with ip_send_reply.
341da177e4SLinus Torvalds  *		Andi Kleen	:	Split fast and slow ip_build_xmit path
351da177e4SLinus Torvalds  *					for decreased register pressure on x86
361da177e4SLinus Torvalds  *					and more readibility.
371da177e4SLinus Torvalds  *		Marc Boucher	:	When call_out_firewall returns FW_QUEUE,
381da177e4SLinus Torvalds  *					silently drop skb instead of failing with -EPERM.
391da177e4SLinus Torvalds  *		Detlev Wengorz	:	Copy protocol for fragments.
401da177e4SLinus Torvalds  *		Hirokazu Takahashi:	HW checksumming for outgoing UDP
411da177e4SLinus Torvalds  *					datagrams.
421da177e4SLinus Torvalds  *		Hirokazu Takahashi:	sendfile() on UDP works now.
431da177e4SLinus Torvalds  */
441da177e4SLinus Torvalds 
451da177e4SLinus Torvalds #include <asm/uaccess.h>
461da177e4SLinus Torvalds #include <linux/module.h>
471da177e4SLinus Torvalds #include <linux/types.h>
481da177e4SLinus Torvalds #include <linux/kernel.h>
491da177e4SLinus Torvalds #include <linux/mm.h>
501da177e4SLinus Torvalds #include <linux/string.h>
511da177e4SLinus Torvalds #include <linux/errno.h>
52a1f8e7f7SAl Viro #include <linux/highmem.h>
535a0e3ad6STejun Heo #include <linux/slab.h>
541da177e4SLinus Torvalds 
551da177e4SLinus Torvalds #include <linux/socket.h>
561da177e4SLinus Torvalds #include <linux/sockios.h>
571da177e4SLinus Torvalds #include <linux/in.h>
581da177e4SLinus Torvalds #include <linux/inet.h>
591da177e4SLinus Torvalds #include <linux/netdevice.h>
601da177e4SLinus Torvalds #include <linux/etherdevice.h>
611da177e4SLinus Torvalds #include <linux/proc_fs.h>
621da177e4SLinus Torvalds #include <linux/stat.h>
631da177e4SLinus Torvalds #include <linux/init.h>
641da177e4SLinus Torvalds 
651da177e4SLinus Torvalds #include <net/snmp.h>
661da177e4SLinus Torvalds #include <net/ip.h>
671da177e4SLinus Torvalds #include <net/protocol.h>
681da177e4SLinus Torvalds #include <net/route.h>
69cfacb057SPatrick McHardy #include <net/xfrm.h>
701da177e4SLinus Torvalds #include <linux/skbuff.h>
711da177e4SLinus Torvalds #include <net/sock.h>
721da177e4SLinus Torvalds #include <net/arp.h>
731da177e4SLinus Torvalds #include <net/icmp.h>
741da177e4SLinus Torvalds #include <net/checksum.h>
751da177e4SLinus Torvalds #include <net/inetpeer.h>
761da177e4SLinus Torvalds #include <linux/igmp.h>
771da177e4SLinus Torvalds #include <linux/netfilter_ipv4.h>
781da177e4SLinus Torvalds #include <linux/netfilter_bridge.h>
791da177e4SLinus Torvalds #include <linux/mroute.h>
801da177e4SLinus Torvalds #include <linux/netlink.h>
816cbb0df7SArnaldo Carvalho de Melo #include <linux/tcp.h>
821da177e4SLinus Torvalds 
83ab32ea5dSBrian Haley int sysctl_ip_default_ttl __read_mostly = IPDEFTTL;
84323e126fSDavid S. Miller EXPORT_SYMBOL(sysctl_ip_default_ttl);
851da177e4SLinus Torvalds 
861da177e4SLinus Torvalds /* Generate a checksum for an outgoing IP datagram. */
871da177e4SLinus Torvalds __inline__ void ip_send_check(struct iphdr *iph)
881da177e4SLinus Torvalds {
891da177e4SLinus Torvalds 	iph->check = 0;
901da177e4SLinus Torvalds 	iph->check = ip_fast_csum((unsigned char *)iph, iph->ihl);
911da177e4SLinus Torvalds }
924bc2f18bSEric Dumazet EXPORT_SYMBOL(ip_send_check);
931da177e4SLinus Torvalds 
94c439cb2eSHerbert Xu int __ip_local_out(struct sk_buff *skb)
95c439cb2eSHerbert Xu {
96c439cb2eSHerbert Xu 	struct iphdr *iph = ip_hdr(skb);
97c439cb2eSHerbert Xu 
98c439cb2eSHerbert Xu 	iph->tot_len = htons(skb->len);
99c439cb2eSHerbert Xu 	ip_send_check(iph);
1009bbc768aSJan Engelhardt 	return nf_hook(NFPROTO_IPV4, NF_INET_LOCAL_OUT, skb, NULL,
1019bbc768aSJan Engelhardt 		       skb_dst(skb)->dev, dst_output);
102c439cb2eSHerbert Xu }
103c439cb2eSHerbert Xu 
104c439cb2eSHerbert Xu int ip_local_out(struct sk_buff *skb)
105c439cb2eSHerbert Xu {
106c439cb2eSHerbert Xu 	int err;
107c439cb2eSHerbert Xu 
108c439cb2eSHerbert Xu 	err = __ip_local_out(skb);
109c439cb2eSHerbert Xu 	if (likely(err == 1))
110c439cb2eSHerbert Xu 		err = dst_output(skb);
111c439cb2eSHerbert Xu 
112c439cb2eSHerbert Xu 	return err;
113c439cb2eSHerbert Xu }
114c439cb2eSHerbert Xu EXPORT_SYMBOL_GPL(ip_local_out);
115c439cb2eSHerbert Xu 
1161da177e4SLinus Torvalds static inline int ip_select_ttl(struct inet_sock *inet, struct dst_entry *dst)
1171da177e4SLinus Torvalds {
1181da177e4SLinus Torvalds 	int ttl = inet->uc_ttl;
1191da177e4SLinus Torvalds 
1201da177e4SLinus Torvalds 	if (ttl < 0)
121323e126fSDavid S. Miller 		ttl = ip4_dst_hoplimit(dst);
1221da177e4SLinus Torvalds 	return ttl;
1231da177e4SLinus Torvalds }
1241da177e4SLinus Torvalds 
1251da177e4SLinus Torvalds /*
1261da177e4SLinus Torvalds  *		Add an ip header to a skbuff and send it out.
1271da177e4SLinus Torvalds  *
1281da177e4SLinus Torvalds  */
1291da177e4SLinus Torvalds int ip_build_and_send_pkt(struct sk_buff *skb, struct sock *sk,
130f6d8bd05SEric Dumazet 			  __be32 saddr, __be32 daddr, struct ip_options_rcu *opt)
1311da177e4SLinus Torvalds {
1321da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
133511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
1341da177e4SLinus Torvalds 	struct iphdr *iph;
1351da177e4SLinus Torvalds 
1361da177e4SLinus Torvalds 	/* Build the IP header. */
137f6d8bd05SEric Dumazet 	skb_push(skb, sizeof(struct iphdr) + (opt ? opt->opt.optlen : 0));
1388856dfa3SArnaldo Carvalho de Melo 	skb_reset_network_header(skb);
139eddc9ec5SArnaldo Carvalho de Melo 	iph = ip_hdr(skb);
1401da177e4SLinus Torvalds 	iph->version  = 4;
1411da177e4SLinus Torvalds 	iph->ihl      = 5;
1421da177e4SLinus Torvalds 	iph->tos      = inet->tos;
143d8d1f30bSChangli Gao 	if (ip_dont_fragment(sk, &rt->dst))
1441da177e4SLinus Torvalds 		iph->frag_off = htons(IP_DF);
1451da177e4SLinus Torvalds 	else
1461da177e4SLinus Torvalds 		iph->frag_off = 0;
147d8d1f30bSChangli Gao 	iph->ttl      = ip_select_ttl(inet, &rt->dst);
148dd927a26SDavid S. Miller 	iph->daddr    = (opt && opt->opt.srr ? opt->opt.faddr : daddr);
149dd927a26SDavid S. Miller 	iph->saddr    = saddr;
1501da177e4SLinus Torvalds 	iph->protocol = sk->sk_protocol;
151d8d1f30bSChangli Gao 	ip_select_ident(iph, &rt->dst, sk);
1521da177e4SLinus Torvalds 
153f6d8bd05SEric Dumazet 	if (opt && opt->opt.optlen) {
154f6d8bd05SEric Dumazet 		iph->ihl += opt->opt.optlen>>2;
155f6d8bd05SEric Dumazet 		ip_options_build(skb, &opt->opt, daddr, rt, 0);
1561da177e4SLinus Torvalds 	}
1571da177e4SLinus Torvalds 
1581da177e4SLinus Torvalds 	skb->priority = sk->sk_priority;
1594a19ec58SLaszlo Attila Toth 	skb->mark = sk->sk_mark;
1601da177e4SLinus Torvalds 
1611da177e4SLinus Torvalds 	/* Send it out. */
162c439cb2eSHerbert Xu 	return ip_local_out(skb);
1631da177e4SLinus Torvalds }
164d8c97a94SArnaldo Carvalho de Melo EXPORT_SYMBOL_GPL(ip_build_and_send_pkt);
165d8c97a94SArnaldo Carvalho de Melo 
1661da177e4SLinus Torvalds static inline int ip_finish_output2(struct sk_buff *skb)
1671da177e4SLinus Torvalds {
168adf30907SEric Dumazet 	struct dst_entry *dst = skb_dst(skb);
16980787ebcSMitsuru Chinen 	struct rtable *rt = (struct rtable *)dst;
1701da177e4SLinus Torvalds 	struct net_device *dev = dst->dev;
171c2636b4dSChuck Lever 	unsigned int hh_len = LL_RESERVED_SPACE(dev);
172f6b72b62SDavid S. Miller 	struct neighbour *neigh;
1731da177e4SLinus Torvalds 
174edf391ffSNeil Horman 	if (rt->rt_type == RTN_MULTICAST) {
175edf391ffSNeil Horman 		IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUTMCAST, skb->len);
176edf391ffSNeil Horman 	} else if (rt->rt_type == RTN_BROADCAST)
177edf391ffSNeil Horman 		IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUTBCAST, skb->len);
17880787ebcSMitsuru Chinen 
1791da177e4SLinus Torvalds 	/* Be paranoid, rather than too clever. */
1803b04dddeSStephen Hemminger 	if (unlikely(skb_headroom(skb) < hh_len && dev->header_ops)) {
1811da177e4SLinus Torvalds 		struct sk_buff *skb2;
1821da177e4SLinus Torvalds 
1831da177e4SLinus Torvalds 		skb2 = skb_realloc_headroom(skb, LL_RESERVED_SPACE(dev));
1841da177e4SLinus Torvalds 		if (skb2 == NULL) {
1851da177e4SLinus Torvalds 			kfree_skb(skb);
1861da177e4SLinus Torvalds 			return -ENOMEM;
1871da177e4SLinus Torvalds 		}
1881da177e4SLinus Torvalds 		if (skb->sk)
1891da177e4SLinus Torvalds 			skb_set_owner_w(skb2, skb->sk);
1905d0ba55bSEric Dumazet 		consume_skb(skb);
1911da177e4SLinus Torvalds 		skb = skb2;
1921da177e4SLinus Torvalds 	}
1931da177e4SLinus Torvalds 
194f2c31e32SEric Dumazet 	rcu_read_lock();
19527217455SDavid Miller 	neigh = dst_get_neighbour_noref(dst);
196f2c31e32SEric Dumazet 	if (neigh) {
197f2c31e32SEric Dumazet 		int res = neigh_output(neigh, skb);
198f2c31e32SEric Dumazet 
199f2c31e32SEric Dumazet 		rcu_read_unlock();
200f2c31e32SEric Dumazet 		return res;
201f2c31e32SEric Dumazet 	}
202f2c31e32SEric Dumazet 	rcu_read_unlock();
20305e3aa09SDavid S. Miller 
204e87cc472SJoe Perches 	net_dbg_ratelimited("%s: No header cache and no neighbour!\n",
205e87cc472SJoe Perches 			    __func__);
2061da177e4SLinus Torvalds 	kfree_skb(skb);
2071da177e4SLinus Torvalds 	return -EINVAL;
2081da177e4SLinus Torvalds }
2091da177e4SLinus Torvalds 
210628a5c56SJohn Heffner static inline int ip_skb_dst_mtu(struct sk_buff *skb)
211628a5c56SJohn Heffner {
212628a5c56SJohn Heffner 	struct inet_sock *inet = skb->sk ? inet_sk(skb->sk) : NULL;
213628a5c56SJohn Heffner 
214628a5c56SJohn Heffner 	return (inet && inet->pmtudisc == IP_PMTUDISC_PROBE) ?
