2 * INET An implementation of the TCP/IP protocol suite for the LINUX
3 * operating system. INET is implemented using the BSD Socket
4 * interface as the means of communication with the user level.
6 * Support for INET connection oriented protocols.
8 * Authors: See the TCP sources
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version
13 * 2 of the License, or(at your option) any later version.
16 #include <linux/module.h>
17 #include <linux/jhash.h>
19 #include <net/inet_connection_sock.h>
20 #include <net/inet_hashtables.h>
21 #include <net/inet_timewait_sock.h>
23 #include <net/route.h>
24 #include <net/tcp_states.h>
29 const char inet_csk_timer_bug_msg
[] = "inet_csk BUG: unknown timer value\n";
30 EXPORT_SYMBOL(inet_csk_timer_bug_msg
);
33 void inet_get_local_port_range(struct net
*net
, int *low
, int *high
)
38 seq
= read_seqbegin(&net
->ipv4
.ip_local_ports
.lock
);
40 *low
= net
->ipv4
.ip_local_ports
.range
[0];
41 *high
= net
->ipv4
.ip_local_ports
.range
[1];
42 } while (read_seqretry(&net
->ipv4
.ip_local_ports
.lock
, seq
));
44 EXPORT_SYMBOL(inet_get_local_port_range
);
46 int inet_csk_bind_conflict(const struct sock
*sk
,
47 const struct inet_bind_bucket
*tb
, bool relax
)
50 int reuse
= sk
->sk_reuse
;
51 int reuseport
= sk
->sk_reuseport
;
52 kuid_t uid
= sock_i_uid((struct sock
*)sk
);
55 * Unlike other sk lookup places we do not check
56 * for sk_net here, since _all_ the socks listed
57 * in tb->owners list belong to the same net - the
58 * one this bucket belongs to.
61 sk_for_each_bound(sk2
, &tb
->owners
) {
63 !inet_v6_ipv6only(sk2
) &&
64 (!sk
->sk_bound_dev_if
||
65 !sk2
->sk_bound_dev_if
||
66 sk
->sk_bound_dev_if
== sk2
->sk_bound_dev_if
)) {
67 if ((!reuse
|| !sk2
->sk_reuse
||
68 sk2
->sk_state
== TCP_LISTEN
) &&
69 (!reuseport
|| !sk2
->sk_reuseport
||
70 (sk2
->sk_state
!= TCP_TIME_WAIT
&&
71 !uid_eq(uid
, sock_i_uid(sk2
))))) {
73 if (!sk2
->sk_rcv_saddr
|| !sk
->sk_rcv_saddr
||
74 sk2
->sk_rcv_saddr
== sk
->sk_rcv_saddr
)
77 if (!relax
&& reuse
&& sk2
->sk_reuse
&&
78 sk2
->sk_state
!= TCP_LISTEN
) {
80 if (!sk2
->sk_rcv_saddr
|| !sk
->sk_rcv_saddr
||
81 sk2
->sk_rcv_saddr
== sk
->sk_rcv_saddr
)
88 EXPORT_SYMBOL_GPL(inet_csk_bind_conflict
);
90 /* Obtain a reference to a local port for the given sock,
91 * if snum is zero it means select any available local port.
93 int inet_csk_get_port(struct sock
*sk
, unsigned short snum
)
95 struct inet_hashinfo
*hashinfo
= sk
->sk_prot
->h
.hashinfo
;
96 struct inet_bind_hashbucket
*head
;
97 struct inet_bind_bucket
*tb
;
98 int ret
, attempts
= 5;
99 struct net
*net
= sock_net(sk
);
100 int smallest_size
= -1, smallest_rover
;
101 kuid_t uid
= sock_i_uid(sk
);
102 int attempt_half
= (sk
->sk_reuse
== SK_CAN_REUSE
) ? 1 : 0;
106 int remaining
, rover
, low
, high
;
109 inet_get_local_port_range(net
, &low
, &high
);
111 int half
= low
+ ((high
- low
) >> 1);
113 if (attempt_half
== 1)
118 remaining
= (high
- low
) + 1;
119 smallest_rover
= rover
= prandom_u32() % remaining
+ low
;
123 if (inet_is_local_reserved_port(net
, rover
))
125 head
= &hashinfo
->bhash
[inet_bhashfn(net
, rover
,
126 hashinfo
->bhash_size
)];
127 spin_lock(&head
->lock
);
128 inet_bind_bucket_for_each(tb
, &head
->chain
)
129 if (net_eq(ib_net(tb
), net
) && tb
->port
== rover
) {
130 if (((tb
->fastreuse
> 0 &&
132 sk
->sk_state
!= TCP_LISTEN
) ||
133 (tb
->fastreuseport
> 0 &&
135 uid_eq(tb
->fastuid
, uid
))) &&
136 (tb
->num_owners
< smallest_size
|| smallest_size
== -1)) {
137 smallest_size
= tb
->num_owners
;
138 smallest_rover
= rover
;
140 if (!inet_csk(sk
)->icsk_af_ops
->bind_conflict(sk
, tb
, false)) {
148 spin_unlock(&head
->lock
);
152 } while (--remaining
> 0);
154 /* Exhausted local port range during search? It is not
155 * possible for us to be holding one of the bind hash
156 * locks if this test triggers, because if 'remaining'
157 * drops to zero, we broke out of the do/while loop at
158 * the top level, not from the 'break;' statement.
