xref: /openbmc/linux/net/ipv4/ip_output.c (revision aff65da0f1be5daec44231972b6b5fc45bfa7a58)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds  * INET		An implementation of the TCP/IP protocol suite for the LINUX
31da177e4SLinus Torvalds  *		operating system.  INET is implemented using the  BSD Socket
41da177e4SLinus Torvalds  *		interface as the means of communication with the user level.
51da177e4SLinus Torvalds  *
61da177e4SLinus Torvalds  *		The Internet Protocol (IP) output module.
71da177e4SLinus Torvalds  *
802c30a84SJesper Juhl  * Authors:	Ross Biro
91da177e4SLinus Torvalds  *		Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
101da177e4SLinus Torvalds  *		Donald Becker, <becker@super.org>
111da177e4SLinus Torvalds  *		Alan Cox, <Alan.Cox@linux.org>
121da177e4SLinus Torvalds  *		Richard Underwood
131da177e4SLinus Torvalds  *		Stefan Becker, <stefanb@yello.ping.de>
141da177e4SLinus Torvalds  *		Jorge Cwik, <jorge@laser.satlink.net>
151da177e4SLinus Torvalds  *		Arnt Gulbrandsen, <agulbra@nvg.unit.no>
161da177e4SLinus Torvalds  *		Hirokazu Takahashi, <taka@valinux.co.jp>
171da177e4SLinus Torvalds  *
181da177e4SLinus Torvalds  *	See ip_input.c for original log
191da177e4SLinus Torvalds  *
201da177e4SLinus Torvalds  *	Fixes:
211da177e4SLinus Torvalds  *		Alan Cox	:	Missing nonblock feature in ip_build_xmit.
221da177e4SLinus Torvalds  *		Mike Kilburn	:	htons() missing in ip_build_xmit.
231da177e4SLinus Torvalds  *		Bradford Johnson:	Fix faulty handling of some frames when
241da177e4SLinus Torvalds  *					no route is found.
251da177e4SLinus Torvalds  *		Alexander Demenshin:	Missing sk/skb free in ip_queue_xmit
261da177e4SLinus Torvalds  *					(in case if packet not accepted by
271da177e4SLinus Torvalds  *					output firewall rules)
281da177e4SLinus Torvalds  *		Mike McLagan	:	Routing by source
291da177e4SLinus Torvalds  *		Alexey Kuznetsov:	use new route cache
301da177e4SLinus Torvalds  *		Andi Kleen:		Fix broken PMTU recovery and remove
311da177e4SLinus Torvalds  *					some redundant tests.
321da177e4SLinus Torvalds  *	Vitaly E. Lavrov	:	Transparent proxy revived after year coma.
331da177e4SLinus Torvalds  *		Andi Kleen	: 	Replace ip_reply with ip_send_reply.
341da177e4SLinus Torvalds  *		Andi Kleen	:	Split fast and slow ip_build_xmit path
351da177e4SLinus Torvalds  *					for decreased register pressure on x86
361da177e4SLinus Torvalds  *					and more readibility.
371da177e4SLinus Torvalds  *		Marc Boucher	:	When call_out_firewall returns FW_QUEUE,
381da177e4SLinus Torvalds  *					silently drop skb instead of failing with -EPERM.
391da177e4SLinus Torvalds  *		Detlev Wengorz	:	Copy protocol for fragments.
401da177e4SLinus Torvalds  *		Hirokazu Takahashi:	HW checksumming for outgoing UDP
411da177e4SLinus Torvalds  *					datagrams.
421da177e4SLinus Torvalds  *		Hirokazu Takahashi:	sendfile() on UDP works now.
431da177e4SLinus Torvalds  */
441da177e4SLinus Torvalds 
451da177e4SLinus Torvalds #include <asm/uaccess.h>
461da177e4SLinus Torvalds #include <asm/system.h>
471da177e4SLinus Torvalds #include <linux/module.h>
481da177e4SLinus Torvalds #include <linux/types.h>
491da177e4SLinus Torvalds #include <linux/kernel.h>
501da177e4SLinus Torvalds #include <linux/mm.h>
511da177e4SLinus Torvalds #include <linux/string.h>
521da177e4SLinus Torvalds #include <linux/errno.h>
53a1f8e7f7SAl Viro #include <linux/highmem.h>
545a0e3ad6STejun Heo #include <linux/slab.h>
551da177e4SLinus Torvalds 
561da177e4SLinus Torvalds #include <linux/socket.h>
571da177e4SLinus Torvalds #include <linux/sockios.h>
581da177e4SLinus Torvalds #include <linux/in.h>
591da177e4SLinus Torvalds #include <linux/inet.h>
601da177e4SLinus Torvalds #include <linux/netdevice.h>
611da177e4SLinus Torvalds #include <linux/etherdevice.h>
621da177e4SLinus Torvalds #include <linux/proc_fs.h>
631da177e4SLinus Torvalds #include <linux/stat.h>
641da177e4SLinus Torvalds #include <linux/init.h>
651da177e4SLinus Torvalds 
661da177e4SLinus Torvalds #include <net/snmp.h>
671da177e4SLinus Torvalds #include <net/ip.h>
681da177e4SLinus Torvalds #include <net/protocol.h>
691da177e4SLinus Torvalds #include <net/route.h>
70cfacb057SPatrick McHardy #include <net/xfrm.h>
711da177e4SLinus Torvalds #include <linux/skbuff.h>
721da177e4SLinus Torvalds #include <net/sock.h>
731da177e4SLinus Torvalds #include <net/arp.h>
741da177e4SLinus Torvalds #include <net/icmp.h>
751da177e4SLinus Torvalds #include <net/checksum.h>
761da177e4SLinus Torvalds #include <net/inetpeer.h>
771da177e4SLinus Torvalds #include <linux/igmp.h>
781da177e4SLinus Torvalds #include <linux/netfilter_ipv4.h>
791da177e4SLinus Torvalds #include <linux/netfilter_bridge.h>
801da177e4SLinus Torvalds #include <linux/mroute.h>
811da177e4SLinus Torvalds #include <linux/netlink.h>
826cbb0df7SArnaldo Carvalho de Melo #include <linux/tcp.h>
831da177e4SLinus Torvalds 
84ab32ea5dSBrian Haley int sysctl_ip_default_ttl __read_mostly = IPDEFTTL;
85323e126fSDavid S. Miller EXPORT_SYMBOL(sysctl_ip_default_ttl);
861da177e4SLinus Torvalds 
871da177e4SLinus Torvalds /* Generate a checksum for an outgoing IP datagram. */
881da177e4SLinus Torvalds __inline__ void ip_send_check(struct iphdr *iph)
891da177e4SLinus Torvalds {
901da177e4SLinus Torvalds 	iph->check = 0;
911da177e4SLinus Torvalds 	iph->check = ip_fast_csum((unsigned char *)iph, iph->ihl);
921da177e4SLinus Torvalds }
934bc2f18bSEric Dumazet EXPORT_SYMBOL(ip_send_check);
941da177e4SLinus Torvalds 
95c439cb2eSHerbert Xu int __ip_local_out(struct sk_buff *skb)
96c439cb2eSHerbert Xu {
97c439cb2eSHerbert Xu 	struct iphdr *iph = ip_hdr(skb);
98c439cb2eSHerbert Xu 
99c439cb2eSHerbert Xu 	iph->tot_len = htons(skb->len);
100c439cb2eSHerbert Xu 	ip_send_check(iph);
1019bbc768aSJan Engelhardt 	return nf_hook(NFPROTO_IPV4, NF_INET_LOCAL_OUT, skb, NULL,
1029bbc768aSJan Engelhardt 		       skb_dst(skb)->dev, dst_output);
103c439cb2eSHerbert Xu }
104c439cb2eSHerbert Xu 
105c439cb2eSHerbert Xu int ip_local_out(struct sk_buff *skb)
106c439cb2eSHerbert Xu {
107c439cb2eSHerbert Xu 	int err;
108c439cb2eSHerbert Xu 
109c439cb2eSHerbert Xu 	err = __ip_local_out(skb);
110c439cb2eSHerbert Xu 	if (likely(err == 1))
111c439cb2eSHerbert Xu 		err = dst_output(skb);
112c439cb2eSHerbert Xu 
113c439cb2eSHerbert Xu 	return err;
114c439cb2eSHerbert Xu }
115c439cb2eSHerbert Xu EXPORT_SYMBOL_GPL(ip_local_out);
116c439cb2eSHerbert Xu 
1171da177e4SLinus Torvalds /* dev_loopback_xmit for use with netfilter. */
1181da177e4SLinus Torvalds static int ip_dev_loopback_xmit(struct sk_buff *newskb)
1191da177e4SLinus Torvalds {
120459a98edSArnaldo Carvalho de Melo 	skb_reset_mac_header(newskb);
121bbe735e4SArnaldo Carvalho de Melo 	__skb_pull(newskb, skb_network_offset(newskb));
1221da177e4SLinus Torvalds 	newskb->pkt_type = PACKET_LOOPBACK;
1231da177e4SLinus Torvalds 	newskb->ip_summed = CHECKSUM_UNNECESSARY;
124adf30907SEric Dumazet 	WARN_ON(!skb_dst(newskb));
125d52fbfc9SJulian Anastasov 	skb_dst_force(newskb);
126e30b38c2SEric Dumazet 	netif_rx_ni(newskb);
1271da177e4SLinus Torvalds 	return 0;
1281da177e4SLinus Torvalds }
1291da177e4SLinus Torvalds 
1301da177e4SLinus Torvalds static inline int ip_select_ttl(struct inet_sock *inet, struct dst_entry *dst)
1311da177e4SLinus Torvalds {
1321da177e4SLinus Torvalds 	int ttl = inet->uc_ttl;
1331da177e4SLinus Torvalds 
1341da177e4SLinus Torvalds 	if (ttl < 0)
135323e126fSDavid S. Miller 		ttl = ip4_dst_hoplimit(dst);
1361da177e4SLinus Torvalds 	return ttl;
1371da177e4SLinus Torvalds }
1381da177e4SLinus Torvalds 
1391da177e4SLinus Torvalds /*
1401da177e4SLinus Torvalds  *		Add an ip header to a skbuff and send it out.
1411da177e4SLinus Torvalds  *
1421da177e4SLinus Torvalds  */
1431da177e4SLinus Torvalds int ip_build_and_send_pkt(struct sk_buff *skb, struct sock *sk,
144f6d8bd05SEric Dumazet 			  __be32 saddr, __be32 daddr, struct ip_options_rcu *opt)
1451da177e4SLinus Torvalds {
1461da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
147511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
1481da177e4SLinus Torvalds 	struct iphdr *iph;
1491da177e4SLinus Torvalds 
1501da177e4SLinus Torvalds 	/* Build the IP header. */
151f6d8bd05SEric Dumazet 	skb_push(skb, sizeof(struct iphdr) + (opt ? opt->opt.optlen : 0));
1528856dfa3SArnaldo Carvalho de Melo 	skb_reset_network_header(skb);
153eddc9ec5SArnaldo Carvalho de Melo 	iph = ip_hdr(skb);
1541da177e4SLinus Torvalds 	iph->version  = 4;
1551da177e4SLinus Torvalds 	iph->ihl      = 5;
1561da177e4SLinus Torvalds 	iph->tos      = inet->tos;
157d8d1f30bSChangli Gao 	if (ip_dont_fragment(sk, &rt->dst))
1581da177e4SLinus Torvalds 		iph->frag_off = htons(IP_DF);
1591da177e4SLinus Torvalds 	else
1601da177e4SLinus Torvalds 		iph->frag_off = 0;
161d8d1f30bSChangli Gao 	iph->ttl      = ip_select_ttl(inet, &rt->dst);
162dd927a26SDavid S. Miller 	iph->daddr    = (opt && opt->opt.srr ? opt->opt.faddr : daddr);
163dd927a26SDavid S. Miller 	iph->saddr    = saddr;
1641da177e4SLinus Torvalds 	iph->protocol = sk->sk_protocol;
165d8d1f30bSChangli Gao 	ip_select_ident(iph, &rt->dst, sk);
1661da177e4SLinus Torvalds 
167f6d8bd05SEric Dumazet 	if (opt && opt->opt.optlen) {
168f6d8bd05SEric Dumazet 		iph->ihl += opt->opt.optlen>>2;
169f6d8bd05SEric Dumazet 		ip_options_build(skb, &opt->opt, daddr, rt, 0);
1701da177e4SLinus Torvalds 	}
1711da177e4SLinus Torvalds 
1721da177e4SLinus Torvalds 	skb->priority = sk->sk_priority;
1734a19ec58SLaszlo Attila Toth 	skb->mark = sk->sk_mark;
1741da177e4SLinus Torvalds 
1751da177e4SLinus Torvalds 	/* Send it out. */
176c439cb2eSHerbert Xu 	return ip_local_out(skb);
1771da177e4SLinus Torvalds }
178d8c97a94SArnaldo Carvalho de Melo EXPORT_SYMBOL_GPL(ip_build_and_send_pkt);
179d8c97a94SArnaldo Carvalho de Melo 
1801da177e4SLinus Torvalds static inline int ip_finish_output2(struct sk_buff *skb)
1811da177e4SLinus Torvalds {
182adf30907SEric Dumazet 	struct dst_entry *dst = skb_dst(skb);
18380787ebcSMitsuru Chinen 	struct rtable *rt = (struct rtable *)dst;
1841da177e4SLinus Torvalds 	struct net_device *dev = dst->dev;
185c2636b4dSChuck Lever 	unsigned int hh_len = LL_RESERVED_SPACE(dev);
186f6b72b62SDavid S. Miller 	struct neighbour *neigh;
1871da177e4SLinus Torvalds 
188edf391ffSNeil Horman 	if (rt->rt_type == RTN_MULTICAST) {
189edf391ffSNeil Horman 		IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUTMCAST, skb->len);
190edf391ffSNeil Horman 	} else if (rt->rt_type == RTN_BROADCAST)
191edf391ffSNeil Horman 		IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUTBCAST, skb->len);
19280787ebcSMitsuru Chinen 
1931da177e4SLinus Torvalds 	/* Be paranoid, rather than too clever. */
1943b04dddeSStephen Hemminger 	if (unlikely(skb_headroom(skb) < hh_len && dev->header_ops)) {
1951da177e4SLinus Torvalds 		struct sk_buff *skb2;
1961da177e4SLinus Torvalds 
1971da177e4SLinus Torvalds 		skb2 = skb_realloc_headroom(skb, LL_RESERVED_SPACE(dev));
1981da177e4SLinus Torvalds 		if (skb2 == NULL) {
1991da177e4SLinus Torvalds 			kfree_skb(skb);
2001da177e4SLinus Torvalds 			return -ENOMEM;
2011da177e4SLinus Torvalds 		}
2021da177e4SLinus Torvalds 		if (skb->sk)
2031da177e4SLinus Torvalds 			skb_set_owner_w(skb2, skb->sk);
2041da177e4SLinus Torvalds 		kfree_skb(skb);
2051da177e4SLinus Torvalds 		skb = skb2;
2061da177e4SLinus Torvalds 	}
2071da177e4SLinus Torvalds 
208f2c31e32SEric Dumazet 	rcu_read_lock();
20969cce1d1SDavid S. Miller 	neigh = dst_get_neighbour(dst);
210f2c31e32SEric Dumazet 	if (neigh) {
211f2c31e32SEric Dumazet 		int res = neigh_output(neigh, skb);
212f2c31e32SEric Dumazet 
213f2c31e32SEric Dumazet 		rcu_read_unlock();
214f2c31e32SEric Dumazet 		return res;
215f2c31e32SEric Dumazet 	}
216f2c31e32SEric Dumazet 	rcu_read_unlock();
21705e3aa09SDavid S. Miller 
2181da177e4SLinus Torvalds 	if (net_ratelimit())
2191da177e4SLinus Torvalds 		printk(KERN_DEBUG "ip_finish_output2: No header cache and no neighbour!\n");
2201da177e4SLinus Torvalds 	kfree_skb(skb);
2211da177e4SLinus Torvalds 	return -EINVAL;
2221da177e4SLinus Torvalds }
2231da177e4SLinus Torvalds 
224628a5c56SJohn Heffner static inline int ip_skb_dst_mtu(struct sk_buff *skb)
225628a5c56SJohn Heffner {
226628a5c56SJohn Heffner 	struct inet_sock *inet = skb->sk ? inet_sk(skb->sk) : NULL;
227628a5c56SJohn Heffner 
228628a5c56SJohn Heffner 	return (inet && inet->pmtudisc == IP_PMTUDISC_PROBE) ?
