2 * INET An implementation of the TCP/IP protocol suite for the LINUX
3 * operating system. INET is implemented using the BSD Socket
4 * interface as the means of communication with the user level.
6 * Implementation of the Transmission Control Protocol(TCP).
8 * IPv4 specific functions
13 * linux/ipv4/tcp_input.c
14 * linux/ipv4/tcp_output.c
16 * See tcp.c for author information
18 * This program is free software; you can redistribute it and/or
19 * modify it under the terms of the GNU General Public License
20 * as published by the Free Software Foundation; either version
21 * 2 of the License, or (at your option) any later version.
26 * David S. Miller : New socket lookup architecture.
27 * This code is dedicated to John Dyson.
28 * David S. Miller : Change semantics of established hash,
29 * half is devoted to TIME_WAIT sockets
30 * and the rest go in the other half.
31 * Andi Kleen : Add support for syncookies and fixed
32 * some bugs: ip options weren't passed to
33 * the TCP layer, missed a check for an
35 * Andi Kleen : Implemented fast path mtu discovery.
36 * Fixed many serious bugs in the
37 * request_sock handling and moved
38 * most of it into the af independent code.
39 * Added tail drop and some other bugfixes.
40 * Added new listen semantics.
41 * Mike McLagan : Routing by source
42 * Juan Jose Ciarlante: ip_dynaddr bits
43 * Andi Kleen: various fixes.
44 * Vitaly E. Lavrov : Transparent proxy revived after year
46 * Andi Kleen : Fix new listen.
47 * Andi Kleen : Fix accept error reporting.
48 * YOSHIFUJI Hideaki @USAGI and: Support IPV6_V6ONLY socket option, which
49 * Alexey Kuznetsov allow both IPv4 and IPv6 sockets to bind
50 * a single port at the same time.
53 #define pr_fmt(fmt) "TCP: " fmt
55 #include <linux/bottom_half.h>
56 #include <linux/types.h>
57 #include <linux/fcntl.h>
58 #include <linux/module.h>
59 #include <linux/random.h>
60 #include <linux/cache.h>
61 #include <linux/jhash.h>
62 #include <linux/init.h>
63 #include <linux/times.h>
64 #include <linux/slab.h>
66 #include <net/net_namespace.h>
68 #include <net/inet_hashtables.h>
70 #include <net/transp_v6.h>
72 #include <net/inet_common.h>
73 #include <net/timewait_sock.h>
75 #include <net/netdma.h>
76 #include <net/secure_seq.h>
77 #include <net/tcp_memcontrol.h>
79 #include <linux/inet.h>
80 #include <linux/ipv6.h>
81 #include <linux/stddef.h>
82 #include <linux/proc_fs.h>
83 #include <linux/seq_file.h>
85 #include <linux/crypto.h>
86 #include <linux/scatterlist.h>
88 int sysctl_tcp_tw_reuse __read_mostly
;
89 int sysctl_tcp_low_latency __read_mostly
;
90 EXPORT_SYMBOL(sysctl_tcp_low_latency
);
93 #ifdef CONFIG_TCP_MD5SIG
94 static int tcp_v4_md5_hash_hdr(char *md5_hash
, const struct tcp_md5sig_key
*key
,
95 __be32 daddr
, __be32 saddr
, const struct tcphdr
*th
);
98 struct inet_hashinfo tcp_hashinfo
;
99 EXPORT_SYMBOL(tcp_hashinfo
);
101 static inline __u32
tcp_v4_init_sequence(const struct sk_buff
*skb
)
103 return secure_tcp_sequence_number(ip_hdr(skb
)->daddr
,
106 tcp_hdr(skb
)->source
);
109 int tcp_twsk_unique(struct sock
*sk
, struct sock
*sktw
, void *twp
)
111 const struct tcp_timewait_sock
*tcptw
= tcp_twsk(sktw
);
112 struct tcp_sock
*tp
= tcp_sk(sk
);
114 /* With PAWS, it is safe from the viewpoint
115 of data integrity. Even without PAWS it is safe provided sequence
116 spaces do not overlap i.e. at data rates <= 80Mbit/sec.
118 Actually, the idea is close to VJ's one, only timestamp cache is
119 held not per host, but per port pair and TW bucket is used as state
122 If TW bucket has been already destroyed we fall back to VJ's scheme
123 and use initial timestamp retrieved from peer table.
125 if (tcptw
->tw_ts_recent_stamp
&&
126 (twp
== NULL
|| (sysctl_tcp_tw_reuse
&&
127 get_seconds() - tcptw
->tw_ts_recent_stamp
> 1))) {
128 tp
->write_seq
= tcptw
->tw_snd_nxt
+ 65535 + 2;
129 if (tp
->write_seq
== 0)
131 tp
->rx_opt
.ts_recent
= tcptw
->tw_ts_recent
;
132 tp
->rx_opt
.ts_recent_stamp
= tcptw
->tw_ts_recent_stamp
;
139 EXPORT_SYMBOL_GPL(tcp_twsk_unique
);
141 /* This will initiate an outgoing connection. */
142 int tcp_v4_connect(struct sock
*sk
, struct sockaddr
*uaddr
, int addr_len
)
144 struct sockaddr_in
*usin
= (struct sockaddr_in
*)uaddr
;
145 struct inet_sock
*inet
= inet_sk(sk
);
146 struct tcp_sock
*tp
= tcp_sk(sk
);
147 __be16 orig_sport
, orig_dport
;
148 __be32 daddr
, nexthop
;
152 struct ip_options_rcu
*inet_opt
;
154 if (addr_len
< sizeof(struct sockaddr_in
))
157 if (usin
->sin_family
!= AF_INET
)
158 return -EAFNOSUPPORT
;
160 nexthop
= daddr
= usin
->sin_addr
.s_addr
;
161 inet_opt
= rcu_dereference_protected(inet
->inet_opt
,
162 sock_owned_by_user(sk
));
163 if (inet_opt
&& inet_opt
->opt
.srr
) {
166 nexthop
= inet_opt
->opt
.faddr
;
169 orig_sport
= inet
->inet_sport
;
170 orig_dport
= usin
->sin_port
;
171 fl4
= &inet
->cork
.fl
.u
.ip4
;
172 rt
= ip_route_connect(fl4
, nexthop
, inet
->inet_saddr
,
173 RT_CONN_FLAGS(sk
), sk
->sk_bound_dev_if
,
175 orig_sport
, orig_dport
, sk
, true);
178 if (err
== -ENETUNREACH
)
179 IP_INC_STATS(sock_net(sk
), IPSTATS_MIB_OUTNOROUTES
);
183 if (rt
->rt_flags
& (RTCF_MULTICAST
| RTCF_BROADCAST
)) {
188 if (!inet_opt
|| !inet_opt
->opt
.srr
)
191 if (!inet
->inet_saddr
)
192 inet
->inet_saddr
= fl4
->saddr
;
193 inet
->inet_rcv_saddr
= inet
->inet_saddr
;
195 if (tp
->rx_opt
.ts_recent_stamp
&& inet
->inet_daddr
!= daddr
) {
196 /* Reset inherited state */
197 tp
->rx_opt
.ts_recent
= 0;
198 tp
->rx_opt
.ts_recent_stamp
= 0;
199 if (likely(!tp
->repair
))
203 if (tcp_death_row
.sysctl_tw_recycle
&&
204 !tp
->rx_opt
.ts_recent_stamp
&& fl4
->daddr
== daddr
)
205 tcp_fetch_timewait_stamp(sk
, &rt
->dst
);
207 inet
->inet_dport
= usin
->sin_port
;
208 inet
->inet_daddr
= daddr
;
210 inet_csk(sk
)->icsk_ext_hdr_len
= 0;
212 inet_csk(sk
)->icsk_ext_hdr_len
= inet_opt
->opt
.optlen
;
214 tp
->rx_opt
.mss_clamp
= TCP_MSS_DEFAULT
;
216 /* Socket identity is still unknown (sport may be zero).
217 * However we set state to SYN-SENT and not releasing socket
218 * lock select source port, enter ourselves into the hash tables and
219 * complete initialization after this.
221 tcp_set_state(sk
, TCP_SYN_SENT
);
222 err
= inet_hash_connect(&tcp_death_row
, sk
);
226 rt
= ip_route_newports(fl4
, rt
, orig_sport
, orig_dport
,
227 inet
->inet_sport
, inet
->inet_dport
, sk
);
233 /* OK, now commit destination to socket. */
234 sk
->sk_gso_type
= SKB_GSO_TCPV4
;
235 sk_setup_caps(sk
, &rt
->dst
);
236 printk(KERN_INFO
"[socket_conn]IPV4 socket[%lu] sport:%u \n", SOCK_INODE(sk
->sk_socket
)->i_ino
, ntohs(inet
->inet_sport
));
237 if (!tp
->write_seq
&& likely(!tp
->repair
))
238 tp
->write_seq
= secure_tcp_sequence_number(inet
->inet_saddr
,
243 inet
->inet_id
= tp
->write_seq
^ jiffies
;
245 err
= tcp_connect(sk
);
255 * This unhashes the socket and releases the local port,
258 tcp_set_state(sk
, TCP_CLOSE
);
260 sk
->sk_route_caps
= 0;
261 inet
->inet_dport
= 0;
264 EXPORT_SYMBOL(tcp_v4_connect
);
267 * This routine reacts to ICMP_FRAG_NEEDED mtu indications as defined in RFC1191.
268 * It can be called through tcp_release_cb() if socket was owned by user
269 * at the time tcp_v4_err() was called to handle ICMP message.
271 void tcp_v4_mtu_reduced(struct sock
*sk
)
273 struct dst_entry
*dst
;
274 struct inet_sock
*inet
= inet_sk(sk
);
275 u32 mtu
= tcp_sk(sk
)->mtu_info
;
277 dst
= inet_csk_update_pmtu(sk
, mtu
);
281 /* Something is about to be wrong... Remember soft error
282 * for the case, if this connection will not able to recover.
284 if (mtu
< dst_mtu(dst
) && ip_dont_fragment(sk
, dst
))
285 sk
->sk_err_soft
= EMSGSIZE
;
289 if (inet
->pmtudisc
!= IP_PMTUDISC_DONT
&&
290 inet_csk(sk
)->icsk_pmtu_cookie
> mtu
) {
291 tcp_sync_mss(sk
, mtu
);
293 /* Resend the TCP packet because it's
294 * clear that the old packet has been
295 * dropped. This is the new "fast" path mtu
298 tcp_simple_retransmit(sk
);
299 } /* else let the usual retransmit timer handle it */
301 EXPORT_SYMBOL(tcp_v4_mtu_reduced
);
303 static void do_redirect(struct sk_buff
*skb
, struct sock
*sk
)
305 struct dst_entry
*dst
= __sk_dst_check(sk
, 0);
308 dst
->ops
->redirect(dst
, sk
, skb
);
312 * This routine is called by the ICMP module when it gets some
313 * sort of error condition. If err < 0 then the socket should
314 * be closed and the error returned to the user. If err > 0
315 * it's just the icmp type << 8 | icmp code. After adjustment
316 * header points to the first 8 bytes of the tcp header. We need
317 * to find the appropriate port.
319 * The locking strategy used here is very "optimistic". When
320 * someone else accesses the socket the ICMP is just dropped
321 * and for some paths there is no check at all.
322 * A more general error queue to queue errors for later handling
323 * is probably better.
327 void tcp_v4_err(struct sk_buff
*icmp_skb
, u32 info
)
329 const struct iphdr
*iph
= (const struct iphdr
*)icmp_skb
->data
;
330 struct tcphdr
*th
= (struct tcphdr
*)(icmp_skb
->data
+ (iph
->ihl
<< 2));
331 struct inet_connection_sock
*icsk
;
333 struct inet_sock
*inet
;
334 const int type
= icmp_hdr(icmp_skb
)->type
;
335 const int code
= icmp_hdr(icmp_skb
)->code
;
338 struct request_sock
*req
;
342 struct net
*net
= dev_net(icmp_skb
->dev
);
344 if (icmp_skb
->len
< (iph
->ihl
<< 2) + 8) {
345 ICMP_INC_STATS_BH(net
, ICMP_MIB_INERRORS
);
349 sk
= inet_lookup(net
, &tcp_hashinfo
, iph
->daddr
, th
->dest
,
350 iph
->saddr
, th
->source
, inet_iif(icmp_skb
));
352 ICMP_INC_STATS_BH(net
, ICMP_MIB_INERRORS
);
355 if (sk
->sk_state
== TCP_TIME_WAIT
) {
356 inet_twsk_put(inet_twsk(sk
));
361 /* If too many ICMPs get dropped on busy
362 * servers this needs to be solved differently.
363 * We do take care of PMTU discovery (RFC1191) special case :
364 * we can receive locally generated ICMP messages while socket is held.