161 if (remaining
<= 0) {
162 if (smallest_size
!= -1) {
163 snum
= smallest_rover
;
166 if (attempt_half
== 1) {
167 /* OK we now try the upper half of the range */
173 /* OK, here is the one we will use. HEAD is
174 * non-NULL and we hold it's mutex.
179 head
= &hashinfo
->bhash
[inet_bhashfn(net
, snum
,
180 hashinfo
->bhash_size
)];
181 spin_lock(&head
->lock
);
182 inet_bind_bucket_for_each(tb
, &head
->chain
)
183 if (net_eq(ib_net(tb
), net
) && tb
->port
== snum
)
189 if (!hlist_empty(&tb
->owners
)) {
190 if (sk
->sk_reuse
== SK_FORCE_REUSE
)
193 if (((tb
->fastreuse
> 0 &&
194 sk
->sk_reuse
&& sk
->sk_state
!= TCP_LISTEN
) ||
195 (tb
->fastreuseport
> 0 &&
196 sk
->sk_reuseport
&& uid_eq(tb
->fastuid
, uid
))) &&
197 smallest_size
== -1) {
201 if (inet_csk(sk
)->icsk_af_ops
->bind_conflict(sk
, tb
, true)) {
202 if (((sk
->sk_reuse
&& sk
->sk_state
!= TCP_LISTEN
) ||
203 (tb
->fastreuseport
> 0 &&
204 sk
->sk_reuseport
&& uid_eq(tb
->fastuid
, uid
))) &&
205 smallest_size
!= -1 && --attempts
>= 0) {
206 spin_unlock(&head
->lock
);
216 if (!tb
&& (tb
= inet_bind_bucket_create(hashinfo
->bind_bucket_cachep
,
217 net
, head
, snum
)) == NULL
)
219 if (hlist_empty(&tb
->owners
)) {
220 if (sk
->sk_reuse
&& sk
->sk_state
!= TCP_LISTEN
)
224 if (sk
->sk_reuseport
) {
225 tb
->fastreuseport
= 1;
228 tb
->fastreuseport
= 0;
231 (!sk
->sk_reuse
|| sk
->sk_state
== TCP_LISTEN
))
233 if (tb
->fastreuseport
&&
234 (!sk
->sk_reuseport
|| !uid_eq(tb
->fastuid
, uid
)))
235 tb
->fastreuseport
= 0;
238 if (!inet_csk(sk
)->icsk_bind_hash
)
239 inet_bind_hash(sk
, tb
, snum
);
240 WARN_ON(inet_csk(sk
)->icsk_bind_hash
!= tb
);
244 spin_unlock(&head
->lock
);
249 EXPORT_SYMBOL_GPL(inet_csk_get_port
);
252 * Wait for an incoming connection, avoid race conditions. This must be called
253 * with the socket locked.
255 static int inet_csk_wait_for_connect(struct sock
*sk
, long timeo
)
257 struct inet_connection_sock
*icsk
= inet_csk(sk
);
262 * True wake-one mechanism for incoming connections: only
263 * one process gets woken up, not the 'whole herd'.
264 * Since we do not 'race & poll' for established sockets
265 * anymore, the common case will execute the loop only once.
