xref: /openbmc/linux/net/ipv4/udp_diag.c (revision ba6aac15)
12874c5fdSThomas Gleixner // SPDX-License-Identifier: GPL-2.0-or-later
252b7c59bSPavel Emelyanov /*
352b7c59bSPavel Emelyanov  * udp_diag.c	Module for monitoring UDP transport protocols sockets.
452b7c59bSPavel Emelyanov  *
552b7c59bSPavel Emelyanov  * Authors:	Pavel Emelyanov, <xemul@parallels.com>
652b7c59bSPavel Emelyanov  */
752b7c59bSPavel Emelyanov 
852b7c59bSPavel Emelyanov 
952b7c59bSPavel Emelyanov #include <linux/module.h>
1052b7c59bSPavel Emelyanov #include <linux/inet_diag.h>
1152b7c59bSPavel Emelyanov #include <linux/udp.h>
1252b7c59bSPavel Emelyanov #include <net/udp.h>
1352b7c59bSPavel Emelyanov #include <net/udplite.h>
1452b7c59bSPavel Emelyanov #include <linux/sock_diag.h>
1552b7c59bSPavel Emelyanov 
sk_diag_dump(struct sock * sk,struct sk_buff * skb,struct netlink_callback * cb,const struct inet_diag_req_v2 * req,struct nlattr * bc,bool net_admin)16b6d640c2SPavel Emelyanov static int sk_diag_dump(struct sock *sk, struct sk_buff *skb,
1734160ea3SEric Dumazet 			struct netlink_callback *cb,
1834160ea3SEric Dumazet 			const struct inet_diag_req_v2 *req,
19d545cacaSLorenzo Colitti 			struct nlattr *bc, bool net_admin)
20b6d640c2SPavel Emelyanov {
21b6d640c2SPavel Emelyanov 	if (!inet_diag_bc_sk(bc, sk))
22b6d640c2SPavel Emelyanov 		return 0;
23b6d640c2SPavel Emelyanov 
245682d393SMartin KaFai Lau 	return inet_sk_diag_fill(sk, NULL, skb, cb, req, NLM_F_MULTI,
255682d393SMartin KaFai Lau 				 net_admin);
26b6d640c2SPavel Emelyanov }
27b6d640c2SPavel Emelyanov 
udp_dump_one(struct udp_table * tbl,struct netlink_callback * cb,const struct inet_diag_req_v2 * req)285682d393SMartin KaFai Lau static int udp_dump_one(struct udp_table *tbl,
295682d393SMartin KaFai Lau 			struct netlink_callback *cb,
3034160ea3SEric Dumazet 			const struct inet_diag_req_v2 *req)
3152b7c59bSPavel Emelyanov {
325682d393SMartin KaFai Lau 	struct sk_buff *in_skb = cb->skb;
336e822c2cSMenglong Dong 	int err;
34ca065d0cSEric Dumazet 	struct sock *sk = NULL;
35a925aa00SPavel Emelyanov 	struct sk_buff *rep;
3651d7cccfSAndrey Vagin 	struct net *net = sock_net(in_skb->sk);
37a925aa00SPavel Emelyanov 
38ca065d0cSEric Dumazet 	rcu_read_lock();
39a925aa00SPavel Emelyanov 	if (req->sdiag_family == AF_INET)
40747569b0SLorenzo Colitti 		/* src and dst are swapped for historical reasons */
4151d7cccfSAndrey Vagin 		sk = __udp4_lib_lookup(net,
42a925aa00SPavel Emelyanov 				req->id.idiag_src[0], req->id.idiag_sport,
43a925aa00SPavel Emelyanov 				req->id.idiag_dst[0], req->id.idiag_dport,
44fb74c277SDavid Ahern 				req->id.idiag_if, 0, tbl, NULL);
4586e62ad6SPavel Emelyanov #if IS_ENABLED(CONFIG_IPV6)
46a925aa00SPavel Emelyanov 	else if (req->sdiag_family == AF_INET6)
