inet_hashtables.c 15 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585
  1. /*
  2. * INET An implementation of the TCP/IP protocol suite for the LINUX
  3. * operating system. INET is implemented using the BSD Socket
  4. * interface as the means of communication with the user level.
  5. *
  6. * Generic INET transport hashtables
  7. *
  8. * Authors: Lotsa people, from code originally in tcp
  9. *
  10. * This program is free software; you can redistribute it and/or
  11. * modify it under the terms of the GNU General Public License
  12. * as published by the Free Software Foundation; either version
  13. * 2 of the License, or (at your option) any later version.
  14. */
  15. #include <linux/module.h>
  16. #include <linux/random.h>
  17. #include <linux/sched.h>
  18. #include <linux/slab.h>
  19. #include <linux/wait.h>
  20. #include <net/inet_connection_sock.h>
  21. #include <net/inet_hashtables.h>
  22. #include <net/secure_seq.h>
  23. #include <net/ip.h>
  24. /*
  25. * Allocate and initialize a new local port bind bucket.
  26. * The bindhash mutex for snum's hash chain must be held here.
  27. */
  28. struct inet_bind_bucket *inet_bind_bucket_create(struct kmem_cache *cachep,
  29. struct net *net,
  30. struct inet_bind_hashbucket *head,
  31. const unsigned short snum)
  32. {
  33. struct inet_bind_bucket *tb = kmem_cache_alloc(cachep, GFP_ATOMIC);
  34. if (tb != NULL) {
  35. write_pnet(&tb->ib_net, hold_net(net));
  36. tb->port = snum;
  37. tb->fastreuse = 0;
  38. tb->num_owners = 0;
  39. INIT_HLIST_HEAD(&tb->owners);
  40. hlist_add_head(&tb->node, &head->chain);
  41. }
  42. return tb;
  43. }
  44. /*
  45. * Caller must hold hashbucket lock for this tb with local BH disabled
  46. */
  47. void inet_bind_bucket_destroy(struct kmem_cache *cachep, struct inet_bind_bucket *tb)
  48. {
  49. if (hlist_empty(&tb->owners)) {
  50. __hlist_del(&tb->node);
  51. release_net(ib_net(tb));
  52. kmem_cache_free(cachep, tb);
  53. }
  54. }
  55. void inet_bind_hash(struct sock *sk, struct inet_bind_bucket *tb,
  56. const unsigned short snum)
  57. {
  58. struct inet_hashinfo *hashinfo = sk->sk_prot->h.hashinfo;
  59. atomic_inc(&hashinfo->bsockets);
  60. inet_sk(sk)->inet_num = snum;
  61. sk_add_bind_node(sk, &tb->owners);
  62. tb->num_owners++;
  63. inet_csk(sk)->icsk_bind_hash = tb;
  64. }
  65. /*
  66. * Get rid of any references to a local port held by the given sock.
  67. */
  68. static void __inet_put_port(struct sock *sk)
  69. {
  70. struct inet_hashinfo *hashinfo = sk->sk_prot->h.hashinfo;
  71. const int bhash = inet_bhashfn(sock_net(sk), inet_sk(sk)->inet_num,
  72. hashinfo->bhash_size);
  73. struct inet_bind_hashbucket *head = &hashinfo->bhash[bhash];
  74. struct inet_bind_bucket *tb;
  75. atomic_dec(&hashinfo->bsockets);
  76. spin_lock(&head->lock);
  77. tb = inet_csk(sk)->icsk_bind_hash;
  78. __sk_del_bind_node(sk);
  79. tb->num_owners--;
  80. inet_csk(sk)->icsk_bind_hash = NULL;
  81. inet_sk(sk)->inet_num = 0;
  82. inet_bind_bucket_destroy(hashinfo->bind_bucket_cachep, tb);
  83. spin_unlock(&head->lock);
  84. }
  85. void inet_put_port(struct sock *sk)
  86. {
  87. local_bh_disable();
  88. __inet_put_port(sk);
  89. local_bh_enable();
  90. }
  91. EXPORT_SYMBOL(inet_put_port);
  92. int __inet_inherit_port(struct sock *sk, struct sock *child)
  93. {
  94. struct inet_hashinfo *table = sk->sk_prot->h.hashinfo;
  95. unsigned short port = inet_sk(child)->inet_num;
  96. const int bhash = inet_bhashfn(sock_net(sk), port,
  97. table->bhash_size);
  98. struct inet_bind_hashbucket *head = &table->bhash[bhash];
  99. struct inet_bind_bucket *tb;
  100. spin_lock(&head->lock);
  101. tb = inet_csk(sk)->icsk_bind_hash;
