162306a36Sopenharmony_ci// SPDX-License-Identifier: GPL-2.0-or-later 262306a36Sopenharmony_ci/* 362306a36Sopenharmony_ci * IP Payload Compression Protocol (IPComp) - RFC3173. 462306a36Sopenharmony_ci * 562306a36Sopenharmony_ci * Copyright (c) 2003 James Morris <jmorris@intercode.com.au> 662306a36Sopenharmony_ci * 762306a36Sopenharmony_ci * Todo: 862306a36Sopenharmony_ci * - Tunable compression parameters. 962306a36Sopenharmony_ci * - Compression stats. 1062306a36Sopenharmony_ci * - Adaptive compression. 1162306a36Sopenharmony_ci */ 1262306a36Sopenharmony_ci#include <linux/module.h> 1362306a36Sopenharmony_ci#include <linux/err.h> 1462306a36Sopenharmony_ci#include <linux/rtnetlink.h> 1562306a36Sopenharmony_ci#include <net/ip.h> 1662306a36Sopenharmony_ci#include <net/xfrm.h> 1762306a36Sopenharmony_ci#include <net/icmp.h> 1862306a36Sopenharmony_ci#include <net/ipcomp.h> 1962306a36Sopenharmony_ci#include <net/protocol.h> 2062306a36Sopenharmony_ci#include <net/sock.h> 2162306a36Sopenharmony_ci 2262306a36Sopenharmony_cistatic int ipcomp4_err(struct sk_buff *skb, u32 info) 2362306a36Sopenharmony_ci{ 2462306a36Sopenharmony_ci struct net *net = dev_net(skb->dev); 2562306a36Sopenharmony_ci __be32 spi; 2662306a36Sopenharmony_ci const struct iphdr *iph = (const struct iphdr *)skb->data; 2762306a36Sopenharmony_ci struct ip_comp_hdr *ipch = (struct ip_comp_hdr *)(skb->data+(iph->ihl<<2)); 2862306a36Sopenharmony_ci struct xfrm_state *x; 2962306a36Sopenharmony_ci 3062306a36Sopenharmony_ci switch (icmp_hdr(skb)->type) { 3162306a36Sopenharmony_ci case ICMP_DEST_UNREACH: 3262306a36Sopenharmony_ci if (icmp_hdr(skb)->code != ICMP_FRAG_NEEDED) 3362306a36Sopenharmony_ci return 0; 3462306a36Sopenharmony_ci break; 3562306a36Sopenharmony_ci case ICMP_REDIRECT: 3662306a36Sopenharmony_ci break; 3762306a36Sopenharmony_ci default: 3862306a36Sopenharmony_ci return 0; 3962306a36Sopenharmony_ci } 4062306a36Sopenharmony_ci 4162306a36Sopenharmony_ci spi = htonl(ntohs(ipch->cpi)); 4262306a36Sopenharmony_ci x = xfrm_state_lookup(net, skb->mark, (const xfrm_address_t *)&iph->daddr, 4362306a36Sopenharmony_ci spi, IPPROTO_COMP, AF_INET); 4462306a36Sopenharmony_ci if (!x) 4562306a36Sopenharmony_ci return 0; 4662306a36Sopenharmony_ci 4762306a36Sopenharmony_ci if (icmp_hdr(skb)->type == ICMP_DEST_UNREACH) 4862306a36Sopenharmony_ci ipv4_update_pmtu(skb, net, info, 0, IPPROTO_COMP); 4962306a36Sopenharmony_ci else 5062306a36Sopenharmony_ci ipv4_redirect(skb, net, 0, IPPROTO_COMP); 5162306a36Sopenharmony_ci xfrm_state_put(x); 5262306a36Sopenharmony_ci 5362306a36Sopenharmony_ci return 0; 5462306a36Sopenharmony_ci} 5562306a36Sopenharmony_ci 5662306a36Sopenharmony_ci/* We always hold one tunnel user reference to indicate a tunnel */ 5762306a36Sopenharmony_cistatic struct xfrm_state *ipcomp_tunnel_create(struct xfrm_state *x) 5862306a36Sopenharmony_ci{ 5962306a36Sopenharmony_ci struct net *net = xs_net(x); 6062306a36Sopenharmony_ci struct xfrm_state *t; 6162306a36Sopenharmony_ci 6262306a36Sopenharmony_ci t = xfrm_state_alloc(net); 6362306a36Sopenharmony_ci if (!t) 6462306a36Sopenharmony_ci goto out; 6562306a36Sopenharmony_ci 6662306a36Sopenharmony_ci t->id.proto = IPPROTO_IPIP; 6762306a36Sopenharmony_ci t->id.spi = x->props.saddr.a4; 6862306a36Sopenharmony_ci