All of lore.kernel.org
 help / color / mirror / Atom feed
From: NeilBrown <neilb@suse.de>
To: Andrew Morton <akpm@osdl.org>
Cc: nfs@lists.sourceforge.net, linux-kernel@vger.kernel.org
Subject: [PATCH 010 of 13] knfsd: SUNRPC: add a "generic" function to see if the peer uses a secure port
Date: Fri, 8 Dec 2006 23:02:40 +1100	[thread overview]
Message-ID: <1061208120240.18245@suse.de> (raw)
In-Reply-To: 20061208225655.17970.patches@notabene


From: Chuck Lever <chuck.lever@oracle.com>

The only reason svcsock.c looks at a sockaddr's port is to check whether
the remote peer is connecting from a privileged port.  Refactor this check
to hide processing that is specific to address format.

Signed-off-by: Chuck Lever <chuck.lever@oracle.com>
Cc: Aurelien Charbon <aurelien.charbon@ext.bull.net>
Signed-off-by: Neil Brown <neilb@suse.de>

### Diffstat output
 ./net/sunrpc/svcsock.c |   20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff .prev/net/sunrpc/svcsock.c ./net/sunrpc/svcsock.c
--- .prev/net/sunrpc/svcsock.c	2006-12-08 13:58:10.000000000 +1100
+++ ./net/sunrpc/svcsock.c	2006-12-08 13:58:41.000000000 +1100
@@ -926,6 +926,20 @@ svc_tcp_data_ready(struct sock *sk, int 
 		wake_up_interruptible(sk->sk_sleep);
 }
 
+static inline int svc_port_is_privileged(struct sockaddr *sin)
+{
+	switch (sin->sa_family) {
+	case AF_INET:
+		return ntohs(((struct sockaddr_in *)sin)->sin_port) < 1024;
+#if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
+	case AF_INET6:
+		return ntohs(((struct sockaddr_in6 *)sin)->sin6_port) < 1024;
+#endif
+	default:
+		return 0;
+	}
+}
+
 /*
  * Accept a TCP connection
  */
@@ -972,7 +986,7 @@ svc_tcp_accept(struct svc_sock *svsk)
 	 * hosts here, but when we get encryption, the IP of the host won't
 	 * tell us anything.  For now just warn about unpriv connections.
 	 */
-	if (ntohs(sin.sin_port) >= 1024) {
+	if (!svc_port_is_privileged((struct sockaddr *) &sin)) {
 		dprintk(KERN_WARNING
 			"%s: connect from unprivileged port: %s\n",
 			serv->sv_name,
@@ -1313,7 +1327,6 @@ int
 svc_recv(struct svc_rqst *rqstp, long timeout)
 {
 	struct svc_sock		*svsk = NULL;
-	struct sockaddr_in	*sin = (struct sockaddr_in *) &rqstp->rq_addr;
 	struct svc_serv		*serv = rqstp->rq_server;
 	struct svc_pool		*pool = rqstp->rq_pool;
 	int			len, i;
@@ -1408,7 +1421,8 @@ svc_recv(struct svc_rqst *rqstp, long ti
 	svsk->sk_lastrecv = get_seconds();
 	clear_bit(SK_OLD, &svsk->sk_flags);
 
-	rqstp->rq_secure = ntohs(sin->sin_port) < 1024;
+	rqstp->rq_secure =
+		svc_port_is_privileged((struct sockaddr *) &rqstp->rq_addr);
 	rqstp->rq_chandle.defer = svc_defer;
 
 	if (serv->sv_stats)

  parent reply	other threads:[~2006-12-08 12:02 UTC|newest]

Thread overview: 26+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2006-12-08 12:01 [PATCH 000 of 13] knfsd: Preparation for IPv6 support NeilBrown
2006-12-08 12:01 ` NeilBrown
2006-12-08 12:01 ` [PATCH 001 of 13] knfsd: SUNRPC: update internal API: separate pmap register and temp sockets NeilBrown
2006-12-08 12:01   ` NeilBrown
2006-12-08 12:01 ` [PATCH 002 of 13] knfsd: SUNRPC: allow creating an RPC service without registering with portmapper NeilBrown
2006-12-08 12:01   ` NeilBrown
2006-12-08 17:00   ` Trond Myklebust
2006-12-08 17:00     ` [NFS] " Trond Myklebust
2006-12-08 18:07     ` Chuck Lever
2006-12-08 12:02 ` [PATCH 003 of 13] knfsd: SUNRPC: Cache remote peer's address in svc_sock NeilBrown
2006-12-08 12:02   ` NeilBrown
2006-12-08 12:02 ` [PATCH 004 of 13] knfsd: SUNRPC: Don't set msg_name and msg_namelen when calling sock_recvmsg NeilBrown
2006-12-08 12:02   ` NeilBrown
2006-12-08 12:02 ` [PATCH 005 of 13] knfsd: SUNRPC: Use sockaddr_storage to store address in svc_deferred_req NeilBrown
2006-12-08 12:02   ` NeilBrown
2006-12-08 12:02 ` [PATCH 006 of 13] knfsd: SUNRPC: Add a function to format the address in an svc_rqst for printing NeilBrown
2006-12-08 12:02   ` NeilBrown
2006-12-08 12:02 ` [PATCH 007 of 13] knfsd: SUNRPC: Provide room in svc_rqst for larger addresses NeilBrown
2006-12-08 12:02   ` NeilBrown
2006-12-08 12:02 ` [PATCH 008 of 13] knfsd: SUNRPC: Make rq_daddr field address-version independent NeilBrown
2006-12-08 12:02   ` NeilBrown
2006-12-08 12:02 ` [PATCH 009 of 13] knfsd: SUNRPC: teach svc_sendto() to deal with IPv6 addresses NeilBrown
2006-12-08 12:02 ` NeilBrown [this message]
2006-12-08 12:02 ` [PATCH 011 of 13] knfsd: SUNRPC: Support IPv6 addresses in svc_tcp_accept NeilBrown
2006-12-08 12:02 ` [PATCH 012 of 13] knfsd: SUNRPC: support IPv6 addresses in RPC server's UDP receive path NeilBrown
2006-12-08 12:02 ` [PATCH 013 of 13] knfsd: SUNRPC: fix up svc_create_socket() to take a sockaddr struct + length NeilBrown

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=1061208120240.18245@suse.de \
    --to=neilb@suse.de \
    --cc=akpm@osdl.org \
    --cc=linux-kernel@vger.kernel.org \
    --cc=nfs@lists.sourceforge.net \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.