366 if (sock_owned_by_user(sk
)) {
367 if (!(type
== ICMP_DEST_UNREACH
&& code
== ICMP_FRAG_NEEDED
))
368 NET_INC_STATS_BH(net
, LINUX_MIB_LOCKDROPPEDICMPS
);
370 if (sk
->sk_state
== TCP_CLOSE
)
373 if (unlikely(iph
->ttl
< inet_sk(sk
)->min_ttl
)) {
374 NET_INC_STATS_BH(net
, LINUX_MIB_TCPMINTTLDROP
);
380 req
= tp
->fastopen_rsk
;
381 seq
= ntohl(th
->seq
);
382 if (sk
->sk_state
!= TCP_LISTEN
&&
383 !between(seq
, tp
->snd_una
, tp
->snd_nxt
) &&
384 (req
== NULL
|| seq
!= tcp_rsk(req
)->snt_isn
)) {
385 /* For a Fast Open socket, allow seq to be snt_isn. */
386 NET_INC_STATS_BH(net
, LINUX_MIB_OUTOFWINDOWICMPS
);
392 do_redirect(icmp_skb
, sk
);
394 case ICMP_SOURCE_QUENCH
:
395 /* Just silently ignore these. */
397 case ICMP_PARAMETERPROB
:
400 case ICMP_DEST_UNREACH
:
401 if (code
> NR_ICMP_UNREACH
)
404 if (code
== ICMP_FRAG_NEEDED
) { /* PMTU discovery (RFC1191) */
405 /* We are not interested in TCP_LISTEN and open_requests
406 * (SYN-ACKs send out by Linux are always <576bytes so
407 * they should go through unfragmented).
409 if (sk
->sk_state
== TCP_LISTEN
)
413 if (!sock_owned_by_user(sk
)) {
414 tcp_v4_mtu_reduced(sk
);
416 if (!test_and_set_bit(TCP_MTU_REDUCED_DEFERRED
, &tp
->tsq_flags
))
422 err
= icmp_err_convert
[code
].errno
;
423 /* check if icmp_skb allows revert of backoff
424 * (see draft-zimmermann-tcp-lcd) */
425 if (code
!= ICMP_NET_UNREACH
&& code
!= ICMP_HOST_UNREACH
)
427 if (seq
!= tp
->snd_una
|| !icsk
->icsk_retransmits
||
431 /* XXX (TFO) - revisit the following logic for TFO */
433 if (sock_owned_by_user(sk
))
436 icsk
->icsk_backoff
--;
437 inet_csk(sk
)->icsk_rto
= (tp
->srtt
? __tcp_set_rto(tp
) :
438 TCP_TIMEOUT_INIT
) << icsk
->icsk_backoff
;
441 skb
= tcp_write_queue_head(sk
);
444 remaining
= icsk
->icsk_rto
- min(icsk
->icsk_rto
,
445 tcp_time_stamp
- TCP_SKB_CB(skb
)->when
);
448 inet_csk_reset_xmit_timer(sk
, ICSK_TIME_RETRANS
,
449 remaining
, sysctl_tcp_rto_max
);
451 /* RTO revert clocked out retransmission.
452 * Will retransmit now */
453 tcp_retransmit_timer(sk
);
457 case ICMP_TIME_EXCEEDED
:
464 /* XXX (TFO) - if it's a TFO socket and has been accepted, rather
465 * than following the TCP_SYN_RECV case and closing the socket,
466 * we ignore the ICMP error and keep trying like a fully established
467 * socket. Is this the right thing to do?
469 if (req
&& req
->sk
== NULL
)
472 switch (sk
->sk_state
) {
473 struct request_sock
*req
, **prev
;
475 if (sock_owned_by_user(sk
))
478 req
= inet_csk_search_req(sk
, &prev
, th
->dest
,
479 iph
->daddr
, iph
->saddr
);
483 /* ICMPs are not backlogged, hence we cannot get
484 an established socket here.
488 if (seq
!= tcp_rsk(req
)->snt_isn
) {
489 NET_INC_STATS_BH(net
, LINUX_MIB_OUTOFWINDOWICMPS
);
494 * Still in SYN_RECV, just remove it silently.
495 * There is no good way to pass the error to the newly
496 * created socket, and POSIX does not want network
497 * errors returned from accept().
499 inet_csk_reqsk_queue_drop(sk
, req
, prev
);
500 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_LISTENDROPS
);
504 case TCP_SYN_RECV
: /* Cannot happen.
505 It can f.e. if SYNs crossed,
508 if (!sock_owned_by_user(sk
)) {
511 sk
->sk_error_report(sk
);
515 sk
->sk_err_soft
= err
;
520 /* If we've already connected we will keep trying
521 * until we time out, or the user gives up.
523 * rfc1122 4.2.3.9 allows to consider as hard errors
524 * only PROTO_UNREACH and PORT_UNREACH (well, FRAG_FAILED too,
525 * but it is obsoleted by pmtu discovery).
527 * Note, that in modern internet, where routing is unreliable
528 * and in each dark corner broken firewalls sit, sending random
529 * errors ordered by their masters even this two messages finally lose
530 * their original sense (even Linux sends invalid PORT_UNREACHs)
532 * Now we are in compliance with RFCs.
537 if (!sock_owned_by_user(sk
) && inet
->recverr
) {
539 sk
->sk_error_report(sk
);
540 } else { /* Only an error on timeout */
541 sk
->sk_err_soft
= err
;
549 static void __tcp_v4_send_check(struct sk_buff
*skb
,
550 __be32 saddr
, __be32 daddr
)
552 struct tcphdr
*th
= tcp_hdr(skb
);
554 if (skb
->ip_summed
== CHECKSUM_PARTIAL
) {
555 th
->check
= ~tcp_v4_check(skb
->len
, saddr
, daddr
, 0);
556 skb
->csum_start
= skb_transport_header(skb
) - skb
->head
;
557 skb
->csum_offset
= offsetof(struct tcphdr
, check
);
559 th
->check
= tcp_v4_check(skb
->len
, saddr
, daddr
,
566 /* This routine computes an IPv4 TCP checksum. */
567 void tcp_v4_send_check(struct sock
*sk
, struct sk_buff
*skb
)
569 const struct inet_sock
*inet
= inet_sk(sk
);
571 __tcp_v4_send_check(skb
, inet
->inet_saddr
, inet
->inet_daddr
);
573 EXPORT_SYMBOL(tcp_v4_send_check
);
575 int tcp_v4_gso_send_check(struct sk_buff
*skb
)
577 const struct iphdr
*iph
;
580 if (!pskb_may_pull(skb
, sizeof(*th
)))
587 skb
->ip_summed
= CHECKSUM_PARTIAL
;
588 __tcp_v4_send_check(skb
, iph
->saddr
, iph
->daddr
);
593 * This routine will send an RST to the other tcp.
595 * Someone asks: why I NEVER use socket parameters (TOS, TTL etc.)
597 * Answer: if a packet caused RST, it is not for a socket
598 * existing in our system, if it is matched to a socket,
599 * it is just duplicate segment or bug in other side's TCP.
600 * So that we build reply only basing on parameters
601 * arrived with segment.
602 * Exception: precedence violation. We do not implement it in any case.
605 static void tcp_v4_send_reset(struct sock
*sk
, struct sk_buff
*skb
)
607 const struct tcphdr
*th
= tcp_hdr(skb
);
610 #ifdef CONFIG_TCP_MD5SIG
611 __be32 opt
[(TCPOLEN_MD5SIG_ALIGNED
>> 2)];
614 struct ip_reply_arg arg
;
615 #ifdef CONFIG_TCP_MD5SIG
616 struct tcp_md5sig_key
*key
;
617 const __u8
*hash_location
= NULL
;
618 unsigned char newhash
[16];
620 struct sock
*sk1
= NULL
;
624 /* Never send a reset in response to a reset. */
628 if (skb_rtable(skb
)->rt_type
!= RTN_LOCAL
)
631 /* Swap the send and the receive. */
632 memset(&rep
, 0, sizeof(rep
));
633 rep
.th
.dest
= th
->source
;
634 rep
.th
.source
= th
->dest
;
635 rep
.th
.doff
= sizeof(struct tcphdr
) / 4;
639 rep
.th
.seq
= th
->ack_seq
;
642 rep
.th
.ack_seq
= htonl(ntohl(th
->seq
) + th
->syn
+ th
->fin
+
643 skb
->len
- (th
->doff
<< 2));
646 memset(&arg
, 0, sizeof(arg
));
647 arg
.iov
[0].iov_base
= (unsigned char *)&rep
;
648 arg
.iov
[0].iov_len
= sizeof(rep
.th
);
650 #ifdef CONFIG_TCP_MD5SIG
651 hash_location
= tcp_parse_md5sig_option(th
);
652 if (!sk
&& hash_location
) {
654 * active side is lost. Try to find listening socket through
655 * source port, and then find md5 key through listening socket.
656 * we are not loose security here:
657 * Incoming packet is checked with md5 hash with finding key,
658 * no RST generated if md5 hash doesn't match.
660 sk1
= __inet_lookup_listener(dev_net(skb_dst(skb
)->dev
),
661 &tcp_hashinfo
, ip_hdr(skb
)->saddr
,
662 th
->source
, ip_hdr(skb
)->daddr
,
663 ntohs(th
->source
), inet_iif(skb
));
664 /* don't send rst if it can't find key */
668 key
= tcp_md5_do_lookup(sk1
, (union tcp_md5_addr
*)
669 &ip_hdr(skb
)->saddr
, AF_INET
);
673 genhash
= tcp_v4_md5_hash_skb(newhash
, key
, NULL
, NULL
, skb
);
674 if (genhash
|| memcmp(hash_location
, newhash
, 16) != 0)
677 key
= sk
? tcp_md5_do_lookup(sk
, (union tcp_md5_addr
*)
683 rep
.opt
[0] = htonl((TCPOPT_NOP
<< 24) |
685 (TCPOPT_MD5SIG
<< 8) |
687 /* Update length and the length the header thinks exists */
688 arg
.iov
[0].iov_len
+= TCPOLEN_MD5SIG_ALIGNED
;
689 rep
.th
.doff
= arg
.iov
[0].iov_len
/ 4;
691 tcp_v4_md5_hash_hdr((__u8
*) &rep
.opt
[1],
692 key
, ip_hdr(skb
)->saddr
,
693 ip_hdr(skb
)->daddr
, &rep
.th
);
696 arg
.csum
= csum_tcpudp_nofold(ip_hdr(skb
)->daddr
,
697 ip_hdr(skb
)->saddr
, /* XXX */
698 arg
.iov
[0].iov_len
, IPPROTO_TCP
, 0);
699 arg
.csumoffset
= offsetof(struct tcphdr
, check
) / 2;
700 arg
.flags
= (sk
&& inet_sk(sk
)->transparent
) ? IP_REPLY_ARG_NOSRCCHECK
: 0;
701 /* When socket is gone, all binding information is lost.
702 * routing might fail in this case. No choice here, if we choose to force
703 * input interface, we will misroute in case of asymmetric route.
706 arg
.bound_dev_if
= sk
->sk_bound_dev_if
;
708 net
= dev_net(skb_dst(skb
)->dev
);
709 arg
.tos
= ip_hdr(skb
)->tos
;
710 ip_send_unicast_reply(*this_cpu_ptr(net
->ipv4
.tcp_sk
),
711 skb
, ip_hdr(skb
)->saddr
,
712 ip_hdr(skb
)->daddr
, &arg
, arg
.iov
[0].iov_len
);
714 TCP_INC_STATS_BH(net
, TCP_MIB_OUTSEGS
);
715 TCP_INC_STATS_BH(net
, TCP_MIB_OUTRSTS
);
717 #ifdef CONFIG_TCP_MD5SIG
726 /* The code following below sending ACKs in SYN-RECV and TIME-WAIT states
727 outside socket context is ugly, certainly. What can I do?
730 static void tcp_v4_send_ack(struct sk_buff
*skb
, u32 seq
, u32 ack
,
731 u32 win
, u32 tsval
, u32 tsecr
, int oif
,
732 struct tcp_md5sig_key
*key
,
733 int reply_flags
, u8 tos
)
735 const struct tcphdr
*th
= tcp_hdr(skb
);
738 __be32 opt
[(TCPOLEN_TSTAMP_ALIGNED
>> 2)
739 #ifdef CONFIG_TCP_MD5SIG
740 + (TCPOLEN_MD5SIG_ALIGNED
>> 2)
744 struct ip_reply_arg arg
;
745 struct net
*net
= dev_net(skb_dst(skb
)->dev
);
747 memset(&rep
.th
, 0, sizeof(struct tcphdr
));
748 memset(&arg
, 0, sizeof(arg
));
750 arg
.iov
[0].iov_base
= (unsigned char *)&rep
;
751 arg
.iov
[0].iov_len
= sizeof(rep
.th
);
753 rep
.opt
[0] = htonl((TCPOPT_NOP
<< 24) | (TCPOPT_NOP
<< 16) |
754 (TCPOPT_TIMESTAMP
<< 8) |
756 rep
.opt
[1] = htonl(tsval
);
757 rep
.opt
[2] = htonl(tsecr
);
758 arg
.iov
[0].iov_len
+= TCPOLEN_TSTAMP_ALIGNED
;
761 /* Swap the send and the receive. */
762 rep
.th
.dest
= th
->source
;
763 rep
.th
.source
= th
->dest
;
764 rep
.th
.doff
= arg
.iov
[0].iov_len
/ 4;
765 rep
.th
.seq
= htonl(seq
);
766 rep
.th
.ack_seq
= htonl(ack
);
768 rep
.th
.window
= htons(win
);
770 #ifdef CONFIG_TCP_MD5SIG
772 int offset
= (tsecr
) ? 3 : 0;
774 rep
.opt
[offset
++] = htonl((TCPOPT_NOP
<< 24) |
776 (TCPOPT_MD5SIG
<< 8) |
778 arg
.iov
[0].iov_len
+= TCPOLEN_MD5SIG_ALIGNED
;
779 rep
.th
.doff
= arg
.iov
[0].iov_len
/4;
781 tcp_v4_md5_hash_hdr((__u8
*) &rep
.opt
[offset
],
782 key
, ip_hdr(skb
)->saddr
,
783 ip_hdr(skb
)->daddr
, &rep
.th
);
786 arg
.flags
= reply_flags
;
787 arg
.csum
= csum_tcpudp_nofold(ip_hdr(skb
)->daddr
,
788 ip_hdr(skb
)->saddr
, /* XXX */
789 arg
.iov
[0].iov_len
, IPPROTO_TCP
, 0);
790 arg
.csumoffset
= offsetof(struct tcphdr
, check
) / 2;
792 arg
.bound_dev_if
= oif
;
794 ip_send_unicast_reply(*this_cpu_ptr(net
->ipv4
.tcp_sk
),
795 skb
, ip_hdr(skb
)->saddr
,
796 ip_hdr(skb
)->daddr
, &arg
, arg
.iov
[0].iov_len
);
798 TCP_INC_STATS_BH(net
, TCP_MIB_OUTSEGS
);
801 static void tcp_v4_timewait_ack(struct sock
*sk
, struct sk_buff
*skb
)
803 struct inet_timewait_sock
*tw
= inet_twsk(sk
);
804 struct tcp_timewait_sock
*tcptw
= tcp_twsk(sk
);
806 tcp_v4_send_ack(skb
, tcptw
->tw_snd_nxt
, tcptw
->tw_rcv_nxt
,
807 tcptw
->tw_rcv_wnd
>> tw
->tw_rcv_wscale
,
808 tcp_time_stamp
+ tcptw
->tw_ts_offset
,
811 tcp_twsk_md5_key(tcptw
),
812 tw
->tw_transparent
? IP_REPLY_ARG_NOSRCCHECK
: 0,
819 static void tcp_v4_reqsk_send_ack(struct sock
*sk
, struct sk_buff
*skb
,
820 struct request_sock
*req
)
822 /* sk->sk_state == TCP_LISTEN -> for regular TCP_SYN_RECV
823 * sk->sk_state == TCP_SYN_RECV -> for Fast Open.