t->id.daddr.a4 = x->id.daddr.a4; 6962306a36Sopenharmony_ci memcpy(&t->sel, &x->sel, sizeof(t->sel)); 7062306a36Sopenharmony_ci t->props.family = AF_INET; 7162306a36Sopenharmony_ci t->props.mode = x->props.mode; 7262306a36Sopenharmony_ci t->props.saddr.a4 = x->props.saddr.a4; 7362306a36Sopenharmony_ci t->props.flags = x->props.flags; 7462306a36Sopenharmony_ci t->props.extra_flags = x->props.extra_flags; 7562306a36Sopenharmony_ci memcpy(&t->mark, &x->mark, sizeof(t->mark)); 7662306a36Sopenharmony_ci t->if_id = x->if_id; 7762306a36Sopenharmony_ci 7862306a36Sopenharmony_ci if (xfrm_init_state(t)) 7962306a36Sopenharmony_ci goto error; 8062306a36Sopenharmony_ci 8162306a36Sopenharmony_ci atomic_set(&t->tunnel_users, 1); 8262306a36Sopenharmony_ciout: 8362306a36Sopenharmony_ci return t; 8462306a36Sopenharmony_ci 8562306a36Sopenharmony_cierror: 8662306a36Sopenharmony_ci t->km.state = XFRM_STATE_DEAD; 8762306a36Sopenharmony_ci xfrm_state_put(t); 8862306a36Sopenharmony_ci t = NULL; 8962306a36Sopenharmony_ci goto out; 9062306a36Sopenharmony_ci} 9162306a36Sopenharmony_ci 9262306a36Sopenharmony_ci/* 9362306a36Sopenharmony_ci * Must be protected by xfrm_cfg_mutex. State and tunnel user references are 9462306a36Sopenharmony_ci * always incremented on success. 9562306a36Sopenharmony_ci */ 9662306a36Sopenharmony_cistatic int ipcomp_tunnel_attach(struct xfrm_state *x) 9762306a36Sopenharmony_ci{ 9862306a36Sopenharmony_ci struct net *net = xs_net(x); 9962306a36Sopenharmony_ci int err = 0; 10062306a36Sopenharmony_ci struct xfrm_state *t; 10162306a36Sopenharmony_ci u32 mark = x->mark.v & x->mark.m; 10262306a36Sopenharmony_ci 10362306a36Sopenharmony_ci t = xfrm_state_lookup(net, mark, (xfrm_address_t *)&x->id.daddr.a4, 10462306a36Sopenharmony_ci x->props.saddr.a4, IPPROTO_IPIP, AF_INET); 10562306a36Sopenharmony_ci if (!t) { 10662306a36Sopenharmony_ci t = ipcomp_tunnel_create(x); 10762306a36Sopenharmony_ci if (!t) { 10862306a36Sopenharmony_ci err = -EINVAL; 10962306a36Sopenharmony_ci goto out; 11062306a36Sopenharmony_ci } 11162306a36Sopenharmony_ci xfrm_state_insert(t); 11262306a36Sopenharmony_ci xfrm_state_hold(t); 11362306a36Sopenharmony_ci } 11462306a36Sopenharmony_ci x->tunnel = t; 11562306a36Sopenharmony_ci atomic_inc(&t->tunnel_users); 11662306a36Sopenharmony_ciout: 11762306a36Sopenharmony_ci return err; 11862306a36Sopenharmony_ci} 11962306a36Sopenharmony_ci 12062306a36Sopenharmony_cistatic int ipcomp4_init_state(struct xfrm_state *x, 12162306a36Sopenharmony_ci struct netlink_ext_ack *extack) 12262306a36Sopenharmony_ci{ 12362306a36Sopenharmony_ci int err = -EINVAL; 12462306a36Sopenharmony_ci 12562306a36Sopenharmony_ci x->props.header_len = 0; 12662306a36Sopenharmony_ci switch (x->props.mode) { 12762306a36Sopenharmony_ci case XFRM_MODE_TRANSPORT: 12862306a36Sopenharmony_ci break; 12962306a36Sopenharmony_ci case XFRM_MODE_TUNNEL: 13062306a36Sopenharmony_ci x->props.header_len += sizeof(struct iphdr); 13162306a36Sopenharmony_ci break; 13262306a36Sopenharmony_ci default: 13362306a36Sopenharmony_ci NL_SET_ERR_MSG(extack, "Unsupported XFRM mode for IPcomp"); 13462306a36Sopenharmony_ci goto out; 13562306a36Sopenharmony_ci } 13662306a36Sopenharmony_ci 13762306a36Sopenharmony_ci err = ipcomp_init_state(x, extack); 13862306a36Sopenharmony_ci