1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Bridge netlink control interface 4 * 5 * Authors: 6 * Stephen Hemminger <shemminger@osdl.org> 7 */ 8 9 #include <linux/kernel.h> 10 #include <linux/slab.h> 11 #include <linux/etherdevice.h> 12 #include <net/rtnetlink.h> 13 #include <net/net_namespace.h> 14 #include <net/sock.h> 15 #include <uapi/linux/if_bridge.h> 16 17 #include "br_private.h" 18 #include "br_private_stp.h" 19 #include "br_private_cfm.h" 20 #include "br_private_tunnel.h" 21 #include "br_private_mcast_eht.h" 22 23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg, 24 u32 filter_mask) 25 { 26 struct net_bridge_vlan *v; 27 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0; 28 u16 flags, pvid; 29 int num_vlans = 0; 30 31 if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) 32 return 0; 33 34 pvid = br_get_pvid(vg); 35 /* Count number of vlan infos */ 36 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) { 37 flags = 0; 38 /* only a context, bridge vlan not activated */ 39 if (!br_vlan_should_use(v)) 40 continue; 41 if (v->vid == pvid) 42 flags |= BRIDGE_VLAN_INFO_PVID; 43 44 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED) 45 flags |= BRIDGE_VLAN_INFO_UNTAGGED; 46 47 if (vid_range_start == 0) { 48 goto initvars; 49 } else if ((v->vid - vid_range_end) == 1 && 50 flags == vid_range_flags) { 51 vid_range_end = v->vid; 52 continue; 53 } else { 54 if ((vid_range_end - vid_range_start) > 0) 55 num_vlans += 2; 56 else 57 num_vlans += 1; 58 } 59 initvars: 60 vid_range_start = v->vid; 61 vid_range_end = v->vid; 62 vid_range_flags = flags; 63 } 64 65 if (vid_range_start != 0) { 66 if ((vid_range_end - vid_range_start) > 0) 67 num_vlans += 2; 68 else 69 num_vlans += 1; 70 } 71 72 return num_vlans; 73 } 74 75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg, 76 u32 filter_mask) 77 { 78 int num_vlans; 79 80 if (!vg) 81 return 0; 82 83 if (filter_mask & RTEXT_FILTER_BRVLAN) 84 return vg->num_vlans; 85 86 rcu_read_lock(); 87 num_vlans = __get_num_vlan_infos(vg, filter_mask); 88 rcu_read_unlock(); 89 90 return num_vlans; 91 } 92 93 static size_t br_get_link_af_size_filtered(const struct net_device *dev, 94 u32 filter_mask) 95 { 96 struct net_bridge_vlan_group *vg = NULL; 97 struct net_bridge_port *p = NULL; 98 struct net_bridge *br = NULL; 99 u32 num_cfm_peer_mep_infos; 100 u32 num_cfm_mep_infos; 101 size_t vinfo_sz = 0; 102 int num_vlan_infos; 103 104 rcu_read_lock(); 105 if (netif_is_bridge_port(dev)) { 106 p = br_port_get_check_rcu(dev); 107 if (p) 108 vg = nbp_vlan_group_rcu(p); 109 } else if (netif_is_bridge_master(dev)) { 110 br = netdev_priv(dev); 111 vg = br_vlan_group_rcu(br); 112 } 113 num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask); 114 rcu_read_unlock(); 115 116 if (p && test_bit(BR_VLAN_TUNNEL_BIT, &p->flags)) 117 vinfo_sz += br_get_vlan_tunnel_info_size(vg); 118 119 /* Each VLAN is returned in bridge_vlan_info along with flags */ 120 vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info)); 121 122 if (p && vg && (filter_mask & RTEXT_FILTER_MST)) 123 vinfo_sz += br_mst_info_size(vg); 124 125 if (!(filter_mask & RTEXT_FILTER_CFM_STATUS)) 126 return vinfo_sz; 127 128 if (!br) 129 return vinfo_sz; 130 131 /* CFM status info must be added */ 132 br_cfm_mep_count(br, &num_cfm_mep_infos); 133 br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos); 134 135 vinfo_sz += nla_total_size(0); /* IFLA_BRIDGE_CFM */ 136 /* For each status struct the MEP instance (u32) is added */ 137 /* MEP instance (u32) + br_cfm_mep_status */ 138 vinfo_sz += num_cfm_mep_infos * 139 /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */ 140 (nla_total_size(sizeof(u32)) 141 /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */ 142 + nla_total_size(sizeof(u32)) 143 /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */ 144 + nla_total_size(sizeof(u32)) 145 /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */ 146 + nla_total_size(sizeof(u32))); 147 /* MEP instance (u32) + br_cfm_cc_peer_status */ 148 vinfo_sz += num_cfm_peer_mep_infos * 149 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */ 150 (nla_total_size(sizeof(u32)) 151 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */ 152 + nla_total_size(sizeof(u32)) 153 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */ 154 + nla_total_size(sizeof(u32)) 155 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */ 156 + nla_total_size(sizeof(u32)) 157 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */ 158 + nla_total_size(sizeof(u8)) 159 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */ 160 + nla_total_size(sizeof(u8)) 161 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */ 162 + nla_total_size(sizeof(u32)) 163 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */ 164 + nla_total_size(sizeof(u32)) 165 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */ 166 + nla_total_size(sizeof(u32))); 167 168 return vinfo_sz; 169 } 170 171 static inline size_t br_port_info_size(void) 172 { 173 return nla_total_size(1) /* IFLA_BRPORT_STATE */ 174 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */ 175 + nla_total_size(4) /* IFLA_BRPORT_COST */ 176 + nla_total_size(1) /* IFLA_BRPORT_MODE */ 177 + nla_total_size(1) /* IFLA_BRPORT_GUARD */ 178 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */ 179 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */ 180 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */ 181 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */ 182 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */ 183 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */ 184 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */ 185 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */ 186 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */ 187 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */ 188 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */ 189 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */ 190 + nla_total_size(1) /* IFLA_BRPORT_LOCKED */ 191 + nla_total_size(1) /* IFLA_BRPORT_MAB */ 192 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */ 193 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_FORWARD_GRAT */ 194 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */ 195 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */ 196 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_PORT */ 197 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_COST */ 198 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_ID */ 199 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_NO */ 200 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */ 201 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_CONFIG_PENDING */ 202 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */ 203 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */ 204 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */ 205 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 206 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MULTICAST_ROUTER */ 207 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_N_GROUPS */ 208 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_MAX_GROUPS */ 209 #endif 210 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_GROUP_FWD_MASK */ 211 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_RING_OPEN */ 212 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_IN_OPEN */ 213 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */ 214 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */ 215 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_BACKUP_NHID */ 216 + 0; 217 } 218 219 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask) 220 { 221 return NLMSG_ALIGN(sizeof(struct ifinfomsg)) 222 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */ 223 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */ 224 + nla_total_size(4) /* IFLA_MASTER */ 225 + nla_total_size(4) /* IFLA_MTU */ 226 + nla_total_size(4) /* IFLA_LINK */ 227 + nla_total_size(1) /* IFLA_OPERSTATE */ 228 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */ 229 + nla_total_size(br_get_link_af_size_filtered(dev, 230 filter_mask)) /* IFLA_AF_SPEC */ 231 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */ 232 } 233 234 static int br_port_fill_attrs(struct sk_buff *skb, 235 const struct net_bridge_port *p) 236 { 237 unsigned long flags = READ_ONCE(p->flags); 238 u8 mode = !!