825 tcp_v4_send_ack(skb
, (sk
->sk_state
== TCP_LISTEN
) ?
826 tcp_rsk(req
)->snt_isn
+ 1 : tcp_sk(sk
)->snd_nxt
,
827 tcp_rsk(req
)->rcv_nxt
, req
->rcv_wnd
,
831 tcp_md5_do_lookup(sk
, (union tcp_md5_addr
*)&ip_hdr(skb
)->daddr
,
833 inet_rsk(req
)->no_srccheck
? IP_REPLY_ARG_NOSRCCHECK
: 0,
838 * Send a SYN-ACK after having received a SYN.
839 * This still operates on a request_sock only, not on a big
842 static int tcp_v4_send_synack(struct sock
*sk
, struct dst_entry
*dst
,
843 struct request_sock
*req
,
847 const struct inet_request_sock
*ireq
= inet_rsk(req
);
850 struct sk_buff
* skb
;
852 /* First, grab a route. */
853 if (!dst
&& (dst
= inet_csk_route_req(sk
, &fl4
, req
)) == NULL
)
856 skb
= tcp_make_synack(sk
, dst
, req
, NULL
);
859 __tcp_v4_send_check(skb
, ireq
->loc_addr
, ireq
->rmt_addr
);
861 skb_set_queue_mapping(skb
, queue_mapping
);
862 err
= ip_build_and_send_pkt(skb
, sk
, ireq
->loc_addr
,
865 err
= net_xmit_eval(err
);
866 if (!tcp_rsk(req
)->snt_synack
&& !err
)
867 tcp_rsk(req
)->snt_synack
= tcp_time_stamp
;
873 static int tcp_v4_rtx_synack(struct sock
*sk
, struct request_sock
*req
)
875 int res
= tcp_v4_send_synack(sk
, NULL
, req
, 0, false);
878 TCP_INC_STATS_BH(sock_net(sk
), TCP_MIB_RETRANSSEGS
);
883 * IPv4 request_sock destructor.
885 static void tcp_v4_reqsk_destructor(struct request_sock
*req
)
887 kfree(inet_rsk(req
)->opt
);
891 * Return true if a syncookie should be sent
893 bool tcp_syn_flood_action(struct sock
*sk
,
894 const struct sk_buff
*skb
,
897 const char *msg
= "Dropping request";
898 bool want_cookie
= false;
899 struct listen_sock
*lopt
;
903 #ifdef CONFIG_SYN_COOKIES
904 if (sysctl_tcp_syncookies
) {
905 msg
= "Sending cookies";
907 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_TCPREQQFULLDOCOOKIES
);
910 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_TCPREQQFULLDROP
);
912 lopt
= inet_csk(sk
)->icsk_accept_queue
.listen_opt
;
913 if (!lopt
->synflood_warned
) {
914 lopt
->synflood_warned
= 1;
915 pr_info("%s: Possible SYN flooding on port %d. %s. Check SNMP counters.\n",
916 proto
, ntohs(tcp_hdr(skb
)->dest
), msg
);
920 EXPORT_SYMBOL(tcp_syn_flood_action
);
923 * Save and compile IPv4 options into the request_sock if needed.
925 static struct ip_options_rcu
*tcp_v4_save_options(struct sk_buff
*skb
)
927 const struct ip_options
*opt
= &(IPCB(skb
)->opt
);
928 struct ip_options_rcu
*dopt
= NULL
;
930 if (opt
&& opt
->optlen
) {
931 int opt_size
= sizeof(*dopt
) + opt
->optlen
;
933 dopt
= kmalloc(opt_size
, GFP_ATOMIC
);
935 if (ip_options_echo(&dopt
->opt
, skb
)) {
944 #ifdef CONFIG_TCP_MD5SIG
946 * RFC2385 MD5 checksumming requires a mapping of
947 * IP address->MD5 Key.
948 * We need to maintain these in the sk structure.
951 /* Find the Key structure for an address. */
952 struct tcp_md5sig_key
*tcp_md5_do_lookup(struct sock
*sk
,
953 const union tcp_md5_addr
*addr
,
956 struct tcp_sock
*tp
= tcp_sk(sk
);
957 struct tcp_md5sig_key
*key
;
958 unsigned int size
= sizeof(struct in_addr
);
959 struct tcp_md5sig_info
*md5sig
;
961 /* caller either holds rcu_read_lock() or socket lock */
962 md5sig
= rcu_dereference_check(tp
->md5sig_info
,
963 sock_owned_by_user(sk
) ||
964 lockdep_is_held(&sk
->sk_lock
.slock
));
967 #if IS_ENABLED(CONFIG_IPV6)
968 if (family
== AF_INET6
)
969 size
= sizeof(struct in6_addr
);
971 hlist_for_each_entry_rcu(key
, &md5sig
->head
, node
) {
972 if (key
->family
!= family
)
974 if (!memcmp(&key
->addr
, addr
, size
))
979 EXPORT_SYMBOL(tcp_md5_do_lookup
);
981 struct tcp_md5sig_key
*tcp_v4_md5_lookup(struct sock
*sk
,
982 struct sock
*addr_sk
)
984 union tcp_md5_addr
*addr
;
986 addr
= (union tcp_md5_addr
*)&inet_sk(addr_sk
)->inet_daddr
;
987 return tcp_md5_do_lookup(sk
, addr
, AF_INET
);
989 EXPORT_SYMBOL(tcp_v4_md5_lookup
);
991 static struct tcp_md5sig_key
*tcp_v4_reqsk_md5_lookup(struct sock
*sk
,
992 struct request_sock
*req
)
994 union tcp_md5_addr
*addr
;
996 addr
= (union tcp_md5_addr
*)&inet_rsk(req
)->rmt_addr
;
997 return tcp_md5_do_lookup(sk
, addr
, AF_INET
);
1000 /* This can be called on a newly created socket, from other files */
1001 int tcp_md5_do_add(struct sock
*sk
, const union tcp_md5_addr
*addr
,
1002 int family
, const u8
*newkey
, u8 newkeylen
, gfp_t gfp
)
1004 /* Add Key to the list */
1005 struct tcp_md5sig_key
*key
;
1006 struct tcp_sock
*tp
= tcp_sk(sk
);
1007 struct tcp_md5sig_info
*md5sig
;
1009 key
= tcp_md5_do_lookup(sk
, addr
, family
);
1011 /* Pre-existing entry - just update that one. */
1012 memcpy(key
->key
, newkey
, newkeylen
);
1013 key
->keylen
= newkeylen
;
1017 md5sig
= rcu_dereference_protected(tp
->md5sig_info
,
1018 sock_owned_by_user(sk
));
1020 md5sig
= kmalloc(sizeof(*md5sig
), gfp
);
1024 sk_nocaps_add(sk
, NETIF_F_GSO_MASK
);
1025 INIT_HLIST_HEAD(&md5sig
->head
);
1026 rcu_assign_pointer(tp
->md5sig_info
, md5sig
);
1029 key
= sock_kmalloc(sk
, sizeof(*key
), gfp
);
1032 if (hlist_empty(&md5sig
->head
) && !tcp_alloc_md5sig_pool(sk
)) {
1033 sock_kfree_s(sk
, key
, sizeof(*key
));
1037 memcpy(key
->key
, newkey
, newkeylen
);
1038 key
->keylen
= newkeylen
;
1039 key
->family
= family
;
1040 memcpy(&key
->addr
, addr
,
1041 (family
== AF_INET6
) ? sizeof(struct in6_addr
) :
1042 sizeof(struct in_addr
));
1043 hlist_add_head_rcu(&key
->node
, &md5sig
->head
);
1046 EXPORT_SYMBOL(tcp_md5_do_add
);
1048 int tcp_md5_do_del(struct sock
*sk
, const union tcp_md5_addr
*addr
, int family
)
1050 struct tcp_sock
*tp
= tcp_sk(sk
);
1051 struct tcp_md5sig_key
*key
;
1052 struct tcp_md5sig_info
*md5sig
;
1054 key
= tcp_md5_do_lookup(sk
, addr
, family
);
1057 hlist_del_rcu(&key
->node
);
1058 atomic_sub(sizeof(*key
), &sk
->sk_omem_alloc
);
1059 kfree_rcu(key
, rcu
);
1060 md5sig
= rcu_dereference_protected(tp
->md5sig_info
,
1061 sock_owned_by_user(sk
));
1062 if (hlist_empty(&md5sig
->head
))
1063 tcp_free_md5sig_pool();
1066 EXPORT_SYMBOL(tcp_md5_do_del
);
1068 static void tcp_clear_md5_list(struct sock
*sk
)
1070 struct tcp_sock
*tp
= tcp_sk(sk
);
1071 struct tcp_md5sig_key
*key
;
1072 struct hlist_node
*n
;
1073 struct tcp_md5sig_info
*md5sig
;
1075 md5sig
= rcu_dereference_protected(tp
->md5sig_info
, 1);
1077 if (!hlist_empty(&md5sig
->head
))
1078 tcp_free_md5sig_pool();
1079 hlist_for_each_entry_safe(key
, n
, &md5sig
->head
, node
) {
1080 hlist_del_rcu(&key
->node
);
1081 atomic_sub(sizeof(*key
), &sk
->sk_omem_alloc
);
1082 kfree_rcu(key
, rcu
);
1086 static int tcp_v4_parse_md5_keys(struct sock
*sk
, char __user
*optval
,
1089 struct tcp_md5sig cmd
;
1090 struct sockaddr_in
*sin
= (struct sockaddr_in
*)&cmd
.tcpm_addr
;
1092 if (optlen
< sizeof(cmd
))
1095 if (copy_from_user(&cmd
, optval
, sizeof(cmd
)))
1098 if (sin
->sin_family
!= AF_INET
)
1101 if (!cmd
.tcpm_key
|| !cmd
.tcpm_keylen
)
1102 return tcp_md5_do_del(sk
, (union tcp_md5_addr
*)&sin
->sin_addr
.s_addr
,
1105 if (cmd
.tcpm_keylen
> TCP_MD5SIG_MAXKEYLEN
)
1108 return tcp_md5_do_add(sk
, (union tcp_md5_addr
*)&sin
->sin_addr
.s_addr
,
1109 AF_INET
, cmd
.tcpm_key
, cmd
.tcpm_keylen
,
1113 static int tcp_v4_md5_hash_pseudoheader(struct tcp_md5sig_pool
*hp
,
1114 __be32 daddr
, __be32 saddr
, int nbytes
)
1116 struct tcp4_pseudohdr
*bp
;
1117 struct scatterlist sg
;
1119 bp
= &hp
->md5_blk
.ip4
;
1122 * 1. the TCP pseudo-header (in the order: source IP address,
1123 * destination IP address, zero-padded protocol number, and
1129 bp
->protocol
= IPPROTO_TCP
;
1130 bp
->len
= cpu_to_be16(nbytes
);
1132 sg_init_one(&sg
, bp
, sizeof(*bp
));
1133 return crypto_hash_update(&hp
->md5_desc
, &sg
, sizeof(*bp
));
1136 static int tcp_v4_md5_hash_hdr(char *md5_hash
, const struct tcp_md5sig_key
*key
,
1137 __be32 daddr
, __be32 saddr
, const struct tcphdr
*th
)
1139 struct tcp_md5sig_pool
*hp
;
1140 struct hash_desc
*desc
;
1142 hp
= tcp_get_md5sig_pool();
1144 goto clear_hash_noput
;
1145 desc
= &hp
->md5_desc
;
1147 if (crypto_hash_init(desc
))
1149 if (tcp_v4_md5_hash_pseudoheader(hp
, daddr
, saddr
, th
->doff
<< 2))
1151 if (tcp_md5_hash_header(hp
, th
))
1153 if (tcp_md5_hash_key(hp
, key
))
1155 if (crypto_hash_final(desc
, md5_hash
))
1158 tcp_put_md5sig_pool();
1162 tcp_put_md5sig_pool();
1164 memset(md5_hash
, 0, 16);
1168 int tcp_v4_md5_hash_skb(char *md5_hash
, struct tcp_md5sig_key
*key
,
1169 const struct sock
*sk
, const struct request_sock
*req
,
1170 const struct sk_buff
*skb
)
1172 struct tcp_md5sig_pool
*hp
;
1173 struct hash_desc
*desc
;
1174 const struct tcphdr
*th
= tcp_hdr(skb
);
1175 __be32 saddr
, daddr
;
1178 saddr
= inet_sk(sk
)->inet_saddr
;
1179 daddr
= inet_sk(sk
)->inet_daddr
;
1181 saddr
= inet_rsk(req
)->loc_addr
;
1182 daddr
= inet_rsk(req
)->rmt_addr
;
1184 const struct iphdr
*iph
= ip_hdr(skb
);
1189 hp
= tcp_get_md5sig_pool();
1191 goto clear_hash_noput
;
1192 desc
= &hp
->md5_desc
;
1194 if (crypto_hash_init(desc
))
1197 if (tcp_v4_md5_hash_pseudoheader(hp
, daddr
, saddr
, skb
->len
))
1199 if (tcp_md5_hash_header(hp
, th
))
1201 if (tcp_md5_hash_skb_data(hp
, skb
, th
->doff
<< 2))
1203 if (tcp_md5_hash_key(hp
, key
))
1205 if (crypto_hash_final(desc
, md5_hash
))
1208 tcp_put_md5sig_pool();
1212 tcp_put_md5sig_pool();
1214 memset(md5_hash
, 0, 16);
1217 EXPORT_SYMBOL(tcp_v4_md5_hash_skb
);
1219 static bool tcp_v4_inbound_md5_hash(struct sock
*sk
, const struct sk_buff
*skb
)
1222 * This gets called for each TCP segment that arrives
1223 * so we want to be efficient.
