1 // SPDX-License-Identifier: GPL-2.0-only
2 // Copyright (c) 2020, Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
3 #include <linux/kernel.h>
4 #include <linux/netdevice.h>
5 #include <linux/rtnetlink.h>
6 #include <linux/slab.h>
7 #include <net/ip_tunnels.h>
8
9 #include "br_private.h"
10 #include "br_private_tunnel.h"
11
__vlan_tun_put(struct sk_buff * skb,const struct net_bridge_vlan * v)12 static bool __vlan_tun_put(struct sk_buff *skb, const struct net_bridge_vlan *v)
13 {
14 __be32 tid = tunnel_id_to_key32(v->tinfo.tunnel_id);
15 struct nlattr *nest;
16
17 if (!v->tinfo.tunnel_dst)
18 return true;
19
20 nest = nla_nest_start(skb, BRIDGE_VLANDB_ENTRY_TUNNEL_INFO);
21 if (!nest)
22 return false;
23 if (nla_put_u32(skb, BRIDGE_VLANDB_TINFO_ID, be32_to_cpu(tid))) {
24 nla_nest_cancel(skb, nest);
25 return false;
26 }
27 nla_nest_end(skb, nest);
28
29 return true;
30 }
31
__vlan_tun_can_enter_range(const struct net_bridge_vlan * v_curr,const struct net_bridge_vlan * range_end)32 static bool __vlan_tun_can_enter_range(const struct net_bridge_vlan *v_curr,
33 const struct net_bridge_vlan *range_end)
34 {
35 return (!v_curr->tinfo.tunnel_dst && !range_end->tinfo.tunnel_dst) ||
36 vlan_tunid_inrange(v_curr, range_end);
37 }
38
39 /* check if the options' state of v_curr allow it to enter the range */
br_vlan_opts_eq_range(const struct net_bridge_vlan * v_curr,const struct net_bridge_vlan * range_end)40 bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
41 const struct net_bridge_vlan *range_end)
42 {
43 u8 range_mc_rtr = br_vlan_multicast_router(range_end);
44 u8 curr_mc_rtr = br_vlan_multicast_router(v_curr);
45
46 if (v_curr->state != range_end->state)
47 return false;
48
49 if (!__vlan_tun_can_enter_range(v_curr, range_end))
50 return false;
51
52 if (curr_mc_rtr != range_mc_rtr)
53 return false;
54
55 /* Check user-visible priv_flags that affect output */
56 if ((v_curr->priv_flags ^ range_end->priv_flags) &
57 (BR_VLFLAG_NEIGH_SUPPRESS_ENABLED | BR_VLFLAG_MCAST_ENABLED |
58 BR_VLFLAG_NEIGH_FORWARD_GRAT_ENABLED))
59 return false;
60
61 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
62 if (!br_vlan_is_master(v_curr) &&
63 !br_multicast_port_ctx_vlan_disabled(&v_curr->port_mcast_ctx) &&
64 !br_multicast_port_ctx_options_equal(&v_curr->port_mcast_ctx,
65 &range_end->port_mcast_ctx))
66 return false;
67 #endif
68
69 return true;
70 }
71
br_vlan_opts_fill(struct sk_buff * skb,const struct net_bridge_vlan * v,const struct net_bridge_port * p)72 bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v,
73 const struct net_bridge_port *p)
74 {
75 if (nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_STATE, br_vlan_get_state(v)) ||
76 !__vlan_tun_put(skb, v) ||
77 nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS,
78 !!(v->priv_flags & BR_VLFLAG_NEIGH_SUPPRESS_ENABLED)) ||
79 nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_NEIGH_FORWARD_GRAT,
80 !!(v->priv_flags & BR_VLFLAG_NEIGH_FORWARD_GRAT_ENABLED)))
81 return false;
82
83 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
84 if (nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_MCAST_ROUTER,
85 br_vlan_multicast_router(v)))
86 return false;
87 if (p && !br_multicast_port_ctx_vlan_disabled(&v->port_mcast_ctx) &&
88 (nla_put_u32(skb, BRIDGE_VLANDB_ENTRY_MCAST_N_GROUPS,
89 br_multicast_ngroups_get(&v->port_mcast_ctx)) ||
90 nla_put_u32(skb, BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS,
91 br_multicast_ngroups_get_max(&v->port_mcast_ctx))))
92 return false;
93 #endif
94
95 return true;
96 }
97
br_vlan_opts_nl_size(void)98 size_t br_vlan_opts_nl_size(void)
99 {
100 return nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_STATE */
101 + nla_total_size(0) /* BRIDGE_VLANDB_ENTRY_TUNNEL_INFO */
102 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_TINFO_ID */
