12874c5fdSThomas Gleixner // SPDX-License-Identifier: GPL-2.0-or-later 21da177e4SLinus Torvalds /* 31da177e4SLinus Torvalds * Internet Control Message Protocol (ICMPv6) 41da177e4SLinus Torvalds * Linux INET6 implementation 51da177e4SLinus Torvalds * 61da177e4SLinus Torvalds * Authors: 71da177e4SLinus Torvalds * Pedro Roque <roque@di.fc.ul.pt> 81da177e4SLinus Torvalds * 91da177e4SLinus Torvalds * Based on net/ipv4/icmp.c 101da177e4SLinus Torvalds * 111da177e4SLinus Torvalds * RFC 1885 121da177e4SLinus Torvalds */ 131da177e4SLinus Torvalds 141da177e4SLinus Torvalds /* 151da177e4SLinus Torvalds * Changes: 161da177e4SLinus Torvalds * 171da177e4SLinus Torvalds * Andi Kleen : exception handling 181da177e4SLinus Torvalds * Andi Kleen add rate limits. never reply to a icmp. 191da177e4SLinus Torvalds * add more length checks and other fixes. 201da177e4SLinus Torvalds * yoshfuji : ensure to sent parameter problem for 211da177e4SLinus Torvalds * fragments. 221da177e4SLinus Torvalds * YOSHIFUJI Hideaki @USAGI: added sysctl for icmp rate limit. 231da177e4SLinus Torvalds * Randy Dunlap and 241da177e4SLinus Torvalds * YOSHIFUJI Hideaki @USAGI: Per-interface statistics support 251da177e4SLinus Torvalds * Kazunori MIYAZAWA @USAGI: change output process to use ip6_append_data 261da177e4SLinus Torvalds */ 271da177e4SLinus Torvalds 28f3213831SJoe Perches #define pr_fmt(fmt) "IPv6: " fmt 29f3213831SJoe Perches 301da177e4SLinus Torvalds #include <linux/module.h> 311da177e4SLinus Torvalds #include <linux/errno.h> 321da177e4SLinus Torvalds #include <linux/types.h> 331da177e4SLinus Torvalds #include <linux/socket.h> 341da177e4SLinus Torvalds #include <linux/in.h> 351da177e4SLinus Torvalds #include <linux/kernel.h> 361da177e4SLinus Torvalds #include <linux/sockios.h> 371da177e4SLinus Torvalds #include <linux/net.h> 381da177e4SLinus Torvalds #include <linux/skbuff.h> 391da177e4SLinus Torvalds #include <linux/init.h> 40763ecff1SYasuyuki Kozakai #include <linux/netfilter.h> 415a0e3ad6STejun Heo #include <linux/slab.h> 421da177e4SLinus Torvalds 431da177e4SLinus Torvalds #ifdef CONFIG_SYSCTL 441da177e4SLinus Torvalds #include <linux/sysctl.h> 451da177e4SLinus Torvalds #endif 461da177e4SLinus Torvalds 471da177e4SLinus Torvalds #include <linux/inet.h> 481da177e4SLinus Torvalds #include <linux/netdevice.h> 491da177e4SLinus Torvalds #include <linux/icmpv6.h> 501da177e4SLinus Torvalds 511da177e4SLinus Torvalds #include <net/ip.h> 521da177e4SLinus Torvalds #include <net/sock.h> 531da177e4SLinus Torvalds 541da177e4SLinus Torvalds #include <net/ipv6.h> 551da177e4SLinus Torvalds #include <net/ip6_checksum.h> 566d0bfe22SLorenzo Colitti #include <net/ping.h> 571da177e4SLinus Torvalds #include <net/protocol.h> 581da177e4SLinus Torvalds #include <net/raw.h> 591da177e4SLinus Torvalds #include <net/rawv6.h> 60*e4129440SAndrew Lunn #include <net/seg6.h> 611da177e4SLinus Torvalds #include <net/transp_v6.h> 621da177e4SLinus Torvalds #include <net/ip6_route.h> 631da177e4SLinus Torvalds #include <net/addrconf.h> 641da177e4SLinus Torvalds #include <net/icmp.h> 658b7817f3SHerbert Xu #include <net/xfrm.h> 661ed8516fSDenis V. Lunev #include <net/inet_common.h> 67825edac4SHannes Frederic Sowa #include <net/dsfield.h> 68ca254490SDavid Ahern #include <net/l3mdev.h> 691da177e4SLinus Torvalds 707c0f6ba6SLinus Torvalds #include <linux/uaccess.h> 711da177e4SLinus Torvalds 721da177e4SLinus Torvalds /* 731da177e4SLinus Torvalds * The ICMP socket(s). This is the most convenient way to flow control 741da177e4SLinus Torvalds * our ICMP output as well as maintain a clean interface throughout 751da177e4SLinus Torvalds * all layers. All Socketless IP sends will soon be gone. 761da177e4SLinus Torvalds * 771da177e4SLinus Torvalds * On SMP we have one ICMP socket per-cpu. 781da177e4SLinus Torvalds */ 792789c14dSEric Dumazet static struct sock *icmpv6_sk(struct net *net) 8098c6d1b2SDenis V. Lunev { 812789c14dSEric Dumazet return this_cpu_read(*net->ipv6.icmp_sk); 8298c6d1b2SDenis V. Lunev } 831da177e4SLinus Torvalds 8432bbd879SStefano Brivio static int icmpv6_err(struct sk_buff *skb, struct inet6_skb_parm *opt, 856f809da2SSteffen Klassert u8 type, u8 code, int offset, __be32 info) 866f809da2SSteffen Klassert { 876d0bfe22SLorenzo Colitti /* icmpv6_notify checks 8 bytes can be pulled, icmp6hdr is 8 bytes */ 886d0bfe22SLorenzo Colitti struct icmp6hdr *icmp6 = (struct icmp6hdr *) (skb->data + offset); 896f809da2SSteffen Klassert struct net *net = dev_net(skb->dev); 906f809da2SSteffen Klassert 916f809da2SSteffen Klassert if (type == ICMPV6_PKT_TOOBIG) 925f379ef5SGeorg Kohmann ip6_update_pmtu(skb, net, info, skb->dev->ifindex, 0, sock_net_uid(net, NULL)); 936f809da2SSteffen Klassert else if (type == NDISC_REDIRECT) 94e2d118a1SLorenzo Colitti ip6_redirect(skb, net, skb->dev->ifindex, 0, 95e2d118a1SLorenzo Colitti sock_net_uid(net, NULL)); 966d0bfe22SLorenzo Colitti 976d0bfe22SLorenzo Colitti if (!(type & ICMPV6_INFOMSG_MASK)) 986d0bfe22SLorenzo Colitti if (icmp6->icmp6_type == ICMPV6_ECHO_REQUEST) 99dcb94b88SHannes Frederic Sowa ping_err(skb, offset, ntohl(info)); 10032bbd879SStefano Brivio 10132bbd879SStefano Brivio return 0; 1026f809da2SSteffen Klassert } 1036f809da2SSteffen Klassert 104e5bbef20SHerbert Xu static int icmpv6_rcv(struct sk_buff *skb); 1051da177e4SLinus Torvalds 10641135cc8SAlexey Dobriyan static const struct inet6_protocol icmpv6_protocol = { 1071da177e4SLinus Torvalds .handler = icmpv6_rcv, 1086f809da2SSteffen Klassert .err_handler = icmpv6_err, 1098b7817f3SHerbert Xu .flags = INET6_PROTO_NOPOLICY|INET6_PROTO_FINAL, 1101da177e4SLinus Torvalds }; 1111da177e4SLinus Torvalds 1127ba91ecbSJesper Dangaard Brouer /* Called with BH disabled */ 113fdc0bde9SDenis V. Lunev static __inline__ struct sock *icmpv6_xmit_lock(struct net *net) 1141da177e4SLinus Torvalds { 115fdc0bde9SDenis V. Lunev struct sock *sk; 116fdc0bde9SDenis V. Lunev 117fdc0bde9SDenis V. Lunev sk = icmpv6_sk(net); 118405666dbSDenis V. Lunev if (unlikely(!spin_trylock(&sk->sk_lock.slock))) { 1191da177e4SLinus Torvalds /* This can happen if the output path (f.e. SIT or 1201da177e4SLinus Torvalds * ip6ip6 tunnel) signals dst_link_failure() for an 1211da177e4SLinus Torvalds * outgoing ICMP6 packet. 1221da177e4SLinus Torvalds */ 123fdc0bde9SDenis V. Lunev return NULL; 1241da177e4SLinus Torvalds } 125fdc0bde9SDenis V. Lunev return sk; 1261da177e4SLinus Torvalds } 1271da177e4SLinus Torvalds 128405666dbSDenis V. Lunev static __inline__ void icmpv6_xmit_unlock(struct sock *sk) 1291da177e4SLinus Torvalds { 1307ba91ecbSJesper Dangaard Brouer spin_unlock(&sk->sk_lock.slock); 1311da177e4SLinus Torvalds } 1321da177e4SLinus Torvalds 1331da177e4SLinus Torvalds /* 1341da177e4SLinus Torvalds * Figure out, may we reply to this packet with icmp error. 1351da177e4SLinus Torvalds * 1361da177e4SLinus Torvalds * We do not reply, if: 1371da177e4SLinus Torvalds * - it was icmp error message. 1381da177e4SLinus Torvalds * - it is truncated, so that it is known, that protocol is ICMPV6 1391da177e4SLinus Torvalds * (i.e. in the middle of some exthdr) 1401da177e4SLinus Torvalds * 1411da177e4SLinus Torvalds * --ANK (980726) 1421da177e4SLinus Torvalds */ 1431da177e4SLinus Torvalds 144a50feda5SEric Dumazet static bool is_ineligible(const struct sk_buff *skb) 1451da177e4SLinus Torvalds { 1460660e03fSArnaldo Carvalho de Melo int ptr = (u8 *)(ipv6_hdr(skb) + 1) - skb->data; 1471da177e4SLinus Torvalds int len = skb->len - ptr; 1480660e03fSArnaldo Carvalho de Melo __u8 nexthdr = ipv6_hdr(skb)->nexthdr; 14975f2811cSJesse Gross __be16 frag_off; 1501da177e4SLinus Torvalds 1511da177e4SLinus Torvalds if (len < 0) 152a50feda5SEric Dumazet return true; 1531da177e4SLinus Torvalds 15475f2811cSJesse Gross ptr = ipv6_skip_exthdr(skb, ptr, &nexthdr, &frag_off); 1551da177e4SLinus Torvalds if (ptr < 0) 156a50feda5SEric Dumazet return false; 1571da177e4SLinus Torvalds if (nexthdr == IPPROTO_ICMPV6) { 1581da177e4SLinus Torvalds u8 _type, *tp; 1591da177e4SLinus Torvalds tp = skb_header_pointer(skb, 1601da177e4SLinus Torvalds ptr+offsetof(struct icmp6hdr, icmp6_type), 1611da177e4SLinus Torvalds sizeof(_type), &_type); 1622efdaaafSHangbin Liu 1632efdaaafSHangbin Liu /* Based on RFC 8200, Section 4.5 Fragment Header, return 1642efdaaafSHangbin Liu * false if this is a fragment packet with no icmp header info. 1652efdaaafSHangbin Liu */ 1662efdaaafSHangbin Liu if (!tp && frag_off != 0) 1672efdaaafSHangbin Liu return false; 1682efdaaafSHangbin Liu else if (!tp || !