229adf30907SEric Dumazet 	       skb_dst(skb)->dev->mtu : dst_mtu(skb_dst(skb));
230628a5c56SJohn Heffner }
231628a5c56SJohn Heffner 
232861d0486SPatrick McHardy static int ip_finish_output(struct sk_buff *skb)
2331da177e4SLinus Torvalds {
2345c901daaSPatrick McHardy #if defined(CONFIG_NETFILTER) && defined(CONFIG_XFRM)
2355c901daaSPatrick McHardy 	/* Policy lookup after SNAT yielded a new policy */
236adf30907SEric Dumazet 	if (skb_dst(skb)->xfrm != NULL) {
23748d5cad8SPatrick McHardy 		IPCB(skb)->flags |= IPSKB_REROUTED;
23848d5cad8SPatrick McHardy 		return dst_output(skb);
23948d5cad8SPatrick McHardy 	}
2405c901daaSPatrick McHardy #endif
241628a5c56SJohn Heffner 	if (skb->len > ip_skb_dst_mtu(skb) && !skb_is_gso(skb))
2421bd9bef6SPatrick McHardy 		return ip_fragment(skb, ip_finish_output2);
2431bd9bef6SPatrick McHardy 	else
2441bd9bef6SPatrick McHardy 		return ip_finish_output2(skb);
2451da177e4SLinus Torvalds }
2461da177e4SLinus Torvalds 
2471da177e4SLinus Torvalds int ip_mc_output(struct sk_buff *skb)
2481da177e4SLinus Torvalds {
2491da177e4SLinus Torvalds 	struct sock *sk = skb->sk;
250511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
251d8d1f30bSChangli Gao 	struct net_device *dev = rt->dst.dev;
2521da177e4SLinus Torvalds 
2531da177e4SLinus Torvalds 	/*
2541da177e4SLinus Torvalds 	 *	If the indicated interface is up and running, send the packet.
2551da177e4SLinus Torvalds 	 */
256edf391ffSNeil Horman 	IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUT, skb->len);
2571da177e4SLinus Torvalds 
2581da177e4SLinus Torvalds 	skb->dev = dev;
2591da177e4SLinus Torvalds 	skb->protocol = htons(ETH_P_IP);
2601da177e4SLinus Torvalds 
2611da177e4SLinus Torvalds 	/*
2621da177e4SLinus Torvalds 	 *	Multicasts are looped back for other local users
2631da177e4SLinus Torvalds 	 */
2641da177e4SLinus Torvalds 
2651da177e4SLinus Torvalds 	if (rt->rt_flags&RTCF_MULTICAST) {
2667ad6848cSOctavian Purdila 		if (sk_mc_loop(sk)
2671da177e4SLinus Torvalds #ifdef CONFIG_IP_MROUTE
2681da177e4SLinus Torvalds 		/* Small optimization: do not loopback not local frames,
2691da177e4SLinus Torvalds 		   which returned after forwarding; they will be  dropped
2701da177e4SLinus Torvalds 		   by ip_mr_input in any case.
2711da177e4SLinus Torvalds 		   Note, that local frames are looped back to be delivered
2721da177e4SLinus Torvalds 		   to local recipients.
2731da177e4SLinus Torvalds 
2741da177e4SLinus Torvalds 		   This check is duplicated in ip_mr_input at the moment.
2751da177e4SLinus Torvalds 		 */
2769d4fb27dSJoe Perches 		    &&
2779d4fb27dSJoe Perches 		    ((rt->rt_flags & RTCF_LOCAL) ||
2789d4fb27dSJoe Perches 		     !(IPCB(skb)->flags & IPSKB_FORWARDED))
2791da177e4SLinus Torvalds #endif
2801da177e4SLinus Torvalds 		   ) {
2811da177e4SLinus Torvalds 			struct sk_buff *newskb = skb_clone(skb, GFP_ATOMIC);
2821da177e4SLinus Torvalds 			if (newskb)
2839bbc768aSJan Engelhardt 				NF_HOOK(NFPROTO_IPV4, NF_INET_POST_ROUTING,
2849bbc768aSJan Engelhardt 					newskb, NULL, newskb->dev,
2851da177e4SLinus Torvalds 					ip_dev_loopback_xmit);
2861da177e4SLinus Torvalds 		}
2871da177e4SLinus Torvalds 
2881da177e4SLinus Torvalds 		/* Multicasts with ttl 0 must not go beyond the host */
2891da177e4SLinus Torvalds 
290eddc9ec5SArnaldo Carvalho de Melo 		if (ip_hdr(skb)->ttl == 0) {
2911da177e4SLinus Torvalds 			kfree_skb(skb);
2921da177e4SLinus Torvalds 			return 0;
2931da177e4SLinus Torvalds 		}
2941da177e4SLinus Torvalds 	}
2951da177e4SLinus Torvalds 
2961da177e4SLinus Torvalds 	if (rt->rt_flags&RTCF_BROADCAST) {
2971da177e4SLinus Torvalds 		struct sk_buff *newskb = skb_clone(skb, GFP_ATOMIC);
2981da177e4SLinus Torvalds 		if (newskb)
2999bbc768aSJan Engelhardt 			NF_HOOK(NFPROTO_IPV4, NF_INET_POST_ROUTING, newskb,
3009bbc768aSJan Engelhardt 				NULL, newskb->dev, ip_dev_loopback_xmit);
3011da177e4SLinus Torvalds 	}
3021da177e4SLinus Torvalds 
3039bbc768aSJan Engelhardt 	return NF_HOOK_COND(NFPROTO_IPV4, NF_INET_POST_ROUTING, skb, NULL,
3049bbc768aSJan Engelhardt 			    skb->dev, ip_finish_output,
30548d5cad8SPatrick McHardy 			    !(IPCB(skb)->flags & IPSKB_REROUTED));
3061da177e4SLinus Torvalds }
3071da177e4SLinus Torvalds 
3081da177e4SLinus Torvalds int ip_output(struct sk_buff *skb)
3091da177e4SLinus Torvalds {
310adf30907SEric Dumazet 	struct net_device *dev = skb_dst(skb)->dev;
3111bd9bef6SPatrick McHardy 
312edf391ffSNeil Horman 	IP_UPD_PO_STATS(dev_net(dev), IPSTATS_MIB_OUT, skb->len);
3131da177e4SLinus Torvalds 
3141bd9bef6SPatrick McHardy 	skb->dev = dev;
3151bd9bef6SPatrick McHardy 	skb->protocol = htons(ETH_P_IP);
3161bd9bef6SPatrick McHardy 
3179bbc768aSJan Engelhardt 	return NF_HOOK_COND(NFPROTO_IPV4, NF_INET_POST_ROUTING, skb, NULL, dev,
31848d5cad8SPatrick McHardy 			    ip_finish_output,
31948d5cad8SPatrick McHardy 			    !(IPCB(skb)->flags & IPSKB_REROUTED));
3201da177e4SLinus Torvalds }
3211da177e4SLinus Torvalds 
322d9d8da80SDavid S. Miller int ip_queue_xmit(struct sk_buff *skb, struct flowi *fl)
3231da177e4SLinus Torvalds {
324e89862f4SDavid S. Miller 	struct sock *sk = skb->sk;
3251da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
326f6d8bd05SEric Dumazet 	struct ip_options_rcu *inet_opt;
327b57ae01aSDavid S. Miller 	struct flowi4 *fl4;
3281da177e4SLinus Torvalds 	struct rtable *rt;
3291da177e4SLinus Torvalds 	struct iphdr *iph;
330ab6e3febSEric Dumazet 	int res;
3311da177e4SLinus Torvalds 
3321da177e4SLinus Torvalds 	/* Skip all of this if the packet is already routed,
3331da177e4SLinus Torvalds 	 * f.e. by something like SCTP.
3341da177e4SLinus Torvalds 	 */
335ab6e3febSEric Dumazet 	rcu_read_lock();
336f6d8bd05SEric Dumazet 	inet_opt = rcu_dereference(inet->inet_opt);
337ea4fc0d6SDavid S. Miller 	fl4 = &fl->u.ip4;
338511c3f92SEric Dumazet 	rt = skb_rtable(skb);
3391da177e4SLinus Torvalds 	if (rt != NULL)
3401da177e4SLinus Torvalds 		goto packet_routed;
3411da177e4SLinus Torvalds 
3421da177e4SLinus Torvalds 	/* Make sure we can route this packet. */
3431da177e4SLinus Torvalds 	rt = (struct rtable *)__sk_dst_check(sk, 0);
3441da177e4SLinus Torvalds 	if (rt == NULL) {
3453ca3c68eSAl Viro 		__be32 daddr;
3461da177e4SLinus Torvalds 
3471da177e4SLinus Torvalds 		/* Use correct destination address if we have options. */
348c720c7e8SEric Dumazet 		daddr = inet->inet_daddr;
349f6d8bd05SEric Dumazet 		if (inet_opt && inet_opt->opt.srr)
350f6d8bd05SEric Dumazet 			daddr = inet_opt->opt.faddr;
3511da177e4SLinus Torvalds 
3521da177e4SLinus Torvalds 		/* If this fails, retransmit mechanism of transport layer will
3531da177e4SLinus Torvalds 		 * keep trying until route appears or the connection times
3541da177e4SLinus Torvalds 		 * itself out.
