1 // SPDX-License-Identifier: GPL-2.0-or-later
2 /*
3 * Bridge netlink control interface
4 *
5 * Authors:
6 * Stephen Hemminger <shemminger@osdl.org>
7 */
8
9 #include <linux/kernel.h>
10 #include <linux/slab.h>
11 #include <linux/etherdevice.h>
12 #include <net/rtnetlink.h>
13 #include <net/net_namespace.h>
14 #include <net/sock.h>
15 #include <uapi/linux/if_bridge.h>
16
17 #include "br_private.h"
18 #include "br_private_stp.h"
19 #include "br_private_cfm.h"
20 #include "br_private_tunnel.h"
21 #include "br_private_mcast_eht.h"
22
__get_num_vlan_infos(struct net_bridge_vlan_group * vg,u32 filter_mask)23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
24 u32 filter_mask)
25 {
26 struct net_bridge_vlan *v;
27 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
28 u16 flags, pvid;
29 int num_vlans = 0;
30
31 if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
32 return 0;
33
34 pvid = br_get_pvid(vg);
35 /* Count number of vlan infos */
36 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
37 flags = 0;
38 /* only a context, bridge vlan not activated */
39 if (!br_vlan_should_use(v))
40 continue;
41 if (v->vid == pvid)
42 flags |= BRIDGE_VLAN_INFO_PVID;
43
44 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
45 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
46
47 if (vid_range_start == 0) {
48 goto initvars;
49 } else if ((v->vid - vid_range_end) == 1 &&
50 flags == vid_range_flags) {
51 vid_range_end = v->vid;
52 continue;
53 } else {
54 if ((vid_range_end - vid_range_start) > 0)
55 num_vlans += 2;
56 else
57 num_vlans += 1;
58 }
59 initvars:
60 vid_range_start = v->vid;
61 vid_range_end = v->vid;
62 vid_range_flags = flags;
63 }
64
65 if (vid_range_start != 0) {
66 if ((vid_range_end - vid_range_start) > 0)
67 num_vlans += 2;
68 else
69 num_vlans += 1;
70 }
71
72 return num_vlans;
73 }
74
br_get_num_vlan_infos(struct net_bridge_vlan_group * vg,u32 filter_mask)75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
76 u32 filter_mask)
77 {
78 int num_vlans;
79
80 if (!vg)
81 return 0;
82
83 if (filter_mask & RTEXT_FILTER_BRVLAN)
84 return vg->num_vlans;
85
86 rcu_read_lock();
87 num_vlans = __get_num_vlan_infos(vg, filter_mask);
88 rcu_read_unlock();
89
90 return num_vlans;
91 }
92
br_get_link_af_size_filtered(const struct net_device * dev,u32 filter_mask)93 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
94 u32 filter_mask)
95 {
96 struct net_bridge_vlan_group *vg = NULL;
97 struct net_bridge_port *p = NULL;
98 struct net_bridge *br = NULL;
99 u32 num_cfm_peer_mep_infos;
100 u32 num_cfm_mep_infos;
101 size_t vinfo_sz = 0;
102 int num_vlan_infos;
103
104 rcu_read_lock();
105 if (netif_is_bridge_port(dev)) {
106 p = br_port_get_check_rcu(dev);
107 if (p)
108 vg = nbp_vlan_group_rcu(p);
109 } else if (netif_is_bridge_master(dev)) {
110 br = netdev_priv(dev);
111 vg = br_vlan_group_rcu(br);
112 }
113 num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
114 rcu_read_unlock();
115
116 if (p && (p->flags & BR_VLAN_TUNNEL))
117 vinfo_sz += br_get_vlan_tunnel_info_size(vg);
118
119 /* Each VLAN is returned in bridge_vlan_info along with flags */
120 vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
121
122 if (p && vg && (filter_mask & RTEXT_FILTER_MST))
123 vinfo_sz += br_mst_info_size(vg);
124
125 if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
126 return vinfo_sz;
127
128 if (!br)
129 return vinfo_sz;
130
131 /* CFM status info must be added */
132 br_cfm_mep_count(br, &num_cfm_mep_infos);
133 br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
134
135 vinfo_sz += nla_total_size(0); /* IFLA_BRIDGE_CFM */
136 /* For each status struct the MEP instance (u32) is added */
137 /* MEP instance (u32) + br_cfm_mep_status */
138 vinfo_sz += num_cfm_mep_infos *
139 /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
140 (nla_total_size(sizeof(u32))
141 /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
142 + nla_total_size(sizeof(u32))
143 /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
144 + nla_total_size(sizeof(u32))
145 /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
146 + nla_total_size(sizeof(u32)));
147 /* MEP instance (u32) + br_cfm_cc_peer_status */
148 vinfo_sz += num_cfm_peer_mep_infos *
149 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
150 (nla_total_size(sizeof(u32))
151 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
152 + nla_total_size(sizeof(u32))
153 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
154 + nla_total_size(sizeof(u32))
155 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
156 + nla_total_size(sizeof(u32))
157 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
158 + nla_total_size(sizeof(u8))
159 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
160 + nla_total_size(sizeof(u8))
161 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
162 + nla_total_size(sizeof(u32))
163 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
164 + nla_total_size(sizeof(u32))
165 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
166 + nla_total_size(sizeof(u32)));
167
168 return vinfo_sz;
169 }
170
br_port_info_size(void)171 static inline size_t br_port_info_size(void)
172 {
173 return nla_total_size(1) /* IFLA_BRPORT_STATE */
174 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */
175 + nla_total_size(4) /* IFLA_BRPORT_COST */
176 + nla_total_size(1) /* IFLA_BRPORT_MODE */
177 + nla_total_size(1) /* IFLA_BRPORT_GUARD */
178 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */
179 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */
180 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */
181 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */
182 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */
183 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */
184 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */
185 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */
186 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */
187 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */
188 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */
189 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */
190 + nla_total_size(1) /* IFLA_BRPORT_LOCKED */
191 + nla_total_size(1) /* IFLA_BRPORT_MAB */
192 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */
193 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */
194 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */
195 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_PORT */
196 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_COST */
197 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_ID */
198 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_NO */
199 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
200 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_CONFIG_PENDING */
201 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
202 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
203 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
204 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
205 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MULTICAST_ROUTER */
206 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_N_GROUPS */
207 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_MAX_GROUPS */
208 #endif
209 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_GROUP_FWD_MASK */
210 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_RING_OPEN */
211 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_IN_OPEN */
212 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
213 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
214 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_BACKUP_NHID */
215 + 0;
216 }
217
br_nlmsg_size(struct net_device * dev,u32 filter_mask)218 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
219 {
220 return NLMSG_ALIGN(sizeof(struct ifinfomsg))
221 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
222 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
