~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

TOMOYO Linux Cross Reference
Linux/net/netfilter/ipset/ip_set_getport.c

Version: ~ [ linux-5.11-rc3 ] ~ [ linux-5.10.7 ] ~ [ linux-5.9.16 ] ~ [ linux-5.8.18 ] ~ [ linux-5.7.19 ] ~ [ linux-5.6.19 ] ~ [ linux-5.5.19 ] ~ [ linux-5.4.89 ] ~ [ linux-5.3.18 ] ~ [ linux-5.2.21 ] ~ [ linux-5.1.21 ] ~ [ linux-5.0.21 ] ~ [ linux-4.20.17 ] ~ [ linux-4.19.167 ] ~ [ linux-4.18.20 ] ~ [ linux-4.17.19 ] ~ [ linux-4.16.18 ] ~ [ linux-4.15.18 ] ~ [ linux-4.14.215 ] ~ [ linux-4.13.16 ] ~ [ linux-4.12.14 ] ~ [ linux-4.11.12 ] ~ [ linux-4.10.17 ] ~ [ linux-4.9.251 ] ~ [ linux-4.8.17 ] ~ [ linux-4.7.10 ] ~ [ linux-4.6.7 ] ~ [ linux-4.5.7 ] ~ [ linux-4.4.251 ] ~ [ linux-4.3.6 ] ~ [ linux-4.2.8 ] ~ [ linux-4.1.52 ] ~ [ linux-4.0.9 ] ~ [ linux-3.19.8 ] ~ [ linux-3.18.140 ] ~ [ linux-3.17.8 ] ~ [ linux-3.16.85 ] ~ [ linux-3.15.10 ] ~ [ linux-3.14.79 ] ~ [ linux-3.13.11 ] ~ [ linux-3.12.74 ] ~ [ linux-3.11.10 ] ~ [ linux-3.10.108 ] ~ [ linux-2.6.32.71 ] ~ [ linux-2.6.0 ] ~ [ linux-2.4.37.11 ] ~ [ unix-v6-master ] ~ [ ccs-tools-1.8.5 ] ~ [ policy-sample ] ~
Architecture: ~ [ i386 ] ~ [ alpha ] ~ [ m68k ] ~ [ mips ] ~ [ ppc ] ~ [ sparc ] ~ [ sparc64 ] ~