3551da177e4SLinus Torvalds 		 */
356b57ae01aSDavid S. Miller 		rt = ip_route_output_ports(sock_net(sk), fl4, sk,
35778fbfd8aSDavid S. Miller 					   daddr, inet->inet_saddr,
35878fbfd8aSDavid S. Miller 					   inet->inet_dport,
35978fbfd8aSDavid S. Miller 					   inet->inet_sport,
36078fbfd8aSDavid S. Miller 					   sk->sk_protocol,
36178fbfd8aSDavid S. Miller 					   RT_CONN_FLAGS(sk),
36278fbfd8aSDavid S. Miller 					   sk->sk_bound_dev_if);
363b23dd4feSDavid S. Miller 		if (IS_ERR(rt))
3641da177e4SLinus Torvalds 			goto no_route;
365d8d1f30bSChangli Gao 		sk_setup_caps(sk, &rt->dst);
3661da177e4SLinus Torvalds 	}
367d8d1f30bSChangli Gao 	skb_dst_set_noref(skb, &rt->dst);
3681da177e4SLinus Torvalds 
3691da177e4SLinus Torvalds packet_routed:
370ea4fc0d6SDavid S. Miller 	if (inet_opt && inet_opt->opt.is_strictroute && fl4->daddr != rt->rt_gateway)
3711da177e4SLinus Torvalds 		goto no_route;
3721da177e4SLinus Torvalds 
3731da177e4SLinus Torvalds 	/* OK, we know where to send it, allocate and build IP header. */
374f6d8bd05SEric Dumazet 	skb_push(skb, sizeof(struct iphdr) + (inet_opt ? inet_opt->opt.optlen : 0));
3758856dfa3SArnaldo Carvalho de Melo 	skb_reset_network_header(skb);
376eddc9ec5SArnaldo Carvalho de Melo 	iph = ip_hdr(skb);
377714e85beSAl Viro 	*((__be16 *)iph) = htons((4 << 12) | (5 << 8) | (inet->tos & 0xff));
378d8d1f30bSChangli Gao 	if (ip_dont_fragment(sk, &rt->dst) && !skb->local_df)
3791da177e4SLinus Torvalds 		iph->frag_off = htons(IP_DF);
3801da177e4SLinus Torvalds 	else
3811da177e4SLinus Torvalds 		iph->frag_off = 0;
382d8d1f30bSChangli Gao 	iph->ttl      = ip_select_ttl(inet, &rt->dst);
3831da177e4SLinus Torvalds 	iph->protocol = sk->sk_protocol;
384ea4fc0d6SDavid S. Miller 	iph->saddr    = fl4->saddr;
385ea4fc0d6SDavid S. Miller 	iph->daddr    = fl4->daddr;
3861da177e4SLinus Torvalds 	/* Transport layer set skb->h.foo itself. */
3871da177e4SLinus Torvalds 
388f6d8bd05SEric Dumazet 	if (inet_opt && inet_opt->opt.optlen) {
389f6d8bd05SEric Dumazet 		iph->ihl += inet_opt->opt.optlen >> 2;
390f6d8bd05SEric Dumazet 		ip_options_build(skb, &inet_opt->opt, inet->inet_daddr, rt, 0);
3911da177e4SLinus Torvalds 	}
3921da177e4SLinus Torvalds 
393d8d1f30bSChangli Gao 	ip_select_ident_more(iph, &rt->dst, sk,
3947967168cSHerbert Xu 			     (skb_shinfo(skb)->gso_segs ?: 1) - 1);
3951da177e4SLinus Torvalds 
3961da177e4SLinus Torvalds 	skb->priority = sk->sk_priority;
3974a19ec58SLaszlo Attila Toth 	skb->mark = sk->sk_mark;
3981da177e4SLinus Torvalds 
399ab6e3febSEric Dumazet 	res = ip_local_out(skb);
400ab6e3febSEric Dumazet 	rcu_read_unlock();
401ab6e3febSEric Dumazet 	return res;
4021da177e4SLinus Torvalds 
4031da177e4SLinus Torvalds no_route:
404ab6e3febSEric Dumazet 	rcu_read_unlock();
4055e38e270SPavel Emelyanov 	IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTNOROUTES);
4061da177e4SLinus Torvalds 	kfree_skb(skb);
4071da177e4SLinus Torvalds 	return -EHOSTUNREACH;
4081da177e4SLinus Torvalds }
4094bc2f18bSEric Dumazet EXPORT_SYMBOL(ip_queue_xmit);
4101da177e4SLinus Torvalds 
4111da177e4SLinus Torvalds 
4121da177e4SLinus Torvalds static void ip_copy_metadata(struct sk_buff *to, struct sk_buff *from)
4131da177e4SLinus Torvalds {
4141da177e4SLinus Torvalds 	to->pkt_type = from->pkt_type;
4151da177e4SLinus Torvalds 	to->priority = from->priority;
4161da177e4SLinus Torvalds 	to->protocol = from->protocol;
417adf30907SEric Dumazet 	skb_dst_drop(to);
418fe76cda3SEric Dumazet 	skb_dst_copy(to, from);
4191da177e4SLinus Torvalds 	to->dev = from->dev;
42082e91ffeSThomas Graf 	to->mark = from->mark;
4211da177e4SLinus Torvalds 
4221da177e4SLinus Torvalds 	/* Copy the flags to each fragment. */
4231da177e4SLinus Torvalds 	IPCB(to)->flags = IPCB(from)->flags;
4241da177e4SLinus Torvalds 
4251da177e4SLinus Torvalds #ifdef CONFIG_NET_SCHED
4261da177e4SLinus Torvalds 	to->tc_index = from->tc_index;
4271da177e4SLinus Torvalds #endif
428e7ac05f3SYasuyuki Kozakai 	nf_copy(to, from);
429ba9dda3aSJozsef Kadlecsik #if defined(CONFIG_NETFILTER_XT_TARGET_TRACE) || \
430ba9dda3aSJozsef Kadlecsik     defined(CONFIG_NETFILTER_XT_TARGET_TRACE_MODULE)
431ba9dda3aSJozsef Kadlecsik 	to->nf_trace = from->nf_trace;
432ba9dda3aSJozsef Kadlecsik #endif
433c98d80edSJulian Anastasov #if defined(CONFIG_IP_VS) || defined(CONFIG_IP_VS_MODULE)
434c98d80edSJulian Anastasov 	to->ipvs_property = from->ipvs_property;
435c98d80edSJulian Anastasov #endif
436984bc16cSJames Morris 	skb_copy_secmark(to, from);
4371da177e4SLinus Torvalds }
4381da177e4SLinus Torvalds 
4391da177e4SLinus Torvalds /*
4401da177e4SLinus Torvalds  *	This IP datagram is too large to be sent in one piece.  Break it up into
4411da177e4SLinus Torvalds  *	smaller pieces (each of size equal to IP header plus
4421da177e4SLinus Torvalds  *	a block of the data of the original IP data part) that will yet fit in a
4431da177e4SLinus Torvalds  *	single device frame, and queue such a frame for sending.
4441da177e4SLinus Torvalds  */
4451da177e4SLinus Torvalds 
4462e2f7aefSPatrick McHardy int ip_fragment(struct sk_buff *skb, int (*output)(struct sk_buff *))
4471da177e4SLinus Torvalds {
4481da177e4SLinus Torvalds 	struct iphdr *iph;
4491da177e4SLinus Torvalds 	int ptr;
4501da177e4SLinus Torvalds 	struct net_device *dev;
4511da177e4SLinus Torvalds 	struct sk_buff *skb2;
452c893b806SChangli Gao 	unsigned int mtu, hlen, left, len, ll_rs;
4531da177e4SLinus Torvalds 	int offset;
45476ab608dSAlexey Dobriyan 	__be16 not_last_frag;
455511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
4561da177e4SLinus Torvalds 	int err = 0;
4571da177e4SLinus Torvalds 
458d8d1f30bSChangli Gao 	dev = rt->dst.dev;
4591da177e4SLinus Torvalds 
4601da177e4SLinus Torvalds 	/*
4611da177e4SLinus Torvalds 	 *	Point into the IP datagram header.
4621da177e4SLinus Torvalds 	 */
4631da177e4SLinus Torvalds 
464eddc9ec5SArnaldo Carvalho de Melo 	iph = ip_hdr(skb);
4651da177e4SLinus Torvalds 
4661da177e4SLinus Torvalds 	if (unlikely((iph->frag_off & htons(IP_DF)) && !skb->local_df)) {
4675e38e270SPavel Emelyanov 		IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGFAILS);
4681da177e4SLinus Torvalds 		icmp_send(skb, ICMP_DEST_UNREACH, ICMP_FRAG_NEEDED,
469628a5c56SJohn Heffner 			  htonl(ip_skb_dst_mtu(skb)));
4701da177e4SLinus Torvalds 		kfree_skb(skb);
4711da177e4SLinus Torvalds 		return -EMSGSIZE;
4721da177e4SLinus Torvalds 	}
4731da177e4SLinus Torvalds 
4741da177e4SLinus Torvalds 	/*
4751da177e4SLinus Torvalds 	 *	Setup starting values.
4761da177e4SLinus Torvalds 	 */
4771da177e4SLinus Torvalds 
4781da177e4SLinus Torvalds 	hlen = iph->ihl * 4;
479d8d1f30bSChangli Gao 	mtu = dst_mtu(&rt->dst) - hlen;	/* Size of data space */
4806c79bf0fSBart De Schuymer #ifdef CONFIG_BRIDGE_NETFILTER
4816c79bf0fSBart De Schuymer 	if (skb->nf_bridge)
4826c79bf0fSBart De Schuymer 		mtu -= nf_bridge_mtu_reduction(skb);
4836c79bf0fSBart De Schuymer #endif
48489cee8b1SHerbert Xu 	IPCB(skb)->flags |= IPSKB_FRAG_COMPLETE;
4851da177e4SLinus Torvalds 
4861da177e4SLinus Torvalds 	/* When frag_list is given, use it. First, check its validity:
4871da177e4SLinus Torvalds 	 * some transformers could create wrong frag_list or break existing
4881da177e4SLinus Torvalds 	 * one, it is not prohibited. In this case fall back to copying.
4891da177e4SLinus Torvalds 	 *
4901da177e4SLinus Torvalds 	 * LATER: this step can be merged to real generation of fragments,
4911da177e4SLinus Torvalds 	 * we can switch to copy when see the first bad fragment.
4921da177e4SLinus Torvalds 	 */
49321dc3301SDavid S. Miller 	if (skb_has_frag_list(skb)) {
4943d13008eSEric Dumazet 		struct sk_buff *frag, *frag2;
4951da177e4SLinus Torvalds 		int first_len = skb_pagelen(skb);
4961da177e4SLinus Torvalds 
4971da177e4SLinus Torvalds 		if (first_len - hlen > mtu ||
4981da177e4SLinus Torvalds 		    ((first_len - hlen) & 7) ||
49956f8a75cSPaul Gortmaker 		    ip_is_fragment(iph) ||
5001da177e4SLinus Torvalds 		    skb_cloned(skb))
5011da177e4SLinus Torvalds 			goto slow_path;
5021da177e4SLinus Torvalds 
503d7fcf1a5SDavid S. Miller 		skb_walk_frags(skb, frag) {
5041da177e4SLinus Torvalds 			/* Correct geometry. */
5051da177e4SLinus Torvalds 			if (frag->len > mtu ||
5061da177e4SLinus Torvalds 			    ((frag->len & 7) && frag->next) ||
5071da177e4SLinus Torvalds 			    skb_headroom(frag) < hlen)
5083d13008eSEric Dumazet 				goto slow_path_clean;
5091da177e4SLinus Torvalds 
5101da177e4SLinus Torvalds 			/* Partially cloned skb? */
5111da177e4SLinus Torvalds 			if (skb_shared(frag))
5123d13008eSEric Dumazet 				goto slow_path_clean;
5132fdba6b0SHerbert Xu 
5142fdba6b0SHerbert Xu 			BUG_ON(frag->sk);
5152fdba6b0SHerbert Xu 			if (skb->sk) {
5162fdba6b0SHerbert Xu 				frag->sk = skb->sk;
5172fdba6b0SHerbert Xu 				frag->destructor = sock_wfree;
5182fdba6b0SHerbert Xu 			}
5193d13008eSEric Dumazet 			skb->truesize -= frag->truesize;
5201da177e4SLinus Torvalds 		}
5211da177e4SLinus Torvalds 
5221da177e4SLinus Torvalds 		/* Everything is OK. Generate! */
5231da177e4SLinus Torvalds 
5241da177e4SLinus Torvalds 		err = 0;
5251da177e4SLinus Torvalds 		offset = 0;
5261da177e4SLinus Torvalds 		frag = skb_shinfo(skb)->frag_list;
527d7fcf1a5SDavid S. Miller 		skb_frag_list_init(skb);
5281da177e4SLinus Torvalds 		skb->data_len = first_len - skb_headlen(skb);
5291da177e4SLinus Torvalds 		skb->len = first_len;
5301da177e4SLinus Torvalds 		iph->tot_len = htons(first_len);
5311da177e4SLinus Torvalds 		iph->frag_off = htons(IP_MF);
5321da177e4SLinus Torvalds 		ip_send_check(iph);
5331da177e4SLinus Torvalds 
5341da177e4SLinus Torvalds 		for (;;) {
5351da177e4SLinus Torvalds 			/* Prepare header of the next frame,
5361da177e4SLinus Torvalds 			 * before previous one went down. */
5371da177e4SLinus Torvalds 			if (frag) {
5381da177e4SLinus Torvalds 				frag->ip_summed = CHECKSUM_NONE;
539badff6d0SArnaldo Carvalho de Melo 				skb_reset_transport_header(frag);
540e2d1bca7SArnaldo Carvalho de Melo 				__skb_push(frag, hlen);
541e2d1bca7SArnaldo Carvalho de Melo 				skb_reset_network_header(frag);
542d56f90a7SArnaldo Carvalho de Melo 				memcpy(skb_network_header(frag), iph, hlen);
543eddc9ec5SArnaldo Carvalho de Melo 				iph = ip_hdr(frag);
5441da177e4SLinus Torvalds 				iph->tot_len = htons(frag->len);
5451da177e4SLinus Torvalds 				ip_copy_metadata(frag, skb);
5461da177e4SLinus Torvalds 				if (offset == 0)
5471da177e4SLinus Torvalds 					ip_options_fragment(frag);
5481da177e4SLinus Torvalds 				offset += skb->len - hlen;
5491da177e4SLinus Torvalds 				iph->frag_off = htons(offset>>3);
5501da177e4SLinus Torvalds 				if (frag->next != NULL)
5511da177e4SLinus Torvalds 					iph->frag_off |= htons(IP_MF);
5521da177e4SLinus Torvalds 				/* Ready, complete checksum */
5531da177e4SLinus Torvalds 				ip_send_check(iph);
5541da177e4SLinus Torvalds 			}
5551da177e4SLinus Torvalds 
5561da177e4SLinus Torvalds 			err = output(skb);
5571da177e4SLinus Torvalds 
558dafee490SWei Dong 			if (!err)
5595e38e270SPavel Emelyanov 				IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGCREATES);
5601da177e4SLinus Torvalds 			if (err || !frag)
5611da177e4SLinus Torvalds 				break;
5621da177e4SLinus Torvalds 
5631da177e4SLinus Torvalds 			skb = frag;
5641da177e4SLinus Torvalds 			frag = skb->next;
5651da177e4SLinus Torvalds 			skb->next = NULL;
5661da177e4SLinus Torvalds 		}
5671da177e4SLinus Torvalds 
5681da177e4SLinus Torvalds 		if (err == 0) {
5695e38e270SPavel Emelyanov 			IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGOKS);
5701da177e4SLinus Torvalds 			return 0;
5711da177e4SLinus Torvalds 		}
5721da177e4SLinus Torvalds 
5731da177e4SLinus Torvalds 		while (frag) {
5741da177e4SLinus Torvalds 			skb = frag->next;
5751da177e4SLinus Torvalds 			kfree_skb(frag);
5761da177e4SLinus Torvalds 			frag = skb;
5771da177e4SLinus Torvalds 		}
5785e38e270SPavel Emelyanov 		IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGFAILS);
5791da177e4SLinus Torvalds 		return err;
5803d13008eSEric Dumazet 
5813d13008eSEric Dumazet slow_path_clean:
5823d13008eSEric Dumazet 		skb_walk_frags(skb, frag2) {
5833d13008eSEric Dumazet 			if (frag2 == frag)
5843d13008eSEric Dumazet 				break;
5853d13008eSEric Dumazet 			frag2->sk = NULL;
5863d13008eSEric Dumazet 			frag2->destructor = NULL;
5873d13008eSEric Dumazet 			skb->truesize += frag2->truesize;
5883d13008eSEric Dumazet 		}
5891da177e4SLinus Torvalds 	}
5901da177e4SLinus Torvalds 
5911da177e4SLinus Torvalds slow_path:
5921da177e4SLinus Torvalds 	left = skb->len - hlen;		/* Space per frame */
59349085bd7SGeorge Kadianakis 	ptr = hlen;		/* Where to start from */
5941da177e4SLinus Torvalds 
5951da177e4SLinus Torvalds 	/* for bridged IP traffic encapsulated inside f.e. a vlan header,
5969bcfcaf5SStephen Hemminger 	 * we need to make room for the encapsulating header
5979bcfcaf5SStephen Hemminger 	 */
598c893b806SChangli Gao 	ll_rs = LL_RESERVED_SPACE_EXTRA(rt->dst.dev, nf_bridge_pad(skb));
5999bcfcaf5SStephen Hemminger 
6001da177e4SLinus Torvalds 	/*
6011da177e4SLinus Torvalds 	 *	Fragment the datagram.