215adf30907SEric Dumazet 	       skb_dst(skb)->dev->mtu : dst_mtu(skb_dst(skb));
216628a5c56SJohn Heffner }
217628a5c56SJohn Heffner 
218861d0486SPatrick McHardy static int ip_finish_output(struct sk_buff *skb)
2191da177e4SLinus Torvalds {
2205c901daaSPatrick McHardy #if defined(CONFIG_NETFILTER) && defined(CONFIG_XFRM)
2215c901daaSPatrick McHardy 	/* Policy lookup after SNAT yielded a new policy */
222adf30907SEric Dumazet 	if (skb_dst(skb)->xfrm != NULL) {
22348d5cad8SPatrick McHardy 		IPCB(skb)->flags |= IPSKB_REROUTED;
22448d5cad8SPatrick McHardy 		return dst_output(skb);
22548d5cad8SPatrick McHardy 	}
2265c901daaSPatrick McHardy #endif
227628a5c56SJohn Heffner 	if (skb->len > ip_skb_dst_mtu(skb) && !skb_is_gso(skb))
2281bd9bef6SPatrick McHardy 		return ip_fragment(skb, ip_finish_output2);
2291bd9bef6SPatrick McHardy 	else
2301bd9bef6SPatrick McHardy 		return ip_finish_output2(skb);
2311da177e4SLinus Torvalds }
2321da177e4SLinus Torvalds 
2331da177e4SLinus Torvalds int ip_mc_output(struct sk_buff *skb)
2341da177e4SLinus Torvalds {
2351da177e4SLinus Torvalds 	struct sock *sk = skb->sk;
236511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
237d8d1f30bSChangli Gao 	struct net_device *dev = rt->dst.dev;
2381da177e4SLinus Torvalds 
2391da177e4SLinus Torvalds 	/*
2401da177e4SLinus Torvalds 	 *	If the indicated interface is up and running, send the packet.
2411da177e4SLinus Torvalds 	 */
242edf391ffSNeil Horman 	IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUT, skb->len);
2431da177e4SLinus Torvalds 
2441da177e4SLinus Torvalds 	skb->dev = dev;
2451da177e4SLinus Torvalds 	skb->protocol = htons(ETH_P_IP);
2461da177e4SLinus Torvalds 
2471da177e4SLinus Torvalds 	/*
2481da177e4SLinus Torvalds 	 *	Multicasts are looped back for other local users
2491da177e4SLinus Torvalds 	 */
2501da177e4SLinus Torvalds 
2511da177e4SLinus Torvalds 	if (rt->rt_flags&RTCF_MULTICAST) {
2527ad6848cSOctavian Purdila 		if (sk_mc_loop(sk)
2531da177e4SLinus Torvalds #ifdef CONFIG_IP_MROUTE
2541da177e4SLinus Torvalds 		/* Small optimization: do not loopback not local frames,
2551da177e4SLinus Torvalds 		   which returned after forwarding; they will be  dropped
2561da177e4SLinus Torvalds 		   by ip_mr_input in any case.
2571da177e4SLinus Torvalds 		   Note, that local frames are looped back to be delivered
2581da177e4SLinus Torvalds 		   to local recipients.
2591da177e4SLinus Torvalds 
2601da177e4SLinus Torvalds 		   This check is duplicated in ip_mr_input at the moment.
2611da177e4SLinus Torvalds 		 */
2629d4fb27dSJoe Perches 		    &&
2639d4fb27dSJoe Perches 		    ((rt->rt_flags & RTCF_LOCAL) ||
2649d4fb27dSJoe Perches 		     !(IPCB(skb)->flags & IPSKB_FORWARDED))
2651da177e4SLinus Torvalds #endif
2661da177e4SLinus Torvalds 		   ) {
2671da177e4SLinus Torvalds 			struct sk_buff *newskb = skb_clone(skb, GFP_ATOMIC);
2681da177e4SLinus Torvalds 			if (newskb)
2699bbc768aSJan Engelhardt 				NF_HOOK(NFPROTO_IPV4, NF_INET_POST_ROUTING,
2709bbc768aSJan Engelhardt 					newskb, NULL, newskb->dev,
27195603e22SMichel Machado 					dev_loopback_xmit);
2721da177e4SLinus Torvalds 		}
2731da177e4SLinus Torvalds 
2741da177e4SLinus Torvalds 		/* Multicasts with ttl 0 must not go beyond the host */
2751da177e4SLinus Torvalds 
276eddc9ec5SArnaldo Carvalho de Melo 		if (ip_hdr(skb)->ttl == 0) {
2771da177e4SLinus Torvalds 			kfree_skb(skb);
2781da177e4SLinus Torvalds 			return 0;
2791da177e4SLinus Torvalds 		}
2801da177e4SLinus Torvalds 	}
2811da177e4SLinus Torvalds 
2821da177e4SLinus Torvalds 	if (rt->rt_flags&RTCF_BROADCAST) {
2831da177e4SLinus Torvalds 		struct sk_buff *newskb = skb_clone(skb, GFP_ATOMIC);
2841da177e4SLinus Torvalds 		if (newskb)
2859bbc768aSJan Engelhardt 			NF_HOOK(NFPROTO_IPV4, NF_INET_POST_ROUTING, newskb,
28695603e22SMichel Machado 				NULL, newskb->dev, dev_loopback_xmit);
2871da177e4SLinus Torvalds 	}
2881da177e4SLinus Torvalds 
2899bbc768aSJan Engelhardt 	return NF_HOOK_COND(NFPROTO_IPV4, NF_INET_POST_ROUTING, skb, NULL,
2909bbc768aSJan Engelhardt 			    skb->dev, ip_finish_output,
29148d5cad8SPatrick McHardy 			    !(IPCB(skb)->flags & IPSKB_REROUTED));
2921da177e4SLinus Torvalds }
2931da177e4SLinus Torvalds 
2941da177e4SLinus Torvalds int ip_output(struct sk_buff *skb)
2951da177e4SLinus Torvalds {
296adf30907SEric Dumazet 	struct net_device *dev = skb_dst(skb)->dev;
2971bd9bef6SPatrick McHardy 
298edf391ffSNeil Horman 	IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUT, skb->len);
2991da177e4SLinus Torvalds 
3001bd9bef6SPatrick McHardy 	skb->dev = dev;
3011bd9bef6SPatrick McHardy 	skb->protocol = htons(ETH_P_IP);
3021bd9bef6SPatrick McHardy 
3039bbc768aSJan Engelhardt 	return NF_HOOK_COND(NFPROTO_IPV4, NF_INET_POST_ROUTING, skb, NULL, dev,
30448d5cad8SPatrick McHardy 			    ip_finish_output,
30548d5cad8SPatrick McHardy 			    !(IPCB(skb)->flags & IPSKB_REROUTED));
3061da177e4SLinus Torvalds }
3071da177e4SLinus Torvalds 
30884f9307cSEric Dumazet /*
30984f9307cSEric Dumazet  * copy saddr and daddr, possibly using 64bit load/stores
31084f9307cSEric Dumazet  * Equivalent to :
31184f9307cSEric Dumazet  *   iph->saddr = fl4->saddr;
31284f9307cSEric Dumazet  *   iph->daddr = fl4->daddr;
31384f9307cSEric Dumazet  */
31484f9307cSEric Dumazet static void ip_copy_addrs(struct iphdr *iph, const struct flowi4 *fl4)
31584f9307cSEric Dumazet {
31684f9307cSEric Dumazet 	BUILD_BUG_ON(offsetof(typeof(*fl4), daddr) !=
31784f9307cSEric Dumazet 		     offsetof(typeof(*fl4), saddr) + sizeof(fl4->saddr));
31884f9307cSEric Dumazet 	memcpy(&iph->saddr, &fl4->saddr,
31984f9307cSEric Dumazet 	       sizeof(fl4->saddr) + sizeof(fl4->daddr));
32084f9307cSEric Dumazet }
32184f9307cSEric Dumazet 
322d9d8da80SDavid S. Miller int ip_queue_xmit(struct sk_buff *skb, struct flowi *fl)
3231da177e4SLinus Torvalds {
324e89862f4SDavid S. Miller 	struct sock *sk = skb->sk;
3251da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
326f6d8bd05SEric Dumazet 	struct ip_options_rcu *inet_opt;
327b57ae01aSDavid S. Miller 	struct flowi4 *fl4;
3281da177e4SLinus Torvalds 	struct rtable *rt;
3291da177e4SLinus Torvalds 	struct iphdr *iph;
330ab6e3febSEric Dumazet 	int res;
3311da177e4SLinus Torvalds 
3321da177e4SLinus Torvalds 	/* Skip all of this if the packet is already routed,
3331da177e4SLinus Torvalds 	 * f.e. by something like SCTP.
3341da177e4SLinus Torvalds 	 */
335ab6e3febSEric Dumazet 	rcu_read_lock();
336f6d8bd05SEric Dumazet 	inet_opt = rcu_dereference(inet->inet_opt);
337ea4fc0d6SDavid S. Miller 	fl4 = &fl->u.ip4;
338511c3f92SEric Dumazet 	rt = skb_rtable(skb);
3391da177e4SLinus Torvalds 	if (rt != NULL)
3401da177e4SLinus Torvalds 		goto packet_routed;
3411da177e4SLinus Torvalds 
3421da177e4SLinus Torvalds 	/* Make sure we can route this packet. */
3431da177e4SLinus Torvalds 	rt = (struct rtable *)__sk_dst_check(sk, 0);
3441da177e4SLinus Torvalds 	if (rt == NULL) {
3453ca3c68eSAl Viro 		__be32 daddr;
3461da177e4SLinus Torvalds 
3471da177e4SLinus Torvalds 		/* Use correct destination address if we have options. */
348c720c7e8SEric Dumazet 		daddr = inet->inet_daddr;
349f6d8bd05SEric Dumazet 		if (inet_opt && inet_opt->opt.srr)
350f6d8bd05SEric Dumazet 			daddr = inet_opt->opt.faddr;
3511da177e4SLinus Torvalds 
3521da177e4SLinus Torvalds 		/* If this fails, retransmit mechanism of transport layer will
3531da177e4SLinus Torvalds 		 * keep trying until route appears or the connection times
3541da177e4SLinus Torvalds 		 * itself out.
3551da177e4SLinus Torvalds 		 */
356b57ae01aSDavid S. Miller 		rt = ip_route_output_ports(sock_net(sk), fl4, sk,
35778fbfd8aSDavid S. Miller 					   daddr, inet->inet_saddr,
35878fbfd8aSDavid S. Miller 					   inet->inet_dport,
35978fbfd8aSDavid S. Miller 					   inet->inet_sport,
36078fbfd8aSDavid S. Miller 					   sk->sk_protocol,
36178fbfd8aSDavid S. Miller 					   RT_CONN_FLAGS(sk),
36278fbfd8aSDavid S. Miller 					   sk->sk_bound_dev_if);
363b23dd4feSDavid S. Miller 		if (IS_ERR(rt))
3641da177e4SLinus Torvalds 			goto no_route;
365d8d1f30bSChangli Gao 		sk_setup_caps(sk, &rt->dst);
3661da177e4SLinus Torvalds 	}
367d8d1f30bSChangli Gao 	skb_dst_set_noref(skb, &rt->dst);
3681da177e4SLinus Torvalds 
3691da177e4SLinus Torvalds packet_routed:
370ea4fc0d6SDavid S. Miller 	if (inet_opt && inet_opt->opt.is_strictroute && fl4->daddr != rt->rt_gateway)
3711da177e4SLinus Torvalds 		goto no_route;
3721da177e4SLinus Torvalds 
3731da177e4SLinus Torvalds 	/* OK, we know where to send it, allocate and build IP header. */
374f6d8bd05SEric Dumazet 	skb_push(skb, sizeof(struct iphdr) + (inet_opt ? inet_opt->opt.optlen : 0));
3758856dfa3SArnaldo Carvalho de Melo 	skb_reset_network_header(skb);
376eddc9ec5SArnaldo Carvalho de Melo 	iph = ip_hdr(skb);
377714e85beSAl Viro 	*((__be16 *)iph) = htons((4 << 12) | (5 << 8) | (inet->tos & 0xff));
378d8d1f30bSChangli Gao 	if (ip_dont_fragment(sk, &rt->dst) && !skb->local_df)
3791da177e4SLinus Torvalds 		iph->frag_off = htons(IP_DF);
3801da177e4SLinus Torvalds 	else
3811da177e4SLinus Torvalds 		iph->frag_off = 0;
382d8d1f30bSChangli Gao 	iph->ttl      = ip_select_ttl(inet, &rt->dst);
3831da177e4SLinus Torvalds 	iph->protocol = sk->sk_protocol;
38484f9307cSEric Dumazet 	ip_copy_addrs(iph, fl4);
38584f9307cSEric Dumazet 
3861da177e4SLinus Torvalds 	/* Transport layer set skb->h.foo itself. */
3871da177e4SLinus Torvalds 
388f6d8bd05SEric Dumazet 	if (inet_opt && inet_opt->opt.optlen) {
389f6d8bd05SEric Dumazet 		iph->ihl += inet_opt->opt.optlen >> 2;
390f6d8bd05SEric Dumazet 		ip_options_build(skb, &inet_opt->opt, inet->inet_daddr, rt, 0);
3911da177e4SLinus Torvalds 	}
3921da177e4SLinus Torvalds 
393d8d1f30bSChangli Gao 	ip_select_ident_more(iph, &rt->dst, sk,
3947967168cSHerbert Xu 			     (skb_shinfo(skb)->gso_segs ?: 1) - 1);
3951da177e4SLinus Torvalds 
3961da177e4SLinus Torvalds 	skb->priority = sk->sk_priority;
3974a19ec58SLaszlo Attila Toth 	skb->mark = sk->sk_mark;
3981da177e4SLinus Torvalds 
399ab6e3febSEric Dumazet 	res = ip_local_out(skb);
400ab6e3febSEric Dumazet 	rcu_read_unlock();
401ab6e3febSEric Dumazet 	return res;
4021da177e4SLinus Torvalds 
4031da177e4SLinus Torvalds no_route:
404ab6e3febSEric Dumazet 	rcu_read_unlock();
4055e38e270SPavel Emelyanov 	IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
4061da177e4SLinus Torvalds 	kfree_skb(skb);
4071da177e4SLinus Torvalds 	return -EHOSTUNREACH;
4081da177e4SLinus Torvalds }
4094bc2f18bSEric Dumazet EXPORT_SYMBOL(ip_queue_xmit);
4101da177e4SLinus Torvalds 
4111da177e4SLinus Torvalds 
4121da177e4SLinus Torvalds static void ip_copy_metadata(struct sk_buff *to, struct sk_buff *from)
4131da177e4SLinus Torvalds {
4141da177e4SLinus Torvalds 	to->pkt_type = from->pkt_type;
4151da177e4SLinus Torvalds 	to->priority = from->priority;
4161da177e4SLinus Torvalds 	to->protocol = from->protocol;
417adf30907SEric Dumazet 	skb_dst_drop(to);
418fe76cda3SEric Dumazet 	skb_dst_copy(to, from);
4191da177e4SLinus Torvalds 	to->dev = from->dev;
42082e91ffeSThomas Graf 	to->mark = from->mark;
4211da177e4SLinus Torvalds 
4221da177e4SLinus Torvalds 	/* Copy the flags to each fragment. */
4231da177e4SLinus Torvalds 	IPCB(to)->flags = IPCB(from)->flags;
4241da177e4SLinus Torvalds 
4251da177e4SLinus Torvalds #ifdef CONFIG_NET_SCHED
4261da177e4SLinus Torvalds 	to->tc_index = from->tc_index;
4271da177e4SLinus Torvalds #endif
428e7ac05f3SYasuyuki Kozakai 	nf_copy(to, from);
429ba9dda3aSJozsef Kadlecsik #if defined(CONFIG_NETFILTER_XT_TARGET_TRACE) || \
430ba9dda3aSJozsef Kadlecsik     defined(CONFIG_NETFILTER_XT_TARGET_TRACE_MODULE)
431ba9dda3aSJozsef Kadlecsik 	to->nf_trace = from->nf_trace;
432ba9dda3aSJozsef Kadlecsik #endif
433c98d80edSJulian Anastasov #if defined(CONFIG_IP_VS) || defined(CONFIG_IP_VS_MODULE)
434c98d80edSJulian Anastasov 	to->ipvs_property = from->ipvs_property;
435c98d80edSJulian Anastasov #endif
436984bc16cSJames Morris 	skb_copy_secmark(to, from);
4371da177e4SLinus Torvalds }
4381da177e4SLinus Torvalds 
4391da177e4SLinus Torvalds /*
4401da177e4SLinus Torvalds  *	This IP datagram is too large to be sent in one piece.  Break it up into
4411da177e4SLinus Torvalds  *	smaller pieces (each of size equal to IP header plus
4421da177e4SLinus Torvalds  *	a block of the data of the original IP data part) that will yet fit in a
4431da177e4SLinus Torvalds  *	single device frame, and queue such a frame for sending.
