routing.c 33.7 KB
Newer Older
1
/* Copyright (C) 2007-2013 B.A.T.M.A.N. contributors:
2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29
 *
 * Marek Lindner, Simon Wunderlich
 *
 * This program is free software; you can redistribute it and/or
 * modify it under the terms of version 2 of the GNU General Public
 * License as published by the Free Software Foundation.
 *
 * This program is distributed in the hope that it will be useful, but
 * WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
 * General Public License for more details.
 *
 * You should have received a copy of the GNU General Public License
 * along with this program; if not, write to the Free Software
 * Foundation, Inc., 51 Franklin Street, Fifth Floor, Boston, MA
 * 02110-1301, USA
 */

#include "main.h"
#include "routing.h"
#include "send.h"
#include "soft-interface.h"
#include "hard-interface.h"
#include "icmp_socket.h"
#include "translation-table.h"
#include "originator.h"
#include "vis.h"
#include "unicast.h"
30
#include "bridge_loop_avoidance.h"
31
#include "distributed-arp-table.h"
32
#include "network-coding.h"
33

34
static int batadv_route_unicast_packet(struct sk_buff *skb,
35
				       struct batadv_hard_iface *recv_if);
36

37 38 39
static void _batadv_update_route(struct batadv_priv *bat_priv,
				 struct batadv_orig_node *orig_node,
				 struct batadv_neigh_node *neigh_node)
40
{
41
	struct batadv_neigh_node *curr_router;
42

43
	curr_router = batadv_orig_node_get_router(orig_node);
44

45
	/* route deleted */
46
	if ((curr_router) && (!neigh_node)) {
47 48
		batadv_dbg(BATADV_DBG_ROUTES, bat_priv,
			   "Deleting route towards: %pM\n", orig_node->orig);
49 50
		batadv_tt_global_del_orig(bat_priv, orig_node,
					  "Deleted route towards originator");
51

52 53
	/* route added */
	} else if ((!curr_router) && (neigh_node)) {
54
		batadv_dbg(BATADV_DBG_ROUTES, bat_priv,
55 56
			   "Adding route towards: %pM (via %pM)\n",
			   orig_node->orig, neigh_node->addr);
57
	/* route changed */
58
	} else if (neigh_node && curr_router) {
59
		batadv_dbg(BATADV_DBG_ROUTES, bat_priv,
60 61 62
			   "Changing route towards: %pM (now via %pM - was via %pM)\n",
			   orig_node->orig, neigh_node->addr,
			   curr_router->addr);
63 64
	}

65
	if (curr_router)
66
		batadv_neigh_node_free_ref(curr_router);
67 68

	/* increase refcount of new best neighbor */
69 70
	if (neigh_node && !atomic_inc_not_zero(&neigh_node->refcount))
		neigh_node = NULL;
71 72 73 74 75 76 77

	spin_lock_bh(&orig_node->neigh_list_lock);
	rcu_assign_pointer(orig_node->router, neigh_node);
	spin_unlock_bh(&orig_node->neigh_list_lock);

	/* decrease refcount of previous best neighbor */
	if (curr_router)
78
		batadv_neigh_node_free_ref(curr_router);
79 80
}

81 82 83
void batadv_update_route(struct batadv_priv *bat_priv,
			 struct batadv_orig_node *orig_node,
			 struct batadv_neigh_node *neigh_node)
84
{
85
	struct batadv_neigh_node *router = NULL;
86 87

	if (!orig_node)
88 89
		goto out;

90
	router = batadv_orig_node_get_router(orig_node);
91

92
	if (router != neigh_node)
93
		_batadv_update_route(bat_priv, orig_node, neigh_node);
94 95 96

out:
	if (router)
97
		batadv_neigh_node_free_ref(router);
98 99
}

100
/* caller must hold the neigh_list_lock */
101 102
void batadv_bonding_candidate_del(struct batadv_orig_node *orig_node,
				  struct batadv_neigh_node *neigh_node)
103 104 105 106 107 108 109
{
	/* this neighbor is not part of our candidate list */
	if (list_empty(&neigh_node->bonding_list))
		goto out;

	list_del_rcu(&neigh_node->bonding_list);
	INIT_LIST_HEAD(&neigh_node->bonding_list);
110
	batadv_neigh_node_free_ref(neigh_node);
111 112 113 114 115 116
	atomic_dec(&orig_node->bond_candidates);

out:
	return;
}

117 118
void batadv_bonding_candidate_add(struct batadv_orig_node *orig_node,
				  struct batadv_neigh_node *neigh_node)
119
{
120
	struct batadv_neigh_node *tmp_neigh_node, *router = NULL;
121
	uint8_t interference_candidate = 0;
122 123 124 125

	spin_lock_bh(&orig_node->neigh_list_lock);

	/* only consider if it has the same primary address ...  */
126 127
	if (!batadv_compare_eth(orig_node->orig,
				neigh_node->orig_node->primary_addr))
128 129
		goto candidate_del;

130
	router = batadv_orig_node_get_router(orig_node);
131
	if (!router)
132 133 134
		goto candidate_del;

	/* ... and is good enough to be considered */
135
	if (neigh_node->tq_avg < router->tq_avg - BATADV_BONDING_TQ_THRESHOLD)
136 137
		goto candidate_del;

138
	/* check if we have another candidate with the same mac address or
139 140 141
	 * interface. If we do, we won't select this candidate because of
	 * possible interference.
	 */
142
	hlist_for_each_entry_rcu(tmp_neigh_node,
143 144 145 146 147
				 &orig_node->neigh_list, list) {
		if (tmp_neigh_node == neigh_node)
			continue;

		/* we only care if the other candidate is even
148 149
		 * considered as candidate.
		 */
150 151 152 153
		if (list_empty(&tmp_neigh_node->bonding_list))
			continue;

		if ((neigh_node->if_incoming == tmp_neigh_node->if_incoming) ||
154 155
		    (batadv_compare_eth(neigh_node->addr,
					tmp_neigh_node->addr))) {
156 157 158 159 160 161 162 163 164 165 166 167 168
			interference_candidate = 1;
			break;
		}
	}