6021da177e4SLinus Torvalds 	 */
6031da177e4SLinus Torvalds 
6041da177e4SLinus Torvalds 	offset = (ntohs(iph->frag_off) & IP_OFFSET) << 3;
6051da177e4SLinus Torvalds 	not_last_frag = iph->frag_off & htons(IP_MF);
6061da177e4SLinus Torvalds 
6071da177e4SLinus Torvalds 	/*
6081da177e4SLinus Torvalds 	 *	Keep copying data until we run out.
6091da177e4SLinus Torvalds 	 */
6101da177e4SLinus Torvalds 
6111da177e4SLinus Torvalds 	while (left > 0) {
6121da177e4SLinus Torvalds 		len = left;
6131da177e4SLinus Torvalds 		/* IF: it doesn't fit, use 'mtu' - the data space left */
6141da177e4SLinus Torvalds 		if (len > mtu)
6151da177e4SLinus Torvalds 			len = mtu;
6161da177e4SLinus Torvalds 		/* IF: we are not sending up to and including the packet end
6171da177e4SLinus Torvalds 		   then align the next start on an eight byte boundary */
6181da177e4SLinus Torvalds 		if (len < left)	{
6191da177e4SLinus Torvalds 			len &= ~7;
6201da177e4SLinus Torvalds 		}
6211da177e4SLinus Torvalds 		/*
6221da177e4SLinus Torvalds 		 *	Allocate buffer.
6231da177e4SLinus Torvalds 		 */
6241da177e4SLinus Torvalds 
6251da177e4SLinus Torvalds 		if ((skb2 = alloc_skb(len+hlen+ll_rs, GFP_ATOMIC)) == NULL) {
62664ce2073SPatrick McHardy 			NETDEBUG(KERN_INFO "IP: frag: no memory for new fragment!\n");
6271da177e4SLinus Torvalds 			err = -ENOMEM;
6281da177e4SLinus Torvalds 			goto fail;
6291da177e4SLinus Torvalds 		}
6301da177e4SLinus Torvalds 
6311da177e4SLinus Torvalds 		/*
6321da177e4SLinus Torvalds 		 *	Set up data on packet
6331da177e4SLinus Torvalds 		 */
6341da177e4SLinus Torvalds 
6351da177e4SLinus Torvalds 		ip_copy_metadata(skb2, skb);
6361da177e4SLinus Torvalds 		skb_reserve(skb2, ll_rs);
6371da177e4SLinus Torvalds 		skb_put(skb2, len + hlen);
638c1d2bbe1SArnaldo Carvalho de Melo 		skb_reset_network_header(skb2);
639b0e380b1SArnaldo Carvalho de Melo 		skb2->transport_header = skb2->network_header + hlen;
6401da177e4SLinus Torvalds 
6411da177e4SLinus Torvalds 		/*
6421da177e4SLinus Torvalds 		 *	Charge the memory for the fragment to any owner
6431da177e4SLinus Torvalds 		 *	it might possess
6441da177e4SLinus Torvalds 		 */
6451da177e4SLinus Torvalds 
6461da177e4SLinus Torvalds 		if (skb->sk)
6471da177e4SLinus Torvalds 			skb_set_owner_w(skb2, skb->sk);
6481da177e4SLinus Torvalds 
6491da177e4SLinus Torvalds 		/*
6501da177e4SLinus Torvalds 		 *	Copy the packet header into the new buffer.
6511da177e4SLinus Torvalds 		 */
6521da177e4SLinus Torvalds 
653d626f62bSArnaldo Carvalho de Melo 		skb_copy_from_linear_data(skb, skb_network_header(skb2), hlen);
6541da177e4SLinus Torvalds 
6551da177e4SLinus Torvalds 		/*
6561da177e4SLinus Torvalds 		 *	Copy a block of the IP datagram.
6571da177e4SLinus Torvalds 		 */
658bff9b61cSArnaldo Carvalho de Melo 		if (skb_copy_bits(skb, ptr, skb_transport_header(skb2), len))
6591da177e4SLinus Torvalds 			BUG();
6601da177e4SLinus Torvalds 		left -= len;
6611da177e4SLinus Torvalds 
6621da177e4SLinus Torvalds 		/*
6631da177e4SLinus Torvalds 		 *	Fill in the new header fields.
6641da177e4SLinus Torvalds 		 */
665eddc9ec5SArnaldo Carvalho de Melo 		iph = ip_hdr(skb2);
6661da177e4SLinus Torvalds 		iph->frag_off = htons((offset >> 3));
6671da177e4SLinus Torvalds 
6681da177e4SLinus Torvalds 		/* ANK: dirty, but effective trick. Upgrade options only if
6691da177e4SLinus Torvalds 		 * the segment to be fragmented was THE FIRST (otherwise,
6701da177e4SLinus Torvalds 		 * options are already fixed) and make it ONCE
6711da177e4SLinus Torvalds 		 * on the initial skb, so that all the following fragments
6721da177e4SLinus Torvalds 		 * will inherit fixed options.
6731da177e4SLinus Torvalds 		 */
6741da177e4SLinus Torvalds 		if (offset == 0)
6751da177e4SLinus Torvalds 			ip_options_fragment(skb);
6761da177e4SLinus Torvalds 
6771da177e4SLinus Torvalds 		/*
6781da177e4SLinus Torvalds 		 *	Added AC : If we are fragmenting a fragment that's not the
6791da177e4SLinus Torvalds 		 *		   last fragment then keep MF on each bit
6801da177e4SLinus Torvalds 		 */
6811da177e4SLinus Torvalds 		if (left > 0 || not_last_frag)
6821da177e4SLinus Torvalds 			iph->frag_off |= htons(IP_MF);
6831da177e4SLinus Torvalds 		ptr += len;
6841da177e4SLinus Torvalds 		offset += len;
6851da177e4SLinus Torvalds 
6861da177e4SLinus Torvalds 		/*
6871da177e4SLinus Torvalds 		 *	Put this fragment into the sending queue.
6881da177e4SLinus Torvalds 		 */
6891da177e4SLinus Torvalds 		iph->tot_len = htons(len + hlen);
6901da177e4SLinus Torvalds 
6911da177e4SLinus Torvalds 		ip_send_check(iph);
6921da177e4SLinus Torvalds 
6931da177e4SLinus Torvalds 		err = output(skb2);
6941da177e4SLinus Torvalds 		if (err)
6951da177e4SLinus Torvalds 			goto fail;
696dafee490SWei Dong 
6975e38e270SPavel Emelyanov 		IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGCREATES);
6981da177e4SLinus Torvalds 	}
6991da177e4SLinus Torvalds 	kfree_skb(skb);
7005e38e270SPavel Emelyanov 	IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGOKS);
7011da177e4SLinus Torvalds 	return err;
7021da177e4SLinus Torvalds 
7031da177e4SLinus Torvalds fail:
7041da177e4SLinus Torvalds 	kfree_skb(skb);
7055e38e270SPavel Emelyanov 	IP_INC_STATS(dev_net(dev), IPSTATS_MIB_FRAGFAILS);
7061da177e4SLinus Torvalds 	return err;
7071da177e4SLinus Torvalds }
7082e2f7aefSPatrick McHardy EXPORT_SYMBOL(ip_fragment);
7092e2f7aefSPatrick McHardy 
7101da177e4SLinus Torvalds int
7111da177e4SLinus Torvalds ip_generic_getfrag(void *from, char *to, int offset, int len, int odd, struct sk_buff *skb)
7121da177e4SLinus Torvalds {
7131da177e4SLinus Torvalds 	struct iovec *iov = from;
7141da177e4SLinus Torvalds 
71584fa7933SPatrick McHardy 	if (skb->ip_summed == CHECKSUM_PARTIAL) {
7161da177e4SLinus Torvalds 		if (memcpy_fromiovecend(to, iov, offset, len) < 0)
7171da177e4SLinus Torvalds 			return -EFAULT;
7181da177e4SLinus Torvalds 	} else {
71944bb9363SAl Viro 		__wsum csum = 0;
7201da177e4SLinus Torvalds 		if (csum_partial_copy_fromiovecend(to, iov, offset, len, &csum) < 0)
7211da177e4SLinus Torvalds 			return -EFAULT;
7221da177e4SLinus Torvalds 		skb->csum = csum_block_add(skb->csum, csum, odd);
7231da177e4SLinus Torvalds 	}
7241da177e4SLinus Torvalds 	return 0;
7251da177e4SLinus Torvalds }
7264bc2f18bSEric Dumazet EXPORT_SYMBOL(ip_generic_getfrag);
7271da177e4SLinus Torvalds 
72844bb9363SAl Viro static inline __wsum
7291da177e4SLinus Torvalds csum_page(struct page *page, int offset, int copy)
7301da177e4SLinus Torvalds {
7311da177e4SLinus Torvalds 	char *kaddr;
73244bb9363SAl Viro 	__wsum csum;
7331da177e4SLinus Torvalds 	kaddr = kmap(page);
7341da177e4SLinus Torvalds 	csum = csum_partial(kaddr + offset, copy, 0);
7351da177e4SLinus Torvalds 	kunmap(page);
7361da177e4SLinus Torvalds 	return csum;
7371da177e4SLinus Torvalds }
7381da177e4SLinus Torvalds 
7394b30b1c6SAdrian Bunk static inline int ip_ufo_append_data(struct sock *sk,
7401470ddf7SHerbert Xu 			struct sk_buff_head *queue,
741e89e9cf5SAnanda Raju 			int getfrag(void *from, char *to, int offset, int len,
742e89e9cf5SAnanda Raju 			       int odd, struct sk_buff *skb),
743e89e9cf5SAnanda Raju 			void *from, int length, int hh_len, int fragheaderlen,
744d9be4f7aSBill Sommerfeld 			int transhdrlen, int maxfraglen, unsigned int flags)
745e89e9cf5SAnanda Raju {
746e89e9cf5SAnanda Raju 	struct sk_buff *skb;
747e89e9cf5SAnanda Raju 	int err;
748e89e9cf5SAnanda Raju 
749e89e9cf5SAnanda Raju 	/* There is support for UDP fragmentation offload by network
750e89e9cf5SAnanda Raju 	 * device, so create one single skb packet containing complete
751e89e9cf5SAnanda Raju 	 * udp datagram
752e89e9cf5SAnanda Raju 	 */
7531470ddf7SHerbert Xu 	if ((skb = skb_peek_tail(queue)) == NULL) {
754e89e9cf5SAnanda Raju 		skb = sock_alloc_send_skb(sk,
755e89e9cf5SAnanda Raju 			hh_len + fragheaderlen + transhdrlen + 20,
756e89e9cf5SAnanda Raju 			(flags & MSG_DONTWAIT), &err);
757e89e9cf5SAnanda Raju 
758e89e9cf5SAnanda Raju 		if (skb == NULL)
759e89e9cf5SAnanda Raju 			return err;
760e89e9cf5SAnanda Raju 
761e89e9cf5SAnanda Raju 		/* reserve space for Hardware header */
762e89e9cf5SAnanda Raju 		skb_reserve(skb, hh_len);
763e89e9cf5SAnanda Raju 
764e89e9cf5SAnanda Raju 		/* create space for UDP/IP header */
765e89e9cf5SAnanda Raju 		skb_put(skb, fragheaderlen + transhdrlen);
766e89e9cf5SAnanda Raju 
767e89e9cf5SAnanda Raju 		/* initialize network header pointer */
768c1d2bbe1SArnaldo Carvalho de Melo 		skb_reset_network_header(skb);
769e89e9cf5SAnanda Raju 
770e89e9cf5SAnanda Raju 		/* initialize protocol header pointer */
771b0e380b1SArnaldo Carvalho de Melo 		skb->transport_header = skb->network_header + fragheaderlen;
772e89e9cf5SAnanda Raju 
77384fa7933SPatrick McHardy 		skb->ip_summed = CHECKSUM_PARTIAL;
774e89e9cf5SAnanda Raju 		skb->csum = 0;
775e89e9cf5SAnanda Raju 
776e89e9cf5SAnanda Raju 		/* specify the length of each IP datagram fragment */
777d9be4f7aSBill Sommerfeld 		skb_shinfo(skb)->gso_size = maxfraglen - fragheaderlen;
778f83ef8c0SHerbert Xu 		skb_shinfo(skb)->gso_type = SKB_GSO_UDP;
7791470ddf7SHerbert Xu 		__skb_queue_tail(queue, skb);
780e89e9cf5SAnanda Raju 	}
781be9164e7SKostya B 
782be9164e7SKostya B 	return skb_append_datato_frags(sk, skb, getfrag, from,
783be9164e7SKostya B 				       (length - transhdrlen));
784e89e9cf5SAnanda Raju }
785e89e9cf5SAnanda Raju 
786f5fca608SDavid S. Miller static int __ip_append_data(struct sock *sk,
