1 // SPDX-License-Identifier: GPL-2.0 1
2 #include <linux/skbuff.h>
3
4 #include "protocol.h"
5
6 /* Syncookies do not work for JOIN requests.
7 *
8 * Unlike MP_CAPABLE, where the ACK cookie con
9 * options to reconstruct the initial syn stat
10 * the token to obtain the mptcp socket nor th
11 * that was used in the cookie SYN/ACK respons
12 *
13 * Keep a small best effort state table to sto
14 * indexed by skb hash.
15 *
16 * A MP_JOIN SYN packet handled by syn cookies
17 * token matches a known mptcp connection that
18 *
19 * There is no timeout handling -- state is on
20 * when the TCP ACK passed the cookie validati
21 */
22
23 struct join_entry {
24 u32 token;
25 u32 remote_nonce;
26 u32 local_nonce;
27 u8 join_id;
28 u8 local_id;
29 u8 backup;
30 u8 valid;
31 };
32
33 #define COOKIE_JOIN_SLOTS 1024
34
35 static struct join_entry join_entries[COOKIE_J
36 static spinlock_t join_entry_locks[COOKIE_JOIN
37
38 static u32 mptcp_join_entry_hash(struct sk_buf
39 {
40 static u32 mptcp_join_hash_secret __re
41 struct tcphdr *th = tcp_hdr(skb);
42 u32 seq, i;
43
44 net_get_random_once(&mptcp_join_hash_s
45 sizeof(mptcp_join_
46
47 if (th->syn)
48 seq = TCP_SKB_CB(skb)->seq;
49 else
50 seq = TCP_SKB_CB(skb)->seq - 1
51
52 i = jhash_3words(seq, net_hash_mix(net
53 (__force __u32)th->so
54 mptcp_join_hash_secre
55
56 return i % ARRAY_SIZE(join_entries);
57 }
58
59 static void mptcp_join_store_state(struct join
60 const struc
61 {
62 entry->token = subflow_req->token;
63 entry->remote_nonce = subflow_req->rem
64 entry->local_nonce = subflow_req->loca
65 entry->backup = subflow_req->backup;
66 entry->join_id = subflow_req->remote_i
67 entry->local_id = subflow_req->local_i
68 entry->valid = 1;
69 }
70
71 void subflow_init_req_cookie_join_save(const s
72 struct
73 {
74 struct net *net = read_pnet(&subflow_r
75 u32 i = mptcp_join_entry_hash(skb, net
76
77 /* No use in waiting if other cpu is a
78 * would overwrite the data that got s
79 */
80 spin_lock_bh(&join_entry_locks[i]);
81 mptcp_join_store_state(&join_entries[i
82 spin_unlock_bh(&join_entry_locks[i]);
83 }
84
85 /* Called for a cookie-ack with MP_JOIN option
86 * Look up the saved state based on skb hash &
87 * in same netns.
88 *
89 * Caller will check msk can still accept anot
90 * present in the cookie ACK mptcp option spac
91 */
92 bool mptcp_token_join_cookie_init_state(struct
93 struct
94 {
95 struct net *net = read_pnet(&subflow_r
96 u32 i = mptcp_join_entry_hash(skb, net
97 struct mptcp_sock *msk;
98 struct join_entry *e;
99
100 e = &join_entries[i];
101
102 spin_lock_bh(&join_entry_locks[i]);
103
104 if (e->valid == 0) {
105 spin_unlock_bh(&join_entry_loc
106 return false;
107 }
108
109 e->valid = 0;
110
111 msk = mptcp_token_get_sock(net, e->tok
112 if (!msk) {
113 spin_unlock_bh(&join_entry_loc
114 return false;
115 }
116
117 subflow_req->remote_nonce = e->remote_
118 subflow_req->local_nonce = e->local_no
119 subflow_req->backup = e->backup;
120 subflow_req->remote_id = e->join_id;
121 subflow_req->token = e->token;
122 subflow_req->msk = msk;
123 spin_unlock_bh(&join_entry_locks[i]);
124 return true;
125 }
126
127 void __init mptcp_join_cookie_init(void)
128 {
129 int i;
130
131 for (i = 0; i < COOKIE_JOIN_SLOTS; i++
132 spin_lock_init(&join_entry_loc
133 }
134
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.