xref: /openbmc/linux/net/sctp/bind_addr.c (revision 5b4cb650)
1 /* SCTP kernel implementation
2  * (C) Copyright IBM Corp. 2001, 2003
3  * Copyright (c) Cisco 1999,2000
4  * Copyright (c) Motorola 1999,2000,2001
5  * Copyright (c) La Monte H.P. Yarroll 2001
6  *
7  * This file is part of the SCTP kernel implementation.
8  *
9  * A collection class to handle the storage of transport addresses.
10  *
11  * This SCTP implementation is free software;
12  * you can redistribute it and/or modify it under the terms of
13  * the GNU General Public License as published by
14  * the Free Software Foundation; either version 2, or (at your option)
15  * any later version.
16  *
17  * This SCTP implementation is distributed in the hope that it
18  * will be useful, but WITHOUT ANY WARRANTY; without even the implied
19  *                 ************************
20  * warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
21  * See the GNU General Public License for more details.
22  *
23  * You should have received a copy of the GNU General Public License
24  * along with GNU CC; see the file COPYING.  If not, see
25  * <http://www.gnu.org/licenses/>.
26  *
27  * Please send any bug reports or fixes you make to the
28  * email address(es):
29  *    lksctp developers <linux-sctp@vger.kernel.org>
30  *
31  * Written or modified by:
32  *    La Monte H.P. Yarroll <piggy@acm.org>
33  *    Karl Knutson          <karl@athena.chicago.il.us>
34  *    Jon Grimm             <jgrimm@us.ibm.com>
35  *    Daisy Chang           <daisyc@us.ibm.com>
36  */
37 
38 #include <linux/types.h>
39 #include <linux/slab.h>
40 #include <linux/in.h>
41 #include <net/sock.h>
42 #include <net/ipv6.h>
43 #include <net/if_inet6.h>
44 #include <net/sctp/sctp.h>
45 #include <net/sctp/sm.h>
46 
47 /* Forward declarations for internal helpers. */
48 static int sctp_copy_one_addr(struct net *net, struct sctp_bind_addr *dest,
49 			      union sctp_addr *addr, enum sctp_scope scope,
50 			      gfp_t gfp, int flags);
51 static void sctp_bind_addr_clean(struct sctp_bind_addr *);
52 
53 /* First Level Abstractions. */
54 
55 /* Copy 'src' to 'dest' taking 'scope' into account.  Omit addresses
56  * in 'src' which have a broader scope than 'scope'.
57  */
58 int sctp_bind_addr_copy(struct net *net, struct sctp_bind_addr *dest,
59 			const struct sctp_bind_addr *src,
60 			enum sctp_scope scope, gfp_t gfp,
61 			int flags)
62 {
63 	struct sctp_sockaddr_entry *addr;
64 	int error = 0;
65 
66 	/* All addresses share the same port.  */
67 	dest->port = src->port;
68 
69 	/* Extract the addresses which are relevant for this scope.  */
70 	list_for_each_entry(addr, &src->address_list, list) {
71 		error = sctp_copy_one_addr(net, dest, &addr->a, scope,
72 					   gfp, flags);
73 		if (error < 0)
74 			goto out;
75 	}
76 
77 	/* If there are no addresses matching the scope and
78 	 * this is global scope, try to get a link scope address, with
79 	 * the assumption that we must be sitting behind a NAT.
80 	 */
81 	if (list_empty(&dest->address_list) && (SCTP_SCOPE_GLOBAL == scope)) {
82 		list_for_each_entry(addr, &src->address_list, list) {
83 			error = sctp_copy_one_addr(net, dest, &addr->a,
84 						   SCTP_SCOPE_LINK, gfp,
85 						   flags);
86 			if (error < 0)
87 				goto out;
88 		}
89 	}
90 
91 out:
92 	if (error)
93 		sctp_bind_addr_clean(dest);
94 
95 	return error;
96 }
97 
98 /* Exactly duplicate the address lists.  This is necessary when doing
99  * peer-offs and accepts.  We don't want to put all the current system
100  * addresses into the endpoint.  That's useless.  But we do want duplicat
101  * the list of bound addresses that the older endpoint used.
