diff options
Diffstat (limited to 'net/ipv4/xfrm4_output.c')
| -rw-r--r-- | net/ipv4/xfrm4_output.c | 61 |
1 files changed, 3 insertions, 58 deletions
diff --git a/net/ipv4/xfrm4_output.c b/net/ipv4/xfrm4_output.c index 4ef8efaf6a67..ac9d91d4bb05 100644 --- a/net/ipv4/xfrm4_output.c +++ b/net/ipv4/xfrm4_output.c | |||
| @@ -12,67 +12,10 @@ | |||
| 12 | #include <linux/skbuff.h> | 12 | #include <linux/skbuff.h> |
| 13 | #include <linux/spinlock.h> | 13 | #include <linux/spinlock.h> |
| 14 | #include <linux/netfilter_ipv4.h> | 14 | #include <linux/netfilter_ipv4.h> |
| 15 | #include <net/inet_ecn.h> | ||
| 16 | #include <net/ip.h> | 15 | #include <net/ip.h> |
| 17 | #include <net/xfrm.h> | 16 | #include <net/xfrm.h> |
| 18 | #include <net/icmp.h> | 17 | #include <net/icmp.h> |
| 19 | 18 | ||
| 20 | /* Add encapsulation header. | ||
| 21 | * | ||
| 22 | * In transport mode, the IP header will be moved forward to make space | ||
| 23 | * for the encapsulation header. | ||
| 24 | * | ||
| 25 | * In tunnel mode, the top IP header will be constructed per RFC 2401. | ||
| 26 | * The following fields in it shall be filled in by x->type->output: | ||
| 27 | * tot_len | ||
| 28 | * check | ||
| 29 | * | ||
| 30 | * On exit, skb->h will be set to the start of the payload to be processed | ||
| 31 | * by x->type->output and skb->nh will be set to the top IP header. | ||
| 32 | */ | ||
| 33 | static void xfrm4_encap(struct sk_buff *skb) | ||
| 34 | { | ||
| 35 | struct dst_entry *dst = skb->dst; | ||
| 36 | struct xfrm_state *x = dst->xfrm; | ||
| 37 | struct iphdr *iph, *top_iph; | ||
| 38 | int flags; | ||
| 39 | |||
| 40 | iph = skb->nh.iph; | ||
| 41 | skb->h.ipiph = iph; | ||
| 42 | |||
| 43 | skb->nh.raw = skb_push(skb, x->props.header_len); | ||
| 44 | top_iph = skb->nh.iph; | ||
| 45 | |||
| 46 | if (!x->props.mode) { | ||
| 47 | skb->h.raw += iph->ihl*4; | ||
| 48 | memmove(top_iph, iph, iph->ihl*4); | ||
| 49 | return; | ||
| 50 | } | ||
| 51 | |||
| 52 | top_iph->ihl = 5; | ||
| 53 | top_iph->version = 4; | ||
| 54 | |||
| 55 | /* DS disclosed */ | ||
| 56 | top_iph->tos = INET_ECN_encapsulate(iph->tos, iph->tos); | ||
| 57 | |||
| 58 | flags = x->props.flags; | ||
| 59 | if (flags & XFRM_STATE_NOECN) | ||
| 60 | IP_ECN_clear(top_iph); | ||
| 61 | |||
| 62 | top_iph->frag_off = (flags & XFRM_STATE_NOPMTUDISC) ? | ||
| 63 | 0 : (iph->frag_off & htons(IP_DF)); | ||
| 64 | if (!top_iph->frag_off) | ||
| 65 | __ip_select_ident(top_iph, dst->child, 0); | ||
| 66 | |||
| 67 | top_iph->ttl = dst_metric(dst->child, RTAX_HOPLIMIT); | ||
| 68 | |||
| 69 | top_iph->saddr = x->props.saddr.a4; | ||
| 70 | top_iph->daddr = x->id.daddr.a4; | ||
| 71 | top_iph->protocol = IPPROTO_IPIP; | ||
| 72 | |||
| 73 | memset(&(IPCB(skb)->opt), 0, sizeof(struct ip_options)); | ||
| 74 | } | ||
| 75 | |||
| 76 | static int xfrm4_tunnel_check_size(struct sk_buff *skb) | 19 | static int xfrm4_tunnel_check_size(struct sk_buff *skb) |
| 77 | { | 20 | { |
| 78 | int mtu, ret = 0; | 21 | int mtu, ret = 0; |
| @@ -121,7 +64,9 @@ static int xfrm4_output_one(struct sk_buff *skb) | |||
| 121 | if (err) | 64 | if (err) |
| 122 | goto error; | 65 | goto error; |
| 123 | 66 | ||
| 124 | xfrm4_encap(skb); | 67 | err = x->mode->output(skb); |
| 68 | if (err) | ||
| 69 | goto error; | ||
| 125 | 70 | ||
| 126 | err = x->type->output(x, skb); | 71 | err = x->type->output(x, skb); |
| 127 | if (err) | 72 | if (err) |
