1 // SPDX-License-Identifier: GPL-2.0-or-later 2 /* 3 * Bridge netlink control interface 4 * 5 * Authors: 6 * Stephen Hemminger <shemminger@osdl.org> 7 */ 8 9 #include <linux/kernel.h> 10 #include <linux/slab.h> 11 #include <linux/etherdevice.h> 12 #include <net/rtnetlink.h> 13 #include <net/net_namespace.h> 14 #include <net/sock.h> 15 #include <uapi/linux/if_bridge.h> 16 17 #include "br_private.h" 18 #include "br_private_stp.h" 19 #include "br_private_cfm.h" 20 #include "br_private_tunnel.h" 21 #include "br_private_mcast_eht.h" 22 23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg, 24 u32 filter_mask) 25 { 26 struct net_bridge_vlan *v; 27 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0; 28 u16 flags, pvid; 29 int num_vlans = 0; 30 31 if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) 32 return 0; 33 34 pvid = br_get_pvid(vg); 35 /* Count number of vlan infos */ 36 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) { 37 flags = 0; 38 /* only a context, bridge vlan not activated */ 39 if (!br_vlan_should_use(v)) 40 continue; 41 if (v->vid == pvid) 42 flags |= BRIDGE_VLAN_INFO_PVID; 43 44 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED) 45 flags |= BRIDGE_VLAN_INFO_UNTAGGED; 46 47 if (vid_range_start == 0) { 48 goto initvars; 49 } else if ((v->vid - vid_range_end) == 1 && 50 flags == vid_range_flags) { 51 vid_range_end = v->vid; 52 continue; 53 } else { 54 if ((vid_range_end - vid_range_start) > 0) 55 num_vlans += 2; 56 else 57 num_vlans += 1; 58 } 59 initvars: 60 vid_range_start = v->vid; 61 vid_range_end = v->vid; 62 vid_range_flags = flags; 63 } 64 65 if (vid_range_start != 0) { 66 if ((vid_range_end - vid_range_start) > 0) 67 num_vlans += 2; 68 else 69 num_vlans += 1; 70 } 71 72 return num_vlans; 73 } 74 75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg, 76 u32 filter_mask) 77 { 78 int num_vlans; 79 80 if (!vg) 81 return 0; 82 83 if (filter_mask & RTEXT_FILTER_BRVLAN) 84 return vg->num_vlans; 85 86 rcu_read_lock(); 87 num_vlans = __get_num_vlan_infos(vg, filter_mask); 88 rcu_read_unlock(); 89 90 return num_vlans; 91 } 92 93 static size_t br_get_link_af_size_filtered(const struct net_device *dev, 94 u32 filter_mask) 95 { 96 struct net_bridge_vlan_group *vg = NULL; 97 struct net_bridge_port *p = NULL; 98 struct net_bridge *br = NULL; 99 u32 num_cfm_peer_mep_infos; 100 u32 num_cfm_mep_infos; 101 size_t vinfo_sz = 0; 102 int num_vlan_infos; 103 104 rcu_read_lock(); 105 if (netif_is_bridge_port(dev)) { 106 p = br_port_get_check_rcu(dev); 107 if (p) 108 vg = nbp_vlan_group_rcu(p); 109 } else if (netif_is_bridge_master(dev)) { 110 br = netdev_priv(dev); 111 vg = br_vlan_group_rcu(br); 112 } 113 num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask); 114 rcu_read_unlock(); 115 116 if (p && (p->flags & BR_VLAN_TUNNEL)) 117 vinfo_sz += br_get_vlan_tunnel_info_size(vg); 118 119 /* Each VLAN is returned in bridge_vlan_info along with flags */ 120 vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info)); 121 122 if (p && vg && (filter_mask & RTEXT_FILTER_MST)) 123 vinfo_sz += br_mst_info_size(vg); 124 125 if (!(filter_mask & RTEXT_FILTER_CFM_STATUS)) 126 return vinfo_sz; 127 128 if (!br) 129 return vinfo_sz; 130 131 /* CFM status info must be added */ 132 br_cfm_mep_count(br, &num_cfm_mep_infos); 133 br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos); 134 135 vinfo_sz += nla_total_size(0); /* IFLA_BRIDGE_CFM */ 136 /* For each status struct the MEP instance (u32) is added */ 137 /* MEP instance (u32) + br_cfm_mep_status */ 138 vinfo_sz += num_cfm_mep_infos * 139 /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */ 140 (nla_total_size(sizeof(u32)) 141 /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */ 142 + nla_total_size(sizeof(u32)) 143 /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */ 144 + nla_total_size(sizeof(u32)) 145 /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */ 146 + nla_total_size(sizeof(u32))); 147 /* MEP instance (u32) + br_cfm_cc_peer_status */ 148 vinfo_sz += num_cfm_peer_mep_infos * 149 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */ 150 (nla_total_size(sizeof(u32)) 151 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */ 152 + nla_total_size(sizeof(u32)) 