4441da177e4SLinus Torvalds  */
4451da177e4SLinus Torvalds 
4462e2f7aefSPatrick McHardy int ip_fragment(struct sk_buff *skb, int (*output)(struct sk_buff *))
4471da177e4SLinus Torvalds {
4481da177e4SLinus Torvalds 	struct iphdr *iph;
4491da177e4SLinus Torvalds 	int ptr;
4501da177e4SLinus Torvalds 	struct net_device *dev;
4511da177e4SLinus Torvalds 	struct sk_buff *skb2;
452c893b806SChangli Gao 	unsigned int mtu, hlen, left, len, ll_rs;
4531da177e4SLinus Torvalds 	int offset;
45476ab608dSAlexey Dobriyan 	__be16 not_last_frag;
455511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
4561da177e4SLinus Torvalds 	int err = 0;
4571da177e4SLinus Torvalds 
458d8d1f30bSChangli Gao 	dev = rt->dst.dev;
4591da177e4SLinus Torvalds 
4601da177e4SLinus Torvalds 	/*
4611da177e4SLinus Torvalds 	 *	Point into the IP datagram header.
4621da177e4SLinus Torvalds 	 */
4631da177e4SLinus Torvalds 
464eddc9ec5SArnaldo Carvalho de Melo 	iph = ip_hdr(skb);
4651da177e4SLinus Torvalds 
4661da177e4SLinus Torvalds 	if (unlikely((iph->frag_off & htons(IP_DF)) && !skb->local_df)) {
4675e38e270SPavel Emelyanov 		IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGFAILS);
4681da177e4SLinus Torvalds 		icmp_send(skb, ICMP_DEST_UNREACH, ICMP_FRAG_NEEDED,
469628a5c56SJohn Heffner 			  htonl(ip_skb_dst_mtu(skb)));
4701da177e4SLinus Torvalds 		kfree_skb(skb);
4711da177e4SLinus Torvalds 		return -EMSGSIZE;
4721da177e4SLinus Torvalds 	}
4731da177e4SLinus Torvalds 
4741da177e4SLinus Torvalds 	/*
4751da177e4SLinus Torvalds 	 *	Setup starting values.
4761da177e4SLinus Torvalds 	 */
4771da177e4SLinus Torvalds 
4781da177e4SLinus Torvalds 	hlen = iph->ihl * 4;
479d8d1f30bSChangli Gao 	mtu = dst_mtu(&rt->dst) - hlen;	/* Size of data space */
4806c79bf0fSBart De Schuymer #ifdef CONFIG_BRIDGE_NETFILTER
4816c79bf0fSBart De Schuymer 	if (skb->nf_bridge)
4826c79bf0fSBart De Schuymer 		mtu -= nf_bridge_mtu_reduction(skb);
4836c79bf0fSBart De Schuymer #endif
48489cee8b1SHerbert Xu 	IPCB(skb)->flags |= IPSKB_FRAG_COMPLETE;
4851da177e4SLinus Torvalds 
4861da177e4SLinus Torvalds 	/* When frag_list is given, use it. First, check its validity:
4871da177e4SLinus Torvalds 	 * some transformers could create wrong frag_list or break existing
4881da177e4SLinus Torvalds 	 * one, it is not prohibited. In this case fall back to copying.
4891da177e4SLinus Torvalds 	 *
4901da177e4SLinus Torvalds 	 * LATER: this step can be merged to real generation of fragments,
4911da177e4SLinus Torvalds 	 * we can switch to copy when see the first bad fragment.
4921da177e4SLinus Torvalds 	 */
49321dc3301SDavid S. Miller 	if (skb_has_frag_list(skb)) {
4943d13008eSEric Dumazet 		struct sk_buff *frag, *frag2;
4951da177e4SLinus Torvalds 		int first_len = skb_pagelen(skb);
4961da177e4SLinus Torvalds 
4971da177e4SLinus Torvalds 		if (first_len - hlen > mtu ||
4981da177e4SLinus Torvalds 		    ((first_len - hlen) & 7) ||
49956f8a75cSPaul Gortmaker 		    ip_is_fragment(iph) ||
5001da177e4SLinus Torvalds 		    skb_cloned(skb))
5011da177e4SLinus Torvalds 			goto slow_path;
5021da177e4SLinus Torvalds 
503d7fcf1a5SDavid S. Miller 		skb_walk_frags(skb, frag) {
5041da177e4SLinus Torvalds 			/* Correct geometry. */
5051da177e4SLinus Torvalds 			if (frag->len > mtu ||
5061da177e4SLinus Torvalds 			    ((frag->len & 7) && frag->next) ||
5071da177e4SLinus Torvalds 			    skb_headroom(frag) < hlen)
5083d13008eSEric Dumazet 				goto slow_path_clean;
5091da177e4SLinus Torvalds 
5101da177e4SLinus Torvalds 			/* Partially cloned skb? */
5111da177e4SLinus Torvalds 			if (skb_shared(frag))
5123d13008eSEric Dumazet 				goto slow_path_clean;
5132fdba6b0SHerbert Xu 
5142fdba6b0SHerbert Xu 			BUG_ON(frag->sk);
5152fdba6b0SHerbert Xu 			if (skb->sk) {
5162fdba6b0SHerbert Xu 				frag->sk = skb->sk;
5172fdba6b0SHerbert Xu 				frag->destructor = sock_wfree;
5182fdba6b0SHerbert Xu 			}
5193d13008eSEric Dumazet 			skb->truesize -= frag->truesize;
5201da177e4SLinus Torvalds 		}
5211da177e4SLinus Torvalds 
5221da177e4SLinus Torvalds 		/* Everything is OK. Generate! */
5231da177e4SLinus Torvalds 
5241da177e4SLinus Torvalds 		err = 0;
5251da177e4SLinus Torvalds 		offset = 0;
5261da177e4SLinus Torvalds 		frag = skb_shinfo(skb)->frag_list;
527d7fcf1a5SDavid S. Miller 		skb_frag_list_init(skb);
5281da177e4SLinus Torvalds 		skb->data_len = first_len - skb_headlen(skb);
5291da177e4SLinus Torvalds 		skb->len = first_len;
5301da177e4SLinus Torvalds 		iph->tot_len = htons(first_len);
5311da177e4SLinus Torvalds 		iph->frag_off = htons(IP_MF);
5321da177e4SLinus Torvalds 		ip_send_check(iph);
5331da177e4SLinus Torvalds 
5341da177e4SLinus Torvalds 		for (;;) {
5351da177e4SLinus Torvalds 			/* Prepare header of the next frame,
5361da177e4SLinus Torvalds 			 * before previous one went down. */
5371da177e4SLinus Torvalds 			if (frag) {
5381da177e4SLinus Torvalds 				frag->ip_summed = CHECKSUM_NONE;
539badff6d0SArnaldo Carvalho de Melo 				skb_reset_transport_header(frag);
540e2d1bca7SArnaldo Carvalho de Melo 				__skb_push(frag, hlen);
541e2d1bca7SArnaldo Carvalho de Melo 				skb_reset_network_header(frag);
542d56f90a7SArnaldo Carvalho de Melo 				memcpy(skb_network_header(frag), iph, hlen);
543eddc9ec5SArnaldo Carvalho de Melo 				iph = ip_hdr(frag);
5441da177e4SLinus Torvalds 				iph->tot_len = htons(frag->len);
5451da177e4SLinus Torvalds 				ip_copy_metadata(frag, skb);
5461da177e4SLinus Torvalds 				if (offset == 0)
5471da177e4SLinus Torvalds 					ip_options_fragment(frag);
5481da177e4SLinus Torvalds 				offset += skb->len - hlen;
5491da177e4SLinus Torvalds 				iph->frag_off = htons(offset>>3);
5501da177e4SLinus Torvalds 				if (frag->next != NULL)
5511da177e4SLinus Torvalds 					iph->frag_off |= htons(IP_MF);
5521da177e4SLinus Torvalds 				/* Ready, complete checksum */
5531da177e4SLinus Torvalds 				ip_send_check(iph);
5541da177e4SLinus Torvalds 			}
5551da177e4SLinus Torvalds 
5561da177e4SLinus Torvalds 			err = output(skb);
5571da177e4SLinus Torvalds 
558dafee490SWei Dong 			if (!err)
5595e38e270SPavel Emelyanov 				IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGCREATES);
5601da177e4SLinus Torvalds 			if (err || !frag)
5611da177e4SLinus Torvalds 				break;
5621da177e4SLinus Torvalds 
5631da177e4SLinus Torvalds 			skb = frag;
5641da177e4SLinus Torvalds 			frag = skb->next;
5651da177e4SLinus Torvalds 			skb->next = NULL;
5661da177e4SLinus Torvalds 		}
5671da177e4SLinus Torvalds 
5681da177e4SLinus Torvalds 		if (err == 0) {
5695e38e270SPavel Emelyanov 			IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGOKS);
5701da177e4SLinus Torvalds 			return 0;
5711da177e4SLinus Torvalds 		}
5721da177e4SLinus Torvalds 
5731da177e4SLinus Torvalds 		while (frag) {
5741da177e4SLinus Torvalds 			skb = frag->next;
5751da177e4SLinus Torvalds 			kfree_skb(frag);
5761da177e4SLinus Torvalds 			frag = skb;
5771da177e4SLinus Torvalds 		}
5785e38e270SPavel Emelyanov 		IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGFAILS);
5791da177e4SLinus Torvalds 		return err;
5803d13008eSEric Dumazet 
5813d13008eSEric Dumazet slow_path_clean:
5823d13008eSEric Dumazet 		skb_walk_frags(skb, frag2) {
5833d13008eSEric Dumazet 			if (frag2 == frag)
5843d13008eSEric Dumazet 				break;
5853d13008eSEric Dumazet 			frag2->sk = NULL;
5863d13008eSEric Dumazet 			frag2->destructor = NULL;
5873d13008eSEric Dumazet 			skb->truesize += frag2->truesize;
5883d13008eSEric Dumazet 		}
5891da177e4SLinus Torvalds 	}
5901da177e4SLinus Torvalds 
5911da177e4SLinus Torvalds slow_path:
5921da177e4SLinus Torvalds 	left = skb->len - hlen;		/* Space per frame */
59349085bd7SGeorge Kadianakis 	ptr = hlen;		/* Where to start from */
5941da177e4SLinus Torvalds 
5951da177e4SLinus Torvalds 	/* for bridged IP traffic encapsulated inside f.e. a vlan header,
5969bcfcaf5SStephen Hemminger 	 * we need to make room for the encapsulating header
5979bcfcaf5SStephen Hemminger 	 */
598c893b806SChangli Gao 	ll_rs = LL_RESERVED_SPACE_EXTRA(rt->dst.dev, nf_bridge_pad(skb));
5999bcfcaf5SStephen Hemminger 
6001da177e4SLinus Torvalds 	/*
6011da177e4SLinus Torvalds 	 *	Fragment the datagram.