103 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
104 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_MCAST_ROUTER */
105 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_ENTRY_MCAST_N_GROUPS */
106 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS */
107 #endif
108 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS */
109 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_NEIGH_FORWARD_GRAT */
110 + 0;
111 }
112
br_vlan_modify_state(struct net_bridge_vlan_group * vg,struct net_bridge_vlan * v,u8 state,bool * changed,struct netlink_ext_ack * extack)113 static int br_vlan_modify_state(struct net_bridge_vlan_group *vg,
114 struct net_bridge_vlan *v,
115 u8 state,
116 bool *changed,
117 struct netlink_ext_ack *extack)
118 {
119 struct net_bridge *br;
120
121 ASSERT_RTNL();
122
123 if (state > BR_STATE_BLOCKING) {
124 NL_SET_ERR_MSG_MOD(extack, "Invalid vlan state");
125 return -EINVAL;
126 }
127
128 if (br_vlan_is_brentry(v))
129 br = v->br;
130 else
131 br = v->port->br;
132
133 if (br->stp_enabled == BR_KERNEL_STP) {
134 NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state when using kernel STP");
135 return -EBUSY;
136 }
137
138 if (br_opt_get(br, BROPT_MST_ENABLED)) {
139 NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state directly when MST is enabled");
140 return -EBUSY;
141 }
142
143 if (v->state == state)
144 return 0;
145
146 if (v->vid == br_get_pvid(vg))
147 br_vlan_set_pvid_state(vg, state);
148
149 br_vlan_set_state(v, state);
150 *changed = true;
151
152 return 0;
153 }
154
155 static const struct nla_policy br_vlandb_tinfo_pol[BRIDGE_VLANDB_TINFO_MAX + 1] = {
156 [BRIDGE_VLANDB_TINFO_ID] = { .type = NLA_U32 },
157 [BRIDGE_VLANDB_TINFO_CMD] = { .type = NLA_U32 },
158 };
159
br_vlan_modify_tunnel(const struct net_bridge_port * p,struct net_bridge_vlan * v,struct nlattr ** tb,bool * changed,struct netlink_ext_ack * extack)160 static int br_vlan_modify_tunnel(const struct net_bridge_port *p,
161 struct net_bridge_vlan *v,
162 struct nlattr **tb,
163 bool *changed,
164 struct netlink_ext_ack *extack)
165 {
166 struct nlattr *tun_tb[BRIDGE_VLANDB_TINFO_MAX + 1], *attr;
167 struct bridge_vlan_info *vinfo;
168 u32 tun_id = 0;
169 int cmd, err;
170
171 if (!p) {
172 NL_SET_ERR_MSG_MOD(extack, "Can't modify tunnel mapping of non-port vlans");
173 return -EINVAL;
174 }
175 if (!test_bit(BR_VLAN_TUNNEL_BIT, &p->flags)) {
176 NL_SET_ERR_MSG_MOD(extack, "Port doesn't have tunnel flag set");
177 return -EINVAL;
178 }
179
180 attr = tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO];
181 err = nla_parse_nested(tun_tb, BRIDGE_VLANDB_TINFO_MAX, attr,
182 br_vlandb_tinfo_pol, extack);
183 if (err)
184 return err;
185
186 if (!tun_tb[BRIDGE_VLANDB_TINFO_CMD]) {
187 NL_SET_ERR_MSG_MOD(extack, "Missing tunnel command attribute");
188 return -ENOENT;
189 }
190 cmd = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_CMD]);
191 switch (cmd) {
192 case RTM_SETLINK:
193 if (!tun_tb[BRIDGE_VLANDB_TINFO_ID]) {
194 NL_SET_ERR_MSG_MOD(extack, "Missing tunnel id attribute");
195 return -ENOENT;
196 }
197 /* when working on vlan ranges this is the starting tunnel id */
198 tun_id = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_ID]);
199 /* vlan info attr is guaranteed by br_vlan_rtm_process_one */
200 vinfo = nla_data(tb[BRIDGE_VLANDB_ENTRY_INFO]);
201 /* tunnel ids are mapped to each vlan in increasing order,
202 * the starting vlan is in BRIDGE_VLANDB_ENTRY_INFO and v is the
203 * current vlan, so we compute: tun_id + v - vinfo->vid
204 */
205 tun_id += v->vid - vinfo->vid;
206 break;
207 case RTM_DELLINK:
208 break;
209 default:
210 NL_SET_ERR_MSG_MOD(extack, "Unsupported tunnel command");
211 return -EINVAL;
212 }
213
214 return br_vlan_tunnel_info(p, cmd, v->vid, tun_id, changed);