267 * Subtle issue: "add_wait_queue_exclusive()" will be added
268 * after any current non-exclusive waiters, and we know that
269 * it will always _stay_ after any new non-exclusive waiters
270 * because all non-exclusive waiters are added at the
271 * beginning of the wait-queue. As such, it's ok to "drop"
272 * our exclusiveness temporarily when we get woken up without
273 * having to remove and re-insert us on the wait queue.
276 prepare_to_wait_exclusive(sk_sleep(sk
), &wait
,
279 if (reqsk_queue_empty(&icsk
->icsk_accept_queue
))
280 timeo
= schedule_timeout(timeo
);
281 sched_annotate_sleep();
284 if (!reqsk_queue_empty(&icsk
->icsk_accept_queue
))
287 if (sk
->sk_state
!= TCP_LISTEN
)
289 err
= sock_intr_errno(timeo
);
290 if (signal_pending(current
))
296 finish_wait(sk_sleep(sk
), &wait
);
301 * This will accept the next outstanding connection.
303 struct sock
*inet_csk_accept(struct sock
*sk
, int flags
, int *err
)
305 struct inet_connection_sock
*icsk
= inet_csk(sk
);
306 struct request_sock_queue
*queue
= &icsk
->icsk_accept_queue
;
307 struct request_sock
*req
;
313 /* We need to make sure that this socket is listening,
314 * and that it has something pending.
317 if (sk
->sk_state
!= TCP_LISTEN
)
320 /* Find already established connection */
321 if (reqsk_queue_empty(queue
)) {
322 long timeo
= sock_rcvtimeo(sk
, flags
& O_NONBLOCK
);
324 /* If this is a non blocking socket don't sleep */
329 error
= inet_csk_wait_for_connect(sk
, timeo
);
333 req
= reqsk_queue_remove(queue
);
336 sk_acceptq_removed(sk
);
337 if (sk
->sk_protocol
== IPPROTO_TCP
&&
338 tcp_rsk(req
)->tfo_listener
&&
340 spin_lock_bh(&queue
->fastopenq
->lock
);
341 if (tcp_rsk(req
)->tfo_listener
) {
342 /* We are still waiting for the final ACK from 3WHS
343 * so can't free req now. Instead, we set req->sk to
344 * NULL to signify that the child socket is taken
345 * so reqsk_fastopen_remove() will free the req
346 * when 3WHS finishes (or is aborted).
351 spin_unlock_bh(&queue
->fastopenq
->lock
);
364 EXPORT_SYMBOL(inet_csk_accept
);
367 * Using different timers for retransmit, delayed acks and probes
368 * We may wish use just one timer maintaining a list of expire jiffies
371 void inet_csk_init_xmit_timers(struct sock
*sk
,
372 void (*retransmit_handler
)(unsigned long),
373 void (*delack_handler
)(unsigned long),
374 void (*keepalive_handler
)(unsigned long))
376 struct inet_connection_sock
*icsk
= inet_csk(sk
);
378 setup_timer(&icsk
->icsk_retransmit_timer
, retransmit_handler
,
380 setup_timer(&icsk
->icsk_delack_timer
, delack_handler
,
382 setup_timer(&sk
->sk_timer
, keepalive_handler
, (unsigned long)sk
);
383 icsk
->icsk_pending
= icsk
->icsk_ack
.pending
= 0;
385 EXPORT_SYMBOL(inet_csk_init_xmit_timers
);
387 void inet_csk_clear_xmit_timers(struct sock
*sk
)
389 struct inet_connection_sock
*icsk
= inet_csk(sk
);
391 icsk
->icsk_pending
= icsk
->icsk_ack
.pending
= icsk
->icsk_ack
.blocked
= 0;
393 sk_stop_timer(sk
, &icsk
->icsk_retransmit_timer
);
394 sk_stop_timer(sk
, &icsk
->icsk_delack_timer
);
395 sk_stop_timer(sk
, &sk
->sk_timer
);
397 EXPORT_SYMBOL(inet_csk_clear_xmit_timers
);
399 void inet_csk_delete_keepalive_timer(struct sock
*sk
)
401 sk_stop_timer(sk
, &sk
->sk_timer
);