1224 * We have 3 drop cases:
1225 * o No MD5 hash and one expected.
1226 * o MD5 hash and we're not expecting one.
1227 * o MD5 hash and its wrong.
1229 const __u8
*hash_location
= NULL
;
1230 struct tcp_md5sig_key
*hash_expected
;
1231 const struct iphdr
*iph
= ip_hdr(skb
);
1232 const struct tcphdr
*th
= tcp_hdr(skb
);
1234 unsigned char newhash
[16];
1236 hash_expected
= tcp_md5_do_lookup(sk
, (union tcp_md5_addr
*)&iph
->saddr
,
1238 hash_location
= tcp_parse_md5sig_option(th
);
1240 /* We've parsed the options - do we have a hash? */
1241 if (!hash_expected
&& !hash_location
)
1244 if (hash_expected
&& !hash_location
) {
1245 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_TCPMD5NOTFOUND
);
1249 if (!hash_expected
&& hash_location
) {
1250 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_TCPMD5UNEXPECTED
);
1254 /* Okay, so this is hash_expected and hash_location -
1255 * so we need to calculate the checksum.
1257 genhash
= tcp_v4_md5_hash_skb(newhash
,
1261 if (genhash
|| memcmp(hash_location
, newhash
, 16) != 0) {
1262 net_info_ratelimited("MD5 Hash failed for (%pI4, %d)->(%pI4, %d)%s\n",
1263 &iph
->saddr
, ntohs(th
->source
),
1264 &iph
->daddr
, ntohs(th
->dest
),
1265 genhash
? " tcp_v4_calc_md5_hash failed"
1274 struct request_sock_ops tcp_request_sock_ops __read_mostly
= {
1276 .obj_size
= sizeof(struct tcp_request_sock
),
1277 .rtx_syn_ack
= tcp_v4_rtx_synack
,
1278 .send_ack
= tcp_v4_reqsk_send_ack
,
1279 .destructor
= tcp_v4_reqsk_destructor
,
1280 .send_reset
= tcp_v4_send_reset
,
1281 .syn_ack_timeout
= tcp_syn_ack_timeout
,
1284 #ifdef CONFIG_TCP_MD5SIG
1285 static const struct tcp_request_sock_ops tcp_request_sock_ipv4_ops
= {
1286 .md5_lookup
= tcp_v4_reqsk_md5_lookup
,
1287 .calc_md5_hash
= tcp_v4_md5_hash_skb
,
1291 static bool tcp_fastopen_check(struct sock
*sk
, struct sk_buff
*skb
,
1292 struct request_sock
*req
,
1293 struct tcp_fastopen_cookie
*foc
,
1294 struct tcp_fastopen_cookie
*valid_foc
)
1296 bool skip_cookie
= false;
1297 struct fastopen_queue
*fastopenq
;
1299 if (likely(!fastopen_cookie_present(foc
))) {
1300 /* See include/net/tcp.h for the meaning of these knobs */
1301 if ((sysctl_tcp_fastopen
& TFO_SERVER_ALWAYS
) ||
1302 ((sysctl_tcp_fastopen
& TFO_SERVER_COOKIE_NOT_REQD
) &&
1303 (TCP_SKB_CB(skb
)->end_seq
!= TCP_SKB_CB(skb
)->seq
+ 1)))
1304 skip_cookie
= true; /* no cookie to validate */
1308 fastopenq
= inet_csk(sk
)->icsk_accept_queue
.fastopenq
;
1309 /* A FO option is present; bump the counter. */
1310 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_TCPFASTOPENPASSIVE
);
1312 /* Make sure the listener has enabled fastopen, and we don't
1313 * exceed the max # of pending TFO requests allowed before trying
1314 * to validating the cookie in order to avoid burning CPU cycles
1317 * XXX (TFO) - The implication of checking the max_qlen before
1318 * processing a cookie request is that clients can't differentiate
1319 * between qlen overflow causing Fast Open to be disabled
1320 * temporarily vs a server not supporting Fast Open at all.
1322 if ((sysctl_tcp_fastopen
& TFO_SERVER_ENABLE
) == 0 ||
1323 fastopenq
== NULL
|| fastopenq
->max_qlen
== 0)
1326 if (fastopenq
->qlen
>= fastopenq
->max_qlen
) {
1327 struct request_sock
*req1
;
1328 spin_lock(&fastopenq
->lock
);
1329 req1
= fastopenq
->rskq_rst_head
;
1330 if ((req1
== NULL
) || time_after(req1
->expires
, jiffies
)) {
1331 spin_unlock(&fastopenq
->lock
);
1332 NET_INC_STATS_BH(sock_net(sk
),
1333 LINUX_MIB_TCPFASTOPENLISTENOVERFLOW
);
1334 /* Avoid bumping LINUX_MIB_TCPFASTOPENPASSIVEFAIL*/
1338 fastopenq
->rskq_rst_head
= req1
->dl_next
;
1340 spin_unlock(&fastopenq
->lock
);
1344 tcp_rsk(req
)->rcv_nxt
= TCP_SKB_CB(skb
)->end_seq
;
1347 if (foc
->len
== TCP_FASTOPEN_COOKIE_SIZE
) {
1348 if ((sysctl_tcp_fastopen
& TFO_SERVER_COOKIE_NOT_CHKED
) == 0) {
1349 tcp_fastopen_cookie_gen(ip_hdr(skb
)->saddr
, valid_foc
);
1350 if ((valid_foc
->len
!= TCP_FASTOPEN_COOKIE_SIZE
) ||
1351 memcmp(&foc
->val
[0], &valid_foc
->val
[0],
1352 TCP_FASTOPEN_COOKIE_SIZE
) != 0)
1354 valid_foc
->len
= -1;
1356 /* Acknowledge the data received from the peer. */
1357 tcp_rsk(req
)->rcv_nxt
= TCP_SKB_CB(skb
)->end_seq
;
1359 } else if (foc
->len
== 0) { /* Client requesting a cookie */
1360 tcp_fastopen_cookie_gen(ip_hdr(skb
)->saddr
, valid_foc
);
1361 NET_INC_STATS_BH(sock_net(sk
),
1362 LINUX_MIB_TCPFASTOPENCOOKIEREQD
);
1364 /* Client sent a cookie with wrong size. Treat it
1365 * the same as invalid and return a valid one.
1367 tcp_fastopen_cookie_gen(ip_hdr(skb
)->saddr
, valid_foc
);
1372 static int tcp_v4_conn_req_fastopen(struct sock
*sk
,
1373 struct sk_buff
*skb
,
1374 struct sk_buff
*skb_synack
,
1375 struct request_sock
*req
)
1377 struct tcp_sock
*tp
= tcp_sk(sk
);
1378 struct request_sock_queue
*queue
= &inet_csk(sk
)->icsk_accept_queue
;
1379 const struct inet_request_sock
*ireq
= inet_rsk(req
);
1383 req
->num_retrans
= 0;
1384 req
->num_timeout
= 0;
1387 child
= inet_csk(sk
)->icsk_af_ops
->syn_recv_sock(sk
, skb
, req
, NULL
);
1388 if (child
== NULL
) {
1389 NET_INC_STATS_BH(sock_net(sk
),
1390 LINUX_MIB_TCPFASTOPENPASSIVEFAIL
);
1391 kfree_skb(skb_synack
);
1394 err
= ip_build_and_send_pkt(skb_synack
, sk
, ireq
->loc_addr
,
1395 ireq
->rmt_addr
, ireq
->opt
);
1396 err
= net_xmit_eval(err
);
1398 tcp_rsk(req
)->snt_synack
= tcp_time_stamp
;
1399 /* XXX (TFO) - is it ok to ignore error and continue? */
1401 spin_lock(&queue
->fastopenq
->lock
);
1402 queue
->fastopenq
->qlen
++;
1403 spin_unlock(&queue
->fastopenq
->lock
);
1405 /* Initialize the child socket. Have to fix some values to take
1406 * into account the child is a Fast Open socket and is created
1407 * only out of the bits carried in the SYN packet.
1411 tp
->fastopen_rsk
= req
;
1412 /* Do a hold on the listner sk so that if the listener is being
1413 * closed, the child that has been accepted can live on and still
1414 * access listen_lock.
1417 tcp_rsk(req
)->listener
= sk
;
1419 /* RFC1323: The window in SYN & SYN/ACK segments is never
1420 * scaled. So correct it appropriately.
1422 tp
->snd_wnd
= ntohs(tcp_hdr(skb
)->window
);
1424 /* Activate the retrans timer so that SYNACK can be retransmitted.
1425 * The request socket is not added to the SYN table of the parent
1426 * because it's been added to the accept queue directly.
1428 inet_csk_reset_xmit_timer(child
, ICSK_TIME_RETRANS
,
1429 TCP_TIMEOUT_INIT
, sysctl_tcp_rto_max
);
1431 /* Add the child socket directly into the accept queue */
1432 inet_csk_reqsk_queue_add(sk
, req
, child
);
1434 /* Now finish processing the fastopen child socket. */
1435 inet_csk(child
)->icsk_af_ops
->rebuild_header(child
);
1436 tcp_init_congestion_control(child
);
1437 tcp_mtup_init(child
);
1438 tcp_init_buffer_space(child
);
1439 tcp_init_metrics(child
);
1441 /* Queue the data carried in the SYN packet. We need to first
1442 * bump skb's refcnt because the caller will attempt to free it.
1444 * XXX (TFO) - we honor a zero-payload TFO request for now.
1445 * (Any reason not to?)
1447 if (TCP_SKB_CB(skb
)->end_seq
== TCP_SKB_CB(skb
)->seq
+ 1) {
1448 /* Don't queue the skb if there is no payload in SYN.
1449 * XXX (TFO) - How about SYN+FIN?
1451 tp
->rcv_nxt
= TCP_SKB_CB(skb
)->end_seq
;
1455 __skb_pull(skb
, tcp_hdr(skb
)->doff
* 4);
1456 skb_set_owner_r(skb
, child
);
1457 __skb_queue_tail(&child
->sk_receive_queue
, skb
);
1458 tp
->rcv_nxt
= TCP_SKB_CB(skb
)->end_seq
;
1459 tp
->syn_data_acked
= 1;
1461 sk
->sk_data_ready(sk
, 0);
1462 bh_unlock_sock(child
);
1464 WARN_ON(req
->sk
== NULL
);
1468 int tcp_v4_conn_request(struct sock
*sk
, struct sk_buff
*skb
)
1470 struct tcp_options_received tmp_opt
;
1471 struct request_sock
*req
;
1472 struct inet_request_sock
*ireq
;
1473 struct tcp_sock
*tp
= tcp_sk(sk
);
1474 struct dst_entry
*dst
= NULL
;
1475 __be32 saddr
= ip_hdr(skb
)->saddr
;
1476 __be32 daddr
= ip_hdr(skb
)->daddr
;
1477 __u32 isn
= TCP_SKB_CB(skb
)->when
;
1478 bool want_cookie
= false;
1480 struct tcp_fastopen_cookie foc
= { .len
= -1 };
1481 struct tcp_fastopen_cookie valid_foc
= { .len
= -1 };
1482 struct sk_buff
*skb_synack
;
1485 /* Never answer to SYNs send to broadcast or multicast */
1486 if (skb_rtable(skb
)->rt_flags
& (RTCF_BROADCAST
| RTCF_MULTICAST
))
1489 /* TW buckets are converted to open requests without
1490 * limitations, they conserve resources and peer is
1491 * evidently real one.
