.. | .. |
---|
8 | 8 | * |
---|
9 | 9 | */ |
---|
10 | 10 | |
---|
11 | | -#include <net/ip.h> |
---|
12 | 11 | #include <net/xfrm.h> |
---|
13 | | -#include <linux/pfkeyv2.h> |
---|
14 | | -#include <linux/ipsec.h> |
---|
15 | | -#include <linux/netfilter_ipv4.h> |
---|
16 | | -#include <linux/export.h> |
---|
17 | | - |
---|
18 | | -static int xfrm4_init_flags(struct xfrm_state *x) |
---|
19 | | -{ |
---|
20 | | - if (xs_net(x)->ipv4.sysctl_ip_no_pmtu_disc) |
---|
21 | | - x->props.flags |= XFRM_STATE_NOPMTUDISC; |
---|
22 | | - return 0; |
---|
23 | | -} |
---|
24 | | - |
---|
25 | | -static void |
---|
26 | | -__xfrm4_init_tempsel(struct xfrm_selector *sel, const struct flowi *fl) |
---|
27 | | -{ |
---|
28 | | - const struct flowi4 *fl4 = &fl->u.ip4; |
---|
29 | | - |
---|
30 | | - sel->daddr.a4 = fl4->daddr; |
---|
31 | | - sel->saddr.a4 = fl4->saddr; |
---|
32 | | - sel->dport = xfrm_flowi_dport(fl, &fl4->uli); |
---|
33 | | - sel->dport_mask = htons(0xffff); |
---|
34 | | - sel->sport = xfrm_flowi_sport(fl, &fl4->uli); |
---|
35 | | - sel->sport_mask = htons(0xffff); |
---|
36 | | - sel->family = AF_INET; |
---|
37 | | - sel->prefixlen_d = 32; |
---|
38 | | - sel->prefixlen_s = 32; |
---|
39 | | - sel->proto = fl4->flowi4_proto; |
---|
40 | | - sel->ifindex = fl4->flowi4_oif; |
---|
41 | | -} |
---|
42 | | - |
---|
43 | | -static void |
---|
44 | | -xfrm4_init_temprop(struct xfrm_state *x, const struct xfrm_tmpl *tmpl, |
---|
45 | | - const xfrm_address_t *daddr, const xfrm_address_t *saddr) |
---|
46 | | -{ |
---|
47 | | - x->id = tmpl->id; |
---|
48 | | - if (x->id.daddr.a4 == 0) |
---|
49 | | - x->id.daddr.a4 = daddr->a4; |
---|
50 | | - x->props.saddr = tmpl->saddr; |
---|
51 | | - if (x->props.saddr.a4 == 0) |
---|
52 | | - x->props.saddr.a4 = saddr->a4; |
---|
53 | | - x->props.mode = tmpl->mode; |
---|
54 | | - x->props.reqid = tmpl->reqid; |
---|
55 | | - x->props.family = AF_INET; |
---|
56 | | -} |
---|
57 | | - |
---|
58 | | -int xfrm4_extract_header(struct sk_buff *skb) |
---|
59 | | -{ |
---|
60 | | - const struct iphdr *iph = ip_hdr(skb); |
---|
61 | | - |
---|
62 | | - XFRM_MODE_SKB_CB(skb)->ihl = sizeof(*iph); |
---|
63 | | - XFRM_MODE_SKB_CB(skb)->id = iph->id; |
---|
64 | | - XFRM_MODE_SKB_CB(skb)->frag_off = iph->frag_off; |
---|
65 | | - XFRM_MODE_SKB_CB(skb)->tos = iph->tos; |
---|
66 | | - XFRM_MODE_SKB_CB(skb)->ttl = iph->ttl; |
---|
67 | | - XFRM_MODE_SKB_CB(skb)->optlen = iph->ihl * 4 - sizeof(*iph); |
---|
68 | | - memset(XFRM_MODE_SKB_CB(skb)->flow_lbl, 0, |
---|
69 | | - sizeof(XFRM_MODE_SKB_CB(skb)->flow_lbl)); |
---|
70 | | - |
---|
71 | | - return 0; |
---|
72 | | -} |
---|
73 | 12 | |
---|
74 | 13 | static struct xfrm_state_afinfo xfrm4_state_afinfo = { |
---|
75 | 14 | .family = AF_INET, |
---|
76 | 15 | .proto = IPPROTO_IPIP, |
---|
77 | | - .eth_proto = htons(ETH_P_IP), |
---|
78 | | - .owner = THIS_MODULE, |
---|
79 | | - .init_flags = xfrm4_init_flags, |
---|
80 | | - .init_tempsel = __xfrm4_init_tempsel, |
---|
81 | | - .init_temprop = xfrm4_init_temprop, |
---|
82 | 16 | .output = xfrm4_output, |
---|
83 | | - .output_finish = xfrm4_output_finish, |
---|
84 | | - .extract_input = xfrm4_extract_input, |
---|
85 | | - .extract_output = xfrm4_extract_output, |
---|
86 | 17 | .transport_finish = xfrm4_transport_finish, |
---|
87 | 18 | .local_error = xfrm4_local_error, |
---|
88 | 19 | }; |
---|