  102. if (tb->port != port) {
  103. /* NOTE: using tproxy and redirecting skbs to a proxy
  104. * on a different listener port breaks the assumption
  105. * that the listener socket's icsk_bind_hash is the same
  106. * as that of the child socket. We have to look up or
  107. * create a new bind bucket for the child here. */
  108. struct hlist_node *node;
  109. inet_bind_bucket_for_each(tb, node, &head->chain) {
  110. if (net_eq(ib_net(tb), sock_net(sk)) &&
  111. tb->port == port)
  112. break;
  113. }
  114. if (!node) {
  115. tb = inet_bind_bucket_create(table->bind_bucket_cachep,
  116. sock_net(sk), head, port);
  117. if (!tb) {
  118. spin_unlock(&head->lock);
  119. return -ENOMEM;
  120. }
  121. }
  122. }
  123. inet_bind_hash(child, tb, port);
  124. spin_unlock(&head->lock);
  125. return 0;
  126. }
  127. EXPORT_SYMBOL_GPL(__inet_inherit_port);
  128. static inline int compute_score(struct sock *sk, struct net *net,
  129. const unsigned short hnum, const __be32 daddr,
  130. const int dif)
  131. {
  132. int score = -1;
  133. struct inet_sock *inet = inet_sk(sk);
  134. if (net_eq(sock_net(sk), net) && inet->inet_num == hnum &&
  135. !ipv6_only_sock(sk)) {
  136. __be32 rcv_saddr = inet->inet_rcv_saddr;
  137. score = sk->sk_family == PF_INET ? 1 : 0;
  138. if (rcv_saddr) {
  139. if (rcv_saddr != daddr)
  140. return -1;
  141. score += 2;
  142. }
  143. if (sk->sk_bound_dev_if) {
  144. if (sk->sk_bound_dev_if != dif)
  145. return -1;
  146. score += 2;
  147. }
  148. }
  149. return score;
  150. }
  151. /*
  152. * Don't inline this cruft. Here are some nice properties to exploit here. The
  153. * BSD API does not allow a listening sock to specify the remote port nor the
  154. * remote address for the connection. So always assume those are both
  155. * wildcarded during the search since they can never be otherwise.
  156. */
  157. struct sock *__inet_lookup_listener(struct net *net,
  158. struct inet_hashinfo *hashinfo,
  159. const __be32 daddr, const unsigned short hnum,
  160. const int dif)
  161. {
  162. struct sock *sk, *result;
  163. struct hlist_nulls_node *node;
  164. unsigned int hash = inet_lhashfn(net, hnum);
  165. struct inet_listen_hashbucket *ilb = &hashinfo->listening_hash[hash];
  166. int score, hiscore;
  167. rcu_read_lock();
  168. begin:
  169. result = NULL;
  170. hiscore = -1;
  171. sk_nulls_for_each_rcu(sk, node, &ilb->head) {
  172. score = compute_score(sk, net, hnum, daddr, dif);
  173. if (score > hiscore) {
  174. result = sk;
  175. hiscore = score;
  176. }
  177. }
  178. /*
  179. * if the nulls value we got at the end of this lookup is
  180. * not the expected one, we must restart lookup.
  181. * We probably met an item that was moved to another chain.
  182. */
  183. if (get_nulls_value(node) != hash + LISTENING_NULLS_BASE)
  184. goto begin;
  185. if (result) {
  186. if (unlikely(!atomic_inc_not_zero(&result->sk_refcnt)))
  187. result = NULL;
  188. else if (unlikely(compute_score(result, net, hnum, daddr,
  189. dif) < hiscore)) {
  190. sock_put(result);
  191. goto begin;
  192. }
  193. }
  194. rcu_read_unlock();
  195. return result;
  196. }
  197. EXPORT_SYMBOL_GPL(__inet_lookup_listener);
  198. struct sock * __inet_lookup_established(struct net *net,
  199. struct inet_hashinfo *hashinfo,
  200. const __be32 saddr, const __be16 sport,
  201. const __be32 daddr, const u16 hnum,
  202. const int dif)
  203. {
  204. INET_ADDR_COOKIE(acookie, saddr, daddr)
  205. const __portpair ports = INET_COMBINED_PORTS(sport, hnum);
  206. struct sock *sk;
  207. const struct hlist_nulls_node *node;
  208. /* Optimize here for direct hit, only listening connections can
  209. * have wildcards anyways.
