net/xfrm/xfrm_user.c

1756 static void copy_templates(struct xfrm_policy *xp, struct xfrm_user_tmpl *ut,
1761 	xp->xfrm_nr = nr;
1763 		struct xfrm_tmpl *t = &xp->xfrm_vec[i];
1890 static void copy_from_user_policy(struct xfrm_policy *xp, struct xfrm_userpolicy_info *p)
1892 	xp->priority = p->priority;
1893 	xp->index = p->index;
1894 	memcpy(&xp->selector, &p->sel, sizeof(xp->selector));
1895 	memcpy(&xp->lft, &p->lft, sizeof(xp->lft));
1896 	xp->action = p->action;
1897 	xp->flags = p->flags;
1898 	xp->family = p->sel.family;
1899 	/* XXX xp->share = p->share; */
1902 static void copy_to_user_policy(struct xfrm_policy *xp, struct xfrm_userpolicy_info *p, int dir)
1905 	memcpy(&p->sel, &xp->selector, sizeof(p->sel));
1906 	memcpy(&p->lft, &xp->lft, sizeof(p->lft));
1907 	memcpy(&p->curlft, &xp->curlft, sizeof(p->curlft));
1908 	p->priority = xp->priority;
1909 	p->index = xp->index;
1910 	p->sel.family = xp->family;
1912 	p->action = xp->action;
1913 	p->flags = xp->flags;
1914 	p->share = XFRM_SHARE_ANY; /* XXX xp->share */
1923 	struct xfrm_policy *xp = xfrm_policy_alloc(net, GFP_KERNEL);
1926 	if (!xp) {
1931 	copy_from_user_policy(xp, p);
1933 	err = copy_from_user_policy_type(&xp->type, attrs, extack);
1937 	if (!(err = copy_from_user_tmpl(xp, attrs, p->dir, extack)))
1938 		err = copy_from_user_sec_ctx(xp, attrs);
1942 	xfrm_mark_get(attrs, &xp->mark);
1945 		xp->if_id = nla_get_u32(attrs[XFRMA_IF_ID]);
1949 		err = xfrm_dev_policy_add(net, xp,
1956 	return xp;
1959 	xp->walk.dead = 1;
1960 	xfrm_policy_destroy(xp);
1970 	struct xfrm_policy *xp;
1982 	xp = xfrm_policy_construct(net, p, attrs, &err, extack);
1983 	if (!xp)
1991 	err = xfrm_policy_insert(p->dir, xp, excl);
1992 	xfrm_audit_policy_add(xp, err ? 0 : 1, true);
1995 		xfrm_dev_policy_delete(xp);
1996 		xfrm_dev_policy_free(xp);
1997 		security_xfrm_policy_free(xp->security);
1998 		kfree(xp);
2005 	km_policy_notify(xp, p->dir, &c);
2007 	xfrm_pol_put(xp);
2012 static int copy_to_user_tmpl(struct xfrm_policy *xp, struct sk_buff *skb)
2017 	if (xp->xfrm_nr == 0)
2020 	if (xp->xfrm_nr > XFRM_MAX_DEPTH)
2023 	for (i = 0; i < xp->xfrm_nr; i++) {
2025 		struct xfrm_tmpl *kp = &xp->xfrm_vec[i];
2041 		       sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr, vec);
2052 static inline int copy_to_user_sec_ctx(struct xfrm_policy *xp, struct sk_buff *skb)
2054 	if (xp->security)
2055 		return copy_sec_ctx(xp->security, skb);
2086 static int dump_one_policy(struct xfrm_policy *xp, int dir, int count, void *ptr)
2102 	copy_to_user_policy(xp, p, dir);
2103 	err = copy_to_user_tmpl(xp, skb);
2105 		err = copy_to_user_sec_ctx(xp, skb);
2107 		err = copy_to_user_policy_type(xp->type, skb);
2109 		err = xfrm_mark_put(skb, &xp->mark);
2111 		err = xfrm_if_id_put(skb, xp->if_id);
2112 	if (!err && xp->xdo.dev)
2113 		err = copy_user_offload(&xp->xdo, skb);
2170 					  struct xfrm_policy *xp,
2186 	err = dump_one_policy(xp, dir, 0, &info);
2289 	struct xfrm_policy *xp;
2315 		xp = xfrm_policy_byid(net, &m, if_id, type, p->dir,
2333 		xp = xfrm_policy_bysel_ctx(net, &m, if_id, type, p->dir,
2337 	if (xp == NULL)
2343 		resp_skb = xfrm_policy_netlink(skb, xp, p->dir, nlh->nlmsg_seq);
2351 		xfrm_dev_policy_delete(xp);
2352 		xfrm_audit_policy_delete(xp, err ? 0 : 1, true);
