123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155 |
- // SPDX-License-Identifier: GPL-2.0-or-later
- /*
- * (C) 2012 by Pablo Neira Ayuso <pablo@netfilter.org>
- * (C) 2012 by Vyatta Inc. <http://www.vyatta.com>
- */
- #include <linux/types.h>
- #include <linux/netfilter.h>
- #include <linux/skbuff.h>
- #include <linux/vmalloc.h>
- #include <linux/stddef.h>
- #include <linux/err.h>
- #include <linux/percpu.h>
- #include <linux/kernel.h>
- #include <linux/netdevice.h>
- #include <linux/slab.h>
- #include <linux/export.h>
- #include <net/netfilter/nf_conntrack.h>
- #include <net/netfilter/nf_conntrack_core.h>
- #include <net/netfilter/nf_conntrack_extend.h>
- #include <net/netfilter/nf_conntrack_l4proto.h>
- #include <net/netfilter/nf_conntrack_timeout.h>
- struct nf_ct_timeout *
- (*nf_ct_timeout_find_get_hook)(struct net *net, const char *name) __read_mostly;
- EXPORT_SYMBOL_GPL(nf_ct_timeout_find_get_hook);
- void (*nf_ct_timeout_put_hook)(struct nf_ct_timeout *timeout) __read_mostly;
- EXPORT_SYMBOL_GPL(nf_ct_timeout_put_hook);
- static int untimeout(struct nf_conn *ct, void *timeout)
- {
- struct nf_conn_timeout *timeout_ext = nf_ct_timeout_find(ct);
- if (timeout_ext && (!timeout || timeout_ext->timeout == timeout))
- RCU_INIT_POINTER(timeout_ext->timeout, NULL);
- /* We are not intended to delete this conntrack. */
- return 0;
- }
- void nf_ct_untimeout(struct net *net, struct nf_ct_timeout *timeout)
- {
- nf_ct_iterate_cleanup_net(net, untimeout, timeout, 0, 0);
- }
- EXPORT_SYMBOL_GPL(nf_ct_untimeout);
- static void __nf_ct_timeout_put(struct nf_ct_timeout *timeout)
- {
- typeof(nf_ct_timeout_put_hook) timeout_put;
- timeout_put = rcu_dereference(nf_ct_timeout_put_hook);
- if (timeout_put)
- timeout_put(timeout);
- }
- int nf_ct_set_timeout(struct net *net, struct nf_conn *ct,
- u8 l3num, u8 l4num, const char *timeout_name)
- {
- typeof(nf_ct_timeout_find_get_hook) timeout_find_get;
- struct nf_ct_timeout *timeout;
- struct nf_conn_timeout *timeout_ext;
- const char *errmsg = NULL;
- int ret = 0;
- rcu_read_lock();
- timeout_find_get = rcu_dereference(nf_ct_timeout_find_get_hook);
- if (!timeout_find_get) {
- ret = -ENOENT;
- errmsg = "Timeout policy base is empty";
- goto out;
- }
- timeout = timeout_find_get(net, timeout_name);
- if (!timeout) {
- ret = -ENOENT;
- pr_info_ratelimited("No such timeout policy \"%s\"\n",
- timeout_name);
- goto out;
- }
- if (timeout->l3num != l3num) {
- ret = -EINVAL;
- pr_info_ratelimited("Timeout policy `%s' can only be used by "
- "L%d protocol number %d\n",
- timeout_name, 3, timeout->l3num);
- goto err_put_timeout;
- }
- /* Make sure the timeout policy matches any existing protocol tracker,
- * otherwise default to generic.
- */
- if (timeout->l4proto->l4proto != l4num) {
- ret = -EINVAL;
- pr_info_ratelimited("Timeout policy `%s' can only be used by "
- "L%d protocol number %d\n",
- timeout_name, 4, timeout->l4proto->l4proto);
- goto err_put_timeout;
- }
- timeout_ext = nf_ct_timeout_ext_add(ct, timeout, GFP_ATOMIC);
- if (!timeout_ext) {
- ret = -ENOMEM;
- goto err_put_timeout;
- }
- rcu_read_unlock();
- return ret;
- err_put_timeout:
- __nf_ct_timeout_put(timeout);
- out:
- rcu_read_unlock();
- if (errmsg)
- pr_info_ratelimited("%s\n", errmsg);
- return ret;
- }
- EXPORT_SYMBOL_GPL(nf_ct_set_timeout);
- void nf_ct_destroy_timeout(struct nf_conn *ct)
- {
- struct nf_conn_timeout *timeout_ext;
- typeof(nf_ct_timeout_put_hook) timeout_put;
- rcu_read_lock();
- timeout_put = rcu_dereference(nf_ct_timeout_put_hook);
- if (timeout_put) {
- timeout_ext = nf_ct_timeout_find(ct);
- if (timeout_ext) {
- timeout_put(timeout_ext->timeout);
- RCU_INIT_POINTER(timeout_ext->timeout, NULL);
- }
- }
- rcu_read_unlock();
- }
- EXPORT_SYMBOL_GPL(nf_ct_destroy_timeout);
- static const struct nf_ct_ext_type timeout_extend = {
- .len = sizeof(struct nf_conn_timeout),
- .align = __alignof__(struct nf_conn_timeout),
- .id = NF_CT_EXT_TIMEOUT,
- };
- int nf_conntrack_timeout_init(void)
- {
- int ret = nf_ct_extend_register(&timeout_extend);
- if (ret < 0)
- pr_err("nf_ct_timeout: Unable to register timeout extension.\n");
- return ret;
- }
- void nf_conntrack_timeout_fini(void)
- {
- nf_ct_extend_unregister(&timeout_extend);
- }
|