215 }
216
br_vlan_process_one_opts(const struct net_bridge * br,const struct net_bridge_port * p,struct net_bridge_vlan_group * vg,struct net_bridge_vlan * v,struct nlattr ** tb,bool * changed,struct netlink_ext_ack * extack)217 static int br_vlan_process_one_opts(const struct net_bridge *br,
218 const struct net_bridge_port *p,
219 struct net_bridge_vlan_group *vg,
220 struct net_bridge_vlan *v,
221 struct nlattr **tb,
222 bool *changed,
223 struct netlink_ext_ack *extack)
224 {
225 int err;
226
227 *changed = false;
228 if (tb[BRIDGE_VLANDB_ENTRY_STATE]) {
229 u8 state = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_STATE]);
230
231 err = br_vlan_modify_state(vg, v, state, changed, extack);
232 if (err)
233 return err;
234 }
235 if (tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO]) {
236 err = br_vlan_modify_tunnel(p, v, tb, changed, extack);
237 if (err)
238 return err;
239 }
240
241 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
242 if (tb[BRIDGE_VLANDB_ENTRY_MCAST_ROUTER]) {
243 u8 val;
244
245 val = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_MCAST_ROUTER]);
246 err = br_multicast_set_vlan_router(v, val);
247 if (err)
248 return err;
249 *changed = true;
250 }
251 if (tb[BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS]) {
252 u32 val;
253
254 if (!p) {
255 NL_SET_ERR_MSG_MOD(extack, "Can't set mcast_max_groups for non-port vlans");
256 return -EINVAL;
257 }
258 if (br_multicast_port_ctx_vlan_disabled(&v->port_mcast_ctx)) {
259 NL_SET_ERR_MSG_MOD(extack, "Multicast snooping disabled on this VLAN");
260 return -EINVAL;
261 }
262
263 val = nla_get_u32(tb[BRIDGE_VLANDB_ENTRY_MCAST_MAX_GROUPS]);
264 br_multicast_ngroups_set_max(&v->port_mcast_ctx, val);
265 *changed = true;
266 }
267 #endif
268
269 if (tb[BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS]) {
270 bool enabled = v->priv_flags & BR_VLFLAG_NEIGH_SUPPRESS_ENABLED;
271 bool val = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_NEIGH_SUPPRESS]);
272
273 if (!p) {
274 NL_SET_ERR_MSG_MOD(extack, "Can't set neigh_suppress for non-port vlans");
275 return -EINVAL;
276 }
277
278 if (val != enabled) {
279 v->priv_flags ^= BR_VLFLAG_NEIGH_SUPPRESS_ENABLED;
280 *changed = true;
281 }
282 }
283
284 if (tb[BRIDGE_VLANDB_ENTRY_NEIGH_FORWARD_GRAT]) {
285 bool enabled = v->priv_flags & BR_VLFLAG_NEIGH_FORWARD_GRAT_ENABLED;
286 bool val = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_NEIGH_FORWARD_GRAT]);
287
288 if (!p) {
289 NL_SET_ERR_MSG_MOD(extack,
290 "Can't set neigh_forward_grat for non-port vlans");
291 return -EINVAL;
292 }
293
294 if (val != enabled) {
295 v->priv_flags ^= BR_VLFLAG_NEIGH_FORWARD_GRAT_ENABLED;
296 *changed = true;
297 }
298 }
299
300 return 0;
301 }
302
br_vlan_process_options(const struct net_bridge * br,const struct net_bridge_port * p,struct net_bridge_vlan * range_start,struct net_bridge_vlan * range_end,struct nlattr ** tb,struct netlink_ext_ack * extack)303 int br_vlan_process_options(const struct net_bridge *br,
304 const struct net_bridge_port *p,
305 struct net_bridge_vlan *range_start,
306 struct net_bridge_vlan *range_end,
307 struct nlattr **tb,
308 struct netlink_ext_ack *extack)
309 {
310 struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL;
311 struct net_bridge_vlan_group *vg;
312 int vid, err = 0;
313 u16 pvid;
314
315 if (p)
316 vg = nbp_vlan_group(p);
317 else
318 vg = br_vlan_group(br);
319
320 if (!range_start || !br_vlan_should_use(range_start)) {
321 NL_SET_ERR_MSG_MOD(extack, "Vlan range start doesn't exist, can't process options");
322 return -ENOENT;
323 }
324 if (!range_end || !br_vlan_should_use(range_end)) {
325 NL_SET_ERR_MSG_MOD(extack, "Vlan range end doesn't exist, can't process options");
326 return -ENOENT;
327 }
328
329 pvid = br_get_pvid(vg);
