1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3  * INET		An implementation of the TCP/IP protocol suite for the LINUX
4  *		operating system.  INET is implemented using the  BSD Socket
5  *		interface as the means of communication with the user level.
6  *
7  *		"Ping" sockets
8  *
9  * Based on ipv4/ping.c code.
10  *
11  * Authors:	Lorenzo Colitti (IPv6 support)
12  *		Vasiliy Kulikov / Openwall (IPv4 implementation, for Linux 2.6),
13  *		Pavel Kankovsky (IPv4 implementation, for Linux 2.4.32)
14  */
15 
16 #include <net/addrconf.h>
17 #include <net/ipv6.h>
18 #include <net/ip6_route.h>
19 #include <net/protocol.h>
20 #include <net/udp.h>
21 #include <net/transp_v6.h>
22 #include <linux/proc_fs.h>
23 #include <net/ping.h>
24 
ping_v6_destroy(struct sock * sk)25 static void ping_v6_destroy(struct sock *sk)
26 {
27 	inet6_destroy_sock(sk);
28 }
29 
30 /* Compatibility glue so we can support IPv6 when it's compiled as a module */
dummy_ipv6_recv_error(struct sock * sk,struct msghdr * msg,int len,int * addr_len)31 static int dummy_ipv6_recv_error(struct sock *sk, struct msghdr *msg, int len,
32 				 int *addr_len)
33 {
34 	return -EAFNOSUPPORT;
35 }
dummy_ip6_datagram_recv_ctl(struct sock * sk,struct msghdr * msg,struct sk_buff * skb)36 static void dummy_ip6_datagram_recv_ctl(struct sock *sk, struct msghdr *msg,
37 				       struct sk_buff *skb)
38 {
39 }
dummy_icmpv6_err_convert(u8 type,u8 code,int * err)40 static int dummy_icmpv6_err_convert(u8 type, u8 code, int *err)
41 {
42 	return -EAFNOSUPPORT;
43 }
dummy_ipv6_icmp_error(struct sock * sk,struct sk_buff * skb,int err,__be16 port,u32 info,u8 * payload)44 static void dummy_ipv6_icmp_error(struct sock *sk, struct sk_buff *skb, int err,
45 				  __be16 port, u32 info, u8 *payload) {}
dummy_ipv6_chk_addr(struct net * net,const struct in6_addr * addr,const struct net_device * dev,int strict)46 static int dummy_ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
47 			       const struct net_device *dev, int strict)
48 {
49 	return 0;
50 }
51 
ping_v6_sendmsg(struct sock * sk,struct msghdr * msg,size_t len)52 static int ping_v6_sendmsg(struct sock *sk, struct msghdr *msg, size_t len)
53 {
54 	struct inet_sock *inet = inet_sk(sk);
55 	struct ipv6_pinfo *np = inet6_sk(sk);
56 	struct icmp6hdr user_icmph;
57 	int addr_type;
58 	struct in6_addr *daddr;
59 	int oif = 0;
60 	struct flowi6 fl6;
61 	int err;
62 	struct dst_entry *dst;
63 	struct rt6_info *rt;
64 	struct pingfakehdr pfh;
65 	struct ipcm6_cookie ipc6;
66 
67 	err = ping_common_sendmsg(AF_INET6, msg, len, &user_icmph,
68 				  sizeof(user_icmph));
69 	if (err)
70 		return err;
71 
72 	if (msg->msg_name) {
73 		DECLARE_SOCKADDR(struct sockaddr_in6 *, u, msg->msg_name);
74 		if (msg->msg_namelen < sizeof(*u))
75 			return -EINVAL;
76 		if (u->sin6_family != AF_INET6) {
77 			return -EAFNOSUPPORT;
78 		}
79 		daddr = &(u->sin6_addr);
80 		if (__ipv6_addr_needs_scope_id(ipv6_addr_type(daddr)))
81 			oif = u->sin6_scope_id;
82 	} else {
83 		if (sk->sk_state != TCP_ESTABLISHED)
84 			return -EDESTADDRREQ;
85 		daddr = &sk->sk_v6_daddr;
86 	}
87 
88 	if (!oif)
89 		oif = sk->sk_bound_dev_if;
90 
91 	if (!oif)
92 		oif = np->sticky_pktinfo.ipi6_ifindex;
93 
94 	if (!oif && ipv6_addr_is_multicast(daddr))
95 		oif = np->mcast_oif;
96 	else if (!oif)
97 		oif = np->ucast_oif;
98 
99 	addr_type = ipv6_addr_type(daddr);
100 	if ((__ipv6_addr_needs_scope_id(addr_type) && !oif) ||
101 	    (addr_type & IPV6_ADDR_MAPPED) ||
102 	    (oif && sk->sk_bound_dev_if && oif != sk->sk_bound_dev_if))
103 		return -EINVAL;
104 
105 	ipcm6_init_sk(&ipc6, np);
106 	ipc6.sockc.tsflags = sk->sk_tsflags;
107 	ipc6.sockc.mark = sk->sk_mark;
108 
109 	memset(&fl6, 0, sizeof(fl6));
110 	fl6.flowi6_oif = oif;
111 
112 	if (msg->msg_controllen) {
113 		struct ipv6_txoptions opt = {};
114 
115 		opt.tot_len = sizeof(opt);
116 		ipc6.opt = &opt;
117 
118 		err = ip6_datagram_send_ctl(sock_net(sk), sk, msg, &fl6, &ipc6);
119 		if (err < 0)
120 			return err;
121 
122 		/* Changes to txoptions and flow info are not implemented, yet.