  210. */
  211. unsigned int hash = inet_ehashfn(net, daddr, hnum, saddr, sport);
  212. unsigned int slot = hash & hashinfo->ehash_mask;
  213. struct inet_ehash_bucket *head = &hashinfo->ehash[slot];
  214. rcu_read_lock();
  215. begin:
  216. sk_nulls_for_each_rcu(sk, node, &head->chain) {
  217. if (INET_MATCH(sk, net, hash, acookie,
  218. saddr, daddr, ports, dif)) {
  219. if (unlikely(!atomic_inc_not_zero(&sk->sk_refcnt)))
  220. goto begintw;
  221. if (unlikely(!INET_MATCH(sk, net, hash, acookie,
  222. saddr, daddr, ports, dif))) {
  223. sock_put(sk);
  224. goto begin;
  225. }
  226. goto out;
  227. }
  228. }
  229. /*
  230. * if the nulls value we got at the end of this lookup is
  231. * not the expected one, we must restart lookup.
  232. * We probably met an item that was moved to another chain.
  233. */
  234. if (get_nulls_value(node) != slot)
  235. goto begin;
  236. begintw:
  237. /* Must check for a TIME_WAIT'er before going to listener hash. */
  238. sk_nulls_for_each_rcu(sk, node, &head->twchain) {
  239. if (INET_TW_MATCH(sk, net, hash, acookie,
  240. saddr, daddr, ports, dif)) {
  241. if (unlikely(!atomic_inc_not_zero(&sk->sk_refcnt))) {
  242. sk = NULL;
  243. goto out;
  244. }
  245. if (unlikely(!INET_TW_MATCH(sk, net, hash, acookie,
  246. saddr, daddr, ports, dif))) {
  247. sock_put(sk);
  248. goto begintw;
  249. }
  250. goto out;
  251. }
  252. }
  253. /*
  254. * if the nulls value we got at the end of this lookup is
  255. * not the expected one, we must restart lookup.
  256. * We probably met an item that was moved to another chain.
  257. */
  258. if (get_nulls_value(node) != slot)
  259. goto begintw;
  260. sk = NULL;
  261. out:
  262. rcu_read_unlock();
  263. return sk;
  264. }
  265. EXPORT_SYMBOL_GPL(__inet_lookup_established);
  266. /* called with local bh disabled */
  267. static int __inet_check_established(struct inet_timewait_death_row *death_row,
  268. struct sock *sk, __u16 lport,
  269. struct inet_timewait_sock **twp)
  270. {
  271. struct inet_hashinfo *hinfo = death_row->hashinfo;
  272. struct inet_sock *inet = inet_sk(sk);
  273. __be32 daddr = inet->inet_rcv_saddr;
  274. __be32 saddr = inet->inet_daddr;
  275. int dif = sk->sk_bound_dev_if;
  276. INET_ADDR_COOKIE(acookie, saddr, daddr)
  277. const __portpair ports = INET_COMBINED_PORTS(inet->inet_dport, lport);
  278. struct net *net = sock_net(sk);
  279. unsigned int hash = inet_ehashfn(net, daddr, lport,
  280. saddr, inet->inet_dport);
  281. struct inet_ehash_bucket *head = inet_ehash_bucket(hinfo, hash);
  282. spinlock_t *lock = inet_ehash_lockp(hinfo, hash);
  283. struct sock *sk2;
  284. const struct hlist_nulls_node *node;
  285. struct inet_timewait_sock *tw;
  286. int twrefcnt = 0;
  287. spin_lock(lock);
  288. /* Check TIME-WAIT sockets first. */
  289. sk_nulls_for_each(sk2, node, &head->twchain) {
  290. tw = inet_twsk(sk2);
  291. if (INET_TW_MATCH(sk2, net, hash, acookie,
  292. saddr, daddr, ports, dif)) {
  293. if (twsk_unique(sk, sk2, twp))
  294. goto unique;
  295. else
  296. goto not_unique;
  297. }
  298. }
  299. tw = NULL;
  300. /* And established part... */
  301. sk_nulls_for_each(sk2, node, &head->chain) {
  302. if (INET_MATCH(sk2, net, hash, acookie,
  303. saddr, daddr, ports, dif))
  304. goto not_unique;
  305. }
  306. unique:
  307. /* Must record num and sport now. Otherwise we will see
  308. * in hash table socket with a funny identity. */
  309. inet->inet_num = lport;
  310. inet->inet_sport = htons(lport);
  311. sk->sk_hash = hash;
  312. WARN_ON(!sk_unhashed(sk));
  313. __sk_nulls_add_node_rcu(sk, &head->chain);
  314. if (tw) {
  315. twrefcnt = inet_twsk_unhash(tw);
  316. NET_INC_STATS_BH(net, LINUX_MIB_TIMEWAITRECYCLED);
  317. }
  318. spin_unlock(lock);
  319. if (twrefcnt)
  320. inet_twsk_put(tw);
  321. sock_prot_inuse_add(sock_net(sk), sk->sk_prot, 1);
  322. if (twp) {
  323. *twp = tw;
  324. } else if (tw) {
