]>
Commit | Line | Data |
---|---|---|
09c434b8 | 1 | // SPDX-License-Identifier: GPL-2.0-only |
22931d3b PE |
2 | #include <linux/types.h> |
3 | #include <linux/spinlock.h> | |
4 | #include <linux/sock_diag.h> | |
5 | #include <linux/unix_diag.h> | |
6 | #include <linux/skbuff.h> | |
2ea744a5 | 7 | #include <linux/module.h> |
cae9910e | 8 | #include <linux/uidgid.h> |
22931d3b PE |
9 | #include <net/netlink.h> |
10 | #include <net/af_unix.h> | |
11 | #include <net/tcp_states.h> | |
cae9910e | 12 | #include <net/sock.h> |
22931d3b | 13 | |
f5248b48 PE |
14 | static int sk_diag_dump_name(struct sock *sk, struct sk_buff *nlskb) |
15 | { | |
2f7ca90a | 16 | /* might or might not have a hash table lock */ |
ae3b5641 | 17 | struct unix_address *addr = smp_load_acquire(&unix_sk(sk)->addr); |
f5248b48 | 18 | |
4245375d TG |
19 | if (!addr) |
20 | return 0; | |
f5248b48 | 21 | |
755662ce KI |
22 | return nla_put(nlskb, UNIX_DIAG_NAME, |
23 | addr->len - offsetof(struct sockaddr_un, sun_path), | |
4245375d | 24 | addr->name->sun_path); |
f5248b48 PE |
25 | } |
26 | ||
5f7b0569 PE |
27 | static int sk_diag_dump_vfs(struct sock *sk, struct sk_buff *nlskb) |
28 | { | |
40ffe67d | 29 | struct dentry *dentry = unix_sk(sk)->path.dentry; |
5f7b0569 PE |
30 | |
31 | if (dentry) { | |
4245375d | 32 | struct unix_diag_vfs uv = { |
a25b376b | 33 | .udiag_vfs_ino = d_backing_inode(dentry)->i_ino, |
4245375d TG |
34 | .udiag_vfs_dev = dentry->d_sb->s_dev, |
35 | }; | |
36 | ||
37 | return nla_put(nlskb, UNIX_DIAG_VFS, sizeof(uv), &uv); | |
5f7b0569 PE |
38 | } |
39 | ||
40 | return 0; | |
5f7b0569 PE |
41 | } |
42 | ||
ac02be8d PE |
43 | static int sk_diag_dump_peer(struct sock *sk, struct sk_buff *nlskb) |
44 | { | |
45 | struct sock *peer; | |
46 | int ino; | |
47 | ||
48 | peer = unix_peer_get(sk); | |
49 | if (peer) { | |
ac02be8d | 50 | ino = sock_i_ino(peer); |
ac02be8d PE |
51 | sock_put(peer); |
52 | ||
4245375d | 53 | return nla_put_u32(nlskb, UNIX_DIAG_PEER, ino); |
ac02be8d PE |
54 | } |
55 | ||
56 | return 0; | |
ac02be8d PE |
57 | } |
58 | ||
2aac7a2c PE |
59 | static int sk_diag_dump_icons(struct sock *sk, struct sk_buff *nlskb) |
60 | { | |
61 | struct sk_buff *skb; | |
4245375d | 62 | struct nlattr *attr; |
2aac7a2c PE |
63 | u32 *buf; |
64 | int i; | |
65 | ||
0aa3be7b | 66 | if (READ_ONCE(sk->sk_state) == TCP_LISTEN) { |
2aac7a2c | 67 | spin_lock(&sk->sk_receive_queue.lock); |
4245375d TG |
68 | |
69 | attr = nla_reserve(nlskb, UNIX_DIAG_ICONS, | |
70 | sk->sk_receive_queue.qlen * sizeof(u32)); | |
71 | if (!attr) | |
72 | goto errout; | |
73 | ||
74 | buf = nla_data(attr); | |
2aac7a2c | 75 | i = 0; |
c4da4661 KI |
76 | skb_queue_walk(&sk->sk_receive_queue, skb) |
77 | buf[i++] = sock_i_ino(unix_peer(skb->sk)); | |
78 | ||
2aac7a2c PE |
79 | spin_unlock(&sk->sk_receive_queue.lock); |
80 | } | |
81 | ||
82 | return 0; | |
83 | ||
4245375d | 84 | errout: |
2aac7a2c PE |
85 | spin_unlock(&sk->sk_receive_queue.lock); |