123 		 * Drop the options.
124 		 */
125 		ipc6.opt = NULL;
126 	}
127 
128 	fl6.flowi6_proto = IPPROTO_ICMPV6;
129 	fl6.saddr = np->saddr;
130 	fl6.daddr = *daddr;
131 	fl6.flowi6_mark = ipc6.sockc.mark;
132 	fl6.flowi6_uid = sk->sk_uid;
133 	fl6.fl6_icmp_type = user_icmph.icmp6_type;
134 	fl6.fl6_icmp_code = user_icmph.icmp6_code;
135 	security_sk_classify_flow(sk, flowi6_to_flowi_common(&fl6));
136 
137 	fl6.flowlabel = ip6_make_flowinfo(ipc6.tclass, fl6.flowlabel);
138 
139 	dst = ip6_sk_dst_lookup_flow(sk, &fl6, daddr, false);
140 	if (IS_ERR(dst))
141 		return PTR_ERR(dst);
142 	rt = (struct rt6_info *) dst;
143 
144 	if (!fl6.flowi6_oif && ipv6_addr_is_multicast(&fl6.daddr))
145 		fl6.flowi6_oif = np->mcast_oif;
146 	else if (!fl6.flowi6_oif)
147 		fl6.flowi6_oif = np->ucast_oif;
148 
149 	pfh.icmph.type = user_icmph.icmp6_type;
150 	pfh.icmph.code = user_icmph.icmp6_code;
151 	pfh.icmph.checksum = 0;
152 	pfh.icmph.un.echo.id = inet->inet_sport;
153 	pfh.icmph.un.echo.sequence = user_icmph.icmp6_sequence;
154 	pfh.msg = msg;
155 	pfh.wcheck = 0;
156 	pfh.family = AF_INET6;
157 
158 	if (ipc6.hlimit < 0)
159 		ipc6.hlimit = ip6_sk_dst_hoplimit(np, &fl6, dst);
160 
161 	lock_sock(sk);
162 	err = ip6_append_data(sk, ping_getfrag, &pfh, len,
163 			      0, &ipc6, &fl6, rt,
164 			      MSG_DONTWAIT);
165 
166 	if (err) {
167 		ICMP6_INC_STATS(sock_net(sk), rt->rt6i_idev,
168 				ICMP6_MIB_OUTERRORS);
169 		ip6_flush_pending_frames(sk);
170 	} else {
171 		icmpv6_push_pending_frames(sk, &fl6,
172 					   (struct icmp6hdr *)&pfh.icmph, len);
173 	}
174 	release_sock(sk);
175 
176 	dst_release(dst);
177 
178 	if (err)
179 		return err;
180 
181 	return len;
182 }
183 
184 struct proto pingv6_prot = {
185 	.name =		"PINGv6",
186 	.owner =	THIS_MODULE,
187 	.init =		ping_init_sock,
188 	.close =	ping_close,
189 	.destroy =	ping_v6_destroy,
190 	.connect =	ip6_datagram_connect_v6_only,
191 	.disconnect =	__udp_disconnect,
192 	.setsockopt =	ipv6_setsockopt,
193 	.getsockopt =	ipv6_getsockopt,
194 	.sendmsg =	ping_v6_sendmsg,
195 	.recvmsg =	ping_recvmsg,
196 	.bind =		ping_bind,
197 	.backlog_rcv =	ping_queue_rcv_skb,
198 	.hash =		ping_hash,
199 	.unhash =	ping_unhash,
200 	.get_port =	ping_get_port,
201 	.put_port =	ping_unhash,
202 	.obj_size =	sizeof(struct raw6_sock),
203 };
204 EXPORT_SYMBOL_GPL(pingv6_prot);
205 
206 static struct inet_protosw pingv6_protosw = {
207 	.type =      SOCK_DGRAM,
208 	.protocol =  IPPROTO_ICMPV6,
209 	.prot =      &pingv6_prot,
210 	.ops =       &inet6_sockraw_ops,
211 	.flags =     INET_PROTOSW_REUSE,
212 };
213 
214 #ifdef CONFIG_PROC_FS
ping_v6_seq_start(struct seq_file * seq,loff_t * pos)215 static void *ping_v6_seq_start(struct seq_file *seq, loff_t *pos)