102  */
103 int sctp_bind_addr_dup(struct sctp_bind_addr *dest,
104 			const struct sctp_bind_addr *src,
105 			gfp_t gfp)
106 {
107 	struct sctp_sockaddr_entry *addr;
108 	int error = 0;
109 
110 	/* All addresses share the same port.  */
111 	dest->port = src->port;
112 
113 	list_for_each_entry(addr, &src->address_list, list) {
114 		error = sctp_add_bind_addr(dest, &addr->a, sizeof(addr->a),
115 					   1, gfp);
116 		if (error < 0)
117 			break;
118 	}
119 
120 	return error;
121 }
122 
123 /* Initialize the SCTP_bind_addr structure for either an endpoint or
124  * an association.
125  */
126 void sctp_bind_addr_init(struct sctp_bind_addr *bp, __u16 port)
127 {
128 	INIT_LIST_HEAD(&bp->address_list);
129 	bp->port = port;
130 }
131 
132 /* Dispose of the address list. */
133 static void sctp_bind_addr_clean(struct sctp_bind_addr *bp)
134 {
135 	struct sctp_sockaddr_entry *addr, *temp;
136 
137 	/* Empty the bind address list. */
138 	list_for_each_entry_safe(addr, temp, &bp->address_list, list) {
139 		list_del_rcu(&addr->list);
140 		kfree_rcu(addr, rcu);
141 		SCTP_DBG_OBJCNT_DEC(addr);
142 	}
143 }
144 
145 /* Dispose of an SCTP_bind_addr structure  */
146 void sctp_bind_addr_free(struct sctp_bind_addr *bp)
147 {
148 	/* Empty the bind address list. */
149 	sctp_bind_addr_clean(bp);
150 }
151 
152 /* Add an address to the bind address list in the SCTP_bind_addr structure. */
153 int sctp_add_bind_addr(struct sctp_bind_addr *bp, union sctp_addr *new,
154 		       int new_size, __u8 addr_state, gfp_t gfp)
155 {
156 	struct sctp_sockaddr_entry *addr;
157 
158 	/* Add the address to the bind address list.  */
159 	addr = kzalloc(sizeof(*addr), gfp);
160 	if (!addr)
161 		return -ENOMEM;
162 
163 	memcpy(&addr->a, new, min_t(size_t, sizeof(*new), new_size));
164 
165 	/* Fix up the port if it has not yet been set.
166 	 * Both v4 and v6 have the port at the same offset.
167 	 */
168 	if (!addr->a.v4.sin_port)
169 		addr->a.v4.sin_port = htons(bp->port);
170 
171 	addr->state = addr_state;
172 	addr->valid = 1;
173 
174 	INIT_LIST_HEAD(&addr->list);
175 
176 	/* We always hold a socket lock when calling this function,
177 	 * and that acts as a writer synchronizing lock.
178 	 */
179 	list_add_tail_rcu(&addr->list, &bp->address_list);
180 	SCTP_DBG_OBJCNT_INC(addr);
181 
182 	return 0;
183 }
184 
185 /* Delete an address from the bind address list in the SCTP_bind_addr
186  * structure.
187  */
188 int sctp_del_bind_addr(struct sctp_bind_addr *bp, union sctp_addr *del_addr)
189 {
190 	struct sctp_sockaddr_entry *addr, *temp;
191 	int found = 0;
192 
193 	/* We hold the socket lock when calling this function,
194 	 * and that acts as a writer synchronizing lock.
195 	 */
196 	list_for_each_entry_safe(addr, temp, &bp->address_list, list) {
197 		if (sctp_cmp_addr_exact(&addr->a, del_addr)) {
198 			/* Found the exact match. */
199 			found = 1;
200 			addr->valid = 0;
201 			list_del_rcu(&addr->list);
202 			break;
203 		}
204 	}
205 
206 	if (found) {
207 		kfree_rcu(addr, rcu);
208 		SCTP_DBG_OBJCNT_DEC(addr);
209 		return 0;
210 	}
211 
212 	return -EINVAL;
213 }
214 
215 /* Create a network byte-order representation of all the addresses
216  * formated as SCTP parameters.
217  *
218  * The second argument is the return value for the length.