86 | return -EMSGSIZE; | |
87 | } | |
88 | ||
cbf39195 PE |
89 | static int sk_diag_show_rqlen(struct sock *sk, struct sk_buff *nlskb) |
90 | { | |
4245375d | 91 | struct unix_diag_rqlen rql; |
c9da99e6 | 92 | |
0aa3be7b | 93 | if (READ_ONCE(sk->sk_state) == TCP_LISTEN) { |
5d915e58 | 94 | rql.udiag_rqueue = skb_queue_len_lockless(&sk->sk_receive_queue); |
4245375d | 95 | rql.udiag_wqueue = sk->sk_max_ack_backlog; |
c9da99e6 | 96 | } else { |
4245375d TG |
97 | rql.udiag_rqueue = (u32) unix_inq_len(sk); |
98 | rql.udiag_wqueue = (u32) unix_outq_len(sk); | |
c9da99e6 PE |
99 | } |
100 | ||
4245375d | 101 | return nla_put(nlskb, UNIX_DIAG_RQLEN, sizeof(rql), &rql); |
cbf39195 PE |
102 | } |
103 | ||
b3abe42e KI |
104 | static int sk_diag_dump_uid(struct sock *sk, struct sk_buff *nlskb, |
105 | struct user_namespace *user_ns) | |
cae9910e | 106 | { |
b3abe42e | 107 | uid_t uid = from_kuid_munged(user_ns, sock_i_uid(sk)); |
cae9910e FG |
108 | return nla_put(nlskb, UNIX_DIAG_UID, sizeof(uid_t), &uid); |
109 | } | |
110 | ||
45a96b9b | 111 | static int sk_diag_fill(struct sock *sk, struct sk_buff *skb, struct unix_diag_req *req, |
b3abe42e KI |
112 | struct user_namespace *user_ns, |
113 | u32 portid, u32 seq, u32 flags, int sk_ino) | |
45a96b9b | 114 | { |
45a96b9b PE |
115 | struct nlmsghdr *nlh; |
116 | struct unix_diag_msg *rep; | |
117 | ||
15e47304 | 118 | nlh = nlmsg_put(skb, portid, seq, SOCK_DIAG_BY_FAMILY, sizeof(*rep), |
4245375d | 119 | flags); |
b61bb019 | 120 | if (!nlh) |
4245375d | 121 | return -EMSGSIZE; |
45a96b9b | 122 | |
b61bb019 | 123 | rep = nlmsg_data(nlh); |
45a96b9b PE |
124 | rep->udiag_family = AF_UNIX; |
125 | rep->udiag_type = sk->sk_type; | |
0aa3be7b | 126 | rep->udiag_state = READ_ONCE(sk->sk_state); |
6865d1e8 | 127 | rep->pad = 0; |
45a96b9b PE |
128 | rep->udiag_ino = sk_ino; |
129 | sock_diag_save_cookie(sk, rep->udiag_cookie); | |
130 | ||
f5248b48 | 131 | if ((req->udiag_show & UDIAG_SHOW_NAME) && |
257b5298 | 132 | sk_diag_dump_name(sk, skb)) |
b61bb019 | 133 | goto out_nlmsg_trim; |
f5248b48 | 134 | |
5f7b0569 | 135 | if ((req->udiag_show & UDIAG_SHOW_VFS) && |
257b5298 | 136 | sk_diag_dump_vfs(sk, skb)) |
b61bb019 | 137 | goto out_nlmsg_trim; |
5f7b0569 | 138 | |
ac02be8d | 139 | if ((req->udiag_show & UDIAG_SHOW_PEER) && |
257b5298 | 140 | sk_diag_dump_peer(sk, skb)) |
b61bb019 | 141 | goto out_nlmsg_trim; |
ac02be8d | 142 | |
2aac7a2c | 143 | if ((req->udiag_show & UDIAG_SHOW_ICONS) && |
257b5298 | 144 | sk_diag_dump_icons(sk, skb)) |
b61bb019 | 145 | goto out_nlmsg_trim; |
2aac7a2c | 146 | |
cbf39195 | 147 | if ((req->udiag_show & UDIAG_SHOW_RQLEN) && |
257b5298 | 148 | sk_diag_show_rqlen(sk, skb)) |
b61bb019 | 149 | goto out_nlmsg_trim; |
257b5298 PE |
150 | |
151 | if ((req->udiag_show & UDIAG_SHOW_MEMINFO) && | |
152 | sock_diag_put_meminfo(sk, skb, UNIX_DIAG_MEMINFO)) | |
b61bb019 | 153 | goto out_nlmsg_trim; |
cbf39195 | 154 | |