(flags & BR_HAIRPIN_MODE); 239 struct net_bridge_port *backup_p; 240 u64 timerval; 241 242 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) || 243 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, READ_ONCE(p->priority)) || 244 nla_put_u32(skb, IFLA_BRPORT_COST, READ_ONCE(p->path_cost)) || 245 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) || 246 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(flags & BR_BPDU_GUARD)) || 247 nla_put_u8(skb, IFLA_BRPORT_PROTECT, 248 !!(flags & BR_ROOT_BLOCK)) || 249 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE, 250 !!(flags & BR_MULTICAST_FAST_LEAVE)) || 251 nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST, 252 !!(flags & BR_MULTICAST_TO_UNICAST)) || 253 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(flags & BR_LEARNING)) || 254 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD, 255 !!(flags & BR_FLOOD)) || 256 nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD, 257 !!(flags & BR_MCAST_FLOOD)) || 258 nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD, 259 !!(flags & BR_BCAST_FLOOD)) || 260 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(flags & BR_PROXYARP)) || 261 nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI, 262 !!(flags & BR_PROXYARP_WIFI)) || 263 nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id), 264 &p->designated_root) || 265 nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id), 266 &p->designated_bridge) || 267 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, 268 READ_ONCE(p->designated_port)) || 269 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, 270 READ_ONCE(p->designated_cost)) || 271 nla_put_u16(skb, IFLA_BRPORT_ID, READ_ONCE(p->port_id)) || 272 nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) || 273 nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK, 274 p->topology_change_ack) || 275 nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, READ_ONCE(p->config_pending)) || 276 nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(flags & 277 BR_VLAN_TUNNEL)) || 278 nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) || 279 nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS, 280 !!(flags & BR_NEIGH_SUPPRESS)) || 281 nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(flags & 282 BR_MRP_LOST_CONT)) || 283 nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN, 284 !!(flags & BR_MRP_LOST_IN_CONT)) || 285 nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(flags & BR_ISOLATED)) || 286 nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(flags & BR_PORT_LOCKED)) || 287 nla_put_u8(skb, IFLA_BRPORT_MAB, !!(flags & BR_PORT_MAB)) || 288 nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS, 289 !!(flags & BR_NEIGH_VLAN_SUPPRESS)) || 290 nla_put_u8(skb, IFLA_BRPORT_NEIGH_FORWARD_GRAT, 291 !!(flags & BR_NEIGH_FORWARD_GRAT))) 292 return -EMSGSIZE; 293 294 timerval = br_timer_value(&p->message_age_timer); 295 if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval, 296 IFLA_BRPORT_PAD)) 297 return -EMSGSIZE; 298 timerval = br_timer_value(&p->forward_delay_timer); 299 if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval, 300 IFLA_BRPORT_PAD)) 301 return -EMSGSIZE; 302 timerval = br_timer_value(&p->hold_timer); 303 if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval, 304 IFLA_BRPORT_PAD)) 305 return -EMSGSIZE; 306 307 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 308 if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER, 309 p->multicast_ctx.multicast_router) || 310 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT, 311 p->multicast_eht_hosts_limit) || 312 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT, 313 p->multicast_eht_hosts_cnt) || 314 nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS, 315 br_multicast_ngroups_get(&p->multicast_ctx)) || 316 nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS, 317 br_multicast_ngroups_get_max(&p->multicast_ctx))) 318 return -EMSGSIZE; 319 #endif 320 321 /* we might be called only with br->lock */ 322 rcu_read_lock(); 323 backup_p = rcu_dereference(p->backup_port); 324 if (backup_p) 325 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT, 326 backup_p->dev->ifindex); 327 rcu_read_unlock(); 328 329 if (p->backup_nhid && 330 nla_put_u32(skb, IFLA_BRPORT_BACKUP_NHID, p->backup_nhid)) 331 return -EMSGSIZE; 332 333 return 0; 334 } 335 336 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start, 337 u16 vid_end, u16 flags) 338 { 339 struct bridge_vlan_info vinfo; 340 341 if ((vid_end - vid_start) > 0) { 342 /* add range to skb */ 343 vinfo.vid = vid_start; 344 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN; 345 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 346 sizeof(vinfo), &vinfo)) 347 goto nla_put_failure; 348 349 vinfo.vid = vid_end; 350 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END; 351 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 352 sizeof(vinfo), &vinfo)) 353 goto nla_put_failure; 354 } else { 355 vinfo.vid = vid_start; 356 vinfo.flags = flags; 357 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 358 sizeof(vinfo), &vinfo)) 359 goto nla_put_failure; 360 } 361 362 return 0; 363 364 nla_put_failure: 365 return -EMSGSIZE; 366 } 367 368 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb, 369 struct net_bridge_vlan_group *vg) 370 { 371 struct net_bridge_vlan *v; 372 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0; 373 u16 flags, pvid; 374 int err = 0; 375 376 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan 377 * and mark vlan info with begin and end flags 378 * if vlaninfo represents a range 379 */ 380 pvid = br_get_pvid(vg); 381 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) { 382 flags = 0; 383 if (!br_vlan_should_use(v)) 384 continue; 385 if (v->vid == pvid) 386 flags |= BRIDGE_VLAN_INFO_PVID; 387 388 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED) 389 flags |= BRIDGE_VLAN_INFO_UNTAGGED; 390 391 if (vid_range_start == 0) { 392 goto initvars; 393 } else if ((v->vid - vid_range_end) == 1 && 394 flags == vid_range_flags) { 395 vid_range_end = v->vid; 396 continue; 397 } else { 398 err = br_fill_ifvlaninfo_range(skb, vid_range_start, 399 vid_range_end, 400 vid_range_flags); 401 if (err) 402 return err; 403 } 404 405 initvars: 406 vid_range_start = v->vid; 407 vid_range_end = v->vid; 408 vid_range_flags = flags; 409 } 410 411 if (vid_range_start != 0) { 412 /* Call it once more to send any left over vlans */ 413 err = br_fill_ifvlaninfo_range(skb, vid_range_start, 414 vid_range_end, 415 vid_range_flags); 416 if (err) 417 return err; 418 } 419 420 return 0; 421 } 422 423 static int br_fill_ifvlaninfo(struct sk_buff *skb, 424 struct net_bridge_vlan_group *vg) 425 { 426 struct bridge_vlan_info vinfo; 427 struct net_bridge_vlan *v; 428 u16 pvid; 429 430 pvid = br_get_pvid(vg); 431 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) { 432 if (!br_vlan_should_use(v)) 433 continue; 434 435 vinfo.vid = v->vid; 436 vinfo.flags = 0; 437 if (v->vid == pvid) 438 vinfo.flags |= BRIDGE_VLAN_INFO_PVID; 439 440 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED) 441 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED; 442 443 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 444 sizeof(vinfo), &vinfo)) 445 goto nla_put_failure; 446 } 447 448 return 0; 449 450 nla_put_failure: 451 return -EMSGSIZE; 452 } 453 454 /* 455 * Create one netlink message for one interface 456 * Contains port and master info as well as carrier and bridge state. 