  1 /* Copyright (C) 2003-2011 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
  2  *
  3  * This program is free software; you can redistribute it and/or modify
  4  * it under the terms of the GNU General Public License version 2 as
  5  * published by the Free Software Foundation.
  6  */
  7 
  8 /* Get Layer-4 data from the packets */
  9 
 10 #include <linux/ip.h>
 11 #include <linux/skbuff.h>
 12 #include <linux/icmp.h>
 13 #include <linux/icmpv6.h>
 14 #include <linux/sctp.h>
 15 #include <linux/netfilter_ipv6/ip6_tables.h>
 16 #include <net/ip.h>
 17 #include <net/ipv6.h>
 18 
 19 #include <linux/netfilter/ipset/ip_set_getport.h>
 20 #include <linux/export.h>
 21 
 22 /* We must handle non-linear skbs */
 23 static bool
 24 get_port(const struct sk_buff *skb, int protocol, unsigned int protooff,
 25          bool src, __be16 *port, u8 *proto)
 26 {
 27         switch (protocol) {
 28         case IPPROTO_TCP: {
 29                 struct tcphdr _tcph;
 30                 const struct tcphdr *th;
 31 
 32                 th = skb_header_pointer(skb, protooff, sizeof(_tcph), &_tcph);
 33                 if (th == NULL)
 34                         /* No choice either */
 35                         return false;
 36 
 37                 *port = src ? th->source : th->dest;
 38                 break;
 39         }
 40         case IPPROTO_SCTP: {
 41                 sctp_sctphdr_t _sh;
 42                 const sctp_sctphdr_t *sh;
 43 
 44                 sh = skb_header_pointer(skb, protooff, sizeof(_sh), &_sh);
 45                 if (sh == NULL)
 46                         /* No choice either */
 47                         return false;
 48 
 49                 *port = src ? sh->source : sh->dest;
 50                 break;
 51         }
 52         case IPPROTO_UDP:
 53         case IPPROTO_UDPLITE: {
 54                 struct udphdr _udph;
 55                 const struct udphdr *uh;
 56 
 57                 uh = skb_header_pointer(skb, protooff, sizeof(_udph), &_udph);
 58                 if (uh == NULL)
 59                         /* No choice either */
 60                         return false;
 61 
 62                 *port = src ? uh->source : uh->dest;
 63                 break;
 64         }
 65         case IPPROTO_ICMP: {
 66                 struct icmphdr _ich;
 67                 const struct icmphdr *ic;
 68 
 69                 ic = skb_header_pointer(skb, protooff, sizeof(_ich), &_ich);
 70                 if (ic == NULL)
 71                         return false;
 72 
 73                 *port = (__force __be16)htons((ic->type << 8) | ic->code);
 74                 break;
 75         }
 76         case IPPROTO_ICMPV6: {
 77                 struct icmp6hdr _ich;
 78                 const struct icmp6hdr *ic;
 79 
 80                 ic = skb_header_pointer(skb, protooff, sizeof(_ich), &_ich);
 81                 if (ic == NULL)
 82                         return false;
 83 
 84                 *port = (__force __be16)
 85                         htons((ic->icmp6_type << 8) | ic->icmp6_code);
 86                 break;
 87         }
 88         default:
 89                 break;
 90         }
 91         *proto = protocol;
 92 
 93         return true;
 94 }
 95 
 96 bool
 97 ip_set_get_ip4_port(const struct sk_buff *skb, bool src,
 98                     __be16 *port, u8 *proto)
 99 {
100         const struct iphdr *iph = ip_hdr(skb);
101         unsigned int protooff = ip_hdrlen(skb);
102         int protocol = iph->protocol;
103 
104         /* See comments at tcp_match in ip_tables.c */
105         if (protocol <= 0)
106                 return false;
107 
108         if (ntohs(iph->frag_off) & IP_OFFSET)
109                 switch (protocol) {
110                 case IPPROTO_TCP:
111                 case IPPROTO_SCTP:
112                 case IPPROTO_UDP:
113                 case IPPROTO_UDPLITE:
114                 case IPPROTO_ICMP:
115                         /* Port info not available for fragment offset > 0 */
116                         return false;
117                 default:
118                         /* Other protocols doesn't have ports,
119                            so we can match fragments */
120                         *proto = protocol;
121                         return true;
122                 }
123 
124         return get_port(skb, protocol, protooff, src, port, proto);
125 }
126 EXPORT_SYMBOL_GPL(ip_set_get_ip4_port);
127 
128 #if IS_ENABLED(CONFIG_IP6_NF_IPTABLES)
129 bool
130 ip_set_get_ip6_port(const struct sk_buff *skb, bool src,
131                     __be16 *port, u8 *proto)
132 {
133         int protoff;
134         u8 nexthdr;
135         __be16 frag_off = 0;
136 
137         nexthdr = ipv6_hdr(skb)->nexthdr;
138         protoff = ipv6_skip_exthdr(skb, sizeof(struct ipv6hdr), &nexthdr,
139                                    &frag_off);
140         if (protoff < 0 || (frag_off & htons(~0x7)) != 0)
141                 return false;
142 
143         return get_port(skb, nexthdr, protoff, src, port, proto);
144 }
145 EXPORT_SYMBOL_GPL(ip_set_get_ip6_port);
146 #endif
147 
148 bool
149 ip_set_get_ip_port(const struct sk_buff *skb, u8 pf, bool src, __be16 *port)
150 {
151         bool ret;
152         u8 proto;
153 
154         switch (pf) {
155         case NFPROTO_IPV4:
156                 ret = ip_set_get_ip4_port(skb, src, port, &proto);
157                 break;
158         case NFPROTO_IPV6:
159                 ret = ip_set_get_ip6_port(skb, src, port, &proto);
160                 break;
161         default:
162                 return false;
163         }
164         if (!ret)
165                 return ret;
166         switch (proto) {
167         case IPPROTO_TCP:
168         case IPPROTO_UDP:
169                 return true;
170         default:
171                 return false;
172         }
173 }
174 EXPORT_SYMBOL_GPL(ip_set_get_ip_port);
175 

~ [ source navigation ] ~ [ diff markup ] ~ [ identifier search ] ~

kernel.org | git.kernel.org | LWN.net | Project Home | Wiki (Japanese) | Wiki (English) | SVN repository | Mail admin

Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.

osdn.jp