  325. /* Silly. Should hash-dance instead... */
  326. inet_twsk_deschedule(tw, death_row);
  327. inet_twsk_put(tw);
  328. }
  329. return 0;
  330. not_unique:
  331. spin_unlock(lock);
  332. return -EADDRNOTAVAIL;
  333. }
  334. static inline u32 inet_sk_port_offset(const struct sock *sk)
  335. {
  336. const struct inet_sock *inet = inet_sk(sk);
  337. return secure_ipv4_port_ephemeral(inet->inet_rcv_saddr,
  338. inet->inet_daddr,
  339. inet->inet_dport);
  340. }
  341. int __inet_hash_nolisten(struct sock *sk, struct inet_timewait_sock *tw)
  342. {
  343. struct inet_hashinfo *hashinfo = sk->sk_prot->h.hashinfo;
  344. struct hlist_nulls_head *list;
  345. spinlock_t *lock;
  346. struct inet_ehash_bucket *head;
  347. int twrefcnt = 0;
  348. WARN_ON(!sk_unhashed(sk));
  349. sk->sk_hash = inet_sk_ehashfn(sk);
  350. head = inet_ehash_bucket(hashinfo, sk->sk_hash);
  351. list = &head->chain;
  352. lock = inet_ehash_lockp(hashinfo, sk->sk_hash);
  353. spin_lock(lock);
  354. __sk_nulls_add_node_rcu(sk, list);
  355. if (tw) {
  356. WARN_ON(sk->sk_hash != tw->tw_hash);
  357. twrefcnt = inet_twsk_unhash(tw);
  358. }
  359. spin_unlock(lock);
  360. sock_prot_inuse_add(sock_net(sk), sk->sk_prot, 1);
  361. return twrefcnt;
  362. }
  363. EXPORT_SYMBOL_GPL(__inet_hash_nolisten);
  364. static void __inet_hash(struct sock *sk)
  365. {
  366. struct inet_hashinfo *hashinfo = sk->sk_prot->h.hashinfo;
  367. struct inet_listen_hashbucket *ilb;
  368. if (sk->sk_state != TCP_LISTEN) {
  369. __inet_hash_nolisten(sk, NULL);
  370. return;
  371. }
  372. WARN_ON(!sk_unhashed(sk));
  373. ilb = &hashinfo->listening_hash[inet_sk_listen_hashfn(sk)];
  374. spin_lock(&ilb->lock);
  375. __sk_nulls_add_node_rcu(sk, &ilb->head);
  376. sock_prot_inuse_add(sock_net(sk), sk->sk_prot, 1);
  377. spin_unlock(&ilb->lock);
  378. }
  379. void inet_hash(struct sock *sk)
  380. {
  381. if (sk->sk_state != TCP_CLOSE) {
  382. local_bh_disable();
  383. __inet_hash(sk);
  384. local_bh_enable();
  385. }
  386. }
  387. EXPORT_SYMBOL_GPL(inet_hash);
  388. void inet_unhash(struct sock *sk)
  389. {
  390. struct inet_hashinfo *hashinfo = sk->sk_prot->h.hashinfo;
  391. spinlock_t *lock;
  392. int done;
  393. if (sk_unhashed(sk))
  394. return;
  395. if (sk->sk_state == TCP_LISTEN)
  396. lock = &hashinfo->listening_hash[inet_sk_listen_hashfn(sk)].lock;
  397. else
  398. lock = inet_ehash_lockp(hashinfo, sk->sk_hash);
  399. spin_lock_bh(lock);
  400. done =__sk_nulls_del_node_init_rcu(sk);
  401. if (done)
  402. sock_prot_inuse_add(sock_net(sk), sk->sk_prot, -1);
  403. spin_unlock_bh(lock);
  404. }
  405. EXPORT_SYMBOL_GPL(inet_unhash);
  406. int __inet_hash_connect(struct inet_timewait_death_row *death_row,
  407. struct sock *sk, u32 port_offset,
  408. int (*check_established)(struct inet_timewait_death_row *,
  409. struct sock *, __u16, struct inet_timewait_sock **),
  410. int (*hash)(struct sock *sk, struct inet_timewait_sock *twp))
  411. {
  412. struct inet_hashinfo *hinfo = death_row->hashinfo;
  413. const unsigned short snum = inet_sk(sk)->inet_num;
  414. struct inet_bind_hashbucket *head;
  415. struct inet_bind_bucket *tb;
  416. int ret;
  417. struct net *net = sock_net(sk);
  418. int twrefcnt = 1;
  419. if (!snum) {
  420. int i, remaining, low, high, port;
  421. static u32 hint;
  422. u32 offset = hint + port_offset;
  423. struct hlist_node *node;
  424. struct inet_timewait_sock *tw = NULL;
  425. inet_get_local_port_range(&low, &high);
  426. remaining = (high - low) + 1;
  427. local_bh_disable();
  428. for (i = 1; i <= remaining; i++) {
  429. port = low + (i + offset) % remaining;
  430. if (inet_is_reserved_local_port(port))
  431. continue;
  432. head = &hinfo->bhash[inet_bhashfn(net, port,
  433. hinfo->bhash_size)];
  434. spin_lock(&head->lock);
  435. /* Does not bother with rcv_saddr checks,
  436. * because the established check is already
  437. * unique enough.