457 */ 458 static int br_fill_ifinfo(struct sk_buff *skb, 459 const struct net_bridge_port *port, 460 u32 pid, u32 seq, int event, unsigned int flags, 461 u32 filter_mask, const struct net_device *dev, 462 bool getlink) 463 { 464 u8 operstate = netif_running(dev) ? READ_ONCE(dev->operstate) : 465 IF_OPER_DOWN; 466 struct nlattr *af = NULL; 467 struct net_bridge *br; 468 struct ifinfomsg *hdr; 469 struct nlmsghdr *nlh; 470 471 if (port) 472 br = port->br; 473 else 474 br = netdev_priv(dev); 475 476 br_debug(br, "br_fill_ifinfo event %d port %s master %s\n", 477 event, dev->name, br->dev->name); 478 479 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags); 480 if (nlh == NULL) 481 return -EMSGSIZE; 482 483 hdr = nlmsg_data(nlh); 484 hdr->ifi_family = AF_BRIDGE; 485 hdr->__ifi_pad = 0; 486 hdr->ifi_type = dev->type; 487 hdr->ifi_index = dev->ifindex; 488 hdr->ifi_flags = netif_get_flags(dev); 489 hdr->ifi_change = 0; 490 491 if (nla_put_string(skb, IFLA_IFNAME, dev->name) || 492 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) || 493 nla_put_u32(skb, IFLA_MTU, dev->mtu) || 494 nla_put_u8(skb, IFLA_OPERSTATE, operstate) || 495 (dev->addr_len && 496 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) || 497 (dev->ifindex != dev_get_iflink(dev) && 498 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev)))) 499 goto nla_put_failure; 500 501 if (event == RTM_NEWLINK && port) { 502 struct nlattr *nest; 503 504 nest = nla_nest_start(skb, IFLA_PROTINFO); 505 if (nest == NULL || br_port_fill_attrs(skb, port) < 0) 506 goto nla_put_failure; 507 nla_nest_end(skb, nest); 508 } 509 510 if (filter_mask & (RTEXT_FILTER_BRVLAN | 511 RTEXT_FILTER_BRVLAN_COMPRESSED | 512 RTEXT_FILTER_MRP | 513 RTEXT_FILTER_CFM_CONFIG | 514 RTEXT_FILTER_CFM_STATUS | 515 RTEXT_FILTER_MST)) { 516 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC); 517 if (!af) 518 goto nla_put_failure; 519 } 520 521 /* Check if the VID information is requested */ 522 if ((filter_mask & RTEXT_FILTER_BRVLAN) || 523 (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) { 524 struct net_bridge_vlan_group *vg; 525 int err; 526 527 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */ 528 rcu_read_lock(); 529 if (port) 530 vg = nbp_vlan_group_rcu(port); 531 else 532 vg = br_vlan_group_rcu(br); 533 534 if (!vg || !vg->num_vlans) { 535 rcu_read_unlock(); 536 goto done; 537 } 538 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) 539 err = br_fill_ifvlaninfo_compressed(skb, vg); 540 else 541 err = br_fill_ifvlaninfo(skb, vg); 542 543 if (port && test_bit(BR_VLAN_TUNNEL_BIT, &port->flags)) 544 err = br_fill_vlan_tunnel_info(skb, vg); 545 rcu_read_unlock(); 546 if (err) 547 goto nla_put_failure; 548 } 549 550 if (filter_mask & RTEXT_FILTER_MRP) { 551 int err; 552 553 if (!br_mrp_enabled(br) || port) 554 goto done; 555 556 rcu_read_lock(); 557 err = br_mrp_fill_info(skb, br); 558 rcu_read_unlock(); 559 560 if (err) 561 goto nla_put_failure; 562 } 563 564 if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) { 565 struct nlattr *cfm_nest = NULL; 566 int err; 567 568 if (!br_cfm_created(br) || port) 569 goto done; 570 571 cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM); 572 if (!cfm_nest) 573 goto nla_put_failure; 574 575 if (filter_mask & RTEXT_FILTER_CFM_CONFIG) { 576 rcu_read_lock(); 577 err = br_cfm_config_fill_info(skb, br); 578 rcu_read_unlock(); 579 if (err) 580 goto nla_put_failure; 581 } 582 583 if (filter_mask & RTEXT_FILTER_CFM_STATUS) { 584 rcu_read_lock(); 585 err = br_cfm_status_fill_info(skb, br, getlink); 586 rcu_read_unlock(); 587 if (err) 588 goto nla_put_failure; 589 } 590 591 nla_nest_end(skb, cfm_nest); 592 } 593 594 if ((filter_mask & RTEXT_FILTER_MST) && 595 br_opt_get(br, BROPT_MST_ENABLED) && port) { 596 const struct net_bridge_vlan_group *vg = nbp_vlan_group(port); 597 struct nlattr *mst_nest; 598 int err; 599 600 if (!vg || !vg->num_vlans) 601 goto done; 602 603 mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST); 604 if (!mst_nest) 605 goto nla_put_failure; 606 607 err = br_mst_fill_info(skb, vg); 608 if (err) 609 goto nla_put_failure; 610 611 nla_nest_end(skb, mst_nest); 612 } 613 614 done: 615 if (af) { 616 if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0)) 617 nla_nest_end(skb, af); 618 else 619 nla_nest_cancel(skb, af); 620 } 621 622 nlmsg_end(skb, nlh); 623 return 0; 624 625 nla_put_failure: 626 nlmsg_cancel(skb, nlh); 627 return -EMSGSIZE; 628 } 629 630 void br_info_notify(int event, const struct net_bridge *br, 631 const struct net_bridge_port *port, u32 filter) 632 { 633 struct net_device *dev; 634 struct sk_buff *skb; 635 int err = -ENOBUFS; 636 struct net *net; 637 u16 port_no = 0; 638 639 if (WARN_ON(!port && !br)) 640 return; 641 642 if (port) { 643 dev = port->dev; 644 br = port->br; 645 port_no = port->port_no; 646 } else { 647 dev = br->dev; 648 } 649 650 net = dev_net(dev); 651 br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event); 652 653 skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC); 654 if (skb == NULL) 655 goto errout; 656 657 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false); 658 if (err < 0) { 659 /* -EMSGSIZE implies BUG in br_nlmsg_size() */ 660 WARN_ON(err == -EMSGSIZE); 661 kfree_skb(skb); 662 goto errout; 663 } 664 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC); 665 return; 666 errout: 667 rtnl_set_sk_err(net, RTNLGRP_LINK, err); 668 } 669 670 /* Notify listeners of a change in bridge or port information */ 671 void br_ifinfo_notify(int event, const struct net_bridge *br, 672 const struct net_bridge_port *port) 673 { 674 u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED; 675 676 br_info_notify(event, br, port, filter); 677 } 678 679 /* 680 * Dump information about all ports, in response to GETLINK 681 */ 682 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq, 683 struct net_device *dev, u32 filter_mask, int nlflags) 684 { 685 struct net_bridge_port *port = br_port_get_rtnl(dev); 686 687 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) && 688 !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) && 689 !(filter_mask & RTEXT_FILTER_MRP) && 690 !(filter_mask & RTEXT_FILTER_CFM_CONFIG) && 691 !(filter_mask & RTEXT_FILTER_CFM_STATUS)) 692 return 0; 693 694 return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags, 695 filter_mask, dev, true); 696 } 697 698 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p, 699 int cmd, struct bridge_vlan_info *vinfo, bool *changed, 700 struct netlink_ext_ack *extack) 701 { 702 bool curr_change; 703 int err = 0; 704 705 switch (cmd) { 706 case RTM_SETLINK: 707 if (p) { 708 /* if the MASTER flag is set this will act on the global 709 * per-VLAN entry as well 710 */ 711 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags, 712 &curr_change, extack); 713 } else { 714 vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY; 715 err = br_vlan_add(br, vinfo->vid, vinfo->flags, 716 &curr_change, extack); 717 } 718 if (curr_change) 719 *changed = true; 720 break; 721 722 case RTM_DELLINK: 723 if (p) { 724 if (!nbp_vlan_delete(p, vinfo->vid)) 725 *changed = true; 726 727 if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) && 728 !br_vlan_delete(p->br, vinfo->vid)) 729 *changed = true; 730 } else if (!br_vlan_delete(br, vinfo->vid)) { 731 *changed = true; 732 } 733 break; 734 } 735 736 return err; 737 } 738 739 int br_process_vlan_info(struct net_bridge *br, 740 struct net_bridge_port *p, int cmd, 741 struct bridge_vlan_info *vinfo_curr, 742 struct bridge_vlan_info **vinfo_last, 743 bool *changed, 744 struct netlink_ext_ack *extack) 745 { 746 int err, rtm_cmd; 747 748 if (!br_vlan_valid_id(vinfo_curr->vid, extack)) 749 return -EINVAL; 750 751 /* needed for vlan-only NEWVLAN/DELVLAN notifications */ 752 rtm_cmd = br_afspec_cmd_to_rtm(cmd); 753 754 if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) { 755 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack)) 756 return -EINVAL; 757 *vinfo_last = vinfo_curr; 758 return 0; 759 } 760 761 if (*vinfo_last) { 762 struct bridge_vlan_info tmp_vinfo; 763 int v, v_change_start = 0; 764 765 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack)) 766 return -EINVAL; 767 768 memcpy(&tmp_vinfo, *vinfo_last, 769 sizeof(struct bridge_vlan_info)); 770 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) { 771 bool curr_change = false; 772 773 tmp_vinfo.vid = v; 774 