efaf24e3 | 155 | if (nla_put_u8(skb, UNIX_DIAG_SHUTDOWN, READ_ONCE(sk->sk_shutdown))) |
e4e541a8 PE |
156 | goto out_nlmsg_trim; |
157 | ||
cae9910e | 158 | if ((req->udiag_show & UDIAG_SHOW_UID) && |
b3abe42e | 159 | sk_diag_dump_uid(sk, skb, user_ns)) |
cae9910e FG |
160 | goto out_nlmsg_trim; |
161 | ||
053c095a JB |
162 | nlmsg_end(skb, nlh); |
163 | return 0; | |
45a96b9b | 164 | |
b61bb019 | 165 | out_nlmsg_trim: |
4245375d | 166 | nlmsg_cancel(skb, nlh); |
45a96b9b PE |
167 | return -EMSGSIZE; |
168 | } | |
169 | ||
22931d3b PE |
170 | static int unix_diag_dump(struct sk_buff *skb, struct netlink_callback *cb) |
171 | { | |
51d7cccf | 172 | struct net *net = sock_net(skb->sk); |
79b05bea KI |
173 | int num, s_num, slot, s_slot; |
174 | struct unix_diag_req *req; | |
45a96b9b | 175 | |
b61bb019 | 176 | req = nlmsg_data(cb->nlh); |
45a96b9b PE |
177 | |
178 | s_slot = cb->args[0]; | |
179 | num = s_num = cb->args[1]; | |
180 | ||
f302d180 | 181 | for (slot = s_slot; slot < UNIX_HASH_SIZE; s_num = 0, slot++) { |
45a96b9b | 182 | struct sock *sk; |
45a96b9b PE |
183 | |
184 | num = 0; | |
79b05bea | 185 | spin_lock(&net->unx.table.locks[slot]); |
cf2f225e | 186 | sk_for_each(sk, &net->unx.table.buckets[slot]) { |
b380b181 KI |
187 | int sk_ino; |
188 | ||
45a96b9b PE |
189 | if (num < s_num) |
190 | goto next; | |
b380b181 | 191 | |
0aa3be7b | 192 | if (!(req->udiag_states & (1 << READ_ONCE(sk->sk_state)))) |
45a96b9b | 193 | goto next; |
b380b181 KI |
194 | |
195 | sk_ino = sock_i_ino(sk); | |
196 | if (!sk_ino) | |
197 | goto next; | |
198 | ||
199 | if (sk_diag_fill(sk, skb, req, sk_user_ns(skb->sk), | |
15e47304 | 200 | NETLINK_CB(cb->skb).portid, |
257b5298 | 201 | cb->nlh->nlmsg_seq, |
b380b181 | 202 | NLM_F_MULTI, sk_ino) < 0) { |
79b05bea | 203 | spin_unlock(&net->unx.table.locks[slot]); |
45a96b9b | 204 | goto done; |
afd20b92 | 205 | } |
45a96b9b PE |
206 | next: |
207 | num++; | |
208 | } | |
79b05bea | 209 | spin_unlock(&net->unx.table.locks[slot]); |
45a96b9b PE |
210 | } |
211 | done: | |
45a96b9b PE |
212 | cb->args[0] = slot; |
213 | cb->args[1] = num; | |
214 | ||
215 | return skb->len; | |
22931d3b PE |
216 | } |
217 | ||
79b05bea | 218 | static struct sock *unix_lookup_by_ino(struct net *net, unsigned int ino) |
5d3cae8b | 219 | { |
5d3cae8b | 220 | struct sock *sk; |
afd20b92 | 221 | int i; |
5d3cae8b | 222 | |
f302d180 | 223 | for (i = 0; i < UNIX_HASH_SIZE; i++) { |
79b05bea | 224 | spin_lock(&net->unx.table.locks[i]); |
cf2f225e | 225 | sk_for_each(sk, &net->unx.table.buckets[i]) { |
5d3cae8b PE |
226 | if (ino == sock_i_ino(sk)) { |
227 | sock_hold(sk); | |
79b05bea | 228 | spin_unlock(&net->unx.table.locks[i]); |
5d3cae8b PE |
229 | return sk; |
230 | } | |
cf2f225e | 231 | } |
79b05bea | 232 | spin_unlock(&net->unx.table.locks[i]); |
5d3cae8b | 233 | } |
5d3cae8b PE |
234 | return NULL; |
235 | } | |
236 | ||
22931d3b PE |
237 | static int unix_diag_get_exact(struct sk_buff *in_skb, |