(*tp & ICMPV6_INFOMSG_MASK)) 169a50feda5SEric Dumazet return true; 1701da177e4SLinus Torvalds } 171a50feda5SEric Dumazet return false; 1721da177e4SLinus Torvalds } 1731da177e4SLinus Torvalds 1740bc19985SStephen Suryaputra static bool icmpv6_mask_allow(struct net *net, int type) 175c0303efeSJesper Dangaard Brouer { 1760bc19985SStephen Suryaputra if (type > ICMPV6_MSG_MAX) 177c0303efeSJesper Dangaard Brouer return true; 178c0303efeSJesper Dangaard Brouer 1790bc19985SStephen Suryaputra /* Limit if icmp type is set in ratemask. */ 1800bc19985SStephen Suryaputra if (!test_bit(type, net->ipv6.sysctl.icmpv6_ratemask)) 181c0303efeSJesper Dangaard Brouer return true; 182c0303efeSJesper Dangaard Brouer 183c0303efeSJesper Dangaard Brouer return false; 184c0303efeSJesper Dangaard Brouer } 185c0303efeSJesper Dangaard Brouer 1860bc19985SStephen Suryaputra static bool icmpv6_global_allow(struct net *net, int type) 187c0303efeSJesper Dangaard Brouer { 1880bc19985SStephen Suryaputra if (icmpv6_mask_allow(net, type)) 189c0303efeSJesper Dangaard Brouer return true; 190c0303efeSJesper Dangaard Brouer 191c0303efeSJesper Dangaard Brouer if (icmp_global_allow()) 192c0303efeSJesper Dangaard Brouer return true; 193c0303efeSJesper Dangaard Brouer 194c0303efeSJesper Dangaard Brouer return false; 195c0303efeSJesper Dangaard Brouer } 196c0303efeSJesper Dangaard Brouer 1971da177e4SLinus Torvalds /* 1981da177e4SLinus Torvalds * Check the ICMP output rate limit 1991da177e4SLinus Torvalds */ 2004cdf507dSEric Dumazet static bool icmpv6_xrlim_allow(struct sock *sk, u8 type, 2014c9483b2SDavid S. Miller struct flowi6 *fl6) 2021da177e4SLinus Torvalds { 2033b1e0a65SYOSHIFUJI Hideaki struct net *net = sock_net(sk); 2044cdf507dSEric Dumazet struct dst_entry *dst; 20592d86829SDavid S. Miller bool res = false; 2061da177e4SLinus Torvalds 2070bc19985SStephen Suryaputra if (icmpv6_mask_allow(net, type)) 20892d86829SDavid S. Miller return true; 2091da177e4SLinus Torvalds 2101da177e4SLinus Torvalds /* 2111da177e4SLinus Torvalds * Look up the output route. 2121da177e4SLinus Torvalds * XXX: perhaps the expire for routing entries cloned by 2131da177e4SLinus Torvalds * this lookup should be more aggressive (not longer than timeout). 2141da177e4SLinus Torvalds */ 2154c9483b2SDavid S. Miller dst = ip6_route_output(net, sk, fl6); 2161da177e4SLinus Torvalds if (dst->error) { 2173bd653c8SDenis V. Lunev IP6_INC_STATS(net, ip6_dst_idev(dst), 218a11d206dSYOSHIFUJI Hideaki IPSTATS_MIB_OUTNOROUTES); 2191da177e4SLinus Torvalds } else if (dst->dev && (dst->dev->flags&IFF_LOOPBACK)) { 22092d86829SDavid S. Miller res = true; 2211da177e4SLinus Torvalds } else { 2221da177e4SLinus Torvalds struct rt6_info *rt = (struct rt6_info *)dst; 2239a43b709SBenjamin Thery int tmo = net->ipv6.sysctl.icmpv6_time; 224c0303efeSJesper Dangaard Brouer struct inet_peer *peer; 2251da177e4SLinus Torvalds 2261da177e4SLinus Torvalds /* Give more bandwidth to wider prefixes. */ 2271da177e4SLinus Torvalds if (rt->rt6i_dst.plen < 128) 2281da177e4SLinus Torvalds tmo >>= ((128 - rt->rt6i_dst.plen)>>5); 2291da177e4SLinus Torvalds 230c0303efeSJesper Dangaard Brouer peer = inet_getpeer_v6(net->ipv6.peers, &fl6->daddr, 1); 231fbfe95a4SDavid S. Miller res = inet_peer_xrlim_allow(peer, tmo); 2321d861aa4SDavid S. Miller if (peer) 2331d861aa4SDavid S. Miller inet_putpeer(peer); 2341da177e4SLinus Torvalds } 2351da177e4SLinus Torvalds dst_release(dst); 2361da177e4SLinus Torvalds return res; 2371da177e4SLinus Torvalds } 2381da177e4SLinus Torvalds 239b93cfb9cSTim Stallard static bool icmpv6_rt_has_prefsrc(struct sock *sk, u8 type, 240b93cfb9cSTim Stallard struct flowi6 *fl6) 241b93cfb9cSTim Stallard { 242b93cfb9cSTim Stallard struct net *net = sock_net(sk); 243b93cfb9cSTim Stallard struct dst_entry *dst; 244b93cfb9cSTim Stallard bool res = false; 245b93cfb9cSTim Stallard 246b93cfb9cSTim Stallard dst = ip6_route_output(net, sk, fl6); 247b93cfb9cSTim Stallard if (!dst->error) { 248b93cfb9cSTim Stallard struct rt6_info *rt = (struct rt6_info *)dst; 249b93cfb9cSTim Stallard struct in6_addr prefsrc; 250b93cfb9cSTim Stallard 251b93cfb9cSTim Stallard rt6_get_prefsrc(rt, &prefsrc); 252b93cfb9cSTim Stallard res = !ipv6_addr_any(&prefsrc); 253b93cfb9cSTim Stallard } 254b93cfb9cSTim Stallard dst_release(dst); 255b93cfb9cSTim Stallard return res; 256b93cfb9cSTim Stallard } 257b93cfb9cSTim Stallard 2581da177e4SLinus Torvalds /* 2591da177e4SLinus Torvalds * an inline helper for the "simple" if statement below 2601da177e4SLinus Torvalds * checks if parameter problem report is caused by an 2611da177e4SLinus Torvalds * unrecognized IPv6 option that has the Option Type 2621da177e4SLinus Torvalds * highest-order two bits set to 10 2631da177e4SLinus Torvalds */ 2641da177e4SLinus Torvalds 265a50feda5SEric Dumazet static bool opt_unrec(struct sk_buff *skb, __u32 offset) 2661da177e4SLinus Torvalds { 2671da177e4SLinus Torvalds u8 _optval, *op; 2681da177e4SLinus Torvalds 269bbe735e4SArnaldo Carvalho de Melo offset += skb_network_offset(skb); 2701da177e4SLinus Torvalds op = skb_header_pointer(skb, offset, sizeof(_optval), &_optval); 27163159f29SIan Morris if (!op) 272a50feda5SEric Dumazet return true; 2731da177e4SLinus Torvalds return (*op & 0xC0) == 0x80; 2741da177e4SLinus Torvalds } 2751da177e4SLinus Torvalds 2764e64b1edSJoe Perches void icmpv6_push_pending_frames(struct sock *sk, struct flowi6 *fl6, 2776d0bfe22SLorenzo Colitti struct icmp6hdr *thdr, int len) 2781da177e4SLinus Torvalds { 2791da177e4SLinus Torvalds struct sk_buff *skb; 2801da177e4SLinus Torvalds struct icmp6hdr *icmp6h; 2811da177e4SLinus Torvalds 282e5d08d71SIan Morris skb = skb_peek(&sk->sk_write_queue); 28363159f29SIan Morris if (!skb) 2844e64b1edSJoe Perches return; 2851da177e4SLinus Torvalds 286cc70ab26SArnaldo Carvalho de Melo icmp6h = icmp6_hdr(skb); 2871da177e4SLinus Torvalds memcpy(icmp6h, thdr, sizeof(struct icmp6hdr)); 2881da177e4SLinus Torvalds icmp6h->icmp6_cksum = 0; 2891da177e4SLinus Torvalds 2901da177e4SLinus Torvalds if (skb_queue_len(&sk->sk_write_queue) == 1) { 29107f0757aSJoe Perches skb->csum = csum_partial(icmp6h, 2921da177e4SLinus Torvalds sizeof(struct icmp6hdr), skb->csum); 2934c9483b2SDavid S. Miller icmp6h->icmp6_cksum = csum_ipv6_magic(&fl6->saddr, 2944c9483b2SDavid S. Miller &fl6->daddr, 2954c9483b2SDavid S. Miller len, fl6->flowi6_proto, 2961da177e4SLinus Torvalds skb->csum); 2971da177e4SLinus Torvalds } else { 298868c86bcSAl Viro __wsum tmp_csum = 0; 2991da177e4SLinus Torvalds 3001da177e4SLinus Torvalds skb_queue_walk(&sk->sk_write_queue, skb) { 3011da177e4SLinus Torvalds tmp_csum = csum_add(tmp_csum, skb->csum); 3021da177e4SLinus Torvalds } 3031da177e4SLinus Torvalds 30407f0757aSJoe Perches tmp_csum = csum_partial(icmp6h, 3051da177e4SLinus Torvalds sizeof(struct icmp6hdr), tmp_csum); 3064c9483b2SDavid S. Miller icmp6h->icmp6_cksum = csum_ipv6_magic(&fl6->saddr, 3074c9483b2SDavid S. Miller &fl6->daddr, 3084c9483b2SDavid S. Miller len, fl6->flowi6_proto, 309868c86bcSAl Viro tmp_csum); 3101da177e4SLinus Torvalds } 3111da177e4SLinus Torvalds ip6_push_pending_frames(sk); 3121da177e4SLinus Torvalds } 3131da177e4SLinus Torvalds 3141da177e4SLinus Torvalds struct icmpv6_msg { 3151da177e4SLinus Torvalds struct sk_buff *skb; 3161da177e4SLinus Torvalds int offset; 317763ecff1SYasuyuki Kozakai uint8_t type; 3181da177e4SLinus Torvalds }; 3191da177e4SLinus Torvalds 3201da177e4SLinus Torvalds static int icmpv6_getfrag(void *from, char *to, int offset, int len, int odd, struct sk_buff *skb) 3211da177e4SLinus Torvalds { 3221da177e4SLinus Torvalds struct icmpv6_msg *msg = (struct icmpv6_msg *) from; 3231da177e4SLinus Torvalds struct sk_buff *org_skb = msg->skb; 3248d5930dfSAl Viro __wsum csum; 3251da177e4SLinus Torvalds 3261da177e4SLinus Torvalds csum = skb_copy_and_csum_bits(org_skb, msg->offset + offset, 3278d5930dfSAl Viro to, len); 3281da177e4SLinus Torvalds skb->csum = csum_block_add(skb->csum, csum, odd); 329763ecff1SYasuyuki Kozakai if (!