4751d7cccfSAndrey Vagin 		sk = __udp6_lib_lookup(net,
48a925aa00SPavel Emelyanov 				(struct in6_addr *)req->id.idiag_src,
49a925aa00SPavel Emelyanov 				req->id.idiag_sport,
50a925aa00SPavel Emelyanov 				(struct in6_addr *)req->id.idiag_dst,
51a925aa00SPavel Emelyanov 				req->id.idiag_dport,
521801b570SDavid Ahern 				req->id.idiag_if, 0, tbl, NULL);
5386e62ad6SPavel Emelyanov #endif
5441c6d650SReshetova, Elena 	if (sk && !refcount_inc_not_zero(&sk->sk_refcnt))
55ca065d0cSEric Dumazet 		sk = NULL;
56ca065d0cSEric Dumazet 	rcu_read_unlock();
57a925aa00SPavel Emelyanov 	err = -ENOENT;
5851456b29SIan Morris 	if (!sk)
59a925aa00SPavel Emelyanov 		goto out_nosk;
60a925aa00SPavel Emelyanov 
61f65c1b53SPavel Emelyanov 	err = sock_diag_check_cookie(sk, req->id.idiag_cookie);
62a925aa00SPavel Emelyanov 	if (err)
63a925aa00SPavel Emelyanov 		goto out;
64a925aa00SPavel Emelyanov 
65a925aa00SPavel Emelyanov 	err = -ENOMEM;
6683f73c5bSDmitry Yakunin 	rep = nlmsg_new(nla_total_size(sizeof(struct inet_diag_msg)) +
6783f73c5bSDmitry Yakunin 			inet_diag_msg_attrs_size() +
6883f73c5bSDmitry Yakunin 			nla_total_size(sizeof(struct inet_diag_meminfo)) + 64,
69573ce260SHong zhi guo 			GFP_KERNEL);
70a925aa00SPavel Emelyanov 	if (!rep)
71a925aa00SPavel Emelyanov 		goto out;
72a925aa00SPavel Emelyanov 
735682d393SMartin KaFai Lau 	err = inet_sk_diag_fill(sk, NULL, rep, cb, req, 0,
74d545cacaSLorenzo Colitti 				netlink_net_capable(in_skb, CAP_NET_ADMIN));
75a925aa00SPavel Emelyanov 	if (err < 0) {
76a925aa00SPavel Emelyanov 		WARN_ON(err == -EMSGSIZE);
77a925aa00SPavel Emelyanov 		kfree_skb(rep);
78a925aa00SPavel Emelyanov 		goto out;
79a925aa00SPavel Emelyanov 	}
8001757f53SYajun Deng 	err = nlmsg_unicast(net->diag_nlsk, rep, NETLINK_CB(in_skb).portid);
8101757f53SYajun Deng 
82a925aa00SPavel Emelyanov out:
83a925aa00SPavel Emelyanov 	if (sk)
84a925aa00SPavel Emelyanov 		sock_put(sk);
85a925aa00SPavel Emelyanov out_nosk:
86a925aa00SPavel Emelyanov 	return err;
8752b7c59bSPavel Emelyanov }
8852b7c59bSPavel Emelyanov 
udp_dump(struct udp_table * table,struct sk_buff * skb,struct netlink_callback * cb,const struct inet_diag_req_v2 * r)8934160ea3SEric Dumazet static void udp_dump(struct udp_table *table, struct sk_buff *skb,
9034160ea3SEric Dumazet 		     struct netlink_callback *cb,
910df6d328SMartin KaFai Lau 		     const struct inet_diag_req_v2 *r)
9252b7c59bSPavel Emelyanov {
93d545cacaSLorenzo Colitti 	bool net_admin = netlink_net_capable(cb->skb, CAP_NET_ADMIN);
9451d7cccfSAndrey Vagin 	struct net *net = sock_net(skb->sk);
950df6d328SMartin KaFai Lau 	struct inet_diag_dump_data *cb_data;
96ca065d0cSEric Dumazet 	int num, s_num, slot, s_slot;
970df6d328SMartin KaFai Lau 	struct nlattr *bc;