1493 if (inet_csk_reqsk_queue_is_full(sk
) && !isn
) {
1494 want_cookie
= tcp_syn_flood_action(sk
, skb
, "TCP");
1499 /* Accept backlog is full. If we have already queued enough
1500 * of warm entries in syn queue, drop request. It is better than
1501 * clogging syn queue with openreqs with exponentially increasing
1504 if (sk_acceptq_is_full(sk
) && inet_csk_reqsk_queue_young(sk
) > 1) {
1505 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_LISTENOVERFLOWS
);
1509 req
= inet_reqsk_alloc(&tcp_request_sock_ops
);
1513 #ifdef CONFIG_TCP_MD5SIG
1514 tcp_rsk(req
)->af_specific
= &tcp_request_sock_ipv4_ops
;
1517 tcp_clear_options(&tmp_opt
);
1518 tmp_opt
.mss_clamp
= TCP_MSS_DEFAULT
;
1519 tmp_opt
.user_mss
= tp
->rx_opt
.user_mss
;
1520 tcp_parse_options(skb
, &tmp_opt
, 0, want_cookie
? NULL
: &foc
);
1522 if (want_cookie
&& !tmp_opt
.saw_tstamp
)
1523 tcp_clear_options(&tmp_opt
);
1525 tmp_opt
.tstamp_ok
= tmp_opt
.saw_tstamp
;
1526 tcp_openreq_init(req
, &tmp_opt
, skb
);
1528 ireq
= inet_rsk(req
);
1529 ireq
->loc_addr
= daddr
;
1530 ireq
->rmt_addr
= saddr
;
1531 ireq
->no_srccheck
= inet_sk(sk
)->transparent
;
1532 ireq
->opt
= tcp_v4_save_options(skb
);
1533 ireq
->ir_mark
= inet_request_mark(sk
, skb
);
1535 if (security_inet_conn_request(sk
, skb
, req
))
1538 if (!want_cookie
|| tmp_opt
.tstamp_ok
)
1539 TCP_ECN_create_request(req
, skb
, sock_net(sk
));
1542 isn
= cookie_v4_init_sequence(sk
, skb
, &req
->mss
);
1543 req
->cookie_ts
= tmp_opt
.tstamp_ok
;
1545 /* VJ's idea. We save last timestamp seen
1546 * from the destination in peer table, when entering
1547 * state TIME-WAIT, and check against it before
1548 * accepting new connection request.
1550 * If "isn" is not zero, this request hit alive
1551 * timewait bucket, so that all the necessary checks
1552 * are made in the function processing timewait state.
1554 if (tmp_opt
.saw_tstamp
&&
1555 tcp_death_row
.sysctl_tw_recycle
&&
1556 (dst
= inet_csk_route_req(sk
, &fl4
, req
)) != NULL
&&
1557 fl4
.daddr
== saddr
) {
1558 if (!tcp_peer_is_proven(req
, dst
, true)) {
1559 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_PAWSPASSIVEREJECTED
);
1560 goto drop_and_release
;
1563 /* Kill the following clause, if you dislike this way. */
1564 else if (!sysctl_tcp_syncookies
&&
1565 (sysctl_max_syn_backlog
- inet_csk_reqsk_queue_len(sk
) <
1566 (sysctl_max_syn_backlog
>> 2)) &&
1567 !tcp_peer_is_proven(req
, dst
, false)) {
1568 /* Without syncookies last quarter of
1569 * backlog is filled with destinations,
1570 * proven to be alive.
1571 * It means that we continue to communicate
1572 * to destinations, already remembered
1573 * to the moment of synflood.
1575 LIMIT_NETDEBUG(KERN_DEBUG
pr_fmt("drop open request from %pI4/%u\n"),
1576 &saddr
, ntohs(tcp_hdr(skb
)->source
));
1577 goto drop_and_release
;
1580 isn
= tcp_v4_init_sequence(skb
);
1582 tcp_rsk(req
)->snt_isn
= isn
;
1585 dst
= inet_csk_route_req(sk
, &fl4
, req
);
1589 do_fastopen
= tcp_fastopen_check(sk
, skb
, req
, &foc
, &valid_foc
);
1591 /* We don't call tcp_v4_send_synack() directly because we need
1592 * to make sure a child socket can be created successfully before
1593 * sending back synack!
1595 * XXX (TFO) - Ideally one would simply call tcp_v4_send_synack()
1596 * (or better yet, call tcp_send_synack() in the child context
1597 * directly, but will have to fix bunch of other code first)
1598 * after syn_recv_sock() except one will need to first fix the
1599 * latter to remove its dependency on the current implementation
1600 * of tcp_v4_send_synack()->tcp_select_initial_window().
1602 skb_synack
= tcp_make_synack(sk
, dst
, req
,
1603 fastopen_cookie_present(&valid_foc
) ? &valid_foc
: NULL
);
1606 __tcp_v4_send_check(skb_synack
, ireq
->loc_addr
, ireq
->rmt_addr
);
1607 skb_set_queue_mapping(skb_synack
, skb_get_queue_mapping(skb
));
1611 if (likely(!do_fastopen
)) {
1613 err
= ip_build_and_send_pkt(skb_synack
, sk
, ireq
->loc_addr
,
1614 ireq
->rmt_addr
, ireq
->opt
);
1615 err
= net_xmit_eval(err
);
1616 if (err
|| want_cookie
)
1619 tcp_rsk(req
)->snt_synack
= tcp_time_stamp
;
1620 tcp_rsk(req
)->listener
= NULL
;
1621 /* Add the request_sock to the SYN table */
1622 inet_csk_reqsk_queue_hash_add(sk
, req
, TCP_TIMEOUT_INIT
);
1623 if (fastopen_cookie_present(&foc
) && foc
.len
!= 0)
1624 NET_INC_STATS_BH(sock_net(sk
),
1625 LINUX_MIB_TCPFASTOPENPASSIVEFAIL
);
1626 } else if (tcp_v4_conn_req_fastopen(sk
, skb
, skb_synack
, req
))
1636 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_LISTENDROPS
);
1639 EXPORT_SYMBOL(tcp_v4_conn_request
);
1643 * The three way handshake has completed - we got a valid synack -
1644 * now create the new socket.
1646 struct sock
*tcp_v4_syn_recv_sock(struct sock
*sk
, struct sk_buff
*skb
,
1647 struct request_sock
*req
,
1648 struct dst_entry
*dst
)
1650 struct inet_request_sock
*ireq
;
1651 struct inet_sock
*newinet
;
1652 struct tcp_sock
*newtp
;
1654 #ifdef CONFIG_TCP_MD5SIG
1655 struct tcp_md5sig_key
*key
;
1657 struct ip_options_rcu
*inet_opt
;
1659 if (sk_acceptq_is_full(sk
))
1662 newsk
= tcp_create_openreq_child(sk
, req
, skb
);
1666 newsk
->sk_gso_type
= SKB_GSO_TCPV4
;
1667 inet_sk_rx_dst_set(newsk
, skb
);
1669 newtp
= tcp_sk(newsk
);
1670 newinet
= inet_sk(newsk
);
1671 ireq
= inet_rsk(req
);
1672 newinet
->inet_daddr
= ireq
->rmt_addr
;
1673 newinet
->inet_rcv_saddr
= ireq
->loc_addr
;
1674 newinet
->inet_saddr
= ireq
->loc_addr
;
1675 inet_opt
= ireq
->opt
;
1676 rcu_assign_pointer(newinet
->inet_opt
, inet_opt
);
1678 newinet
->mc_index
= inet_iif(skb
);
1679 newinet
->mc_ttl
= ip_hdr(skb
)->ttl
;
1680 newinet
->rcv_tos
= ip_hdr(skb
)->tos
;
1681 inet_csk(newsk
)->icsk_ext_hdr_len
= 0;
1683 inet_csk(newsk
)->icsk_ext_hdr_len
= inet_opt
->opt
.optlen
;
1684 newinet
->inet_id
= newtp
->write_seq
^ jiffies
;
1687 dst
= inet_csk_route_child_sock(sk
, newsk
, req
);
1691 /* syncookie case : see end of cookie_v4_check() */
1693 sk_setup_caps(newsk
, dst
);
1695 tcp_mtup_init(newsk
);
1696 tcp_sync_mss(newsk
, dst_mtu(dst
));
1697 newtp
->advmss
= dst_metric_advmss(dst
);
1698 if (tcp_sk(sk
)->rx_opt
.user_mss
&&
1699 tcp_sk(sk
)->rx_opt
.user_mss
< newtp
->advmss
)
1700 newtp
->advmss
= tcp_sk(sk
)->rx_opt
.user_mss
;
1702 tcp_initialize_rcv_mss(newsk
);
1703 tcp_synack_rtt_meas(newsk
, req
);
1704 newtp
->total_retrans
= req
->num_retrans
;
1706 #ifdef CONFIG_TCP_MD5SIG
1707 /* Copy over the MD5 key from the original socket */
1708 key
= tcp_md5_do_lookup(sk
, (union tcp_md5_addr
*)&newinet
->inet_daddr
,
1712 * We're using one, so create a matching key
1713 * on the newsk structure. If we fail to get
1714 * memory, then we end up not copying the key
1717 tcp_md5_do_add(newsk
, (union tcp_md5_addr
*)&newinet
->inet_daddr
,
1718 AF_INET
, key
->key
, key
->keylen
, GFP_ATOMIC
);
1719 sk_nocaps_add(newsk
, NETIF_F_GSO_MASK
);
1723 if (__inet_inherit_port(sk
, newsk
) < 0)
1725 __inet_hash_nolisten(newsk
, NULL
);
1730 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_LISTENOVERFLOWS
);
1734 NET_INC_STATS_BH(sock_net(sk
), LINUX_MIB_LISTENDROPS
);
1737 inet_csk_prepare_forced_close(newsk
);
1741 EXPORT_SYMBOL(tcp_v4_syn_recv_sock
);
1743 static struct sock
*tcp_v4_hnd_req(struct sock
*sk
, struct sk_buff
*skb
)
1745 struct tcphdr
*th
= tcp_hdr(skb
);
1746 const struct iphdr
*iph
= ip_hdr(skb
);
1748 struct request_sock
**prev
;
1749 /* Find possible connection requests. */
1750 struct request_sock
*req
= inet_csk_search_req(sk
, &prev
, th
->source
,
1751 iph
->saddr
, iph
->daddr
);
1753 return tcp_check_req(sk
, skb
, req
, prev
, false);
1755 nsk
= inet_lookup_established(sock_net(sk
), &tcp_hashinfo
, iph
->saddr
,
1756 th
->source
, iph
->daddr
, th
->dest
, inet_iif(skb
));
1759 if (nsk
->sk_state
!= TCP_TIME_WAIT
) {
1763 inet_twsk_put(inet_twsk(nsk
));
1767 #ifdef CONFIG_SYN_COOKIES
1769 sk
= cookie_v4_check(sk
, skb
, &(IPCB(skb
)->opt
));
1774 static __sum16
tcp_v4_checksum_init(struct sk_buff
*skb
)
1776 const struct iphdr
*iph
= ip_hdr(skb
);
1778 if (skb
->ip_summed
== CHECKSUM_COMPLETE
) {
1779 if (!tcp_v4_check(skb
->len
, iph
->saddr
,
1780 iph
->daddr
, skb
->csum
)) {
1781 skb
->ip_summed
= CHECKSUM_UNNECESSARY
;
1786 skb
->csum
= csum_tcpudp_nofold(iph
->saddr
, iph
->daddr
,
1787 skb
->len
, IPPROTO_TCP
, 0);
1789 if (skb
->len
<= 76) {
1790 return __skb_checksum_complete(skb
);
1796 /* The socket must have it's spinlock held when we get
1799 * We have a potential double-lock case here, so even when
1800 * doing backlog processing we use the BH locking scheme.
1801 * This is because we cannot sleep with the original spinlock
1804 int tcp_v4_do_rcv(struct sock
*sk
, struct sk_buff
*skb
)
1807 #ifdef CONFIG_TCP_MD5SIG
1809 * We really want to reject the packet as early as possible
1811 * o We're expecting an MD5'd packet and this is no MD5 tcp option
1812 * o There is an MD5 option and we're not expecting one
1814 if (tcp_v4_inbound_md5_hash(sk
, skb
))
1818 if (sk
->sk_state
== TCP_ESTABLISHED
) { /* Fast path */
1819 struct dst_entry
*dst
= sk
->sk_rx_dst
;
1821 sock_rps_save_rxhash(sk
, skb
);
1823 if (inet_sk(sk
)->rx_dst_ifindex
!= skb
->skb_iif
||
1824 dst
->ops
->check(dst
, 0) == NULL
) {
1826 sk
->sk_rx_dst
= NULL
;
1829 if (tcp_rcv_established(sk
, skb
, tcp_hdr(skb
), skb
->len
)) {
1836 if (skb
->len
< tcp_hdrlen(skb
) || tcp_checksum_complete(skb
))
1839 if (sk
->sk_state
== TCP_LISTEN
) {
1840 struct sock
*nsk
= tcp_v4_hnd_req(sk
, skb
);
1845 sock_rps_save_rxhash(nsk
, skb
);
1846 if (tcp_child_process(sk
, nsk
, skb
)) {
1853 sock_rps_save_rxhash(sk
, skb
);
1855 if (tcp_rcv_state_process(sk
, skb
, tcp_hdr(skb
), skb
->len
)) {
1862 tcp_v4_send_reset(rsk
, skb
);
1865 /* Be careful here. If this function gets more complicated and
1866 * gcc suffers from register pressure on the x86, sk (in %ebx)
1867 * might be destroyed here. This current version compiles correctly,
1868 * but you have been warned.