153 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */ 154 + nla_total_size(sizeof(u32)) 155 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */ 156 + nla_total_size(sizeof(u32)) 157 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */ 158 + nla_total_size(sizeof(u8)) 159 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */ 160 + nla_total_size(sizeof(u8)) 161 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */ 162 + nla_total_size(sizeof(u32)) 163 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */ 164 + nla_total_size(sizeof(u32)) 165 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */ 166 + nla_total_size(sizeof(u32))); 167 168 return vinfo_sz; 169 } 170 171 static inline size_t br_port_info_size(void) 172 { 173 return nla_total_size(1) /* IFLA_BRPORT_STATE */ 174 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */ 175 + nla_total_size(4) /* IFLA_BRPORT_COST */ 176 + nla_total_size(1) /* IFLA_BRPORT_MODE */ 177 + nla_total_size(1) /* IFLA_BRPORT_GUARD */ 178 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */ 179 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */ 180 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */ 181 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */ 182 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */ 183 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */ 184 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */ 185 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */ 186 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */ 187 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */ 188 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */ 189 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */ 190 + nla_total_size(1) /* IFLA_BRPORT_LOCKED */ 191 + nla_total_size(1) /* IFLA_BRPORT_MAB */ 192 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */ 193 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_FORWARD_GRAT */ 194 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */ 195 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */ 196 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_PORT */ 197 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_COST */ 198 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_ID */ 199 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_NO */ 200 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */ 201 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_CONFIG_PENDING */ 202 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */ 203 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */ 204 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */ 205 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 206 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MULTICAST_ROUTER */ 207 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_N_GROUPS */ 208 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_MAX_GROUPS */ 209 #endif 210 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_GROUP_FWD_MASK */ 211 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_RING_OPEN */ 212 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_IN_OPEN */ 213 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */ 214 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */ 215 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_BACKUP_NHID */ 216 + 0; 217 } 218 219 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask) 220 { 221 return NLMSG_ALIGN(sizeof(struct ifinfomsg)) 222 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */ 223 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */ 224 + nla_total_size(4) /* IFLA_MASTER */ 225 + nla_total_size(4) /* IFLA_MTU */ 226 + nla_total_size(4) /* IFLA_LINK */ 227 + nla_total_size(1) /* IFLA_OPERSTATE */ 228 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */ 229 + nla_total_size(br_get_link_af_size_filtered(dev, 230 filter_mask)) /* IFLA_AF_SPEC */ 231 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */ 232 } 233 234 static int br_port_fill_attrs(struct sk_buff *skb, 235 const struct net_bridge_port *p) 236 { 237 u8 mode = !!