	/* don't care further if it is an interference candidate */
	if (interference_candidate)
		goto candidate_del;

	/* this neighbor already is part of our candidate list */
	if (!list_empty(&neigh_node->bonding_list))
		goto out;

169 170 171
	if (!atomic_inc_not_zero(&neigh_node->refcount))
		goto out;

172 173 174 175 176
	list_add_rcu(&neigh_node->bonding_list, &orig_node->bond_list);
	atomic_inc(&orig_node->bond_candidates);
	goto out;

candidate_del:
177
	batadv_bonding_candidate_del(orig_node, neigh_node);
178 179 180

out:
	spin_unlock_bh(&orig_node->neigh_list_lock);
181 182

	if (router)
183
		batadv_neigh_node_free_ref(router);
184 185 186
}

/* copy primary address for bonding */
187
void
188 189
batadv_bonding_save_primary(const struct batadv_orig_node *orig_node,
			    struct batadv_orig_node *orig_neigh_node,
190
			    const struct batadv_ogm_packet *batman_ogm_packet)
191
{
192
	if (!(batman_ogm_packet->flags & BATADV_PRIMARIES_FIRST_HOP))
193 194 195 196 197
		return;

	memcpy(orig_neigh_node->primary_addr, orig_node->orig, ETH_ALEN);
}

198 199 200 201 202
/* checks whether the host restarted and is in the protection time.
 * returns:
 *  0 if the packet is to be accepted
 *  1 if the packet is to be ignored.
 */
203
int batadv_window_protected(struct batadv_priv *bat_priv, int32_t seq_num_diff,
204
			    unsigned long *last_reset)
205
{
206 207 208 209
	if (seq_num_diff <= -BATADV_TQ_LOCAL_WINDOW_SIZE ||
	    seq_num_diff >= BATADV_EXPECTED_SEQNO_RANGE) {
		if (!batadv_has_timed_out(*last_reset,
					  BATADV_RESET_PROTECTION_MS))
210
			return 1;
211 212

		*last_reset = jiffies;
213
		batadv_dbg(BATADV_DBG_BATMAN, bat_priv,
214
			   "old packet received, start protection\n");
215
	}
216

217 218 219
	return 0;
}

220
bool batadv_check_management_packet(struct sk_buff *skb,
221
				    struct batadv_hard_iface *hard_iface,
222
				    int header_len)
223 224 225 226
{
	struct ethhdr *ethhdr;

	/* drop packet if it has not necessary minimum size */
227 228
	if (unlikely(!pskb_may_pull(skb, header_len)))
		return false;
229

230
	ethhdr = eth_hdr(skb);
231 232 233

	/* packet with broadcast indication but unicast recipient */
	if (!is_broadcast_ether_addr(ethhdr->h_dest))
234
		return false;
235 236 237

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
238
		return false;
239 240 241

	/* create a copy of the skb, if needed, to modify it. */
	if (skb_cow(skb, 0) < 0)
242
		return false;
243 244 245

	/* keep skb linear */
	if (skb_linearize(skb) < 0)
246
		return false;
247

248
	return true;
249 250
}

251
static int batadv_recv_my_icmp_packet(struct batadv_priv *bat_priv,
252
				      struct sk_buff *skb, size_t icmp_len)
253
{
254 255
	struct batadv_hard_iface *primary_if = NULL;
	struct batadv_orig_node *orig_node = NULL;
256
	struct batadv_icmp_packet_rr *icmp_packet;
257
	int ret = NET_RX_DROP;
258

259
	icmp_packet = (struct batadv_icmp_packet_rr *)skb->data;
260 261

	/* add data to device queue */
262
	if (icmp_packet->msg_type != BATADV_ECHO_REQUEST) {
263
		batadv_socket_receive_packet(icmp_packet, icmp_len);
264
		goto out;
265 266
	}

267
	primary_if = batadv_primary_if_get_selected(bat_priv);
268
	if (!primary_if)
269
		goto out;
270 271 272

	/* answer echo request (ping) */
	/* get routing information */
273
	orig_node = batadv_orig_hash_find(bat_priv, icmp_packet->orig);
274
	if (!orig_node)
275
		goto out;
276

277
	/* create a copy of the skb, if needed, to modify it. */
278
	if (skb_cow(skb, ETH_HLEN) < 0)
279 280
		goto out;

281
	icmp_packet = (struct batadv_icmp_packet_rr *)skb->data;
282 283

	memcpy(icmp_packet->dst, icmp_packet->orig, ETH_ALEN);
284
	memcpy(icmp_packet->orig, primary_if->net_dev->dev_addr, ETH_ALEN);
285
	icmp_packet->msg_type = BATADV_ECHO_REPLY;
286
	icmp_packet->header.ttl = BATADV_TTL;
287

288
	if (batadv_send_skb_to_orig(skb, orig_node, NULL) != NET_XMIT_DROP)
289
		ret = NET_RX_SUCCESS;
290

291
out:
292
	if (primary_if)
293
		batadv_hardif_free_ref(primary_if);
294
	if (orig_node)
295
		batadv_orig_node_free_ref(orig_node);
296 297 298
	return ret;
}

299
static int batadv_recv_icmp_ttl_exceeded(struct batadv_priv *bat_priv,
300
					 struct sk_buff *skb)
301
{
302 303
	struct batadv_hard_iface *primary_if = NULL;
	struct batadv_orig_node *orig_node = NULL;
304
	struct batadv_icmp_packet *icmp_packet;
305
	int ret = NET_RX_DROP;
306

307
	icmp_packet = (struct batadv_icmp_packet *)skb->data;
308 309

	/* send TTL exceeded if packet is an echo request (traceroute) */
310
	if (icmp_packet->msg_type != BATADV_ECHO_REQUEST) {
311 312
		pr_debug("Warning - can't forward icmp packet from %pM to %pM: ttl exceeded\n",
			 icmp_packet->orig, icmp_packet->dst);
313
		goto out;
314 315
	}