787f5fca608SDavid S. Miller 			    struct flowi4 *fl4,
788f5fca608SDavid S. Miller 			    struct sk_buff_head *queue,
7891470ddf7SHerbert Xu 			    struct inet_cork *cork,
7901470ddf7SHerbert Xu 			    int getfrag(void *from, char *to, int offset,
7911470ddf7SHerbert Xu 					int len, int odd, struct sk_buff *skb),
7921da177e4SLinus Torvalds 			    void *from, int length, int transhdrlen,
7931da177e4SLinus Torvalds 			    unsigned int flags)
7941da177e4SLinus Torvalds {
7951da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
7961da177e4SLinus Torvalds 	struct sk_buff *skb;
7971da177e4SLinus Torvalds 
79807df5294SHerbert Xu 	struct ip_options *opt = cork->opt;
7991da177e4SLinus Torvalds 	int hh_len;
8001da177e4SLinus Torvalds 	int exthdrlen;
8011da177e4SLinus Torvalds 	int mtu;
8021da177e4SLinus Torvalds 	int copy;
8031da177e4SLinus Torvalds 	int err;
8041da177e4SLinus Torvalds 	int offset = 0;
8051da177e4SLinus Torvalds 	unsigned int maxfraglen, fragheaderlen;
8061da177e4SLinus Torvalds 	int csummode = CHECKSUM_NONE;
8071470ddf7SHerbert Xu 	struct rtable *rt = (struct rtable *)cork->dst;
8081da177e4SLinus Torvalds 
80996d7303eSSteffen Klassert 	skb = skb_peek_tail(queue);
81096d7303eSSteffen Klassert 
81196d7303eSSteffen Klassert 	exthdrlen = !skb ? rt->dst.header_len : 0;
81207df5294SHerbert Xu 	mtu = cork->fragsize;
8131470ddf7SHerbert Xu 
814d8d1f30bSChangli Gao 	hh_len = LL_RESERVED_SPACE(rt->dst.dev);
8151da177e4SLinus Torvalds 
8161da177e4SLinus Torvalds 	fragheaderlen = sizeof(struct iphdr) + (opt ? opt->optlen : 0);
8171da177e4SLinus Torvalds 	maxfraglen = ((mtu - fragheaderlen) & ~7) + fragheaderlen;
8181da177e4SLinus Torvalds 
8191470ddf7SHerbert Xu 	if (cork->length + length > 0xFFFF - fragheaderlen) {
820f5fca608SDavid S. Miller 		ip_local_error(sk, EMSGSIZE, fl4->daddr, inet->inet_dport,
821c720c7e8SEric Dumazet 			       mtu-exthdrlen);
8221da177e4SLinus Torvalds 		return -EMSGSIZE;
8231da177e4SLinus Torvalds 	}
8241da177e4SLinus Torvalds 
8251da177e4SLinus Torvalds 	/*
8261da177e4SLinus Torvalds 	 * transhdrlen > 0 means that this is the first fragment and we wish
8271da177e4SLinus Torvalds 	 * it won't be fragmented in the future.
8281da177e4SLinus Torvalds 	 */
8291da177e4SLinus Torvalds 	if (transhdrlen &&
8301da177e4SLinus Torvalds 	    length + fragheaderlen <= mtu &&
831d8d1f30bSChangli Gao 	    rt->dst.dev->features & NETIF_F_V4_CSUM &&
8321da177e4SLinus Torvalds 	    !exthdrlen)
83384fa7933SPatrick McHardy 		csummode = CHECKSUM_PARTIAL;
8341da177e4SLinus Torvalds 
8351470ddf7SHerbert Xu 	cork->length += length;
83626cde9f7SHerbert Xu 	if (((length > mtu) || (skb && skb_is_gso(skb))) &&
837be9164e7SKostya B 	    (sk->sk_protocol == IPPROTO_UDP) &&
838c146066aSSteffen Klassert 	    (rt->dst.dev->features & NETIF_F_UFO) && !rt->dst.header_len) {
8391470ddf7SHerbert Xu 		err = ip_ufo_append_data(sk, queue, getfrag, from, length,
8401470ddf7SHerbert Xu 					 hh_len, fragheaderlen, transhdrlen,
841d9be4f7aSBill Sommerfeld 					 maxfraglen, flags);
842baa829d8SPatrick McHardy 		if (err)
843e89e9cf5SAnanda Raju 			goto error;
844e89e9cf5SAnanda Raju 		return 0;
845e89e9cf5SAnanda Raju 	}
8461da177e4SLinus Torvalds 
8471da177e4SLinus Torvalds 	/* So, what's going on in the loop below?
8481da177e4SLinus Torvalds 	 *
8491da177e4SLinus Torvalds 	 * We use calculated fragment length to generate chained skb,
8501da177e4SLinus Torvalds 	 * each of segments is IP fragment ready for sending to network after
8511da177e4SLinus Torvalds 	 * adding appropriate IP header.
8521da177e4SLinus Torvalds 	 */
8531da177e4SLinus Torvalds 
85426cde9f7SHerbert Xu 	if (!skb)
8551da177e4SLinus Torvalds 		goto alloc_new_skb;
8561da177e4SLinus Torvalds 
8571da177e4SLinus Torvalds 	while (length > 0) {
8581da177e4SLinus Torvalds 		/* Check if the remaining data fits into current packet. */
8591da177e4SLinus Torvalds 		copy = mtu - skb->len;
8601da177e4SLinus Torvalds 		if (copy < length)
8611da177e4SLinus Torvalds 			copy = maxfraglen - skb->len;
8621da177e4SLinus Torvalds 		if (copy <= 0) {
8631da177e4SLinus Torvalds 			char *data;
8641da177e4SLinus Torvalds 			unsigned int datalen;
8651da177e4SLinus Torvalds 			unsigned int fraglen;
8661da177e4SLinus Torvalds 			unsigned int fraggap;
8671da177e4SLinus Torvalds 			unsigned int alloclen;
8681da177e4SLinus Torvalds 			struct sk_buff *skb_prev;
8691da177e4SLinus Torvalds alloc_new_skb:
8701da177e4SLinus Torvalds 			skb_prev = skb;
8711da177e4SLinus Torvalds 			if (skb_prev)
8721da177e4SLinus Torvalds 				fraggap = skb_prev->len - maxfraglen;
8731da177e4SLinus Torvalds 			else
8741da177e4SLinus Torvalds 				fraggap = 0;
8751da177e4SLinus Torvalds 
8761da177e4SLinus Torvalds 			/*
8771da177e4SLinus Torvalds 			 * If remaining data exceeds the mtu,
8781da177e4SLinus Torvalds 			 * we know we need more fragment(s).
8791da177e4SLinus Torvalds 			 */
8801da177e4SLinus Torvalds 			datalen = length + fraggap;
8811da177e4SLinus Torvalds 			if (datalen > mtu - fragheaderlen)
8821da177e4SLinus Torvalds 				datalen = maxfraglen - fragheaderlen;
8831da177e4SLinus Torvalds 			fraglen = datalen + fragheaderlen;
8841da177e4SLinus Torvalds 
8851da177e4SLinus Torvalds 			if ((flags & MSG_MORE) &&
886d8d1f30bSChangli Gao 			    !(rt->dst.dev->features&NETIF_F_SG))
8871da177e4SLinus Torvalds 				alloclen = mtu;
8881da177e4SLinus Torvalds 			else
88959104f06SEric Dumazet 				alloclen = fraglen;
8901da177e4SLinus Torvalds 
891353e5c9aSSteffen Klassert 			alloclen += exthdrlen;
892353e5c9aSSteffen Klassert 
8931da177e4SLinus Torvalds 			/* The last fragment gets additional space at tail.
8941da177e4SLinus Torvalds 			 * Note, with MSG_MORE we overallocate on fragments,
8951da177e4SLinus Torvalds 			 * because we have no idea what fragment will be
8961da177e4SLinus Torvalds 			 * the last.
8971da177e4SLinus Torvalds 			 */
89833f99dc7SSteffen Klassert 			if (datalen == length + fraggap)
899d8d1f30bSChangli Gao 				alloclen += rt->dst.trailer_len;
90033f99dc7SSteffen Klassert 
9011da177e4SLinus Torvalds 			if (transhdrlen) {
9021da177e4SLinus Torvalds 				skb = sock_alloc_send_skb(sk,
9031da177e4SLinus Torvalds 						alloclen + hh_len + 15,
9041da177e4SLinus Torvalds 						(flags & MSG_DONTWAIT), &err);
9051da177e4SLinus Torvalds 			} else {
9061da177e4SLinus Torvalds 				skb = NULL;
9071da177e4SLinus Torvalds 				if (atomic_read(&sk->sk_wmem_alloc) <=
9081da177e4SLinus Torvalds 				    2 * sk->sk_sndbuf)
9091da177e4SLinus Torvalds 					skb = sock_wmalloc(sk,
9101da177e4SLinus Torvalds 							   alloclen + hh_len + 15, 1,
9111da177e4SLinus Torvalds 							   sk->sk_allocation);
9121da177e4SLinus Torvalds 				if (unlikely(skb == NULL))
9131da177e4SLinus Torvalds 					err = -ENOBUFS;
91451f31cabSPatrick Ohly 				else
91551f31cabSPatrick Ohly 					/* only the initial fragment is
91651f31cabSPatrick Ohly 					   time stamped */
9171470ddf7SHerbert Xu 					cork->tx_flags = 0;
9181da177e4SLinus Torvalds 			}
9191da177e4SLinus Torvalds 			if (skb == NULL)
9201da177e4SLinus Torvalds 				goto error;
9211da177e4SLinus Torvalds 
9221da177e4SLinus Torvalds 			/*
9231da177e4SLinus Torvalds 			 *	Fill in the control structures
9241da177e4SLinus Torvalds 			 */
9251da177e4SLinus Torvalds 			skb->ip_summed = csummode;
9261da177e4SLinus Torvalds 			skb->csum = 0;
9271da177e4SLinus Torvalds 			skb_reserve(skb, hh_len);
9281470ddf7SHerbert Xu 			skb_shinfo(skb)->tx_flags = cork->tx_flags;
9291da177e4SLinus Torvalds 
9301da177e4SLinus Torvalds 			/*
9311da177e4SLinus Torvalds 			 *	Find where to start putting bytes.
9321da177e4SLinus Torvalds 			 */
933353e5c9aSSteffen Klassert 			data = skb_put(skb, fraglen + exthdrlen);
934c14d2450SArnaldo Carvalho de Melo 			skb_set_network_header(skb, exthdrlen);
935b0e380b1SArnaldo Carvalho de Melo 			skb->transport_header = (skb->network_header +
936b0e380b1SArnaldo Carvalho de Melo 						 fragheaderlen);
937353e5c9aSSteffen Klassert 			data += fragheaderlen + exthdrlen;
9381da177e4SLinus Torvalds 
9391da177e4SLinus Torvalds 			if (fraggap) {
9401da177e4SLinus Torvalds 				skb->csum = skb_copy_and_csum_bits(
9411da177e4SLinus Torvalds 					skb_prev, maxfraglen,
9421da177e4SLinus Torvalds 					data + transhdrlen, fraggap, 0);
9431da177e4SLinus Torvalds 				skb_prev->csum = csum_sub(skb_prev->csum,
9441da177e4SLinus Torvalds 							  skb->csum);
9451da177e4SLinus Torvalds 				data += fraggap;
946e9fa4f7bSHerbert Xu 				pskb_trim_unique(skb_prev, maxfraglen);
9471da177e4SLinus Torvalds 			}
9481da177e4SLinus Torvalds 
9491da177e4SLinus Torvalds 			copy = datalen - transhdrlen - fraggap;
9501da177e4SLinus Torvalds 			if (copy > 0 && getfrag(from, data + transhdrlen, offset, copy, fraggap, skb) < 0) {
9511da177e4SLinus Torvalds 				err = -EFAULT;
9521da177e4SLinus Torvalds 				kfree_skb(skb);
9531da177e4SLinus Torvalds 				goto error;
9541da177e4SLinus Torvalds 			}
9551da177e4SLinus Torvalds 
9561da177e4SLinus Torvalds 			offset += copy;
9571da177e4SLinus Torvalds 			length -= datalen - fraggap;
9581da177e4SLinus Torvalds 			transhdrlen = 0;
9591da177e4SLinus Torvalds 			exthdrlen = 0;
9601da177e4SLinus Torvalds 			csummode = CHECKSUM_NONE;
9611da177e4SLinus Torvalds 
9621da177e4SLinus Torvalds 			/*
9631da177e4SLinus Torvalds 			 * Put the packet on the pending queue.