330 for (vid = range_start->vid; vid <= range_end->vid; vid++) {
331 bool changed = false;
332
333 v = br_vlan_find(vg, vid);
334 if (!v || !br_vlan_should_use(v)) {
335 NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process options");
336 err = -ENOENT;
337 break;
338 }
339
340 err = br_vlan_process_one_opts(br, p, vg, v, tb, &changed,
341 extack);
342 if (err)
343 break;
344
345 if (changed) {
346 /* vlan options changed, check for range */
347 if (!curr_start) {
348 curr_start = v;
349 curr_end = v;
350 continue;
351 }
352
353 if (!br_vlan_can_enter_range(v, curr_end, pvid)) {
354 br_vlan_notify(br, p, curr_start->vid,
355 curr_end->vid, RTM_NEWVLAN);
356 curr_start = v;
357 }
358 curr_end = v;
359 } else {
360 /* nothing changed and nothing to notify yet */
361 if (!curr_start)
362 continue;
363
364 br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
365 RTM_NEWVLAN);
366 curr_start = NULL;
367 curr_end = NULL;
368 }
369 }
370 if (curr_start)
371 br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
372 RTM_NEWVLAN);
373
374 return err;
375 }
376
br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan * v_curr,const struct net_bridge_vlan * r_end)377 bool br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan *v_curr,
378 const struct net_bridge_vlan *r_end)
379 {
380 return v_curr->vid - r_end->vid == 1 &&
381 v_curr->msti == r_end->msti &&
382 ((v_curr->priv_flags ^ r_end->priv_flags) &
383 BR_VLFLAG_GLOBAL_MCAST_ENABLED) == 0 &&
384 br_multicast_ctx_options_equal(&v_curr->br_mcast_ctx,
385 &r_end->br_mcast_ctx);
386 }
387
br_vlan_global_opts_fill(struct sk_buff * skb,u16 vid,u16 vid_range,const struct net_bridge_vlan * v_opts)388 bool br_vlan_global_opts_fill(struct sk_buff *skb, u16 vid, u16 vid_range,
389 const struct net_bridge_vlan *v_opts)
390 {
391 struct nlattr *nest2 __maybe_unused;
392 u64 clockval __maybe_unused;
393 struct nlattr *nest;
394
395 nest = nla_nest_start(skb, BRIDGE_VLANDB_GLOBAL_OPTIONS);
396 if (!nest)
397 return false;
398
399 if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_ID, vid))
400 goto out_err;
401
402 if (vid_range && vid < vid_range &&
403 nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_RANGE, vid_range))
404 goto out_err;
405
406 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
407 if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING,
408 !!(v_opts->priv_flags & BR_VLFLAG_GLOBAL_MCAST_ENABLED)) ||
409 nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION,
410 v_opts->br_mcast_ctx.multicast_igmp_version) ||
411 nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT,
412 v_opts->br_mcast_ctx.multicast_last_member_count) ||
413 nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT,
414 v_opts->br_mcast_ctx.multicast_startup_query_count) ||
415 nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER,
416 v_opts->br_mcast_ctx.multicast_querier) ||
417 br_multicast_dump_querier_state(skb, &v_opts->br_mcast_ctx,
418 BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_STATE))
419 goto out_err;
420
421 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_last_member_interval);
422 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL,
423 clockval, BRIDGE_VLANDB_GOPTS_PAD))
424 goto out_err;
425 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_membership_interval);
426 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL,
427 clockval, BRIDGE_VLANDB_GOPTS_PAD))
428 goto out_err;
429 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_querier_interval);
430 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL,
431 clockval, BRIDGE_VLANDB_GOPTS_PAD))
432 goto out_err;
433 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_interval);
434 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL,
435 clockval, BRIDGE_VLANDB_GOPTS_PAD))
436 goto out_err;