316
	primary_if = batadv_primary_if_get_selected(bat_priv);
317
	if (!primary_if)
318
		goto out;
319 320

	/* get routing information */
321
	orig_node = batadv_orig_hash_find(bat_priv, icmp_packet->orig);
322
	if (!orig_node)
323
		goto out;
324

325
	/* create a copy of the skb, if needed, to modify it. */
326
	if (skb_cow(skb, ETH_HLEN) < 0)
327
		goto out;
328

329
	icmp_packet = (struct batadv_icmp_packet *)skb->data;
330

331
	memcpy(icmp_packet->dst, icmp_packet->orig, ETH_ALEN);
332
	memcpy(icmp_packet->orig, primary_if->net_dev->dev_addr, ETH_ALEN);
333
	icmp_packet->msg_type = BATADV_TTL_EXCEEDED;
334
	icmp_packet->header.ttl = BATADV_TTL;
335

336
	if (batadv_send_skb_to_orig(skb, orig_node, NULL) != NET_XMIT_DROP)
337
		ret = NET_RX_SUCCESS;
338

339
out:
340
	if (primary_if)
341
		batadv_hardif_free_ref(primary_if);
342
	if (orig_node)
343
		batadv_orig_node_free_ref(orig_node);
344 345 346 347
	return ret;
}


348 349
int batadv_recv_icmp_packet(struct sk_buff *skb,
			    struct batadv_hard_iface *recv_if)
350
{
351
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
352
	struct batadv_icmp_packet_rr *icmp_packet;
353
	struct ethhdr *ethhdr;
354
	struct batadv_orig_node *orig_node = NULL;
355
	int hdr_size = sizeof(struct batadv_icmp_packet);
356
	int ret = NET_RX_DROP;
357

358
	/* we truncate all incoming icmp packets if they don't match our size */
359 360
	if (skb->len >= sizeof(struct batadv_icmp_packet_rr))
		hdr_size = sizeof(struct batadv_icmp_packet_rr);
361 362 363

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, hdr_size)))
364
		goto out;
365

366
	ethhdr = eth_hdr(skb);
367 368 369

	/* packet with unicast indication but broadcast recipient */
	if (is_broadcast_ether_addr(ethhdr->h_dest))
370
		goto out;
371 372 373

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
374
		goto out;
375 376

	/* not for me */
377
	if (!batadv_is_my_mac(bat_priv, ethhdr->h_dest))
378
		goto out;
379

380
	icmp_packet = (struct batadv_icmp_packet_rr *)skb->data;
381 382

	/* add record route information if not full */
383
	if ((hdr_size == sizeof(struct batadv_icmp_packet_rr)) &&
384
	    (icmp_packet->rr_cur < BATADV_RR_LEN)) {
385
		memcpy(&(icmp_packet->rr[icmp_packet->rr_cur]),
386
		       ethhdr->h_dest, ETH_ALEN);
387 388 389 390
		icmp_packet->rr_cur++;
	}

	/* packet for me */
391
	if (batadv_is_my_mac(bat_priv, icmp_packet->dst))
392
		return batadv_recv_my_icmp_packet(bat_priv, skb, hdr_size);
393 394

	/* TTL exceeded */
395
	if (icmp_packet->header.ttl < 2)
396
		return batadv_recv_icmp_ttl_exceeded(bat_priv, skb);
397 398

	/* get routing information */
399
	orig_node = batadv_orig_hash_find(bat_priv, icmp_packet->dst);
400
	if (!orig_node)
401
		goto out;
402

403
	/* create a copy of the skb, if needed, to modify it. */
404
	if (skb_cow(skb, ETH_HLEN) < 0)
405
		goto out;
406

407
	icmp_packet = (struct batadv_icmp_packet_rr *)skb->data;
408

409
	/* decrement ttl */
410
	icmp_packet->header.ttl--;
411 412

	/* route it */
413
	if (batadv_send_skb_to_orig(skb, orig_node, recv_if) != NET_XMIT_DROP)
414
		ret = NET_RX_SUCCESS;
415

416 417
out:
	if (orig_node)
418
		batadv_orig_node_free_ref(orig_node);
419 420 421
	return ret;
}

422 423 424 425
/* In the bonding case, send the packets in a round
 * robin fashion over the remaining interfaces.
 *
 * This method rotates the bonding list and increases the
426 427
 * returned router's refcount.
 */
428 429 430
static struct batadv_neigh_node *
batadv_find_bond_router(struct batadv_orig_node *primary_orig,
			const struct batadv_hard_iface *recv_if)
431
{
432 433
	struct batadv_neigh_node *tmp_neigh_node;
	struct batadv_neigh_node *router = NULL, *first_candidate = NULL;
434 435 436 437 438 439 440 441 442 443 444 445 446 447 448 449 450 451 452 453 454 455 456 457 458 459 460

	rcu_read_lock();
	list_for_each_entry_rcu(tmp_neigh_node, &primary_orig->bond_list,
				bonding_list) {
		if (!first_candidate)
			first_candidate = tmp_neigh_node;

		/* recv_if == NULL on the first node. */
		if (tmp_neigh_node->if_incoming == recv_if)
			continue;

		if (!atomic_inc_not_zero(&tmp_neigh_node->refcount))
			continue;

		router = tmp_neigh_node;
		break;
	}

	/* use the first candidate if nothing was found. */
	if (!router && first_candidate &&
	    atomic_inc_not_zero(&first_candidate->refcount))
		router = first_candidate;

	if (!router)
		goto out;