(p->flags & BR_HAIRPIN_MODE); 238 struct net_bridge_port *backup_p; 239 u64 timerval; 240 241 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) || 242 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) || 243 nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) || 244 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) || 245 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) || 246 nla_put_u8(skb, IFLA_BRPORT_PROTECT, 247 !!(p->flags & BR_ROOT_BLOCK)) || 248 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE, 249 !!(p->flags & BR_MULTICAST_FAST_LEAVE)) || 250 nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST, 251 !!(p->flags & BR_MULTICAST_TO_UNICAST)) || 252 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) || 253 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD, 254 !!(p->flags & BR_FLOOD)) || 255 nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD, 256 !!(p->flags & BR_MCAST_FLOOD)) || 257 nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD, 258 !!(p->flags & BR_BCAST_FLOOD)) || 259 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) || 260 nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI, 261 !!(p->flags & BR_PROXYARP_WIFI)) || 262 nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id), 263 &p->designated_root) || 264 nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id), 265 &p->designated_bridge) || 266 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) || 267 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) || 268 nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) || 269 nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) || 270 nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK, 271 p->topology_change_ack) || 272 nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) || 273 nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags & 274 BR_VLAN_TUNNEL)) || 275 nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) || 276 nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS, 277 !!(p->flags & BR_NEIGH_SUPPRESS)) || 278 nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags & 279 BR_MRP_LOST_CONT)) || 280 nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN, 281 !!(p->flags & BR_MRP_LOST_IN_CONT)) || 282 nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)) || 283 nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(p->flags & BR_PORT_LOCKED)) || 284 nla_put_u8(skb, IFLA_BRPORT_MAB, !!(p->flags & BR_PORT_MAB)) || 285 nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS, 286 !!(p->flags & BR_NEIGH_VLAN_SUPPRESS)) || 287 nla_put_u8(skb, IFLA_BRPORT_NEIGH_FORWARD_GRAT, 288 !!(p->flags & BR_NEIGH_FORWARD_GRAT))) 289 return -EMSGSIZE; 290 291 timerval = br_timer_value(&p->message_age_timer); 292 if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval, 293 IFLA_BRPORT_PAD)) 294 return -EMSGSIZE; 295 timerval = br_timer_value(&p->forward_delay_timer); 296 if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval, 297 IFLA_BRPORT_PAD)) 298 return -EMSGSIZE; 299 timerval = br_timer_value(&p->hold_timer); 300 if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval, 301 IFLA_BRPORT_PAD)) 302 return -EMSGSIZE; 303 304 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 305 if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER, 306 p->multicast_ctx.multicast_router) || 307 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT, 308 p->multicast_eht_hosts_limit) || 309 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT, 310 p->multicast_eht_hosts_cnt) || 311 nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS, 312 br_multicast_ngroups_get(&p->multicast_ctx)) || 313 nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS, 314 br_multicast_ngroups_get_max(&p->multicast_ctx))) 315 return -EMSGSIZE; 316 #endif 317 318 /* we might be called only with br->lock */ 319 rcu_read_lock(); 320 backup_p = rcu_dereference(p->backup_port); 321 if (backup_p) 322 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT, 323 backup_p->dev->ifindex); 324 rcu_read_unlock(); 325 326 if (p->backup_nhid && 327 nla_put_u32(skb, IFLA_BRPORT_BACKUP_NHID, p->backup_nhid)) 328 return -EMSGSIZE; 329 330 return 0; 331 } 332 333 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start, 334 u16 vid_end, u16 flags) 335 { 336 struct bridge_vlan_info