(msg->type & ICMPV6_INFOMSG_MASK)) 330763ecff1SYasuyuki Kozakai nf_ct_attach(skb, org_skb); 3311da177e4SLinus Torvalds return 0; 3321da177e4SLinus Torvalds } 3331da177e4SLinus Torvalds 33407a93626SAmerigo Wang #if IS_ENABLED(CONFIG_IPV6_MIP6) 335ee576c47SJason A. Donenfeld static void mip6_addr_swap(struct sk_buff *skb, const struct inet6_skb_parm *opt) 33679383236SMasahide NAKAMURA { 3370660e03fSArnaldo Carvalho de Melo struct ipv6hdr *iph = ipv6_hdr(skb); 33879383236SMasahide NAKAMURA struct ipv6_destopt_hao *hao; 33979383236SMasahide NAKAMURA struct in6_addr tmp; 34079383236SMasahide NAKAMURA int off; 34179383236SMasahide NAKAMURA 34279383236SMasahide NAKAMURA if (opt->dsthao) { 34379383236SMasahide NAKAMURA off = ipv6_find_tlv(skb, opt->dsthao, IPV6_TLV_HAO); 34479383236SMasahide NAKAMURA if (likely(off >= 0)) { 345d56f90a7SArnaldo Carvalho de Melo hao = (struct ipv6_destopt_hao *) 346d56f90a7SArnaldo Carvalho de Melo (skb_network_header(skb) + off); 3474e3fd7a0SAlexey Dobriyan tmp = iph->saddr; 3484e3fd7a0SAlexey Dobriyan iph->saddr = hao->addr; 3494e3fd7a0SAlexey Dobriyan hao->addr = tmp; 35079383236SMasahide NAKAMURA } 35179383236SMasahide NAKAMURA } 35279383236SMasahide NAKAMURA } 35379383236SMasahide NAKAMURA #else 354ee576c47SJason A. Donenfeld static inline void mip6_addr_swap(struct sk_buff *skb, const struct inet6_skb_parm *opt) {} 35579383236SMasahide NAKAMURA #endif 35679383236SMasahide NAKAMURA 357e8243534Sstephen hemminger static struct dst_entry *icmpv6_route_lookup(struct net *net, 358e8243534Sstephen hemminger struct sk_buff *skb, 359e8243534Sstephen hemminger struct sock *sk, 360e8243534Sstephen hemminger struct flowi6 *fl6) 361b42835dbSDavid S. Miller { 362b42835dbSDavid S. Miller struct dst_entry *dst, *dst2; 3634c9483b2SDavid S. Miller struct flowi6 fl2; 364b42835dbSDavid S. Miller int err; 365b42835dbSDavid S. Miller 366343d60aaSRoopa Prabhu err = ip6_dst_lookup(net, sk, &dst, fl6); 367b42835dbSDavid S. Miller if (err) 368b42835dbSDavid S. Miller return ERR_PTR(err); 369b42835dbSDavid S. Miller 370b42835dbSDavid S. Miller /* 371b42835dbSDavid S. Miller * We won't send icmp if the destination is known 372b42835dbSDavid S. Miller * anycast. 373b42835dbSDavid S. Miller */ 3742647a9b0SMartin KaFai Lau if (ipv6_anycast_destination(dst, &fl6->daddr)) { 375ba7a46f1SJoe Perches net_dbg_ratelimited("icmp6_send: acast source\n"); 376b42835dbSDavid S. Miller dst_release(dst); 377b42835dbSDavid S. Miller return ERR_PTR(-EINVAL); 378b42835dbSDavid S. Miller } 379b42835dbSDavid S. Miller 380b42835dbSDavid S. Miller /* No need to clone since we're just using its address. */ 381b42835dbSDavid S. Miller dst2 = dst; 382b42835dbSDavid S. Miller 3834c9483b2SDavid S. Miller dst = xfrm_lookup(net, dst, flowi6_to_flowi(fl6), sk, 0); 384452edd59SDavid S. Miller if (!IS_ERR(dst)) { 385b42835dbSDavid S. Miller if (dst != dst2) 386b42835dbSDavid S. Miller return dst; 387452edd59SDavid S. Miller } else { 388452edd59SDavid S. Miller if (PTR_ERR(dst) == -EPERM) 389b42835dbSDavid S. Miller dst = NULL; 390452edd59SDavid S. Miller else 391452edd59SDavid S. Miller return dst; 392b42835dbSDavid S. Miller } 393b42835dbSDavid S. Miller 3944c9483b2SDavid S. Miller err = xfrm_decode_session_reverse(skb, flowi6_to_flowi(&fl2), AF_INET6); 395b42835dbSDavid S. Miller if (err) 396b42835dbSDavid S. Miller goto relookup_failed; 397b42835dbSDavid S. Miller 398343d60aaSRoopa Prabhu err = ip6_dst_lookup(net, sk, &dst2, &fl2); 399b42835dbSDavid S. Miller if (err) 400b42835dbSDavid S. Miller goto relookup_failed; 401b42835dbSDavid S. Miller 4024c9483b2SDavid S. Miller dst2 = xfrm_lookup(net, dst2, flowi6_to_flowi(&fl2), sk, XFRM_LOOKUP_ICMP); 403452edd59SDavid S. Miller if (!IS_ERR(dst2)) { 404b42835dbSDavid S. Miller dst_release(dst); 405b42835dbSDavid S. Miller dst = dst2; 406452edd59SDavid S. Miller } else { 407452edd59SDavid S. Miller err = PTR_ERR(dst2); 408452edd59SDavid S. Miller if (err == -EPERM) { 409b42835dbSDavid S. Miller dst_release(dst); 410452edd59SDavid S. Miller return dst2; 411452edd59SDavid S. Miller } else 412b42835dbSDavid S. Miller goto relookup_failed; 413b42835dbSDavid S. Miller } 414b42835dbSDavid S. Miller 415b42835dbSDavid S. Miller relookup_failed: 416b42835dbSDavid S. Miller if (dst) 417b42835dbSDavid S. Miller return dst; 418b42835dbSDavid S. Miller return ERR_PTR(err); 419b42835dbSDavid S. Miller } 420b42835dbSDavid S. Miller 421e1ae5c2eSStephen Suryaputra static struct net_device *icmp6_dev(const struct sk_buff *skb) 4221b70d792SDavid Ahern { 423e1ae5c2eSStephen Suryaputra struct net_device *dev = skb->dev; 4241b70d792SDavid Ahern 4251b70d792SDavid Ahern /* for local traffic to local address, skb dev is the loopback 4261b70d792SDavid Ahern * device. Check if there is a dst attached to the skb and if so 42724b711edSDavid Ahern * get the real device index. Same is needed for replies to a link 42824b711edSDavid Ahern * local address on a device enslaved to an L3 master device 4291b70d792SDavid Ahern */ 430e1ae5c2eSStephen Suryaputra if (unlikely(dev->ifindex == LOOPBACK_IFINDEX || netif_is_l3_master(skb->dev))) { 4311b70d792SDavid Ahern const struct rt6_info *rt6 = skb_rt6_info(skb); 4321b70d792SDavid Ahern 4331b70d792SDavid Ahern if (rt6) 434e1ae5c2eSStephen Suryaputra dev = rt6->rt6i_idev->dev; 4351b70d792SDavid Ahern } 4361b70d792SDavid Ahern 437e1ae5c2eSStephen Suryaputra return dev; 438e1ae5c2eSStephen Suryaputra } 439e1ae5c2eSStephen Suryaputra 440e1ae5c2eSStephen Suryaputra static int icmp6_iif(const struct sk_buff *skb) 441e1ae5c2eSStephen Suryaputra { 442e1ae5c2eSStephen Suryaputra return icmp6_dev(skb)->ifindex; 4431b70d792SDavid Ahern } 4441b70d792SDavid Ahern 4451da177e4SLinus Torvalds /* 4461da177e4SLinus Torvalds * Send an ICMP message in response to a packet in error 4471da177e4SLinus Torvalds */ 448cc7a21b6SEric Dumazet void icmp6_send(struct sk_buff *skb, u8 type, u8 code, __u32 info, 449ee576c47SJason A. Donenfeld const struct in6_addr *force_saddr, 450ee576c47SJason A. Donenfeld const struct inet6_skb_parm *parm) 4511da177e4SLinus Torvalds { 4521da177e4SLinus Torvalds struct inet6_dev *idev = NULL; 4530660e03fSArnaldo Carvalho de Melo struct ipv6hdr *hdr = ipv6_hdr(skb); 45484427d53SYOSHIFUJI Hideaki struct sock *sk; 4558d933670SEric Dumazet struct net *net; 45684427d53SYOSHIFUJI Hideaki struct ipv6_pinfo *np; 457b71d1d42SEric Dumazet const struct in6_addr *saddr = NULL; 4581da177e4SLinus Torvalds struct dst_entry *dst; 4591da177e4SLinus Torvalds struct icmp6hdr tmp_hdr; 4604c9483b2SDavid S. Miller struct flowi6 fl6; 4611da177e4SLinus Torvalds struct icmpv6_msg msg; 46226879da5SWei Wang struct ipcm6_cookie ipc6; 4631da177e4SLinus Torvalds int iif = 0; 4641da177e4SLinus Torvalds int addr_type = 0; 4651da177e4SLinus Torvalds int len; 4668d933670SEric Dumazet u32 mark; 4671da177e4SLinus Torvalds 46827a884dcSArnaldo Carvalho de Melo if ((u8 *)hdr < skb->head || 46929a3cad5SSimon Horman (skb_network_header(skb) + sizeof(*hdr)) > skb_tail_pointer(skb)) 4701da177e4SLinus Torvalds return; 4711da177e4SLinus Torvalds 4728d933670SEric Dumazet if (!skb->dev) 4738d933670SEric Dumazet return; 4748d933670SEric Dumazet net = dev_net(skb->dev); 4758d933670SEric Dumazet mark = IP6_REPLY_MARK(net, skb->mark); 4761da177e4SLinus Torvalds /* 4771da177e4SLinus Torvalds * Make sure we respect the rules 4781da177e4SLinus Torvalds * i.e. RFC 1885 2.4(e) 4795f5624cfSPravin B Shelar * Rule (e.1) is enforced by not using icmp6_send 4801da177e4SLinus Torvalds * in any code that processes icmp errors. 