	/* selected should point to the next element
461 462
	 * after the current router
	 */
463 464
	spin_lock_bh(&primary_orig->neigh_list_lock);
	/* this is a list_move(), which unfortunately
465 466
	 * does not exist as rcu version
	 */
467 468 469 470 471 472 473 474 475 476 477 478 479 480
	list_del_rcu(&primary_orig->bond_list);
	list_add_rcu(&primary_orig->bond_list,
		     &router->bonding_list);
	spin_unlock_bh(&primary_orig->neigh_list_lock);

out:
	rcu_read_unlock();
	return router;
}

/* Interface Alternating: Use the best of the
 * remaining candidates which are not using
 * this interface.
 *
481 482
 * Increases the returned router's refcount
 */
483 484 485
static struct batadv_neigh_node *
batadv_find_ifalter_router(struct batadv_orig_node *primary_orig,
			   const struct batadv_hard_iface *recv_if)
486
{
487 488
	struct batadv_neigh_node *tmp_neigh_node;
	struct batadv_neigh_node *router = NULL, *first_candidate = NULL;
489 490 491 492 493 494 495 496 497 498 499

	rcu_read_lock();
	list_for_each_entry_rcu(tmp_neigh_node, &primary_orig->bond_list,
				bonding_list) {
		if (!first_candidate)
			first_candidate = tmp_neigh_node;

		/* recv_if == NULL on the first node. */
		if (tmp_neigh_node->if_incoming == recv_if)
			continue;

500 501 502
		if (router && tmp_neigh_node->tq_avg <= router->tq_avg)
			continue;

503 504 505
		if (!atomic_inc_not_zero(&tmp_neigh_node->refcount))
			continue;

506 507 508
		/* decrement refcount of previously selected router */
		if (router)
			batadv_neigh_node_free_ref(router);
509

510 511
		/* we found a better router (or at least one valid router) */
		router = tmp_neigh_node;
512 513 514 515 516 517 518 519 520 521 522
	}

	/* use the first candidate if nothing was found. */
	if (!router && first_candidate &&
	    atomic_inc_not_zero(&first_candidate->refcount))
		router = first_candidate;

	rcu_read_unlock();
	return router;
}

523 524
/**
 * batadv_check_unicast_packet - Check for malformed unicast packets
525
 * @bat_priv: the bat priv with all the soft interface information
526 527 528 529 530 531 532 533
 * @skb: packet to check
 * @hdr_size: size of header to pull
 *
 * Check for short header and bad addresses in given packet. Returns negative
 * value when check fails and 0 otherwise. The negative value depends on the
 * reason: -ENODATA for bad header, -EBADR for broadcast destination or source,
 * and -EREMOTE for non-local (other host) destination.
 */
534 535
static int batadv_check_unicast_packet(struct batadv_priv *bat_priv,
				       struct sk_buff *skb, int hdr_size)
536 537 538 539 540
{
	struct ethhdr *ethhdr;

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, hdr_size)))
541
		return -ENODATA;
542

543
	ethhdr = eth_hdr(skb);
544 545 546

	/* packet with unicast indication but broadcast recipient */
	if (is_broadcast_ether_addr(ethhdr->h_dest))
547
		return -EBADR;
548 549 550

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
551
		return -EBADR;
552 553

	/* not for me */
554
	if (!batadv_is_my_mac(bat_priv, ethhdr->h_dest))
555
		return -EREMOTE;
556 557 558 559

	return 0;
}

560
/* find a suitable router for this originator, and use
561
 * bonding if possible. increases the found neighbors
562 563
 * refcount.
 */
564 565 566 567
struct batadv_neigh_node *
batadv_find_router(struct batadv_priv *bat_priv,
		   struct batadv_orig_node *orig_node,
		   const struct batadv_hard_iface *recv_if)
568
{
569 570 571
	struct batadv_orig_node *primary_orig_node;
	struct batadv_orig_node *router_orig;
	struct batadv_neigh_node *router;
572 573
	static uint8_t zero_mac[ETH_ALEN] = {0, 0, 0, 0, 0, 0};
	int bonding_enabled;
574
	uint8_t *primary_addr;
575 576 577 578

	if (!orig_node)
		return NULL;

579
	router = batadv_orig_node_get_router(orig_node);
580
	if (!router)
581
		goto err;
582 583

	/* without bonding, the first node should
584 585
	 * always choose the default router.
	 */
586 587
	bonding_enabled = atomic_read(&bat_priv->bonding);

588 589
	rcu_read_lock();
	/* select default router to output */
590
	router_orig = router->orig_node;
591 592
	if (!router_orig)
		goto err_unlock;
593 594 595

	if ((!recv_if) && (!bonding_enabled))
		goto return_router;
596

597 598
	primary_addr = router_orig->primary_addr;

599
	/* if we have something in the primary_addr, we can search
600 601
	 * for a potential bonding candidate.
	 */
602
	if (batadv_compare_eth(primary_addr, zero_mac))
603
		goto return_router;
604 605

	/* find the orig_node which has the primary interface. might
606 607
	 * even be the same as our router_orig in many cases
	 */
608
	if (batadv_compare_eth(primary_addr, router_orig->orig)) {
609 610
		primary_orig_node = router_orig;
	} else {
611 612
		primary_orig_node = batadv_orig_hash_find(bat_priv,
							  primary_addr);
613
		if (!primary_orig_node)
614
			goto return_router;
615

616
		batadv_orig_node_free_ref(primary_orig_node);
617 618 619
	}

	/* with less than 2 candidates, we can't do any
620 621
	 * bonding and prefer the original router.
	 */
622 623
	if (atomic_read(&primary_orig_node->bond_candidates) < 2)
		goto return_router;
624 625 626

	/* all nodes between should choose a candidate which
	 * is is not on the interface where the packet came
627 628
	 * in.
	 */
629
	batadv_neigh_node_free_ref(router);
630

631
	if (bonding_enabled)
632
		router = batadv_find_bond_router(primary_orig_node, recv_if);
633
	else
634
		router = batadv_find_ifalter_router(primary_orig_node, recv_if);
635

636
return_router:
637
	if (router && router->if_incoming->if_status != BATADV_IF_ACTIVE)
638 639
		goto err_unlock;

640
	rcu_read_unlock();
641
	return router;
642 643 644 645
err_unlock:
	rcu_read_unlock();
err:
	if (router)
646
		batadv_neigh_node_free_ref(router);
647
	return NULL;
648 649
}