223 + nla_total_size(4) /* IFLA_MASTER */
224 + nla_total_size(4) /* IFLA_MTU */
225 + nla_total_size(4) /* IFLA_LINK */
226 + nla_total_size(1) /* IFLA_OPERSTATE */
227 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
228 + nla_total_size(br_get_link_af_size_filtered(dev,
229 filter_mask)) /* IFLA_AF_SPEC */
230 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
231 }
232
br_port_fill_attrs(struct sk_buff * skb,const struct net_bridge_port * p)233 static int br_port_fill_attrs(struct sk_buff *skb,
234 const struct net_bridge_port *p)
235 {
236 u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
237 struct net_bridge_port *backup_p;
238 u64 timerval;
239
240 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
241 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
242 nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
243 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
244 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
245 nla_put_u8(skb, IFLA_BRPORT_PROTECT,
246 !!(p->flags & BR_ROOT_BLOCK)) ||
247 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
248 !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
249 nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
250 !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
251 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
252 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
253 !!(p->flags & BR_FLOOD)) ||
254 nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
255 !!(p->flags & BR_MCAST_FLOOD)) ||
256 nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
257 !!(p->flags & BR_BCAST_FLOOD)) ||
258 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
259 nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
260 !!(p->flags & BR_PROXYARP_WIFI)) ||
261 nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
262 &p->designated_root) ||
263 nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
264 &p->designated_bridge) ||
265 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
266 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
267 nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
268 nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
269 nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
270 p->topology_change_ack) ||
271 nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
272 nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
273 BR_VLAN_TUNNEL)) ||
274 nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
275 nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
276 !!(p->flags & BR_NEIGH_SUPPRESS)) ||
277 nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
278 BR_MRP_LOST_CONT)) ||
279 nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
280 !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
281 nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)) ||
282 nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(p->flags & BR_PORT_LOCKED)) ||
283 nla_put_u8(skb, IFLA_BRPORT_MAB, !!(p->flags & BR_PORT_MAB)) ||
284 nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
285 !!(p->flags & BR_NEIGH_VLAN_SUPPRESS)))
286 return -EMSGSIZE;
287
288 timerval = br_timer_value(&p->message_age_timer);
289 if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
290 IFLA_BRPORT_PAD))
291 return -EMSGSIZE;
292 timerval = br_timer_value(&p->forward_delay_timer);
293 if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
294 IFLA_BRPORT_PAD))
295 return -EMSGSIZE;
296 timerval = br_timer_value(&p->hold_timer);
297 if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
298 IFLA_BRPORT_PAD))
299 return -EMSGSIZE;
300
301 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
302 if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
303 p->multicast_ctx.multicast_router) ||
304 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
305 p->multicast_eht_hosts_limit) ||
306 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
307 p->multicast_eht_hosts_cnt) ||
308 nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS,
309 br_multicast_ngroups_get(&p->multicast_ctx)) ||
310 nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS,
311 br_multicast_ngroups_get_max(&p->multicast_ctx)))
312 return -EMSGSIZE;
313 #endif
314
315 /* we might be called only with br->lock */
316 rcu_read_lock();
317 backup_p = rcu_dereference(p->backup_port);
318 if (backup_p)
319 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
320 backup_p->dev->ifindex);
321 rcu_read_unlock();
322
323 if (p->backup_nhid &&
324 nla_put_u32(skb, IFLA_BRPORT_BACKUP_NHID, p->backup_nhid))
325 return -EMSGSIZE;
326
327 return 0;
328 }
329
br_fill_ifvlaninfo_range(struct sk_buff * skb,u16 vid_start,u16 vid_end,u16 flags)330 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
331 u16 vid_end, u16 flags)
332 {
333 struct bridge_vlan_info vinfo;
334
335 if ((vid_end - vid_start) > 0) {
336 /* add range to skb */
337 vinfo.vid = vid_start;
338 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
339 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
340 sizeof(vinfo), &vinfo))
341 goto nla_put_failure;
342
343 vinfo.vid = vid_end;
344 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
345 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
346 sizeof(vinfo), &vinfo))
347 goto nla_put_failure;
348 } else {
349 vinfo.vid = vid_start;
350 vinfo.flags = flags;
351 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
352 sizeof(vinfo), &vinfo))
353 goto nla_put_failure;
354 }
355
356 return 0;
357
358 nla_put_failure:
359 return -EMSGSIZE;
360 }
361
br_fill_ifvlaninfo_compressed(struct sk_buff * skb,struct net_bridge_vlan_group * vg)362 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
363 struct net_bridge_vlan_group *vg)
364 {
365 struct net_bridge_vlan *v;
366 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
367 u16 flags, pvid;
368 int err = 0;
369
370 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
371 * and mark vlan info with begin and end flags
372 * if vlaninfo represents a range
373 */
374 pvid = br_get_pvid(vg);
375 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
376 flags = 0;
377 if (!br_vlan_should_use(v))
378 continue;
379 if (v->vid == pvid)
380 flags |= BRIDGE_VLAN_INFO_PVID;
381
382 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
383 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
384
385 if (vid_range_start == 0) {
386 goto initvars;
387 } else if ((v->vid - vid_range_end) == 1 &&
388 flags == vid_range_flags) {
389 vid_range_end = v->vid;
390 continue;
391 } else {
392 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
393 vid_range_end,
394 vid_range_flags);
395 if (err)
396 return err;
397 }
398
399 initvars:
400 vid_range_start = v->vid;
401 vid_range_end = v->vid;
402 vid_range_flags = flags;
403 }
404
405 if (vid_range_start != 0) {
406 /* Call it once more to send any left over vlans */
407 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
408 vid_range_end,
409 vid_range_flags);
410 if (err)
411 return err;
412 }
413
414 return 0;
415 }
416
br_fill_ifvlaninfo(struct sk_buff * skb,struct net_bridge_vlan_group * vg)417 static int br_fill_ifvlaninfo(struct sk_buff *skb,
418 struct net_bridge_vlan_group *vg)
419 {
420 struct bridge_vlan_info vinfo;
421 struct net_bridge_vlan *v;
422 u16 pvid;
423
424 pvid = br_get_pvid(vg);
425 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
426 if (!br_vlan_should_use(v))
427 continue;
428
429 vinfo.vid = v->vid;
430 vinfo.flags = 0;
431 if (v->vid == pvid)
432 vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
433
434 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
435 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
436
437 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
438 sizeof(vinfo), &vinfo))
439 goto nla_put_failure;
440 }
441
442 return 0;
443
444 nla_put_failure:
445 return -EMSGSIZE;
446 }
447
448 /*
449 * Create one netlink message for one interface
450 * Contains port and master info as well as carrier and bridge state.