vinfo; 337 338 if ((vid_end - vid_start) > 0) { 339 /* add range to skb */ 340 vinfo.vid = vid_start; 341 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN; 342 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 343 sizeof(vinfo), &vinfo)) 344 goto nla_put_failure; 345 346 vinfo.vid = vid_end; 347 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END; 348 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 349 sizeof(vinfo), &vinfo)) 350 goto nla_put_failure; 351 } else { 352 vinfo.vid = vid_start; 353 vinfo.flags = flags; 354 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 355 sizeof(vinfo), &vinfo)) 356 goto nla_put_failure; 357 } 358 359 return 0; 360 361 nla_put_failure: 362 return -EMSGSIZE; 363 } 364 365 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb, 366 struct net_bridge_vlan_group *vg) 367 { 368 struct net_bridge_vlan *v; 369 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0; 370 u16 flags, pvid; 371 int err = 0; 372 373 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan 374 * and mark vlan info with begin and end flags 375 * if vlaninfo represents a range 376 */ 377 pvid = br_get_pvid(vg); 378 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) { 379 flags = 0; 380 if (!br_vlan_should_use(v)) 381 continue; 382 if (v->vid == pvid) 383 flags |= BRIDGE_VLAN_INFO_PVID; 384 385 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED) 386 flags |= BRIDGE_VLAN_INFO_UNTAGGED; 387 388 if (vid_range_start == 0) { 389 goto initvars; 390 } else if ((v->vid - vid_range_end) == 1 && 391 flags == vid_range_flags) { 392 vid_range_end = v->vid; 393 continue; 394 } else { 395 err = br_fill_ifvlaninfo_range(skb, vid_range_start, 396 vid_range_end, 397 vid_range_flags); 398 if (err) 399 return err; 400 } 401 402 initvars: 403 vid_range_start = v->vid; 404 vid_range_end = v->vid; 405 vid_range_flags = flags; 406 } 407 408 if (vid_range_start != 0) { 409 /* Call it once more to send any left over vlans */ 410 err = br_fill_ifvlaninfo_range(skb, vid_range_start, 411 vid_range_end, 412 vid_range_flags); 413 if (err) 414 return err; 415 } 416 417 return 0; 418 } 419 420 static int br_fill_ifvlaninfo(struct sk_buff *skb, 421 struct net_bridge_vlan_group *vg) 422 { 423 struct bridge_vlan_info vinfo; 424 struct net_bridge_vlan *v; 425 u16 pvid; 426 427 pvid = br_get_pvid(vg); 428 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) { 429 if (!br_vlan_should_use(v)) 430 continue; 431 432 vinfo.vid = v->vid; 433 vinfo.flags = 0; 434 if (v->vid == pvid) 435 vinfo.flags |= BRIDGE_VLAN_INFO_PVID; 436 437 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED) 438 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED; 439 440 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO, 441 sizeof(vinfo), &vinfo)) 442 goto nla_put_failure; 443 } 444 445 return 0; 446 447 nla_put_failure: 448 return -EMSGSIZE; 449 } 450 451 /* 452 * Create one netlink message for one interface 453 * Contains port and master info as well as carrier and bridge state. 454 */ 455 static int br_fill_ifinfo(struct sk_buff *skb, 456 const struct net_bridge_port *port, 457 u32 pid, u32 seq, int event, unsigned int flags, 458 u32 filter_mask, const struct net_device *dev, 459 bool getlink) 460 { 461 u8 operstate = netif_running(dev) ? READ_ONCE(dev->operstate) : 462 IF_OPER_DOWN; 463 struct nlattr *af = NULL; 464 struct net_bridge *br; 465 struct ifinfomsg *hdr; 466 struct nlmsghdr *nlh; 467 468 if (port) 469 br = port->br; 470 else 471 br = netdev_priv(dev); 472 473 br_debug(br, "br_fill_ifinfo event %d port %s master %s\n", 474 event, dev->name, br->dev->name); 475 476 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags); 477 if (nlh == NULL) 478 return -EMSGSIZE; 479 480 hdr = nlmsg_data(nlh); 481 hdr->ifi_family = AF_BRIDGE; 482 hdr->__ifi_pad = 0; 483 hdr->ifi_type = dev->type; 484 hdr->ifi_index = dev->ifindex; 485 hdr->ifi_flags = netif_get_flags(dev); 486 hdr->ifi_change = 0; 487 488 if (nla_put_string(skb, IFLA_IFNAME, dev->name) || 489 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) || 490 nla_put_u32(skb, IFLA_MTU, dev->mtu) || 491 nla_put_u8(skb, IFLA_OPERSTATE, operstate) || 492 (dev->addr_len && 493 