650
static int batadv_route_unicast_packet(struct sk_buff *skb,
651
				       struct batadv_hard_iface *recv_if)
652
{
653 654 655
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
	struct batadv_orig_node *orig_node = NULL;
	struct batadv_neigh_node *neigh_node = NULL;
656
	struct batadv_unicast_packet *unicast_packet;
657
	struct ethhdr *ethhdr = eth_hdr(skb);
658
	int res, hdr_len, ret = NET_RX_DROP;
659 660
	struct sk_buff *new_skb;

661
	unicast_packet = (struct batadv_unicast_packet *)skb->data;
662 663

	/* TTL exceeded */
664
	if (unicast_packet->header.ttl < 2) {
665 666
		pr_debug("Warning - can't forward unicast packet from %pM to %pM: ttl exceeded\n",
			 ethhdr->h_source, unicast_packet->dest);
667
		goto out;
668 669 670
	}

	/* get routing information */
671
	orig_node = batadv_orig_hash_find(bat_priv, unicast_packet->dest);
672

673
	if (!orig_node)
674
		goto out;
675

676
	/* find_router() increases neigh_nodes refcount if found. */
677
	neigh_node = batadv_find_router(bat_priv, orig_node, recv_if);
678

679
	if (!neigh_node)
680
		goto out;
681 682

	/* create a copy of the skb, if needed, to modify it. */
683
	if (skb_cow(skb, ETH_HLEN) < 0)
684
		goto out;
685

686
	unicast_packet = (struct batadv_unicast_packet *)skb->data;
687

688
	if (unicast_packet->header.packet_type == BATADV_UNICAST &&
689
	    atomic_read(&bat_priv->fragmentation) &&
690
	    skb->len > neigh_node->if_incoming->net_dev->mtu) {
691 692 693
		ret = batadv_frag_send_skb(skb, bat_priv,
					   neigh_node->if_incoming,
					   neigh_node->addr);
694 695
		goto out;
	}
696

697
	if (unicast_packet->header.packet_type == BATADV_UNICAST_FRAG &&
698 699
	    batadv_frag_can_reassemble(skb,
				       neigh_node->if_incoming->net_dev->mtu)) {
700
		ret = batadv_frag_reassemble_skb(skb, bat_priv, &new_skb);
701 702

		if (ret == NET_RX_DROP)
703
			goto out;
704 705

		/* packet was buffered for late merge */
706 707 708 709
		if (!new_skb) {
			ret = NET_RX_SUCCESS;
			goto out;
		}
710 711

		skb = new_skb;
712
		unicast_packet = (struct batadv_unicast_packet *)skb->data;
713 714 715
	}

	/* decrement ttl */
716
	unicast_packet->header.ttl--;
717

718 719 720 721 722 723 724 725 726 727 728 729 730 731 732 733
	switch (unicast_packet->header.packet_type) {
	case BATADV_UNICAST_4ADDR:
		hdr_len = sizeof(struct batadv_unicast_4addr_packet);
		break;
	case BATADV_UNICAST:
		hdr_len = sizeof(struct batadv_unicast_packet);
		break;
	default:
		/* other packet types not supported - yet */
		hdr_len = -1;
		break;
	}

	if (hdr_len > 0)
		batadv_skb_set_priority(skb, hdr_len);

734
	res = batadv_send_skb_to_orig(skb, orig_node, recv_if);
735

736 737 738
	/* translate transmit result into receive result */
	if (res == NET_XMIT_SUCCESS) {
		/* skb was transmitted and consumed */
739 740 741
		batadv_inc_counter(bat_priv, BATADV_CNT_FORWARD);
		batadv_add_counter(bat_priv, BATADV_CNT_FORWARD_BYTES,
				   skb->len + ETH_HLEN);
742 743 744 745 746

		ret = NET_RX_SUCCESS;
	} else if (res == NET_XMIT_POLICED) {
		/* skb was buffered and consumed */
		ret = NET_RX_SUCCESS;
747
	}
748

749 750
out:
	if (neigh_node)
751
		batadv_neigh_node_free_ref(neigh_node);
752
	if (orig_node)
753
		batadv_orig_node_free_ref(orig_node);
754
	return ret;
755 756
}

757 758 759 760 761 762 763 764 765 766 767 768 769 770 771 772 773 774 775 776 777 778 779 780 781 782 783 784 785 786 787 788 789 790 791 792 793 794 795 796 797 798 799 800 801 802 803 804 805 806 807 808 809 810
/**
 * batadv_reroute_unicast_packet - update the unicast header for re-routing
 * @bat_priv: the bat priv with all the soft interface information
 * @unicast_packet: the unicast header to be updated
 * @dst_addr: the payload destination
 *
 * Search the translation table for dst_addr and update the unicast header with
 * the new corresponding information (originator address where the destination
 * client currently is and its known TTVN)
 *
 * Returns true if the packet header has been updated, false otherwise
 */
static bool
batadv_reroute_unicast_packet(struct batadv_priv *bat_priv,
			      struct batadv_unicast_packet *unicast_packet,
			      uint8_t *dst_addr)
{
	struct batadv_orig_node *orig_node = NULL;
	struct batadv_hard_iface *primary_if = NULL;
	bool ret = false;
	uint8_t *orig_addr, orig_ttvn;

	if (batadv_is_my_client(bat_priv, dst_addr)) {
		primary_if = batadv_primary_if_get_selected(bat_priv);
		if (!primary_if)
			goto out;
		orig_addr = primary_if->net_dev->dev_addr;
		orig_ttvn = (uint8_t)atomic_read(&bat_priv->tt.vn);
	} else {
		orig_node = batadv_transtable_search(bat_priv, NULL, dst_addr);
		if (!orig_node)
			goto out;

		if (batadv_compare_eth(orig_node->orig, unicast_packet->dest))
			goto out;

		orig_addr = orig_node->orig;
		orig_ttvn = (uint8_t)atomic_read(&orig_node->last_ttvn);
	}