4811da177e4SLinus Torvalds */ 4821da177e4SLinus Torvalds addr_type = ipv6_addr_type(&hdr->daddr); 4831da177e4SLinus Torvalds 484446fab59SFX Le Bail if (ipv6_chk_addr(net, &hdr->daddr, skb->dev, 0) || 485d94c1f92SFX Le Bail ipv6_chk_acast_addr_src(net, skb->dev, &hdr->daddr)) 4861da177e4SLinus Torvalds saddr = &hdr->daddr; 4871da177e4SLinus Torvalds 4881da177e4SLinus Torvalds /* 4891da177e4SLinus Torvalds * Dest addr check 4901da177e4SLinus Torvalds */ 4911da177e4SLinus Torvalds 4929a6b4b39Szhuyj if (addr_type & IPV6_ADDR_MULTICAST || skb->pkt_type != PACKET_HOST) { 4931da177e4SLinus Torvalds if (type != ICMPV6_PKT_TOOBIG && 4941da177e4SLinus Torvalds !(type == ICMPV6_PARAMPROB && 4951da177e4SLinus Torvalds code == ICMPV6_UNK_OPTION && 4961da177e4SLinus Torvalds (opt_unrec(skb, info)))) 4971da177e4SLinus Torvalds return; 4981da177e4SLinus Torvalds 4991da177e4SLinus Torvalds saddr = NULL; 5001da177e4SLinus Torvalds } 5011da177e4SLinus Torvalds 5021da177e4SLinus Torvalds addr_type = ipv6_addr_type(&hdr->saddr); 5031da177e4SLinus Torvalds 5041da177e4SLinus Torvalds /* 5051da177e4SLinus Torvalds * Source addr check 5061da177e4SLinus Torvalds */ 5071da177e4SLinus Torvalds 5084832c30dSDavid Ahern if (__ipv6_addr_needs_scope_id(addr_type)) { 5091b70d792SDavid Ahern iif = icmp6_iif(skb); 5104832c30dSDavid Ahern } else { 511272928d1SMathieu Desnoyers /* 512272928d1SMathieu Desnoyers * The source device is used for looking up which routing table 513272928d1SMathieu Desnoyers * to use for sending an ICMP error. 514272928d1SMathieu Desnoyers */ 515272928d1SMathieu Desnoyers iif = l3mdev_master_ifindex(skb->dev); 51679dc7e3fSDavid Ahern } 5171da177e4SLinus Torvalds 5181da177e4SLinus Torvalds /* 5198de3351eSYOSHIFUJI Hideaki * Must not send error if the source does not uniquely 5208de3351eSYOSHIFUJI Hideaki * identify a single node (RFC2463 Section 2.4). 5218de3351eSYOSHIFUJI Hideaki * We check unspecified / multicast addresses here, 5228de3351eSYOSHIFUJI Hideaki * and anycast addresses will be checked later. 5231da177e4SLinus Torvalds */ 5241da177e4SLinus Torvalds if ((addr_type == IPV6_ADDR_ANY) || (addr_type & IPV6_ADDR_MULTICAST)) { 5254b3418fbSBjørn Mork net_dbg_ratelimited("icmp6_send: addr_any/mcast source [%pI6c > %pI6c]\n", 5264b3418fbSBjørn Mork &hdr->saddr, &hdr->daddr); 5271da177e4SLinus Torvalds return; 5281da177e4SLinus Torvalds } 5291da177e4SLinus Torvalds 5301da177e4SLinus Torvalds /* 5311da177e4SLinus Torvalds * Never answer to a ICMP packet. 5321da177e4SLinus Torvalds */ 5331da177e4SLinus Torvalds if (is_ineligible(skb)) { 5344b3418fbSBjørn Mork net_dbg_ratelimited("icmp6_send: no reply to icmp error [%pI6c > %pI6c]\n", 5354b3418fbSBjørn Mork &hdr->saddr, &hdr->daddr); 5361da177e4SLinus Torvalds return; 5371da177e4SLinus Torvalds } 5381da177e4SLinus Torvalds 5397ba91ecbSJesper Dangaard Brouer /* Needed by both icmp_global_allow and icmpv6_xmit_lock */ 5407ba91ecbSJesper Dangaard Brouer local_bh_disable(); 5417ba91ecbSJesper Dangaard Brouer 5427ba91ecbSJesper Dangaard Brouer /* Check global sysctl_icmp_msgs_per_sec ratelimit */ 5430bc19985SStephen Suryaputra if (!(skb->dev->flags & IFF_LOOPBACK) && !icmpv6_global_allow(net, type)) 5447ba91ecbSJesper Dangaard Brouer goto out_bh_enable; 5457ba91ecbSJesper Dangaard Brouer 546ee576c47SJason A. Donenfeld mip6_addr_swap(skb, parm); 54779383236SMasahide NAKAMURA 548fac6fce9SFrancesco Ruggeri sk = icmpv6_xmit_lock(net); 549fac6fce9SFrancesco Ruggeri if (!sk) 550fac6fce9SFrancesco Ruggeri goto out_bh_enable; 551fac6fce9SFrancesco Ruggeri 5524c9483b2SDavid S. Miller memset(&fl6, 0, sizeof(fl6)); 5534c9483b2SDavid S. Miller fl6.flowi6_proto = IPPROTO_ICMPV6; 5544e3fd7a0SAlexey Dobriyan fl6.daddr = hdr->saddr; 555b1cadc1aSEric Dumazet if (force_saddr) 556b1cadc1aSEric Dumazet saddr = force_saddr; 557fac6fce9SFrancesco Ruggeri if (saddr) { 5584e3fd7a0SAlexey Dobriyan fl6.saddr = *saddr; 559b93cfb9cSTim Stallard } else if (!icmpv6_rt_has_prefsrc(sk, type, &fl6)) { 560fac6fce9SFrancesco Ruggeri /* select a more meaningful saddr from input if */ 561fac6fce9SFrancesco Ruggeri struct net_device *in_netdev; 562fac6fce9SFrancesco Ruggeri 563ee576c47SJason A. Donenfeld in_netdev = dev_get_by_index(net, parm->iif); 564fac6fce9SFrancesco Ruggeri if (in_netdev) { 565fac6fce9SFrancesco Ruggeri ipv6_dev_get_saddr(net, in_netdev, &fl6.daddr, 566fac6fce9SFrancesco Ruggeri inet6_sk(sk)->srcprefs, 567fac6fce9SFrancesco Ruggeri &fl6.saddr); 568fac6fce9SFrancesco Ruggeri dev_put(in_netdev); 569fac6fce9SFrancesco Ruggeri } 570fac6fce9SFrancesco Ruggeri } 571e110861fSLorenzo Colitti fl6.flowi6_mark = mark; 5724c9483b2SDavid S. Miller fl6.flowi6_oif = iif; 5731958b856SDavid S. Miller fl6.fl6_icmp_type = type; 5741958b856SDavid S. Miller fl6.fl6_icmp_code = code; 575e2d118a1SLorenzo Colitti fl6.flowi6_uid = sock_net_uid(net, NULL); 576b4bac172SDavid Ahern fl6.mp_hash = rt6_multipath_hash(net, &fl6, skb, NULL); 5773df98d79SPaul Moore security_skb_classify_flow(skb, flowi6_to_flowi_common(&fl6)); 5781da177e4SLinus Torvalds 579fdc0bde9SDenis V. Lunev np = inet6_sk(sk); 580405666dbSDenis V. Lunev 5814c9483b2SDavid S. Miller if (!icmpv6_xrlim_allow(sk, type, &fl6)) 5821da177e4SLinus Torvalds goto out; 5831da177e4SLinus Torvalds 5841da177e4SLinus Torvalds tmp_hdr.icmp6_type = type; 5851da177e4SLinus Torvalds tmp_hdr.icmp6_code = code; 5861da177e4SLinus Torvalds tmp_hdr.icmp6_cksum = 0; 5871da177e4SLinus Torvalds tmp_hdr.icmp6_pointer = htonl(info); 5881da177e4SLinus Torvalds 5894c9483b2SDavid S. Miller if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr)) 5904c9483b2SDavid S. Miller fl6.flowi6_oif = np->mcast_oif; 591c4062dfcSErich E. Hoover else if (!fl6.flowi6_oif) 592c4062dfcSErich E. Hoover fl6.flowi6_oif = np->ucast_oif; 5931da177e4SLinus Torvalds 594b515430aSWillem de Bruijn ipcm6_init_sk(&ipc6, np); 5950da7536fSWillem de Bruijn ipc6.sockc.mark = mark; 59638b7097bSHannes Frederic Sowa fl6.flowlabel = ip6_make_flowinfo(ipc6.tclass, fl6.flowlabel); 59738b7097bSHannes Frederic Sowa 5984c9483b2SDavid S. Miller dst = icmpv6_route_lookup(net, skb, sk, &fl6); 599b42835dbSDavid S. Miller if (IS_ERR(dst)) 6001da177e4SLinus Torvalds goto out; 6018de3351eSYOSHIFUJI Hideaki 60226879da5SWei Wang ipc6.hlimit = ip6_sk_dst_hoplimit(np, &fl6, dst); 6031da177e4SLinus Torvalds 6041da177e4SLinus Torvalds msg.skb = skb; 605bbe735e4SArnaldo Carvalho de Melo msg.offset = skb_network_offset(skb); 606763ecff1SYasuyuki Kozakai msg.type = type; 6071da177e4SLinus Torvalds 6081da177e4SLinus Torvalds len = skb->len - msg.offset; 6091da177e4SLinus Torvalds len = min_t(unsigned int, len, IPV6_MIN_MTU - sizeof(struct ipv6hdr) - sizeof(struct icmp6hdr)); 6101da177e4SLinus Torvalds if (len < 0) { 6114b3418fbSBjørn Mork net_dbg_ratelimited("icmp: len problem [%pI6c > %pI6c]\n", 6124b3418fbSBjørn Mork &hdr->saddr, &hdr->daddr); 6131da177e4SLinus Torvalds goto out_dst_release; 6141da177e4SLinus Torvalds } 