98b6d640c2SPavel Emelyanov 
990df6d328SMartin KaFai Lau 	cb_data = cb->data;
1000df6d328SMartin KaFai Lau 	bc = cb_data->inet_diag_nla_bc;
101b6d640c2SPavel Emelyanov 	s_slot = cb->args[0];
102b6d640c2SPavel Emelyanov 	num = s_num = cb->args[1];
103b6d640c2SPavel Emelyanov 
10486f3cddbSHerbert Xu 	for (slot = s_slot; slot <= table->mask; s_num = 0, slot++) {
105b6d640c2SPavel Emelyanov 		struct udp_hslot *hslot = &table->hash[slot];
106ca065d0cSEric Dumazet 		struct sock *sk;
107b6d640c2SPavel Emelyanov 
10886f3cddbSHerbert Xu 		num = 0;
10986f3cddbSHerbert Xu 
110ca065d0cSEric Dumazet 		if (hlist_empty(&hslot->head))
111b6d640c2SPavel Emelyanov 			continue;
112b6d640c2SPavel Emelyanov 
113b6d640c2SPavel Emelyanov 		spin_lock_bh(&hslot->lock);
114ca065d0cSEric Dumazet 		sk_for_each(sk, &hslot->head) {
115b6d640c2SPavel Emelyanov 			struct inet_sock *inet = inet_sk(sk);
116b6d640c2SPavel Emelyanov 
11751d7cccfSAndrey Vagin 			if (!net_eq(sock_net(sk), net))
11851d7cccfSAndrey Vagin 				continue;
119b6d640c2SPavel Emelyanov 			if (num < s_num)
120b6d640c2SPavel Emelyanov 				goto next;
121b6d640c2SPavel Emelyanov 			if (!(r->idiag_states & (1 << sk->sk_state)))
122b6d640c2SPavel Emelyanov 				goto next;
123b6d640c2SPavel Emelyanov 			if (r->sdiag_family != AF_UNSPEC &&
124b6d640c2SPavel Emelyanov 					sk->sk_family != r->sdiag_family)
125b6d640c2SPavel Emelyanov 				goto next;
126b6d640c2SPavel Emelyanov 			if (r->id.idiag_sport != inet->inet_sport &&
127b6d640c2SPavel Emelyanov 			    r->id.idiag_sport)
128b6d640c2SPavel Emelyanov 				goto next;
129b6d640c2SPavel Emelyanov 			if (r->id.idiag_dport != inet->inet_dport &&
130b6d640c2SPavel Emelyanov 			    r->id.idiag_dport)
131b6d640c2SPavel Emelyanov 				goto next;
132b6d640c2SPavel Emelyanov 
133d545cacaSLorenzo Colitti 			if (sk_diag_dump(sk, skb, cb, r, bc, net_admin) < 0) {
134b6d640c2SPavel Emelyanov 				spin_unlock_bh(&hslot->lock);
135b6d640c2SPavel Emelyanov 				goto done;
136b6d640c2SPavel Emelyanov 			}
137b6d640c2SPavel Emelyanov next:
138b6d640c2SPavel Emelyanov 			num++;
139b6d640c2SPavel Emelyanov 		}
140b6d640c2SPavel Emelyanov 		spin_unlock_bh(&hslot->lock);
141b6d640c2SPavel Emelyanov 	}
142b6d640c2SPavel Emelyanov done:
143b6d640c2SPavel Emelyanov 	cb->args[0] = slot;
144b6d640c2SPavel Emelyanov 	cb->args[1] = num;
14552b7c59bSPavel Emelyanov }
14652b7c59bSPavel Emelyanov 
udp_diag_dump(struct sk_buff * skb,struct netlink_callback * cb,const struct inet_diag_req_v2 * r)14752b7c59bSPavel Emelyanov static void udp_diag_dump(struct sk_buff *skb, struct netlink_callback *cb,
1480df6d328SMartin KaFai Lau 			  const struct inet_diag_req_v2 *r)
14952b7c59bSPavel Emelyanov {
150*ba6aac15SKuniyuki Iwashima 	udp_dump(sock_net(cb->skb->sk)->ipv4.udp_table, skb, cb, r);