437 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_response_interval);
438 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL,
439 clockval, BRIDGE_VLANDB_GOPTS_PAD))
440 goto out_err;
441 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_startup_query_interval);
442 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL,
443 clockval, BRIDGE_VLANDB_GOPTS_PAD))
444 goto out_err;
445
446 if (br_rports_have_mc_router(&v_opts->br_mcast_ctx)) {
447 nest2 = nla_nest_start(skb,
448 BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS);
449 if (!nest2)
450 goto out_err;
451
452 rcu_read_lock();
453 if (br_rports_fill_info(skb, &v_opts->br_mcast_ctx)) {
454 rcu_read_unlock();
455 nla_nest_cancel(skb, nest2);
456 goto out_err;
457 }
458 rcu_read_unlock();
459
460 nla_nest_end(skb, nest2);
461 }
462
463 #if IS_ENABLED(CONFIG_IPV6)
464 if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION,
465 v_opts->br_mcast_ctx.multicast_mld_version))
466 goto out_err;
467 #endif
468 #endif
469
470 if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_MSTI, v_opts->msti))
471 goto out_err;
472
473 nla_nest_end(skb, nest);
474
475 return true;
476
477 out_err:
478 nla_nest_cancel(skb, nest);
479 return false;
480 }
481
rtnl_vlan_global_opts_nlmsg_size(const struct net_bridge_vlan * v)482 static size_t rtnl_vlan_global_opts_nlmsg_size(const struct net_bridge_vlan *v)
483 {
484 return NLMSG_ALIGN(sizeof(struct br_vlan_msg))
485 + nla_total_size(0) /* BRIDGE_VLANDB_GLOBAL_OPTIONS */
486 + nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_ID */
487 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
488 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING */
489 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION */
490 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION */
491 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT */
492 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT */
493 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL */
494 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL */
495 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL */
496 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL */
497 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL */
498 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL */
499 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER */
500 + br_multicast_querier_state_size() /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_STATE */
501 + nla_total_size(0) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS */
502 + br_rports_size(&v->br_mcast_ctx) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS */
503 #endif
504 + nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_MSTI */
505 + nla_total_size(sizeof(u16)); /* BRIDGE_VLANDB_GOPTS_RANGE */
506 }
507
br_vlan_global_opts_notify(const struct net_bridge * br,u16 vid,u16 vid_range)508 static void br_vlan_global_opts_notify(const struct net_bridge *br,
509 u16 vid, u16 vid_range)
510 {
511 struct net_bridge_vlan *v;
512 struct br_vlan_msg *bvm;
513 struct nlmsghdr *nlh;
514 struct sk_buff *skb;
515 int err = -ENOBUFS;
516
517 /* right now notifications are done only with rtnl held */
518 ASSERT_RTNL();
519
520 /* need to find the vlan due to flags/options */
521 v = br_vlan_find(br_vlan_group(br), vid);
522 if (!v)
523 return;
524
525 skb = nlmsg_new(rtnl_vlan_global_opts_nlmsg_size(v), GFP_KERNEL);
526 if (!skb)
527 goto out_err;
528
529 err = -EMSGSIZE;
530 nlh = nlmsg_put(skb, 0, 0, RTM_NEWVLAN, sizeof(*bvm), 0);
531 if (!nlh)
532 goto out_err;
533 bvm = nlmsg_data(nlh);
534 memset(bvm, 0, sizeof(*bvm));
535 bvm->family = AF_BRIDGE;
536 bvm->ifindex = br->dev->ifindex;
537
538 if (!br_vlan_global_opts_fill(skb, vid, vid_range, v))
539 goto out_err;
540
541 nlmsg_end(skb, nlh);