219  */
220 union sctp_params sctp_bind_addrs_to_raw(const struct sctp_bind_addr *bp,
221 					 int *addrs_len,
222 					 gfp_t gfp)
223 {
224 	union sctp_params addrparms;
225 	union sctp_params retval;
226 	int addrparms_len;
227 	union sctp_addr_param rawaddr;
228 	int len;
229 	struct sctp_sockaddr_entry *addr;
230 	struct list_head *pos;
231 	struct sctp_af *af;
232 
233 	addrparms_len = 0;
234 	len = 0;
235 
236 	/* Allocate enough memory at once. */
237 	list_for_each(pos, &bp->address_list) {
238 		len += sizeof(union sctp_addr_param);
239 	}
240 
241 	/* Don't even bother embedding an address if there
242 	 * is only one.
243 	 */
244 	if (len == sizeof(union sctp_addr_param)) {
245 		retval.v = NULL;
246 		goto end_raw;
247 	}
248 
249 	retval.v = kmalloc(len, gfp);
250 	if (!retval.v)
251 		goto end_raw;
252 
253 	addrparms = retval;
254 
255 	list_for_each_entry(addr, &bp->address_list, list) {
256 		af = sctp_get_af_specific(addr->a.v4.sin_family);
257 		len = af->to_addr_param(&addr->a, &rawaddr);
258 		memcpy(addrparms.v, &rawaddr, len);
259 		addrparms.v += len;
260 		addrparms_len += len;
261 	}
262 
263 end_raw:
264 	*addrs_len = addrparms_len;
265 	return retval;
266 }
267 
268 /*
269  * Create an address list out of the raw address list format (IPv4 and IPv6
270  * address parameters).
271  */
272 int sctp_raw_to_bind_addrs(struct sctp_bind_addr *bp, __u8 *raw_addr_list,
273 			   int addrs_len, __u16 port, gfp_t gfp)
274 {
275 	union sctp_addr_param *rawaddr;
276 	struct sctp_paramhdr *param;
277 	union sctp_addr addr;
278 	int retval = 0;
279 	int len;
280 	struct sctp_af *af;
281 
282 	/* Convert the raw address to standard address format */
283 	while (addrs_len) {
284 		param = (struct sctp_paramhdr *)raw_addr_list;
285 		rawaddr = (union sctp_addr_param *)raw_addr_list;
286 
287 		af = sctp_get_af_specific(param_type2af(param->type));
288 		if (unlikely(!af)) {
289 			retval = -EINVAL;
290 			sctp_bind_addr_clean(bp);
291 			break;
292 		}
293 
294 		af->from_addr_param(&addr, rawaddr, htons(port), 0);
295 		if (sctp_bind_addr_state(bp, &addr) != -1)
296 			goto next;
297 		retval = sctp_add_bind_addr(bp, &addr, sizeof(addr),
298 					    SCTP_ADDR_SRC, gfp);
299 		if (retval) {
300 			/* Can't finish building the list, clean up. */
301 			sctp_bind_addr_clean(bp);
302 			break;
303 		}
304 
305 next:
306 		len = ntohs(param->length);
307 		addrs_len -= len;
308 		raw_addr_list += len;
309 	}
310 
311 	return retval;
312 }
313 
314 /********************************************************************
315  * 2nd Level Abstractions
316  ********************************************************************/
317 
318 /* Does this contain a specified address?  Allow wildcarding. */
319 int sctp_bind_addr_match(struct sctp_bind_addr *bp,
320 			 const union sctp_addr *addr,
321 			 struct sctp_sock *opt)
322 {
323 	struct sctp_sockaddr_entry *laddr;
324 	int match = 0;
325 
326 	rcu_read_lock();
327 	list_for_each_entry_rcu(laddr, &bp->address_list, list) {
328 		if (!laddr->valid)
329 			continue;
330 		if (opt->pf->cmp_addr(&laddr->a, addr, opt)) {
331 			match = 1;
332 			break;
333 		}
334 	}
335 	rcu_read_unlock();
336 
337 	return match;
338 }
339 
340 int sctp_bind_addrs_check(struct sctp_sock *sp,
341 			  struct sctp_sock *sp2, int cnt2)
342 {
343 	struct sctp_bind_addr *bp2 = &sp2->ep->base.bind_addr;
344 	struct sctp_bind_addr *bp = &sp->ep->base.bind_addr;
345 	struct sctp_sockaddr_entry *laddr, *laddr2;
346 	bool exist = false;
347 	int cnt = 0;
348 
349 	rcu_read_lock();
350 	list_for_each_entry_rcu(laddr, &bp->address_list, list) {
351 		list_for_each_entry_rcu(laddr2, &bp2->address_list, list) {
352 			if (sp->pf->af->cmp_addr(&laddr->a, &laddr2->a) &&
353 			    laddr->valid && laddr2->valid) {
354 				exist = true;
355 				goto next;
356 			}
357 		}
358 		cnt = 0;
359 		break;
360 next:
361 		cnt++;
362 	}
363 	rcu_read_unlock();
364 
365 	return (cnt == cnt2) ? 0 : (exist ? -EEXIST : 1);
366 }
367 
368 /* Does the address 'addr' conflict with any addresses in
369  * the bp.