403 EXPORT_SYMBOL(inet_csk_delete_keepalive_timer
);
405 void inet_csk_reset_keepalive_timer(struct sock
*sk
, unsigned long len
)
407 sk_reset_timer(sk
, &sk
->sk_timer
, jiffies
+ len
);
409 EXPORT_SYMBOL(inet_csk_reset_keepalive_timer
);
411 struct dst_entry
*inet_csk_route_req(struct sock
*sk
,
413 const struct request_sock
*req
)
415 const struct inet_request_sock
*ireq
= inet_rsk(req
);
416 struct net
*net
= read_pnet(&ireq
->ireq_net
);
417 struct ip_options_rcu
*opt
= ireq
->opt
;
420 flowi4_init_output(fl4
, ireq
->ir_iif
, ireq
->ir_mark
,
421 RT_CONN_FLAGS(sk
), RT_SCOPE_UNIVERSE
,
422 sk
->sk_protocol
, inet_sk_flowi_flags(sk
),
423 (opt
&& opt
->opt
.srr
) ? opt
->opt
.faddr
: ireq
->ir_rmt_addr
,
424 ireq
->ir_loc_addr
, ireq
->ir_rmt_port
,
425 htons(ireq
->ir_num
));
426 security_req_classify_flow(req
, flowi4_to_flowi(fl4
));
427 rt
= ip_route_output_flow(net
, fl4
, sk
);
430 if (opt
&& opt
->opt
.is_strictroute
&& rt
->rt_uses_gateway
)
437 IP_INC_STATS_BH(net
, IPSTATS_MIB_OUTNOROUTES
);
440 EXPORT_SYMBOL_GPL(inet_csk_route_req
);
442 struct dst_entry
*inet_csk_route_child_sock(struct sock
*sk
,
444 const struct request_sock
*req
)
446 const struct inet_request_sock
*ireq
= inet_rsk(req
);
447 struct net
*net
= read_pnet(&ireq
->ireq_net
);
448 struct inet_sock
*newinet
= inet_sk(newsk
);
449 struct ip_options_rcu
*opt
;
453 fl4
= &newinet
->cork
.fl
.u
.ip4
;
456 opt
= rcu_dereference(newinet
->inet_opt
);
457 flowi4_init_output(fl4
, ireq
->ir_iif
, ireq
->ir_mark
,
458 RT_CONN_FLAGS(sk
), RT_SCOPE_UNIVERSE
,
459 sk
->sk_protocol
, inet_sk_flowi_flags(sk
),
460 (opt
&& opt
->opt
.srr
) ? opt
->opt
.faddr
: ireq
->ir_rmt_addr
,
461 ireq
->ir_loc_addr
, ireq
->ir_rmt_port
,
462 htons(ireq
->ir_num
));
463 security_req_classify_flow(req
, flowi4_to_flowi(fl4
));
464 rt
= ip_route_output_flow(net
, fl4
, sk
);
467 if (opt
&& opt
->opt
.is_strictroute
&& rt
->rt_uses_gateway
)
476 IP_INC_STATS_BH(net
, IPSTATS_MIB_OUTNOROUTES
);
479 EXPORT_SYMBOL_GPL(inet_csk_route_child_sock
);
481 static inline u32
inet_synq_hash(const __be32 raddr
, const __be16 rport
,
482 const u32 rnd
, const u32 synq_hsize
)
484 return jhash_2words((__force u32
)raddr
, (__force u32
)rport
, rnd
) & (synq_hsize
- 1);
487 #if IS_ENABLED(CONFIG_IPV6)
488 #define AF_INET_FAMILY(fam) ((fam) == AF_INET)
490 #define AF_INET_FAMILY(fam) true
493 /* Note: this is temporary :
494 * req sock will no longer be in listener hash table
496 struct request_sock
*inet_csk_search_req(struct sock
*sk
,
501 struct inet_connection_sock
*icsk
= inet_csk(sk
);
502 struct listen_sock
*lopt
= icsk
->icsk_accept_queue
.listen_opt
;
503 struct request_sock
*req
;
504 u32 hash
= inet_synq_hash(raddr
, rport
, lopt
->hash_rnd
,
505 lopt
->nr_table_entries
);
507 spin_lock(&icsk
->icsk_accept_queue
.syn_wait_lock
);
508 for (req
= lopt
->syn_table
[hash
]; req
!= NULL
; req
= req
->dl_next
) {
509 const struct inet_request_sock
*ireq
= inet_rsk(req
);
511 if (ireq
->ir_rmt_port
== rport
&&
512 ireq
->ir_rmt_addr
== raddr
&&
513 ireq
->ir_loc_addr
== laddr
&&
514 AF_INET_FAMILY(req
->rsk_ops
->family
)) {
515 atomic_inc(&req
->rsk_refcnt
);
520 spin_unlock(&icsk
->icsk_accept_queue
.syn_wait_lock
);
524 EXPORT_SYMBOL_GPL(inet_csk_search_req