6021da177e4SLinus Torvalds 	 */
6031da177e4SLinus Torvalds 
6041da177e4SLinus Torvalds 	offset = (ntohs(iph->frag_off) & IP_OFFSET) << 3;
6051da177e4SLinus Torvalds 	not_last_frag = iph->frag_off & htons(IP_MF);
6061da177e4SLinus Torvalds 
6071da177e4SLinus Torvalds 	/*
6081da177e4SLinus Torvalds 	 *	Keep copying data until we run out.
6091da177e4SLinus Torvalds 	 */
6101da177e4SLinus Torvalds 
6111da177e4SLinus Torvalds 	while (left > 0) {
6121da177e4SLinus Torvalds 		len = left;
6131da177e4SLinus Torvalds 		/* IF: it doesn't fit, use 'mtu' - the data space left */
6141da177e4SLinus Torvalds 		if (len > mtu)
6151da177e4SLinus Torvalds 			len = mtu;
6161da177e4SLinus Torvalds 		/* IF: we are not sending up to and including the packet end
6171da177e4SLinus Torvalds 		   then align the next start on an eight byte boundary */
6181da177e4SLinus Torvalds 		if (len < left)	{
6191da177e4SLinus Torvalds 			len &= ~7;
6201da177e4SLinus Torvalds 		}
6211da177e4SLinus Torvalds 		/*
6221da177e4SLinus Torvalds 		 *	Allocate buffer.
6231da177e4SLinus Torvalds 		 */
6241da177e4SLinus Torvalds 
6251da177e4SLinus Torvalds 		if ((skb2 = alloc_skb(len+hlen+ll_rs, GFP_ATOMIC)) == NULL) {
62664ce2073SPatrick McHardy 			NETDEBUG(KERN_INFO "IP: frag: no memory for new fragment!\n");
6271da177e4SLinus Torvalds 			err = -ENOMEM;
6281da177e4SLinus Torvalds 			goto fail;
6291da177e4SLinus Torvalds 		}
6301da177e4SLinus Torvalds 
6311da177e4SLinus Torvalds 		/*
6321da177e4SLinus Torvalds 		 *	Set up data on packet
6331da177e4SLinus Torvalds 		 */
6341da177e4SLinus Torvalds 
6351da177e4SLinus Torvalds 		ip_copy_metadata(skb2, skb);
6361da177e4SLinus Torvalds 		skb_reserve(skb2, ll_rs);
6371da177e4SLinus Torvalds 		skb_put(skb2, len + hlen);
638c1d2bbe1SArnaldo Carvalho de Melo 		skb_reset_network_header(skb2);
639b0e380b1SArnaldo Carvalho de Melo 		skb2->transport_header = skb2->network_header + hlen;
6401da177e4SLinus Torvalds 
6411da177e4SLinus Torvalds 		/*
6421da177e4SLinus Torvalds 		 *	Charge the memory for the fragment to any owner
6431da177e4SLinus Torvalds 		 *	it might possess
6441da177e4SLinus Torvalds 		 */
6451da177e4SLinus Torvalds 
6461da177e4SLinus Torvalds 		if (skb->sk)
6471da177e4SLinus Torvalds 			skb_set_owner_w(skb2, skb->sk);
6481da177e4SLinus Torvalds 
6491da177e4SLinus Torvalds 		/*
6501da177e4SLinus Torvalds 		 *	Copy the packet header into the new buffer.
6511da177e4SLinus Torvalds 		 */
6521da177e4SLinus Torvalds 
653d626f62bSArnaldo Carvalho de Melo 		skb_copy_from_linear_data(skb, skb_network_header(skb2), hlen);
6541da177e4SLinus Torvalds 
6551da177e4SLinus Torvalds 		/*
6561da177e4SLinus Torvalds 		 *	Copy a block of the IP datagram.
6571da177e4SLinus Torvalds 		 */
658bff9b61cSArnaldo Carvalho de Melo 		if (skb_copy_bits(skb, ptr, skb_transport_header(skb2), len))
6591da177e4SLinus Torvalds 			BUG();
6601da177e4SLinus Torvalds 		left -= len;
6611da177e4SLinus Torvalds 
6621da177e4SLinus Torvalds 		/*
6631da177e4SLinus Torvalds 		 *	Fill in the new header fields.
6641da177e4SLinus Torvalds 		 */
665eddc9ec5SArnaldo Carvalho de Melo 		iph = ip_hdr(skb2);
6661da177e4SLinus Torvalds 		iph->frag_off = htons((offset >> 3));
6671da177e4SLinus Torvalds 
6681da177e4SLinus Torvalds 		/* ANK: dirty, but effective trick. Upgrade options only if
6691da177e4SLinus Torvalds 		 * the segment to be fragmented was THE FIRST (otherwise,
6701da177e4SLinus Torvalds 		 * options are already fixed) and make it ONCE
6711da177e4SLinus Torvalds 		 * on the initial skb, so that all the following fragments
6721da177e4SLinus Torvalds 		 * will inherit fixed options.
6731da177e4SLinus Torvalds 		 */
6741da177e4SLinus Torvalds 		if (offset == 0)
6751da177e4SLinus Torvalds 			ip_options_fragment(skb);
6761da177e4SLinus Torvalds 
6771da177e4SLinus Torvalds 		/*
6781da177e4SLinus Torvalds 		 *	Added AC : If we are fragmenting a fragment that's not the
6791da177e4SLinus Torvalds 		 *		   last fragment then keep MF on each bit
6801da177e4SLinus Torvalds 		 */
6811da177e4SLinus Torvalds 		if (left > 0 || not_last_frag)
6821da177e4SLinus Torvalds 			iph->frag_off |= htons(IP_MF);
6831da177e4SLinus Torvalds 		ptr += len;
6841da177e4SLinus Torvalds 		offset += len;
6851da177e4SLinus Torvalds 
6861da177e4SLinus Torvalds 		/*
6871da177e4SLinus Torvalds 		 *	Put this fragment into the sending queue.
6881da177e4SLinus Torvalds 		 */
6891da177e4SLinus Torvalds 		iph->tot_len = htons(len + hlen);
6901da177e4SLinus Torvalds 
6911da177e4SLinus Torvalds 		ip_send_check(iph);
6921da177e4SLinus Torvalds 
6931da177e4SLinus Torvalds 		err = output(skb2);
6941da177e4SLinus Torvalds 		if (err)
6951da177e4SLinus Torvalds 			goto fail;
696dafee490SWei Dong 
6975e38e270SPavel Emelyanov 		IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGCREATES);
6981da177e4SLinus Torvalds 	}
6995d0ba55bSEric Dumazet 	consume_skb(skb);
7005e38e270SPavel Emelyanov 	IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGOKS);
7011da177e4SLinus Torvalds 	return err;
7021da177e4SLinus Torvalds 
7031da177e4SLinus Torvalds fail:
7041da177e4SLinus Torvalds 	kfree_skb(skb);
7055e38e270SPavel Emelyanov 	IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGFAILS);
7061da177e4SLinus Torvalds 	return err;
7071da177e4SLinus Torvalds }
7082e2f7aefSPatrick McHardy EXPORT_SYMBOL(ip_fragment);
7092e2f7aefSPatrick McHardy 
7101da177e4SLinus Torvalds int
7111da177e4SLinus Torvalds ip_generic_getfrag(void *from, char *to, int offset, int len, int odd, struct sk_buff *skb)
7121da177e4SLinus Torvalds {
7131da177e4SLinus Torvalds 	struct iovec *iov = from;
7141da177e4SLinus Torvalds 
71584fa7933SPatrick McHardy 	if (skb->ip_summed == CHECKSUM_PARTIAL) {
7161da177e4SLinus Torvalds 		if (memcpy_fromiovecend(to, iov, offset, len) < 0)
7171da177e4SLinus Torvalds 			return -EFAULT;
7181da177e4SLinus Torvalds 	} else {
71944bb9363SAl Viro 		__wsum csum = 0;
7201da177e4SLinus Torvalds 		if (csum_partial_copy_fromiovecend(to, iov, offset, len, &csum) < 0)
7211da177e4SLinus Torvalds 			return -EFAULT;
7221da177e4SLinus Torvalds 		skb->csum = csum_block_add(skb->csum, csum, odd);
7231da177e4SLinus Torvalds 	}
7241da177e4SLinus Torvalds 	return 0;
7251da177e4SLinus Torvalds }
7264bc2f18bSEric Dumazet EXPORT_SYMBOL(ip_generic_getfrag);
7271da177e4SLinus Torvalds 
72844bb9363SAl Viro static inline __wsum
7291da177e4SLinus Torvalds csum_page(struct page *page, int offset, int copy)
7301da177e4SLinus Torvalds {
7311da177e4SLinus Torvalds 	char *kaddr;
73244bb9363SAl Viro 	__wsum csum;
7331da177e4SLinus Torvalds 	kaddr = kmap(page);
7341da177e4SLinus Torvalds 	csum = csum_partial(kaddr + offset, copy, 0);
7351da177e4SLinus Torvalds 	kunmap(page);
7361da177e4SLinus Torvalds 	return csum;
7371da177e4SLinus Torvalds }
7381da177e4SLinus Torvalds 
7394b30b1c6SAdrian Bunk static inline int ip_ufo_append_data(struct sock *sk,
7401470ddf7SHerbert Xu 			struct sk_buff_head *queue,
741e89e9cf5SAnanda Raju 			int getfrag(void *from, char *to, int offset, int len,
742e89e9cf5SAnanda Raju 			       int odd, struct sk_buff *skb),
743e89e9cf5SAnanda Raju 			void *from, int length, int hh_len, int fragheaderlen,
744d9be4f7aSBill Sommerfeld 			int transhdrlen, int maxfraglen, unsigned int flags)
745e89e9cf5SAnanda Raju {
746e89e9cf5SAnanda Raju 	struct sk_buff *skb;
747e89e9cf5SAnanda Raju 	int err;
748e89e9cf5SAnanda Raju 
749e89e9cf5SAnanda Raju 	/* There is support for UDP fragmentation offload by network
750e89e9cf5SAnanda Raju 	 * device, so create one single skb packet containing complete
751e89e9cf5SAnanda Raju 	 * udp datagram
752e89e9cf5SAnanda Raju 	 */
7531470ddf7SHerbert Xu 	if ((skb = skb_peek_tail(queue)) == NULL) {
754e89e9cf5SAnanda Raju 		skb = sock_alloc_send_skb(sk,
755e89e9cf5SAnanda Raju 			hh_len + fragheaderlen + transhdrlen + 20,
756e89e9cf5SAnanda Raju 			(flags & MSG_DONTWAIT), &err);
757e89e9cf5SAnanda Raju 
758e89e9cf5SAnanda Raju 		if (skb == NULL)
759e89e9cf5SAnanda Raju 			return err;
760e89e9cf5SAnanda Raju 
761e89e9cf5SAnanda Raju 		/* reserve space for Hardware header */
762e89e9cf5SAnanda Raju 		skb_reserve(skb, hh_len);
763e89e9cf5SAnanda Raju 
764e89e9cf5SAnanda Raju 		/* create space for UDP/IP header */
765e89e9cf5SAnanda Raju 		skb_put(skb, fragheaderlen + transhdrlen);
766e89e9cf5SAnanda Raju 
767e89e9cf5SAnanda Raju 		/* initialize network header pointer */
768c1d2bbe1SArnaldo Carvalho de Melo 		skb_reset_network_header(skb);
769e89e9cf5SAnanda Raju 
770e89e9cf5SAnanda Raju 		/* initialize protocol header pointer */
771b0e380b1SArnaldo Carvalho de Melo 		skb->transport_header = skb->network_header + fragheaderlen;
772e89e9cf5SAnanda Raju 
77384fa7933SPatrick McHardy 		skb->ip_summed = CHECKSUM_PARTIAL;
774e89e9cf5SAnanda Raju 		skb->csum = 0;
775e89e9cf5SAnanda Raju 
776e89e9cf5SAnanda Raju 		/* specify the length of each IP datagram fragment */
777d9be4f7aSBill Sommerfeld 		skb_shinfo(skb)->gso_size = maxfraglen - fragheaderlen;
778f83ef8c0SHerbert Xu 		skb_shinfo(skb)->gso_type = SKB_GSO_UDP;
7791470ddf7SHerbert Xu 		__skb_queue_tail(queue, skb);
780e89e9cf5SAnanda Raju 	}
781be9164e7SKostya B 
782be9164e7SKostya B 	return skb_append_datato_frags(sk, skb, getfrag, from,
783be9164e7SKostya B 				       (length - transhdrlen));
784e89e9cf5SAnanda Raju }
785e89e9cf5SAnanda Raju 
786f5fca608SDavid S. Miller static int __ip_append_data(struct sock *sk,
787f5fca608SDavid S. Miller 			    struct flowi4 *fl4,
788f5fca608SDavid S. Miller 			    struct sk_buff_head *queue,
7891470ddf7SHerbert Xu 			    struct inet_cork *cork,
7901470ddf7SHerbert Xu 			    int getfrag(void *from, char *to, int offset,
7911470ddf7SHerbert Xu 					int len, int odd, struct sk_buff *skb),
7921da177e4SLinus Torvalds 			    void *from, int length, int transhdrlen,
7931da177e4SLinus Torvalds 			    unsigned int flags)
7941da177e4SLinus Torvalds {
7951da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
7961da177e4SLinus Torvalds 	struct sk_buff *skb;
7971da177e4SLinus Torvalds 
79807df5294SHerbert Xu 	struct ip_options *opt = cork->opt;
7991da177e4SLinus Torvalds 	int hh_len;
8001da177e4SLinus Torvalds 	int exthdrlen;
8011da177e4SLinus Torvalds 	int mtu;
8021da177e4SLinus Torvalds 	int copy;
8031da177e4SLinus Torvalds 	int err;
8041da177e4SLinus Torvalds 	int offset = 0;
8051da177e4SLinus Torvalds 	unsigned int maxfraglen, fragheaderlen;
8061da177e4SLinus Torvalds 	int csummode = CHECKSUM_NONE;
8071470ddf7SHerbert Xu 	struct rtable *rt = (struct rtable *)cork->dst;
8081da177e4SLinus Torvalds 
80996d7303eSSteffen Klassert 	skb = skb_peek_tail(queue);
81096d7303eSSteffen Klassert 
81196d7303eSSteffen Klassert 	exthdrlen = !skb ? rt->dst.header_len : 0;
81207df5294SHerbert Xu 	mtu = cork->fragsize;
8131470ddf7SHerbert Xu 
814d8d1f30bSChangli Gao 	hh_len = LL_RESERVED_SPACE(rt->dst.dev);
8151da177e4SLinus Torvalds 
8161da177e4SLinus Torvalds 	fragheaderlen = sizeof(struct iphdr) + (opt ? opt->optlen : 0);
8171da177e4SLinus Torvalds 	maxfraglen = ((mtu - fragheaderlen) & ~7) + fragheaderlen;
8181da177e4SLinus Torvalds 
8191470ddf7SHerbert Xu 	if (cork->length + length > 0xFFFF - fragheaderlen) {
820f5fca608SDavid S. Miller 		ip_local_error(sk, EMSGSIZE, fl4->daddr, inet->inet_dport,
821c720c7e8SEric Dumazet 			       mtu-exthdrlen);
8221da177e4SLinus Torvalds 		return -EMSGSIZE;
8231da177e4SLinus Torvalds 	}
8241da177e4SLinus Torvalds 
8251da177e4SLinus Torvalds 	/*
8261da177e4SLinus Torvalds 	 * transhdrlen > 0 means that this is the first fragment and we wish
8271da177e4SLinus Torvalds 	 * it won't be fragmented in the future.