	/* update the packet header */
	memcpy(unicast_packet->dest, orig_addr, ETH_ALEN);
	unicast_packet->ttvn = orig_ttvn;

	ret = true;
out:
	if (primary_if)
		batadv_hardif_free_ref(primary_if);
	if (orig_node)
		batadv_orig_node_free_ref(orig_node);

	return ret;
}

811
static int batadv_check_unicast_ttvn(struct batadv_priv *bat_priv,
812
				     struct sk_buff *skb, int hdr_len) {
813
	uint8_t curr_ttvn, old_ttvn;
814
	struct batadv_orig_node *orig_node;
815
	struct ethhdr *ethhdr;
816
	struct batadv_hard_iface *primary_if;
817
	struct batadv_unicast_packet *unicast_packet;
818
	int is_old_ttvn;
819

820
	/* check if there is enough data before accessing it */
821
	if (pskb_may_pull(skb, hdr_len + ETH_HLEN) < 0)
822 823 824 825
		return 0;

	/* create a copy of the skb (in case of for re-routing) to modify it. */
	if (skb_cow(skb, sizeof(*unicast_packet)) < 0)
826 827
		return 0;

828
	unicast_packet = (struct batadv_unicast_packet *)skb->data;
829
	ethhdr = (struct ethhdr *)(skb->data + hdr_len);
830

831 832 833 834 835 836 837 838 839 840 841 842 843 844 845 846 847 848 849 850 851 852 853 854 855 856
	/* check if the destination client was served by this node and it is now
	 * roaming. In this case, it means that the node has got a ROAM_ADV
	 * message and that it knows the new destination in the mesh to re-route
	 * the packet to
	 */
	if (batadv_tt_local_client_is_roaming(bat_priv, ethhdr->h_dest)) {
		if (batadv_reroute_unicast_packet(bat_priv, unicast_packet,
						  ethhdr->h_dest))
			net_ratelimited_function(batadv_dbg, BATADV_DBG_TT,
						 bat_priv,
						 "Rerouting unicast packet to %pM (dst=%pM): Local Roaming\n",
						 unicast_packet->dest,
						 ethhdr->h_dest);
		/* at this point the mesh destination should have been
		 * substituted with the originator address found in the global
		 * table. If not, let the packet go untouched anyway because
		 * there is nothing the node can do
		 */
		return 1;
	}

	/* retrieve the TTVN known by this node for the packet destination. This
	 * value is used later to check if the node which sent (or re-routed
	 * last time) the packet had an updated information or not
	 */
	curr_ttvn = (uint8_t)atomic_read(&bat_priv->tt.vn);
857
	if (!batadv_is_my_mac(bat_priv, unicast_packet->dest)) {
858 859
		orig_node = batadv_orig_hash_find(bat_priv,
						  unicast_packet->dest);
860 861 862 863
		/* if it is not possible to find the orig_node representing the
		 * destination, the packet can immediately be dropped as it will
		 * not be possible to deliver it
		 */
864 865 866 867
		if (!orig_node)
			return 0;

		curr_ttvn = (uint8_t)atomic_read(&orig_node->last_ttvn);
868
		batadv_orig_node_free_ref(orig_node);
869 870
	}

871 872 873
	/* check if the TTVN contained in the packet is fresher than what the
	 * node knows
	 */
874
	is_old_ttvn = batadv_seq_before(unicast_packet->ttvn, curr_ttvn);
875 876
	if (!is_old_ttvn)
		return 1;
877

878 879 880 881 882 883 884 885 886 887 888 889 890
	old_ttvn = unicast_packet->ttvn;
	/* the packet was forged based on outdated network information. Its
	 * destination can possibly be updated and forwarded towards the new
	 * target host
	 */
	if (batadv_reroute_unicast_packet(bat_priv, unicast_packet,
					  ethhdr->h_dest)) {
		net_ratelimited_function(batadv_dbg, BATADV_DBG_TT, bat_priv,
					 "Rerouting unicast packet to %pM (dst=%pM): TTVN mismatch old_ttvn=%u new_ttvn=%u\n",
					 unicast_packet->dest, ethhdr->h_dest,
					 old_ttvn, curr_ttvn);
		return 1;
	}
891

892 893 894 895 896 897
	/* the packet has not been re-routed: either the destination is
	 * currently served by this node or there is no destination at all and
	 * it is possible to drop the packet
	 */
	if (!batadv_is_my_client(bat_priv, ethhdr->h_dest))
		return 0;
898

899 900 901 902 903 904
	/* update the header in order to let the packet be delivered to this
	 * node's soft interface
	 */
	primary_if = batadv_primary_if_get_selected(bat_priv);
	if (!primary_if)
		return 0;
905

906 907 908 909 910
	memcpy(unicast_packet->dest, primary_if->net_dev->dev_addr, ETH_ALEN);

	batadv_hardif_free_ref(primary_if);

	unicast_packet->ttvn = curr_ttvn;
911 912 913 914

	return 1;
}

915 916
int batadv_recv_unicast_packet(struct sk_buff *skb,
			       struct batadv_hard_iface *recv_if)
917
{
918
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
919
	struct batadv_unicast_packet *unicast_packet;
920
	struct batadv_unicast_4addr_packet *unicast_4addr_packet;
921 922
	uint8_t *orig_addr;
	struct batadv_orig_node *orig_node = NULL;
923
	int check, hdr_size = sizeof(*unicast_packet);
924
	bool is4addr;
925

926
	unicast_packet = (struct batadv_unicast_packet *)skb->data;
927
	unicast_4addr_packet = (struct batadv_unicast_4addr_packet *)skb->data;
928

929
	is4addr = unicast_packet->header.packet_type == BATADV_UNICAST_4ADDR;
930
	/* the caller function should have already pulled 2 bytes */
931
	if (is4addr)
932
		hdr_size = sizeof(*unicast_4addr_packet);
933