);
526 void inet_csk_reqsk_queue_hash_add(struct sock
*sk
, struct request_sock
*req
,
527 unsigned long timeout
)
529 struct inet_connection_sock
*icsk
= inet_csk(sk
);
530 struct listen_sock
*lopt
= icsk
->icsk_accept_queue
.listen_opt
;
531 const u32 h
= inet_synq_hash(inet_rsk(req
)->ir_rmt_addr
,
532 inet_rsk(req
)->ir_rmt_port
,
533 lopt
->hash_rnd
, lopt
->nr_table_entries
);
535 reqsk_queue_hash_req(&icsk
->icsk_accept_queue
, h
, req
, timeout
);
536 inet_csk_reqsk_queue_added(sk
, timeout
);
538 EXPORT_SYMBOL_GPL(inet_csk_reqsk_queue_hash_add
);
540 /* Only thing we need from tcp.h */
541 extern int sysctl_tcp_synack_retries
;
544 /* Decide when to expire the request and when to resend SYN-ACK */
545 static inline void syn_ack_recalc(struct request_sock
*req
, const int thresh
,
546 const int max_retries
,
547 const u8 rskq_defer_accept
,
548 int *expire
, int *resend
)
550 if (!rskq_defer_accept
) {
551 *expire
= req
->num_timeout
>= thresh
;
555 *expire
= req
->num_timeout
>= thresh
&&
556 (!inet_rsk(req
)->acked
|| req
->num_timeout
>= max_retries
);
558 * Do not resend while waiting for data after ACK,
559 * start to resend on end of deferring period to give
560 * last chance for data or ACK to create established socket.
562 *resend
= !inet_rsk(req
)->acked
||
563 req
->num_timeout
>= rskq_defer_accept
- 1;
566 int inet_rtx_syn_ack(struct sock
*parent
, struct request_sock
*req
)
568 int err
= req
->rsk_ops
->rtx_syn_ack(parent
, req
);
574 EXPORT_SYMBOL(inet_rtx_syn_ack
);
576 /* return true if req was found in the syn_table[] */
577 static bool reqsk_queue_unlink(struct request_sock_queue
*queue
,
578 struct request_sock
*req
)
580 struct request_sock
**prev
;
581 struct listen_sock
*lopt
;
584 spin_lock(&queue
->syn_wait_lock
);
585 lopt
= queue
->listen_opt
;
587 for (prev
= &lopt
->syn_table
[req
->rsk_hash
]; *prev
!= NULL
;
588 prev
= &(*prev
)->dl_next
) {
590 *prev
= req
->dl_next
;
596 spin_unlock(&queue
->syn_wait_lock
);
597 if (timer_pending(&req
->rsk_timer
) && del_timer_sync(&req
->rsk_timer
))
602 void inet_csk_reqsk_queue_drop(struct sock
*sk
, struct request_sock
*req
)
604 if (reqsk_queue_unlink(&inet_csk(sk
)->icsk_accept_queue
, req
)) {
605 reqsk_queue_removed(&inet_csk(sk
)->icsk_accept_queue
, req
);
609 EXPORT_SYMBOL(inet_csk_reqsk_queue_drop
);
611 static void reqsk_timer_handler(unsigned long data
)
613 struct request_sock
*req
= (struct request_sock
*)data
;
614 struct sock
*sk_listener
= req
->rsk_listener
;
615 struct inet_connection_sock
*icsk
= inet_csk(sk_listener
);
616 struct request_sock_queue
*queue
= &icsk
->icsk_accept_queue
;
617 struct listen_sock
*lopt
= queue
->listen_opt
;
618 int qlen
, expire
= 0, resend
= 0;
619 int max_retries
, thresh
;
622 if (sk_listener
->sk_state
!= TCP_LISTEN
|| !lopt
) {
627 max_retries
= icsk
->icsk_syn_retries
? : sysctl_tcp_synack_retries
;
628 thresh
= max_retries
;
629 /* Normally all the openreqs are young and become mature
630 * (i.e. converted to established socket) for first timeout.
631 * If synack was not acknowledged for 1 second, it means
632 * one of the following things: synack was lost, ack was lost,
633 * rtt is high or nobody planned to ack (i.e. synflood).