216 {
217 	return ping_seq_start(seq, pos, AF_INET6);
218 }
219 
ping_v6_seq_show(struct seq_file * seq,void * v)220 static int ping_v6_seq_show(struct seq_file *seq, void *v)
221 {
222 	if (v == SEQ_START_TOKEN) {
223 		seq_puts(seq, IPV6_SEQ_DGRAM_HEADER);
224 	} else {
225 		int bucket = ((struct ping_iter_state *) seq->private)->bucket;
226 		struct inet_sock *inet = inet_sk(v);
227 		__u16 srcp = ntohs(inet->inet_sport);
228 		__u16 destp = ntohs(inet->inet_dport);
229 		ip6_dgram_sock_seq_show(seq, v, srcp, destp, bucket);
230 	}
231 	return 0;
232 }
233 
234 static const struct seq_operations ping_v6_seq_ops = {
235 	.start		= ping_v6_seq_start,
236 	.show		= ping_v6_seq_show,
237 	.next		= ping_seq_next,
238 	.stop		= ping_seq_stop,
239 };
240 
ping_v6_proc_init_net(struct net * net)241 static int __net_init ping_v6_proc_init_net(struct net *net)
242 {
243 	if (!proc_create_net("icmp6", 0444, net->proc_net, &ping_v6_seq_ops,
244 			sizeof(struct ping_iter_state)))
245 		return -ENOMEM;
246 	return 0;
247 }
248 
ping_v6_proc_exit_net(struct net * net)249 static void __net_exit ping_v6_proc_exit_net(struct net *net)
250 {
251 	remove_proc_entry("icmp6", net->proc_net);
252 }
253 
254 static struct pernet_operations ping_v6_net_ops = {
255 	.init = ping_v6_proc_init_net,
256 	.exit = ping_v6_proc_exit_net,
257 };
258 #endif
259 
pingv6_init(void)260 int __init pingv6_init(void)
261 {
262 #ifdef CONFIG_PROC_FS
263 	int ret = register_pernet_subsys(&ping_v6_net_ops);
264 	if (ret)
265 		return ret;
266 #endif
267 	pingv6_ops.ipv6_recv_error = ipv6_recv_error;
268 	pingv6_ops.ip6_datagram_recv_common_ctl = ip6_datagram_recv_common_ctl;
269 	pingv6_ops.ip6_datagram_recv_specific_ctl =
270 		ip6_datagram_recv_specific_ctl;
271 	pingv6_ops.icmpv6_err_convert = icmpv6_err_convert;
272 	pingv6_ops.ipv6_icmp_error = ipv6_icmp_error;
273 	pingv6_ops.ipv6_chk_addr = ipv6_chk_addr;
274 	return inet6_register_protosw(&pingv6_protosw);
275 }
276 
277 /* This never gets called because it's not possible to unload the ipv6 module,
278  * but just in case.
279  */
pingv6_exit(void)280 void pingv6_exit(void)
281 {
282 	pingv6_ops.ipv6_recv_error = dummy_ipv6_recv_error;
283 	pingv6_ops.ip6_datagram_recv_common_ctl = dummy_ip6_datagram_recv_ctl;
284 	pingv6_ops.ip6_datagram_recv_specific_ctl = dummy_ip6_datagram_recv_ctl;
285 	pingv6_ops.icmpv6_err_convert = dummy_icmpv6_err_convert;
286 	pingv6_ops.ipv6_icmp_error = dummy_ipv6_icmp_error;
287 	pingv6_ops.ipv6_chk_addr = dummy_ipv6_chk_addr;
288 #ifdef CONFIG_PROC_FS
289 	unregister_pernet_subsys(&ping_v6_net_ops);
290 #endif
291 	inet6_unregister_protosw(&pingv6_protosw);
292 }
293