1873 TCP_INC_STATS_BH(sock_net(sk
), TCP_MIB_CSUMERRORS
);
1874 TCP_INC_STATS_BH(sock_net(sk
), TCP_MIB_INERRS
);
1877 EXPORT_SYMBOL(tcp_v4_do_rcv
);
1879 void tcp_v4_early_demux(struct sk_buff
*skb
)
1881 const struct iphdr
*iph
;
1882 const struct tcphdr
*th
;
1885 if (skb
->pkt_type
!= PACKET_HOST
)
1888 if (!pskb_may_pull(skb
, skb_transport_offset(skb
) + sizeof(struct tcphdr
)))
1894 if (th
->doff
< sizeof(struct tcphdr
) / 4)
1897 sk
= __inet_lookup_established(dev_net(skb
->dev
), &tcp_hashinfo
,
1898 iph
->saddr
, th
->source
,
1899 iph
->daddr
, ntohs(th
->dest
),
1903 skb
->destructor
= sock_edemux
;
1904 if (sk
->sk_state
!= TCP_TIME_WAIT
) {
1905 struct dst_entry
*dst
= ACCESS_ONCE(sk
->sk_rx_dst
);
1908 dst
= dst_check(dst
, 0);
1910 inet_sk(sk
)->rx_dst_ifindex
== skb
->skb_iif
)
1911 skb_dst_set_noref(skb
, dst
);
1916 /* Packet is added to VJ-style prequeue for processing in process
1917 * context, if a reader task is waiting. Apparently, this exciting
1918 * idea (VJ's mail "Re: query about TCP header on tcp-ip" of 07 Sep 93)
1919 * failed somewhere. Latency? Burstiness? Well, at least now we will
1920 * see, why it failed. 8)8) --ANK
1923 bool tcp_prequeue(struct sock
*sk
, struct sk_buff
*skb
)
1925 struct tcp_sock
*tp
= tcp_sk(sk
);
1927 if (sysctl_tcp_low_latency
|| !tp
->ucopy
.task
)
1930 if (skb
->len
<= tcp_hdrlen(skb
) &&
1931 skb_queue_len(&tp
->ucopy
.prequeue
) == 0)
1935 __skb_queue_tail(&tp
->ucopy
.prequeue
, skb
);
1936 tp
->ucopy
.memory
+= skb
->truesize
;
1937 if (tp
->ucopy
.memory
> sk
->sk_rcvbuf
) {
1938 struct sk_buff
*skb1
;
1940 BUG_ON(sock_owned_by_user(sk
));
1942 while ((skb1
= __skb_dequeue(&tp
->ucopy
.prequeue
)) != NULL
) {
1943 sk_backlog_rcv(sk
, skb1
);
1944 NET_INC_STATS_BH(sock_net(sk
),
1945 LINUX_MIB_TCPPREQUEUEDROPPED
);
1948 tp
->ucopy
.memory
= 0;
1949 } else if (skb_queue_len(&tp
->ucopy
.prequeue
) == 1) {
1950 wake_up_interruptible_sync_poll(sk_sleep(sk
),
1951 POLLIN
| POLLRDNORM
| POLLRDBAND
);
1952 if (!inet_csk_ack_scheduled(sk
))
1953 inet_csk_reset_xmit_timer(sk
, ICSK_TIME_DACK
,
1954 (3 * tcp_rto_min(sk
)) / 4,
1955 sysctl_tcp_rto_max
);
1959 EXPORT_SYMBOL(tcp_prequeue
);
1965 int tcp_v4_rcv(struct sk_buff
*skb
)
1967 const struct iphdr
*iph
;
1968 const struct tcphdr
*th
;
1971 struct net
*net
= dev_net(skb
->dev
);
1973 if (skb
->pkt_type
!= PACKET_HOST
)
1976 /* Count it even if it's bad */
1977 TCP_INC_STATS_BH(net
, TCP_MIB_INSEGS
);
1979 if (!pskb_may_pull(skb
, sizeof(struct tcphdr
)))
1984 if (th
->doff
< sizeof(struct tcphdr
) / 4)
1986 if (!pskb_may_pull(skb
, th
->doff
* 4))
1989 /* An explanation is required here, I think.
1990 * Packet length and doff are validated by header prediction,
1991 * provided case of th->doff==0 is eliminated.
1992 * So, we defer the checks. */
1993 if (!skb_csum_unnecessary(skb
) && tcp_v4_checksum_init(skb
))
1998 TCP_SKB_CB(skb
)->seq
= ntohl(th
->seq
);
1999 TCP_SKB_CB(skb
)->end_seq
= (TCP_SKB_CB(skb
)->seq
+ th
->syn
+ th
->fin
+
2000 skb
->len
- th
->doff
* 4);
2001 TCP_SKB_CB(skb
)->ack_seq
= ntohl(th
->ack_seq
);
2002 TCP_SKB_CB(skb
)->when
= 0;
2003 TCP_SKB_CB(skb
)->ip_dsfield
= ipv4_get_dsfield(iph
);
2004 TCP_SKB_CB(skb
)->sacked
= 0;
2006 sk
= __inet_lookup_skb(&tcp_hashinfo
, skb
, th
->source
, th
->dest
);
2011 if (sk
->sk_state
== TCP_TIME_WAIT
)
2014 if (unlikely(iph
->ttl
< inet_sk(sk
)->min_ttl
)) {
2015 NET_INC_STATS_BH(net
, LINUX_MIB_TCPMINTTLDROP
);
2016 goto discard_and_relse
;
2019 if (!xfrm4_policy_check(sk
, XFRM_POLICY_IN
, skb
))
2020 goto discard_and_relse
;
2023 if (sk_filter(sk
, skb
))
2024 goto discard_and_relse
;
2028 bh_lock_sock_nested(sk
);
2030 if (!sock_owned_by_user(sk
)) {
2031 #ifdef CONFIG_NET_DMA
2032 struct tcp_sock
*tp
= tcp_sk(sk
);
2033 if (!tp
->ucopy
.dma_chan
&& tp
->ucopy
.pinned_list
)
2034 tp
->ucopy
.dma_chan
= net_dma_find_channel();
2035 if (tp
->ucopy
.dma_chan
)
2036 ret
= tcp_v4_do_rcv(sk
, skb
);
2040 if (!tcp_prequeue(sk
, skb
))
2041 ret
= tcp_v4_do_rcv(sk
, skb
);
2043 } else if (unlikely(sk_add_backlog(sk
, skb
,
2044 sk
->sk_rcvbuf
+ sk
->sk_sndbuf
))) {
2046 NET_INC_STATS_BH(net
, LINUX_MIB_TCPBACKLOGDROP
);
2047 goto discard_and_relse
;
2056 if (!xfrm4_policy_check(NULL
, XFRM_POLICY_IN
, skb
))
2059 if (skb
->len
< (th
->doff
<< 2) || tcp_checksum_complete(skb
)) {
2061 TCP_INC_STATS_BH(net
, TCP_MIB_CSUMERRORS
);
2063 TCP_INC_STATS_BH(net
, TCP_MIB_INERRS
);
2065 tcp_v4_send_reset(NULL
, skb
);
2069 /* Discard frame. */
2078 if (!xfrm4_policy_check(NULL
, XFRM_POLICY_IN
, skb
)) {
2079 inet_twsk_put(inet_twsk(sk
));
2083 if (skb
->len
< (th
->doff
<< 2)) {
2084 inet_twsk_put(inet_twsk(sk
));
2087 if (tcp_checksum_complete(skb
)) {
2088 inet_twsk_put(inet_twsk(sk
));
2091 switch (tcp_timewait_state_process(inet_twsk(sk
), skb
, th
)) {
2093 struct sock
*sk2
= inet_lookup_listener(dev_net(skb
->dev
),
2095 iph
->saddr
, th
->source
,
2096 iph
->daddr
, th
->dest
,
2099 inet_twsk_deschedule(inet_twsk(sk
), &tcp_death_row
);
2100 inet_twsk_put(inet_twsk(sk
));
2104 /* Fall through to ACK */
2107 tcp_v4_timewait_ack(sk
, skb
);
2111 case TCP_TW_SUCCESS
:;
2116 static struct timewait_sock_ops tcp_timewait_sock_ops
= {
2117 .twsk_obj_size
= sizeof(struct tcp_timewait_sock
),
2118 .twsk_unique
= tcp_twsk_unique
,
2119 .twsk_destructor
= tcp_twsk_destructor
,
2122 void inet_sk_rx_dst_set(struct sock
*sk
, const struct sk_buff
*skb
)
2124 struct dst_entry
*dst
= skb_dst(skb
);
2127 sk
->sk_rx_dst
= dst
;
2128 inet_sk(sk
)->rx_dst_ifindex
= skb
->skb_iif
;
2130 EXPORT_SYMBOL(inet_sk_rx_dst_set
);
2132 const struct inet_connection_sock_af_ops ipv4_specific
= {
2133 .queue_xmit
= ip_queue_xmit
,
2134 .send_check
= tcp_v4_send_check
,
2135 .rebuild_header
= inet_sk_rebuild_header
,
2136 .sk_rx_dst_set
= inet_sk_rx_dst_set
,
2137 .conn_request
= tcp_v4_conn_request
,
2138 .syn_recv_sock
= tcp_v4_syn_recv_sock
,
2139 .net_header_len
= sizeof(struct iphdr
),
2140 .setsockopt
= ip_setsockopt
,
2141 .getsockopt
= ip_getsockopt
,
2142 .addr2sockaddr
= inet_csk_addr2sockaddr
,
2143 .sockaddr_len
= sizeof(struct sockaddr_in
),
2144 .bind_conflict
= inet_csk_bind_conflict
,
2145 #ifdef CONFIG_COMPAT
2146 .compat_setsockopt
= compat_ip_setsockopt
,
2147 .compat_getsockopt
= compat_ip_getsockopt
,
2149 .mtu_reduced
= tcp_v4_mtu_reduced
,
2151 EXPORT_SYMBOL(ipv4_specific
);
2153 #ifdef CONFIG_TCP_MD5SIG
2154 static const struct tcp_sock_af_ops tcp_sock_ipv4_specific
= {
2155 .md5_lookup
= tcp_v4_md5_lookup
,
2156 .calc_md5_hash
= tcp_v4_md5_hash_skb
,
2157 .md5_parse
= tcp_v4_parse_md5_keys
,
2161 /* NOTE: A lot of things set to zero explicitly by call to
2162 * sk_alloc() so need not be done here.
2164 static int tcp_v4_init_sock(struct sock
*sk
)
2166 struct inet_connection_sock
*icsk
= inet_csk(sk
);
2169 icsk
->icsk_MMSRB
= 0;
2171 icsk
->icsk_af_ops
= &ipv4_specific
;
2173 #ifdef CONFIG_TCP_MD5SIG
2174 tcp_sk(sk
)->af_specific
= &tcp_sock_ipv4_specific
;
2180 void tcp_v4_destroy_sock(struct sock
*sk
)
2182 struct tcp_sock
*tp
= tcp_sk(sk
);
2184 tcp_clear_xmit_timers(sk
);
2186 tcp_cleanup_congestion_control(sk
);
2188 /* Cleanup up the write buffer. */
2189 tcp_write_queue_purge(sk
);
2191 /* Cleans up our, hopefully empty, out_of_order_queue. */
2192 __skb_queue_purge(&tp
->out_of_order_queue
);
2194 #ifdef CONFIG_TCP_MD5SIG
2195 /* Clean up the MD5 key list, if any */
2196 if (tp
->md5sig_info
) {
2197 tcp_clear_md5_list(sk
);
2198 kfree_rcu(tp
->md5sig_info
, rcu
);
2199 tp
->md5sig_info
= NULL
;
2203 #ifdef CONFIG_NET_DMA
2204 /* Cleans up our sk_async_wait_queue */
2205 __skb_queue_purge(&sk
->sk_async_wait_queue
);
2208 /* Clean prequeue, it must be empty really */
2209 __skb_queue_purge(&tp
->ucopy
.prequeue
);
2211 /* Clean up a referenced TCP bind bucket. */
2212 if (inet_csk(sk
)->icsk_bind_hash
)
2215 BUG_ON(tp
->fastopen_rsk
!= NULL
);
2217 /* If socket is aborted during connect operation */
2218 tcp_free_fastopen_req(tp
);
2220 sk_sockets_allocated_dec(sk
);
2221 sock_release_memcg(sk
);
2223 EXPORT_SYMBOL(tcp_v4_destroy_sock
);
2225 void tcp_v4_handle_retrans_time_by_uid(struct uid_err uid_e
)
2227 unsigned int bucket
;
2228 uid_t skuid
= (uid_t
)(uid_e
.appuid
);
2229 struct inet_connection_sock
*icsk
= NULL
;//inet_csk(sk);
2232 for (bucket
= 0; bucket
< tcp_hashinfo
.ehash_mask
; bucket
++) {
2233 struct hlist_nulls_node
*node
;
2235 spinlock_t
*lock
= inet_ehash_lockp(&tcp_hashinfo
, bucket
);
2238 sk_nulls_for_each(sk
, node
, &tcp_hashinfo
.ehash
[bucket
].chain
) {
2240 if (sysctl_ip_dynaddr
&& sk
->sk_state
== TCP_SYN_SENT
)
2242 if (sock_flag(sk
, SOCK_DEAD
))
2246 if(SOCK_INODE(sk
->sk_socket
)->i_uid
!= skuid
)
2249 printk("[mmspb] tcp_v4_handle_retrans_time_by_uid socket uid(%d) match!",
2250 SOCK_INODE(sk
->sk_socket
)->i_uid
);
2256 spin_unlock_bh(lock
);
2261 // update sk time out value
2262 icsk
= inet_csk(sk
);
2263 printk("[mmspb] tcp_v4_handle_retrans_time_by_uid update timer\n");
2265 sk_reset_timer(sk
, &icsk
->icsk_retransmit_timer
, jiffies
+ 2);
2266 icsk
->icsk_rto
= sysctl_tcp_rto_min
* 30;
2267 icsk
->icsk_MMSRB
= 1;
2275 spin_unlock_bh(lock
);
2282 * tcp_v4_nuke_addr_by_uid - destroy all sockets of spcial uid
2284 void tcp_v4_reset_connections_by_uid(struct uid_err uid_e
)
2286 unsigned int bucket
;
2287 uid_t skuid
= (uid_t
)(uid_e
.appuid
);
2289 for (bucket
= 0; bucket
< tcp_hashinfo
.ehash_mask
; bucket
++) {
2290 struct hlist_nulls_node
*node
;
2292 spinlock_t
*lock
= inet_ehash_lockp(&tcp_hashinfo
, bucket
);
2296 sk_nulls_for_each(sk
, node
, &tcp_hashinfo
.ehash
[bucket
].chain
) {
2298 if (sysctl_ip_dynaddr
&& sk
->sk_state
== TCP_SYN_SENT
)
2300 if (sock_flag(sk
, SOCK_DEAD
))
2304 if(SOCK_INODE(sk
->sk_socket
)->i_uid
!= skuid
)
2307 printk(KERN_INFO
"SIOCKILLSOCK socket uid(%d) match!",
2308 SOCK_INODE(sk
->sk_socket
)->i_uid
);
2314 spin_unlock_bh(lock
);
2318 sk
->sk_err
= uid_e
.errNum
;
2319 printk(KERN_INFO
"SIOCKILLSOCK set sk err == %d!! \n", sk
->sk_err
);
2320 sk
->sk_error_report(sk
);
2329 spin_unlock_bh(lock
);
2334 #ifdef CONFIG_PROC_FS
2335 /* Proc filesystem TCP sock list dumping. */
2337 static inline struct inet_timewait_sock
*tw_head(struct hlist_nulls_head
*head
)
2339 return hlist_nulls_empty(head
) ? NULL
:
2340 list_entry(head
->first
, struct inet_timewait_sock
, tw_node
);
2343 static inline struct inet_timewait_sock
*tw_next(struct inet_timewait_sock
*tw
)
2345 return !is_a_nulls(tw
->tw_node
.next
) ?