err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change, 775 extack); 776 if (err) 777 break; 778 if (curr_change) { 779 *changed = curr_change; 780 if (!v_change_start) 781 v_change_start = v; 782 } else { 783 /* nothing to notify yet */ 784 if (!v_change_start) 785 continue; 786 br_vlan_notify(br, p, v_change_start, 787 v - 1, rtm_cmd); 788 v_change_start = 0; 789 } 790 cond_resched(); 791 } 792 /* v_change_start is set only if the last/whole range changed */ 793 if (v_change_start) 794 br_vlan_notify(br, p, v_change_start, 795 v - 1, rtm_cmd); 796 797 *vinfo_last = NULL; 798 799 return err; 800 } 801 802 err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack); 803 if (*changed) 804 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd); 805 806 return err; 807 } 808 809 static int br_afspec(struct net_bridge *br, 810 struct net_bridge_port *p, 811 struct nlattr *af_spec, 812 int cmd, bool *changed, 813 struct netlink_ext_ack *extack) 814 { 815 struct bridge_vlan_info *vinfo_curr = NULL; 816 struct bridge_vlan_info *vinfo_last = NULL; 817 struct nlattr *attr; 818 struct vtunnel_info tinfo_last = {}; 819 struct vtunnel_info tinfo_curr = {}; 820 int err = 0, rem; 821 822 nla_for_each_nested(attr, af_spec, rem) { 823 err = 0; 824 switch (nla_type(attr)) { 825 case IFLA_BRIDGE_VLAN_TUNNEL_INFO: 826 if (!p || !test_bit(BR_VLAN_TUNNEL_BIT, &p->flags)) 827 return -EINVAL; 828 err = br_parse_vlan_tunnel_info(attr, &tinfo_curr); 829 if (err) 830 return err; 831 err = br_process_vlan_tunnel_info(br, p, cmd, 832 &tinfo_curr, 833 &tinfo_last, 834 changed); 835 if (err) 836 return err; 837 break; 838 case IFLA_BRIDGE_VLAN_INFO: 839 if (nla_len(attr) != sizeof(struct bridge_vlan_info)) 840 return -EINVAL; 841 vinfo_curr = nla_data(attr); 842 err = br_process_vlan_info(br, p, cmd, vinfo_curr, 843 &vinfo_last, changed, 844 extack); 845 if (err) 846 return err; 847 break; 848 case IFLA_BRIDGE_MRP: 849 err = br_mrp_parse(br, p, attr, cmd, extack); 850 if (err) 851 return err; 852 break; 853 case IFLA_BRIDGE_CFM: 854 err = br_cfm_parse(br, p, attr, cmd, extack); 855 if (err) 856 return err; 857 break; 858 case IFLA_BRIDGE_MST: 859 if (!p) { 860 NL_SET_ERR_MSG(extack, 861 "MST states can only be set on bridge ports"); 862 return -EINVAL; 863 } 864 865 if (cmd != RTM_SETLINK) { 866 NL_SET_ERR_MSG(extack, 867 "MST states can only be set through RTM_SETLINK"); 868 return -EINVAL; 869 } 870 871 err = br_mst_process(p, attr, extack); 872 if (err) 873 return err; 874 break; 875 } 876 } 877 878 return err; 879 } 880 881 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = { 882 [IFLA_BRPORT_UNSPEC] = { .strict_start_type = 883 IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 }, 884 [IFLA_BRPORT_STATE] = { .type = NLA_U8 }, 885 [IFLA_BRPORT_COST] = { .type = NLA_U32 }, 886 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 }, 887 [IFLA_BRPORT_MODE] = { .type = NLA_U8 }, 888 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 }, 889 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 }, 890 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 }, 891 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 }, 892 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 }, 893 [IFLA_BRPORT_PROXYARP] = { .type = NLA_U8 }, 894 [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 }, 895 [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 }, 896 [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 }, 897 [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 }, 898 [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 }, 899 [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 }, 900 [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 }, 901 [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 }, 902 [IFLA_BRPORT_ISOLATED] = { .type = NLA_U8 }, 903 [IFLA_BRPORT_LOCKED] = { .type = NLA_U8 }, 904 [IFLA_BRPORT_MAB] = { .type = NLA_U8 }, 905 [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 }, 906 [IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 }, 907 [IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT }, 908 [IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 }, 909 [IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1), 910 [IFLA_BRPORT_BACKUP_NHID] = { .type = NLA_U32 }, 911 [IFLA_BRPORT_NEIGH_FORWARD_GRAT] = NLA_POLICY_MAX(NLA_U8, 1), 912 }; 913 914 /* Change the state of the port and notify spanning tree */ 915 static int br_set_port_state(struct net_bridge_port *p, u8 state) 916 { 917 if (state > BR_STATE_BLOCKING) 918 return -EINVAL; 919 920 /* if kernel STP is running, don't allow changes */ 921 if (p->br->stp_enabled == BR_KERNEL_STP) 922 return -EBUSY; 923 924 /* if device is not up, change is not allowed 925 * if link is not present, only allowable state is disabled 926 */ 927 if (!netif_running(p->dev) || 928 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED)) 929 return -ENETDOWN; 930 931 br_set_state(p, state); 932 br_port_state_selection(p->br); 933 return 0; 934 } 935 936 /* Set/clear or port flags based on attribute */ 937 static void br_set_port_flag(unsigned long *set_flags, 938 unsigned long *clear_flags, 939 struct nlattr *tb[], 940 int attrtype, unsigned long mask) 941 { 942 if (tb[attrtype]) { 943 if (nla_get_u8(tb[attrtype])) 944 *set_flags |= mask; 945 else 946 *clear_flags |= mask; 947 } 948 } 949 950 /* Process bridge protocol info on port */ 951 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[], 952 struct netlink_ext_ack *extack) 953 { 954 unsigned long old_flags, flags, changed_mask; 955 unsigned long set = 0, clear = 0; 956 bool br_vlan_tunnel_old; 957 int err; 958 959 old_flags = READ_ONCE(p->flags); 960 br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false; 961 962 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE); 963 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD); 964 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_FAST_LEAVE, 965 BR_MULTICAST_FAST_LEAVE); 966 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK); 967 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_LEARNING, BR_LEARNING); 968 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD); 969 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MCAST_FLOOD, 970 BR_MCAST_FLOOD); 971 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MCAST_TO_UCAST, 972 BR_MULTICAST_TO_UNICAST); 973 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_BCAST_FLOOD, 974 BR_BCAST_FLOOD); 975 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP); 976 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_PROXYARP_WIFI, 977 BR_PROXYARP_WIFI); 978 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_VLAN_TUNNEL, 979 BR_VLAN_TUNNEL); 980 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_NEIGH_SUPPRESS, 981 BR_NEIGH_SUPPRESS); 982 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED); 983 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED); 984 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MAB, BR_PORT_MAB); 985 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS, 986 BR_NEIGH_VLAN_SUPPRESS); 987 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_NEIGH_FORWARD_GRAT, 988 BR_NEIGH_FORWARD_GRAT); 989 990 flags = (old_flags | set) & ~clear; 991 992 if ((flags & BR_PORT_MAB) && 993 (!(flags & BR_PORT_LOCKED) || !(flags & BR_LEARNING))) { 994 NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled"); 995 return -EINVAL; 996 } 997 if (!(flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) { 998 struct net_bridge_fdb_flush_desc desc = { 999 .flags = BIT(BR_FDB_LOCKED), 1000 .flags_mask = BIT(BR_FDB_LOCKED), 1001 .port_ifindex = p->dev->ifindex, 1002 }; 1003 1004 br_fdb_flush(p->br, &desc); 1005 } 1006 1007 changed_mask = old_flags ^ flags; 1008 1009 err = br_switchdev_set_port_flag(p, flags, changed_mask, extack); 1010 if (err) 1011 return err; 1012 1013 do { 1014 flags = (old_flags | set) & ~clear; 1015 } while (!try_cmpxchg(&p->flags, &old_flags, flags)); 1016 1017 if (br_vlan_tunnel_old && !