8281da177e4SLinus Torvalds 	 */
8291da177e4SLinus Torvalds 	if (transhdrlen &&
8301da177e4SLinus Torvalds 	    length + fragheaderlen <= mtu &&
831d8d1f30bSChangli Gao 	    rt->dst.dev->features & NETIF_F_V4_CSUM &&
8321da177e4SLinus Torvalds 	    !exthdrlen)
83384fa7933SPatrick McHardy 		csummode = CHECKSUM_PARTIAL;
8341da177e4SLinus Torvalds 
8351470ddf7SHerbert Xu 	cork->length += length;
83626cde9f7SHerbert Xu 	if (((length > mtu) || (skb && skb_is_gso(skb))) &&
837be9164e7SKostya B 	    (sk->sk_protocol == IPPROTO_UDP) &&
838c146066aSSteffen Klassert 	    (rt->dst.dev->features & NETIF_F_UFO) && !rt->dst.header_len) {
8391470ddf7SHerbert Xu 		err = ip_ufo_append_data(sk, queue, getfrag, from, length,
8401470ddf7SHerbert Xu 					 hh_len, fragheaderlen, transhdrlen,
841d9be4f7aSBill Sommerfeld 					 maxfraglen, flags);
842baa829d8SPatrick McHardy 		if (err)
843e89e9cf5SAnanda Raju 			goto error;
844e89e9cf5SAnanda Raju 		return 0;
845e89e9cf5SAnanda Raju 	}
8461da177e4SLinus Torvalds 
8471da177e4SLinus Torvalds 	/* So, what's going on in the loop below?
8481da177e4SLinus Torvalds 	 *
8491da177e4SLinus Torvalds 	 * We use calculated fragment length to generate chained skb,
8501da177e4SLinus Torvalds 	 * each of segments is IP fragment ready for sending to network after
8511da177e4SLinus Torvalds 	 * adding appropriate IP header.
8521da177e4SLinus Torvalds 	 */
8531da177e4SLinus Torvalds 
85426cde9f7SHerbert Xu 	if (!skb)
8551da177e4SLinus Torvalds 		goto alloc_new_skb;
8561da177e4SLinus Torvalds 
8571da177e4SLinus Torvalds 	while (length > 0) {
8581da177e4SLinus Torvalds 		/* Check if the remaining data fits into current packet. */
8591da177e4SLinus Torvalds 		copy = mtu - skb->len;
8601da177e4SLinus Torvalds 		if (copy < length)
8611da177e4SLinus Torvalds 			copy = maxfraglen - skb->len;
8621da177e4SLinus Torvalds 		if (copy <= 0) {
8631da177e4SLinus Torvalds 			char *data;
8641da177e4SLinus Torvalds 			unsigned int datalen;
8651da177e4SLinus Torvalds 			unsigned int fraglen;
8661da177e4SLinus Torvalds 			unsigned int fraggap;
8671da177e4SLinus Torvalds 			unsigned int alloclen;
8681da177e4SLinus Torvalds 			struct sk_buff *skb_prev;
8691da177e4SLinus Torvalds alloc_new_skb:
8701da177e4SLinus Torvalds 			skb_prev = skb;
8711da177e4SLinus Torvalds 			if (skb_prev)
8721da177e4SLinus Torvalds 				fraggap = skb_prev->len - maxfraglen;
8731da177e4SLinus Torvalds 			else
8741da177e4SLinus Torvalds 				fraggap = 0;
8751da177e4SLinus Torvalds 
8761da177e4SLinus Torvalds 			/*
8771da177e4SLinus Torvalds 			 * If remaining data exceeds the mtu,
8781da177e4SLinus Torvalds 			 * we know we need more fragment(s).
8791da177e4SLinus Torvalds 			 */
8801da177e4SLinus Torvalds 			datalen = length + fraggap;
8811da177e4SLinus Torvalds 			if (datalen > mtu - fragheaderlen)
8821da177e4SLinus Torvalds 				datalen = maxfraglen - fragheaderlen;
8831da177e4SLinus Torvalds 			fraglen = datalen + fragheaderlen;
8841da177e4SLinus Torvalds 
8851da177e4SLinus Torvalds 			if ((flags & MSG_MORE) &&
886d8d1f30bSChangli Gao 			    !(rt->dst.dev->features&NETIF_F_SG))
8871da177e4SLinus Torvalds 				alloclen = mtu;
8881da177e4SLinus Torvalds 			else
88959104f06SEric Dumazet 				alloclen = fraglen;
8901da177e4SLinus Torvalds 
891353e5c9aSSteffen Klassert 			alloclen += exthdrlen;
892353e5c9aSSteffen Klassert 
8931da177e4SLinus Torvalds 			/* The last fragment gets additional space at tail.
8941da177e4SLinus Torvalds 			 * Note, with MSG_MORE we overallocate on fragments,
8951da177e4SLinus Torvalds 			 * because we have no idea what fragment will be
8961da177e4SLinus Torvalds 			 * the last.
8971da177e4SLinus Torvalds 			 */
89833f99dc7SSteffen Klassert 			if (datalen == length + fraggap)
899d8d1f30bSChangli Gao 				alloclen += rt->dst.trailer_len;
90033f99dc7SSteffen Klassert 
9011da177e4SLinus Torvalds 			if (transhdrlen) {
9021da177e4SLinus Torvalds 				skb = sock_alloc_send_skb(sk,
9031da177e4SLinus Torvalds 						alloclen + hh_len + 15,
9041da177e4SLinus Torvalds 						(flags & MSG_DONTWAIT), &err);
9051da177e4SLinus Torvalds 			} else {
9061da177e4SLinus Torvalds 				skb = NULL;
9071da177e4SLinus Torvalds 				if (atomic_read(&sk->sk_wmem_alloc) <=
9081da177e4SLinus Torvalds 				    2 * sk->sk_sndbuf)
9091da177e4SLinus Torvalds 					skb = sock_wmalloc(sk,
9101da177e4SLinus Torvalds 							   alloclen + hh_len + 15, 1,
9111da177e4SLinus Torvalds 							   sk->sk_allocation);
9121da177e4SLinus Torvalds 				if (unlikely(skb == NULL))
9131da177e4SLinus Torvalds 					err = -ENOBUFS;
91451f31cabSPatrick Ohly 				else
91551f31cabSPatrick Ohly 					/* only the initial fragment is
91651f31cabSPatrick Ohly 					   time stamped */
9171470ddf7SHerbert Xu 					cork->tx_flags = 0;
9181da177e4SLinus Torvalds 			}
9191da177e4SLinus Torvalds 			if (skb == NULL)
9201da177e4SLinus Torvalds 				goto error;
9211da177e4SLinus Torvalds 
9221da177e4SLinus Torvalds 			/*
9231da177e4SLinus Torvalds 			 *	Fill in the control structures
9241da177e4SLinus Torvalds 			 */
9251da177e4SLinus Torvalds 			skb->ip_summed = csummode;
9261da177e4SLinus Torvalds 			skb->csum = 0;
9271da177e4SLinus Torvalds 			skb_reserve(skb, hh_len);
9281470ddf7SHerbert Xu 			skb_shinfo(skb)->tx_flags = cork->tx_flags;
9291da177e4SLinus Torvalds 
9301da177e4SLinus Torvalds 			/*
9311da177e4SLinus Torvalds 			 *	Find where to start putting bytes.
9321da177e4SLinus Torvalds 			 */
933353e5c9aSSteffen Klassert 			data = skb_put(skb, fraglen + exthdrlen);
934c14d2450SArnaldo Carvalho de Melo 			skb_set_network_header(skb, exthdrlen);
935b0e380b1SArnaldo Carvalho de Melo 			skb->transport_header = (skb->network_header +
936b0e380b1SArnaldo Carvalho de Melo 						 fragheaderlen);
937353e5c9aSSteffen Klassert 			data += fragheaderlen + exthdrlen;
9381da177e4SLinus Torvalds 
9391da177e4SLinus Torvalds 			if (fraggap) {
9401da177e4SLinus Torvalds 				skb->csum = skb_copy_and_csum_bits(
9411da177e4SLinus Torvalds 					skb_prev, maxfraglen,
9421da177e4SLinus Torvalds 					data + transhdrlen, fraggap, 0);
9431da177e4SLinus Torvalds 				skb_prev->csum = csum_sub(skb_prev->csum,
9441da177e4SLinus Torvalds 							  skb->csum);
9451da177e4SLinus Torvalds 				data += fraggap;
946e9fa4f7bSHerbert Xu 				pskb_trim_unique(skb_prev, maxfraglen);
9471da177e4SLinus Torvalds 			}
9481da177e4SLinus Torvalds 
9491da177e4SLinus Torvalds 			copy = datalen - transhdrlen - fraggap;
9501da177e4SLinus Torvalds 			if (copy > 0 && getfrag(from, data + transhdrlen, offset, copy, fraggap, skb) < 0) {
9511da177e4SLinus Torvalds 				err = -EFAULT;
9521da177e4SLinus Torvalds 				kfree_skb(skb);
9531da177e4SLinus Torvalds 				goto error;
9541da177e4SLinus Torvalds 			}
9551da177e4SLinus Torvalds 
9561da177e4SLinus Torvalds 			offset += copy;
9571da177e4SLinus Torvalds 			length -= datalen - fraggap;
9581da177e4SLinus Torvalds 			transhdrlen = 0;
9591da177e4SLinus Torvalds 			exthdrlen = 0;
9601da177e4SLinus Torvalds 			csummode = CHECKSUM_NONE;
9611da177e4SLinus Torvalds 
9621da177e4SLinus Torvalds 			/*
9631da177e4SLinus Torvalds 			 * Put the packet on the pending queue.
