ipv4,ipv6: grab rtnl before locking the socket

There are some setsockopt operations in ipv4 and ipv6 that are grabbing
rtnl after having grabbed the socket lock. Yet this makes it impossible
to do operations that have to lock the socket when already within a rtnl
protected scope, like ndo dev_open and dev_stop.

We normally take coarse grained locks first but setsockopt inverted that.

So this patch invert the lock logic for these operations and makes
setsockopt grab rtnl if it will be needed prior to grabbing socket lock.

Signed-off-by: Marcelo Ricardo Leitner <marcelo.leitner@gmail.com>
Acked-by: Hannes Frederic Sowa <hannes@stressinduktion.org>
Signed-off-by: David S. Miller <davem@davemloft.net>

1 files changed, 27 insertions, 8 deletions

diff --git a/net/ipv6/ipv6_sockglue.c b/net/ipv6/ipv6_sockglue.c
index 8d766d9100cb..f2b731df8d77 100644
--- a/net/ipv6/ipv6_sockglue.c
+++ b/net/ipv6/ipv6_sockglue.c
@@ -117,6 +117,18 @@ struct ipv6_txoptions *ipv6_update_options(struct sock *sk,
         return opt;
 }
 
+static bool setsockopt_needs_rtnl(int optname)
+{
+        switch (optname) {
+        case IPV6_ADD_MEMBERSHIP:
+        case IPV6_DROP_MEMBERSHIP:
+        case MCAST_JOIN_GROUP:
+        case MCAST_LEAVE_GROUP:
+                return true;
+        }
+        return false;
+}
+
 static int do_ipv6_setsockopt(struct sock *sk, int level, int optname,
                     char __user *optval, unsigned int optlen)
 {
@@ -124,6 +136,7 @@ static int do_ipv6_setsockopt(struct sock *sk, int level, int optname,
         struct net *net = sock_net(sk);
         int val, valbool;
         int retv = -ENOPROTOOPT;
+        bool needs_rtnl = setsockopt_needs_rtnl(optname);
 
         if (optval == NULL)
                 val = 0;
@@ -140,6 +153,8 @@ static int do_ipv6_setsockopt(struct sock *sk, int level, int optname,
         if (ip6_mroute_opt(optname))
                 return ip6_mroute_setsockopt(sk, optname, optval, optlen);
 
+        if (needs_rtnl)
+                rtnl_lock();
         lock_sock(sk);
 
         switch (optname) {
@@ -582,9 +597,9 @@ done:
                         break;
 
                 if (optname == IPV6_ADD_MEMBERSHIP)
-                        retv = ipv6_sock_mc_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
+                        retv = __ipv6_sock_mc_join(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
                 else
-                        retv = ipv6_sock_mc_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
+                        retv = __ipv6_sock_mc_drop(sk, mreq.ipv6mr_ifindex, &mreq.ipv6mr_multiaddr);
                 break;
         }
         case IPV6_JOIN_ANYCAST:
@@ -623,11 +638,11 @@ done:
                 }
                 psin6 = (struct sockaddr_in6 *)&greq.gr_group;
                 if (optname == MCAST_JOIN_GROUP)
-                        retv = ipv6_sock_mc_join(sk, greq.gr_interface,
-                                &psin6->sin6_addr);
+                        retv = __ipv6_sock_mc_join(sk, greq.gr_interface,
+                                                   &psin6->sin6_addr);
                 else
-                        retv = ipv6_sock_mc_drop(sk, greq.gr_interface,
-                                &psin6->sin6_addr);
+                        retv = __ipv6_sock_mc_drop(sk, greq.gr_interface,
+                                                   &psin6->sin6_addr);
                 break;
         }
         case MCAST_JOIN_SOURCE_GROUP:
@@ -659,8 +674,8 @@ done:
                         struct sockaddr_in6 *psin6;
 
                         psin6 = (struct sockaddr_in6 *)&greqs.gsr_group;
-                        retv = ipv6_sock_mc_join(sk, greqs.gsr_interface,
-                                &psin6->sin6_addr);
+                        retv = __ipv6_sock_mc_join(sk, greqs.gsr_interface,
+                                                   &psin6->sin6_addr);
                         /* prior join w/ different source is ok */
                         if (retv && retv != -EADDRINUSE)
                                 break;
@@ -837,11 +852,15 @@ pref_skip_coa:
         }
 
         release_sock(sk);
+        if (needs_rtnl)
+                rtnl_unlock();
 
         return retv;
 
 e_inval:
         release_sock(sk);
+        if (needs_rtnl)
+                rtnl_unlock();
         return -EINVAL;
 }