l2tp: add tunnel/session get_next helpers

l2tp management APIs and procfs/debugfs iterate over l2tp tunnel and
session lists. Since these lists are now implemented using IDR, we can
use IDR get_next APIs to iterate them. Add tunnel/session get_next
functions to do so.

The session get_next functions get the next session in a given tunnel
and need to account for l2tpv2 and l2tpv3 differences:

 * l2tpv2 sessions are keyed by tunnel ID / session ID. Iteration for
   a given tunnel ID, TID, can therefore start with a key given by
   TID/0 and finish when the next entry's tunnel ID is not TID. This
   is possible only because the tunnel ID part of the key is the upper
   16 bits and the session ID part the lower 16 bits; when idr_next
   increments the key value, it therefore finds the next sessions of
   the current tunnel before those of the next tunnel. Entries with
   session ID 0 are always skipped because they are used internally by
   pppol2tp.

 * l2tpv3 sessions are keyed by session ID. Iteration starts at the
   first IDR entry and skips entries where the tunnel does not
   match. Iteration must also consider session ID collisions and walk
   the list of colliding sessions (if any) for one which matches the
   supplied tunnel.

Signed-off-by: James Chapman <jchapman@katalix.com>
Signed-off-by: Tom Parkin <tparkin@katalix.com>
Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
James Chapman 2024-08-07 07:54:48 +01:00 committed by David S. Miller
parent b0a8deda06
commit aa92c1cec9
2 changed files with 129 additions and 0 deletions

View File

@ -262,6 +262,28 @@ struct l2tp_tunnel *l2tp_tunnel_get_nth(const struct net *net, int nth)
}
EXPORT_SYMBOL_GPL(l2tp_tunnel_get_nth);
struct l2tp_tunnel *l2tp_tunnel_get_next(const struct net *net, unsigned long *key)
{
struct l2tp_net *pn = l2tp_pernet(net);
struct l2tp_tunnel *tunnel = NULL;
rcu_read_lock_bh();
again:
tunnel = idr_get_next_ul(&pn->l2tp_tunnel_idr, key);
if (tunnel) {
if (refcount_inc_not_zero(&tunnel->ref_count)) {
rcu_read_unlock_bh();
return tunnel;
}
(*key)++;
goto again;
}
rcu_read_unlock_bh();
return NULL;
}
EXPORT_SYMBOL_GPL(l2tp_tunnel_get_next);
struct l2tp_session *l2tp_v3_session_get(const struct net *net, struct sock *sk, u32 session_id)
{
const struct l2tp_net *pn = l2tp_pernet(net);
@ -352,6 +374,110 @@ struct l2tp_session *l2tp_session_get_nth(struct l2tp_tunnel *tunnel, int nth)
}
EXPORT_SYMBOL_GPL(l2tp_session_get_nth);
static struct l2tp_session *l2tp_v2_session_get_next(const struct net *net,
u16 tid,
unsigned long *key)
{
struct l2tp_net *pn = l2tp_pernet(net);
struct l2tp_session *session = NULL;
/* Start searching within the range of the tid */
if (*key == 0)
*key = l2tp_v2_session_key(tid, 0);
rcu_read_lock_bh();
again:
session = idr_get_next_ul(&pn->l2tp_v2_session_idr, key);
if (session) {
struct l2tp_tunnel *tunnel = READ_ONCE(session->tunnel);
/* ignore sessions with id 0 as they are internal for pppol2tp */
if (session->session_id == 0) {
(*key)++;
goto again;
}
if (tunnel && tunnel->tunnel_id == tid &&
refcount_inc_not_zero(&session->ref_count)) {
rcu_read_unlock_bh();
return session;
}
(*key)++;
if (tunnel->tunnel_id == tid)
goto again;
}
rcu_read_unlock_bh();
return NULL;
}
static struct l2tp_session *l2tp_v3_session_get_next(const struct net *net,
u32 tid, struct sock *sk,
unsigned long *key)
{
struct l2tp_net *pn = l2tp_pernet(net);
struct l2tp_session *session = NULL;
rcu_read_lock_bh();
again:
session = idr_get_next_ul(&pn->l2tp_v3_session_idr, key);
if (session && !hash_hashed(&session->hlist)) {
struct l2tp_tunnel *tunnel = READ_ONCE(session->tunnel);
if (tunnel && tunnel->tunnel_id == tid &&
refcount_inc_not_zero(&session->ref_count)) {
rcu_read_unlock_bh();
return session;
}
(*key)++;
goto again;
}
/* If we get here and session is non-NULL, the IDR entry may be one
* where the session_id collides with one in another tunnel. Check
* session_htable for a match. There can only be one session of a given
* ID per tunnel so we can return as soon as a match is found.
*/
if (session && hash_hashed(&session->hlist)) {
unsigned long hkey = l2tp_v3_session_hashkey(sk, session->session_id);
u32 sid = session->session_id;
hash_for_each_possible_rcu(pn->l2tp_v3_session_htable, session,
hlist, hkey) {
struct l2tp_tunnel *tunnel = READ_ONCE(session->tunnel);
if (session->session_id == sid &&
tunnel && tunnel->tunnel_id == tid &&
refcount_inc_not_zero(&session->ref_count)) {
rcu_read_unlock_bh();
return session;
}
}
/* If no match found, the colliding session ID isn't in our
* tunnel so try the next session ID.
*/
(*key)++;
goto again;
}
rcu_read_unlock_bh();
return NULL;
}
struct l2tp_session *l2tp_session_get_next(const struct net *net, struct sock *sk, int pver,
u32 tunnel_id, unsigned long *key)
{
if (pver == L2TP_HDR_VER_2)
return l2tp_v2_session_get_next(net, tunnel_id, key);
else
return l2tp_v3_session_get_next(net, tunnel_id, sk, key);
}
EXPORT_SYMBOL_GPL(l2tp_session_get_next);
/* Lookup a session by interface name.
* This is very inefficient but is only used by management interfaces.
*/

View File

@ -220,12 +220,15 @@ void l2tp_session_dec_refcount(struct l2tp_session *session);
*/
struct l2tp_tunnel *l2tp_tunnel_get(const struct net *net, u32 tunnel_id);
struct l2tp_tunnel *l2tp_tunnel_get_nth(const struct net *net, int nth);
struct l2tp_tunnel *l2tp_tunnel_get_next(const struct net *net, unsigned long *key);
struct l2tp_session *l2tp_v3_session_get(const struct net *net, struct sock *sk, u32 session_id);
struct l2tp_session *l2tp_v2_session_get(const struct net *net, u16 tunnel_id, u16 session_id);
struct l2tp_session *l2tp_session_get(const struct net *net, struct sock *sk, int pver,
u32 tunnel_id, u32 session_id);
struct l2tp_session *l2tp_session_get_nth(struct l2tp_tunnel *tunnel, int nth);
struct l2tp_session *l2tp_session_get_next(const struct net *net, struct sock *sk, int pver,
u32 tunnel_id, unsigned long *key);
struct l2tp_session *l2tp_session_get_by_ifname(const struct net *net,
const char *ifname);