[deliverable/linux.git] / net / netfilter / nf_conntrack_helper.c

/* Helper handling for netfilter. */

/* (C) 1999-2001 Paul `Rusty' Russell
 * (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
 * (C) 2003,2004 USAGI/WIDE Project <http://www.linux-ipv6.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/types.h>
#include <linux/netfilter.h>
#include <linux/module.h>
#include <linux/skbuff.h>
#include <linux/vmalloc.h>
#include <linux/stddef.h>
#include <linux/slab.h>
#include <linux/random.h>
#include <linux/err.h>
#include <linux/kernel.h>
#include <linux/netdevice.h>

#include <net/netfilter/nf_conntrack.h>
#include <net/netfilter/nf_conntrack_l3proto.h>
#include <net/netfilter/nf_conntrack_l4proto.h>
#include <net/netfilter/nf_conntrack_helper.h>
#include <net/netfilter/nf_conntrack_core.h>

static __read_mostly LIST_HEAD(helpers);

struct nf_conntrack_helper *
__nf_ct_helper_find(const struct nf_conntrack_tuple *tuple)
{
	struct nf_conntrack_helper *h;

	list_for_each_entry(h, &helpers, list) {
		if (nf_ct_tuple_mask_cmp(tuple, &h->tuple, &h->mask))
			return h;
	}
	return NULL;
}

struct nf_conntrack_helper *
nf_ct_helper_find_get( const struct nf_conntrack_tuple *tuple)
{
	struct nf_conntrack_helper *helper;

	/* need nf_conntrack_lock to assure that helper exists until
	 * try_module_get() is called */
	read_lock_bh(&nf_conntrack_lock);

	helper = __nf_ct_helper_find(tuple);
	if (helper) {
		/* need to increase module usage count to assure helper will
		 * not go away while the caller is e.g. busy putting a
		 * conntrack in the hash that uses the helper */
		if (!try_module_get(helper->me))
			helper = NULL;
	}

	read_unlock_bh(&nf_conntrack_lock);

	return helper;
}
EXPORT_SYMBOL_GPL(nf_ct_helper_find_get);

void nf_ct_helper_put(struct nf_conntrack_helper *helper)
{
	module_put(helper->me);
}
EXPORT_SYMBOL_GPL(nf_ct_helper_put);

struct nf_conntrack_helper *
__nf_conntrack_helper_find_byname(const char *name)
{
	struct nf_conntrack_helper *h;

	list_for_each_entry(h, &helpers, list) {
		if (!strcmp(h->name, name))
			return h;
	}

	return NULL;
}
EXPORT_SYMBOL_GPL(__nf_conntrack_helper_find_byname);

static inline int unhelp(struct nf_conntrack_tuple_hash *i,
			 const struct nf_conntrack_helper *me)
{
	struct nf_conn *ct = nf_ct_tuplehash_to_ctrack(i);
	struct nf_conn_help *help = nfct_help(ct);

	if (help && help->helper == me) {
		nf_conntrack_event(IPCT_HELPER, ct);
		help->helper = NULL;
	}
	return 0;
}

int nf_conntrack_helper_register(struct nf_conntrack_helper *me)
{
	int size, ret;

	BUG_ON(me->timeout == 0);

	size = ALIGN(sizeof(struct nf_conn), __alignof__(struct nf_conn_help)) +
	       sizeof(struct nf_conn_help);
	ret = nf_conntrack_register_cache(NF_CT_F_HELP, "nf_conntrack:help",
					  size);
	if (ret < 0) {
		printk(KERN_ERR "nf_conntrack_helper_register: Unable to create slab cache for conntracks\n");
		return ret;
	}
	write_lock_bh(&nf_conntrack_lock);
	list_add(&me->list, &helpers);
	write_unlock_bh(&nf_conntrack_lock);

	return 0;
}
EXPORT_SYMBOL_GPL(nf_conntrack_helper_register);

void nf_conntrack_helper_unregister(struct nf_conntrack_helper *me)
{
	unsigned int i;
	struct nf_conntrack_tuple_hash *h;
	struct nf_conntrack_expect *exp, *tmp;

