2 * xfrm6_output.c - Common IPsec encapsulation code for IPv6.
3 * Copyright (C) 2002 USAGI/WIDE Project
4 * Copyright (c) 2004 Herbert Xu <herbert@gondor.apana.org.au>
6 * This program is free software; you can redistribute it and/or
7 * modify it under the terms of the GNU General Public License
8 * as published by the Free Software Foundation; either version
9 * 2 of the License, or (at your option) any later version.
12 #include <linux/if_ether.h>
13 #include <linux/kernel.h>
14 #include <linux/module.h>
15 #include <linux/skbuff.h>
16 #include <linux/icmpv6.h>
17 #include <linux/netfilter_ipv6.h>
22 int xfrm6_find_1stfragopt(struct xfrm_state *x, struct sk_buff *skb,
25 return ip6_find_1stfragopt(skb, prevhdr);
28 EXPORT_SYMBOL(xfrm6_find_1stfragopt);
30 static int xfrm6_tunnel_check_size(struct sk_buff *skb)
33 struct dst_entry *dst = skb->dst;
36 if (mtu < IPV6_MIN_MTU)
41 icmpv6_send(skb, ICMPV6_PKT_TOOBIG, 0, mtu, skb->dev);
48 int xfrm6_extract_output(struct xfrm_state *x, struct sk_buff *skb)
52 err = xfrm6_tunnel_check_size(skb);
56 IP6CB(skb)->nhoff = offsetof(struct ipv6hdr, nexthdr);
57 return xfrm6_extract_header(skb);
60 int xfrm6_prepare_output(struct xfrm_state *x, struct sk_buff *skb)
64 err = x->inner_mode->afinfo->extract_output(x, skb);
68 memset(IP6CB(skb), 0, sizeof(*IP6CB(skb)));
70 skb->protocol = htons(ETH_P_IPV6);
72 return x->outer_mode->output2(x, skb);
74 EXPORT_SYMBOL(xfrm6_prepare_output);
76 static inline int xfrm6_output_one(struct sk_buff *skb)
81 err = xfrm_output(skb);
86 iph->payload_len = htons(skb->len - sizeof(*iph));
88 IP6CB(skb)->flags |= IP6SKB_XFRM_TRANSFORMED;
98 static int xfrm6_output_finish2(struct sk_buff *skb)
102 while (likely((err = xfrm6_output_one(skb)) == 0)) {
105 err = nf_hook(PF_INET6, NF_IP6_LOCAL_OUT, skb, NULL,
106 skb->dst->dev, dst_output);
107 if (unlikely(err != 1))
111 return dst_output(skb);
113 err = nf_hook(PF_INET6, NF_IP6_POST_ROUTING, skb, NULL,
114 skb->dst->dev, xfrm6_output_finish2);
115 if (unlikely(err != 1))
122 static int xfrm6_output_finish(struct sk_buff *skb)
124 struct sk_buff *segs;
126 if (!skb_is_gso(skb))
127 return xfrm6_output_finish2(skb);
129 skb->protocol = htons(ETH_P_IPV6);
130 segs = skb_gso_segment(skb, 0);
132 if (unlikely(IS_ERR(segs)))
133 return PTR_ERR(segs);
136 struct sk_buff *nskb = segs->next;
140 err = xfrm6_output_finish2(segs);
143 while ((segs = nskb)) {
157 int xfrm6_output(struct sk_buff *skb)
159 return NF_HOOK(PF_INET6, NF_IP6_POST_ROUTING, skb, NULL, skb->dst->dev,
160 xfrm6_output_finish);