542 rtnl_notify(skb, dev_net(br->dev), 0, RTNLGRP_BRVLAN, NULL, GFP_KERNEL);
543 return;
544
545 out_err:
546 rtnl_set_sk_err(dev_net(br->dev), RTNLGRP_BRVLAN, err);
547 kfree_skb(skb);
548 }
549
br_vlan_process_global_one_opts(const struct net_bridge * br,struct net_bridge_vlan_group * vg,struct net_bridge_vlan * v,struct nlattr ** tb,bool * changed,struct netlink_ext_ack * extack)550 static int br_vlan_process_global_one_opts(const struct net_bridge *br,
551 struct net_bridge_vlan_group *vg,
552 struct net_bridge_vlan *v,
553 struct nlattr **tb,
554 bool *changed,
555 struct netlink_ext_ack *extack)
556 {
557 int err __maybe_unused;
558
559 *changed = false;
560 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
561 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]) {
562 u8 mc_snooping;
563
564 mc_snooping = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]);
565 if (br_multicast_toggle_global_vlan(v, !!mc_snooping))
566 *changed = true;
567 }
568 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]) {
569 u8 ver;
570
571 ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]);
572 err = br_multicast_set_igmp_version(&v->br_mcast_ctx, ver);
573 if (err)
574 return err;
575 *changed = true;
576 }
577 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]) {
578 u32 cnt;
579
580 cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]);
581 v->br_mcast_ctx.multicast_last_member_count = cnt;
582 *changed = true;
583 }
584 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]) {
585 u32 cnt;
586
587 cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]);
588 v->br_mcast_ctx.multicast_startup_query_count = cnt;
589 *changed = true;
590 }
591 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]) {
592 u64 val;
593
594 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]);
595 v->br_mcast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
596 *changed = true;
597 }
598 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]) {
599 u64 val;
600
601 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]);
602 v->br_mcast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
603 *changed = true;
604 }
605 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]) {
606 u64 val;
607
608 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]);
609 v->br_mcast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
610 *changed = true;
611 }
612 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]) {
613 u64 val;
614
615 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]);
616 br_multicast_set_query_intvl(&v->br_mcast_ctx, val);
617 *changed = true;
618 }
619 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL]) {
620 u64 val;
621
622 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL]);
623 v->br_mcast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
624 *changed = true;
625 }
626 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL]) {
627 u64 val;
628
629 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL]);
630 br_multicast_set_startup_query_intvl(&v->br_mcast_ctx, val);
631 *changed = true;
632 }
633 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER]) {
634 u8 val;
635
636 val = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER]);
637 err = br_multicast_set_querier(&v->br_mcast_ctx, val);
638 if (err)
639 return err;
640 *changed = true;
641 }
642 #if IS_ENABLED(CONFIG_IPV6)
643 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]) {
644 u8 ver;
645
646 ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]);
647 err = br_multicast_set_mld_version(&v->br_mcast_ctx, ver);
648 if (err)
649 return err;
650 *changed = true;
651 }
652 #endif
653 #endif
654 if (tb[BRIDGE_VLANDB_GOPTS_MSTI]) {
655 u16 msti;
656
657 msti = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_MSTI]);