9641da177e4SLinus Torvalds 			 */
9651470ddf7SHerbert Xu 			__skb_queue_tail(queue, skb);
9661da177e4SLinus Torvalds 			continue;
9671da177e4SLinus Torvalds 		}
9681da177e4SLinus Torvalds 
9691da177e4SLinus Torvalds 		if (copy > length)
9701da177e4SLinus Torvalds 			copy = length;
9711da177e4SLinus Torvalds 
972d8d1f30bSChangli Gao 		if (!(rt->dst.dev->features&NETIF_F_SG)) {
9731da177e4SLinus Torvalds 			unsigned int off;
9741da177e4SLinus Torvalds 
9751da177e4SLinus Torvalds 			off = skb->len;
9761da177e4SLinus Torvalds 			if (getfrag(from, skb_put(skb, copy),
9771da177e4SLinus Torvalds 					offset, copy, off, skb) < 0) {
9781da177e4SLinus Torvalds 				__skb_trim(skb, off);
9791da177e4SLinus Torvalds 				err = -EFAULT;
9801da177e4SLinus Torvalds 				goto error;
9811da177e4SLinus Torvalds 			}
9821da177e4SLinus Torvalds 		} else {
9831da177e4SLinus Torvalds 			int i = skb_shinfo(skb)->nr_frags;
9841da177e4SLinus Torvalds 			skb_frag_t *frag = &skb_shinfo(skb)->frags[i-1];
9851470ddf7SHerbert Xu 			struct page *page = cork->page;
9861470ddf7SHerbert Xu 			int off = cork->off;
9871da177e4SLinus Torvalds 			unsigned int left;
9881da177e4SLinus Torvalds 
9891da177e4SLinus Torvalds 			if (page && (left = PAGE_SIZE - off) > 0) {
9901da177e4SLinus Torvalds 				if (copy >= left)
9911da177e4SLinus Torvalds 					copy = left;
992aff65da0SIan Campbell 				if (page != skb_frag_page(frag)) {
9931da177e4SLinus Torvalds 					if (i == MAX_SKB_FRAGS) {
9941da177e4SLinus Torvalds 						err = -EMSGSIZE;
9951da177e4SLinus Torvalds 						goto error;
9961da177e4SLinus Torvalds 					}
9971470ddf7SHerbert Xu 					skb_fill_page_desc(skb, i, page, off, 0);
998aff65da0SIan Campbell 					skb_frag_ref(skb, i);
9991da177e4SLinus Torvalds 					frag = &skb_shinfo(skb)->frags[i];
10001da177e4SLinus Torvalds 				}
10011da177e4SLinus Torvalds 			} else if (i < MAX_SKB_FRAGS) {
10021da177e4SLinus Torvalds 				if (copy > PAGE_SIZE)
10031da177e4SLinus Torvalds 					copy = PAGE_SIZE;
10041da177e4SLinus Torvalds 				page = alloc_pages(sk->sk_allocation, 0);
10051da177e4SLinus Torvalds 				if (page == NULL)  {
10061da177e4SLinus Torvalds 					err = -ENOMEM;
10071da177e4SLinus Torvalds 					goto error;
10081da177e4SLinus Torvalds 				}
10091470ddf7SHerbert Xu 				cork->page = page;
10101470ddf7SHerbert Xu 				cork->off = 0;
10111da177e4SLinus Torvalds 
10121da177e4SLinus Torvalds 				skb_fill_page_desc(skb, i, page, 0, 0);
10131da177e4SLinus Torvalds 				frag = &skb_shinfo(skb)->frags[i];
10141da177e4SLinus Torvalds 			} else {
10151da177e4SLinus Torvalds 				err = -EMSGSIZE;
10161da177e4SLinus Torvalds 				goto error;
10171da177e4SLinus Torvalds 			}
10189e903e08SEric Dumazet 			if (getfrag(from, skb_frag_address(frag)+skb_frag_size(frag),
1019aff65da0SIan Campbell 				    offset, copy, skb->len, skb) < 0) {
10201da177e4SLinus Torvalds 				err = -EFAULT;
10211da177e4SLinus Torvalds 				goto error;
10221da177e4SLinus Torvalds 			}
10231470ddf7SHerbert Xu 			cork->off += copy;
10249e903e08SEric Dumazet 			skb_frag_size_add(frag, copy);
10251da177e4SLinus Torvalds 			skb->len += copy;
10261da177e4SLinus Torvalds 			skb->data_len += copy;
1027f945fa7aSHerbert Xu 			skb->truesize += copy;
1028f945fa7aSHerbert Xu 			atomic_add(copy, &sk->sk_wmem_alloc);
10291da177e4SLinus Torvalds 		}
10301da177e4SLinus Torvalds 		offset += copy;
10311da177e4SLinus Torvalds 		length -= copy;
10321da177e4SLinus Torvalds 	}
10331da177e4SLinus Torvalds 
10341da177e4SLinus Torvalds 	return 0;
10351da177e4SLinus Torvalds 
10361da177e4SLinus Torvalds error:
10371470ddf7SHerbert Xu 	cork->length -= length;
10385e38e270SPavel Emelyanov 	IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTDISCARDS);
10391da177e4SLinus Torvalds 	return err;
10401da177e4SLinus Torvalds }
10411da177e4SLinus Torvalds 
10421470ddf7SHerbert Xu static int ip_setup_cork(struct sock *sk, struct inet_cork *cork,
10431470ddf7SHerbert Xu 			 struct ipcm_cookie *ipc, struct rtable **rtp)
10441470ddf7SHerbert Xu {
10451470ddf7SHerbert Xu 	struct inet_sock *inet = inet_sk(sk);
1046f6d8bd05SEric Dumazet 	struct ip_options_rcu *opt;
10471470ddf7SHerbert Xu 	struct rtable *rt;
10481470ddf7SHerbert Xu 
10491470ddf7SHerbert Xu 	/*
10501470ddf7SHerbert Xu 	 * setup for corking.
10511470ddf7SHerbert Xu 	 */
10521470ddf7SHerbert Xu 	opt = ipc->opt;
10531470ddf7SHerbert Xu 	if (opt) {
10541470ddf7SHerbert Xu 		if (cork->opt == NULL) {
10551470ddf7SHerbert Xu 			cork->opt = kmalloc(sizeof(struct ip_options) + 40,
10561470ddf7SHerbert Xu 					    sk->sk_allocation);
10571470ddf7SHerbert Xu 			if (unlikely(cork->opt == NULL))
10581470ddf7SHerbert Xu 				return -ENOBUFS;
10591470ddf7SHerbert Xu 		}
1060f6d8bd05SEric Dumazet 		memcpy(cork->opt, &opt->opt, sizeof(struct ip_options) + opt->opt.optlen);
10611470ddf7SHerbert Xu 		cork->flags |= IPCORK_OPT;
10621470ddf7SHerbert Xu 		cork->addr = ipc->addr;
10631470ddf7SHerbert Xu 	}
10641470ddf7SHerbert Xu 	rt = *rtp;
10651470ddf7SHerbert Xu 	if (unlikely(!rt))
10661470ddf7SHerbert Xu 		return -EFAULT;
10671470ddf7SHerbert Xu 	/*
10681470ddf7SHerbert Xu 	 * We steal reference to this route, caller should not release it
10691470ddf7SHerbert Xu 	 */
10701470ddf7SHerbert Xu 	*rtp = NULL;
10711470ddf7SHerbert Xu 	cork->fragsize = inet->pmtudisc == IP_PMTUDISC_PROBE ?
1072353e5c9aSSteffen Klassert 			 rt->dst.dev->mtu : dst_mtu(&rt->dst);
10731470ddf7SHerbert Xu 	cork->dst = &rt->dst;
10741470ddf7SHerbert Xu 	cork->length = 0;
10751470ddf7SHerbert Xu 	cork->tx_flags = ipc->tx_flags;
10761470ddf7SHerbert Xu 	cork->page = NULL;
10771470ddf7SHerbert Xu 	cork->off = 0;
10781470ddf7SHerbert Xu 
10791470ddf7SHerbert Xu 	return 0;
10801470ddf7SHerbert Xu }
10811470ddf7SHerbert Xu 
10821470ddf7SHerbert Xu /*
10831470ddf7SHerbert Xu  *	ip_append_data() and ip_append_page() can make one large IP datagram
10841470ddf7SHerbert Xu  *	from many pieces of data. Each pieces will be holded on the socket
10851470ddf7SHerbert Xu  *	until ip_push_pending_frames() is called. Each piece can be a page
10861470ddf7SHerbert Xu  *	or non-page data.
10871470ddf7SHerbert Xu  *
10881470ddf7SHerbert Xu  *	Not only UDP, other transport protocols - e.g. raw sockets - can use
10891470ddf7SHerbert Xu  *	this interface potentially.
10901470ddf7SHerbert Xu  *
10911470ddf7SHerbert Xu  *	LATER: length must be adjusted by pad at tail, when it is required.
10921470ddf7SHerbert Xu  */
1093f5fca608SDavid S. Miller int ip_append_data(struct sock *sk, struct flowi4 *fl4,
10941470ddf7SHerbert Xu 		   int getfrag(void *from, char *to, int offset, int len,
10951470ddf7SHerbert Xu 			       int odd, struct sk_buff *skb),
10961470ddf7SHerbert Xu 		   void *from, int length, int transhdrlen,
10971470ddf7SHerbert Xu 		   struct ipcm_cookie *ipc, struct rtable **rtp,
10981470ddf7SHerbert Xu 		   unsigned int flags)
10991470ddf7SHerbert Xu {
11001470ddf7SHerbert Xu 	struct inet_sock *inet = inet_sk(sk);
11011470ddf7SHerbert Xu 	int err;
11021470ddf7SHerbert Xu 
11031470ddf7SHerbert Xu 	if (flags&MSG_PROBE)
11041470ddf7SHerbert Xu 		return 0;
11051470ddf7SHerbert Xu 
11061470ddf7SHerbert Xu 	if (skb_queue_empty(&sk->sk_write_queue)) {
1107bdc712b4SDavid S. Miller 		err = ip_setup_cork(sk, &inet->cork.base, ipc, rtp);
11081470ddf7SHerbert Xu 		if (err)
11091470ddf7SHerbert Xu 			return err;
11101470ddf7SHerbert Xu 	} else {
11111470ddf7SHerbert Xu 		transhdrlen = 0;
11121470ddf7SHerbert Xu 	}
11131470ddf7SHerbert Xu 
1114f5fca608SDavid S. Miller 	return __ip_append_data(sk, fl4, &sk->sk_write_queue, &inet->cork.base, getfrag,
11151470ddf7SHerbert Xu 				from, length, transhdrlen, flags);
11161470ddf7SHerbert Xu }
11171470ddf7SHerbert Xu 
1118f5fca608SDavid S. Miller ssize_t	ip_append_page(struct sock *sk, struct flowi4 *fl4, struct page *page,
11191da177e4SLinus Torvalds 		       int offset, size_t size, int flags)
11201da177e4SLinus Torvalds {
11211da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
11221da177e4SLinus Torvalds 	struct sk_buff *skb;
11231da177e4SLinus Torvalds 	struct rtable *rt;
11241da177e4SLinus Torvalds 	struct ip_options *opt = NULL;
1125bdc712b4SDavid S. Miller 	struct inet_cork *cork;
11261da177e4SLinus Torvalds 	int hh_len;
11271da177e4SLinus Torvalds 	int mtu;
11281da177e4SLinus Torvalds 	int len;
11291da177e4SLinus Torvalds 	int err;
11301da177e4SLinus Torvalds 	unsigned int maxfraglen, fragheaderlen, fraggap;
11311da177e4SLinus Torvalds 
11321da177e4SLinus Torvalds 	if (inet->hdrincl)
11331da177e4SLinus Torvalds 		return -EPERM;
11341da177e4SLinus Torvalds 
11351da177e4SLinus Torvalds 	if (flags&MSG_PROBE)
11361da177e4SLinus Torvalds 		return 0;
11371da177e4SLinus Torvalds 
11381da177e4SLinus Torvalds 	if (skb_queue_empty(&sk->sk_write_queue))
11391da177e4SLinus Torvalds 		return -EINVAL;
11401da177e4SLinus Torvalds 
1141bdc712b4SDavid S. Miller 	cork = &inet->cork.base;
1142bdc712b4SDavid S. Miller 	rt = (struct rtable *)cork->dst;
1143bdc712b4SDavid S. Miller 	if (cork->flags & IPCORK_OPT)
1144bdc712b4SDavid S. Miller 		opt = cork->opt;
11451da177e4SLinus Torvalds 
1146d8d1f30bSChangli Gao 	if (!(rt->dst.dev->features&NETIF_F_SG))
11471da177e4SLinus Torvalds 		return -EOPNOTSUPP;
11481da177e4SLinus Torvalds 
1149d8d1f30bSChangli Gao 	hh_len = LL_RESERVED_SPACE(rt->dst.dev);
1150bdc712b4SDavid S. Miller 	mtu = cork->fragsize;
11511da177e4SLinus Torvalds 
11521da177e4SLinus Torvalds 	fragheaderlen = sizeof(struct iphdr) + (opt ? opt->optlen : 0);
11531da177e4SLinus Torvalds 	maxfraglen = ((mtu - fragheaderlen) & ~7) + fragheaderlen;
11541da177e4SLinus Torvalds 
1155bdc712b4SDavid S. Miller 	if (cork->length + size > 0xFFFF - fragheaderlen) {
1156f5fca608SDavid S. Miller 		ip_local_error(sk, EMSGSIZE, fl4->daddr, inet->inet_dport, mtu);
11571da177e4SLinus Torvalds 		return -EMSGSIZE;
11581da177e4SLinus Torvalds 	}
11591da177e4SLinus Torvalds 
11601da177e4SLinus Torvalds 	if ((skb = skb_peek_tail(&sk->sk_write_queue)) == NULL)
11611da177e4SLinus Torvalds 		return -EINVAL;
11621da177e4SLinus Torvalds 
1163bdc712b4SDavid S. Miller 	cork->length += size;
116426cde9f7SHerbert Xu 	if ((size + skb->len > mtu) &&
116526cde9f7SHerbert Xu 	    (sk->sk_protocol == IPPROTO_UDP) &&
1166d8d1f30bSChangli Gao 	    (rt->dst.dev->features & NETIF_F_UFO)) {
11677967168cSHerbert Xu 		skb_shinfo(skb)->gso_size = mtu - fragheaderlen;
1168f83ef8c0SHerbert Xu 		skb_shinfo(skb)->gso_type = SKB_GSO_UDP;
11697967168cSHerbert Xu 	}
1170e89e9cf5SAnanda Raju 
11711da177e4SLinus Torvalds 
11721da177e4SLinus Torvalds 	while (size > 0) {
11731da177e4SLinus Torvalds 		int i;
11741da177e4SLinus Torvalds 
117589114afdSHerbert Xu 		if (skb_is_gso(skb))
1176e89e9cf5SAnanda Raju 			len = size;
1177e89e9cf5SAnanda Raju 		else {
1178e89e9cf5SAnanda Raju 
11791da177e4SLinus Torvalds 			/* Check if the remaining data fits into current packet. */
11801da177e4SLinus Torvalds 			len = mtu - skb->len;
11811da177e4SLinus Torvalds 			if (len < size)
11821da177e4SLinus Torvalds 				len = maxfraglen - skb->len;
1183e89e9cf5SAnanda Raju 		}
11841da177e4SLinus Torvalds 		if (len <= 0) {
11851da177e4SLinus Torvalds 			struct sk_buff *skb_prev;
11861da177e4SLinus Torvalds 			int alloclen;
11871da177e4SLinus Torvalds 
11881da177e4SLinus Torvalds 			skb_prev = skb;
11891da177e4SLinus Torvalds 			fraggap = skb_prev->len - maxfraglen;
11901da177e4SLinus Torvalds 
11911da177e4SLinus Torvalds 			alloclen = fragheaderlen + hh_len + fraggap + 15;
11921da177e4SLinus Torvalds 			skb = sock_wmalloc(sk, alloclen, 1, sk->sk_allocation);
11931da177e4SLinus Torvalds 			if (unlikely(!skb)) {
11941da177e4SLinus Torvalds 				err = -ENOBUFS;
11951da177e4SLinus Torvalds 				goto error;
11961da177e4SLinus Torvalds 			}
11971da177e4SLinus Torvalds 
11981da177e4SLinus Torvalds 			/*
11991da177e4SLinus Torvalds 			 *	Fill in the control structures
12001da177e4SLinus Torvalds 			 */
12011da177e4SLinus Torvalds 			skb->ip_summed = CHECKSUM_NONE;
12021da177e4SLinus Torvalds 			skb->csum = 0;
12031da177e4SLinus Torvalds 			skb_reserve(skb, hh_len);
12041da177e4SLinus Torvalds 
12051da177e4SLinus Torvalds 			/*
12061da177e4SLinus Torvalds 			 *	Find where to start putting bytes.