9641da177e4SLinus Torvalds 			 */
9651470ddf7SHerbert Xu 			__skb_queue_tail(queue, skb);
9661da177e4SLinus Torvalds 			continue;
9671da177e4SLinus Torvalds 		}
9681da177e4SLinus Torvalds 
9691da177e4SLinus Torvalds 		if (copy > length)
9701da177e4SLinus Torvalds 			copy = length;
9711da177e4SLinus Torvalds 
972d8d1f30bSChangli Gao 		if (!(rt->dst.dev->features&NETIF_F_SG)) {
9731da177e4SLinus Torvalds 			unsigned int off;
9741da177e4SLinus Torvalds 
9751da177e4SLinus Torvalds 			off = skb->len;
9761da177e4SLinus Torvalds 			if (getfrag(from, skb_put(skb, copy),
9771da177e4SLinus Torvalds 					offset, copy, off, skb) < 0) {
9781da177e4SLinus Torvalds 				__skb_trim(skb, off);
9791da177e4SLinus Torvalds 				err = -EFAULT;
9801da177e4SLinus Torvalds 				goto error;
9811da177e4SLinus Torvalds 			}
9821da177e4SLinus Torvalds 		} else {
9831da177e4SLinus Torvalds 			int i = skb_shinfo(skb)->nr_frags;
9841da177e4SLinus Torvalds 			skb_frag_t *frag = &skb_shinfo(skb)->frags[i-1];
9851470ddf7SHerbert Xu 			struct page *page = cork->page;
9861470ddf7SHerbert Xu 			int off = cork->off;
9871da177e4SLinus Torvalds 			unsigned int left;
9881da177e4SLinus Torvalds 
9891da177e4SLinus Torvalds 			if (page && (left = PAGE_SIZE - off) > 0) {
9901da177e4SLinus Torvalds 				if (copy >= left)
9911da177e4SLinus Torvalds 					copy = left;
992*aff65da0SIan Campbell 				if (page != skb_frag_page(frag)) {
9931da177e4SLinus Torvalds 					if (i == MAX_SKB_FRAGS) {
9941da177e4SLinus Torvalds 						err = -EMSGSIZE;
9951da177e4SLinus Torvalds 						goto error;
9961da177e4SLinus Torvalds 					}
9971470ddf7SHerbert Xu 					skb_fill_page_desc(skb, i, page, off, 0);
998*aff65da0SIan Campbell 					skb_frag_ref(skb, i);
9991da177e4SLinus Torvalds 					frag = &skb_shinfo(skb)->frags[i];
10001da177e4SLinus Torvalds 				}
10011da177e4SLinus Torvalds 			} else if (i < MAX_SKB_FRAGS) {
10021da177e4SLinus Torvalds 				if (copy > PAGE_SIZE)
10031da177e4SLinus Torvalds 					copy = PAGE_SIZE;
10041da177e4SLinus Torvalds 				page = alloc_pages(sk->sk_allocation, 0);
10051da177e4SLinus Torvalds 				if (page == NULL)  {
10061da177e4SLinus Torvalds 					err = -ENOMEM;
10071da177e4SLinus Torvalds 					goto error;
10081da177e4SLinus Torvalds 				}
10091470ddf7SHerbert Xu 				cork->page = page;
10101470ddf7SHerbert Xu 				cork->off = 0;
10111da177e4SLinus Torvalds 
10121da177e4SLinus Torvalds 				skb_fill_page_desc(skb, i, page, 0, 0);
10131da177e4SLinus Torvalds 				frag = &skb_shinfo(skb)->frags[i];
10141da177e4SLinus Torvalds 			} else {
10151da177e4SLinus Torvalds 				err = -EMSGSIZE;
10161da177e4SLinus Torvalds 				goto error;
10171da177e4SLinus Torvalds 			}
1018*aff65da0SIan Campbell 			if (getfrag(from, skb_frag_address(frag)+frag->size,
1019*aff65da0SIan Campbell 				    offset, copy, skb->len, skb) < 0) {
10201da177e4SLinus Torvalds 				err = -EFAULT;
10211da177e4SLinus Torvalds 				goto error;
10221da177e4SLinus Torvalds 			}
10231470ddf7SHerbert Xu 			cork->off += copy;
10241da177e4SLinus Torvalds 			frag->size += copy;
10251da177e4SLinus Torvalds 			skb->len += copy;
10261da177e4SLinus Torvalds 			skb->data_len += copy;
1027f945fa7aSHerbert Xu 			skb->truesize += copy;
1028f945fa7aSHerbert Xu 			atomic_add(copy, &sk->sk_wmem_alloc);
10291da177e4SLinus Torvalds 		}
10301da177e4SLinus Torvalds 		offset += copy;
10311da177e4SLinus Torvalds 		length -= copy;
10321da177e4SLinus Torvalds 	}
10331da177e4SLinus Torvalds 
10341da177e4SLinus Torvalds 	return 0;
10351da177e4SLinus Torvalds 
10361da177e4SLinus Torvalds error:
10371470ddf7SHerbert Xu 	cork->length -= length;
10385e38e270SPavel Emelyanov 	IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTDISCARDS);
10391da177e4SLinus Torvalds 	return err;
10401da177e4SLinus Torvalds }
10411da177e4SLinus Torvalds 
10421470ddf7SHerbert Xu static int ip_setup_cork(struct sock *sk, struct inet_cork *cork,
10431470ddf7SHerbert Xu 			 struct ipcm_cookie *ipc, struct rtable **rtp)
10441470ddf7SHerbert Xu {
10451470ddf7SHerbert Xu 	struct inet_sock *inet = inet_sk(sk);
1046f6d8bd05SEric Dumazet 	struct ip_options_rcu *opt;
10471470ddf7SHerbert Xu 	struct rtable *rt;
10481470ddf7SHerbert Xu 
10491470ddf7SHerbert Xu 	/*
10501470ddf7SHerbert Xu 	 * setup for corking.
10511470ddf7SHerbert Xu 	 */
10521470ddf7SHerbert Xu 	opt = ipc->opt;
10531470ddf7SHerbert Xu 	if (opt) {
10541470ddf7SHerbert Xu 		if (cork->opt == NULL) {
10551470ddf7SHerbert Xu 			cork->opt = kmalloc(sizeof(struct ip_options) + 40,
10561470ddf7SHerbert Xu 					    sk->sk_allocation);
10571470ddf7SHerbert Xu 			if (unlikely(cork->opt == NULL))
10581470ddf7SHerbert Xu 				return -ENOBUFS;
10591470ddf7SHerbert Xu 		}
1060f6d8bd05SEric Dumazet 		memcpy(cork->opt, &opt->opt, sizeof(struct ip_options) + opt->opt.optlen);
10611470ddf7SHerbert Xu 		cork->flags |= IPCORK_OPT;
10621470ddf7SHerbert Xu 		cork->addr = ipc->addr;
10631470ddf7SHerbert Xu 	}
10641470ddf7SHerbert Xu 	rt = *rtp;
10651470ddf7SHerbert Xu 	if (unlikely(!rt))
10661470ddf7SHerbert Xu 		return -EFAULT;
10671470ddf7SHerbert Xu 	/*
10681470ddf7SHerbert Xu 	 * We steal reference to this route, caller should not release it
10691470ddf7SHerbert Xu 	 */
10701470ddf7SHerbert Xu 	*rtp = NULL;
10711470ddf7SHerbert Xu 	cork->fragsize = inet->pmtudisc == IP_PMTUDISC_PROBE ?
1072353e5c9aSSteffen Klassert 			 rt->dst.dev->mtu : dst_mtu(&rt->dst);
10731470ddf7SHerbert Xu 	cork->dst = &rt->dst;
10741470ddf7SHerbert Xu 	cork->length = 0;
10751470ddf7SHerbert Xu 	cork->tx_flags = ipc->tx_flags;
10761470ddf7SHerbert Xu 	cork->page = NULL;
10771470ddf7SHerbert Xu 	cork->off = 0;
10781470ddf7SHerbert Xu 
10791470ddf7SHerbert Xu 	return 0;
10801470ddf7SHerbert Xu }
10811470ddf7SHerbert Xu 
10821470ddf7SHerbert Xu /*
10831470ddf7SHerbert Xu  *	ip_append_data() and ip_append_page() can make one large IP datagram
10841470ddf7SHerbert Xu  *	from many pieces of data. Each pieces will be holded on the socket
10851470ddf7SHerbert Xu  *	until ip_push_pending_frames() is called. Each piece can be a page
10861470ddf7SHerbert Xu  *	or non-page data.
10871470ddf7SHerbert Xu  *
10881470ddf7SHerbert Xu  *	Not only UDP, other transport protocols - e.g. raw sockets - can use
10891470ddf7SHerbert Xu  *	this interface potentially.
10901470ddf7SHerbert Xu  *
10911470ddf7SHerbert Xu  *	LATER: length must be adjusted by pad at tail, when it is required.
10921470ddf7SHerbert Xu  */
1093f5fca608SDavid S. Miller int ip_append_data(struct sock *sk, struct flowi4 *fl4,
10941470ddf7SHerbert Xu 		   int getfrag(void *from, char *to, int offset, int len,
10951470ddf7SHerbert Xu 			       int odd, struct sk_buff *skb),
10961470ddf7SHerbert Xu 		   void *from, int length, int transhdrlen,
10971470ddf7SHerbert Xu 		   struct ipcm_cookie *ipc, struct rtable **rtp,
10981470ddf7SHerbert Xu 		   unsigned int flags)
10991470ddf7SHerbert Xu {
11001470ddf7SHerbert Xu 	struct inet_sock *inet = inet_sk(sk);
11011470ddf7SHerbert Xu 	int err;
11021470ddf7SHerbert Xu 
11031470ddf7SHerbert Xu 	if (flags&MSG_PROBE)
11041470ddf7SHerbert Xu 		return 0;
11051470ddf7SHerbert Xu 
11061470ddf7SHerbert Xu 	if (skb_queue_empty(&sk->sk_write_queue)) {
1107bdc712b4SDavid S. Miller 		err = ip_setup_cork(sk, &inet->cork.base, ipc, rtp);
11081470ddf7SHerbert Xu 		if (err)
11091470ddf7SHerbert Xu 			return err;
11101470ddf7SHerbert Xu 	} else {
11111470ddf7SHerbert Xu 		transhdrlen = 0;
11121470ddf7SHerbert Xu 	}
11131470ddf7SHerbert Xu 
1114f5fca608SDavid S. Miller 	return __ip_append_data(sk, fl4, &sk->sk_write_queue, &inet->cork.base, getfrag,
11151470ddf7SHerbert Xu 				from, length, transhdrlen, flags);
11161470ddf7SHerbert Xu }
11171470ddf7SHerbert Xu 
1118f5fca608SDavid S. Miller ssize_t	ip_append_page(struct sock *sk, struct flowi4 *fl4, struct page *page,
11191da177e4SLinus Torvalds 		       int offset, size_t size, int flags)
11201da177e4SLinus Torvalds {
11211da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
11221da177e4SLinus Torvalds 	struct sk_buff *skb;
11231da177e4SLinus Torvalds 	struct rtable *rt;
11241da177e4SLinus Torvalds 	struct ip_options *opt = NULL;
1125bdc712b4SDavid S. Miller 	struct inet_cork *cork;
11261da177e4SLinus Torvalds 	int hh_len;
11271da177e4SLinus Torvalds 	int mtu;
11281da177e4SLinus Torvalds 	int len;
11291da177e4SLinus Torvalds 	int err;
11301da177e4SLinus Torvalds 	unsigned int maxfraglen, fragheaderlen, fraggap;
11311da177e4SLinus Torvalds 
11321da177e4SLinus Torvalds 	if (inet->hdrincl)
11331da177e4SLinus Torvalds 		return -EPERM;
11341da177e4SLinus Torvalds 
11351da177e4SLinus Torvalds 	if (flags&MSG_PROBE)
11361da177e4SLinus Torvalds 		return 0;
11371da177e4SLinus Torvalds 
11381da177e4SLinus Torvalds 	if (skb_queue_empty(&sk->sk_write_queue))
11391da177e4SLinus Torvalds 		return -EINVAL;
11401da177e4SLinus Torvalds 
1141bdc712b4SDavid S. Miller 	cork = &inet->cork.base;
1142bdc712b4SDavid S. Miller 	rt = (struct rtable *)cork->dst;
1143bdc712b4SDavid S. Miller 	if (cork->flags & IPCORK_OPT)
1144bdc712b4SDavid S. Miller 		opt = cork->opt;
11451da177e4SLinus Torvalds 
1146d8d1f30bSChangli Gao 	if (!(rt->dst.dev->features&NETIF_F_SG))
11471da177e4SLinus Torvalds 		return -EOPNOTSUPP;
11481da177e4SLinus Torvalds 
1149d8d1f30bSChangli Gao 	hh_len = LL_RESERVED_SPACE(rt->dst.dev);
1150bdc712b4SDavid S. Miller 	mtu = cork->fragsize;
11511da177e4SLinus Torvalds 
11521da177e4SLinus Torvalds 	fragheaderlen = sizeof(struct iphdr) + (opt ? opt->optlen : 0);
11531da177e4SLinus Torvalds 	maxfraglen = ((mtu - fragheaderlen) & ~7) + fragheaderlen;
11541da177e4SLinus Torvalds 
1155bdc712b4SDavid S. Miller 	if (cork->length + size > 0xFFFF - fragheaderlen) {
1156f5fca608SDavid S. Miller 		ip_local_error(sk, EMSGSIZE, fl4->daddr, inet->inet_dport, mtu);
11571da177e4SLinus Torvalds 		return -EMSGSIZE;
11581da177e4SLinus Torvalds 	}
11591da177e4SLinus Torvalds 
11601da177e4SLinus Torvalds 	if ((skb = skb_peek_tail(&sk->sk_write_queue)) == NULL)
11611da177e4SLinus Torvalds 		return -EINVAL;
11621da177e4SLinus Torvalds 
1163bdc712b4SDavid S. Miller 	cork->length += size;
116426cde9f7SHerbert Xu 	if ((size + skb->len > mtu) &&
116526cde9f7SHerbert Xu 	    (sk->sk_protocol == IPPROTO_UDP) &&
1166d8d1f30bSChangli Gao 	    (rt->dst.dev->features & NETIF_F_UFO)) {
11677967168cSHerbert Xu 		skb_shinfo(skb)->gso_size = mtu - fragheaderlen;
1168f83ef8c0SHerbert Xu 		skb_shinfo(skb)->gso_type = SKB_GSO_UDP;
11697967168cSHerbert Xu 	}
1170e89e9cf5SAnanda Raju 
11711da177e4SLinus Torvalds 
11721da177e4SLinus Torvalds 	while (size > 0) {
11731da177e4SLinus Torvalds 		int i;
11741da177e4SLinus Torvalds 
117589114afdSHerbert Xu 		if (skb_is_gso(skb))
1176e89e9cf5SAnanda Raju 			len = size;
1177e89e9cf5SAnanda Raju 		else {
1178e89e9cf5SAnanda Raju 
11791da177e4SLinus Torvalds 			/* Check if the remaining data fits into current packet. */
11801da177e4SLinus Torvalds 			len = mtu - skb->len;
11811da177e4SLinus Torvalds 			if (len < size)
11821da177e4SLinus Torvalds 				len = maxfraglen - skb->len;
1183e89e9cf5SAnanda Raju 		}
11841da177e4SLinus Torvalds 		if (len <= 0) {
11851da177e4SLinus Torvalds 			struct sk_buff *skb_prev;
11861da177e4SLinus Torvalds 			int alloclen;
11871da177e4SLinus Torvalds 
11881da177e4SLinus Torvalds 			skb_prev = skb;
11891da177e4SLinus Torvalds 			fraggap = skb_prev->len - maxfraglen;
11901da177e4SLinus Torvalds 
11911da177e4SLinus Torvalds 			alloclen = fragheaderlen + hh_len + fraggap + 15;
11921da177e4SLinus Torvalds 			skb = sock_wmalloc(sk, alloclen, 1, sk->sk_allocation);
11931da177e4SLinus Torvalds 			if (unlikely(!skb)) {
11941da177e4SLinus Torvalds 				err = -ENOBUFS;
11951da177e4SLinus Torvalds 				goto error;
11961da177e4SLinus Torvalds 			}
11971da177e4SLinus Torvalds 
11981da177e4SLinus Torvalds 			/*
11991da177e4SLinus Torvalds 			 *	Fill in the control structures
12001da177e4SLinus Torvalds 			 */
12011da177e4SLinus Torvalds 			skb->ip_summed = CHECKSUM_NONE;
12021da177e4SLinus Torvalds 			skb->csum = 0;
12031da177e4SLinus Torvalds 			skb_reserve(skb, hh_len);
12041da177e4SLinus Torvalds 
12051da177e4SLinus Torvalds 			/*
12061da177e4SLinus Torvalds 			 *	Find where to start putting bytes.