if (err) 13962306a36Sopenharmony_ci goto out; 14062306a36Sopenharmony_ci 14162306a36Sopenharmony_ci if (x->props.mode == XFRM_MODE_TUNNEL) { 14262306a36Sopenharmony_ci err = ipcomp_tunnel_attach(x); 14362306a36Sopenharmony_ci if (err) { 14462306a36Sopenharmony_ci NL_SET_ERR_MSG(extack, "Kernel error: failed to initialize the associated state"); 14562306a36Sopenharmony_ci goto out; 14662306a36Sopenharmony_ci } 14762306a36Sopenharmony_ci } 14862306a36Sopenharmony_ci 14962306a36Sopenharmony_ci err = 0; 15062306a36Sopenharmony_ciout: 15162306a36Sopenharmony_ci return err; 15262306a36Sopenharmony_ci} 15362306a36Sopenharmony_ci 15462306a36Sopenharmony_cistatic int ipcomp4_rcv_cb(struct sk_buff *skb, int err) 15562306a36Sopenharmony_ci{ 15662306a36Sopenharmony_ci return 0; 15762306a36Sopenharmony_ci} 15862306a36Sopenharmony_ci 15962306a36Sopenharmony_cistatic const struct xfrm_type ipcomp_type = { 16062306a36Sopenharmony_ci .owner = THIS_MODULE, 16162306a36Sopenharmony_ci .proto = IPPROTO_COMP, 16262306a36Sopenharmony_ci .init_state = ipcomp4_init_state, 16362306a36Sopenharmony_ci .destructor = ipcomp_destroy, 16462306a36Sopenharmony_ci .input = ipcomp_input, 16562306a36Sopenharmony_ci .output = ipcomp_output 16662306a36Sopenharmony_ci}; 16762306a36Sopenharmony_ci 16862306a36Sopenharmony_cistatic struct xfrm4_protocol ipcomp4_protocol = { 16962306a36Sopenharmony_ci .handler = xfrm4_rcv, 17062306a36Sopenharmony_ci .input_handler = xfrm_input, 17162306a36Sopenharmony_ci .cb_handler = ipcomp4_rcv_cb, 17262306a36Sopenharmony_ci .err_handler = ipcomp4_err, 17362306a36Sopenharmony_ci .priority = 0, 17462306a36Sopenharmony_ci}; 17562306a36Sopenharmony_ci 17662306a36Sopenharmony_cistatic int __init ipcomp4_init(void) 17762306a36Sopenharmony_ci{ 17862306a36Sopenharmony_ci if (xfrm_register_type(&ipcomp_type, AF_INET) < 0) { 17962306a36Sopenharmony_ci pr_info("%s: can't add xfrm type\n", __func__); 18062306a36Sopenharmony_ci return -EAGAIN; 18162306a36Sopenharmony_ci } 18262306a36Sopenharmony_ci if (xfrm4_protocol_register(&ipcomp4_protocol, IPPROTO_COMP) < 0) { 18362306a36Sopenharmony_ci pr_info("%s: can't add protocol\n", __func__); 18462306a36Sopenharmony_ci xfrm_unregister_type(&ipcomp_type, AF_INET); 18562306a36Sopenharmony_ci return -EAGAIN; 18662306a36Sopenharmony_ci } 18762306a36Sopenharmony_ci return 0; 18862306a36Sopenharmony_ci} 18962306a36Sopenharmony_ci 19062306a36Sopenharmony_cistatic void __exit ipcomp4_fini(void) 19162306a36Sopenharmony_ci{ 19262306a36Sopenharmony_ci if (xfrm4_protocol_deregister(&ipcomp4_protocol, IPPROTO_COMP) < 0) 19362306a36Sopenharmony_ci pr_info("%s: can't remove protocol\n", __func__); 19462306a36Sopenharmony_ci xfrm_unregister_type(&ipcomp_type, AF_INET); 19562306a36Sopenharmony_ci} 19662306a36Sopenharmony_ci 19762306a36Sopenharmony_cimodule_init(ipcomp4_init); 19862306a36Sopenharmony_cimodule_exit(ipcomp4_fini); 19962306a36Sopenharmony_ci 20062306a36Sopenharmony_ciMODULE_LICENSE("GPL"); 20162306a36Sopenharmony_ciMODULE_DESCRIPTION("IP Payload Compression Protocol (IPComp/IPv4) - RFC3173"); 20262306a36Sopenharmony_ciMODULE_AUTHOR("James Morris <jmorris@intercode.com.au>"); 20362306a36Sopenharmony_ci 20462306a36Sopenharmony_ciMODULE_ALIAS_XFRM_TYPE(AF_INET, XFRM_PROTO_COMP); 205