451 */
br_fill_ifinfo(struct sk_buff * skb,const struct net_bridge_port * port,u32 pid,u32 seq,int event,unsigned int flags,u32 filter_mask,const struct net_device * dev,bool getlink)452 static int br_fill_ifinfo(struct sk_buff *skb,
453 const struct net_bridge_port *port,
454 u32 pid, u32 seq, int event, unsigned int flags,
455 u32 filter_mask, const struct net_device *dev,
456 bool getlink)
457 {
458 u8 operstate = netif_running(dev) ? READ_ONCE(dev->operstate) :
459 IF_OPER_DOWN;
460 struct nlattr *af = NULL;
461 struct net_bridge *br;
462 struct ifinfomsg *hdr;
463 struct nlmsghdr *nlh;
464
465 if (port)
466 br = port->br;
467 else
468 br = netdev_priv(dev);
469
470 br_debug(br, "br_fill_ifinfo event %d port %s master %s\n",
471 event, dev->name, br->dev->name);
472
473 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
474 if (nlh == NULL)
475 return -EMSGSIZE;
476
477 hdr = nlmsg_data(nlh);
478 hdr->ifi_family = AF_BRIDGE;
479 hdr->__ifi_pad = 0;
480 hdr->ifi_type = dev->type;
481 hdr->ifi_index = dev->ifindex;
482 hdr->ifi_flags = netif_get_flags(dev);
483 hdr->ifi_change = 0;
484
485 if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
486 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
487 nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
488 nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
489 (dev->addr_len &&
490 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
491 (dev->ifindex != dev_get_iflink(dev) &&
492 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
493 goto nla_put_failure;
494
495 if (event == RTM_NEWLINK && port) {
496 struct nlattr *nest;
497
498 nest = nla_nest_start(skb, IFLA_PROTINFO);
499 if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
500 goto nla_put_failure;
501 nla_nest_end(skb, nest);
502 }
503
504 if (filter_mask & (RTEXT_FILTER_BRVLAN |
505 RTEXT_FILTER_BRVLAN_COMPRESSED |
506 RTEXT_FILTER_MRP |
507 RTEXT_FILTER_CFM_CONFIG |
508 RTEXT_FILTER_CFM_STATUS |
509 RTEXT_FILTER_MST)) {
510 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
511 if (!af)
512 goto nla_put_failure;
513 }
514
515 /* Check if the VID information is requested */
516 if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
517 (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
518 struct net_bridge_vlan_group *vg;
519 int err;
520
521 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
522 rcu_read_lock();
523 if (port)
524 vg = nbp_vlan_group_rcu(port);
525 else
526 vg = br_vlan_group_rcu(br);
527
528 if (!vg || !vg->num_vlans) {
529 rcu_read_unlock();
530 goto done;
531 }
532 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
533 err = br_fill_ifvlaninfo_compressed(skb, vg);
534 else
535 err = br_fill_ifvlaninfo(skb, vg);
536
537 if (port && (port->flags & BR_VLAN_TUNNEL))
538 err = br_fill_vlan_tunnel_info(skb, vg);
539 rcu_read_unlock();
540 if (err)
541 goto nla_put_failure;
542 }
543
544 if (filter_mask & RTEXT_FILTER_MRP) {
545 int err;
546
547 if (!br_mrp_enabled(br) || port)
548 goto done;
549
550 rcu_read_lock();
551 err = br_mrp_fill_info(skb, br);
552 rcu_read_unlock();
553
554 if (err)
555 goto nla_put_failure;
556 }
557
558 if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
559 struct nlattr *cfm_nest = NULL;
560 int err;
561
562 if (!br_cfm_created(br) || port)
563 goto done;
564
565 cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
566 if (!cfm_nest)
567 goto nla_put_failure;
568
569 if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
570 rcu_read_lock();
571 err = br_cfm_config_fill_info(skb, br);
572 rcu_read_unlock();
573 if (err)
574 goto nla_put_failure;
575 }
576
577 if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
578 rcu_read_lock();
579 err = br_cfm_status_fill_info(skb, br, getlink);
580 rcu_read_unlock();
581 if (err)
582 goto nla_put_failure;
583 }
584
585 nla_nest_end(skb, cfm_nest);
586 }
587
588 if ((filter_mask & RTEXT_FILTER_MST) &&
589 br_opt_get(br, BROPT_MST_ENABLED) && port) {
590 const struct net_bridge_vlan_group *vg = nbp_vlan_group(port);
591 struct nlattr *mst_nest;
592 int err;
593
594 if (!vg || !vg->num_vlans)
595 goto done;
596
597 mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST);
598 if (!mst_nest)
599 goto nla_put_failure;
600
601 err = br_mst_fill_info(skb, vg);
602 if (err)
603 goto nla_put_failure;
604
605 nla_nest_end(skb, mst_nest);
606 }
607
608 done:
609 if (af) {
610 if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0))
611 nla_nest_end(skb, af);
612 else
613 nla_nest_cancel(skb, af);
614 }
615
616 nlmsg_end(skb, nlh);
617 return 0;
618
619 nla_put_failure:
620 nlmsg_cancel(skb, nlh);
621 return -EMSGSIZE;
622 }
623
br_info_notify(int event,const struct net_bridge * br,const struct net_bridge_port * port,u32 filter)624 void br_info_notify(int event, const struct net_bridge *br,
625 const struct net_bridge_port *port, u32 filter)
626 {
627 struct net_device *dev;
628 struct sk_buff *skb;
629 int err = -ENOBUFS;
630 struct net *net;
631 u16 port_no = 0;
632
633 if (WARN_ON(!port && !br))
634 return;
635
636 if (port) {
637 dev = port->dev;
638 br = port->br;
639 port_no = port->port_no;
640 } else {
641 dev = br->dev;
642 }
643
644 net = dev_net(dev);
645 br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
646
647 skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
648 if (skb == NULL)
649 goto errout;
650
651 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
652 if (err < 0) {
653 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
654 WARN_ON(err == -EMSGSIZE);
655 kfree_skb(skb);
656 goto errout;
657 }
658 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
659 return;
660 errout:
661 rtnl_set_sk_err(net, RTNLGRP_LINK, err);
662 }
663
664 /* Notify listeners of a change in bridge or port information */
br_ifinfo_notify(int event,const struct net_bridge * br,const struct net_bridge_port * port)665 void br_ifinfo_notify(int event, const struct net_bridge *br,
666 const struct net_bridge_port *port)
667 {
668 u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
669
670 br_info_notify(event, br, port, filter);
671 }
672
673 /*
674 * Dump information about all ports, in response to GETLINK
675 */
br_getlink(struct sk_buff * skb,u32 pid,u32 seq,struct net_device * dev,u32 filter_mask,int nlflags)676 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
677 struct net_device *dev, u32 filter_mask, int nlflags)
678 {
679 struct net_bridge_port *port = br_port_get_rtnl(dev);
680
681 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
682 !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
683 !(filter_mask & RTEXT_FILTER_MRP) &&
684 !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
685 !(filter_mask & RTEXT_FILTER_CFM_STATUS))
686 return 0;
687
688 return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
689 filter_mask, dev, true);
690 }
691
br_vlan_info(struct net_bridge * br,struct net_bridge_port * p,int cmd,struct bridge_vlan_info * vinfo,bool * changed,struct netlink_ext_ack * extack)692 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
693 int cmd, struct bridge_vlan_info *vinfo, bool *changed,
694 struct netlink_ext_ack *extack)
695 {
696 bool curr_change;
697 int err = 0;
698
699 switch (cmd) {
700 case RTM_SETLINK:
701 if (p) {
702 /* if the MASTER flag is set this will act on the global
703 * per-VLAN entry as well
704 */
705 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
706 &curr_change, extack);
707 } else {
708 vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
709 err = br_vlan_add(br, vinfo->vid, vinfo->flags,
710 &curr_change, extack);
711 }
712 if (curr_change)
713 *changed = true;
714 break;
715
716 case RTM_DELLINK:
717 if (p) {
718 if (!nbp_vlan_delete(p, vinfo->vid))
719 *changed = true;
720
721 if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
722 !br_vlan_delete(p->br, vinfo->vid))
723 *changed = true;
724 } else if (!br_vlan_delete(br, vinfo->vid)) {
725 *changed = true;
726 }
727 break;
728 }
729
730 return err;
731 }
732
br_process_vlan_info(struct net_bridge * br,struct net_bridge_port * p,int cmd,struct bridge_vlan_info * vinfo_curr,struct bridge_vlan_info ** vinfo_last,bool * changed,struct netlink_ext_ack * extack)733 int br_process_vlan_info(struct net_bridge *br,
734 struct net_bridge_port *p, int cmd,
735 struct bridge_vlan_info *vinfo_curr,