6151da177e4SLinus Torvalds 616cfdf7647SEric Dumazet rcu_read_lock(); 617cfdf7647SEric Dumazet idev = __in6_dev_get(skb->dev); 6181da177e4SLinus Torvalds 6194e64b1edSJoe Perches if (ip6_append_data(sk, icmpv6_getfrag, &msg, 6201da177e4SLinus Torvalds len + sizeof(struct icmp6hdr), 62126879da5SWei Wang sizeof(struct icmp6hdr), 62226879da5SWei Wang &ipc6, &fl6, (struct rt6_info *)dst, 6235fdaa88dSWillem de Bruijn MSG_DONTWAIT)) { 62443a43b60SHannes Frederic Sowa ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTERRORS); 6251da177e4SLinus Torvalds ip6_flush_pending_frames(sk); 626cfdf7647SEric Dumazet } else { 6274e64b1edSJoe Perches icmpv6_push_pending_frames(sk, &fl6, &tmp_hdr, 628cfdf7647SEric Dumazet len + sizeof(struct icmp6hdr)); 6291da177e4SLinus Torvalds } 630cfdf7647SEric Dumazet rcu_read_unlock(); 6311da177e4SLinus Torvalds out_dst_release: 6321da177e4SLinus Torvalds dst_release(dst); 6331da177e4SLinus Torvalds out: 634405666dbSDenis V. Lunev icmpv6_xmit_unlock(sk); 6357ba91ecbSJesper Dangaard Brouer out_bh_enable: 6367ba91ecbSJesper Dangaard Brouer local_bh_enable(); 6371da177e4SLinus Torvalds } 638cc7a21b6SEric Dumazet EXPORT_SYMBOL(icmp6_send); 6395f5624cfSPravin B Shelar 6405f5624cfSPravin B Shelar /* Slightly more convenient version of icmp6_send. 6415f5624cfSPravin B Shelar */ 6425f5624cfSPravin B Shelar void icmpv6_param_prob(struct sk_buff *skb, u8 code, int pos) 6435f5624cfSPravin B Shelar { 644ee576c47SJason A. Donenfeld icmp6_send(skb, ICMPV6_PARAMPROB, code, pos, NULL, IP6CB(skb)); 6455f5624cfSPravin B Shelar kfree_skb(skb); 6465f5624cfSPravin B Shelar } 6477159039aSYOSHIFUJI Hideaki 6485fbba8acSEric Dumazet /* Generate icmpv6 with type/code ICMPV6_DEST_UNREACH/ICMPV6_ADDR_UNREACH 6495fbba8acSEric Dumazet * if sufficient data bytes are available 6505fbba8acSEric Dumazet * @nhs is the size of the tunnel header(s) : 6515fbba8acSEric Dumazet * Either an IPv4 header for SIT encap 6525fbba8acSEric Dumazet * an IPv4 header + GRE header for GRE encap 6535fbba8acSEric Dumazet */ 65420e1954fSEric Dumazet int ip6_err_gen_icmpv6_unreach(struct sk_buff *skb, int nhs, int type, 65520e1954fSEric Dumazet unsigned int data_len) 6565fbba8acSEric Dumazet { 6572d7a3b27SEric Dumazet struct in6_addr temp_saddr; 6585fbba8acSEric Dumazet struct rt6_info *rt; 6595fbba8acSEric Dumazet struct sk_buff *skb2; 66020e1954fSEric Dumazet u32 info = 0; 6615fbba8acSEric Dumazet 6625fbba8acSEric Dumazet if (!pskb_may_pull(skb, nhs + sizeof(struct ipv6hdr) + 8)) 6635fbba8acSEric Dumazet return 1; 6645fbba8acSEric Dumazet 66520e1954fSEric Dumazet /* RFC 4884 (partial) support for ICMP extensions */ 66620e1954fSEric Dumazet if (data_len < 128 || (data_len & 7) || skb->len < data_len) 66720e1954fSEric Dumazet data_len = 0; 66820e1954fSEric Dumazet 66920e1954fSEric Dumazet skb2 = data_len ? skb_copy(skb, GFP_ATOMIC) : skb_clone(skb, GFP_ATOMIC); 6705fbba8acSEric Dumazet 6715fbba8acSEric Dumazet if (!skb2) 6725fbba8acSEric Dumazet return 1; 6735fbba8acSEric Dumazet 6745fbba8acSEric Dumazet skb_dst_drop(skb2); 6755fbba8acSEric Dumazet skb_pull(skb2, nhs); 6765fbba8acSEric Dumazet skb_reset_network_header(skb2); 6775fbba8acSEric Dumazet 678b75cc8f9SDavid Ahern rt = rt6_lookup(dev_net(skb->dev), &ipv6_hdr(skb2)->saddr, NULL, 0, 679b75cc8f9SDavid Ahern skb, 0); 6805fbba8acSEric Dumazet 6815fbba8acSEric Dumazet if (rt && rt->dst.dev) 6825fbba8acSEric Dumazet skb2->dev = rt->dst.dev; 6835fbba8acSEric Dumazet 6842d7a3b27SEric Dumazet ipv6_addr_set_v4mapped(ip_hdr(skb)->saddr, &temp_saddr); 68520e1954fSEric Dumazet 68620e1954fSEric Dumazet if (data_len) { 68720e1954fSEric Dumazet /* RFC 4884 (partial) support : 68820e1954fSEric Dumazet * insert 0 padding at the end, before the extensions 68920e1954fSEric Dumazet */ 69020e1954fSEric Dumazet __skb_push(skb2, nhs); 69120e1954fSEric Dumazet skb_reset_network_header(skb2); 69220e1954fSEric Dumazet memmove(skb2->data, skb2->data + nhs, data_len - nhs); 69320e1954fSEric Dumazet memset(skb2->data + data_len - nhs, 0, nhs); 69420e1954fSEric Dumazet /* RFC 4884 4.5 : Length is measured in 64-bit words, 69520e1954fSEric Dumazet * and stored in reserved[0] 69620e1954fSEric Dumazet */ 69720e1954fSEric Dumazet info = (data_len/8) << 24; 69820e1954fSEric Dumazet } 6992d7a3b27SEric Dumazet if (type == ICMP_TIME_EXCEEDED) 7002d7a3b27SEric Dumazet icmp6_send(skb2, ICMPV6_TIME_EXCEED, ICMPV6_EXC_HOPLIMIT, 701ee576c47SJason A. Donenfeld info, &temp_saddr, IP6CB(skb2)); 7022d7a3b27SEric Dumazet else 7032d7a3b27SEric Dumazet icmp6_send(skb2, ICMPV6_DEST_UNREACH, ICMPV6_ADDR_UNREACH, 704ee576c47SJason A. Donenfeld info, &temp_saddr, IP6CB(skb2)); 7055fbba8acSEric Dumazet if (rt) 7065fbba8acSEric Dumazet ip6_rt_put(rt); 7075fbba8acSEric Dumazet 7085fbba8acSEric Dumazet kfree_skb(skb2); 7095fbba8acSEric Dumazet 7105fbba8acSEric Dumazet return 0; 7115fbba8acSEric Dumazet } 7125fbba8acSEric Dumazet EXPORT_SYMBOL(ip6_err_gen_icmpv6_unreach); 7135fbba8acSEric Dumazet 7141da177e4SLinus Torvalds static void icmpv6_echo_reply(struct sk_buff *skb) 7151da177e4SLinus Torvalds { 716c346dca1SYOSHIFUJI Hideaki struct net *net = dev_net(skb->dev); 71784427d53SYOSHIFUJI Hideaki struct sock *sk; 7181da177e4SLinus Torvalds struct inet6_dev *idev; 71984427d53SYOSHIFUJI Hideaki struct ipv6_pinfo *np; 720b71d1d42SEric Dumazet const struct in6_addr *saddr = NULL; 721cc70ab26SArnaldo Carvalho de Melo struct icmp6hdr *icmph = icmp6_hdr(skb); 7221da177e4SLinus Torvalds struct icmp6hdr tmp_hdr; 7234c9483b2SDavid S. Miller struct flowi6 fl6; 7241da177e4SLinus Torvalds struct icmpv6_msg msg; 7251da177e4SLinus Torvalds struct dst_entry *dst; 72626879da5SWei Wang struct ipcm6_cookie ipc6; 727e110861fSLorenzo Colitti u32 mark = IP6_REPLY_MARK(net, skb->mark); 7280b03a5caSStephen Suryaputra bool acast; 7291fd07f33SAndreas Roeseler u8 type; 7301da177e4SLinus Torvalds 73103f1ecccSStephen Suryaputra if (ipv6_addr_is_multicast(&ipv6_hdr(skb)->daddr) && 73203f1ecccSStephen Suryaputra net->ipv6.sysctl.icmpv6_echo_ignore_multicast) 73303f1ecccSStephen Suryaputra return; 73403f1ecccSStephen Suryaputra 7350660e03fSArnaldo Carvalho de Melo saddr = &ipv6_hdr(skb)->daddr; 7361da177e4SLinus Torvalds 7370b03a5caSStephen Suryaputra acast = ipv6_anycast_destination(skb_dst(skb), saddr); 7380b03a5caSStephen Suryaputra if (acast && net->ipv6.sysctl.icmpv6_echo_ignore_anycast) 7390b03a5caSStephen Suryaputra return; 7400b03a5caSStephen Suryaputra 741509aba3bSFX Le Bail if (!ipv6_unicast_destination(skb) && 7420b03a5caSStephen Suryaputra !(net->ipv6.sysctl.anycast_src_echo_reply && acast)) 7431da177e4SLinus Torvalds saddr = NULL; 7441da177e4SLinus Torvalds 7451fd07f33SAndreas Roeseler if (icmph->icmp6_type == ICMPV6_EXT_ECHO_REQUEST) 7461fd07f33SAndreas Roeseler type = ICMPV6_EXT_ECHO_REPLY; 7471fd07f33SAndreas Roeseler else 7481fd07f33SAndreas Roeseler type = ICMPV6_ECHO_REPLY; 7491fd07f33SAndreas Roeseler 7501da177e4SLinus Torvalds memcpy(&tmp_hdr, icmph, sizeof(tmp_hdr)); 7511fd07f33SAndreas Roeseler tmp_hdr.icmp6_type = type; 7521da177e4SLinus Torvalds 7534c9483b2SDavid S. Miller memset(&fl6, 0, sizeof(fl6)); 754a346abe0SEric Dumazet if (net->ipv6.sysctl.flowlabel_reflect & FLOWLABEL_REFLECT_ICMPV6_ECHO_REPLIES) 755a346abe0SEric Dumazet fl6.flowlabel = ip6_flowlabel(ipv6_hdr(skb)); 756a346abe0SEric Dumazet 7574c9483b2SDavid S. Miller fl6.flowi6_proto = IPPROTO_ICMPV6; 7584e3fd7a0SAlexey Dobriyan fl6.daddr = ipv6_hdr(skb)->saddr; 7591da177e4SLinus Torvalds if (saddr) 7604e3fd7a0SAlexey Dobriyan fl6.saddr = *saddr; 7611b70d792SDavid Ahern fl6.flowi6_oif = icmp6_iif(skb); 7621fd07f33SAndreas Roeseler fl6.fl6_icmp_type = type; 763e110861fSLorenzo Colitti fl6.flowi6_mark = mark; 764e2d118a1SLorenzo Colitti fl6.flowi6_uid = sock_net_uid(net, NULL); 7653df98d79SPaul Moore security_skb_classify_flow(skb, flowi6_to_flowi_common(&fl6)); 7661da177e4SLinus Torvalds 7677ba91ecbSJesper Dangaard Brouer local_bh_disable(); 768fdc0bde9SDenis V. Lunev sk = icmpv6_xmit_lock(net); 76963159f29SIan Morris if (!sk) 7707ba91ecbSJesper Dangaard Brouer goto out_bh_enable; 771fdc0bde9SDenis V. Lunev np = inet6_sk(sk); 772405666dbSDenis V. Lunev 7734c9483b2SDavid S. Miller if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr)) 7744c9483b2SDavid S. Miller fl6.flowi6_oif = np->mcast_oif; 775c4062dfcSErich E. Hoover else if (!fl6.flowi6_oif) 776c4062dfcSErich E. Hoover fl6.flowi6_oif = np->ucast_oif; 7771da177e4SLinus Torvalds 7784e64b1edSJoe Perches if (ip6_dst_lookup(net, sk, &dst, &fl6)) 7791da177e4SLinus Torvalds goto out; 7804c9483b2SDavid S. Miller dst = xfrm_lookup(net, dst, flowi6_to_flowi(&fl6), sk, 0); 781452edd59SDavid S. Miller if (IS_ERR(dst)) 782e104411bSPatrick McHardy goto out; 7831da177e4SLinus Torvalds 7840bc19985SStephen Suryaputra /* Check the ratelimit */ 7850bc19985SStephen Suryaputra if ((!