l2tp: rework socket comparison in __l2tp_ip*_bind_lookup()
authorGuillaume Nault <g.nault@alphalink.fr>
Fri, 6 Jan 2017 19:03:57 +0000 (20:03 +0100)
committerDavid S. Miller <davem@davemloft.net>
Sat, 7 Jan 2017 03:18:56 +0000 (22:18 -0500)
Split conditions, so that each test becomes clearer.

Also, for l2tp_ip, check if "laddr" is 0. This prevents a socket from
binding to the unspecified address when other sockets are already bound
using the same device (if any), connection ID and namespace.

Same thing for l2tp_ip6: add ipv6_addr_any(laddr) and
ipv6_addr_any(raddr) tests to ensure that an IPv6 unspecified address
passed as parameter is properly treated a wildcard.

Signed-off-by: Guillaume Nault <g.nault@alphalink.fr>
Signed-off-by: David S. Miller <davem@davemloft.net>
net/l2tp/l2tp_ip.c
net/l2tp/l2tp_ip6.c

index 499d3cdbfbc803e0aed079af1238534b386ecea9..b07a859f21bd3f96999aa9c58f09c0f57667e90b 100644 (file)
@@ -56,13 +56,23 @@ static struct sock *__l2tp_ip_bind_lookup(const struct net *net, __be32 laddr,
                const struct l2tp_ip_sock *l2tp = l2tp_ip_sk(sk);
                const struct inet_sock *inet = inet_sk(sk);
 
-               if ((l2tp->conn_id == tunnel_id) &&
-                   net_eq(sock_net(sk), net) &&
-                   !(inet->inet_rcv_saddr && inet->inet_rcv_saddr != laddr) &&
-                   (!inet->inet_daddr || !raddr || inet->inet_daddr == raddr) &&
-                   (!sk->sk_bound_dev_if || !dif ||
-                    sk->sk_bound_dev_if == dif))
-                       goto found;
+               if (!net_eq(sock_net(sk), net))
+                       continue;
+
+               if (sk->sk_bound_dev_if && dif && sk->sk_bound_dev_if != dif)
+                       continue;
+
+               if (inet->inet_rcv_saddr && laddr &&
+                   inet->inet_rcv_saddr != laddr)
+                       continue;
+
+               if (inet->inet_daddr && raddr && inet->inet_daddr != raddr)
+                       continue;
+
+               if (l2tp->conn_id != tunnel_id)
+                       continue;
+
+               goto found;
        }
 
        sk = NULL;
index 7165b06d7b255fa0f705630342a5f5710666200e..4b06eb415f6837321b4afdb23ac3dbd3877ebee2 100644 (file)
@@ -69,13 +69,24 @@ static struct sock *__l2tp_ip6_bind_lookup(const struct net *net,
                const struct in6_addr *sk_raddr = &sk->sk_v6_daddr;
                const struct l2tp_ip6_sock *l2tp = l2tp_ip6_sk(sk);
 
-               if ((l2tp->conn_id == tunnel_id) &&
-                   net_eq(sock_net(sk), net) &&
-                   (!sk_laddr || ipv6_addr_any(sk_laddr) || ipv6_addr_equal(sk_laddr, laddr)) &&
-                   (!raddr || ipv6_addr_any(sk_raddr) || ipv6_addr_equal(sk_raddr, raddr)) &&
-                   (!sk->sk_bound_dev_if || !dif ||
-                    sk->sk_bound_dev_if == dif))
-                       goto found;
+               if (!net_eq(sock_net(sk), net))
+                       continue;
+
+               if (sk->sk_bound_dev_if && dif && sk->sk_bound_dev_if != dif)
+                       continue;
+
+               if (sk_laddr && !ipv6_addr_any(sk_laddr) &&
+                   !ipv6_addr_any(laddr) && !ipv6_addr_equal(sk_laddr, laddr))
+                       continue;
+
+               if (!ipv6_addr_any(sk_raddr) && raddr &&
+                   !ipv6_addr_any(raddr) && !ipv6_addr_equal(sk_raddr, raddr))
+                       continue;
+
+               if (l2tp->conn_id != tunnel_id)
+                       continue;
+
+               goto found;
        }
 
        sk = NULL;