736 struct bridge_vlan_info **vinfo_last,
737 bool *changed,
738 struct netlink_ext_ack *extack)
739 {
740 int err, rtm_cmd;
741
742 if (!br_vlan_valid_id(vinfo_curr->vid, extack))
743 return -EINVAL;
744
745 /* needed for vlan-only NEWVLAN/DELVLAN notifications */
746 rtm_cmd = br_afspec_cmd_to_rtm(cmd);
747
748 if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
749 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
750 return -EINVAL;
751 *vinfo_last = vinfo_curr;
752 return 0;
753 }
754
755 if (*vinfo_last) {
756 struct bridge_vlan_info tmp_vinfo;
757 int v, v_change_start = 0;
758
759 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
760 return -EINVAL;
761
762 memcpy(&tmp_vinfo, *vinfo_last,
763 sizeof(struct bridge_vlan_info));
764 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
765 bool curr_change = false;
766
767 tmp_vinfo.vid = v;
768 err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
769 extack);
770 if (err)
771 break;
772 if (curr_change) {
773 *changed = curr_change;
774 if (!v_change_start)
775 v_change_start = v;
776 } else {
777 /* nothing to notify yet */
778 if (!v_change_start)
779 continue;
780 br_vlan_notify(br, p, v_change_start,
781 v - 1, rtm_cmd);
782 v_change_start = 0;
783 }
784 cond_resched();
785 }
786 /* v_change_start is set only if the last/whole range changed */
787 if (v_change_start)
788 br_vlan_notify(br, p, v_change_start,
789 v - 1, rtm_cmd);
790
791 *vinfo_last = NULL;
792
793 return err;
794 }
795
796 err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
797 if (*changed)
798 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
799
800 return err;
801 }
802
br_afspec(struct net_bridge * br,struct net_bridge_port * p,struct nlattr * af_spec,int cmd,bool * changed,struct netlink_ext_ack * extack)803 static int br_afspec(struct net_bridge *br,
804 struct net_bridge_port *p,
805 struct nlattr *af_spec,
806 int cmd, bool *changed,
807 struct netlink_ext_ack *extack)
808 {
809 struct bridge_vlan_info *vinfo_curr = NULL;
810 struct bridge_vlan_info *vinfo_last = NULL;
811 struct nlattr *attr;
812 struct vtunnel_info tinfo_last = {};
813 struct vtunnel_info tinfo_curr = {};
814 int err = 0, rem;
815
816 nla_for_each_nested(attr, af_spec, rem) {
817 err = 0;
818 switch (nla_type(attr)) {
819 case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
820 if (!p || !(p->flags & BR_VLAN_TUNNEL))
821 return -EINVAL;
822 err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
823 if (err)
824 return err;
825 err = br_process_vlan_tunnel_info(br, p, cmd,
826 &tinfo_curr,
827 &tinfo_last,
828 changed);
829 if (err)
830 return err;
831 break;
832 case IFLA_BRIDGE_VLAN_INFO:
833 if (nla_len(attr) != sizeof(struct bridge_vlan_info))
834 return -EINVAL;
835 vinfo_curr = nla_data(attr);
836 err = br_process_vlan_info(br, p, cmd, vinfo_curr,
837 &vinfo_last, changed,
838 extack);
839 if (err)
840 return err;
841 break;
842 case IFLA_BRIDGE_MRP:
843 err = br_mrp_parse(br, p, attr, cmd, extack);
844 if (err)
845 return err;
846 break;
847 case IFLA_BRIDGE_CFM:
848 err = br_cfm_parse(br, p, attr, cmd, extack);
849 if (err)
850 return err;
851 break;
852 case IFLA_BRIDGE_MST:
853 if (!p) {
854 NL_SET_ERR_MSG(extack,
855 "MST states can only be set on bridge ports");
856 return -EINVAL;
857 }
858
859 if (cmd != RTM_SETLINK) {
860 NL_SET_ERR_MSG(extack,
861 "MST states can only be set through RTM_SETLINK");
862 return -EINVAL;
863 }
864
865 err = br_mst_process(p, attr, extack);
866 if (err)
867 return err;
868 break;
869 }
870 }
871
872 return err;
873 }
874
875 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
876 [IFLA_BRPORT_UNSPEC] = { .strict_start_type =
877 IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 },
878 [IFLA_BRPORT_STATE] = { .type = NLA_U8 },
879 [IFLA_BRPORT_COST] = { .type = NLA_U32 },
880 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 },
881 [IFLA_BRPORT_MODE] = { .type = NLA_U8 },
882 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 },
883 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 },
884 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
885 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 },
886 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
887 [IFLA_BRPORT_PROXYARP] = { .type = NLA_U8 },
888 [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
889 [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
890 [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
891 [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
892 [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
893 [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
894 [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
895 [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
896 [IFLA_BRPORT_ISOLATED] = { .type = NLA_U8 },
897 [IFLA_BRPORT_LOCKED] = { .type = NLA_U8 },
898 [IFLA_BRPORT_MAB] = { .type = NLA_U8 },
899 [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
900 [IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
901 [IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT },
902 [IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 },
903 [IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1),
904 [IFLA_BRPORT_BACKUP_NHID] = { .type = NLA_U32 },
905 };
906
907 /* Change the state of the port and notify spanning tree */
br_set_port_state(struct net_bridge_port * p,u8 state)908 static int br_set_port_state(struct net_bridge_port *p, u8 state)
909 {
910 if (state > BR_STATE_BLOCKING)
911 return -EINVAL;
912
913 /* if kernel STP is running, don't allow changes */
914 if (p->br->stp_enabled == BR_KERNEL_STP)
915 return -EBUSY;
916
917 /* if device is not up, change is not allowed
918 * if link is not present, only allowable state is disabled
919 */
920 if (!netif_running(p->dev) ||
921 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
922 return -ENETDOWN;
923
924 br_set_state(p, state);
925 br_port_state_selection(p->br);
926 return 0;
927 }
928
929 /* Set/clear or port flags based on attribute */
br_set_port_flag(struct net_bridge_port * p,struct nlattr * tb[],int attrtype,unsigned long mask)930 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
931 int attrtype, unsigned long mask)
932 {
933 if (!tb[attrtype])
934 return;
935
936 if (nla_get_u8(tb[attrtype]))
937 p->flags |= mask;
938 else
939 p->flags &= ~mask;
940 }
941
942 /* Process bridge protocol info on port */
br_setport(struct net_bridge_port * p,struct nlattr * tb[],struct netlink_ext_ack * extack)943 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
944 struct netlink_ext_ack *extack)
945 {
946 unsigned long old_flags, changed_mask;
947 bool br_vlan_tunnel_old;
948 int err;
949
950 old_flags = p->flags;
951 br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
952
953 br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
954 br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
955 br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
956 BR_MULTICAST_FAST_LEAVE);
957 br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
958 br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
959 br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
960 br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
961 br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
962 BR_MULTICAST_TO_UNICAST);
963 br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
964 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
965 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
966 br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
967 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
968 br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
969 br_set_port_flag(p, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED);
970 br_set_port_flag(p, tb, IFLA_BRPORT_MAB, BR_PORT_MAB);
971 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
972 BR_NEIGH_VLAN_SUPPRESS);
973
974 if ((p->flags & BR_PORT_MAB) &&
975 (!(p->flags & BR_PORT_LOCKED) || !(p->flags & BR_LEARNING))) {
976 NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled");
977 p->flags = old_flags;
978 return -EINVAL;
979 } else if (!(p->flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) {
980 struct net_bridge_fdb_flush_desc desc = {
981 .flags = BIT(BR_FDB_LOCKED),
982 .flags_mask = BIT(BR_FDB_LOCKED),
983 .port_ifindex = p->dev->ifindex,
984 };
985