934
	/* function returns -EREMOTE for promiscuous packets */
935
	check = batadv_check_unicast_packet(bat_priv, skb, hdr_size);
936 937 938 939 940 941 942 943

	/* Even though the packet is not for us, we might save it to use for
	 * decoding a later received coded packet
	 */
	if (check == -EREMOTE)
		batadv_nc_skb_store_sniffed_unicast(bat_priv, skb);

	if (check < 0)
944
		return NET_RX_DROP;
945
	if (!batadv_check_unicast_ttvn(bat_priv, skb, hdr_size))
946 947
		return NET_RX_DROP;

948
	/* packet for me */
949
	if (batadv_is_my_mac(bat_priv, unicast_packet->dest)) {
950
		if (is4addr) {
951 952
			batadv_dat_inc_counter(bat_priv,
					       unicast_4addr_packet->subtype);
953 954 955
			orig_addr = unicast_4addr_packet->src;
			orig_node = batadv_orig_hash_find(bat_priv, orig_addr);
		}
956

957 958 959 960 961 962 963
		if (batadv_dat_snoop_incoming_arp_request(bat_priv, skb,
							  hdr_size))
			goto rx_success;
		if (batadv_dat_snoop_incoming_arp_reply(bat_priv, skb,
							hdr_size))
			goto rx_success;

964
		batadv_interface_rx(recv_if->soft_iface, skb, recv_if, hdr_size,
965
				    orig_node);
966

967
rx_success:
968 969 970
		if (orig_node)
			batadv_orig_node_free_ref(orig_node);

971 972 973
		return NET_RX_SUCCESS;
	}

974
	return batadv_route_unicast_packet(skb, recv_if);
975 976
}

977
int batadv_recv_ucast_frag_packet(struct sk_buff *skb,
978
				  struct batadv_hard_iface *recv_if)
979
{
980
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
981
	struct batadv_unicast_frag_packet *unicast_packet;
982
	int hdr_size = sizeof(*unicast_packet);
983 984 985
	struct sk_buff *new_skb = NULL;
	int ret;

986
	if (batadv_check_unicast_packet(bat_priv, skb, hdr_size) < 0)
987 988
		return NET_RX_DROP;

989
	if (!batadv_check_unicast_ttvn(bat_priv, skb, hdr_size))
990 991
		return NET_RX_DROP;

992
	unicast_packet = (struct batadv_unicast_frag_packet *)skb->data;
993 994

	/* packet for me */
995
	if (batadv_is_my_mac(bat_priv, unicast_packet->dest)) {
996
		ret = batadv_frag_reassemble_skb(skb, bat_priv, &new_skb);
997 998 999 1000 1001 1002 1003 1004

		if (ret == NET_RX_DROP)
			return NET_RX_DROP;

		/* packet was buffered for late merge */
		if (!new_skb)
			return NET_RX_SUCCESS;

1005 1006 1007 1008 1009 1010 1011
		if (batadv_dat_snoop_incoming_arp_request(bat_priv, new_skb,
							  hdr_size))
			goto rx_success;
		if (batadv_dat_snoop_incoming_arp_reply(bat_priv, new_skb,
							hdr_size))
			goto rx_success;

1012
		batadv_interface_rx(recv_if->soft_iface, new_skb, recv_if,
1013
				    sizeof(struct batadv_unicast_packet), NULL);
1014 1015

rx_success:
1016 1017 1018
		return NET_RX_SUCCESS;
	}

1019
	return batadv_route_unicast_packet(skb, recv_if);
1020 1021
}

1022 1023 1024 1025 1026 1027 1028 1029 1030 1031 1032 1033 1034 1035 1036 1037 1038 1039 1040 1041 1042 1043 1044 1045 1046 1047 1048 1049 1050 1051 1052 1053 1054 1055 1056 1057 1058 1059 1060 1061 1062 1063 1064 1065 1066 1067 1068 1069
/**
 * batadv_recv_unicast_tvlv - receive and process unicast tvlv packets
 * @skb: unicast tvlv packet to process
 * @recv_if: pointer to interface this packet was received on
 * @dst_addr: the payload destination
 *
 * Returns NET_RX_SUCCESS if the packet has been consumed or NET_RX_DROP
 * otherwise.
 */
int batadv_recv_unicast_tvlv(struct sk_buff *skb,
			     struct batadv_hard_iface *recv_if)
{
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
	struct batadv_unicast_tvlv_packet *unicast_tvlv_packet;
	unsigned char *tvlv_buff;
	uint16_t tvlv_buff_len;
	int hdr_size = sizeof(*unicast_tvlv_packet);
	int ret = NET_RX_DROP;

	if (batadv_check_unicast_packet(bat_priv, skb, hdr_size) < 0)
		return NET_RX_DROP;

	/* the header is likely to be modified while forwarding */
	if (skb_cow(skb, hdr_size) < 0)
		return NET_RX_DROP;

	/* packet needs to be linearized to access the tvlv content */
	if (skb_linearize(skb) < 0)
		return NET_RX_DROP;

	unicast_tvlv_packet = (struct batadv_unicast_tvlv_packet *)skb->data;

	tvlv_buff = (unsigned char *)(skb->data + hdr_size);
	tvlv_buff_len = ntohs(unicast_tvlv_packet->tvlv_len);

	if (tvlv_buff_len > skb->len - hdr_size)
		return NET_RX_DROP;

	ret = batadv_tvlv_containers_process(bat_priv, false, NULL,
					     unicast_tvlv_packet->src,
					     unicast_tvlv_packet->dst,
					     tvlv_buff, tvlv_buff_len);

	if (ret != NET_RX_SUCCESS)
		ret = batadv_route_unicast_packet(skb, recv_if);

	return ret;
}
1070

1071 1072
int batadv_recv_bcast_packet(struct sk_buff *skb,
			     struct batadv_hard_iface *recv_if)
1073
{
1074 1075
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
	struct batadv_orig_node *orig_node = NULL;
1076
	struct batadv_bcast_packet *bcast_packet;
1077
	struct ethhdr *ethhdr;
1078
	int hdr_size = sizeof(*bcast_packet);
1079
	int ret = NET_RX_DROP;
1080 1081 1082 1083
	int32_t seq_diff;