658 err = br_mst_vlan_set_msti(v, msti);
659 if (err)
660 return err;
661 *changed = true;
662 }
663
664 return 0;
665 }
666
667 static const struct nla_policy br_vlan_db_gpol[BRIDGE_VLANDB_GOPTS_MAX + 1] = {
668 [BRIDGE_VLANDB_GOPTS_ID] = { .type = NLA_U16 },
669 [BRIDGE_VLANDB_GOPTS_RANGE] = { .type = NLA_U16 },
670 [BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING] = { .type = NLA_U8 },
671 [BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION] = { .type = NLA_U8 },
672 [BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
673 [BRIDGE_VLANDB_GOPTS_MCAST_QUERIER] = { .type = NLA_U8 },
674 [BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
675 [BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
676 [BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
677 [BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
678 [BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
679 [BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
680 [BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
681 [BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
682 [BRIDGE_VLANDB_GOPTS_MSTI] = NLA_POLICY_MAX(NLA_U16, VLAN_N_VID - 1),
683 };
684
br_vlan_rtm_process_global_options(struct net_device * dev,const struct nlattr * attr,int cmd,struct netlink_ext_ack * extack)685 int br_vlan_rtm_process_global_options(struct net_device *dev,
686 const struct nlattr *attr,
687 int cmd,
688 struct netlink_ext_ack *extack)
689 {
690 struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL;
691 struct nlattr *tb[BRIDGE_VLANDB_GOPTS_MAX + 1];
692 struct net_bridge_vlan_group *vg;
693 u16 vid, vid_range = 0;
694 struct net_bridge *br;
695 int err = 0;
696
697 if (cmd != RTM_NEWVLAN) {
698 NL_SET_ERR_MSG_MOD(extack, "Global vlan options support only set operation");
699 return -EINVAL;
700 }
701 if (!netif_is_bridge_master(dev)) {
702 NL_SET_ERR_MSG_MOD(extack, "Global vlan options can only be set on bridge device");
703 return -EINVAL;
704 }
705 br = netdev_priv(dev);
706 vg = br_vlan_group(br);
707 if (WARN_ON(!vg))
708 return -ENODEV;
709
710 err = nla_parse_nested(tb, BRIDGE_VLANDB_GOPTS_MAX, attr,
711 br_vlan_db_gpol, extack);
712 if (err)
713 return err;
714
715 if (!tb[BRIDGE_VLANDB_GOPTS_ID]) {
716 NL_SET_ERR_MSG_MOD(extack, "Missing vlan entry id");
717 return -EINVAL;
718 }
719 vid = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_ID]);
720 if (!br_vlan_valid_id(vid, extack))
721 return -EINVAL;
722
723 if (tb[BRIDGE_VLANDB_GOPTS_RANGE]) {
724 vid_range = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_RANGE]);
725 if (!br_vlan_valid_id(vid_range, extack))
726 return -EINVAL;
727 if (vid >= vid_range) {
728 NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
729 return -EINVAL;
730 }
731 } else {
732 vid_range = vid;
733 }
734
735 for (; vid <= vid_range; vid++) {
736 bool changed = false;
737
738 v = br_vlan_find(vg, vid);
739 if (!v) {
740 NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process global options");
741 err = -ENOENT;
742 break;
743 }
744
745 err = br_vlan_process_global_one_opts(br, vg, v, tb, &changed,
746 extack);
747 if (err)
748 break;
749
750 if (changed) {
751 /* vlan options changed, check for range */
752 if (!curr_start) {
753 curr_start = v;
754 curr_end = v;
755 continue;
756 }
757
758 if (!br_vlan_global_opts_can_enter_range(v, curr_end)) {
759 br_vlan_global_opts_notify(br, curr_start->vid,
760 curr_end->vid);
761 curr_start = v;
762 }
763 curr_end = v;
764 } else {
765 /* nothing changed and nothing to notify yet */
766 if (!curr_start)
767 continue;
768
769 br_vlan_global_opts_notify(br, curr_start->vid,
770 curr_end->vid);
771 curr_start = NULL;
772 curr_end = NULL;
773 }
774 }
775 if (curr_start)
776 br_vlan_global_opts_notify(br, curr_start->vid, curr_end->vid);
777
778 return err;
779 }
780