986 br_fdb_flush(p->br, &desc);
987 }
988
989 changed_mask = old_flags ^ p->flags;
990
991 err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack);
992 if (err) {
993 p->flags = old_flags;
994 return err;
995 }
996
997 if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
998 nbp_vlan_tunnel_info_flush(p);
999
1000 br_port_flags_change(p, changed_mask);
1001
1002 if (tb[IFLA_BRPORT_COST]) {
1003 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
1004 if (err)
1005 return err;
1006 }
1007
1008 if (tb[IFLA_BRPORT_PRIORITY]) {
1009 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
1010 if (err)
1011 return err;
1012 }
1013
1014 if (tb[IFLA_BRPORT_STATE]) {
1015 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
1016 if (err)
1017 return err;
1018 }
1019
1020 if (tb[IFLA_BRPORT_FLUSH])
1021 br_fdb_delete_by_port(p->br, p, 0, 0);
1022
1023 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1024 if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
1025 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
1026
1027 err = br_multicast_set_port_router(&p->multicast_ctx,
1028 mcast_router);
1029 if (err)
1030 return err;
1031 }
1032
1033 if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
1034 u32 hlimit;
1035
1036 hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
1037 err = br_multicast_eht_set_hosts_limit(p, hlimit);
1038 if (err)
1039 return err;
1040 }
1041
1042 if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) {
1043 u32 max_groups;
1044
1045 max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]);
1046 br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups);
1047 }
1048 #endif
1049
1050 if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
1051 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
1052
1053 if (fwd_mask & BR_GROUPFWD_MACPAUSE)
1054 return -EINVAL;
1055 p->group_fwd_mask = fwd_mask;
1056 }
1057
1058 if (tb[IFLA_BRPORT_BACKUP_PORT]) {
1059 struct net_device *backup_dev = NULL;
1060 u32 backup_ifindex;
1061
1062 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
1063 if (backup_ifindex) {
1064 backup_dev = __dev_get_by_index(dev_net(p->dev),
1065 backup_ifindex);
1066 if (!backup_dev)
1067 return -ENOENT;
1068 }
1069
1070 err = nbp_backup_change(p, backup_dev);
1071 if (err)
1072 return err;
1073 }
1074
1075 if (tb[IFLA_BRPORT_BACKUP_NHID]) {
1076 u32 backup_nhid = nla_get_u32(tb[IFLA_BRPORT_BACKUP_NHID]);
1077
1078 WRITE_ONCE(p->backup_nhid, backup_nhid);
1079 }
1080
1081 return 0;
1082 }
1083
1084 /* Change state and parameters on port. */
br_setlink(struct net_device * dev,struct nlmsghdr * nlh,u16 flags,struct netlink_ext_ack * extack)1085 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
1086 struct netlink_ext_ack *extack)
1087 {
1088 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1089 struct nlattr *tb[IFLA_BRPORT_MAX + 1];
1090 struct net_bridge_port *p;
1091 struct nlattr *protinfo;
1092 struct nlattr *afspec;
1093 bool changed = false;
1094 int err = 0;
1095
1096 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
1097 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1098 if (!protinfo && !afspec)
1099 return 0;
1100
1101 p = br_port_get_rtnl(dev);
1102 /* We want to accept dev as bridge itself if the AF_SPEC
1103 * is set to see if someone is setting vlan info on the bridge
1104 */
1105 if (!p && !afspec)
1106 return -EINVAL;
1107
1108 if (p && protinfo) {
1109 if (protinfo->nla_type & NLA_F_NESTED) {
1110 err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1111 protinfo,
1112 br_port_policy,
1113 NULL);
1114 if (err)
1115 return err;
1116
1117 spin_lock_bh(&p->br->lock);
1118 err = br_setport(p, tb, extack);
1119 spin_unlock_bh(&p->br->lock);
1120 } else {
1121 /* Binary compatibility with old RSTP */
1122 if (nla_len(protinfo) < sizeof(u8))
1123 return -EINVAL;
1124
1125 spin_lock_bh(&p->br->lock);
1126 err = br_set_port_state(p, nla_get_u8(protinfo));
1127 spin_unlock_bh(&p->br->lock);
1128 }
1129 if (err)
1130 goto out;
1131 changed = true;
1132 }
1133
1134 if (afspec)
1135 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1136
1137 if (changed)
1138 br_ifinfo_notify(RTM_NEWLINK, br, p);
1139 out:
1140 return err;
1141 }
1142
1143 /* Delete port information */
br_dellink(struct net_device * dev,struct nlmsghdr * nlh,u16 flags)1144 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1145 {
1146 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1147 struct net_bridge_port *p;
1148 struct nlattr *afspec;
1149 bool changed = false;
1150 int err = 0;
1151
1152 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1153 if (!afspec)
1154 return 0;
1155
1156 p = br_port_get_rtnl(dev);
1157 /* We want to accept dev as bridge itself as well */
1158 if (!p && !netif_is_bridge_master(dev))
1159 return -EINVAL;
1160
1161 err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1162 if (changed)
1163 /* Send RTM_NEWLINK because userspace
1164 * expects RTM_NEWLINK for vlan dels
1165 */
1166 br_ifinfo_notify(RTM_NEWLINK, br, p);
1167
1168 return err;
1169 }
1170
br_validate(struct nlattr * tb[],struct nlattr * data[],struct netlink_ext_ack * extack)1171 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1172 struct netlink_ext_ack *extack)
1173 {
1174 if (tb[IFLA_ADDRESS]) {
1175 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1176 return -EINVAL;
1177 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1178 return -EADDRNOTAVAIL;
1179 }
1180
1181 if (!data)
1182 return 0;
1183
1184 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1185 if (data[IFLA_BR_VLAN_PROTOCOL] &&
1186 !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1187 return -EPROTONOSUPPORT;
1188
1189 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1190 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1191
1192 if (defpvid >= VLAN_VID_MASK)
1193 return -EINVAL;
1194 }
1195 #endif
1196
1197 return 0;
1198 }
1199
br_port_slave_changelink(struct net_device * brdev,struct net_device * dev,struct nlattr * tb[],struct nlattr * data[],struct netlink_ext_ack * extack)1200 static int br_port_slave_changelink(struct net_device *brdev,
1201 struct net_device *dev,
1202 struct nlattr *tb[],
1203 struct nlattr *data[],
1204 struct netlink_ext_ack *extack)
1205 {
1206 struct net_bridge *br = netdev_priv(brdev);
1207 int ret;
1208
1209 if (!data)
1210 return 0;
1211
1212 spin_lock_bh(&br->lock);
1213 ret = br_setport(br_port_get_rtnl(dev), data, extack);
1214 spin_unlock_bh(&br->lock);
1215
1216 return ret;
1217 }
1218
br_port_fill_slave_info(struct sk_buff * skb,const struct net_device * brdev,const struct net_device * dev)1219 static int br_port_fill_slave_info(struct sk_buff *skb,
1220 const struct net_device *brdev,
1221 const struct net_device *dev)
1222 {
1223 return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1224 }
1225
br_port_get_slave_size(const struct net_device * brdev,const struct net_device * dev)1226 static size_t br_port_get_slave_size(const struct net_device *brdev,
1227 const struct net_device *dev)
1228 {
1229 return br_port_info_size();
1230 }
1231
1232 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1233 [IFLA_BR_UNSPEC] = { .strict_start_type =
1234 IFLA_BR_FDB_N_LEARNED },
1235 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 },
1236 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 },
1237 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 },
1238 [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1239 [IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1240 [IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1241 [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1242 [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1243 [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1244 [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1245 .len = ETH_ALEN },