370  */
371 int sctp_bind_addr_conflict(struct sctp_bind_addr *bp,
372 			    const union sctp_addr *addr,
373 			    struct sctp_sock *bp_sp,
374 			    struct sctp_sock *addr_sp)
375 {
376 	struct sctp_sockaddr_entry *laddr;
377 	int conflict = 0;
378 	struct sctp_sock *sp;
379 
380 	/* Pick the IPv6 socket as the basis of comparison
381 	 * since it's usually a superset of the IPv4.
382 	 * If there is no IPv6 socket, then default to bind_addr.
383 	 */
384 	if (sctp_opt2sk(bp_sp)->sk_family == AF_INET6)
385 		sp = bp_sp;
386 	else if (sctp_opt2sk(addr_sp)->sk_family == AF_INET6)
387 		sp = addr_sp;
388 	else
389 		sp = bp_sp;
390 
391 	rcu_read_lock();
392 	list_for_each_entry_rcu(laddr, &bp->address_list, list) {
393 		if (!laddr->valid)
394 			continue;
395 
396 		conflict = sp->pf->cmp_addr(&laddr->a, addr, sp);
397 		if (conflict)
398 			break;
399 	}
400 	rcu_read_unlock();
401 
402 	return conflict;
403 }
404 
405 /* Get the state of the entry in the bind_addr_list */
406 int sctp_bind_addr_state(const struct sctp_bind_addr *bp,
407 			 const union sctp_addr *addr)
408 {
409 	struct sctp_sockaddr_entry *laddr;
410 	struct sctp_af *af;
411 	int state = -1;
412 
413 	af = sctp_get_af_specific(addr->sa.sa_family);
414 	if (unlikely(!af))
415 		return state;
416 
417 	rcu_read_lock();
418 	list_for_each_entry_rcu(laddr, &bp->address_list, list) {
419 		if (!laddr->valid)
420 			continue;
421 		if (af->cmp_addr(&laddr->a, addr)) {
422 			state = laddr->state;
423 			break;
424 		}
425 	}
426 	rcu_read_unlock();
427 
428 	return state;
429 }
430 
431 /* Find the first address in the bind address list that is not present in
432  * the addrs packed array.
433  */
434 union sctp_addr *sctp_find_unmatch_addr(struct sctp_bind_addr	*bp,
435 					const union sctp_addr	*addrs,
436 					int			addrcnt,
437 					struct sctp_sock	*opt)
438 {
439 	struct sctp_sockaddr_entry	*laddr;
440 	union sctp_addr			*addr;
441 	void 				*addr_buf;
442 	struct sctp_af			*af;
443 	int				i;
444 
445 	/* This is only called sctp_send_asconf_del_ip() and we hold
446 	 * the socket lock in that code patch, so that address list
447 	 * can't change.
448 	 */
449 	list_for_each_entry(laddr, &bp->address_list, list) {
450 		addr_buf = (union sctp_addr *)addrs;
451 		for (i = 0; i < addrcnt; i++) {
452 			addr = addr_buf;
453 			af = sctp_get_af_specific(addr->v4.sin_family);
454 			if (!af)
455 				break;
456 
457 			if (opt->pf->cmp_addr(&laddr->a, addr, opt))
458 				break;
459 
460 			addr_buf += af->sockaddr_len;
461 		}
462 		if (i == addrcnt)
463 			return &laddr->a;
464 	}
465 
466 	return NULL;
467 }
468 
469 /* Copy out addresses from the global local address list. */
470 static int sctp_copy_one_addr(struct net *net, struct sctp_bind_addr *dest,
471 			      union sctp_addr *addr, enum sctp_scope scope,
472 			      gfp_t gfp, int flags)
473 {
474 	int error = 0;
475 
476 	if (sctp_is_any(NULL, addr)) {
477 		error = sctp_copy_local_addr_list(net, dest, scope, gfp, flags);
478 	} else if (sctp_in_scope(net, addr, scope)) {
479 		/* Now that the address is in scope, check to see if
480 		 * the address type is supported by local sock as
481 		 * well as the remote peer.