2346 hlist_nulls_entry(tw
->tw_node
.next
, typeof(*tw
), tw_node
) : NULL
;
2350 * Get next listener socket follow cur. If cur is NULL, get first socket
2351 * starting from bucket given in st->bucket; when st->bucket is zero the
2352 * very first socket in the hash table is returned.
2354 static void *listening_get_next(struct seq_file
*seq
, void *cur
)
2356 struct inet_connection_sock
*icsk
;
2357 struct hlist_nulls_node
*node
;
2358 struct sock
*sk
= cur
;
2359 struct inet_listen_hashbucket
*ilb
;
2360 struct tcp_iter_state
*st
= seq
->private;
2361 struct net
*net
= seq_file_net(seq
);
2364 ilb
= &tcp_hashinfo
.listening_hash
[st
->bucket
];
2365 spin_lock_bh(&ilb
->lock
);
2366 sk
= sk_nulls_head(&ilb
->head
);
2370 ilb
= &tcp_hashinfo
.listening_hash
[st
->bucket
];
2374 if (st
->state
== TCP_SEQ_STATE_OPENREQ
) {
2375 struct request_sock
*req
= cur
;
2377 icsk
= inet_csk(st
->syn_wait_sk
);
2381 if (req
->rsk_ops
->family
== st
->family
) {
2387 if (++st
->sbucket
>= icsk
->icsk_accept_queue
.listen_opt
->nr_table_entries
)
2390 req
= icsk
->icsk_accept_queue
.listen_opt
->syn_table
[st
->sbucket
];
2392 sk
= sk_nulls_next(st
->syn_wait_sk
);
2393 st
->state
= TCP_SEQ_STATE_LISTENING
;
2394 read_unlock_bh(&icsk
->icsk_accept_queue
.syn_wait_lock
);
2396 icsk
= inet_csk(sk
);
2397 read_lock_bh(&icsk
->icsk_accept_queue
.syn_wait_lock
);
2398 if (reqsk_queue_len(&icsk
->icsk_accept_queue
))
2400 read_unlock_bh(&icsk
->icsk_accept_queue
.syn_wait_lock
);
2401 sk
= sk_nulls_next(sk
);
2404 sk_nulls_for_each_from(sk
, node
) {
2405 if (!net_eq(sock_net(sk
), net
))
2407 if (sk
->sk_family
== st
->family
) {
2411 icsk
= inet_csk(sk
);
2412 read_lock_bh(&icsk
->icsk_accept_queue
.syn_wait_lock
);
2413 if (reqsk_queue_len(&icsk
->icsk_accept_queue
)) {
2415 st
->uid
= sock_i_uid(sk
);
2416 st
->syn_wait_sk
= sk
;
2417 st
->state
= TCP_SEQ_STATE_OPENREQ
;
2421 read_unlock_bh(&icsk
->icsk_accept_queue
.syn_wait_lock
);
2423 spin_unlock_bh(&ilb
->lock
);
2425 if (++st
->bucket
< INET_LHTABLE_SIZE
) {
2426 ilb
= &tcp_hashinfo
.listening_hash
[st
->bucket
];
2427 spin_lock_bh(&ilb
->lock
);
2428 sk
= sk_nulls_head(&ilb
->head
);
2436 static void *listening_get_idx(struct seq_file
*seq
, loff_t
*pos
)
2438 struct tcp_iter_state
*st
= seq
->private;
2443 rc
= listening_get_next(seq
, NULL
);
2445 while (rc
&& *pos
) {
2446 rc
= listening_get_next(seq
, rc
);
2452 static inline bool empty_bucket(struct tcp_iter_state
*st
)
2454 return hlist_nulls_empty(&tcp_hashinfo
.ehash
[st
->bucket
].chain
) &&
2455 hlist_nulls_empty(&tcp_hashinfo
.ehash
[st
->bucket
].twchain
);
2459 * Get first established socket starting from bucket given in st->bucket.
2460 * If st->bucket is zero, the very first socket in the hash is returned.
2462 static void *established_get_first(struct seq_file
*seq
)
2464 struct tcp_iter_state
*st
= seq
->private;
2465 struct net
*net
= seq_file_net(seq
);
2469 for (; st
->bucket
<= tcp_hashinfo
.ehash_mask
; ++st
->bucket
) {
2471 struct hlist_nulls_node
*node
;
2472 struct inet_timewait_sock
*tw
;
2473 spinlock_t
*lock
= inet_ehash_lockp(&tcp_hashinfo
, st
->bucket
);
2475 /* Lockless fast path for the common case of empty buckets */
2476 if (empty_bucket(st
))
2480 sk_nulls_for_each(sk
, node
, &tcp_hashinfo
.ehash
[st
->bucket
].chain
) {
2481 if (sk
->sk_family
!= st
->family
||
2482 !net_eq(sock_net(sk
), net
)) {
2488 st
->state
= TCP_SEQ_STATE_TIME_WAIT
;
2489 inet_twsk_for_each(tw
, node
,
2490 &tcp_hashinfo
.ehash
[st
->bucket
].twchain
) {
2491 if (tw
->tw_family
!= st
->family
||
2492 !net_eq(twsk_net(tw
), net
)) {
2498 spin_unlock_bh(lock
);
2499 st
->state
= TCP_SEQ_STATE_ESTABLISHED
;
2505 static void *established_get_next(struct seq_file
*seq
, void *cur
)
2507 struct sock
*sk
= cur
;
2508 struct inet_timewait_sock
*tw
;
2509 struct hlist_nulls_node
*node
;
2510 struct tcp_iter_state
*st
= seq
->private;
2511 struct net
*net
= seq_file_net(seq
);
2516 if (st
->state
== TCP_SEQ_STATE_TIME_WAIT
) {
2520 while (tw
&& (tw
->tw_family
!= st
->family
|| !net_eq(twsk_net(tw
), net
))) {
2527 spin_unlock_bh(inet_ehash_lockp(&tcp_hashinfo
, st
->bucket
));
2528 st
->state
= TCP_SEQ_STATE_ESTABLISHED
;
2530 /* Look for next non empty bucket */
2532 while (++st
->bucket
<= tcp_hashinfo
.ehash_mask
&&
2535 if (st
->bucket
> tcp_hashinfo
.ehash_mask
)
2538 spin_lock_bh(inet_ehash_lockp(&tcp_hashinfo
, st
->bucket
));
2539 sk
= sk_nulls_head(&tcp_hashinfo
.ehash
[st
->bucket
].chain
);
2541 sk
= sk_nulls_next(sk
);
2543 sk_nulls_for_each_from(sk
, node
) {
2544 if (sk
->sk_family
== st
->family
&& net_eq(sock_net(sk
), net
))
2548 st
->state
= TCP_SEQ_STATE_TIME_WAIT
;
2549 tw
= tw_head(&tcp_hashinfo
.ehash
[st
->bucket
].twchain
);
2557 static void *established_get_idx(struct seq_file
*seq
, loff_t pos
)
2559 struct tcp_iter_state
*st
= seq
->private;
2563 rc
= established_get_first(seq
);
2566 rc
= established_get_next(seq
, rc
);
2572 static void *tcp_get_idx(struct seq_file
*seq
, loff_t pos
)
2575 struct tcp_iter_state
*st
= seq
->private;
2577 st
->state
= TCP_SEQ_STATE_LISTENING
;
2578 rc
= listening_get_idx(seq
, &pos
);
2581 st
->state
= TCP_SEQ_STATE_ESTABLISHED
;
2582 rc
= established_get_idx(seq
, pos
);
2588 static void *tcp_seek_last_pos(struct seq_file
*seq
)
2590 struct tcp_iter_state
*st
= seq
->private;
2591 int offset
= st
->offset
;
2592 int orig_num
= st
->num
;
2595 switch (st
->state
) {
2596 case TCP_SEQ_STATE_OPENREQ
:
2597 case TCP_SEQ_STATE_LISTENING
:
2598 if (st
->bucket
>= INET_LHTABLE_SIZE
)
2600 st
->state
= TCP_SEQ_STATE_LISTENING
;
2601 rc
= listening_get_next(seq
, NULL
);
2602 while (offset
-- && rc
)
2603 rc
= listening_get_next(seq
, rc
);
2608 case TCP_SEQ_STATE_ESTABLISHED
:
2609 case TCP_SEQ_STATE_TIME_WAIT
:
2610 st
->state
= TCP_SEQ_STATE_ESTABLISHED
;
2611 if (st
->bucket
> tcp_hashinfo
.ehash_mask
)
2613 rc
= established_get_first(seq
);
2614 while (offset
-- && rc
)
2615 rc
= established_get_next(seq
, rc
);
2623 static void *tcp_seq_start(struct seq_file
*seq
, loff_t
*pos
)
2625 struct tcp_iter_state
*st
= seq
->private;
2628 if (*pos
&& *pos
== st
->last_pos
) {
2629 rc
= tcp_seek_last_pos(seq
);
2634 st
->state
= TCP_SEQ_STATE_LISTENING
;
2638 rc
= *pos
? tcp_get_idx(seq
, *pos
- 1) : SEQ_START_TOKEN
;
2641 st
->last_pos
= *pos
;
2645 static void *tcp_seq_next(struct seq_file
*seq
, void *v
, loff_t
*pos
)
2647 struct tcp_iter_state
*st
= seq
->private;
2650 if (v
== SEQ_START_TOKEN
) {
2651 rc
= tcp_get_idx(seq
, 0);
2655 switch (st
->state
) {
2656 case TCP_SEQ_STATE_OPENREQ
:
2657 case TCP_SEQ_STATE_LISTENING
:
2658 rc
= listening_get_next(seq
, v
);
2660 st
->state
= TCP_SEQ_STATE_ESTABLISHED
;
2663 rc
= established_get_first(seq
);
2666 case TCP_SEQ_STATE_ESTABLISHED
:
2667 case TCP_SEQ_STATE_TIME_WAIT
:
2668 rc
= established_get_next(seq
, v
);
2673 st
->last_pos
= *pos
;
2677 static void tcp_seq_stop(struct seq_file
*seq
, void *v
)
2679 struct tcp_iter_state
*st
= seq
->private;
2681 switch (st
->state
) {
2682 case TCP_SEQ_STATE_OPENREQ
:
2684 struct inet_connection_sock
*icsk
= inet_csk(st
->syn_wait_sk
);
2685 read_unlock_bh(&icsk
->icsk_accept_queue
.syn_wait_lock
);
2687 case TCP_SEQ_STATE_LISTENING
:
2688 if (v
!= SEQ_START_TOKEN
)
2689 spin_unlock_bh(&tcp_hashinfo
.listening_hash
[st
->bucket
].lock
);
2691 case TCP_SEQ_STATE_TIME_WAIT
:
2692 case TCP_SEQ_STATE_ESTABLISHED
:
2694 spin_unlock_bh(inet_ehash_lockp(&tcp_hashinfo
, st
->bucket
));
2699 int tcp_seq_open(struct inode
*inode
, struct file
*file
)
2701 struct tcp_seq_afinfo
*afinfo
= PDE_DATA(inode
);
2702 struct tcp_iter_state
*s
;
2705 err
= seq_open_net(inode
, file
, &afinfo
->seq_ops
,
2706 sizeof(struct tcp_iter_state
));
2710 s
= ((struct seq_file
*)file
->private_data
)->private;
2711 s
->family
= afinfo
->family
;
2715 EXPORT_SYMBOL(tcp_seq_open
);
2717 int tcp_proc_register(struct net
*net
, struct tcp_seq_afinfo
*afinfo
)
2720 struct proc_dir_entry
*p
;
2722 afinfo
->seq_ops
.start
= tcp_seq_start
;
2723 afinfo
->seq_ops
.next
= tcp_seq_next
;
2724 afinfo
->seq_ops
.stop
= tcp_seq_stop
;
2726 p
= proc_create_data(afinfo
->name
, S_IRUGO
, net
->proc_net
,
2727 afinfo
->seq_fops
, afinfo
);
2732 EXPORT_SYMBOL(tcp_proc_register
);
2734 void tcp_proc_unregister(struct net
*net
, struct tcp_seq_afinfo