1246 [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1247 [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1248 [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1249 [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1250 [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1251 [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1252 [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1253 [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1254 [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1255 [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1256 [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1257 [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1258 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1259 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1260 [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1261 [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1262 [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1263 [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1264 [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1265 [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1266 [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1267 [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1268 [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1269 [IFLA_BR_MULTI_BOOLOPT] =
1270 NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1271 [IFLA_BR_FDB_N_LEARNED] = { .type = NLA_REJECT },
1272 [IFLA_BR_FDB_MAX_LEARNED] = { .type = NLA_U32 },
1273 [IFLA_BR_STP_MODE] = NLA_POLICY_RANGE(NLA_U32,
1274 BR_STP_MODE_AUTO,
1275 BR_STP_MODE_MAX),
1276 };
1277
br_changelink(struct net_device * brdev,struct nlattr * tb[],struct nlattr * data[],struct netlink_ext_ack * extack)1278 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1279 struct nlattr *data[],
1280 struct netlink_ext_ack *extack)
1281 {
1282 struct net_bridge *br = netdev_priv(brdev);
1283 int err;
1284
1285 if (!data)
1286 return 0;
1287
1288 if (data[IFLA_BR_FORWARD_DELAY]) {
1289 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1290 if (err)
1291 return err;
1292 }
1293
1294 if (data[IFLA_BR_HELLO_TIME]) {
1295 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1296 if (err)
1297 return err;
1298 }
1299
1300 if (data[IFLA_BR_MAX_AGE]) {
1301 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1302 if (err)
1303 return err;
1304 }
1305
1306 if (data[IFLA_BR_AGEING_TIME]) {
1307 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1308 if (err)
1309 return err;
1310 }
1311
1312 if (data[IFLA_BR_STP_MODE]) {
1313 u32 mode = nla_get_u32(data[IFLA_BR_STP_MODE]);
1314
1315 if (mode != br->stp_mode) {
1316 bool stp_off = br->stp_enabled == BR_NO_STP ||
1317 (data[IFLA_BR_STP_STATE] &&
1318 !nla_get_u32(data[IFLA_BR_STP_STATE]));
1319
1320 if (!stp_off) {
1321 NL_SET_ERR_MSG_MOD(extack,
1322 "Can't change STP mode while STP is enabled");
1323 return -EBUSY;
1324 }
1325 }
1326 br->stp_mode = mode;
1327 }
1328
1329 if (data[IFLA_BR_STP_STATE]) {
1330 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1331
1332 err = br_stp_set_enabled(br, stp_enabled, extack);
1333 if (err)
1334 return err;
1335 }
1336
1337 if (data[IFLA_BR_PRIORITY]) {
1338 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1339
1340 br_stp_set_bridge_priority(br, priority);
1341 }
1342
1343 if (data[IFLA_BR_VLAN_FILTERING]) {
1344 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1345
1346 err = br_vlan_filter_toggle(br, vlan_filter, extack);
1347 if (err)
1348 return err;
1349 }
1350
1351 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1352 if (data[IFLA_BR_VLAN_PROTOCOL]) {
1353 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1354
1355 err = __br_vlan_set_proto(br, vlan_proto, extack);
1356 if (err)
1357 return err;
1358 }
1359
1360 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1361 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1362
1363 err = __br_vlan_set_default_pvid(br, defpvid, extack);
1364 if (err)
1365 return err;
1366 }
1367
1368 if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1369 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1370
1371 err = br_vlan_set_stats(br, vlan_stats);
1372 if (err)
1373 return err;
1374 }
1375
1376 if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1377 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1378
1379 err = br_vlan_set_stats_per_port(br, per_port);
1380 if (err)
1381 return err;
1382 }
1383 #endif
1384
1385 if (data[IFLA_BR_GROUP_FWD_MASK]) {
1386 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1387
1388 if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1389 return -EINVAL;
1390 br->group_fwd_mask = fwd_mask;
1391 }
1392
1393 if (data[IFLA_BR_GROUP_ADDR]) {
1394 u8 new_addr[ETH_ALEN];
1395
1396 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1397 return -EINVAL;
1398 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1399 if (!is_link_local_ether_addr(new_addr))
1400 return -EINVAL;
1401 if (new_addr[5] == 1 || /* 802.3x Pause address */
1402 new_addr[5] == 2 || /* 802.3ad Slow protocols */
1403 new_addr[5] == 3) /* 802.1X PAE address */
1404 return -EINVAL;
1405 spin_lock_bh(&br->lock);
1406 memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1407 spin_unlock_bh(&br->lock);
1408 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1409 br_recalculate_fwd_mask(br);
1410 }
1411
1412 if (data[IFLA_BR_FDB_FLUSH]) {
1413 struct net_bridge_fdb_flush_desc desc = {
1414 .flags_mask = BIT(BR_FDB_STATIC)
1415 };
1416
1417 br_fdb_flush(br, &desc);
1418 }
1419
1420 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1421 if (data[IFLA_BR_MCAST_ROUTER]) {
1422 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1423
1424 err = br_multicast_set_router(&br->multicast_ctx,
1425 multicast_router);
1426 if (err)
1427 return err;
1428 }
1429
1430 if (data[IFLA_BR_MCAST_SNOOPING]) {
1431 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1432
1433 err = br_multicast_toggle(br, mcast_snooping, extack);
1434 if (err)
1435 return err;
1436 }
1437
1438 if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1439 u8 val;
1440
1441 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1442 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1443 }
1444
1445 if (data[IFLA_BR_MCAST_QUERIER]) {
1446 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1447
1448 err = br_multicast_set_querier(&br->multicast_ctx,
1449 mcast_querier);
1450 if (err)
1451 return err;
1452 }
1453
1454 if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1455 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1456 RHT_ELASTICITY);
1457
1458 if (data[IFLA_BR_MCAST_HASH_MAX])
1459 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1460
1461 if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1462 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1463
1464 br->multicast_ctx.multicast_last_member_count = val;
1465 }
1466
1467 if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1468 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1469
1470 br->multicast_ctx.multicast_startup_query_count = val;
1471 }
1472
1473 if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1474 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1475
1476 br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
1477 }
1478
1479 if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1480 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1481
1482 br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
1483 }
1484
1485 if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1486 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1487
1488 br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
1489 }
1490
1491 if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1492 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1493
1494 br_multicast_set_query_intvl(&br->multicast_ctx, val);
1495 }
1496
1497 if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1498 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1499
1500 br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
1501 }
1502
1503 if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1504 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1505
1506 br_multicast_set_startup_query_intvl(&br->multicast_ctx, val);
1507 }
1508
1509 if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1510 __u8 mcast_stats;
1511
1512 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1513 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1514 }
1515
1516 if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1517 __u8 igmp_version;
1518
1519 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1520 err = br_multicast_set_igmp_version(&br->multicast_ctx,
1521 igmp_version);
1522 if (err)
1523 return err;
1524 }
1525
1526 #if IS_ENABLED(CONFIG_IPV6)