634 * When server is a bit loaded, queue is populated with old
635 * open requests, reducing effective size of queue.
636 * When server is well loaded, queue size reduces to zero
637 * after several minutes of work. It is not synflood,
638 * it is normal operation. The solution is pruning
639 * too old entries overriding normal timeout, when
640 * situation becomes dangerous.
642 * Essentially, we reserve half of room for young
643 * embrions; and abort old ones without pity, if old
644 * ones are about to clog our table.
646 qlen
= listen_sock_qlen(lopt
);
647 if (qlen
>> (lopt
->max_qlen_log
- 1)) {
648 int young
= listen_sock_young(lopt
) << 1;
657 defer_accept
= READ_ONCE(queue
->rskq_defer_accept
);
659 max_retries
= defer_accept
;
660 syn_ack_recalc(req
, thresh
, max_retries
, defer_accept
,
662 req
->rsk_ops
->syn_ack_timeout(req
);
665 !inet_rtx_syn_ack(sk_listener
, req
) ||
666 inet_rsk(req
)->acked
)) {
669 if (req
->num_timeout
++ == 0)
670 atomic_inc(&lopt
->young_dec
);
671 timeo
= min(TCP_TIMEOUT_INIT
<< req
->num_timeout
, TCP_RTO_MAX
);
672 mod_timer_pinned(&req
->rsk_timer
, jiffies
+ timeo
);
675 inet_csk_reqsk_queue_drop(sk_listener
, req
);
679 void reqsk_queue_hash_req(struct request_sock_queue
*queue
,
680 u32 hash
, struct request_sock
*req
,
681 unsigned long timeout
)
683 struct listen_sock
*lopt
= queue
->listen_opt
;
685 req
->num_retrans
= 0;
686 req
->num_timeout
= 0;
689 setup_timer(&req
->rsk_timer
, reqsk_timer_handler
, (unsigned long)req
);
690 mod_timer_pinned(&req
->rsk_timer
, jiffies
+ timeout
);
691 req
->rsk_hash
= hash
;
693 /* before letting lookups find us, make sure all req fields
694 * are committed to memory and refcnt initialized.
697 atomic_set(&req
->rsk_refcnt
, 2);
699 spin_lock(&queue
->syn_wait_lock
);
700 req
->dl_next
= lopt
->syn_table
[hash
];
701 lopt
->syn_table
[hash
] = req
;
702 spin_unlock(&queue
->syn_wait_lock
);
704 EXPORT_SYMBOL(reqsk_queue_hash_req
);
707 * inet_csk_clone_lock - clone an inet socket, and lock its clone
708 * @sk: the socket to clone
710 * @priority: for allocation (%GFP_KERNEL, %GFP_ATOMIC, etc)
712 * Caller must unlock socket even in error path (bh_unlock_sock(newsk))
714 struct sock
*inet_csk_clone_lock(const struct sock
*sk
,
715 const struct request_sock
*req
,
716 const gfp_t priority
)
718 struct sock
*newsk
= sk_clone_lock(sk
, priority
);
721 struct inet_connection_sock
*newicsk
= inet_csk(newsk
);
723 newsk
->sk_state
= TCP_SYN_RECV
;
724 newicsk
->icsk_bind_hash
= NULL
;
726 inet_sk(newsk
)->inet_dport
= inet_rsk(req
)->ir_rmt_port
;
727 inet_sk(newsk
)->inet_num
= inet_rsk(req
)->ir_num
;
728 inet_sk(newsk
)->inet_sport
= htons(inet_rsk(req
)->ir_num
);
729 newsk
->sk_write_space
= sk_stream_write_space
;
731 newsk
->sk_mark
= inet_rsk(req
)->ir_mark
;
732 atomic64_set(&newsk
->sk_cookie
,
733 atomic64_read(&inet_rsk(req
)->ir_cookie
));
735 newicsk
->icsk_retransmits
= 0;
736 newicsk
->icsk_backoff
= 0;
737 newicsk
->icsk_probes_out
= 0;
739 /* Deinitialize accept_queue to trap illegal accesses. */
740 memset(&newicsk
->icsk_accept_queue
, 0, sizeof(newicsk
->icsk_accept_queue
));
742 security_inet_csk_clone(newsk
, req
);
746 EXPORT_SYMBOL_GPL(inet_csk_clone_lock
);
749 * At this point, there should be no process reference to this
750 * socket, and thus no user references at all. Therefore we
751 * can assume the socket waitqueue is inactive and nobody will
752 * try to jump onto it.
