ip6_input.c 6.2 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50
/*
 *	IPv6 input
 *	Linux INET6 implementation 
 *
 *	Authors:
 *	Pedro Roque		<roque@di.fc.ul.pt>
 *	Ian P. Morris		<I.P.Morris@soton.ac.uk>
 *
 *	$Id: ip6_input.c,v 1.19 2000/12/13 18:31:50 davem Exp $
 *
 *	Based in linux/net/ipv4/ip_input.c
 *
 *	This program is free software; you can redistribute it and/or
 *      modify it under the terms of the GNU General Public License
 *      as published by the Free Software Foundation; either version
 *      2 of the License, or (at your option) any later version.
 */
/* Changes
 *
 * 	Mitsuru KANDA @USAGI and
 * 	YOSHIFUJI Hideaki @USAGI: Remove ipv6_parse_exthdrs().
 */

#include <linux/errno.h>
#include <linux/types.h>
#include <linux/socket.h>
#include <linux/sockios.h>
#include <linux/sched.h>
#include <linux/net.h>
#include <linux/netdevice.h>
#include <linux/in6.h>
#include <linux/icmpv6.h>

#include <linux/netfilter.h>
#include <linux/netfilter_ipv6.h>

#include <net/sock.h>
#include <net/snmp.h>

#include <net/ipv6.h>
#include <net/protocol.h>
#include <net/transp_v6.h>
#include <net/rawv6.h>
#include <net/ndisc.h>
#include <net/ip6_route.h>
#include <net/addrconf.h>
#include <net/xfrm.h>



51
inline int ip6_rcv_finish( struct sk_buff *skb) 
L
Linus Torvalds 已提交
52 53 54 55 56 57 58
{
	if (skb->dst == NULL)
		ip6_route_input(skb);

	return dst_input(skb);
}

D
David S. Miller 已提交
59
int ipv6_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt, struct net_device *orig_dev)
L
Linus Torvalds 已提交
60 61 62
{
	struct ipv6hdr *hdr;
	u32 		pkt_len;
63
	struct inet6_dev *idev;
L
Linus Torvalds 已提交
64

65 66 67 68 69 70
	if (skb->pkt_type == PACKET_OTHERHOST) {
		kfree_skb(skb);
		return 0;
	}

	rcu_read_lock();
L
Linus Torvalds 已提交
71

72 73 74
	idev = __in6_dev_get(skb->dev);

	IP6_INC_STATS_BH(idev, IPSTATS_MIB_INRECEIVES);
L
Linus Torvalds 已提交
75 76

	if ((skb = skb_share_check(skb, GFP_ATOMIC)) == NULL) {
77 78
		IP6_INC_STATS_BH(idev, IPSTATS_MIB_INDISCARDS);
		rcu_read_unlock();
L
Linus Torvalds 已提交
79 80 81
		goto out;
	}

82 83
	memset(IP6CB(skb), 0, sizeof(struct inet6_skb_parm));

L
Linus Torvalds 已提交
84 85 86 87 88 89 90 91 92 93 94
	/*
	 * Store incoming device index. When the packet will
	 * be queued, we cannot refer to skb->dev anymore.
	 *
	 * BTW, when we send a packet for our own local address on a
	 * non-loopback interface (e.g. ethX), it is being delivered
	 * via the loopback interface (lo) here; skb->dev = &loopback_dev.
	 * It, however, should be considered as if it is being
	 * arrived via the sending interface (ethX), because of the
	 * nature of scoping architecture. --yoshfuji
	 */
95
	IP6CB(skb)->iif = skb->dst ? ip6_dst_idev(skb->dst)->dev->ifindex : dev->ifindex;
L
Linus Torvalds 已提交
96

97
	if (unlikely(!pskb_may_pull(skb, sizeof(*hdr))))
L
Linus Torvalds 已提交
98 99 100 101 102 103 104
		goto err;

	hdr = skb->nh.ipv6h;

	if (hdr->version != 6)
		goto err;

105 106 107
	skb->h.raw = (u8 *)(hdr + 1);
	IP6CB(skb)->nhoff = offsetof(struct ipv6hdr, nexthdr);

L
Linus Torvalds 已提交
108 109 110 111 112 113 114
	pkt_len = ntohs(hdr->payload_len);

	/* pkt_len may be zero if Jumbo payload option is present */
	if (pkt_len || hdr->nexthdr != NEXTHDR_HOP) {
		if (pkt_len + sizeof(struct ipv6hdr) > skb->len)
			goto truncated;
		if (pskb_trim_rcsum(skb, pkt_len + sizeof(struct ipv6hdr))) {
115
			IP6_INC_STATS_BH(idev, IPSTATS_MIB_INHDRERRORS);
L
Linus Torvalds 已提交
116 117 118 119 120 121
			goto drop;
		}
		hdr = skb->nh.ipv6h;
	}

	if (hdr->nexthdr == NEXTHDR_HOP) {
122
		if (ipv6_parse_hopopts(&skb) < 0) {
123 124
			IP6_INC_STATS_BH(idev, IPSTATS_MIB_INHDRERRORS);
			rcu_read_unlock();
L
Linus Torvalds 已提交
125 126 127 128
			return 0;
		}
	}

129 130
	rcu_read_unlock();

L
Linus Torvalds 已提交
131 132
	return NF_HOOK(PF_INET6,NF_IP6_PRE_ROUTING, skb, dev, NULL, ip6_rcv_finish);
truncated:
133
	IP6_INC_STATS_BH(idev, IPSTATS_MIB_INTRUNCATEDPKTS);
L
Linus Torvalds 已提交
134
err:
135
	IP6_INC_STATS_BH(idev, IPSTATS_MIB_INHDRERRORS);
L
Linus Torvalds 已提交
136
drop:
137
	rcu_read_unlock();
L
Linus Torvalds 已提交
138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154
	kfree_skb(skb);
out:
	return 0;
}