1527 if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1528 __u8 mld_version;
1529
1530 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1531 err = br_multicast_set_mld_version(&br->multicast_ctx,
1532 mld_version);
1533 if (err)
1534 return err;
1535 }
1536 #endif
1537 #endif
1538 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1539 if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1540 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1541
1542 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1543 }
1544
1545 if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1546 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1547
1548 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1549 }
1550
1551 if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1552 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1553
1554 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1555 }
1556 #endif
1557
1558 if (data[IFLA_BR_MULTI_BOOLOPT]) {
1559 struct br_boolopt_multi *bm;
1560
1561 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1562 err = br_boolopt_multi_toggle(br, bm, extack);
1563 if (err)
1564 return err;
1565 }
1566
1567 if (data[IFLA_BR_FDB_MAX_LEARNED]) {
1568 u32 val = nla_get_u32(data[IFLA_BR_FDB_MAX_LEARNED]);
1569
1570 WRITE_ONCE(br->fdb_max_learned, val);
1571 }
1572
1573 return 0;
1574 }
1575
br_dev_newlink(struct net_device * dev,struct rtnl_newlink_params * params,struct netlink_ext_ack * extack)1576 static int br_dev_newlink(struct net_device *dev,
1577 struct rtnl_newlink_params *params,
1578 struct netlink_ext_ack *extack)
1579 {
1580 struct net_bridge *br = netdev_priv(dev);
1581 struct nlattr **data = params->data;
1582 struct nlattr **tb = params->tb;
1583 int err;
1584
1585 err = register_netdevice(dev);
1586 if (err)
1587 return err;
1588
1589 if (tb[IFLA_ADDRESS]) {
1590 spin_lock_bh(&br->lock);
1591 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1592 spin_unlock_bh(&br->lock);
1593 }
1594
1595 err = br_changelink(dev, tb, data, extack);
1596 if (err)
1597 br_dev_delete(dev, NULL);
1598
1599 return err;
1600 }
1601
br_get_size(const struct net_device * brdev)1602 static size_t br_get_size(const struct net_device *brdev)
1603 {
1604 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */
1605 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */
1606 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */
1607 nla_total_size(sizeof(u32)) + /* IFLA_BR_AGEING_TIME */
1608 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_STATE */
1609 nla_total_size(sizeof(u16)) + /* IFLA_BR_PRIORITY */
1610 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_FILTERING */
1611 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1612 nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */
1613 nla_total_size(sizeof(u16)) + /* IFLA_BR_VLAN_DEFAULT_PVID */
1614 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_ENABLED */
1615 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_PER_PORT */
1616 #endif
1617 nla_total_size(sizeof(u16)) + /* IFLA_BR_GROUP_FWD_MASK */
1618 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_ROOT_ID */
1619 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_BRIDGE_ID */
1620 nla_total_size(sizeof(u16)) + /* IFLA_BR_ROOT_PORT */
1621 nla_total_size(sizeof(u32)) + /* IFLA_BR_ROOT_PATH_COST */
1622 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE */
1623 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1624 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1625 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1626 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1627 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1628 nla_total_size(ETH_ALEN) + /* IFLA_BR_GROUP_ADDR */
1629 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_N_LEARNED */
1630 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_MAX_LEARNED */
1631 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1632 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_ROUTER */
1633 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_SNOOPING */
1634 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1635 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERIER */
1636 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_STATS_ENABLED */
1637 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */
1638 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_MAX */
1639 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1640 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1641 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1642 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1643 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1644 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1645 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1646 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1647 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_IGMP_VERSION */
1648 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_MLD_VERSION */
1649 br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */
1650 #endif
1651 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1652 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IPTABLES */
1653 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IP6TABLES */
1654 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_ARPTABLES */
1655 #endif
1656 nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1657 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_MODE */
1658 0;
1659 }
1660
br_fill_info(struct sk_buff * skb,const struct net_device * brdev)1661 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1662 {
1663 struct net_bridge *br = netdev_priv(brdev);
1664 u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1665 u32 hello_time = jiffies_to_clock_t(br->hello_time);
1666 u32 age_time = jiffies_to_clock_t(br->max_age);
1667 u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1668 u32 stp_enabled = br->stp_enabled;
1669 u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1670 u8 vlan_enabled = br_vlan_enabled(br->dev);
1671 struct br_boolopt_multi bm;
1672 u64 clockval;
1673
1674 clockval = br_timer_value(&br->hello_timer);
1675 if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1676 return -EMSGSIZE;
1677 clockval = br_timer_value(&br->tcn_timer);
1678 if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1679 return -EMSGSIZE;
1680 clockval = br_timer_value(&br->topology_change_timer);
1681 if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1682 IFLA_BR_PAD))
1683 return -EMSGSIZE;
1684 clockval = br_timer_value(&br->gc_work.timer);
1685 if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1686 return -EMSGSIZE;
1687
1688 br_boolopt_multi_get(br, &bm);
1689 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1690 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1691 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1692 nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1693 nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1694 nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1695 nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1696 nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1697 nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1698 &br->bridge_id) ||
1699 nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1700 &br->designated_root) ||
1701 nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1702 nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1703 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1704 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1705 br->topology_change_detected) ||
1706 nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1707 nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm) ||
1708 nla_put_u32(skb, IFLA_BR_FDB_N_LEARNED,
1709 atomic_read(&br->fdb_n_learned)) ||
1710 nla_put_u32(skb, IFLA_BR_FDB_MAX_LEARNED, br->fdb_max_learned) ||
1711 nla_put_u32(skb, IFLA_BR_STP_MODE, br->stp_mode))
1712 return -EMSGSIZE;
1713
1714 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1715 if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1716 nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1717 nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1718 br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1719 nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1720 br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1721 return -EMSGSIZE;