754 void inet_csk_destroy_sock(struct sock
*sk
)
756 WARN_ON(sk
->sk_state
!= TCP_CLOSE
);
757 WARN_ON(!sock_flag(sk
, SOCK_DEAD
));
759 /* It cannot be in hash table! */
760 WARN_ON(!sk_unhashed(sk
));
762 /* If it has not 0 inet_sk(sk)->inet_num, it must be bound */
763 WARN_ON(inet_sk(sk
)->inet_num
&& !inet_csk(sk
)->icsk_bind_hash
);
765 sk
->sk_prot
->destroy(sk
);
767 sk_stream_kill_queues(sk
);
769 xfrm_sk_free_policy(sk
);
771 sk_refcnt_debug_release(sk
);
773 percpu_counter_dec(sk
->sk_prot
->orphan_count
);
776 EXPORT_SYMBOL(inet_csk_destroy_sock
);
778 /* This function allows to force a closure of a socket after the call to
779 * tcp/dccp_create_openreq_child().
781 void inet_csk_prepare_forced_close(struct sock
*sk
)
782 __releases(&sk
->sk_lock
.slock
)
784 /* sk_clone_lock locked the socket and set refcnt to 2 */
788 /* The below has to be done to allow calling inet_csk_destroy_sock */
789 sock_set_flag(sk
, SOCK_DEAD
);
790 percpu_counter_inc(sk
->sk_prot
->orphan_count
);
791 inet_sk(sk
)->inet_num
= 0;
793 EXPORT_SYMBOL(inet_csk_prepare_forced_close
);
795 int inet_csk_listen_start(struct sock
*sk
, const int nr_table_entries
)
797 struct inet_sock
*inet
= inet_sk(sk
);
798 struct inet_connection_sock
*icsk
= inet_csk(sk
);
799 int rc
= reqsk_queue_alloc(&icsk
->icsk_accept_queue
, nr_table_entries
);
804 sk
->sk_max_ack_backlog
= 0;
805 sk
->sk_ack_backlog
= 0;
806 inet_csk_delack_init(sk
);
808 /* There is race window here: we announce ourselves listening,
809 * but this transition is still not validated by get_port().
810 * It is OK, because this socket enters to hash table only
811 * after validation is complete.
813 sk
->sk_state
= TCP_LISTEN
;
814 if (!sk
->sk_prot
->get_port(sk
, inet
->inet_num
)) {
815 inet
->inet_sport
= htons(inet
->inet_num
);
818 sk
->sk_prot
->hash(sk
);
823 sk
->sk_state
= TCP_CLOSE
;
824 __reqsk_queue_destroy(&icsk
->icsk_accept_queue
);
827 EXPORT_SYMBOL_GPL(inet_csk_listen_start
);
830 * This routine closes sockets which have been at least partially
831 * opened, but not yet accepted.
833 void inet_csk_listen_stop(struct sock
*sk
)
835 struct inet_connection_sock
*icsk
= inet_csk(sk
);
836 struct request_sock_queue
*queue
= &icsk
->icsk_accept_queue
;
837 struct request_sock
*acc_req
;
838 struct request_sock
*req
;
840 /* make all the listen_opt local to us */
841 acc_req
= reqsk_queue_yank_acceptq(queue
);
843 /* Following specs, it would be better either to send FIN
844 * (and enter FIN-WAIT-1, it is normal close)
845 * or to send active reset (abort).
846 * Certainly, it is pretty dangerous while synflood, but it is
847 * bad justification for our negligence 8)
848 * To be honest, we are not able to make either
849 * of the variants now. --ANK
851 reqsk_queue_destroy(queue
);
853 while ((req
= acc_req
) != NULL
) {
854 struct sock
*child
= req
->sk
;
856 acc_req
= req
->dl_next
;
860 WARN_ON(sock_owned_by_user(child
));
863 sk
->sk_prot
->disconnect(child
, O_NONBLOCK
);
867 percpu_counter_inc(sk
->sk_prot
->orphan_count
);
869 if (sk
->sk_protocol
== IPPROTO_TCP
&& tcp_rsk(req
)->tfo_listener
) {
870 BUG_ON(tcp_sk(child
)->fastopen_rsk
!= req
);
871 BUG_ON(sk
!= req
->rsk_listener
);
873 /* Paranoid, to prevent race condition if
874 * an inbound pkt destined for child is
875 * blocked by sock lock in tcp_v4_rcv().
