Kuniyuki Iwashima 54b92e8419 tcp: Migrate TCP_ESTABLISHED/TCP_SYN_RECV sockets in accept queues.
When we call close() or shutdown() for listening sockets, each child socket
in the accept queue are freed at inet_csk_listen_stop(). If we can get a
new listener by reuseport_migrate_sock() and clone the request by
inet_reqsk_clone(), we try to add it into the new listener's accept queue
by inet_csk_reqsk_queue_add(). If it fails, we have to call __reqsk_free()
to call sock_put() for its listener and free the cloned request.

After putting the full socket into ehash, tcp_v[46]_syn_recv_sock() sets
NULL to ireq_opt/pktopts in struct inet_request_sock, but ipv6_opt can be
non-NULL. So, we have to set NULL to ipv6_opt of the old request to avoid
double free.

Note that we do not update req->rsk_listener and instead clone the req to
migrate because another path may reference the original request. If we
protected it by RCU, we would need to add rcu_read_lock() in many places.

Suggested-by: Martin KaFai Lau <kafai@fb.com>
Signed-off-by: Kuniyuki Iwashima <kuniyu@amazon.co.jp>
Signed-off-by: Daniel Borkmann <daniel@iogearbox.net>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Acked-by: Martin KaFai Lau <kafai@fb.com>
Link: https://lore.kernel.org/netdev/20201209030903.hhow5r53l6fmozjn@kafai-mbp.dhcp.thefacebook.com/
Link: https://lore.kernel.org/bpf/20210612123224.12525-6-kuniyu@amazon.co.jp
2021-06-15 18:01:05 +02:00
..
2021-05-17 15:29:35 -07:00
2021-05-17 15:29:35 -07:00
2020-11-09 17:50:28 -08:00
2020-11-09 17:50:28 -08:00
2021-05-17 15:29:35 -07:00
2021-01-29 20:59:53 -08:00
2021-05-17 15:29:35 -07:00
2021-05-18 13:27:32 -07:00
2020-12-16 11:01:04 -08:00
2020-03-16 18:26:54 -07:00
2021-03-28 17:31:13 -07:00
2020-12-14 16:40:27 -08:00
2020-03-16 18:26:55 -07:00
2021-05-17 15:29:35 -07:00
2021-05-17 15:29:35 -07:00