1722 #endif
1723 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1724 if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER,
1725 br->multicast_ctx.multicast_router) ||
1726 nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1727 br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1728 nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1729 br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1730 nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1731 br->multicast_ctx.multicast_querier) ||
1732 nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1733 br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1734 nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1735 nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1736 nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1737 br->multicast_ctx.multicast_last_member_count) ||
1738 nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1739 br->multicast_ctx.multicast_startup_query_count) ||
1740 nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1741 br->multicast_ctx.multicast_igmp_version) ||
1742 br_multicast_dump_querier_state(skb, &br->multicast_ctx,
1743 IFLA_BR_MCAST_QUERIER_STATE))
1744 return -EMSGSIZE;
1745 #if IS_ENABLED(CONFIG_IPV6)
1746 if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1747 br->multicast_ctx.multicast_mld_version))
1748 return -EMSGSIZE;
1749 #endif
1750 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval);
1751 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1752 IFLA_BR_PAD))
1753 return -EMSGSIZE;
1754 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval);
1755 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1756 IFLA_BR_PAD))
1757 return -EMSGSIZE;
1758 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval);
1759 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1760 IFLA_BR_PAD))
1761 return -EMSGSIZE;
1762 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval);
1763 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1764 IFLA_BR_PAD))
1765 return -EMSGSIZE;
1766 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval);
1767 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1768 IFLA_BR_PAD))
1769 return -EMSGSIZE;
1770 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval);
1771 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1772 IFLA_BR_PAD))
1773 return -EMSGSIZE;
1774 #endif
1775 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1776 if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1777 br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1778 nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1779 br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1780 nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1781 br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1782 return -EMSGSIZE;
1783 #endif
1784
1785 return 0;
1786 }
1787
br_get_linkxstats_size(const struct net_device * dev,int attr)1788 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1789 {
1790 struct net_bridge_port *p = NULL;
1791 struct net_bridge_vlan_group *vg;
1792 struct net_bridge_vlan *v;
1793 struct net_bridge *br;
1794 int numvls = 0;
1795
1796 switch (attr) {
1797 case IFLA_STATS_LINK_XSTATS:
1798 br = netdev_priv(dev);
1799 vg = br_vlan_group(br);
1800 break;
1801 case IFLA_STATS_LINK_XSTATS_SLAVE:
1802 p = br_port_get_rtnl(dev);
1803 if (!p)
1804 return 0;
1805 vg = nbp_vlan_group(p);
1806 break;
1807 default:
1808 return 0;
1809 }
1810
1811 if (vg) {
1812 /* we need to count all, even placeholder entries */
1813 list_for_each_entry(v, &vg->vlan_list, vlist)
1814 numvls++;
1815 }
1816
1817 return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1818 nla_total_size_64bit(sizeof(struct br_mcast_stats)) +
1819 (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) +
1820 nla_total_size(0);
1821 }
1822
br_fill_linkxstats(struct sk_buff * skb,const struct net_device * dev,int * prividx,int attr)1823 static int br_fill_linkxstats(struct sk_buff *skb,
1824 const struct net_device *dev,
1825 int *prividx, int attr)
1826 {
1827 unsigned int limit = U16_MAX - nla_total_size(0);
1828 struct nlattr *nla __maybe_unused;
1829 struct net_bridge_port *p = NULL;
1830 struct net_bridge_vlan_group *vg;
1831 struct net_bridge_vlan *v;
1832 struct net_bridge *br;
1833 struct nlattr *nest;
1834 int vl_idx = 0;
1835
1836 switch (attr) {
1837 case IFLA_STATS_LINK_XSTATS:
1838 br = netdev_priv(dev);
1839 vg = br_vlan_group(br);
1840 break;
1841 case IFLA_STATS_LINK_XSTATS_SLAVE:
1842 p = br_port_get_rtnl(dev);
1843 if (!p)
1844 return 0;
1845 limit -= nla_total_size_64bit(sizeof(p->stp_xstats));
1846 br = p->br;
1847 vg = nbp_vlan_group(p);
1848 break;
1849 default:
1850 return -EINVAL;
1851 }
1852
1853 nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1854 if (!nest)
1855 return -EMSGSIZE;
1856
1857 if (vg) {
1858 u16 pvid;
1859
1860 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1861 limit -= nla_total_size_64bit(sizeof(struct br_mcast_stats));
1862 #endif
1863 pvid = br_get_pvid(vg);
1864 list_for_each_entry(v, &vg->vlan_list, vlist) {
1865 struct bridge_vlan_xstats vxi;
1866 struct pcpu_sw_netstats stats;
1867
1868 if (++vl_idx < *prividx)
1869 continue;
1870
1871 if (skb_tail_pointer(skb) - (unsigned char *)nest +
1872 nla_total_size(sizeof(vxi)) >= limit)
1873 goto nla_put_failure;
1874
1875 memset(&vxi, 0, sizeof(vxi));
1876 vxi.vid = v->vid;
1877 vxi.flags = v->flags;
1878 if (v->vid == pvid)
1879 vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1880 br_vlan_get_stats(v, &stats);
1881 vxi.rx_bytes = u64_stats_read(&stats.rx_bytes);
1882 vxi.rx_packets = u64_stats_read(&stats.rx_packets);
1883 vxi.tx_bytes = u64_stats_read(&stats.tx_bytes);
1884 vxi.tx_packets = u64_stats_read(&stats.tx_packets);
1885
1886 if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1887 goto nla_put_failure;
1888 }
1889 }
1890
1891 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1892 if (++vl_idx >= *prividx) {
1893 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1894 sizeof(struct br_mcast_stats),
1895 BRIDGE_XSTATS_PAD);
1896 if (!nla)
1897 goto nla_put_failure;
1898 br_multicast_get_stats(br, p, nla_data(nla));
1899 }
1900 #endif
1901
1902 if (p) {
1903 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1904 sizeof(p->stp_xstats),
1905 BRIDGE_XSTATS_PAD);
1906 if (!nla)
1907 goto nla_put_failure;
1908
1909 spin_lock_bh(&br->lock);
1910 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1911 spin_unlock_bh(&br->lock);
1912 }
1913
1914 nla_nest_end(skb, nest);
1915 *prividx = 0;
1916
1917 return 0;
1918
1919 nla_put_failure:
1920 nla_nest_end(skb, nest);
1921 *prividx = vl_idx;
1922
1923 return -EMSGSIZE;
1924 }
1925
1926 static struct rtnl_af_ops br_af_ops __read_mostly = {
1927 .family = AF_BRIDGE,
1928 .get_link_af_size = br_get_link_af_size_filtered,
1929 };
1930
1931 struct rtnl_link_ops br_link_ops __read_mostly = {
1932 .kind = "bridge",
1933 .priv_size = sizeof(struct net_bridge),
1934 .setup = br_dev_setup,
1935 .maxtype = IFLA_BR_MAX,
1936 .policy = br_policy,
1937 .validate = br_validate,
1938 .newlink = br_dev_newlink,
1939 .changelink = br_changelink,
1940 .dellink = br_dev_delete,
1941 .get_size = br_get_size,
1942 .fill_info = br_fill_info,
1943 .fill_linkxstats = br_fill_linkxstats,
1944 .get_linkxstats_size = br_get_linkxstats_size,
1945
1946 .slave_maxtype = IFLA_BRPORT_MAX,
1947 .slave_policy = br_port_policy,
1948 .slave_changelink = br_port_slave_changelink,
1949 .get_slave_size = br_port_get_slave_size,
1950 .fill_slave_info = br_port_fill_slave_info,
1951 };
1952
br_netlink_init(void)1953 int __init br_netlink_init(void)
1954 {
1955 int err;
1956
1957 err = br_vlan_rtnl_init();
1958 if (err)
1959 goto out;
1960
1961 err = rtnl_af_register(&br_af_ops);
1962 if (err)
1963 goto out_vlan;
1964
1965 err = rtnl_link_register(&br_link_ops);
1966 if (err)
1967 goto out_af;
1968
1969 return 0;
1970
1971 out_af:
1972 rtnl_af_unregister(&br_af_ops);
1973 out_vlan:
1974 br_vlan_rtnl_uninit();
1975 out:
1976 return err;
1977 }
1978
br_netlink_fini(void)1979 void br_netlink_fini(void)
1980 {
1981 br_vlan_rtnl_uninit();
1982 rtnl_af_unregister(&br_af_ops);
1983 rtnl_link_unregister(&br_link_ops);
1984 }
1985