/*
 *	Deliver the packet to the host
 */


static inline int ip6_input_finish(struct sk_buff *skb)
{
	struct inet6_protocol *ipprot;
	struct sock *raw_sk;
	unsigned int nhoff;
	int nexthdr;
	u8 hash;
155
	struct inet6_dev *idev;
L
Linus Torvalds 已提交
156 157 158 159 160 161 162

	/*
	 *	Parse extension headers
	 */

	rcu_read_lock();
resubmit:
163
	idev = ip6_dst_idev(skb->dst);
L
Linus Torvalds 已提交
164 165
	if (!pskb_pull(skb, skb->h.raw - skb->data))
		goto discard;
166
	nhoff = IP6CB(skb)->nhoff;
L
Linus Torvalds 已提交
167 168 169
	nexthdr = skb->nh.raw[nhoff];

	raw_sk = sk_head(&raw_v6_htable[nexthdr & (MAX_INET_PROTOS - 1)]);
170 171
	if (raw_sk && !ipv6_raw_deliver(skb, nexthdr))
		raw_sk = NULL;
L
Linus Torvalds 已提交
172 173 174 175 176 177 178 179

	hash = nexthdr & (MAX_INET_PROTOS - 1);
	if ((ipprot = rcu_dereference(inet6_protos[hash])) != NULL) {
		int ret;
		
		if (ipprot->flags & INET6_PROTO_FINAL) {
			struct ipv6hdr *hdr;	

180 181 182 183 184
			/* Free reference early: we don't need it any more,
			   and it may hold ip_conntrack module loaded
			   indefinitely. */
			nf_reset(skb);

L
Linus Torvalds 已提交
185 186 187 188 189 190 191 192 193 194 195 196 197
			skb_postpull_rcsum(skb, skb->nh.raw,
					   skb->h.raw - skb->nh.raw);
			hdr = skb->nh.ipv6h;
			if (ipv6_addr_is_multicast(&hdr->daddr) &&
			    !ipv6_chk_mcast_addr(skb->dev, &hdr->daddr,
			    &hdr->saddr) &&
			    !ipv6_is_mld(skb, nexthdr))
				goto discard;
		}
		if (!(ipprot->flags & INET6_PROTO_NOPOLICY) &&
		    !xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb)) 
			goto discard;
		
198
		ret = ipprot->handler(&skb);
L
Linus Torvalds 已提交
199 200 201
		if (ret > 0)
			goto resubmit;
		else if (ret == 0)
202
			IP6_INC_STATS_BH(idev, IPSTATS_MIB_INDELIVERS);
L
Linus Torvalds 已提交
203 204 205
	} else {
		if (!raw_sk) {
			if (xfrm6_policy_check(NULL, XFRM_POLICY_IN, skb)) {
206
				IP6_INC_STATS_BH(idev, IPSTATS_MIB_INUNKNOWNPROTOS);
207 208 209
				icmpv6_send(skb, ICMPV6_PARAMPROB,
				            ICMPV6_UNK_NEXTHDR, nhoff,
				            skb->dev);
L
Linus Torvalds 已提交
210
			}
211
		} else
212
			IP6_INC_STATS_BH(idev, IPSTATS_MIB_INDELIVERS);
213
		kfree_skb(skb);
L
Linus Torvalds 已提交
214 215 216 217 218
	}
	rcu_read_unlock();
	return 0;

discard:
219
	IP6_INC_STATS_BH(idev, IPSTATS_MIB_INDISCARDS);
L
Linus Torvalds 已提交
220 221 222 223 224 225 226 227 228 229 230 231 232 233 234 235
	rcu_read_unlock();
	kfree_skb(skb);
	return 0;
}


int ip6_input(struct sk_buff *skb)
{
	return NF_HOOK(PF_INET6,NF_IP6_LOCAL_IN, skb, skb->dev, NULL, ip6_input_finish);
}

int ip6_mc_input(struct sk_buff *skb)
{
	struct ipv6hdr *hdr;
	int deliver;

236
	IP6_INC_STATS_BH(ip6_dst_idev(skb->dst), IPSTATS_MIB_INMCASTPKTS);
L
Linus Torvalds 已提交
237 238 239 240 241 242 243 244 245 246 247 248 249 250 251 252 253 254 255 256 257 258 259 260 261 262 263 264 265 266 267 268 269 270 271 272 273 274 275 276

	hdr = skb->nh.ipv6h;
	deliver = likely(!(skb->dev->flags & (IFF_PROMISC|IFF_ALLMULTI))) ||
	    ipv6_chk_mcast_addr(skb->dev, &hdr->daddr, NULL);

	/*
	 *	IPv6 multicast router mode isnt currently supported.
	 */
#if 0
	if (ipv6_config.multicast_route) {
		int addr_type;

		addr_type = ipv6_addr_type(&hdr->daddr);

		if (!(addr_type & (IPV6_ADDR_LOOPBACK | IPV6_ADDR_LINKLOCAL))) {
			struct sk_buff *skb2;
			struct dst_entry *dst;

			dst = skb->dst;
			
			if (deliver) {
				skb2 = skb_clone(skb, GFP_ATOMIC);
				dst_output(skb2);
			} else {
				dst_output(skb);
				return 0;
			}
		}
	}
#endif

	if (likely(deliver)) {
		ip6_input(skb);
		return 0;
	}
	/* discard */
	kfree_skb(skb);

	return 0;
}