(skb->dev->flags & IFF_LOOPBACK) && !icmpv6_global_allow(net, ICMPV6_ECHO_REPLY)) || 7860bc19985SStephen Suryaputra !icmpv6_xrlim_allow(sk, ICMPV6_ECHO_REPLY, &fl6)) 7870bc19985SStephen Suryaputra goto out_dst_release; 7880bc19985SStephen Suryaputra 789cfdf7647SEric Dumazet idev = __in6_dev_get(skb->dev); 7901da177e4SLinus Torvalds 7911da177e4SLinus Torvalds msg.skb = skb; 7921da177e4SLinus Torvalds msg.offset = 0; 7931fd07f33SAndreas Roeseler msg.type = type; 7941da177e4SLinus Torvalds 795b515430aSWillem de Bruijn ipcm6_init_sk(&ipc6, np); 79626879da5SWei Wang ipc6.hlimit = ip6_sk_dst_hoplimit(np, &fl6, dst); 79726879da5SWei Wang ipc6.tclass = ipv6_get_dsfield(ipv6_hdr(skb)); 7980da7536fSWillem de Bruijn ipc6.sockc.mark = mark; 79926879da5SWei Wang 8001fd07f33SAndreas Roeseler if (icmph->icmp6_type == ICMPV6_EXT_ECHO_REQUEST) 8011fd07f33SAndreas Roeseler if (!icmp_build_probe(skb, (struct icmphdr *)&tmp_hdr)) 8021fd07f33SAndreas Roeseler goto out_dst_release; 8031fd07f33SAndreas Roeseler 8044e64b1edSJoe Perches if (ip6_append_data(sk, icmpv6_getfrag, &msg, 8054e64b1edSJoe Perches skb->len + sizeof(struct icmp6hdr), 80626879da5SWei Wang sizeof(struct icmp6hdr), &ipc6, &fl6, 8075fdaa88dSWillem de Bruijn (struct rt6_info *)dst, MSG_DONTWAIT)) { 808a16292a0SEric Dumazet __ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTERRORS); 8091da177e4SLinus Torvalds ip6_flush_pending_frames(sk); 810cfdf7647SEric Dumazet } else { 8114e64b1edSJoe Perches icmpv6_push_pending_frames(sk, &fl6, &tmp_hdr, 812cfdf7647SEric Dumazet skb->len + sizeof(struct icmp6hdr)); 8131da177e4SLinus Torvalds } 8140bc19985SStephen Suryaputra out_dst_release: 8151da177e4SLinus Torvalds dst_release(dst); 8161da177e4SLinus Torvalds out: 817405666dbSDenis V. Lunev icmpv6_xmit_unlock(sk); 8187ba91ecbSJesper Dangaard Brouer out_bh_enable: 8197ba91ecbSJesper Dangaard Brouer local_bh_enable(); 8201da177e4SLinus Torvalds } 8211da177e4SLinus Torvalds 822b94f1c09SDavid S. Miller void icmpv6_notify(struct sk_buff *skb, u8 type, u8 code, __be32 info) 8231da177e4SLinus Torvalds { 824*e4129440SAndrew Lunn struct inet6_skb_parm *opt = IP6CB(skb); 82541135cc8SAlexey Dobriyan const struct inet6_protocol *ipprot; 8261da177e4SLinus Torvalds int inner_offset; 82775f2811cSJesse Gross __be16 frag_off; 828f9242b6bSDavid S. Miller u8 nexthdr; 8297304fe46SDuan Jiong struct net *net = dev_net(skb->dev); 8301da177e4SLinus Torvalds 8311da177e4SLinus Torvalds if (!pskb_may_pull(skb, sizeof(struct ipv6hdr))) 8327304fe46SDuan Jiong goto out; 8331da177e4SLinus Torvalds 834*e4129440SAndrew Lunn seg6_icmp_srh(skb, opt); 835*e4129440SAndrew Lunn 8361da177e4SLinus Torvalds nexthdr = ((struct ipv6hdr *)skb->data)->nexthdr; 8371da177e4SLinus Torvalds if (ipv6_ext_hdr(nexthdr)) { 8381da177e4SLinus Torvalds /* now skip over extension headers */ 83975f2811cSJesse Gross inner_offset = ipv6_skip_exthdr(skb, sizeof(struct ipv6hdr), 84075f2811cSJesse Gross &nexthdr, &frag_off); 8411da177e4SLinus Torvalds if (inner_offset < 0) 8427304fe46SDuan Jiong goto out; 8431da177e4SLinus Torvalds } else { 8441da177e4SLinus Torvalds inner_offset = sizeof(struct ipv6hdr); 8451da177e4SLinus Torvalds } 8461da177e4SLinus Torvalds 8471da177e4SLinus Torvalds /* Checkin header including 8 bytes of inner protocol header. */ 8481da177e4SLinus Torvalds if (!pskb_may_pull(skb, inner_offset+8)) 8497304fe46SDuan Jiong goto out; 8501da177e4SLinus Torvalds 8511da177e4SLinus Torvalds /* BUGGG_FUTURE: we should try to parse exthdrs in this packet. 8521da177e4SLinus Torvalds Without this we will not able f.e. to make source routed 8531da177e4SLinus Torvalds pmtu discovery. 8541da177e4SLinus Torvalds Corresponding argument (opt) to notifiers is already added. 8551da177e4SLinus Torvalds --ANK (980726) 8561da177e4SLinus Torvalds */ 8571da177e4SLinus Torvalds 858f9242b6bSDavid S. Miller ipprot = rcu_dereference(inet6_protos[nexthdr]); 8591da177e4SLinus Torvalds if (ipprot && ipprot->err_handler) 860*e4129440SAndrew Lunn ipprot->err_handler(skb, opt, type, code, inner_offset, info); 8611da177e4SLinus Torvalds 86269d6da0bSPavel Emelyanov raw6_icmp_error(skb, nexthdr, type, code, inner_offset, info); 8637304fe46SDuan Jiong return; 8647304fe46SDuan Jiong 8657304fe46SDuan Jiong out: 866a16292a0SEric Dumazet __ICMP6_INC_STATS(net, __in6_dev_get(skb->dev), ICMP6_MIB_INERRORS); 8671da177e4SLinus Torvalds } 8681da177e4SLinus Torvalds 8691da177e4SLinus Torvalds /* 8701da177e4SLinus Torvalds * Handle icmp messages 8711da177e4SLinus Torvalds */ 8721da177e4SLinus Torvalds 873e5bbef20SHerbert Xu static int icmpv6_rcv(struct sk_buff *skb) 8741da177e4SLinus Torvalds { 875e6f86b0fSVirgile Jarry struct net *net = dev_net(skb->dev); 876e1ae5c2eSStephen Suryaputra struct net_device *dev = icmp6_dev(skb); 8771da177e4SLinus Torvalds struct inet6_dev *idev = __in6_dev_get(dev); 878b71d1d42SEric Dumazet const struct in6_addr *saddr, *daddr; 8791da177e4SLinus Torvalds struct icmp6hdr *hdr; 880d5fdd6baSBrian Haley u8 type; 881e3e32170SRick Jones bool success = false; 8821da177e4SLinus Torvalds 883aebcf82cSHerbert Xu if (!xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb)) { 884def8b4faSAlexey Dobriyan struct sec_path *sp = skb_sec_path(skb); 8858b7817f3SHerbert Xu int nh; 8868b7817f3SHerbert Xu 887def8b4faSAlexey Dobriyan if (!(sp && sp->xvec[sp->len - 1]->props.flags & 888aebcf82cSHerbert Xu XFRM_STATE_ICMP)) 889aebcf82cSHerbert Xu goto drop_no_count; 890aebcf82cSHerbert Xu 89181aded24SDavid S. Miller if (!pskb_may_pull(skb, sizeof(*hdr) + sizeof(struct ipv6hdr))) 8928b7817f3SHerbert Xu goto drop_no_count; 8938b7817f3SHerbert Xu 8948b7817f3SHerbert Xu nh = skb_network_offset(skb); 8958b7817f3SHerbert Xu skb_set_network_header(skb, sizeof(*hdr)); 8968b7817f3SHerbert Xu 8978b7817f3SHerbert Xu if (!xfrm6_policy_check_reverse(NULL, XFRM_POLICY_IN, skb)) 8988b7817f3SHerbert Xu goto drop_no_count; 8998b7817f3SHerbert Xu 9008b7817f3SHerbert Xu skb_set_network_header(skb, nh); 9018b7817f3SHerbert Xu } 9028b7817f3SHerbert Xu 903a16292a0SEric Dumazet __ICMP6_INC_STATS(dev_net(dev), idev, ICMP6_MIB_INMSGS); 9041da177e4SLinus Torvalds 9050660e03fSArnaldo Carvalho de Melo saddr = &ipv6_hdr(skb)->saddr; 9060660e03fSArnaldo Carvalho de Melo daddr = &ipv6_hdr(skb)->daddr; 9071da177e4SLinus Torvalds 90839471ac8STom Herbert if (skb_checksum_validate(skb, IPPROTO_ICMPV6, ip6_compute_pseudo)) { 909ba7a46f1SJoe Perches net_dbg_ratelimited("ICMPv6 checksum failed [%pI6c > %pI6c]\n", 9100c6ce78aSHarvey Harrison saddr, daddr); 9116a5dc9e5SEric Dumazet goto csum_error; 9121da177e4SLinus Torvalds } 9131da177e4SLinus Torvalds 9148cf22943SHerbert Xu if (!pskb_pull(skb, sizeof(*hdr))) 