mirror of
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
synced 2024-09-06 19:07:52 +00:00
ipv4: more compliant RFC 3168 support
Commit 6623e3b24a
(ipv4: IP defragmentation must be ECN aware) was an
attempt to not lose "Congestion Experienced" (CE) indications when
performing datagram defragmentation.
Stefanos Harhalakis raised the point that RFC 3168 requirements were not
completely met by this commit.
In particular, we MUST detect invalid combinations and eventually drop
illegal frames.
Reported-by: Stefanos Harhalakis <v13@v13.gr>
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
parent
485bf569ba
commit
5173cc0577
1 changed files with 38 additions and 22 deletions
|
@ -77,22 +77,42 @@ struct ipq {
|
||||||
struct inet_peer *peer;
|
struct inet_peer *peer;
|
||||||
};
|
};
|
||||||
|
|
||||||
#define IPFRAG_ECN_CLEAR 0x01 /* one frag had INET_ECN_NOT_ECT */
|
/* RFC 3168 support :
|
||||||
#define IPFRAG_ECN_SET_CE 0x04 /* one frag had INET_ECN_CE */
|
* We want to check ECN values of all fragments, do detect invalid combinations.
|
||||||
|
* In ipq->ecn, we store the OR value of each ip4_frag_ecn() fragment value.
|
||||||
|
*/
|
||||||
|
enum {
|
||||||
|
IPFRAG_ECN_NOT_ECT = 0x01, /* one frag had ECN_NOT_ECT */
|
||||||
|
IPFRAG_ECN_ECT_1 = 0x02, /* one frag had ECN_ECT_1 */
|
||||||
|
IPFRAG_ECN_ECT_0 = 0x04, /* one frag had ECN_ECT_0 */
|
||||||
|
IPFRAG_ECN_CE = 0x08, /* one frag had ECN_CE */
|
||||||
|
};
|
||||||
|
|
||||||
static inline u8 ip4_frag_ecn(u8 tos)
|
static inline u8 ip4_frag_ecn(u8 tos)
|
||||||
{
|
{
|
||||||
tos = (tos & INET_ECN_MASK) + 1;
|
return 1 << (tos & INET_ECN_MASK);
|
||||||
/*
|
|
||||||
* After the last operation we have (in binary):
|
|
||||||
* INET_ECN_NOT_ECT => 001
|
|
||||||
* INET_ECN_ECT_1 => 010
|
|
||||||
* INET_ECN_ECT_0 => 011
|
|
||||||
* INET_ECN_CE => 100
|
|
||||||
*/
|
|
||||||
return (tos & 2) ? 0 : tos;
|
|
||||||
}
|
}
|
||||||
|
|
||||||
|
/* Given the OR values of all fragments, apply RFC 3168 5.3 requirements
|
||||||
|
* Value : 0xff if frame should be dropped.
|
||||||
|
* 0 or INET_ECN_CE value, to be ORed in to final iph->tos field
|
||||||
|
*/
|
||||||
|
static const u8 ip4_frag_ecn_table[16] = {
|
||||||
|
/* at least one fragment had CE, and others ECT_0 or ECT_1 */
|
||||||
|
[IPFRAG_ECN_CE | IPFRAG_ECN_ECT_0] = INET_ECN_CE,
|
||||||
|
[IPFRAG_ECN_CE | IPFRAG_ECN_ECT_1] = INET_ECN_CE,
|
||||||
|
[IPFRAG_ECN_CE | IPFRAG_ECN_ECT_0 | IPFRAG_ECN_ECT_1] = INET_ECN_CE,
|
||||||
|
|
||||||
|
/* invalid combinations : drop frame */
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_CE] = 0xff,
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_ECT_0] = 0xff,
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_ECT_1] = 0xff,
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_ECT_0 | IPFRAG_ECN_ECT_1] = 0xff,
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_CE | IPFRAG_ECN_ECT_0] = 0xff,
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_CE | IPFRAG_ECN_ECT_1] = 0xff,
|
||||||
|
[IPFRAG_ECN_NOT_ECT | IPFRAG_ECN_CE | IPFRAG_ECN_ECT_0 | IPFRAG_ECN_ECT_1] = 0xff,
|
||||||
|
};
|
||||||
|
|
||||||
static struct inet_frags ip4_frags;
|
static struct inet_frags ip4_frags;
|
||||||
|
|
||||||
int ip_frag_nqueues(struct net *net)
|
int ip_frag_nqueues(struct net *net)
|
||||||
|
@ -524,9 +544,15 @@ static int ip_frag_reasm(struct ipq *qp, struct sk_buff *prev,
|
||||||
int len;
|
int len;
|
||||||
int ihlen;
|
int ihlen;
|
||||||
int err;
|
int err;
|
||||||
|
u8 ecn;
|
||||||
|
|
||||||
ipq_kill(qp);
|
ipq_kill(qp);
|
||||||
|
|
||||||
|
ecn = ip4_frag_ecn_table[qp->ecn];
|
||||||
|
if (unlikely(ecn == 0xff)) {
|
||||||
|
err = -EINVAL;
|
||||||
|
goto out_fail;
|
||||||
|
}
|
||||||
/* Make the one we just received the head. */
|
/* Make the one we just received the head. */
|
||||||
if (prev) {
|
if (prev) {
|
||||||
head = prev->next;
|
head = prev->next;
|
||||||
|
@ -605,17 +631,7 @@ static int ip_frag_reasm(struct ipq *qp, struct sk_buff *prev,
|
||||||
iph = ip_hdr(head);
|
iph = ip_hdr(head);
|
||||||
iph->frag_off = 0;
|
iph->frag_off = 0;
|
||||||
iph->tot_len = htons(len);
|
iph->tot_len = htons(len);
|
||||||
/* RFC3168 5.3 Fragmentation support
|
iph->tos |= ecn;
|
||||||
* If one fragment had INET_ECN_NOT_ECT,
|
|
||||||
* reassembled frame also has INET_ECN_NOT_ECT
|
|
||||||
* Elif one fragment had INET_ECN_CE
|
|
||||||
* reassembled frame also has INET_ECN_CE
|
|
||||||
*/
|
|
||||||
if (qp->ecn & IPFRAG_ECN_CLEAR)
|
|
||||||
iph->tos &= ~INET_ECN_MASK;
|
|
||||||
else if (qp->ecn & IPFRAG_ECN_SET_CE)
|
|
||||||
iph->tos |= INET_ECN_CE;
|
|
||||||
|
|
||||||
IP_INC_STATS_BH(net, IPSTATS_MIB_REASMOKS);
|
IP_INC_STATS_BH(net, IPSTATS_MIB_REASMOKS);
|
||||||
qp->q.fragments = NULL;
|
qp->q.fragments = NULL;
|
||||||
qp->q.fragments_tail = NULL;
|
qp->q.fragments_tail = NULL;
|
||||||
|
|
Loading…
Reference in a new issue