15152b7c59bSPavel Emelyanov }
15252b7c59bSPavel Emelyanov 
udp_diag_dump_one(struct netlink_callback * cb,const struct inet_diag_req_v2 * req)1535682d393SMartin KaFai Lau static int udp_diag_dump_one(struct netlink_callback *cb,
15434160ea3SEric Dumazet 			     const struct inet_diag_req_v2 *req)
15552b7c59bSPavel Emelyanov {
156*ba6aac15SKuniyuki Iwashima 	return udp_dump_one(sock_net(cb->skb->sk)->ipv4.udp_table, cb, req);
15752b7c59bSPavel Emelyanov }
15852b7c59bSPavel Emelyanov 
udp_diag_get_info(struct sock * sk,struct inet_diag_msg * r,void * info)15962ad6fcdSShan Wei static void udp_diag_get_info(struct sock *sk, struct inet_diag_msg *r,
16062ad6fcdSShan Wei 		void *info)
16162ad6fcdSShan Wei {
1626c206b20SPaolo Abeni 	r->idiag_rqueue = udp_rqueue_get(sk);
16362ad6fcdSShan Wei 	r->idiag_wqueue = sk_wmem_alloc_get(sk);
16462ad6fcdSShan Wei }
16562ad6fcdSShan Wei 
1665d77dca8SDavid Ahern #ifdef CONFIG_INET_DIAG_DESTROY
__udp_diag_destroy(struct sk_buff * in_skb,const struct inet_diag_req_v2 * req,struct udp_table * tbl)1675d77dca8SDavid Ahern static int __udp_diag_destroy(struct sk_buff *in_skb,
1685d77dca8SDavid Ahern 			      const struct inet_diag_req_v2 *req,
1695d77dca8SDavid Ahern 			      struct udp_table *tbl)
1705d77dca8SDavid Ahern {
1715d77dca8SDavid Ahern 	struct net *net = sock_net(in_skb->sk);
1725d77dca8SDavid Ahern 	struct sock *sk;
1735d77dca8SDavid Ahern 	int err;
1745d77dca8SDavid Ahern 
1755d77dca8SDavid Ahern 	rcu_read_lock();
1765d77dca8SDavid Ahern 
1775d77dca8SDavid Ahern 	if (req->sdiag_family == AF_INET)
1785d77dca8SDavid Ahern 		sk = __udp4_lib_lookup(net,
1795d77dca8SDavid Ahern 				req->id.idiag_dst[0], req->id.idiag_dport,
1805d77dca8SDavid Ahern 				req->id.idiag_src[0], req->id.idiag_sport,
181fb74c277SDavid Ahern 				req->id.idiag_if, 0, tbl, NULL);
1825d77dca8SDavid Ahern #if IS_ENABLED(CONFIG_IPV6)
1835d77dca8SDavid Ahern 	else if (req->sdiag_family == AF_INET6) {
1845d77dca8SDavid Ahern 		if (ipv6_addr_v4mapped((struct in6_addr *)req->id.idiag_dst) &&
1855d77dca8SDavid Ahern 		    ipv6_addr_v4mapped((struct in6_addr *)req->id.idiag_src))
1865d77dca8SDavid Ahern 			sk = __udp4_lib_lookup(net,
187f95bf346SLorenzo Colitti 					req->id.idiag_dst[3], req->id.idiag_dport,
188f95bf346SLorenzo Colitti 					req->id.idiag_src[3], req->id.idiag_sport,
189fb74c277SDavid Ahern 					req->id.idiag_if, 0, tbl, NULL);
1905d77dca8SDavid Ahern 
1915d77dca8SDavid Ahern 		else
1925d77dca8SDavid Ahern 			sk = __udp6_lib_lookup(net,
1935d77dca8SDavid Ahern 					(struct in6_addr *)req->id.idiag_dst,
1945d77dca8SDavid Ahern 					req->id.idiag_dport,
1955d77dca8SDavid Ahern 					(struct in6_addr *)req->id.idiag_src,
1965d77dca8SDavid Ahern 					req->id.idiag_sport,