9158cf22943SHerbert Xu goto discard_it; 9161da177e4SLinus Torvalds 917cc70ab26SArnaldo Carvalho de Melo hdr = icmp6_hdr(skb); 9181da177e4SLinus Torvalds 9191da177e4SLinus Torvalds type = hdr->icmp6_type; 9201da177e4SLinus Torvalds 921f3832ed2SEric Dumazet ICMP6MSGIN_INC_STATS(dev_net(dev), idev, type); 9221da177e4SLinus Torvalds 9231da177e4SLinus Torvalds switch (type) { 9241da177e4SLinus Torvalds case ICMPV6_ECHO_REQUEST: 925e6f86b0fSVirgile Jarry if (!net->ipv6.sysctl.icmpv6_echo_ignore_all) 9261da177e4SLinus Torvalds icmpv6_echo_reply(skb); 9271da177e4SLinus Torvalds break; 9281fd07f33SAndreas Roeseler case ICMPV6_EXT_ECHO_REQUEST: 9291fd07f33SAndreas Roeseler if (!net->ipv6.sysctl.icmpv6_echo_ignore_all && 9301fd07f33SAndreas Roeseler net->ipv4.sysctl_icmp_echo_enable_probe) 9311fd07f33SAndreas Roeseler icmpv6_echo_reply(skb); 9321fd07f33SAndreas Roeseler break; 9331da177e4SLinus Torvalds 9341da177e4SLinus Torvalds case ICMPV6_ECHO_REPLY: 935e3e32170SRick Jones success = ping_rcv(skb); 9361da177e4SLinus Torvalds break; 9371da177e4SLinus Torvalds 93831433202SAndreas Roeseler case ICMPV6_EXT_ECHO_REPLY: 93931433202SAndreas Roeseler success = ping_rcv(skb); 94031433202SAndreas Roeseler break; 94131433202SAndreas Roeseler 9421da177e4SLinus Torvalds case ICMPV6_PKT_TOOBIG: 9431da177e4SLinus Torvalds /* BUGGG_FUTURE: if packet contains rthdr, we cannot update 9441da177e4SLinus Torvalds standard destination cache. Seems, only "advanced" 9451da177e4SLinus Torvalds destination cache will allow to solve this problem 9461da177e4SLinus Torvalds --ANK (980726) 9471da177e4SLinus Torvalds */ 9481da177e4SLinus Torvalds if (!pskb_may_pull(skb, sizeof(struct ipv6hdr))) 9491da177e4SLinus Torvalds goto discard_it; 950cc70ab26SArnaldo Carvalho de Melo hdr = icmp6_hdr(skb); 9511da177e4SLinus Torvalds 952275757e6SGustavo A. R. Silva /* to notify */ 953a8eceea8SJoe Perches fallthrough; 9541da177e4SLinus Torvalds case ICMPV6_DEST_UNREACH: 9551da177e4SLinus Torvalds case ICMPV6_TIME_EXCEED: 9561da177e4SLinus Torvalds case ICMPV6_PARAMPROB: 9571da177e4SLinus Torvalds icmpv6_notify(skb, type, hdr->icmp6_code, hdr->icmp6_mtu); 9581da177e4SLinus Torvalds break; 9591da177e4SLinus Torvalds 9601da177e4SLinus Torvalds case NDISC_ROUTER_SOLICITATION: 9611da177e4SLinus Torvalds case NDISC_ROUTER_ADVERTISEMENT: 9621da177e4SLinus Torvalds case NDISC_NEIGHBOUR_SOLICITATION: 9631da177e4SLinus Torvalds case NDISC_NEIGHBOUR_ADVERTISEMENT: 9641da177e4SLinus Torvalds case NDISC_REDIRECT: 9651da177e4SLinus Torvalds ndisc_rcv(skb); 9661da177e4SLinus Torvalds break; 9671da177e4SLinus Torvalds 9681da177e4SLinus Torvalds case ICMPV6_MGM_QUERY: 9691da177e4SLinus Torvalds igmp6_event_query(skb); 970f185de28STaehee Yoo return 0; 9711da177e4SLinus Torvalds 9721da177e4SLinus Torvalds case ICMPV6_MGM_REPORT: 9731da177e4SLinus Torvalds igmp6_event_report(skb); 974f185de28STaehee Yoo return 0; 9751da177e4SLinus Torvalds 9761da177e4SLinus Torvalds case ICMPV6_MGM_REDUCTION: 9771da177e4SLinus Torvalds case ICMPV6_NI_QUERY: 9781da177e4SLinus Torvalds case ICMPV6_NI_REPLY: 9791da177e4SLinus Torvalds case ICMPV6_MLD2_REPORT: 9801da177e4SLinus Torvalds case ICMPV6_DHAAD_REQUEST: 9811da177e4SLinus Torvalds case ICMPV6_DHAAD_REPLY: 9821da177e4SLinus Torvalds case ICMPV6_MOBILE_PREFIX_SOL: 9831da177e4SLinus Torvalds case ICMPV6_MOBILE_PREFIX_ADV: 9841da177e4SLinus Torvalds break; 9851da177e4SLinus Torvalds 9861da177e4SLinus Torvalds default: 9871da177e4SLinus Torvalds /* informational */ 9881da177e4SLinus Torvalds if (type & ICMPV6_INFOMSG_MASK) 9891da177e4SLinus Torvalds break; 9901da177e4SLinus Torvalds 9914b3418fbSBjørn Mork net_dbg_ratelimited("icmpv6: msg of unknown type [%pI6c > %pI6c]\n", 9924b3418fbSBjørn Mork saddr, daddr); 993ea85a0a2SDavid S. Miller 9941da177e4SLinus Torvalds /* 9951da177e4SLinus Torvalds * error of unknown type. 9961da177e4SLinus Torvalds * must pass to upper level 9971da177e4SLinus Torvalds */ 9981da177e4SLinus Torvalds 9991da177e4SLinus Torvalds icmpv6_notify(skb, type, hdr->icmp6_code, hdr->icmp6_mtu); 10003ff50b79SStephen Hemminger } 10013ff50b79SStephen Hemminger 1002e3e32170SRick Jones /* until the v6 path can be better sorted assume failure and 1003e3e32170SRick Jones * preserve the status quo behaviour for the rest of the paths to here 1004e3e32170SRick Jones */ 1005e3e32170SRick Jones if (success) 1006e3e32170SRick Jones consume_skb(skb); 1007e3e32170SRick Jones else 10081da177e4SLinus Torvalds kfree_skb(skb); 1009e3e32170SRick Jones 10101da177e4SLinus Torvalds return 0; 10111da177e4SLinus Torvalds 10126a5dc9e5SEric Dumazet csum_error: 1013a16292a0SEric Dumazet __ICMP6_INC_STATS(dev_net(dev), idev, ICMP6_MIB_CSUMERRORS); 10141da177e4SLinus Torvalds discard_it: 1015a16292a0SEric Dumazet __ICMP6_INC_STATS(dev_net(dev), idev, ICMP6_MIB_INERRORS); 10168b7817f3SHerbert Xu drop_no_count: 10171da177e4SLinus Torvalds kfree_skb(skb); 10181da177e4SLinus Torvalds return 0; 10191da177e4SLinus Torvalds } 10201da177e4SLinus Torvalds 10214c9483b2SDavid S. Miller void icmpv6_flow_init(struct sock *sk, struct flowi6 *fl6, 102295e41e93SYOSHIFUJI Hideaki u8 type, 102395e41e93SYOSHIFUJI Hideaki const struct in6_addr *saddr, 102495e41e93SYOSHIFUJI Hideaki const struct in6_addr *daddr, 102595e41e93SYOSHIFUJI Hideaki int oif) 102695e41e93SYOSHIFUJI Hideaki { 10274c9483b2SDavid S. Miller memset(fl6, 0, sizeof(*fl6)); 10284e3fd7a0SAlexey Dobriyan fl6->saddr = *saddr; 10294e3fd7a0SAlexey Dobriyan fl6->daddr = *daddr; 10304c9483b2SDavid S. Miller fl6->flowi6_proto = IPPROTO_ICMPV6; 10311958b856SDavid S. Miller fl6->fl6_icmp_type = type; 10321958b856SDavid S. Miller fl6->fl6_icmp_code = 0; 10334c9483b2SDavid S. Miller fl6->flowi6_oif = oif; 10343df98d79SPaul Moore security_sk_classify_flow(sk, flowi6_to_flowi_common(fl6)); 103595e41e93SYOSHIFUJI Hideaki } 103695e41e93SYOSHIFUJI Hideaki 10373232a1efSKefeng Wang static void __net_exit icmpv6_sk_exit(struct net *net) 10383232a1efSKefeng Wang { 10393232a1efSKefeng Wang int i; 10403232a1efSKefeng Wang 10413232a1efSKefeng Wang for_each_possible_cpu(i) 104275efc250SKefeng Wang inet_ctl_sock_destroy(*per_cpu_ptr(net->ipv6.icmp_sk, i)); 104375efc250SKefeng Wang free_percpu(net->ipv6.icmp_sk); 10443232a1efSKefeng Wang } 10453232a1efSKefeng Wang 104698c6d1b2SDenis V. Lunev static int __net_init icmpv6_sk_init(struct net *net) 10471da177e4SLinus Torvalds { 10481da177e4SLinus Torvalds struct sock *sk; 10493232a1efSKefeng Wang int err, i; 10501da177e4SLinus Torvalds 105175efc250SKefeng Wang net->ipv6.icmp_sk = alloc_percpu(struct sock *); 105263159f29SIan Morris if (!net->ipv6.icmp_sk) 105379c91159SDenis V. Lunev return -ENOMEM; 105479c91159SDenis V. Lunev 10556f912042SKAMEZAWA Hiroyuki for_each_possible_cpu(i) { 10561ed8516fSDenis V. Lunev err = inet_ctl_sock_create(&sk, PF_INET6, 10571ed8516fSDenis V. Lunev SOCK_RAW, IPPROTO_ICMPV6, net); 10581da177e4SLinus Torvalds if (err < 0) { 1059f3213831SJoe Perches pr_err("Failed to initialize the ICMP6 control socket (err %d)\n", 10601da177e4SLinus Torvalds err); 10611da177e4SLinus Torvalds goto fail; 10621da177e4SLinus Torvalds } 10631da177e4SLinus Torvalds 106475efc250SKefeng Wang *per_cpu_ptr(net->ipv6.icmp_sk, i) = sk; 10655c8cafd6SDenis V. Lunev 10661da177e4SLinus Torvalds /* Enough space for 2 64K ICMP packets, including 10671da177e4SLinus Torvalds * sk_buff struct overhead. 