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) || 494 (dev->ifindex != dev_get_iflink(dev) && 495 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev)))) 496 goto nla_put_failure; 497 498 if (event == RTM_NEWLINK && port) { 499 struct nlattr *nest; 500 501 nest = nla_nest_start(skb, IFLA_PROTINFO); 502 if (nest == NULL || br_port_fill_attrs(skb, port) < 0) 503 goto nla_put_failure; 504 nla_nest_end(skb, nest); 505 } 506 507 if (filter_mask & (RTEXT_FILTER_BRVLAN | 508 RTEXT_FILTER_BRVLAN_COMPRESSED | 509 RTEXT_FILTER_MRP | 510 RTEXT_FILTER_CFM_CONFIG | 511 RTEXT_FILTER_CFM_STATUS | 512 RTEXT_FILTER_MST)) { 513 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC); 514 if (!af) 515 goto nla_put_failure; 516 } 517 518 /* Check if the VID information is requested */ 519 if ((filter_mask & RTEXT_FILTER_BRVLAN) || 520 (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) { 521 struct net_bridge_vlan_group *vg; 522 int err; 523 524 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */ 525 rcu_read_lock(); 526 if (port) 527 vg = nbp_vlan_group_rcu(port); 528 else 529 vg = br_vlan_group_rcu(br); 530 531 if (!vg || !vg->num_vlans) { 532 rcu_read_unlock(); 533 goto done; 534 } 535 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) 536 err = br_fill_ifvlaninfo_compressed(skb, vg); 537 else 538 err = br_fill_ifvlaninfo(skb, vg); 539 540 if (port && (port->flags & BR_VLAN_TUNNEL)) 541 err = br_fill_vlan_tunnel_info(skb, vg); 542 rcu_read_unlock(); 543 if (err) 544 goto nla_put_failure; 545 } 546 547 if (filter_mask & RTEXT_FILTER_MRP) { 548 int err; 549 550 if (!br_mrp_enabled(br) || port) 551 goto done; 552 553 rcu_read_lock(); 554 err = br_mrp_fill_info(skb, br); 555 rcu_read_unlock(); 556 557 if (err) 558 goto nla_put_failure; 559 } 560 561 if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) { 562 struct nlattr *cfm_nest = NULL; 563 int err; 564 565 if (!br_cfm_created(br) || port) 566 goto done; 567 568 cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM); 569 if (!cfm_nest) 570 goto nla_put_failure; 571 572 if (filter_mask & RTEXT_FILTER_CFM_CONFIG) { 573 rcu_read_lock(); 574 err = br_cfm_config_fill_info(skb, br); 575 rcu_read_unlock(); 576 if (err) 577 goto nla_put_failure; 578 } 579 580 if (filter_mask & RTEXT_FILTER_CFM_STATUS) { 581 rcu_read_lock(); 582 err = br_cfm_status_fill_info(skb, br, getlink); 583 rcu_read_unlock(); 584 if (err) 585 goto nla_put_failure; 586 } 587 588 nla_nest_end(skb, cfm_nest); 589 } 590 591 if ((filter_mask & RTEXT_FILTER_MST) && 592 br_opt_get(br, BROPT_MST_ENABLED) && port) { 593 const struct net_bridge_vlan_group *vg = nbp_vlan_group(port); 594 struct nlattr *mst_nest; 595 int err; 596 597 if (!vg || !vg->num_vlans) 598 goto done; 599 600 mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST); 601 if (!mst_nest) 602 goto nla_put_failure; 603 604 err = br_mst_fill_info(skb, vg); 605 if (err) 606 goto nla_put_failure; 607 608 nla_nest_end(skb, mst_nest); 609 } 610 611 done: 612 if (af) { 613 if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0)) 614 nla_nest_end(skb, af); 615 else 616 nla_nest_cancel(skb, af); 617 } 618 619 nlmsg_end(skb, nlh); 620 return 0; 621 622 nla_put_failure: 623 nlmsg_cancel(skb, nlh); 624 return -EMSGSIZE; 625 } 626 627 void br_info_notify(int event, const struct net_bridge *br, 628 const struct net_bridge_port *port, u32 filter) 629 { 630 struct net_device *dev; 631 struct sk_buff *skb; 632 int err = -ENOBUFS; 633 struct net *net; 634 u16 port_no = 0; 635 636 if (WARN_ON(!port && !br)) 637 return; 638 639 if (port) { 640 dev = port->dev; 641 br = port->br; 642 port_no = port->port_no; 643 } else { 644 dev = br->dev; 645 } 646 647 net = dev_net(dev); 648 br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event); 649 650 skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC); 651 if (skb == NULL) 652 goto errout; 653 654 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false); 655 if (err < 0) { 656 /* -EMSGSIZE implies BUG in br_nlmsg_size() */ 657 WARN_ON(err == -EMSGSIZE); 658 kfree_skb(skb); 659 goto errout; 660 } 661 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC); 662 return; 663 errout: 664 rtnl_set_sk_err(net, RTNLGRP_LINK, err); 665 } 666 667 /* Notify listeners of a change in bridge or port information */ 668 void br_ifinfo_notify(int event, const struct net_bridge *br, 669 const struct net_bridge_port *port) 670 { 671 u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED; 672 673 br_info_notify(event, br, port, filter); 674 } 675 676 /* 677 * Dump information about all ports, in response to GETLINK 678 */ 679 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq, 680 struct net_device *dev, u32 filter_mask, int nlflags) 681 { 682 struct net_bridge_port *port = br_port_get_rtnl(dev); 683 684 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) && 685 !