*afinfo
)
2736 remove_proc_entry(afinfo
->name
, net
->proc_net
);
2738 EXPORT_SYMBOL(tcp_proc_unregister
);
2740 static void get_openreq4(const struct sock
*sk
, const struct request_sock
*req
,
2741 struct seq_file
*f
, int i
, kuid_t uid
, int *len
)
2743 const struct inet_request_sock
*ireq
= inet_rsk(req
);
2744 long delta
= req
->expires
- jiffies
;
2746 seq_printf(f
, "%4d: %08X:%04X %08X:%04X"
2747 " %02X %08X:%08X %02X:%08lX %08X %5d %8d %u %d %pK%n",
2750 ntohs(inet_sk(sk
)->inet_sport
),
2752 ntohs(ireq
->rmt_port
),
2754 0, 0, /* could print option size, but that is af dependent. */
2755 1, /* timers active (only the expire timer) */
2756 jiffies_delta_to_clock_t(delta
),
2758 from_kuid_munged(seq_user_ns(f
), uid
),
2759 0, /* non standard timer */
2760 0, /* open_requests have no inode */
2761 atomic_read(&sk
->sk_refcnt
),
2766 static void get_tcp4_sock(struct sock
*sk
, struct seq_file
*f
, int i
, int *len
)
2769 unsigned long timer_expires
;
2770 const struct tcp_sock
*tp
= tcp_sk(sk
);
2771 const struct inet_connection_sock
*icsk
= inet_csk(sk
);
2772 const struct inet_sock
*inet
= inet_sk(sk
);
2773 struct fastopen_queue
*fastopenq
= icsk
->icsk_accept_queue
.fastopenq
;
2774 __be32 dest
= inet
->inet_daddr
;
2775 __be32 src
= inet
->inet_rcv_saddr
;
2776 __u16 destp
= ntohs(inet
->inet_dport
);
2777 __u16 srcp
= ntohs(inet
->inet_sport
);
2780 if (icsk
->icsk_pending
== ICSK_TIME_RETRANS
||
2781 icsk
->icsk_pending
== ICSK_TIME_EARLY_RETRANS
||
2782 icsk
->icsk_pending
== ICSK_TIME_LOSS_PROBE
) {
2784 timer_expires
= icsk
->icsk_timeout
;
2785 } else if (icsk
->icsk_pending
== ICSK_TIME_PROBE0
) {
2787 timer_expires
= icsk
->icsk_timeout
;
2788 } else if (timer_pending(&sk
->sk_timer
)) {
2790 timer_expires
= sk
->sk_timer
.expires
;
2793 timer_expires
= jiffies
;
2796 if (sk
->sk_state
== TCP_LISTEN
)
2797 rx_queue
= sk
->sk_ack_backlog
;
2800 * because we dont lock socket, we might find a transient negative value
2802 rx_queue
= max_t(int, tp
->rcv_nxt
- tp
->copied_seq
, 0);
2804 seq_printf(f
, "%4d: %08X:%04X %08X:%04X %02X %08X:%08X %02X:%08lX "
2805 "%08X %5d %8d %lu %d %pK %lu %lu %u %u %d%n",
2806 i
, src
, srcp
, dest
, destp
, sk
->sk_state
,
2807 tp
->write_seq
- tp
->snd_una
,
2810 jiffies_delta_to_clock_t(timer_expires
- jiffies
),
2811 icsk
->icsk_retransmits
,
2812 from_kuid_munged(seq_user_ns(f
), sock_i_uid(sk
)),
2813 icsk
->icsk_probes_out
,
2815 atomic_read(&sk
->sk_refcnt
), sk
,
2816 jiffies_to_clock_t(icsk
->icsk_rto
),
2817 jiffies_to_clock_t(icsk
->icsk_ack
.ato
),
2818 (icsk
->icsk_ack
.quick
<< 1) | icsk
->icsk_ack
.pingpong
,
2820 sk
->sk_state
== TCP_LISTEN
?
2821 (fastopenq
? fastopenq
->max_qlen
: 0) :
2822 (tcp_in_initial_slowstart(tp
) ? -1 : tp
->snd_ssthresh
),
2826 static void get_timewait4_sock(const struct inet_timewait_sock
*tw
,
2827 struct seq_file
*f
, int i
, int *len
)
2831 long delta
= tw
->tw_ttd
- jiffies
;
2833 dest
= tw
->tw_daddr
;
2834 src
= tw
->tw_rcv_saddr
;
2835 destp
= ntohs(tw
->tw_dport
);
2836 srcp
= ntohs(tw
->tw_sport
);
2838 seq_printf(f
, "%4d: %08X:%04X %08X:%04X"
2839 " %02X %08X:%08X %02X:%08lX %08X %5d %8d %d %d %pK%n",
2840 i
, src
, srcp
, dest
, destp
, tw
->tw_substate
, 0, 0,
2841 3, jiffies_delta_to_clock_t(delta
), 0, 0, 0, 0,
2842 atomic_read(&tw
->tw_refcnt
), tw
, len
);
2847 static int tcp4_seq_show(struct seq_file
*seq
, void *v
)
2849 struct tcp_iter_state
*st
;
2852 if (v
== SEQ_START_TOKEN
) {
2853 seq_printf(seq
, "%-*s\n", TMPSZ
- 1,
2854 " sl local_address rem_address st tx_queue "
2855 "rx_queue tr tm->when retrnsmt uid timeout "
2861 switch (st
->state
) {
2862 case TCP_SEQ_STATE_LISTENING
:
2863 case TCP_SEQ_STATE_ESTABLISHED
:
2864 get_tcp4_sock(v
, seq
, st
->num
, &len
);
2866 case TCP_SEQ_STATE_OPENREQ
:
2867 get_openreq4(st
->syn_wait_sk
, v
, seq
, st
->num
, st
->uid
, &len
);
2869 case TCP_SEQ_STATE_TIME_WAIT
:
2870 get_timewait4_sock(v
, seq
, st
->num
, &len
);
2873 seq_printf(seq
, "%*s\n", TMPSZ
- 1 - len
, "");
2878 static const struct file_operations tcp_afinfo_seq_fops
= {
2879 .owner
= THIS_MODULE
,
2880 .open
= tcp_seq_open
,
2882 .llseek
= seq_lseek
,
2883 .release
= seq_release_net
2886 static struct tcp_seq_afinfo tcp4_seq_afinfo
= {
2889 .seq_fops
= &tcp_afinfo_seq_fops
,
2891 .show
= tcp4_seq_show
,
2895 static int __net_init
tcp4_proc_init_net(struct net
*net
)
2897 return tcp_proc_register(net
, &tcp4_seq_afinfo
);
2900 static void __net_exit
tcp4_proc_exit_net(struct net
*net
)
2902 tcp_proc_unregister(net
, &tcp4_seq_afinfo
);
2905 static struct pernet_operations tcp4_net_ops
= {
2906 .init
= tcp4_proc_init_net
,
2907 .exit
= tcp4_proc_exit_net
,
2910 int __init
tcp4_proc_init(void)
2912 return register_pernet_subsys(&tcp4_net_ops
);
2915 void tcp4_proc_exit(void)
2917 unregister_pernet_subsys(&tcp4_net_ops
);
2919 #endif /* CONFIG_PROC_FS */
2921 struct sk_buff
**tcp4_gro_receive(struct sk_buff
**head
, struct sk_buff
*skb
)
2923 const struct iphdr
*iph
= skb_gro_network_header(skb
);
2927 switch (skb
->ip_summed
) {
2928 case CHECKSUM_COMPLETE
:
2929 if (!tcp_v4_check(skb_gro_len(skb
), iph
->saddr
, iph
->daddr
,
2931 skb
->ip_summed
= CHECKSUM_UNNECESSARY
;
2935 NAPI_GRO_CB(skb
)->flush
= 1;
2939 wsum
= csum_tcpudp_nofold(iph
->saddr
, iph
->daddr
,
2940 skb_gro_len(skb
), IPPROTO_TCP
, 0);
2941 sum
= csum_fold(skb_checksum(skb
,
2942 skb_gro_offset(skb
),
2948 skb
->ip_summed
= CHECKSUM_UNNECESSARY
;
2952 return tcp_gro_receive(head
, skb
);
2955 int tcp4_gro_complete(struct sk_buff
*skb
)
2957 const struct iphdr
*iph
= ip_hdr(skb
);
2958 struct tcphdr
*th
= tcp_hdr(skb
);
2960 th
->check
= ~tcp_v4_check(skb
->len
- skb_transport_offset(skb
),
2961 iph
->saddr
, iph
->daddr
, 0);
2962 skb_shinfo(skb
)->gso_type
= SKB_GSO_TCPV4
;
2964 return tcp_gro_complete(skb
);
2967 struct proto tcp_prot
= {
2969 .owner
= THIS_MODULE
,
2971 .connect
= tcp_v4_connect
,
2972 .disconnect
= tcp_disconnect
,
2973 .accept
= inet_csk_accept
,
2975 .init
= tcp_v4_init_sock
,
2976 .destroy
= tcp_v4_destroy_sock
,
2977 .shutdown
= tcp_shutdown
,
2978 .setsockopt
= tcp_setsockopt
,
2979 .getsockopt
= tcp_getsockopt
,
2980 .recvmsg
= tcp_recvmsg
,
2981 .sendmsg
= tcp_sendmsg
,
2982 .sendpage
= tcp_sendpage
,
2983 .backlog_rcv
= tcp_v4_do_rcv
,
2984 .release_cb
= tcp_release_cb
,
2986 .unhash
= inet_unhash
,
2987 .get_port
= inet_csk_get_port
,
2988 .enter_memory_pressure
= tcp_enter_memory_pressure
,
2989 .sockets_allocated
= &tcp_sockets_allocated
,
2990 .orphan_count
= &tcp_orphan_count
,
2991 .memory_allocated
= &tcp_memory_allocated
,
2992 .memory_pressure
= &tcp_memory_pressure
,
2993 .sysctl_wmem
= sysctl_tcp_wmem
,
2994 .sysctl_rmem
= sysctl_tcp_rmem
,
2995 .max_header
= MAX_TCP_HEADER
,
2996 .obj_size
= sizeof(struct tcp_sock
),
2997 .slab_flags
= SLAB_DESTROY_BY_RCU
,
2998 .twsk_prot
= &tcp_timewait_sock_ops
,
2999 .rsk_prot
= &tcp_request_sock_ops
,
3000 .h
.hashinfo
= &tcp_hashinfo
,
3001 .no_autobind
= true,
3002 #ifdef CONFIG_COMPAT
3003 .compat_setsockopt
= compat_tcp_setsockopt
,
3004 .compat_getsockopt
= compat_tcp_getsockopt
,
3006 #ifdef CONFIG_MEMCG_KMEM
3007 .init_cgroup
= tcp_init_cgroup
,
3008 .destroy_cgroup
= tcp_destroy_cgroup
,
3009 .proto_cgroup
= tcp_proto_cgroup
,
3012 EXPORT_SYMBOL(tcp_prot
);
3014 static void __net_exit
tcp_sk_exit(struct net
*net
)
3018 for_each_possible_cpu(cpu
)
3019 inet_ctl_sock_destroy(*per_cpu_ptr(net
->ipv4
.tcp_sk
, cpu
));
3020 free_percpu(net
->ipv4
.tcp_sk
);
3023 static int __net_init
tcp_sk_init(struct net
*net
)
3027 net
->ipv4
.tcp_sk
= alloc_percpu(struct sock
*);
3028 if (!net
->ipv4
.tcp_sk
)
3031 for_each_possible_cpu(cpu
) {
3034 res
= inet_ctl_sock_create(&sk
, PF_INET
, SOCK_RAW
,
3038 *per_cpu_ptr(net
->ipv4
.tcp_sk
, cpu
) = sk
;
3040 net
->ipv4
.sysctl_tcp_ecn
= 2;
3049 static void __net_exit
tcp_sk_exit_batch(struct list_head
*net_exit_list
)
3051 inet_twsk_purge(&tcp_hashinfo
, &tcp_death_row
, AF_INET
);
3054 static struct pernet_operations __net_initdata tcp_sk_ops
= {
3055 .init
= tcp_sk_init
,
3056 .exit
= tcp_sk_exit
,
3057 .exit_batch
= tcp_sk_exit_batch
,
3060 void __init
tcp_v4_init(void)
3062 inet_hashinfo_init(&tcp_hashinfo
);
3063 if (register_pernet_subsys(&tcp_sk_ops
))
3064 panic("Failed to create the TCP control socket.\n");