	/* Need write lock here, to delete helper. */
	write_lock_bh(&nf_conntrack_lock);
	list_del(&me->list);

	/* Get rid of expectations */
	list_for_each_entry_safe(exp, tmp, &nf_conntrack_expect_list, list) {
		struct nf_conn_help *help = nfct_help(exp->master);
		if ((help->helper == me || exp->helper == me) &&
		    del_timer(&exp->timeout)) {
			nf_ct_unlink_expect(exp);
			nf_conntrack_expect_put(exp);
		}
	}

	/* Get rid of expecteds, set helpers to NULL. */
	list_for_each_entry(h, &unconfirmed, list)
		unhelp(h, me);
	for (i = 0; i < nf_conntrack_htable_size; i++) {
		list_for_each_entry(h, &nf_conntrack_hash[i], list)
			unhelp(h, me);
	}
	write_unlock_bh(&nf_conntrack_lock);

	/* Someone could be still looking at the helper in a bh. */
	synchronize_net();
}
EXPORT_SYMBOL_GPL(nf_conntrack_helper_unregister);
Commit	Line	Data
7e5d03bb MJ	1	/* Helper handling for netfilter. */
	2
	3	/* (C) 1999-2001 Paul `Rusty' Russell
	4	* (C) 2002-2006 Netfilter Core Team <coreteam@netfilter.org>
	5	* (C) 2003,2004 USAGI/WIDE Project <http://www.linux-ipv6.org>
	6	*
	7	* This program is free software; you can redistribute it and/or modify
	8	* it under the terms of the GNU General Public License version 2 as
	9	* published by the Free Software Foundation.
	10	*/
	11
	12	#include <linux/types.h>
	13	#include <linux/netfilter.h>
	14	#include <linux/module.h>
	15	#include <linux/skbuff.h>
	16	#include <linux/vmalloc.h>
	17	#include <linux/stddef.h>
	18	#include <linux/slab.h>
	19	#include <linux/random.h>
	20	#include <linux/err.h>
	21	#include <linux/kernel.h>
	22	#include <linux/netdevice.h>
	23
7e5d03bb MJ	24	#include <net/netfilter/nf_conntrack.h>
7e5d03bb MJ	25	#include <net/netfilter/nf_conntrack_l3proto.h>
605dcad6	26	#include <net/netfilter/nf_conntrack_l4proto.h>
7e5d03bb MJ	27	#include <net/netfilter/nf_conntrack_helper.h>
	28	#include <net/netfilter/nf_conntrack_core.h>
	29
e2b7606c	30	static __read_mostly LIST_HEAD(helpers);
7e5d03bb MJ	31
	32	struct nf_conntrack_helper *
	33	__nf_ct_helper_find(const struct nf_conntrack_tuple *tuple)
	34	{
	35	struct nf_conntrack_helper *h;
	36
	37	list_for_each_entry(h, &helpers, list) {
	38	if (nf_ct_tuple_mask_cmp(tuple, &h->tuple, &h->mask))
	39	return h;
	40	}
	41	return NULL;
	42	}
	43
	44	struct nf_conntrack_helper *
	45	nf_ct_helper_find_get( const struct nf_conntrack_tuple *tuple)
	46	{
	47	struct nf_conntrack_helper *helper;
	48
	49	/* need nf_conntrack_lock to assure that helper exists until
	50	* try_module_get() is called */
	51	read_lock_bh(&nf_conntrack_lock);
	52
	53	helper = __nf_ct_helper_find(tuple);
	54	if (helper) {
	55	/* need to increase module usage count to assure helper will
	56	* not go away while the caller is e.g. busy putting a
	57	* conntrack in the hash that uses the helper */
	58	if (!try_module_get(helper->me))
	59	helper = NULL;
	60	}
	61
	62	read_unlock_bh(&nf_conntrack_lock);