10681da177e4SLinus Torvalds */ 106987fb4b7bSEric Dumazet sk->sk_sndbuf = 2 * SKB_TRUESIZE(64 * 1024); 10701da177e4SLinus Torvalds } 10711da177e4SLinus Torvalds return 0; 10721da177e4SLinus Torvalds 10731da177e4SLinus Torvalds fail: 10743232a1efSKefeng Wang icmpv6_sk_exit(net); 10751da177e4SLinus Torvalds return err; 10761da177e4SLinus Torvalds } 10771da177e4SLinus Torvalds 10788ed7edceSAlexey Dobriyan static struct pernet_operations icmpv6_sk_ops = { 107998c6d1b2SDenis V. Lunev .init = icmpv6_sk_init, 108098c6d1b2SDenis V. Lunev .exit = icmpv6_sk_exit, 108198c6d1b2SDenis V. Lunev }; 108298c6d1b2SDenis V. Lunev 108398c6d1b2SDenis V. Lunev int __init icmpv6_init(void) 108498c6d1b2SDenis V. Lunev { 108598c6d1b2SDenis V. Lunev int err; 108698c6d1b2SDenis V. Lunev 108798c6d1b2SDenis V. Lunev err = register_pernet_subsys(&icmpv6_sk_ops); 108898c6d1b2SDenis V. Lunev if (err < 0) 108998c6d1b2SDenis V. Lunev return err; 109098c6d1b2SDenis V. Lunev 109198c6d1b2SDenis V. Lunev err = -EAGAIN; 109298c6d1b2SDenis V. Lunev if (inet6_add_protocol(&icmpv6_protocol, IPPROTO_ICMPV6) < 0) 109398c6d1b2SDenis V. Lunev goto fail; 10945f5624cfSPravin B Shelar 10955f5624cfSPravin B Shelar err = inet6_register_icmp_sender(icmp6_send); 10965f5624cfSPravin B Shelar if (err) 10975f5624cfSPravin B Shelar goto sender_reg_err; 109898c6d1b2SDenis V. Lunev return 0; 109998c6d1b2SDenis V. Lunev 11005f5624cfSPravin B Shelar sender_reg_err: 11015f5624cfSPravin B Shelar inet6_del_protocol(&icmpv6_protocol, IPPROTO_ICMPV6); 110298c6d1b2SDenis V. Lunev fail: 1103f3213831SJoe Perches pr_err("Failed to register ICMP6 protocol\n"); 110498c6d1b2SDenis V. Lunev unregister_pernet_subsys(&icmpv6_sk_ops); 110598c6d1b2SDenis V. Lunev return err; 110698c6d1b2SDenis V. Lunev } 110798c6d1b2SDenis V. Lunev 11088ed7edceSAlexey Dobriyan void icmpv6_cleanup(void) 110998c6d1b2SDenis V. Lunev { 11105f5624cfSPravin B Shelar inet6_unregister_icmp_sender(icmp6_send); 111198c6d1b2SDenis V. Lunev unregister_pernet_subsys(&icmpv6_sk_ops); 11121da177e4SLinus Torvalds inet6_del_protocol(&icmpv6_protocol, IPPROTO_ICMPV6); 11131da177e4SLinus Torvalds } 11141da177e4SLinus Torvalds 111598c6d1b2SDenis V. Lunev 11169b5b5cffSArjan van de Ven static const struct icmp6_err { 11171da177e4SLinus Torvalds int err; 11181da177e4SLinus Torvalds int fatal; 11191da177e4SLinus Torvalds } tab_unreach[] = { 11201da177e4SLinus Torvalds { /* NOROUTE */ 11211da177e4SLinus Torvalds .err = ENETUNREACH, 11221da177e4SLinus Torvalds .fatal = 0, 11231da177e4SLinus Torvalds }, 11241da177e4SLinus Torvalds { /* ADM_PROHIBITED */ 11251da177e4SLinus Torvalds .err = EACCES, 11261da177e4SLinus Torvalds .fatal = 1, 11271da177e4SLinus Torvalds }, 11281da177e4SLinus Torvalds { /* Was NOT_NEIGHBOUR, now reserved */ 11291da177e4SLinus Torvalds .err = EHOSTUNREACH, 11301da177e4SLinus Torvalds .fatal = 0, 11311da177e4SLinus Torvalds }, 11321da177e4SLinus Torvalds { /* ADDR_UNREACH */ 11331da177e4SLinus Torvalds .err = EHOSTUNREACH, 11341da177e4SLinus Torvalds .fatal = 0, 11351da177e4SLinus Torvalds }, 11361da177e4SLinus Torvalds { /* PORT_UNREACH */ 11371da177e4SLinus Torvalds .err = ECONNREFUSED, 11381da177e4SLinus Torvalds .fatal = 1, 11391da177e4SLinus Torvalds }, 114061e76b17SJiri Bohac { /* POLICY_FAIL */ 114161e76b17SJiri Bohac .err = EACCES, 114261e76b17SJiri Bohac .fatal = 1, 114361e76b17SJiri Bohac }, 114461e76b17SJiri Bohac { /* REJECT_ROUTE */ 114561e76b17SJiri Bohac .err = EACCES, 114661e76b17SJiri Bohac .fatal = 1, 114761e76b17SJiri Bohac }, 11481da177e4SLinus Torvalds }; 11491da177e4SLinus Torvalds 1150d5fdd6baSBrian Haley int icmpv6_err_convert(u8 type, u8 code, int *err) 11511da177e4SLinus Torvalds { 11521da177e4SLinus Torvalds int fatal = 0; 11531da177e4SLinus Torvalds 11541da177e4SLinus Torvalds *err = EPROTO; 11551da177e4SLinus Torvalds 11561da177e4SLinus Torvalds switch (type) { 11571da177e4SLinus Torvalds case ICMPV6_DEST_UNREACH: 11581da177e4SLinus Torvalds fatal = 1; 115961e76b17SJiri Bohac if (code < ARRAY_SIZE(tab_unreach)) { 11601da177e4SLinus Torvalds *err = tab_unreach[code].err; 11611da177e4SLinus Torvalds fatal = tab_unreach[code].fatal; 11621da177e4SLinus Torvalds } 11631da177e4SLinus Torvalds break; 11641da177e4SLinus Torvalds 11651da177e4SLinus Torvalds case ICMPV6_PKT_TOOBIG: 11661da177e4SLinus Torvalds *err = EMSGSIZE; 11671da177e4SLinus Torvalds break; 11681da177e4SLinus Torvalds 11691da177e4SLinus Torvalds case ICMPV6_PARAMPROB: 11701da177e4SLinus Torvalds *err = EPROTO; 11711da177e4SLinus Torvalds fatal = 1; 11721da177e4SLinus Torvalds break; 11731da177e4SLinus Torvalds 11741da177e4SLinus Torvalds case ICMPV6_TIME_EXCEED: 11751da177e4SLinus Torvalds *err = EHOSTUNREACH; 11761da177e4SLinus Torvalds break; 11773ff50b79SStephen Hemminger } 11781da177e4SLinus Torvalds 11791da177e4SLinus Torvalds return fatal; 11801da177e4SLinus Torvalds } 11817159039aSYOSHIFUJI Hideaki EXPORT_SYMBOL(icmpv6_err_convert); 11827159039aSYOSHIFUJI Hideaki 11831da177e4SLinus Torvalds #ifdef CONFIG_SYSCTL 1184e8243534Sstephen hemminger static struct ctl_table ipv6_icmp_table_template[] = { 11851da177e4SLinus Torvalds { 11861da177e4SLinus Torvalds .procname = "ratelimit", 118741a76906SDaniel Lezcano .data = &init_net.ipv6.sysctl.icmpv6_time, 11881da177e4SLinus Torvalds .maxlen = sizeof(int), 11891da177e4SLinus Torvalds .mode = 0644, 11906d9f239aSAlexey Dobriyan .proc_handler = proc_dointvec_ms_jiffies, 11911da177e4SLinus Torvalds }, 1192e6f86b0fSVirgile Jarry { 1193e6f86b0fSVirgile Jarry .procname = "echo_ignore_all", 1194e6f86b0fSVirgile Jarry .data = &init_net.ipv6.sysctl.icmpv6_echo_ignore_all, 1195a6175633SEric Dumazet .maxlen = sizeof(u8), 1196e6f86b0fSVirgile Jarry .mode = 0644, 1197a6175633SEric Dumazet .proc_handler = proc_dou8vec_minmax, 1198e6f86b0fSVirgile Jarry }, 119903f1ecccSStephen Suryaputra { 120003f1ecccSStephen Suryaputra .procname = "echo_ignore_multicast", 120103f1ecccSStephen Suryaputra .data = &init_net.ipv6.sysctl.icmpv6_echo_ignore_multicast, 1202a6175633SEric Dumazet .maxlen = sizeof(u8), 120303f1ecccSStephen Suryaputra .mode = 0644, 1204a6175633SEric Dumazet .proc_handler = proc_dou8vec_minmax, 120503f1ecccSStephen Suryaputra }, 12060b03a5caSStephen Suryaputra { 12070b03a5caSStephen Suryaputra .procname = "echo_ignore_anycast", 12080b03a5caSStephen Suryaputra .data = &init_net.ipv6.sysctl.icmpv6_echo_ignore_anycast, 1209a6175633SEric Dumazet .maxlen = sizeof(u8), 12100b03a5caSStephen Suryaputra .mode = 0644, 1211a6175633SEric Dumazet .proc_handler = proc_dou8vec_minmax, 12120b03a5caSStephen Suryaputra }, 12130bc19985SStephen Suryaputra { 12140bc19985SStephen Suryaputra .procname = "ratemask", 12150bc19985SStephen Suryaputra .data = &init_net.ipv6.sysctl.icmpv6_ratemask_ptr, 12160bc19985SStephen Suryaputra .maxlen = ICMPV6_MSG_MAX + 1, 12170bc19985SStephen Suryaputra .mode = 0644, 12180bc19985SStephen Suryaputra .proc_handler = proc_do_large_bitmap, 12190bc19985SStephen Suryaputra }, 1220f8572d8fSEric W. Biederman { }, 12211da177e4SLinus Torvalds }; 1222760f2d01SDaniel Lezcano 12232c8c1e72SAlexey Dobriyan struct ctl_table * __net_init ipv6_icmp_sysctl_init(struct net *net) 1224760f2d01SDaniel Lezcano { 1225760f2d01SDaniel Lezcano struct ctl_table *table; 1226760f2d01SDaniel Lezcano 1227760f2d01SDaniel Lezcano table = kmemdup(ipv6_icmp_table_template, 1228760f2d01SDaniel Lezcano sizeof(ipv6_icmp_table_template), 1229760f2d01SDaniel Lezcano GFP_KERNEL); 12305ee09105SYOSHIFUJI Hideaki 1231e6f86b0fSVirgile Jarry if (table) { 12325ee09105SYOSHIFUJI Hideaki table[0].data = &net->ipv6.sysctl.icmpv6_time; 1233e6f86b0fSVirgile Jarry table[1].data = &net->ipv6.sysctl.icmpv6_echo_ignore_all; 123403f1ecccSStephen Suryaputra table[2].data = &net->ipv6.sysctl.icmpv6_echo_ignore_multicast; 12350b03a5caSStephen Suryaputra table[3].data = &net->ipv6.sysctl.icmpv6_echo_ignore_anycast; 12360bc19985SStephen Suryaputra table[4].data = &net->ipv6.sysctl.icmpv6_ratemask_ptr; 1237e6f86b0fSVirgile Jarry } 1238760f2d01SDaniel Lezcano return table; 1239760f2d01SDaniel Lezcano } 12401da177e4SLinus Torvalds #endif 1241