12071da177e4SLinus Torvalds 			 */
1208967b05f6SArnaldo Carvalho de Melo 			skb_put(skb, fragheaderlen + fraggap);
12092ca9e6f2SArnaldo Carvalho de Melo 			skb_reset_network_header(skb);
1210b0e380b1SArnaldo Carvalho de Melo 			skb->transport_header = (skb->network_header +
1211b0e380b1SArnaldo Carvalho de Melo 						 fragheaderlen);
12121da177e4SLinus Torvalds 			if (fraggap) {
1213967b05f6SArnaldo Carvalho de Melo 				skb->csum = skb_copy_and_csum_bits(skb_prev,
1214967b05f6SArnaldo Carvalho de Melo 								   maxfraglen,
12159c70220bSArnaldo Carvalho de Melo 						    skb_transport_header(skb),
1216967b05f6SArnaldo Carvalho de Melo 								   fraggap, 0);
12171da177e4SLinus Torvalds 				skb_prev->csum = csum_sub(skb_prev->csum,
12181da177e4SLinus Torvalds 							  skb->csum);
1219e9fa4f7bSHerbert Xu 				pskb_trim_unique(skb_prev, maxfraglen);
12201da177e4SLinus Torvalds 			}
12211da177e4SLinus Torvalds 
12221da177e4SLinus Torvalds 			/*
12231da177e4SLinus Torvalds 			 * Put the packet on the pending queue.
12241da177e4SLinus Torvalds 			 */
12251da177e4SLinus Torvalds 			__skb_queue_tail(&sk->sk_write_queue, skb);
12261da177e4SLinus Torvalds 			continue;
12271da177e4SLinus Torvalds 		}
12281da177e4SLinus Torvalds 
12291da177e4SLinus Torvalds 		i = skb_shinfo(skb)->nr_frags;
12301da177e4SLinus Torvalds 		if (len > size)
12311da177e4SLinus Torvalds 			len = size;
12321da177e4SLinus Torvalds 		if (skb_can_coalesce(skb, i, page, offset)) {
12331da177e4SLinus Torvalds 			skb_shinfo(skb)->frags[i-1].size += len;
12341da177e4SLinus Torvalds 		} else if (i < MAX_SKB_FRAGS) {
12351da177e4SLinus Torvalds 			get_page(page);
12361da177e4SLinus Torvalds 			skb_fill_page_desc(skb, i, page, offset, len);
12371da177e4SLinus Torvalds 		} else {
12381da177e4SLinus Torvalds 			err = -EMSGSIZE;
12391da177e4SLinus Torvalds 			goto error;
12401da177e4SLinus Torvalds 		}
12411da177e4SLinus Torvalds 
12421da177e4SLinus Torvalds 		if (skb->ip_summed == CHECKSUM_NONE) {
124344bb9363SAl Viro 			__wsum csum;
12441da177e4SLinus Torvalds 			csum = csum_page(page, offset, len);
12451da177e4SLinus Torvalds 			skb->csum = csum_block_add(skb->csum, csum, skb->len);
12461da177e4SLinus Torvalds 		}
12471da177e4SLinus Torvalds 
12481da177e4SLinus Torvalds 		skb->len += len;
12491da177e4SLinus Torvalds 		skb->data_len += len;
12501e34a11dSDavid S. Miller 		skb->truesize += len;
12511e34a11dSDavid S. Miller 		atomic_add(len, &sk->sk_wmem_alloc);
12521da177e4SLinus Torvalds 		offset += len;
12531da177e4SLinus Torvalds 		size -= len;
12541da177e4SLinus Torvalds 	}
12551da177e4SLinus Torvalds 	return 0;
12561da177e4SLinus Torvalds 
12571da177e4SLinus Torvalds error:
1258bdc712b4SDavid S. Miller 	cork->length -= size;
12595e38e270SPavel Emelyanov 	IP_INC_STATS(sock_net(sk), IPSTATS_MIB_OUTDISCARDS);
12601da177e4SLinus Torvalds 	return err;
12611da177e4SLinus Torvalds }
12621da177e4SLinus Torvalds 
12631470ddf7SHerbert Xu static void ip_cork_release(struct inet_cork *cork)
1264429f08e9SPavel Emelyanov {
12651470ddf7SHerbert Xu 	cork->flags &= ~IPCORK_OPT;
12661470ddf7SHerbert Xu 	kfree(cork->opt);
12671470ddf7SHerbert Xu 	cork->opt = NULL;
12681470ddf7SHerbert Xu 	dst_release(cork->dst);
12691470ddf7SHerbert Xu 	cork->dst = NULL;
1270429f08e9SPavel Emelyanov }
1271429f08e9SPavel Emelyanov 
12721da177e4SLinus Torvalds /*
12731da177e4SLinus Torvalds  *	Combined all pending IP fragments on the socket as one IP datagram
12741da177e4SLinus Torvalds  *	and push them out.
12751da177e4SLinus Torvalds  */
12761c32c5adSHerbert Xu struct sk_buff *__ip_make_skb(struct sock *sk,
127777968b78SDavid S. Miller 			      struct flowi4 *fl4,
12781470ddf7SHerbert Xu 			      struct sk_buff_head *queue,
12791470ddf7SHerbert Xu 			      struct inet_cork *cork)
12801da177e4SLinus Torvalds {
12811da177e4SLinus Torvalds 	struct sk_buff *skb, *tmp_skb;
12821da177e4SLinus Torvalds 	struct sk_buff **tail_skb;
12831da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
12840388b004SPavel Emelyanov 	struct net *net = sock_net(sk);
12851da177e4SLinus Torvalds 	struct ip_options *opt = NULL;
12861470ddf7SHerbert Xu 	struct rtable *rt = (struct rtable *)cork->dst;
12871da177e4SLinus Torvalds 	struct iphdr *iph;
128876ab608dSAlexey Dobriyan 	__be16 df = 0;
12891da177e4SLinus Torvalds 	__u8 ttl;
12901da177e4SLinus Torvalds 
12911470ddf7SHerbert Xu 	if ((skb = __skb_dequeue(queue)) == NULL)
12921da177e4SLinus Torvalds 		goto out;
12931da177e4SLinus Torvalds 	tail_skb = &(skb_shinfo(skb)->frag_list);
12941da177e4SLinus Torvalds 
12951da177e4SLinus Torvalds 	/* move skb->data to ip header from ext header */
1296d56f90a7SArnaldo Carvalho de Melo 	if (skb->data < skb_network_header(skb))
1297bbe735e4SArnaldo Carvalho de Melo 		__skb_pull(skb, skb_network_offset(skb));
12981470ddf7SHerbert Xu 	while ((tmp_skb = __skb_dequeue(queue)) != NULL) {
1299cfe1fc77SArnaldo Carvalho de Melo 		__skb_pull(tmp_skb, skb_network_header_len(skb));
13001da177e4SLinus Torvalds 		*tail_skb = tmp_skb;
13011da177e4SLinus Torvalds 		tail_skb = &(tmp_skb->next);
13021da177e4SLinus Torvalds 		skb->len += tmp_skb->len;
13031da177e4SLinus Torvalds 		skb->data_len += tmp_skb->len;
13041da177e4SLinus Torvalds 		skb->truesize += tmp_skb->truesize;
13051da177e4SLinus Torvalds 		tmp_skb->destructor = NULL;
13061da177e4SLinus Torvalds 		tmp_skb->sk = NULL;
13071da177e4SLinus Torvalds 	}
13081da177e4SLinus Torvalds 
13091da177e4SLinus Torvalds 	/* Unless user demanded real pmtu discovery (IP_PMTUDISC_DO), we allow
13101da177e4SLinus Torvalds 	 * to fragment the frame generated here. No matter, what transforms
13111da177e4SLinus Torvalds 	 * how transforms change size of the packet, it will come out.
13121da177e4SLinus Torvalds 	 */
1313628a5c56SJohn Heffner 	if (inet->pmtudisc < IP_PMTUDISC_DO)
13141da177e4SLinus Torvalds 		skb->local_df = 1;
13151da177e4SLinus Torvalds 
13161da177e4SLinus Torvalds 	/* DF bit is set when we want to see DF on outgoing frames.