2361 		km_policy_notify(xp, p->dir, &c);
2365 	xfrm_pol_put(xp);
2605 	struct xfrm_policy *xp;
2627 		xp = xfrm_policy_byid(net, &m, if_id, type, p->dir, p->index,
2645 		xp = xfrm_policy_bysel_ctx(net, &m, if_id, type, p->dir,
2649 	if (xp == NULL)
2652 	if (unlikely(xp->walk.dead))
2657 		xfrm_policy_delete(xp, p->dir);
2658 		xfrm_audit_policy_delete(xp, 1, true);
2660 	km_policy_expired(xp, p->dir, up->hard, nlh->nlmsg_pid);
2663 	xfrm_pol_put(xp);
2710 	struct xfrm_policy *xp;
2733 	xp = xfrm_policy_construct(net, &ua->policy, attrs, &err, extack);
2734 	if (!xp)
2740 	xp->mark.m = x->mark.m = mark.m;
2741 	xp->mark.v = x->mark.v = mark.v;
2744 	for (i = 0; i < xp->xfrm_nr; i++, ut++) {
2745 		struct xfrm_tmpl *t = &xp->xfrm_vec[i];
2753 		err = km_query(x, t, xp);
2758 	kfree(xp);
3414 						struct xfrm_policy *xp)
3417 	       + nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr)
3424 			 struct xfrm_tmpl *xt, struct xfrm_policy *xp)
3439 	copy_to_user_policy(xp, &ua->policy, XFRM_POLICY_OUT);
3445 	err = copy_to_user_tmpl(xp, skb);
3449 		err = copy_to_user_policy_type(xp->type, skb);
3451 		err = xfrm_mark_put(skb, &xp->mark);
3453 		err = xfrm_if_id_put(skb, xp->if_id);
3454 	if (!err && xp->xdo.dev)
3455 		err = copy_user_offload(&xp->xdo, skb);
3466 			     struct xfrm_policy *xp)
3472 	skb = nlmsg_new(xfrm_acquire_msgsize(x, xp), GFP_ATOMIC);
3476 	err = build_acquire(skb, x, xt, xp);
3491 	struct xfrm_policy *xp;
3527 	xp = xfrm_policy_alloc(net, GFP_ATOMIC);
3528 	if (xp == NULL) {
3533 	copy_from_user_policy(xp, p);
3534 	xp->type = XFRM_POLICY_TYPE_MAIN;
3535 	copy_templates(xp, ut, nr);
3539 	return xp;
3542 static inline unsigned int xfrm_polexpire_msgsize(struct xfrm_policy *xp)
3545 	       + nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr)
3546 	       + nla_total_size(xfrm_user_sec_ctx_size(xp->security))
3551 static int build_polexpire(struct sk_buff *skb, struct xfrm_policy *xp,
3564 	copy_to_user_policy(xp, &upe->pol, dir);
3565 	err = copy_to_user_tmpl(xp, skb);
3567 		err = copy_to_user_sec_ctx(xp, skb);
3569 		err = copy_to_user_policy_type(xp->type, skb);
3571 		err = xfrm_mark_put(skb, &xp->mark);
3573 		err = xfrm_if_id_put(skb, xp->if_id);
3574 	if (!err && xp->xdo.dev)
3575 		err = copy_user_offload(&xp->xdo, skb);
3586 static int xfrm_exp_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)
3588 	struct net *net = xp_net(xp);
3592 	skb = nlmsg_new(xfrm_polexpire_msgsize(xp), GFP_ATOMIC);
3596 	err = build_polexpire(skb, xp, dir, c);
3602 static int xfrm_notify_policy(struct xfrm_policy *xp, int dir, const struct km_event *c)
3604 	unsigned int len = nla_total_size(sizeof(struct xfrm_user_tmpl) * xp->xfrm_nr);
3605 	struct net *net = xp_net(xp);
3639 			id->index = xp->index;
3641 			memcpy(&id->sel, &xp->selector, sizeof(id->sel));
3651 	copy_to_user_policy(xp, p, dir);
3652 	err = copy_to_user_tmpl(xp, skb);
3654 		err = copy_to_user_policy_type(xp->type, skb);
3656 		err = xfrm_mark_put(skb, &xp->mark);
3658 		err = xfrm_if_id_put(skb, xp->if_id);
3659 	if (!err && xp->xdo.dev)
3660 		err = copy_user_offload(&xp->xdo, skb);
3701 static int xfrm_send_policy_notify(struct xfrm_policy *xp, int dir, const struct km_event *c)
3708 		return xfrm_notify_policy(xp, dir, c);
3712 		return xfrm_exp_policy_notify(xp, dir, c);