(flags & BR_VLAN_TUNNEL)) 1018 nbp_vlan_tunnel_info_flush(p); 1019 1020 br_port_flags_change(p, changed_mask); 1021 1022 if (tb[IFLA_BRPORT_COST]) { 1023 spin_lock_bh(&p->br->lock); 1024 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST])); 1025 spin_unlock_bh(&p->br->lock); 1026 if (err) 1027 return err; 1028 } 1029 1030 if (tb[IFLA_BRPORT_PRIORITY]) { 1031 spin_lock_bh(&p->br->lock); 1032 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY])); 1033 spin_unlock_bh(&p->br->lock); 1034 if (err) 1035 return err; 1036 } 1037 1038 if (tb[IFLA_BRPORT_STATE]) { 1039 spin_lock_bh(&p->br->lock); 1040 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE])); 1041 spin_unlock_bh(&p->br->lock); 1042 if (err) 1043 return err; 1044 } 1045 1046 if (tb[IFLA_BRPORT_FLUSH]) 1047 br_fdb_delete_by_port(p->br, p, 0, 0); 1048 1049 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1050 if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) { 1051 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]); 1052 1053 err = br_multicast_set_port_router(&p->multicast_ctx, 1054 mcast_router); 1055 if (err) 1056 return err; 1057 } 1058 1059 if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) { 1060 u32 hlimit; 1061 1062 hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]); 1063 err = br_multicast_eht_set_hosts_limit(p, hlimit); 1064 if (err) 1065 return err; 1066 } 1067 1068 if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) { 1069 u32 max_groups; 1070 1071 max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]); 1072 br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups); 1073 } 1074 #endif 1075 1076 if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) { 1077 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]); 1078 1079 if (fwd_mask & BR_GROUPFWD_MACPAUSE) 1080 return -EINVAL; 1081 p->group_fwd_mask = fwd_mask; 1082 } 1083 1084 if (tb[IFLA_BRPORT_BACKUP_PORT]) { 1085 struct net_device *backup_dev = NULL; 1086 u32 backup_ifindex; 1087 1088 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]); 1089 if (backup_ifindex) { 1090 backup_dev = __dev_get_by_index(dev_net(p->dev), 1091 backup_ifindex); 1092 if (!backup_dev) 1093 return -ENOENT; 1094 } 1095 1096 err = nbp_backup_change(p, backup_dev); 1097 if (err) 1098 return err; 1099 } 1100 1101 if (tb[IFLA_BRPORT_BACKUP_NHID]) { 1102 u32 backup_nhid = nla_get_u32(tb[IFLA_BRPORT_BACKUP_NHID]); 1103 1104 WRITE_ONCE(p->backup_nhid, backup_nhid); 1105 } 1106 1107 return 0; 1108 } 1109 1110 /* Change state and parameters on port. */ 1111 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags, 1112 struct netlink_ext_ack *extack) 1113 { 1114 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev); 1115 struct nlattr *tb[IFLA_BRPORT_MAX + 1]; 1116 struct net_bridge_port *p; 1117 struct nlattr *protinfo; 1118 struct nlattr *afspec; 1119 bool changed = false; 1120 int err = 0; 1121 1122 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO); 1123 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC); 1124 if (!protinfo && !afspec) 1125 return 0; 1126 1127 p = br_port_get_rtnl(dev); 1128 /* We want to accept dev as bridge itself if the AF_SPEC 1129 * is set to see if someone is setting vlan info on the bridge 1130 */ 1131 if (!p && !afspec) 1132 return -EINVAL; 1133 1134 if (p && protinfo) { 1135 if (protinfo->nla_type & NLA_F_NESTED) { 1136 err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX, 1137 protinfo, 1138 br_port_policy, 1139 NULL); 1140 if (err) 1141 return err; 1142 1143 err = br_setport(p, tb, extack); 1144 } else { 1145 /* Binary compatibility with old RSTP */ 1146 if (nla_len(protinfo) < sizeof(u8)) 1147 return -EINVAL; 1148 1149 spin_lock_bh(&p->br->lock); 1150 err = br_set_port_state(p, nla_get_u8(protinfo)); 1151 spin_unlock_bh(&p->br->lock); 1152 } 1153 if (err) 1154 goto out; 1155 changed = true; 1156 } 1157 1158 if (afspec) 1159 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack); 1160 1161 if (changed) 1162 br_ifinfo_notify(RTM_NEWLINK, br, p); 1163 out: 1164 return err; 1165 } 1166 1167 /* Delete port information */ 1168 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags) 1169 { 1170 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev); 1171 struct net_bridge_port *p; 1172 struct nlattr *afspec; 1173 bool changed = false; 1174 int err = 0; 1175 1176 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC); 1177 if (!afspec) 1178 return 0; 1179 1180 p = br_port_get_rtnl(dev); 1181 /* We want to accept dev as bridge itself as well */ 1182 if (!p && !netif_is_bridge_master(dev)) 1183 return -EINVAL; 1184 1185 err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL); 1186 if (changed) 1187 /* Send RTM_NEWLINK because userspace 1188 * expects RTM_NEWLINK for vlan dels 1189 */ 1190 br_ifinfo_notify(RTM_NEWLINK, br, p); 1191 1192 return err; 1193 } 1194 1195 static int br_validate(struct nlattr *tb[], struct nlattr *data[], 1196 struct netlink_ext_ack *extack) 1197 { 1198 if (tb[IFLA_ADDRESS]) { 1199 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN) 1200 return -EINVAL; 1201 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS]))) 1202 return -EADDRNOTAVAIL; 1203 } 1204 1205 if (!data) 1206 return 0; 1207 1208 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1209 if (data[IFLA_BR_VLAN_PROTOCOL] && 1210 !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]))) 1211 return -EPROTONOSUPPORT; 1212 1213 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) { 1214 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]); 1215 1216 if (defpvid >= VLAN_VID_MASK) 1217 return -EINVAL; 1218 } 1219 #endif 1220 1221 return 0; 1222 } 1223 1224 static int br_port_slave_changelink(struct net_device *brdev, 1225 struct net_device *dev, 1226 struct nlattr *tb[], 1227 struct nlattr *data[], 1228 struct netlink_ext_ack *extack) 1229 { 1230 if (!data) 1231 return 0; 1232 1233 return br_setport(br_port_get_rtnl(dev), data, extack); 1234 } 1235 1236 static int br_port_fill_slave_info(struct sk_buff *skb, 1237 const struct net_device *brdev, 1238 const struct net_device *dev) 1239 { 1240 return br_port_fill_attrs(skb, br_port_get_rtnl(dev)); 1241 } 1242 1243 static size_t br_port_get_slave_size(const struct net_device *brdev, 1244 const struct net_device *dev) 1245 { 1246 return br_port_info_size(); 1247 } 1248 1249 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = { 1250 [IFLA_BR_UNSPEC] = { .strict_start_type = 1251 IFLA_BR_FDB_N_LEARNED }, 1252 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 }, 1253 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 }, 1254 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 }, 1255 [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 }, 1256 [IFLA_BR_STP_STATE] = { .type = NLA_U32 }, 1257 [IFLA_BR_PRIORITY] = { .type = NLA_U16 }, 1258 [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 }, 1259 [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 }, 1260 [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 }, 1261 [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY, 1262 .len = ETH_ALEN }, 1263 [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 }, 1264 [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 }, 1265 [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 }, 1266 [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 }, 1267 [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 }, 1268 [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 }, 1269 [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 }, 1270 [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 }, 1271 [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 }, 1272 [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 }, 1273 [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 }, 1274 [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 }, 1275 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 }, 1276 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 }, 1277 [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 }, 1278 [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 }, 1279 [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 }, 1280 [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 }, 1281 [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 }, 1282 [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 }, 1283 [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 }, 1284 [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 }, 1285 [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 }, 1286 [IFLA_BR_MULTI_BOOLOPT] = 1287 NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)), 1288 [IFLA_BR_FDB_N_LEARNED] = { .type = NLA_REJECT }, 1289 [IFLA_BR_FDB_MAX_LEARNED] = { .type = NLA_U32 }, 1290 [IFLA_BR_STP_MODE] = NLA_POLICY_RANGE(NLA_U32, 1291 BR_STP_MODE_AUTO, 1292 BR_STP_MODE_MAX), 1293 }; 1294 1295 static int br_changelink(struct net_device *brdev, struct nlattr *tb[], 1296 struct nlattr *data[], 1297 struct netlink_ext_ack *extack) 1298 { 1299 struct net_bridge *br = netdev_priv(brdev); 1300 int err; 1301 1302 if (!data) 1303 return 0; 1304 1305 if (data[IFLA_BR_FORWARD_DELAY]) { 1306 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY])); 1307 if (err) 1308 return err; 1309 } 1310 1311 if (data[IFLA_BR_HELLO_TIME]) { 1312 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME])); 1313 if (err) 1314 return err; 1315 } 1316 1317 if (data[IFLA_BR_MAX_AGE]) { 1318 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE])); 1319 if (err) 1320 return err; 1321 } 1322 1323 if (data[IFLA_BR_AGEING_TIME]) { 1324 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME])); 1325 if (err) 1326 return err; 1327 } 1328 1329 if (data[IFLA_BR_STP_MODE]) { 1330 u32 mode = nla_get_u32(data[IFLA_BR_STP_MODE]); 1331 1332 if (mode != br->stp_mode) { 1333 bool stp_off = br->stp_enabled == BR_NO_STP || 1334 (data[IFLA_BR_STP_STATE] && 1335 !nla_get_u32(data[IFLA_BR_STP_STATE])); 1336 1337 if (!stp_off) { 1338 NL_SET_ERR_MSG_MOD(extack, 1339 "Can't change STP mode while STP is enabled"); 1340 return -EBUSY; 1341 } 1342 } 1343 br->stp_mode = mode; 1344 } 1345 1346 if (data[IFLA_BR_STP_STATE]) { 1347 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]); 1348 1349 err = br_stp_set_enabled(br, stp_enabled, extack); 1350 if (err) 1351 return err; 1352 } 1353 1354 if (data[IFLA_BR_PRIORITY]) { 1355 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]); 1356 1357 br_stp_set_bridge_priority(br, priority); 1358 } 1359 1360 if (data[IFLA_BR_VLAN_FILTERING]) { 1361 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]); 1362 1363 err = br_vlan_filter_toggle(br, vlan_filter, extack); 1364 if (err) 1365 return err; 1366 } 1367 1368 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1369 if (data[IFLA_BR_VLAN_PROTOCOL]) { 1370 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]); 1371 1372 err = __br_vlan_set_proto(br, vlan_proto, extack); 1373 if (err) 1374 return err; 1375 } 1376 1377 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) { 1378 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]); 1379 1380 err = __br_vlan_set_default_pvid(br, defpvid, extack); 1381 if (err) 1382 return err; 1383 } 1384 1385 if (data[IFLA_BR_VLAN_STATS_ENABLED]) { 1386 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]); 1387 1388 err = br_vlan_set_stats(br, vlan_stats); 1389 if (err) 1390 return err; 1391 } 1392 1393 if (data[IFLA_BR_VLAN_STATS_PER_PORT]) { 1394 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]); 1395 1396 err = br_vlan_set_stats_per_port(br, per_port); 1397 if (err) 1398 return err; 1399 } 1400 #endif 1401 1402 if (data[IFLA_BR_GROUP_FWD_MASK]) { 1403 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]); 1404 1405 if (fwd_mask & BR_GROUPFWD_RESTRICTED) 1406 return -EINVAL; 1407 br->group_fwd_mask = fwd_mask; 1408 } 1409 1410 if (data[IFLA_BR_GROUP_ADDR]) { 1411 u8 new_addr[ETH_ALEN]; 1412 1413 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN) 1414 return -EINVAL; 1415 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN); 1416 if (!is_link_local_ether_addr(new_addr)) 1417 return -EINVAL; 1418 if (new_addr[5] == 1 || /* 802.3x Pause address */ 1419 new_addr[5] == 2 || /* 802.3ad Slow protocols */ 1420 new_addr[5] == 3) /* 802.1X PAE address */ 1421 return -EINVAL; 1422 spin_lock_bh(&br->lock); 1423 memcpy(br->group_addr, new_addr, sizeof(br->group_addr)); 1424 spin_unlock_bh(&br->lock); 1425 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true); 1426 br_recalculate_fwd_mask(br); 1427 } 1428 1429 if (data[IFLA_BR_FDB_FLUSH]) { 1430 struct net_bridge_fdb_flush_desc desc = { 1431 .flags_mask = BIT(BR_FDB_STATIC) 1432 }; 1433 1434 br_fdb_flush(br, &desc); 1435 } 1436 1437 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1438 if (data[IFLA_BR_MCAST_ROUTER]) { 1439 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]); 1440 1441 err = br_multicast_set_router(&br->multicast_ctx, 1442 multicast_router); 1443 if (err) 1444 return err; 1445 } 1446 1447 if (data[IFLA_BR_MCAST_SNOOPING]) { 1448 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]); 1449 1450 err = br_multicast_toggle(br, mcast_snooping, extack); 1451 if (err) 1452 return err; 1453 } 1454 1455 if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) { 1456 u8 val; 1457 1458 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]); 1459 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val); 1460 } 1461 1462 if (data[IFLA_BR_MCAST_QUERIER]) { 1463 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]); 1464 1465 err = br_multicast_set_querier(&br->multicast_ctx, 1466 mcast_querier); 1467 if (err) 1468 return err; 1469 } 1470 1471 if (data[IFLA_BR_MCAST_HASH_ELASTICITY]) 1472 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n", 1473 RHT_ELASTICITY); 1474 1475 if (data[IFLA_BR_MCAST_HASH_MAX]) 1476 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]); 1477 1478 if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) { 1479 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]); 1480 1481 br->multicast_ctx.multicast_last_member_count = val; 1482 } 1483 1484 if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) { 1485 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]); 1486 1487 br->multicast_ctx.multicast_startup_query_count = val; 1488 } 1489 1490 if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) { 1491 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]); 1492 1493 br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val); 1494 } 1495 1496 if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) { 1497 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]); 1498 1499 br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val); 1500 } 1501 1502 if (data[IFLA_BR_MCAST_QUERIER_INTVL]) { 1503 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]); 1504 1505 br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val); 1506 } 1507 1508 if (data[IFLA_BR_MCAST_QUERY_INTVL]) { 1509 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]); 1510 1511 br_multicast_set_query_intvl(&br->multicast_ctx, val); 1512 } 1513 1514 if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) { 1515 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]); 1516 1517 br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val); 1518 } 1519 1520 if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) { 1521 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]); 1522 1523 br_multicast_set_startup_query_intvl(&br->multicast_ctx, val); 1524 } 1525 1526 if (data[IFLA_BR_MCAST_STATS_ENABLED]) { 1527 __u8 mcast_stats; 1528 1529 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]); 1530 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats); 1531 } 1532 1533 if (data[IFLA_BR_MCAST_IGMP_VERSION]) { 1534 __u8 igmp_version; 1535 1536 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]); 1537 err = br_multicast_set_igmp_version(&br->multicast_ctx, 1538 igmp_version); 1539 if (err) 1540 return err; 1541 } 1542 1543 #if IS_ENABLED(CONFIG_IPV6) 1544 if (data[IFLA_BR_MCAST_MLD_VERSION]) { 1545 __u8 mld_version; 1546 1547 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]); 1548 err = br_multicast_set_mld_version(&br->multicast_ctx, 1549 mld_version); 1550 if (err) 1551 return err; 1552 } 1553 #endif 1554 #endif 1555 