13171da177e4SLinus Torvalds 	 * If local_df is set too, we still allow to fragment this frame
13181da177e4SLinus Torvalds 	 * locally. */
1319628a5c56SJohn Heffner 	if (inet->pmtudisc >= IP_PMTUDISC_DO ||
1320d8d1f30bSChangli Gao 	    (skb->len <= dst_mtu(&rt->dst) &&
1321d8d1f30bSChangli Gao 	     ip_dont_fragment(sk, &rt->dst)))
13221da177e4SLinus Torvalds 		df = htons(IP_DF);
13231da177e4SLinus Torvalds 
13241470ddf7SHerbert Xu 	if (cork->flags & IPCORK_OPT)
13251470ddf7SHerbert Xu 		opt = cork->opt;
13261da177e4SLinus Torvalds 
13271da177e4SLinus Torvalds 	if (rt->rt_type == RTN_MULTICAST)
13281da177e4SLinus Torvalds 		ttl = inet->mc_ttl;
13291da177e4SLinus Torvalds 	else
1330d8d1f30bSChangli Gao 		ttl = ip_select_ttl(inet, &rt->dst);
13311da177e4SLinus Torvalds 
13321da177e4SLinus Torvalds 	iph = (struct iphdr *)skb->data;
13331da177e4SLinus Torvalds 	iph->version = 4;
13341da177e4SLinus Torvalds 	iph->ihl = 5;
13351da177e4SLinus Torvalds 	iph->tos = inet->tos;
13361da177e4SLinus Torvalds 	iph->frag_off = df;
1337d8d1f30bSChangli Gao 	ip_select_ident(iph, &rt->dst, sk);
13381da177e4SLinus Torvalds 	iph->ttl = ttl;
13391da177e4SLinus Torvalds 	iph->protocol = sk->sk_protocol;
134077968b78SDavid S. Miller 	iph->saddr = fl4->saddr;
134177968b78SDavid S. Miller 	iph->daddr = fl4->daddr;
13421da177e4SLinus Torvalds 
134322f728f8SDavid S. Miller 	if (opt) {
134422f728f8SDavid S. Miller 		iph->ihl += opt->optlen>>2;
134522f728f8SDavid S. Miller 		ip_options_build(skb, opt, cork->addr, rt, 0);
134622f728f8SDavid S. Miller 	}
134722f728f8SDavid S. Miller 
13481da177e4SLinus Torvalds 	skb->priority = sk->sk_priority;
13494a19ec58SLaszlo Attila Toth 	skb->mark = sk->sk_mark;
1350a21bba94SEric Dumazet 	/*
1351a21bba94SEric Dumazet 	 * Steal rt from cork.dst to avoid a pair of atomic_inc/atomic_dec
1352a21bba94SEric Dumazet 	 * on dst refcount
1353a21bba94SEric Dumazet 	 */
13541470ddf7SHerbert Xu 	cork->dst = NULL;
1355d8d1f30bSChangli Gao 	skb_dst_set(skb, &rt->dst);
13561da177e4SLinus Torvalds 
135796793b48SDavid L Stevens 	if (iph->protocol == IPPROTO_ICMP)
13580388b004SPavel Emelyanov 		icmp_out_count(net, ((struct icmphdr *)
135996793b48SDavid L Stevens 			skb_transport_header(skb))->type);
136096793b48SDavid L Stevens 
13611c32c5adSHerbert Xu 	ip_cork_release(cork);
13621c32c5adSHerbert Xu out:
13631c32c5adSHerbert Xu 	return skb;
13641c32c5adSHerbert Xu }
13651c32c5adSHerbert Xu 
13661c32c5adSHerbert Xu int ip_send_skb(struct sk_buff *skb)
13671c32c5adSHerbert Xu {
13681c32c5adSHerbert Xu 	struct net *net = sock_net(skb->sk);
13691c32c5adSHerbert Xu 	int err;
13701c32c5adSHerbert Xu 
1371c439cb2eSHerbert Xu 	err = ip_local_out(skb);
13721da177e4SLinus Torvalds 	if (err) {
13731da177e4SLinus Torvalds 		if (err > 0)
13746ce9e7b5SEric Dumazet 			err = net_xmit_errno(err);
13751da177e4SLinus Torvalds 		if (err)
13761c32c5adSHerbert Xu 			IP_INC_STATS(net, IPSTATS_MIB_OUTDISCARDS);
13771da177e4SLinus Torvalds 	}
13781da177e4SLinus Torvalds 
13791da177e4SLinus Torvalds 	return err;
13801da177e4SLinus Torvalds }
13811da177e4SLinus Torvalds 
138277968b78SDavid S. Miller int ip_push_pending_frames(struct sock *sk, struct flowi4 *fl4)
13831470ddf7SHerbert Xu {
13841c32c5adSHerbert Xu 	struct sk_buff *skb;
13851c32c5adSHerbert Xu 
138677968b78SDavid S. Miller 	skb = ip_finish_skb(sk, fl4);
13871c32c5adSHerbert Xu 	if (!skb)
13881c32c5adSHerbert Xu 		return 0;
13891c32c5adSHerbert Xu 
13901c32c5adSHerbert Xu 	/* Netfilter gets whole the not fragmented skb. */
13911c32c5adSHerbert Xu 	return ip_send_skb(skb);
13921470ddf7SHerbert Xu }
13931470ddf7SHerbert Xu 
13941da177e4SLinus Torvalds /*
13951da177e4SLinus Torvalds  *	Throw away all pending data on the socket.
13961da177e4SLinus Torvalds  */
13971470ddf7SHerbert Xu static void __ip_flush_pending_frames(struct sock *sk,
13981470ddf7SHerbert Xu 				      struct sk_buff_head *queue,
13991470ddf7SHerbert Xu 				      struct inet_cork *cork)
14001da177e4SLinus Torvalds {
14011da177e4SLinus Torvalds 	struct sk_buff *skb;
14021da177e4SLinus Torvalds 
14031470ddf7SHerbert Xu 	while ((skb = __skb_dequeue_tail(queue)) != NULL)
14041da177e4SLinus Torvalds 		kfree_skb(skb);
14051da177e4SLinus Torvalds 
14061470ddf7SHerbert Xu 	ip_cork_release(cork);
14071470ddf7SHerbert Xu }
14081470ddf7SHerbert Xu 
14091470ddf7SHerbert Xu void ip_flush_pending_frames(struct sock *sk)
14101470ddf7SHerbert Xu {
1411bdc712b4SDavid S. Miller 	__ip_flush_pending_frames(sk, &sk->sk_write_queue, &inet_sk(sk)->cork.base);
14121da177e4SLinus Torvalds }
14131da177e4SLinus Torvalds 
14141c32c5adSHerbert Xu struct sk_buff *ip_make_skb(struct sock *sk,
141577968b78SDavid S. Miller 			    struct flowi4 *fl4,
14161c32c5adSHerbert Xu 			    int getfrag(void *from, char *to, int offset,
14171c32c5adSHerbert Xu 					int len, int odd, struct sk_buff *skb),
14181c32c5adSHerbert Xu 			    void *from, int length, int transhdrlen,
14191c32c5adSHerbert Xu 			    struct ipcm_cookie *ipc, struct rtable **rtp,
14201c32c5adSHerbert Xu 			    unsigned int flags)
14211c32c5adSHerbert Xu {
1422b80d7226SDavid S. Miller 	struct inet_cork cork;
14231c32c5adSHerbert Xu 	struct sk_buff_head queue;
14241c32c5adSHerbert Xu 	int err;
14251c32c5adSHerbert Xu 
14261c32c5adSHerbert Xu 	if (flags & MSG_PROBE)
14271c32c5adSHerbert Xu 		return NULL;
14281c32c5adSHerbert Xu 
14291c32c5adSHerbert Xu 	__skb_queue_head_init(&queue);
14301c32c5adSHerbert Xu 
1431b80d7226SDavid S. Miller 	cork.flags = 0;
1432b80d7226SDavid S. Miller 	cork.addr = 0;
143370652728SDavid S. Miller 	cork.opt = NULL;
14341c32c5adSHerbert Xu 	err = ip_setup_cork(sk, &cork, ipc, rtp);
14351c32c5adSHerbert Xu 	if (err)
14361c32c5adSHerbert Xu 		return ERR_PTR(err);
14371c32c5adSHerbert Xu 
1438f5fca608SDavid S. Miller 	err = __ip_append_data(sk, fl4, &queue, &cork, getfrag,
14391c32c5adSHerbert Xu 			       from, length, transhdrlen, flags);
14401c32c5adSHerbert Xu 	if (err) {
14411c32c5adSHerbert Xu 		__ip_flush_pending_frames(sk, &queue, &cork);
14421c32c5adSHerbert Xu 		return ERR_PTR(err);
14431c32c5adSHerbert Xu 	}
14441c32c5adSHerbert Xu 
144577968b78SDavid S. Miller 	return __ip_make_skb(sk, fl4, &queue, &cork);
14461c32c5adSHerbert Xu }
14471da177e4SLinus Torvalds 
14481da177e4SLinus Torvalds /*
14491da177e4SLinus Torvalds  *	Fetch data from kernel space and fill in checksum if needed.
14501da177e4SLinus Torvalds  */
14511da177e4SLinus Torvalds static int ip_reply_glue_bits(void *dptr, char *to, int offset,
14521da177e4SLinus Torvalds 			      int len, int odd, struct sk_buff *skb)
14531da177e4SLinus Torvalds {
14545084205fSAl Viro 	__wsum csum;
14551da177e4SLinus Torvalds 
14561da177e4SLinus Torvalds 	csum = csum_partial_copy_nocheck(dptr+offset, to, len, 0);
14571da177e4SLinus Torvalds 	skb->csum = csum_block_add(skb->csum, csum, odd);
14581da177e4SLinus Torvalds 	return 0;
14591da177e4SLinus Torvalds }
14601da177e4SLinus Torvalds 
14611da177e4SLinus Torvalds /*
14621da177e4SLinus Torvalds  *	Generic function to send a packet as reply to another packet.
14631da177e4SLinus Torvalds  *	Used to send TCP resets so far. ICMP should use this function too.
14641da177e4SLinus Torvalds  *
14651da177e4SLinus Torvalds  *	Should run single threaded per socket because it uses the sock
14661da177e4SLinus Torvalds  *     	structure to pass arguments.
14671da177e4SLinus Torvalds  */
14680a5ebb80SDavid S. Miller void ip_send_reply(struct sock *sk, struct sk_buff *skb, __be32 daddr,
14690a5ebb80SDavid S. Miller 		   struct ip_reply_arg *arg, unsigned int len)
14701da177e4SLinus Torvalds {
14711da177e4SLinus Torvalds 	struct inet_sock *inet = inet_sk(sk);
1472f6d8bd05SEric Dumazet 	struct ip_options_data replyopts;
14731da177e4SLinus Torvalds 	struct ipcm_cookie ipc;
147477968b78SDavid S. Miller 	struct flowi4 fl4;
1475511c3f92SEric Dumazet 	struct rtable *rt = skb_rtable(skb);
14761da177e4SLinus Torvalds 
1477f6d8bd05SEric Dumazet 	if (ip_options_echo(&replyopts.opt.opt, skb))
14781da177e4SLinus Torvalds 		return;
14791da177e4SLinus Torvalds 
14800a5ebb80SDavid S. Miller 	ipc.addr = daddr;
14811da177e4SLinus Torvalds 	ipc.opt = NULL;
14822244d07bSOliver Hartkopp 	ipc.tx_flags = 0;
14831da177e4SLinus Torvalds 
1484f6d8bd05SEric Dumazet 	if (replyopts.opt.opt.optlen) {
14851da177e4SLinus Torvalds 		ipc.opt = &replyopts.opt;
14861da177e4SLinus Torvalds 
1487f6d8bd05SEric Dumazet 		if (replyopts.opt.opt.srr)
1488f6d8bd05SEric Dumazet 			daddr = replyopts.opt.opt.faddr;
14891da177e4SLinus Torvalds 	}
14901da177e4SLinus Torvalds 
1491538de0e0SDavid S. Miller 	flowi4_init_output(&fl4, arg->bound_dev_if, 0,
1492538de0e0SDavid S. Miller 			   RT_TOS(ip_hdr(skb)->tos),
1493538de0e0SDavid S. Miller 			   RT_SCOPE_UNIVERSE, sk->sk_protocol,
1494538de0e0SDavid S. Miller 			   ip_reply_arg_flowi_flags(arg),
1495538de0e0SDavid S. Miller 			   daddr, rt->rt_spec_dst,
1496538de0e0SDavid S. Miller 			   tcp_hdr(skb)->source, tcp_hdr(skb)->dest);
14979d6ec938SDavid S. Miller 	security_skb_classify_flow(skb, flowi4_to_flowi(&fl4));
14989d6ec938SDavid S. Miller 	rt = ip_route_output_key(sock_net(sk), &fl4);
1499b23dd4feSDavid S. Miller 	if (IS_ERR(rt))
15001da177e4SLinus Torvalds 		return;
15011da177e4SLinus Torvalds 
15021da177e4SLinus Torvalds 	/* And let IP do all the hard work.
15031da177e4SLinus Torvalds 
15041da177e4SLinus Torvalds 	   This chunk is not reenterable, hence spinlock.
15051da177e4SLinus Torvalds 	   Note that it uses the fact, that this function is called
15061da177e4SLinus Torvalds 	   with locally disabled BH and that sk cannot be already spinlocked.
15071da177e4SLinus Torvalds 	 */
15081da177e4SLinus Torvalds 	bh_lock_sock(sk);
1509eddc9ec5SArnaldo Carvalho de Melo 	inet->tos = ip_hdr(skb)->tos;
15101da177e4SLinus Torvalds 	sk->sk_priority = skb->priority;
1511eddc9ec5SArnaldo Carvalho de Melo 	sk->sk_protocol = ip_hdr(skb)->protocol;
1512f0e48dbfSPatrick McHardy 	sk->sk_bound_dev_if = arg->bound_dev_if;
1513f5fca608SDavid S. Miller 	ip_append_data(sk, &fl4, ip_reply_glue_bits, arg->iov->iov_base, len, 0,
15142e77d89bSEric Dumazet 		       &ipc, &rt, MSG_DONTWAIT);
15151da177e4SLinus Torvalds 	if ((skb = skb_peek(&sk->sk_write_queue)) != NULL) {
15161da177e4SLinus Torvalds 		if (arg->csumoffset >= 0)
15179c70220bSArnaldo Carvalho de Melo 			*((__sum16 *)skb_transport_header(skb) +
15189c70220bSArnaldo Carvalho de Melo 			  arg->csumoffset) = csum_fold(csum_add(skb->csum,
15199c70220bSArnaldo Carvalho de Melo 								arg->csum));
15201da177e4SLinus Torvalds 		skb->ip_summed = CHECKSUM_NONE;
152177968b78SDavid S. Miller 		ip_push_pending_frames(sk, &fl4);
15221da177e4SLinus Torvalds 	}
15231da177e4SLinus Torvalds 
15241da177e4SLinus Torvalds 	bh_unlock_sock(sk);
15251da177e4SLinus Torvalds 
15261da177e4SLinus Torvalds 	ip_rt_put(rt);
15271da177e4SLinus Torvalds }
15281da177e4SLinus Torvalds 
15291da177e4SLinus Torvalds void __init ip_init(void)
15301da177e4SLinus Torvalds {
15311da177e4SLinus Torvalds 	ip_rt_init();
15321da177e4SLinus Torvalds 	inet_initpeers();
15331da177e4SLinus Torvalds 
15341da177e4SLinus Torvalds #if defined(CONFIG_IP_MULTICAST) && defined(CONFIG_PROC_FS)
15351da177e4SLinus Torvalds 	igmp_mc_proc_init();
15361da177e4SLinus Torvalds #endif
15371da177e4SLinus Torvalds }
1538