	63
	64	return helper;
	65	}
13b18339	66	EXPORT_SYMBOL_GPL(nf_ct_helper_find_get);
7e5d03bb MJ	67
	68	void nf_ct_helper_put(struct nf_conntrack_helper *helper)
	69	{
	70	module_put(helper->me);
	71	}
13b18339	72	EXPORT_SYMBOL_GPL(nf_ct_helper_put);
7e5d03bb MJ	73
	74	struct nf_conntrack_helper *
	75	__nf_conntrack_helper_find_byname(const char *name)
	76	{
	77	struct nf_conntrack_helper *h;
	78
	79	list_for_each_entry(h, &helpers, list) {
	80	if (!strcmp(h->name, name))
	81	return h;
	82	}
	83
	84	return NULL;
	85	}
13b18339	86	EXPORT_SYMBOL_GPL(__nf_conntrack_helper_find_byname);
7e5d03bb MJ	87
	88	static inline int unhelp(struct nf_conntrack_tuple_hash *i,
	89	const struct nf_conntrack_helper *me)
	90	{
	91	struct nf_conn *ct = nf_ct_tuplehash_to_ctrack(i);
	92	struct nf_conn_help *help = nfct_help(ct);
	93
	94	if (help && help->helper == me) {
	95	nf_conntrack_event(IPCT_HELPER, ct);
	96	help->helper = NULL;
	97	}
	98	return 0;
	99	}
	100
	101	int nf_conntrack_helper_register(struct nf_conntrack_helper *me)
	102	{
f9aae958 PM	103	int size, ret;
f9aae958 PM	104
7e5d03bb MJ	105	BUG_ON(me->timeout == 0);
7e5d03bb MJ	106
f9aae958 PM	107	size = ALIGN(sizeof(struct nf_conn), __alignof__(struct nf_conn_help)) +
f9aae958 PM	108	sizeof(struct nf_conn_help);
7e5d03bb	109	ret = nf_conntrack_register_cache(NF_CT_F_HELP, "nf_conntrack:help",
f9aae958	110	size);
7e5d03bb MJ	111	if (ret < 0) {
	112	printk(KERN_ERR "nf_conntrack_helper_register: Unable to create slab cache for conntracks\n");
	113	return ret;
	114	}
	115	write_lock_bh(&nf_conntrack_lock);
	116	list_add(&me->list, &helpers);
	117	write_unlock_bh(&nf_conntrack_lock);
	118
	119	return 0;
	120	}
13b18339	121	EXPORT_SYMBOL_GPL(nf_conntrack_helper_register);
7e5d03bb MJ	122
	123	void nf_conntrack_helper_unregister(struct nf_conntrack_helper *me)
	124	{
	125	unsigned int i;
	126	struct nf_conntrack_tuple_hash *h;
	127	struct nf_conntrack_expect exp, tmp;
	128
	129	/* Need write lock here, to delete helper. */
	130	write_lock_bh(&nf_conntrack_lock);
	131	list_del(&me->list);
	132
	133	/* Get rid of expectations */
	134	list_for_each_entry_safe(exp, tmp, &nf_conntrack_expect_list, list) {
	135	struct nf_conn_help *help = nfct_help(exp->master);
9457d851 PM	136	if ((help->helper == me \|\| exp->helper == me) &&
9457d851 PM	137	del_timer(&exp->timeout)) {
7e5d03bb MJ	138	nf_ct_unlink_expect(exp);
	139	nf_conntrack_expect_put(exp);
	140	}
	141	}
	142
	143	/* Get rid of expecteds, set helpers to NULL. */
	144	list_for_each_entry(h, &unconfirmed, list)
	145	unhelp(h, me);
	146	for (i = 0; i < nf_conntrack_htable_size; i++) {
	147	list_for_each_entry(h, &nf_conntrack_hash[i], list)
	148	unhelp(h, me);
	149	}
	150	write_unlock_bh(&nf_conntrack_lock);
	151
	152	/* Someone could be still looking at the helper in a bh. */
	153	synchronize_net();
	154	}
13b18339	155	EXPORT_SYMBOL_GPL(nf_conntrack_helper_unregister);