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 1556 if (data[IFLA_BR_NF_CALL_IPTABLES]) { 1557 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]); 1558 1559 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val); 1560 } 1561 1562 if (data[IFLA_BR_NF_CALL_IP6TABLES]) { 1563 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]); 1564 1565 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val); 1566 } 1567 1568 if (data[IFLA_BR_NF_CALL_ARPTABLES]) { 1569 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]); 1570 1571 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val); 1572 } 1573 #endif 1574 1575 if (data[IFLA_BR_MULTI_BOOLOPT]) { 1576 struct br_boolopt_multi *bm; 1577 1578 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]); 1579 err = br_boolopt_multi_toggle(br, bm, extack); 1580 if (err) 1581 return err; 1582 } 1583 1584 if (data[IFLA_BR_FDB_MAX_LEARNED]) { 1585 u32 val = nla_get_u32(data[IFLA_BR_FDB_MAX_LEARNED]); 1586 1587 WRITE_ONCE(br->fdb_max_learned, val); 1588 } 1589 1590 return 0; 1591 } 1592 1593 static int br_dev_newlink(struct net_device *dev, 1594 struct rtnl_newlink_params *params, 1595 struct netlink_ext_ack *extack) 1596 { 1597 struct net_bridge *br = netdev_priv(dev); 1598 struct nlattr **data = params->data; 1599 struct nlattr **tb = params->tb; 1600 int err; 1601 1602 err = register_netdevice(dev); 1603 if (err) 1604 return err; 1605 1606 if (tb[IFLA_ADDRESS]) { 1607 spin_lock_bh(&br->lock); 1608 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS])); 1609 spin_unlock_bh(&br->lock); 1610 } 1611 1612 err = br_changelink(dev, tb, data, extack); 1613 if (err) 1614 br_dev_delete(dev, NULL); 1615 1616 return err; 1617 } 1618 1619 static size_t br_get_size(const struct net_device *brdev) 1620 { 1621 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */ 1622 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */ 1623 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */ 1624 nla_total_size(sizeof(u32)) + /* IFLA_BR_AGEING_TIME */ 1625 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_STATE */ 1626 nla_total_size(sizeof(u16)) + /* IFLA_BR_PRIORITY */ 1627 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_FILTERING */ 1628 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1629 nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */ 1630 nla_total_size(sizeof(u16)) + /* IFLA_BR_VLAN_DEFAULT_PVID */ 1631 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_ENABLED */ 1632 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_PER_PORT */ 1633 #endif 1634 nla_total_size(sizeof(u16)) + /* IFLA_BR_GROUP_FWD_MASK */ 1635 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_ROOT_ID */ 1636 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_BRIDGE_ID */ 1637 nla_total_size(sizeof(u16)) + /* IFLA_BR_ROOT_PORT */ 1638 nla_total_size(sizeof(u32)) + /* IFLA_BR_ROOT_PATH_COST */ 1639 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE */ 1640 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */ 1641 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */ 1642 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */ 1643 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */ 1644 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */ 1645 nla_total_size(ETH_ALEN) + /* IFLA_BR_GROUP_ADDR */ 1646 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_N_LEARNED */ 1647 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_MAX_LEARNED */ 1648 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1649 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_ROUTER */ 1650 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_SNOOPING */ 1651 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */ 1652 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERIER */ 1653 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_STATS_ENABLED */ 1654 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */ 1655 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_MAX */ 1656 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */ 1657 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */ 1658 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */ 1659 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */ 1660 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */ 1661 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */ 1662 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */ 1663 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */ 1664 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_IGMP_VERSION */ 1665 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_MLD_VERSION */ 1666 br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */ 1667 #endif 1668 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 1669 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IPTABLES */ 1670 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IP6TABLES */ 1671 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_ARPTABLES */ 1672 #endif 1673 nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */ 1674 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_MODE */ 1675 0; 1676 } 1677 1678 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev) 1679 { 1680 struct net_bridge *br = netdev_priv(brdev); 1681 u32 forward_delay = jiffies_to_clock_t(br->forward_delay); 1682 u32 hello_time = jiffies_to_clock_t(br->hello_time); 1683 u32 age_time = jiffies_to_clock_t(br->max_age); 1684 u32 ageing_time = jiffies_to_clock_t(br->ageing_time); 1685 u32 stp_enabled = br->stp_enabled; 1686 u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1]; 1687 u8 vlan_enabled = br_vlan_enabled(br->dev); 1688 struct br_boolopt_multi bm; 1689 u64 clockval; 1690 1691 clockval = br_timer_value(&br->hello_timer); 1692 if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD)) 1693 return -EMSGSIZE; 1694 clockval = br_timer_value(&br->tcn_timer); 1695 if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD)) 1696 return -EMSGSIZE; 1697 clockval = br_timer_value(&br->topology_change_timer); 1698 if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval, 1699 IFLA_BR_PAD)) 1700 return -EMSGSIZE; 1701 clockval = br_timer_value(&br->gc_work.timer); 1702 if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD)) 1703 return -EMSGSIZE; 1704 1705 br_boolopt_multi_get(br, &bm); 1706 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) || 1707 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) || 1708 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) || 1709 nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) || 1710 nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) || 1711 nla_put_u16(skb, IFLA_BR_PRIORITY, priority) || 1712 nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) || 1713 nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) || 1714 nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id), 1715 &br->bridge_id) || 1716 nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id), 1717 &br->designated_root) || 1718 nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) || 1719 nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) || 1720 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) || 1721 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED, 1722 br->topology_change_detected) || 1723 nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) || 1724 nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm) || 1725 nla_put_u32(skb, IFLA_BR_FDB_N_LEARNED, 1726 atomic_read(&br->fdb_n_learned)) || 1727 nla_put_u32(skb, IFLA_BR_FDB_MAX_LEARNED, br->fdb_max_learned) || 1728 nla_put_u32(skb, IFLA_BR_STP_MODE, br->stp_mode)) 1729 return -EMSGSIZE; 1730 1731 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1732 if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) || 1733 nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) || 1734 nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED, 1735 br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) || 1736 nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT, 1737 br_opt_get(br, BROPT_VLAN_STATS_PER_PORT))) 1738 return -EMSGSIZE; 1739 #endif 1740 