	/* drop packet if it has not necessary minimum size */
	if (unlikely(!pskb_may_pull(skb, hdr_size)))
1084
		goto out;
1085

1086
	ethhdr = eth_hdr(skb);
1087 1088 1089

	/* packet with broadcast indication but unicast recipient */
	if (!is_broadcast_ether_addr(ethhdr->h_dest))
1090
		goto out;
1091 1092 1093

	/* packet with broadcast sender address */
	if (is_broadcast_ether_addr(ethhdr->h_source))
1094
		goto out;
1095 1096

	/* ignore broadcasts sent by myself */
1097
	if (batadv_is_my_mac(bat_priv, ethhdr->h_source))
1098
		goto out;
1099

1100
	bcast_packet = (struct batadv_bcast_packet *)skb->data;
1101 1102

	/* ignore broadcasts originated by myself */
1103
	if (batadv_is_my_mac(bat_priv, bcast_packet->orig))
1104
		goto out;
1105

1106
	if (bcast_packet->header.ttl < 2)
1107
		goto out;
1108

1109
	orig_node = batadv_orig_hash_find(bat_priv, bcast_packet->orig);
1110 1111

	if (!orig_node)
1112
		goto out;
1113

1114
	spin_lock_bh(&orig_node->bcast_seqno_lock);
1115 1116

	/* check whether the packet is a duplicate */
1117 1118
	if (batadv_test_bit(orig_node->bcast_bits, orig_node->last_bcast_seqno,
			    ntohl(bcast_packet->seqno)))
1119
		goto spin_unlock;
1120 1121 1122 1123

	seq_diff = ntohl(bcast_packet->seqno) - orig_node->last_bcast_seqno;

	/* check whether the packet is old and the host just restarted. */
1124 1125
	if (batadv_window_protected(bat_priv, seq_diff,
				    &orig_node->bcast_seqno_reset))
1126
		goto spin_unlock;
1127 1128

	/* mark broadcast in flood history, update window position
1129 1130
	 * if required.
	 */
1131
	if (batadv_bit_get_packet(bat_priv, orig_node->bcast_bits, seq_diff, 1))
1132 1133
		orig_node->last_bcast_seqno = ntohl(bcast_packet->seqno);

1134 1135
	spin_unlock_bh(&orig_node->bcast_seqno_lock);

1136
	/* check whether this has been sent by another originator before */
1137
	if (batadv_bla_check_bcast_duplist(bat_priv, skb))
1138 1139
		goto out;

1140 1141
	batadv_skb_set_priority(skb, sizeof(struct batadv_bcast_packet));

1142
	/* rebroadcast packet */
1143
	batadv_add_bcast_packet_to_list(bat_priv, skb, 1);
1144

1145 1146 1147
	/* don't hand the broadcast up if it is from an originator
	 * from the same backbone.
	 */
1148
	if (batadv_bla_is_backbone_gw(skb, orig_node, hdr_size))
1149 1150
		goto out;

1151 1152 1153 1154 1155
	if (batadv_dat_snoop_incoming_arp_request(bat_priv, skb, hdr_size))
		goto rx_success;
	if (batadv_dat_snoop_incoming_arp_reply(bat_priv, skb, hdr_size))
		goto rx_success;

1156
	/* broadcast for me */
1157 1158
	batadv_interface_rx(recv_if->soft_iface, skb, recv_if, hdr_size,
			    orig_node);
1159 1160

rx_success:
1161 1162
	ret = NET_RX_SUCCESS;
	goto out;
1163

1164 1165 1166 1167
spin_unlock:
	spin_unlock_bh(&orig_node->bcast_seqno_lock);
out:
	if (orig_node)
1168
		batadv_orig_node_free_ref(orig_node);
1169
	return ret;
1170 1171
}

1172 1173
int batadv_recv_vis_packet(struct sk_buff *skb,
			   struct batadv_hard_iface *recv_if)
1174
{
1175
	struct batadv_vis_packet *vis_packet;
1176
	struct ethhdr *ethhdr;
1177
	struct batadv_priv *bat_priv = netdev_priv(recv_if->soft_iface);
1178
	int hdr_size = sizeof(*vis_packet);
1179 1180 1181 1182 1183 1184 1185 1186

	/* keep skb linear */
	if (skb_linearize(skb) < 0)
		return NET_RX_DROP;

	if (unlikely(!pskb_may_pull(skb, hdr_size)))
		return NET_RX_DROP;

1187
	vis_packet = (struct batadv_vis_packet *)skb->data;
1188
	ethhdr = eth_hdr(skb);
1189 1190

	/* not for me */
1191
	if (!batadv_is_my_mac(bat_priv, ethhdr->h_dest))
1192 1193 1194
		return NET_RX_DROP;

	/* ignore own packets */
1195
	if (batadv_is_my_mac(bat_priv, vis_packet->vis_orig))
1196 1197
		return NET_RX_DROP;

1198
	if (batadv_is_my_mac(bat_priv, vis_packet->sender_orig))
1199 1200 1201
		return NET_RX_DROP;

	switch (vis_packet->vis_type) {
1202
	case BATADV_VIS_TYPE_SERVER_SYNC:
1203 1204
		batadv_receive_server_sync_packet(bat_priv, vis_packet,
						  skb_headlen(skb));
1205 1206
		break;

1207
	case BATADV_VIS_TYPE_CLIENT_UPDATE:
1208 1209
		batadv_receive_client_update_packet(bat_priv, vis_packet,
						    skb_headlen(skb));
1210 1211 1212 1213 1214 1215 1216
		break;

	default:	/* ignore unknown packet */
		break;
	}

	/* We take a copy of the data in the packet, so we should
1217 1218
	 * always free the skbuf.
	 */
1219 1220
	return NET_RX_DROP;
}