876 * Also to satisfy an assertion in
877 * tcp_v4_destroy_sock().
879 tcp_sk(child
)->fastopen_rsk
= NULL
;
881 inet_csk_destroy_sock(child
);
883 bh_unlock_sock(child
);
887 sk_acceptq_removed(sk
);
890 if (queue
->fastopenq
) {
891 /* Free all the reqs queued in rskq_rst_head. */
892 spin_lock_bh(&queue
->fastopenq
->lock
);
893 acc_req
= queue
->fastopenq
->rskq_rst_head
;
894 queue
->fastopenq
->rskq_rst_head
= NULL
;
895 spin_unlock_bh(&queue
->fastopenq
->lock
);
896 while ((req
= acc_req
) != NULL
) {
897 acc_req
= req
->dl_next
;
901 WARN_ON(sk
->sk_ack_backlog
);
903 EXPORT_SYMBOL_GPL(inet_csk_listen_stop
);
905 void inet_csk_addr2sockaddr(struct sock
*sk
, struct sockaddr
*uaddr
)
907 struct sockaddr_in
*sin
= (struct sockaddr_in
*)uaddr
;
908 const struct inet_sock
*inet
= inet_sk(sk
);
910 sin
->sin_family
= AF_INET
;
911 sin
->sin_addr
.s_addr
= inet
->inet_daddr
;
912 sin
->sin_port
= inet
->inet_dport
;
914 EXPORT_SYMBOL_GPL(inet_csk_addr2sockaddr
);
917 int inet_csk_compat_getsockopt(struct sock
*sk
, int level
, int optname
,
918 char __user
*optval
, int __user
*optlen
)
920 const struct inet_connection_sock
*icsk
= inet_csk(sk
);
922 if (icsk
->icsk_af_ops
->compat_getsockopt
)
923 return icsk
->icsk_af_ops
->compat_getsockopt(sk
, level
, optname
,
925 return icsk
->icsk_af_ops
->getsockopt(sk
, level
, optname
,
928 EXPORT_SYMBOL_GPL(inet_csk_compat_getsockopt
);
930 int inet_csk_compat_setsockopt(struct sock
*sk
, int level
, int optname
,
931 char __user
*optval
, unsigned int optlen
)
933 const struct inet_connection_sock
*icsk
= inet_csk(sk
);
935 if (icsk
->icsk_af_ops
->compat_setsockopt
)
936 return icsk
->icsk_af_ops
->compat_setsockopt(sk
, level
, optname
,
938 return icsk
->icsk_af_ops
->setsockopt(sk
, level
, optname
,
941 EXPORT_SYMBOL_GPL(inet_csk_compat_setsockopt
);
944 static struct dst_entry
*inet_csk_rebuild_route(struct sock
*sk
, struct flowi
*fl
)
946 const struct inet_sock
*inet
= inet_sk(sk
);
947 const struct ip_options_rcu
*inet_opt
;
948 __be32 daddr
= inet
->inet_daddr
;
953 inet_opt
= rcu_dereference(inet
->inet_opt
);
954 if (inet_opt
&& inet_opt
->opt
.srr
)
955 daddr
= inet_opt
->opt
.faddr
;
957 rt
= ip_route_output_ports(sock_net(sk
), fl4
, sk
, daddr
,
958 inet
->inet_saddr
, inet
->inet_dport
,
959 inet
->inet_sport
, sk
->sk_protocol
,
960 RT_CONN_FLAGS(sk
), sk
->sk_bound_dev_if
);
964 sk_setup_caps(sk
, &rt
->dst
);
970 struct dst_entry
*inet_csk_update_pmtu(struct sock
*sk
, u32 mtu
)
972 struct dst_entry
*dst
= __sk_dst_check(sk
, 0);
973 struct inet_sock
*inet
= inet_sk(sk
);
976 dst
= inet_csk_rebuild_route(sk
, &inet
->cork
.fl
);
980 dst
->ops
->update_pmtu(dst
, sk
, NULL
, mtu
);
982 dst
= __sk_dst_check(sk
, 0);
984 dst
= inet_csk_rebuild_route(sk
, &inet
->cork
.fl
);
988 EXPORT_SYMBOL_GPL(inet_csk_update_pmtu
);