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1741 if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, 1742 br->multicast_ctx.multicast_router) || 1743 nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING, 1744 br_opt_get(br, BROPT_MULTICAST_ENABLED)) || 1745 nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR, 1746 br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) || 1747 nla_put_u8(skb, IFLA_BR_MCAST_QUERIER, 1748 br->multicast_ctx.multicast_querier) || 1749 nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED, 1750 br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) || 1751 nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) || 1752 nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) || 1753 nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT, 1754 br->multicast_ctx.multicast_last_member_count) || 1755 nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT, 1756 br->multicast_ctx.multicast_startup_query_count) || 1757 nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION, 1758 br->multicast_ctx.multicast_igmp_version) || 1759 br_multicast_dump_querier_state(skb, &br->multicast_ctx, 1760 IFLA_BR_MCAST_QUERIER_STATE)) 1761 return -EMSGSIZE; 1762 #if IS_ENABLED(CONFIG_IPV6) 1763 if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION, 1764 br->multicast_ctx.multicast_mld_version)) 1765 return -EMSGSIZE; 1766 #endif 1767 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval); 1768 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval, 1769 IFLA_BR_PAD)) 1770 return -EMSGSIZE; 1771 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval); 1772 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval, 1773 IFLA_BR_PAD)) 1774 return -EMSGSIZE; 1775 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval); 1776 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval, 1777 IFLA_BR_PAD)) 1778 return -EMSGSIZE; 1779 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval); 1780 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval, 1781 IFLA_BR_PAD)) 1782 return -EMSGSIZE; 1783 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval); 1784 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval, 1785 IFLA_BR_PAD)) 1786 return -EMSGSIZE; 1787 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval); 1788 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval, 1789 IFLA_BR_PAD)) 1790 return -EMSGSIZE; 1791 #endif 1792 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 1793 if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES, 1794 br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) || 1795 nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES, 1796 br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) || 1797 nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES, 1798 br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0)) 1799 return -EMSGSIZE; 1800 #endif 1801 1802 return 0; 1803 } 1804 1805 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr) 1806 { 1807 struct net_bridge_port *p = NULL; 1808 struct net_bridge_vlan_group *vg; 1809 struct net_bridge_vlan *v; 1810 struct net_bridge *br; 1811 int numvls = 0; 1812 1813 switch (attr) { 1814 case IFLA_STATS_LINK_XSTATS: 1815 br = netdev_priv(dev); 1816 vg = br_vlan_group(br); 1817 break; 1818 case IFLA_STATS_LINK_XSTATS_SLAVE: 1819 p = br_port_get_rtnl(dev); 1820 if (!p) 1821 return 0; 1822 vg = nbp_vlan_group(p); 1823 break; 1824 default: 1825 return 0; 1826 } 1827 1828 if (vg) { 1829 /* we need to count all, even placeholder entries */ 1830 list_for_each_entry(v, &vg->vlan_list, vlist) 1831 numvls++; 1832 } 1833 1834 return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) + 1835 nla_total_size_64bit(sizeof(struct br_mcast_stats)) + 1836 (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) + 1837 nla_total_size(0); 1838 } 1839 1840 static int br_fill_linkxstats(struct sk_buff *skb, 1841 const struct net_device *dev, 1842 int *prividx, int attr) 1843 { 1844 unsigned int limit = U16_MAX - nla_total_size(0); 1845 struct nlattr *nla __maybe_unused; 1846 struct net_bridge_port *p = NULL; 1847 struct net_bridge_vlan_group *vg; 1848 struct net_bridge_vlan *v; 1849 struct net_bridge *br; 1850 struct nlattr *nest; 1851 int vl_idx = 0; 1852 1853 switch (attr) { 1854 case IFLA_STATS_LINK_XSTATS: 1855 br = netdev_priv(dev); 1856 vg = br_vlan_group(br); 1857 break; 1858 case IFLA_STATS_LINK_XSTATS_SLAVE: 1859 p = br_port_get_rtnl(dev); 1860 if (!p) 1861 return 0; 1862 limit -= nla_total_size_64bit(sizeof(p->stp_xstats)); 1863 br = p->br; 1864 vg = nbp_vlan_group(p); 1865 break; 1866 default: 1867 return -EINVAL; 1868 } 1869 1870 nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE); 1871 if (!nest) 1872 return -EMSGSIZE; 1873 1874 if (vg) { 1875 u16 pvid; 1876 1877 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1878 limit -= nla_total_size_64bit(sizeof(struct br_mcast_stats)); 1879 #endif 1880 pvid = br_get_pvid(vg); 1881 list_for_each_entry(v, &vg->vlan_list, vlist) { 1882 struct bridge_vlan_xstats vxi; 1883 struct pcpu_sw_netstats stats; 1884 1885 if (++vl_idx < *prividx) 1886 continue; 1887 1888 if (skb_tail_pointer(skb) - (unsigned char *)nest + 1889 nla_total_size(sizeof(vxi)) >= limit) 1890 goto nla_put_failure; 1891 1892 memset(&vxi, 0, sizeof(vxi)); 1893 vxi.vid = v->vid; 1894 vxi.flags = v->flags; 1895 if (v->vid == pvid) 1896 vxi.flags |= BRIDGE_VLAN_INFO_PVID; 1897 br_vlan_get_stats(v, &stats); 1898 vxi.rx_bytes = u64_stats_read(&stats.rx_bytes); 1899 vxi.rx_packets = u64_stats_read(&stats.rx_packets); 1900 vxi.tx_bytes = u64_stats_read(&stats.tx_bytes); 1901 vxi.tx_packets = u64_stats_read(&stats.tx_packets); 1902 1903 if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi)) 1904 goto nla_put_failure; 1905 } 1906 } 1907 1908 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1909 if (++vl_idx >= *prividx) { 1910 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST, 1911 sizeof(struct br_mcast_stats), 1912 BRIDGE_XSTATS_PAD); 1913 if (!nla) 1914 goto nla_put_failure; 1915 br_multicast_get_stats(br, p, nla_data(nla)); 1916 } 1917 #endif 1918 1919 if (p) { 1920 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP, 1921 sizeof(p->stp_xstats), 1922 BRIDGE_XSTATS_PAD); 1923 if (!nla) 1924 goto nla_put_failure; 1925 1926 spin_lock_bh(&br->lock); 1927 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats)); 1928 spin_unlock_bh(&br->lock); 1929 } 1930 1931 nla_nest_end(skb, nest); 1932 *prividx = 0; 1933 1934 return 0; 1935 1936 nla_put_failure: 1937 nla_nest_end(skb, nest); 1938 *prividx = vl_idx; 1939 1940 return -EMSGSIZE; 1941 } 1942 1943 static struct rtnl_af_ops br_af_ops __read_mostly = { 1944 .family = AF_BRIDGE, 1945 .get_link_af_size = br_get_link_af_size_filtered, 1946 }; 1947 1948 struct rtnl_link_ops br_link_ops __read_mostly = { 1949 .kind = "bridge", 1950 .priv_size = sizeof(struct net_bridge), 1951 .setup = br_dev_setup, 1952 .maxtype = IFLA_BR_MAX, 1953 .policy = br_policy, 1954 .validate = br_validate, 1955 .newlink = br_dev_newlink, 1956 .changelink = br_changelink, 1957 .dellink = br_dev_delete, 1958 .get_size = br_get_size, 1959 .fill_info = br_fill_info, 1960 .fill_linkxstats = br_fill_linkxstats, 1961 .get_linkxstats_size = br_get_linkxstats_size, 1962 1963 .slave_maxtype = IFLA_BRPORT_MAX, 1964 .slave_policy = br_port_policy, 1965 .slave_changelink = br_port_slave_changelink, 1966 .get_slave_size = br_port_get_slave_size, 1967 .fill_slave_info = br_port_fill_slave_info, 1968 }; 1969 1970 int __init br_netlink_init(void) 1971 { 1972 int err; 1973 1974 err = br_vlan_rtnl_init(); 1975 if (err) 1976 goto out; 1977 1978 err = rtnl_af_register(&br_af_ops); 1979 if (err) 1980 goto out_vlan; 1981 1982 err = rtnl_link_register(&br_link_ops); 1983 if (err) 1984 goto out_af; 1985 1986 return 0; 1987 1988 out_af: 1989 rtnl_af_unregister(&br_af_ops); 1990 out_vlan: 1991 br_vlan_rtnl_uninit(); 1992 out: 1993 return err; 1994 } 1995 1996 void br_netlink_fini(void) 1997 { 1998 br_vlan_rtnl_uninit(); 1999 rtnl_af_unregister(&br_af_ops); 2000 rtnl_link_unregister(&br_link_ops); 2001 } 2002