12071da177e4SLinus Torvalds 			 */
1208967b05f6SArnaldo Carvalho de Melo 			skb_put(skb, fragheaderlen + fraggap);
12092ca9e6f2SArnaldo Carvalho de Melo 			skb_reset_network_header(skb);
1210b0e380b1SArnaldo Carvalho de Melo 			skb->transport_header = (skb->network_header +
1211b0e380b1SArnaldo Carvalho de Melo 						 fragheaderlen);
12121da177e4SLinus Torvalds 			if (fraggap) {
1213967b05f6SArnaldo Carvalho de Melo 				skb->csum = skb_copy_and_csum_bits(skb_prev,
1214967b05f6SArnaldo Carvalho de Melo 								   maxfraglen,
12159c70220bSArnaldo Carvalho de Melo 						    skb_transport_header(skb),
1216967b05f6SArnaldo Carvalho de Melo 								   fraggap, 0);
12171da177e4SLinus Torvalds 				skb_prev->csum = csum_sub(skb_prev->csum,
12181da177e4SLinus Torvalds 							  skb->csum);
1219e9fa4f7bSHerbert Xu 				pskb_trim_unique(skb_prev, maxfraglen);
12201da177e4SLinus Torvalds 			}
12211da177e4SLinus Torvalds 
12221da177e4SLinus Torvalds 			/*
12231da177e4SLinus Torvalds 			 * Put the packet on the pending queue.
12241da177e4SLinus Torvalds 			 */
12251da177e4SLinus Torvalds 			__skb_queue_tail(&sk->sk_write_queue, skb);
12261da177e4SLinus Torvalds 			continue;
12271da177e4SLinus Torvalds 		}
12281da177e4SLinus Torvalds 
12291da177e4SLinus Torvalds 		i = skb_shinfo(skb)->nr_frags;
12301da177e4SLinus Torvalds 		if (len > size)
12311da177e4SLinus Torvalds 			len = size;
12321da177e4SLinus Torvalds 		if (skb_can_coalesce(skb, i, page, offset)) {
12339e903e08SEric Dumazet 			skb_frag_size_add(&skb_shinfo(skb)->frags[i-1], len);
12341da177e4SLinus Torvalds 		} else if (i < MAX_SKB_FRAGS) {
12351da177e4SLinus Torvalds 			get_page(page);
12361da177e4SLinus Torvalds 			skb_fill_page_desc(skb, i, page, offset, len);
12371da177e4SLinus Torvalds 		} else {
12381da177e4SLinus Torvalds 			err = -EMSGSIZE;
12391da177e4SLinus Torvalds 			goto error;
12401da177e4SLinus Torvalds 		}
12411da177e4SLinus Torvalds 
12421da177e4SLinus Torvalds 		if (skb->ip_summed == CHECKSUM_NONE) {
124344bb9363SAl Viro 			__wsum csum;
12441da177e4SLinus Torvalds 			csum = csum_page(page, offset, len);
12451da177e4SLinus Torvalds 			skb->csum = csum_block_add(skb->csum, csum, skb->len);
12461da177e4SLinus Torvalds 		}
12471da177e4SLinus Torvalds 
12481da177e4SLinus Torvalds 		skb->len += len;
12491da177e4SLinus Torvalds 		skb->data_len += len;
12501e34a11dSDavid S. Miller 		skb->truesize += len;
12511e34a11dSDavid S. Miller 		atomic_add(len, &sk->sk_wmem_alloc);
12521da177e4SLinus Torvalds 		offset += len;
12531da177e4SLinus Torvalds 		size -= len;
12541da177e4SLinus Torvalds 	}
12551da177e4SLinus Torvalds 	return 0;
12561da177e4SLinus Torvalds 
12571da177e4SLinus Torvalds error:
1258bdc712b4SDavid S. Miller 	cork->length -= size;
12595e38e270SPavel Emelyanov 	IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTDISCARDS);
12601da177e4SLinus Torvalds 	return err;
12611da177e4SLinus Torvalds }
12621da177e4SLinus Torvalds 
12631470ddf7SHerbert Xu static void ip_cork_release(struct inet_cork *cork)
1264429f08e9SPavel Emelyanov {
12651470ddf7SHerbert Xu 	cork->flags &= ~IPCORK_OPT;
12661470ddf7SHerbert Xu 	kfree(cork->opt);
12671470ddf7SHerbert Xu 	cork->opt = NULL;
12681470ddf7SHerbert Xu 	dst_release(cork->dst);
12691470ddf7SHerbert Xu 	cork->dst = NULL;
1270429f08e9SPavel Emelyanov }
1271429f08e9SPavel Emelyanov 
12721da177e4SLinus Torvalds /*
12731da177e4SLinus Torvalds  *	Combined all pending IP fragments on the socket as one IP datagram
12741da177e4SLinus Torvalds  *	and push them out.
12751da177e4SLinus Torvalds  */
12761c32c5adSHerbert Xu struct sk_buff *__ip_make_skb(struct sock *sk,
127777968b78SDavid S. Miller 			      struct flowi4 *fl4,
12781470ddf7SHerbert Xu 			      struct sk_buff_head *queue,
12791470ddf7SHerbert Xu 			      struct inet_cork *cork)
12801da177e4SLinus Torvalds {
12811da177e4SLinus Torvalds 	struct sk_buff *skb, *tmp_skb;
12821da177e4SLinus Torvalds 	struct sk_buff **tail_skb;
12831da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
12840388b004SPavel Emelyanov 	struct net *net = sock_net(sk);
12851da177e4SLinus Torvalds 	struct ip_options *opt = NULL;
12861470ddf7SHerbert Xu 	struct rtable *rt = (struct rtable *)cork->dst;
12871da177e4SLinus Torvalds 	struct iphdr *iph;
128876ab608dSAlexey Dobriyan 	__be16 df = 0;
12891da177e4SLinus Torvalds 	__u8 ttl;
12901da177e4SLinus Torvalds 
12911470ddf7SHerbert Xu 	if ((skb = __skb_dequeue(queue)) == NULL)
12921da177e4SLinus Torvalds 		goto out;
12931da177e4SLinus Torvalds 	tail_skb = &(skb_shinfo(skb)->frag_list);
12941da177e4SLinus Torvalds 
12951da177e4SLinus Torvalds 	/* move skb->data to ip header from ext header */
1296d56f90a7SArnaldo Carvalho de Melo 	if (skb->data < skb_network_header(skb))
1297bbe735e4SArnaldo Carvalho de Melo 		__skb_pull(skb, skb_network_offset(skb));
12981470ddf7SHerbert Xu 	while ((tmp_skb = __skb_dequeue(queue)) != NULL) {
1299cfe1fc77SArnaldo Carvalho de Melo 		__skb_pull(tmp_skb, skb_network_header_len(skb));
13001da177e4SLinus Torvalds 		*tail_skb = tmp_skb;
13011da177e4SLinus Torvalds 		tail_skb = &(tmp_skb->next);
13021da177e4SLinus Torvalds 		skb->len += tmp_skb->len;
13031da177e4SLinus Torvalds 		skb->data_len += tmp_skb->len;
13041da177e4SLinus Torvalds 		skb->truesize += tmp_skb->truesize;
13051da177e4SLinus Torvalds 		tmp_skb->destructor = NULL;
13061da177e4SLinus Torvalds 		tmp_skb->sk = NULL;
13071da177e4SLinus Torvalds 	}
13081da177e4SLinus Torvalds 
13091da177e4SLinus Torvalds 	/* Unless user demanded real pmtu discovery (IP_PMTUDISC_DO), we allow
13101da177e4SLinus Torvalds 	 * to fragment the frame generated here. No matter, what transforms
13111da177e4SLinus Torvalds 	 * how transforms change size of the packet, it will come out.
13121da177e4SLinus Torvalds 	 */
1313628a5c56SJohn Heffner 	if (inet->pmtudisc < IP_PMTUDISC_DO)
13141da177e4SLinus Torvalds 		skb->local_df = 1;
13151da177e4SLinus Torvalds 
13161da177e4SLinus Torvalds 	/* DF bit is set when we want to see DF on outgoing frames.