1971801b570SDavid Ahern 					req->id.idiag_if, 0, tbl, NULL);
1985d77dca8SDavid Ahern 	}
1995d77dca8SDavid Ahern #endif
2005d77dca8SDavid Ahern 	else {
2015d77dca8SDavid Ahern 		rcu_read_unlock();
2025d77dca8SDavid Ahern 		return -EINVAL;
2035d77dca8SDavid Ahern 	}
2045d77dca8SDavid Ahern 
20541c6d650SReshetova, Elena 	if (sk && !refcount_inc_not_zero(&sk->sk_refcnt))
2065d77dca8SDavid Ahern 		sk = NULL;
2075d77dca8SDavid Ahern 
2085d77dca8SDavid Ahern 	rcu_read_unlock();
2095d77dca8SDavid Ahern 
2105d77dca8SDavid Ahern 	if (!sk)
2115d77dca8SDavid Ahern 		return -ENOENT;
2125d77dca8SDavid Ahern 
2135d77dca8SDavid Ahern 	if (sock_diag_check_cookie(sk, req->id.idiag_cookie)) {
2145d77dca8SDavid Ahern 		sock_put(sk);
2155d77dca8SDavid Ahern 		return -ENOENT;
2165d77dca8SDavid Ahern 	}
2175d77dca8SDavid Ahern 
2185d77dca8SDavid Ahern 	err = sock_diag_destroy(sk, ECONNABORTED);
2195d77dca8SDavid Ahern 
2205d77dca8SDavid Ahern 	sock_put(sk);
2215d77dca8SDavid Ahern 
2225d77dca8SDavid Ahern 	return err;
2235d77dca8SDavid Ahern }
2245d77dca8SDavid Ahern 
udp_diag_destroy(struct sk_buff * in_skb,const struct inet_diag_req_v2 * req)2255d77dca8SDavid Ahern static int udp_diag_destroy(struct sk_buff *in_skb,
2265d77dca8SDavid Ahern 			    const struct inet_diag_req_v2 *req)
2275d77dca8SDavid Ahern {
228*ba6aac15SKuniyuki Iwashima 	return __udp_diag_destroy(in_skb, req, sock_net(in_skb->sk)->ipv4.udp_table);
2295d77dca8SDavid Ahern }
2305d77dca8SDavid Ahern 
udplite_diag_destroy(struct sk_buff * in_skb,const struct inet_diag_req_v2 * req)2315d77dca8SDavid Ahern static int udplite_diag_destroy(struct sk_buff *in_skb,
2325d77dca8SDavid Ahern 				const struct inet_diag_req_v2 *req)
2335d77dca8SDavid Ahern {
2345d77dca8SDavid Ahern 	return __udp_diag_destroy(in_skb, req, &udplite_table);
2355d77dca8SDavid Ahern }
2365d77dca8SDavid Ahern 
2375d77dca8SDavid Ahern #endif
2385d77dca8SDavid Ahern 
23952b7c59bSPavel Emelyanov static const struct inet_diag_handler udp_diag_handler = {
24052b7c59bSPavel Emelyanov 	.dump		 = udp_diag_dump,
24152b7c59bSPavel Emelyanov 	.dump_one	 = udp_diag_dump_one,
24262ad6fcdSShan Wei 	.idiag_get_info  = udp_diag_get_info,
24352b7c59bSPavel Emelyanov 	.idiag_type	 = IPPROTO_UDP,
2443fd22af8SCraig Gallek 	.idiag_info_size = 0,
2455d77dca8SDavid Ahern #ifdef CONFIG_INET_DIAG_DESTROY
2465d77dca8SDavid Ahern 	.destroy	 = udp_diag_destroy,
2475d77dca8SDavid Ahern #endif
24852b7c59bSPavel Emelyanov };
24952b7c59bSPavel Emelyanov 
udplite_diag_dump(struct sk_buff * skb,struct netlink_callback * cb,const struct inet_diag_req_v2 * r)25052b7c59bSPavel Emelyanov static void udplite_diag_dump(struct sk_buff *skb, struct netlink_callback *cb,
2510df6d328SMartin KaFai Lau 			      const struct inet_diag_req_v2 *r)