482 		 */
483 		if ((((AF_INET == addr->sa.sa_family) &&
484 		      (flags & SCTP_ADDR4_PEERSUPP))) ||
485 		    (((AF_INET6 == addr->sa.sa_family) &&
486 		      (flags & SCTP_ADDR6_ALLOWED) &&
487 		      (flags & SCTP_ADDR6_PEERSUPP))))
488 			error = sctp_add_bind_addr(dest, addr, sizeof(*addr),
489 						   SCTP_ADDR_SRC, gfp);
490 	}
491 
492 	return error;
493 }
494 
495 /* Is this a wildcard address?  */
496 int sctp_is_any(struct sock *sk, const union sctp_addr *addr)
497 {
498 	unsigned short fam = 0;
499 	struct sctp_af *af;
500 
501 	/* Try to get the right address family */
502 	if (addr->sa.sa_family != AF_UNSPEC)
503 		fam = addr->sa.sa_family;
504 	else if (sk)
505 		fam = sk->sk_family;
506 
507 	af = sctp_get_af_specific(fam);
508 	if (!af)
509 		return 0;
510 
511 	return af->is_any(addr);
512 }
513 
514 /* Is 'addr' valid for 'scope'?  */
515 int sctp_in_scope(struct net *net, const union sctp_addr *addr,
516 		  enum sctp_scope scope)
517 {
518 	enum sctp_scope addr_scope = sctp_scope(addr);
519 
520 	/* The unusable SCTP addresses will not be considered with
521 	 * any defined scopes.
522 	 */
523 	if (SCTP_SCOPE_UNUSABLE == addr_scope)
524 		return 0;
525 	/*
526 	 * For INIT and INIT-ACK address list, let L be the level of
527 	 * of requested destination address, sender and receiver
528 	 * SHOULD include all of its addresses with level greater
529 	 * than or equal to L.
530 	 *
531 	 * Address scoping can be selectively controlled via sysctl
532 	 * option
533 	 */
534 	switch (net->sctp.scope_policy) {
535 	case SCTP_SCOPE_POLICY_DISABLE:
536 		return 1;
537 	case SCTP_SCOPE_POLICY_ENABLE:
538 		if (addr_scope <= scope)
539 			return 1;
540 		break;
541 	case SCTP_SCOPE_POLICY_PRIVATE:
542 		if (addr_scope <= scope || SCTP_SCOPE_PRIVATE == addr_scope)
543 			return 1;
544 		break;
545 	case SCTP_SCOPE_POLICY_LINK:
546 		if (addr_scope <= scope || SCTP_SCOPE_LINK == addr_scope)
547 			return 1;
548 		break;
549 	default:
550 		break;
551 	}
552 
553 	return 0;
554 }
555 
556 int sctp_is_ep_boundall(struct sock *sk)
557 {
558 	struct sctp_bind_addr *bp;
559 	struct sctp_sockaddr_entry *addr;
560 
561 	bp = &sctp_sk(sk)->ep->base.bind_addr;
562 	if (sctp_list_single_entry(&bp->address_list)) {
563 		addr = list_entry(bp->address_list.next,
564 				  struct sctp_sockaddr_entry, list);
565 		if (sctp_is_any(sk, &addr->a))
566 			return 1;
567 	}
568 	return 0;
569 }
570 
571 /********************************************************************
572  * 3rd Level Abstractions
573  ********************************************************************/
574 
575 /* What is the scope of 'addr'?  */
576 enum sctp_scope sctp_scope(const union sctp_addr *addr)
577 {
578 	struct sctp_af *af;
579 
580 	af = sctp_get_af_specific(addr->sa.sa_family);
581 	if (!af)
582 		return SCTP_SCOPE_UNUSABLE;
583 
584 	return af->scope((union sctp_addr *)addr);
585 }
586