  438. */
  439. inet_bind_bucket_for_each(tb, node, &head->chain) {
  440. if (net_eq(ib_net(tb), net) &&
  441. tb->port == port) {
  442. if (tb->fastreuse >= 0)
  443. goto next_port;
  444. WARN_ON(hlist_empty(&tb->owners));
  445. if (!check_established(death_row, sk,
  446. port, &tw))
  447. goto ok;
  448. goto next_port;
  449. }
  450. }
  451. tb = inet_bind_bucket_create(hinfo->bind_bucket_cachep,
  452. net, head, port);
  453. if (!tb) {
  454. spin_unlock(&head->lock);
  455. break;
  456. }
  457. tb->fastreuse = -1;
  458. goto ok;
  459. next_port:
  460. spin_unlock(&head->lock);
  461. }
  462. local_bh_enable();
  463. return -EADDRNOTAVAIL;
  464. ok:
  465. hint += i;
  466. /* Head lock still held and bh's disabled */
  467. inet_bind_hash(sk, tb, port);
  468. if (sk_unhashed(sk)) {
  469. inet_sk(sk)->inet_sport = htons(port);
  470. twrefcnt += hash(sk, tw);
  471. }
  472. if (tw)
  473. twrefcnt += inet_twsk_bind_unhash(tw, hinfo);
  474. spin_unlock(&head->lock);
  475. if (tw) {
  476. inet_twsk_deschedule(tw, death_row);
  477. while (twrefcnt) {
  478. twrefcnt--;
  479. inet_twsk_put(tw);
  480. }
  481. }
  482. ret = 0;
  483. goto out;
  484. }
  485. head = &hinfo->bhash[inet_bhashfn(net, snum, hinfo->bhash_size)];
  486. tb = inet_csk(sk)->icsk_bind_hash;
  487. spin_lock_bh(&head->lock);
  488. if (sk_head(&tb->owners) == sk && !sk->sk_bind_node.next) {
  489. hash(sk, NULL);
  490. spin_unlock_bh(&head->lock);
  491. return 0;
  492. } else {
  493. spin_unlock(&head->lock);
  494. /* No definite answer... Walk to established hash table */
  495. ret = check_established(death_row, sk, snum, NULL);
  496. out:
  497. local_bh_enable();
  498. return ret;
  499. }
  500. }
  501. /*
  502. * Bind a port for a connect operation and hash it.
  503. */
  504. int inet_hash_connect(struct inet_timewait_death_row *death_row,
  505. struct sock *sk)
  506. {
  507. return __inet_hash_connect(death_row, sk, inet_sk_port_offset(sk),
  508. __inet_check_established, __inet_hash_nolisten);
  509. }
  510. EXPORT_SYMBOL_GPL(inet_hash_connect);
  511. void inet_hashinfo_init(struct inet_hashinfo *h)
  512. {
  513. int i;
  514. atomic_set(&h->bsockets, 0);
  515. for (i = 0; i < INET_LHTABLE_SIZE; i++) {
  516. spin_lock_init(&h->listening_hash[i].lock);
  517. INIT_HLIST_NULLS_HEAD(&h->listening_hash[i].head,
  518. i + LISTENING_NULLS_BASE);
  519. }
  520. }
  521. EXPORT_SYMBOL_GPL(inet_hashinfo_init);