25252b7c59bSPavel Emelyanov {
2530df6d328SMartin KaFai Lau 	udp_dump(&udplite_table, skb, cb, r);
25452b7c59bSPavel Emelyanov }
25552b7c59bSPavel Emelyanov 
udplite_diag_dump_one(struct netlink_callback * cb,const struct inet_diag_req_v2 * req)2565682d393SMartin KaFai Lau static int udplite_diag_dump_one(struct netlink_callback *cb,
25734160ea3SEric Dumazet 				 const struct inet_diag_req_v2 *req)
25852b7c59bSPavel Emelyanov {
2595682d393SMartin KaFai Lau 	return udp_dump_one(&udplite_table, cb, req);
26052b7c59bSPavel Emelyanov }
26152b7c59bSPavel Emelyanov 
26252b7c59bSPavel Emelyanov static const struct inet_diag_handler udplite_diag_handler = {
26352b7c59bSPavel Emelyanov 	.dump		 = udplite_diag_dump,
26452b7c59bSPavel Emelyanov 	.dump_one	 = udplite_diag_dump_one,
26562ad6fcdSShan Wei 	.idiag_get_info  = udp_diag_get_info,
26652b7c59bSPavel Emelyanov 	.idiag_type	 = IPPROTO_UDPLITE,
2673fd22af8SCraig Gallek 	.idiag_info_size = 0,
2685d77dca8SDavid Ahern #ifdef CONFIG_INET_DIAG_DESTROY
2695d77dca8SDavid Ahern 	.destroy	 = udplite_diag_destroy,
2705d77dca8SDavid Ahern #endif
27152b7c59bSPavel Emelyanov };
27252b7c59bSPavel Emelyanov 
udp_diag_init(void)27352b7c59bSPavel Emelyanov static int __init udp_diag_init(void)
27452b7c59bSPavel Emelyanov {
27552b7c59bSPavel Emelyanov 	int err;
27652b7c59bSPavel Emelyanov 
27752b7c59bSPavel Emelyanov 	err = inet_diag_register(&udp_diag_handler);
27852b7c59bSPavel Emelyanov 	if (err)
27952b7c59bSPavel Emelyanov 		goto out;
28052b7c59bSPavel Emelyanov 	err = inet_diag_register(&udplite_diag_handler);
28152b7c59bSPavel Emelyanov 	if (err)
28252b7c59bSPavel Emelyanov 		goto out_lite;
28352b7c59bSPavel Emelyanov out:
28452b7c59bSPavel Emelyanov 	return err;
28552b7c59bSPavel Emelyanov out_lite:
28652b7c59bSPavel Emelyanov 	inet_diag_unregister(&udp_diag_handler);
28752b7c59bSPavel Emelyanov 	goto out;
28852b7c59bSPavel Emelyanov }
28952b7c59bSPavel Emelyanov 
udp_diag_exit(void)29052b7c59bSPavel Emelyanov static void __exit udp_diag_exit(void)
29152b7c59bSPavel Emelyanov {
29252b7c59bSPavel Emelyanov 	inet_diag_unregister(&udplite_diag_handler);
29352b7c59bSPavel Emelyanov 	inet_diag_unregister(&udp_diag_handler);
29452b7c59bSPavel Emelyanov }
29552b7c59bSPavel Emelyanov 
29652b7c59bSPavel Emelyanov module_init(udp_diag_init);
29752b7c59bSPavel Emelyanov module_exit(udp_diag_exit);
29852b7c59bSPavel Emelyanov MODULE_LICENSE("GPL");
299aec8dc62SPavel Emelyanov MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_NETLINK, NETLINK_SOCK_DIAG, 2-17 /* AF_INET - IPPROTO_UDP */);
300aec8dc62SPavel Emelyanov MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_NETLINK, NETLINK_SOCK_DIAG, 2-136 /* AF_INET - IPPROTO_UDPLITE */);
301