aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/xfrm4_policy.c
diff options
context:
space:
mode:
Diffstat (limited to 'net/ipv4/xfrm4_policy.c')
-rw-r--r--net/ipv4/xfrm4_policy.c134
1 files changed, 26 insertions, 108 deletions
diff --git a/net/ipv4/xfrm4_policy.c b/net/ipv4/xfrm4_policy.c
index cebc84731969..1d7524375b49 100644
--- a/net/ipv4/xfrm4_policy.c
+++ b/net/ipv4/xfrm4_policy.c
@@ -79,122 +79,39 @@ __xfrm4_find_bundle(struct flowi *fl, struct xfrm_policy *policy)
79 return dst; 79 return dst;
80} 80}
81 81
82/* Allocate chain of dst_entry's, attach known xfrm's, calculate 82static int xfrm4_get_tos(struct flowi *fl)
83 * all the metrics... Shortly, bundle a bundle.
84 */
85
86static int
87__xfrm4_bundle_create(struct xfrm_policy *policy, struct xfrm_state **xfrm, int nx,
88 struct flowi *fl, struct dst_entry **dst_p)
89{ 83{
90 struct dst_entry *dst, *dst_prev; 84 return fl->fl4_tos;
91 struct rtable *rt0 = (struct rtable*)(*dst_p); 85}
92 struct rtable *rt = rt0;
93 int tos = fl->fl4_tos;
94 int i;
95 int err;
96 int header_len = 0;
97 int trailer_len = 0;
98
99 dst = dst_prev = NULL;
100 dst_hold(&rt->u.dst);
101
102 for (i = 0; i < nx; i++) {
103 struct dst_entry *dst1 = dst_alloc(&xfrm4_dst_ops);
104 struct xfrm_dst *xdst;
105
106 if (unlikely(dst1 == NULL)) {
107 err = -ENOBUFS;
108 dst_release(&rt->u.dst);
109 goto error;
110 }
111 86
112 if (!dst) 87static int xfrm4_fill_dst(struct xfrm_dst *xdst, struct net_device *dev)
113 dst = dst1; 88{
114 else { 89 struct rtable *rt = (struct rtable *)xdst->route;
115 dst_prev->child = dst1;
116 dst1->flags |= DST_NOHASH;
117 dst_clone(dst1);
118 }
119 90
120 xdst = (struct xfrm_dst *)dst1; 91 xdst->u.rt.fl = rt->fl;
121 xdst->route = &rt->u.dst;
122 xdst->genid = xfrm[i]->genid;
123 92
124 dst1->next = dst_prev; 93 xdst->u.dst.dev = dev;
125 dst_prev = dst1; 94 dev_hold(dev);
126 95
127 header_len += xfrm[i]->props.header_len; 96 xdst->u.rt.idev = in_dev_get(dev);
128 trailer_len += xfrm[i]->props.trailer_len; 97 if (!xdst->u.rt.idev)
98 return -ENODEV;
129 99
130 if (xfrm[i]->props.mode != XFRM_MODE_TRANSPORT) { 100 xdst->u.rt.peer = rt->peer;
131 dst1 = xfrm_dst_lookup(xfrm[i], tos); 101 if (rt->peer)
132 err = PTR_ERR(dst1); 102 atomic_inc(&rt->peer->refcnt);
133 if (IS_ERR(dst1))
134 goto error;
135 103
136 rt = (struct rtable *)dst1; 104 /* Sheit... I remember I did this right. Apparently,
137 } else 105 * it was magically lost, so this code needs audit */
138 dst_hold(&rt->u.dst); 106 xdst->u.rt.rt_flags = rt->rt_flags & (RTCF_BROADCAST | RTCF_MULTICAST |
139 } 107 RTCF_LOCAL);
108 xdst->u.rt.rt_type = rt->rt_type;
109 xdst->u.rt.rt_src = rt->rt_src;
110 xdst->u.rt.rt_dst = rt->rt_dst;
111 xdst->u.rt.rt_gateway = rt->rt_gateway;
112 xdst->u.rt.rt_spec_dst = rt->rt_spec_dst;
140 113
141 dst_prev->child = &rt->u.dst;
142 dst->path = &rt->u.dst;
143
144 /* Copy neighbout for reachability confirmation */
145 dst->neighbour = neigh_clone(rt->u.dst.neighbour);
146
147 *dst_p = dst;
148 dst = dst_prev;
149
150 dst_prev = *dst_p;
151 i = 0;
152 err = -ENODEV;
153 for (; dst_prev != &rt->u.dst; dst_prev = dst_prev->child) {
154 struct xfrm_dst *x = (struct xfrm_dst*)dst_prev;
155 x->u.rt.fl = *fl;
156
157 dst_prev->xfrm = xfrm[i++];
158 dst_prev->dev = rt->u.dst.dev;
159 if (!rt->u.dst.dev)
160 goto error;
161 dev_hold(rt->u.dst.dev);
162
163 x->u.rt.idev = in_dev_get(rt->u.dst.dev);
164 if (!x->u.rt.idev)
165 goto error;
166
167 dst_prev->obsolete = -1;
168 dst_prev->flags |= DST_HOST;
169 dst_prev->lastuse = jiffies;
170 dst_prev->header_len = header_len;
171 dst_prev->trailer_len = trailer_len;
172 memcpy(&dst_prev->metrics, &x->route->metrics, sizeof(dst_prev->metrics));
173
174 dst_prev->input = dst_discard;
175 dst_prev->output = dst_prev->xfrm->outer_mode->afinfo->output;
176 if (rt0->peer)
177 atomic_inc(&rt0->peer->refcnt);
178 x->u.rt.peer = rt0->peer;
179 /* Sheit... I remember I did this right. Apparently,
180 * it was magically lost, so this code needs audit */
181 x->u.rt.rt_flags = rt0->rt_flags&(RTCF_BROADCAST|RTCF_MULTICAST|RTCF_LOCAL);
182 x->u.rt.rt_type = rt0->rt_type;
183 x->u.rt.rt_src = rt0->rt_src;
184 x->u.rt.rt_dst = rt0->rt_dst;
185 x->u.rt.rt_gateway = rt0->rt_gateway;
186 x->u.rt.rt_spec_dst = rt0->rt_spec_dst;
187 header_len -= x->u.dst.xfrm->props.header_len;
188 trailer_len -= x->u.dst.xfrm->props.trailer_len;
189 }
190
191 xfrm_init_pmtu(dst);
192 return 0; 114 return 0;
193
194error:
195 if (dst)
196 dst_free(dst);
197 return err;
198} 115}
199 116
200static void 117static void
@@ -330,8 +247,9 @@ static struct xfrm_policy_afinfo xfrm4_policy_afinfo = {
330 .dst_lookup = xfrm4_dst_lookup, 247 .dst_lookup = xfrm4_dst_lookup,
331 .get_saddr = xfrm4_get_saddr, 248 .get_saddr = xfrm4_get_saddr,
332 .find_bundle = __xfrm4_find_bundle, 249 .find_bundle = __xfrm4_find_bundle,
333 .bundle_create = __xfrm4_bundle_create,
334 .decode_session = _decode_session4, 250 .decode_session = _decode_session4,
251 .get_tos = xfrm4_get_tos,
252 .fill_dst = xfrm4_fill_dst,
335}; 253};
336 254
337static void __init xfrm4_policy_init(void) 255static void __init xfrm4_policy_init(void)