238 | const struct nlmsghdr *nlh, | |
239 | struct unix_diag_req *req) | |
240 | { | |
51d7cccf | 241 | struct net *net = sock_net(in_skb->sk); |
79b05bea KI |
242 | unsigned int extra_len; |
243 | struct sk_buff *rep; | |
244 | struct sock *sk; | |
245 | int err; | |
5d3cae8b | 246 | |
79b05bea | 247 | err = -EINVAL; |
5d3cae8b PE |
248 | if (req->udiag_ino == 0) |
249 | goto out_nosk; | |
250 | ||
79b05bea | 251 | sk = unix_lookup_by_ino(net, req->udiag_ino); |
5d3cae8b PE |
252 | err = -ENOENT; |
253 | if (sk == NULL) | |
254 | goto out_nosk; | |
255 | ||
256 | err = sock_diag_check_cookie(sk, req->udiag_cookie); | |
257 | if (err) | |
258 | goto out; | |
259 | ||
260 | extra_len = 256; | |
261 | again: | |
262 | err = -ENOMEM; | |
4245375d | 263 | rep = nlmsg_new(sizeof(struct unix_diag_msg) + extra_len, GFP_KERNEL); |
5d3cae8b PE |
264 | if (!rep) |
265 | goto out; | |
266 | ||
b3abe42e KI |
267 | err = sk_diag_fill(sk, rep, req, sk_user_ns(NETLINK_CB(in_skb).sk), |
268 | NETLINK_CB(in_skb).portid, | |
5d3cae8b PE |
269 | nlh->nlmsg_seq, 0, req->udiag_ino); |
270 | if (err < 0) { | |
4245375d | 271 | nlmsg_free(rep); |
5d3cae8b PE |
272 | extra_len += 256; |
273 | if (extra_len >= PAGE_SIZE) | |
274 | goto out; | |
275 | ||
276 | goto again; | |
277 | } | |
01757f53 YD |
278 | err = nlmsg_unicast(net->diag_nlsk, rep, NETLINK_CB(in_skb).portid); |
279 | ||
5d3cae8b PE |
280 | out: |
281 | if (sk) | |
282 | sock_put(sk); | |
283 | out_nosk: | |
284 | return err; | |
22931d3b PE |
285 | } |
286 | ||
287 | static int unix_diag_handler_dump(struct sk_buff *skb, struct nlmsghdr *h) | |
288 | { | |
289 | int hdrlen = sizeof(struct unix_diag_req); | |
290 | ||
291 | if (nlmsg_len(h) < hdrlen) | |
292 | return -EINVAL; | |
293 | ||
80d326fa PNA |
294 | if (h->nlmsg_flags & NLM_F_DUMP) { |
295 | struct netlink_dump_control c = { | |
296 | .dump = unix_diag_dump, | |
297 | }; | |
340c3d33 | 298 | return netlink_dump_start(sock_net(skb->sk)->diag_nlsk, skb, h, &c); |
80d326fa | 299 | } else |
b61bb019 | 300 | return unix_diag_get_exact(skb, h, nlmsg_data(h)); |
22931d3b PE |
301 | } |
302 | ||
8dcf01fc | 303 | static const struct sock_diag_handler unix_diag_handler = { |
114b4bb1 | 304 | .owner = THIS_MODULE, |
22931d3b PE |
305 | .family = AF_UNIX, |
306 | .dump = unix_diag_handler_dump, | |
307 | }; | |
308 | ||
309 | static int __init unix_diag_init(void) | |
310 | { | |
311 | return sock_diag_register(&unix_diag_handler); | |
312 | } | |
313 | ||
314 | static void __exit unix_diag_exit(void) | |
315 | { | |
316 | sock_diag_unregister(&unix_diag_handler); | |
317 | } | |
318 | ||
319 | module_init(unix_diag_init); | |
320 | module_exit(unix_diag_exit); | |
321 | MODULE_LICENSE("GPL"); | |
938dbead | 322 | MODULE_DESCRIPTION("UNIX socket monitoring via SOCK_DIAG"); |
22931d3b | 323 | MODULE_ALIAS_NET_PF_PROTO_TYPE(PF_NETLINK, NETLINK_SOCK_DIAG, 1 /* AF_LOCAL */); |