13171da177e4SLinus Torvalds 	 * If local_df is set too, we still allow to fragment this frame
13181da177e4SLinus Torvalds 	 * locally. */
1319628a5c56SJohn Heffner 	if (inet->pmtudisc >= IP_PMTUDISC_DO ||
1320d8d1f30bSChangli Gao 	    (skb->len <= dst_mtu(&rt->dst) &&
1321d8d1f30bSChangli Gao 	     ip_dont_fragment(sk, &rt->dst)))
13221da177e4SLinus Torvalds 		df = htons(IP_DF);
13231da177e4SLinus Torvalds 
13241470ddf7SHerbert Xu 	if (cork->flags & IPCORK_OPT)
13251470ddf7SHerbert Xu 		opt = cork->opt;
13261da177e4SLinus Torvalds 
13271da177e4SLinus Torvalds 	if (rt->rt_type == RTN_MULTICAST)
13281da177e4SLinus Torvalds 		ttl = inet->mc_ttl;
13291da177e4SLinus Torvalds 	else
1330d8d1f30bSChangli Gao 		ttl = ip_select_ttl(inet, &rt->dst);
13311da177e4SLinus Torvalds 
13321da177e4SLinus Torvalds 	iph = (struct iphdr *)skb->data;
13331da177e4SLinus Torvalds 	iph->version = 4;
13341da177e4SLinus Torvalds 	iph->ihl = 5;
13351da177e4SLinus Torvalds 	iph->tos = inet->tos;
13361da177e4SLinus Torvalds 	iph->frag_off = df;
1337d8d1f30bSChangli Gao 	ip_select_ident(iph, &rt->dst, sk);
13381da177e4SLinus Torvalds 	iph->ttl = ttl;
13391da177e4SLinus Torvalds 	iph->protocol = sk->sk_protocol;
134084f9307cSEric Dumazet 	ip_copy_addrs(iph, fl4);
13411da177e4SLinus Torvalds 
134222f728f8SDavid S. Miller 	if (opt) {
134322f728f8SDavid S. Miller 		iph->ihl += opt->optlen>>2;
134422f728f8SDavid S. Miller 		ip_options_build(skb, opt, cork->addr, rt, 0);
134522f728f8SDavid S. Miller 	}
134622f728f8SDavid S. Miller 
13471da177e4SLinus Torvalds 	skb->priority = sk->sk_priority;
13484a19ec58SLaszlo Attila Toth 	skb->mark = sk->sk_mark;
1349a21bba94SEric Dumazet 	/*
1350a21bba94SEric Dumazet 	 * Steal rt from cork.dst to avoid a pair of atomic_inc/atomic_dec
1351a21bba94SEric Dumazet 	 * on dst refcount
1352a21bba94SEric Dumazet 	 */
13531470ddf7SHerbert Xu 	cork->dst = NULL;
1354d8d1f30bSChangli Gao 	skb_dst_set(skb, &rt->dst);
13551da177e4SLinus Torvalds 
135696793b48SDavid L Stevens 	if (iph->protocol == IPPROTO_ICMP)
13570388b004SPavel Emelyanov 		icmp_out_count(net, ((struct icmphdr *)
135896793b48SDavid L Stevens 			skb_transport_header(skb))->type);
135996793b48SDavid L Stevens 
13601c32c5adSHerbert Xu 	ip_cork_release(cork);
13611c32c5adSHerbert Xu out:
13621c32c5adSHerbert Xu 	return skb;
13631c32c5adSHerbert Xu }
13641c32c5adSHerbert Xu 
13651c32c5adSHerbert Xu int ip_send_skb(struct sk_buff *skb)
13661c32c5adSHerbert Xu {
13671c32c5adSHerbert Xu 	struct net *net = sock_net(skb->sk);
13681c32c5adSHerbert Xu 	int err;
13691c32c5adSHerbert Xu 
1370c439cb2eSHerbert Xu 	err = ip_local_out(skb);
13711da177e4SLinus Torvalds 	if (err) {
13721da177e4SLinus Torvalds 		if (err > 0)
13736ce9e7b5SEric Dumazet 			err = net_xmit_errno(err);
13741da177e4SLinus Torvalds 		if (err)
13751c32c5adSHerbert Xu 			IP_INC_STATS(net, IPSTATS_MIB_OUTDISCARDS);
13761da177e4SLinus Torvalds 	}
13771da177e4SLinus Torvalds 
13781da177e4SLinus Torvalds 	return err;
13791da177e4SLinus Torvalds }
13801da177e4SLinus Torvalds 
138177968b78SDavid S. Miller int ip_push_pending_frames(struct sock *sk, struct flowi4 *fl4)
13821470ddf7SHerbert Xu {
13831c32c5adSHerbert Xu 	struct sk_buff *skb;
13841c32c5adSHerbert Xu 
138577968b78SDavid S. Miller 	skb = ip_finish_skb(sk, fl4);
13861c32c5adSHerbert Xu 	if (!skb)
13871c32c5adSHerbert Xu 		return 0;
13881c32c5adSHerbert Xu 
13891c32c5adSHerbert Xu 	/* Netfilter gets whole the not fragmented skb. */
13901c32c5adSHerbert Xu 	return ip_send_skb(skb);
13911470ddf7SHerbert Xu }
13921470ddf7SHerbert Xu 
13931da177e4SLinus Torvalds /*
13941da177e4SLinus Torvalds  *	Throw away all pending data on the socket.
13951da177e4SLinus Torvalds  */
13961470ddf7SHerbert Xu static void __ip_flush_pending_frames(struct sock *sk,
13971470ddf7SHerbert Xu 				      struct sk_buff_head *queue,
13981470ddf7SHerbert Xu 				      struct inet_cork *cork)
13991da177e4SLinus Torvalds {
14001da177e4SLinus Torvalds 	struct sk_buff *skb;
14011da177e4SLinus Torvalds 
14021470ddf7SHerbert Xu 	while ((skb = __skb_dequeue_tail(queue)) != NULL)
14031da177e4SLinus Torvalds 		kfree_skb(skb);
14041da177e4SLinus Torvalds 
14051470ddf7SHerbert Xu 	ip_cork_release(cork);
14061470ddf7SHerbert Xu }
14071470ddf7SHerbert Xu 
14081470ddf7SHerbert Xu void ip_flush_pending_frames(struct sock *sk)
14091470ddf7SHerbert Xu {
1410bdc712b4SDavid S. Miller 	__ip_flush_pending_frames(sk, &sk->sk_write_queue, &inet_sk(sk)->cork.base);
14111da177e4SLinus Torvalds }
14121da177e4SLinus Torvalds 
14131c32c5adSHerbert Xu struct sk_buff *ip_make_skb(struct sock *sk,
141477968b78SDavid S. Miller 			    struct flowi4 *fl4,
14151c32c5adSHerbert Xu 			    int getfrag(void *from, char *to, int offset,
14161c32c5adSHerbert Xu 					int len, int odd, struct sk_buff *skb),
14171c32c5adSHerbert Xu 			    void *from, int length, int transhdrlen,
14181c32c5adSHerbert Xu 			    struct ipcm_cookie *ipc, struct rtable **rtp,
14191c32c5adSHerbert Xu 			    unsigned int flags)
14201c32c5adSHerbert Xu {
1421b80d7226SDavid S. Miller 	struct inet_cork cork;
14221c32c5adSHerbert Xu 	struct sk_buff_head queue;
14231c32c5adSHerbert Xu 	int err;
14241c32c5adSHerbert Xu 
14251c32c5adSHerbert Xu 	if (flags & MSG_PROBE)
14261c32c5adSHerbert Xu 		return NULL;
14271c32c5adSHerbert Xu 
14281c32c5adSHerbert Xu 	__skb_queue_head_init(&queue);
14291c32c5adSHerbert Xu 
1430b80d7226SDavid S. Miller 	cork.flags = 0;
1431b80d7226SDavid S. Miller 	cork.addr = 0;
143270652728SDavid S. Miller 	cork.opt = NULL;
14331c32c5adSHerbert Xu 	err = ip_setup_cork(sk, &cork, ipc, rtp);
14341c32c5adSHerbert Xu 	if (err)
14351c32c5adSHerbert Xu 		return ERR_PTR(err);
14361c32c5adSHerbert Xu 
1437f5fca608SDavid S. Miller 	err = __ip_append_data(sk, fl4, &queue, &cork, getfrag,
14381c32c5adSHerbert Xu 			       from, length, transhdrlen, flags);
14391c32c5adSHerbert Xu 	if (err) {
14401c32c5adSHerbert Xu 		__ip_flush_pending_frames(sk, &queue, &cork);
14411c32c5adSHerbert Xu 		return ERR_PTR(err);
14421c32c5adSHerbert Xu 	}
14431c32c5adSHerbert Xu 
144477968b78SDavid S. Miller 	return __ip_make_skb(sk, fl4, &queue, &cork);
14451c32c5adSHerbert Xu }
14461da177e4SLinus Torvalds 
14471da177e4SLinus Torvalds /*
14481da177e4SLinus Torvalds  *	Fetch data from kernel space and fill in checksum if needed.
14491da177e4SLinus Torvalds  */
14501da177e4SLinus Torvalds static int ip_reply_glue_bits(void *dptr, char *to, int offset,
14511da177e4SLinus Torvalds 			      int len, int odd, struct sk_buff *skb)
14521da177e4SLinus Torvalds {
14535084205fSAl Viro 	__wsum csum;
14541da177e4SLinus Torvalds 
14551da177e4SLinus Torvalds 	csum = csum_partial_copy_nocheck(dptr+offset, to, len, 0);
14561da177e4SLinus Torvalds 	skb->csum = csum_block_add(skb->csum, csum, odd);
14571da177e4SLinus Torvalds 	return 0;
14581da177e4SLinus Torvalds }
14591da177e4SLinus Torvalds 
14601da177e4SLinus Torvalds /*
14611da177e4SLinus Torvalds  *	Generic function to send a packet as reply to another packet.
1462*70e73416SDavid S. Miller  *	Used to send TCP resets so far.
14631da177e4SLinus Torvalds  *
14641da177e4SLinus Torvalds  *	Should run single threaded per socket because it uses the sock
14651da177e4SLinus Torvalds  *     	structure to pass arguments.
14661da177e4SLinus Torvalds  */
1467*70e73416SDavid S. Miller void ip_send_unicast_reply(struct sock *sk, struct sk_buff *skb, __be32 daddr,
1468*70e73416SDavid S. Miller 			   __be32 saddr, const struct ip_reply_arg *arg,
1469*70e73416SDavid S. Miller 			   unsigned int len)
14701da177e4SLinus Torvalds {
14711da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
1472f6d8bd05SEric Dumazet 	struct ip_options_data replyopts;
14731da177e4SLinus Torvalds 	struct ipcm_cookie ipc;
147477968b78SDavid S. Miller 	struct flowi4 fl4;
1475511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
14761da177e4SLinus Torvalds 
1477f6d8bd05SEric Dumazet 	if (ip_options_echo(&replyopts.opt.opt, skb))
14781da177e4SLinus Torvalds 		return;
14791da177e4SLinus Torvalds 
14800a5ebb80SDavid S. Miller 	ipc.addr = daddr;
14811da177e4SLinus Torvalds 	ipc.opt = NULL;
14822244d07bSOliver Hartkopp 	ipc.tx_flags = 0;
14831da177e4SLinus Torvalds 
1484f6d8bd05SEric Dumazet 	if (replyopts.opt.opt.optlen) {
14851da177e4SLinus Torvalds 		ipc.opt = &replyopts.opt;
14861da177e4SLinus Torvalds 
1487f6d8bd05SEric Dumazet 		if (replyopts.opt.opt.srr)
1488f6d8bd05SEric Dumazet 			daddr = replyopts.opt.opt.faddr;
14891da177e4SLinus Torvalds 	}
14901da177e4SLinus Torvalds 
1491538de0e0SDavid S. Miller 	flowi4_init_output(&fl4, arg->bound_dev_if, 0,
149266b13d99SEric Dumazet 			   RT_TOS(arg->tos),
1493538de0e0SDavid S. Miller 			   RT_SCOPE_UNIVERSE, sk->sk_protocol,
1494538de0e0SDavid S. Miller 			   ip_reply_arg_flowi_flags(arg),
1495*70e73416SDavid S. Miller 			   daddr, saddr,
1496538de0e0SDavid S. Miller 			   tcp_hdr(skb)->source, tcp_hdr(skb)->dest);
14979d6ec938SDavid S. Miller 	security_skb_classify_flow(skb, flowi4_to_flowi(&fl4));
14989d6ec938SDavid S. Miller 	rt = ip_route_output_key(sock_net(sk), &fl4);
1499b23dd4feSDavid S. Miller 	if (IS_ERR(rt))
15001da177e4SLinus Torvalds 		return;
15011da177e4SLinus Torvalds 
15021da177e4SLinus Torvalds 	/* And let IP do all the hard work.
15031da177e4SLinus Torvalds 
15041da177e4SLinus Torvalds 	   This chunk is not reenterable, hence spinlock.
15051da177e4SLinus Torvalds 	   Note that it uses the fact, that this function is called
15061da177e4SLinus Torvalds 	   with locally disabled BH and that sk cannot be already spinlocked.
15071da177e4SLinus Torvalds 	 */
15081da177e4SLinus Torvalds 	bh_lock_sock(sk);
150966b13d99SEric Dumazet 	inet->tos = arg->tos;
15101da177e4SLinus Torvalds 	sk->sk_priority = skb->priority;
1511eddc9ec5SArnaldo Carvalho de Melo 	sk->sk_protocol = ip_hdr(skb)->protocol;
1512f0e48dbfSPatrick McHardy 	sk->sk_bound_dev_if = arg->bound_dev_if;
1513f5fca608SDavid S. Miller 	ip_append_data(sk, &fl4, ip_reply_glue_bits, arg->iov->iov_base, len, 0,
15142e77d89bSEric Dumazet 		       &ipc, &rt, MSG_DONTWAIT);
15151da177e4SLinus Torvalds 	if ((skb = skb_peek(&sk->sk_write_queue)) != NULL) {
15161da177e4SLinus Torvalds 		if (arg->csumoffset >= 0)
15179c70220bSArnaldo Carvalho de Melo 			*((__sum16 *)skb_transport_header(skb) +
15189c70220bSArnaldo Carvalho de Melo 			  arg->csumoffset) = csum_fold(csum_add(skb->csum,
15199c70220bSArnaldo Carvalho de Melo 								arg->csum));
15201da177e4SLinus Torvalds 		skb->ip_summed = CHECKSUM_NONE;
152177968b78SDavid S. Miller 		ip_push_pending_frames(sk, &fl4);
15221da177e4SLinus Torvalds 	}
15231da177e4SLinus Torvalds 
15241da177e4SLinus Torvalds 	bh_unlock_sock(sk);
15251da177e4SLinus Torvalds 
15261da177e4SLinus Torvalds 	ip_rt_put(rt);
15271da177e4SLinus Torvalds }
15281da177e4SLinus Torvalds 
15291da177e4SLinus Torvalds void __init ip_init(void)
15301da177e4SLinus Torvalds {
15311da177e4SLinus Torvalds 	ip_rt_init();
15321da177e4SLinus Torvalds 	inet_initpeers();
15331da177e4SLinus Torvalds 
15341da177e4SLinus Torvalds #if defined(CONFIG_IP_MULTICAST) && defined(CONFIG_PROC_FS)
15351da177e4SLinus Torvalds 	igmp_mc_proc_init();
15361da177e4SLinus Torvalds #endif
15371da177e4SLinus Torvalds }
1538