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) && 686 !(filter_mask & RTEXT_FILTER_MRP) && 687 !(filter_mask & RTEXT_FILTER_CFM_CONFIG) && 688 !(filter_mask & RTEXT_FILTER_CFM_STATUS)) 689 return 0; 690 691 return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags, 692 filter_mask, dev, true); 693 } 694 695 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p, 696 int cmd, struct bridge_vlan_info *vinfo, bool *changed, 697 struct netlink_ext_ack *extack) 698 { 699 bool curr_change; 700 int err = 0; 701 702 switch (cmd) { 703 case RTM_SETLINK: 704 if (p) { 705 /* if the MASTER flag is set this will act on the global 706 * per-VLAN entry as well 707 */ 708 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags, 709 &curr_change, extack); 710 } else { 711 vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY; 712 err = br_vlan_add(br, vinfo->vid, vinfo->flags, 713 &curr_change, extack); 714 } 715 if (curr_change) 716 *changed = true; 717 break; 718 719 case RTM_DELLINK: 720 if (p) { 721 if (!nbp_vlan_delete(p, vinfo->vid)) 722 *changed = true; 723 724 if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) && 725 !br_vlan_delete(p->br, vinfo->vid)) 726 *changed = true; 727 } else if (!br_vlan_delete(br, vinfo->vid)) { 728 *changed = true; 729 } 730 break; 731 } 732 733 return err; 734 } 735 736 int br_process_vlan_info(struct net_bridge *br, 737 struct net_bridge_port *p, int cmd, 738 struct bridge_vlan_info *vinfo_curr, 739 struct bridge_vlan_info **vinfo_last, 740 bool *changed, 741 struct netlink_ext_ack *extack) 742 { 743 int err, rtm_cmd; 744 745 if (!br_vlan_valid_id(vinfo_curr->vid, extack)) 746 return -EINVAL; 747 748 /* needed for vlan-only NEWVLAN/DELVLAN notifications */ 749 rtm_cmd = br_afspec_cmd_to_rtm(cmd); 750 751 if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) { 752 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack)) 753 return -EINVAL; 754 *vinfo_last = vinfo_curr; 755 return 0; 756 } 757 758 if (*vinfo_last) { 759 struct bridge_vlan_info tmp_vinfo; 760 int v, v_change_start = 0; 761 762 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack)) 763 return -EINVAL; 764 765 memcpy(&tmp_vinfo, *vinfo_last, 766 sizeof(struct bridge_vlan_info)); 767 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) { 768 bool curr_change = false; 769 770 tmp_vinfo.vid = v; 771 err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change, 772 extack); 773 if (err) 774 break; 775 if (curr_change) { 776 *changed = curr_change; 777 if (!v_change_start) 778 v_change_start = v; 779 } else { 780 /* nothing to notify yet */ 781 if (!v_change_start) 782 continue; 783 br_vlan_notify(br, p, v_change_start, 784 v - 1, rtm_cmd); 785 v_change_start = 0; 786 } 787 cond_resched(); 788 } 789 /* v_change_start is set only if the last/whole range changed */ 790 if (v_change_start) 791 br_vlan_notify(br, p, v_change_start, 792 v - 1, rtm_cmd); 793 794 *vinfo_last = NULL; 795 796 return err; 797 } 798 799 err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack); 800 if (*changed) 801 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd); 802 803 return err; 804 } 805 806 static int br_afspec(struct net_bridge *br, 807 struct net_bridge_port *p, 808 struct nlattr *af_spec, 809 int cmd, bool *changed, 810 struct netlink_ext_ack *extack) 811 { 812 struct bridge_vlan_info *vinfo_curr = NULL; 813 struct bridge_vlan_info *vinfo_last = NULL; 814 struct nlattr *attr; 815 struct vtunnel_info tinfo_last = {}; 816 struct vtunnel_info tinfo_curr = {}; 817 int err = 0, rem; 818 819 nla_for_each_nested(attr, af_spec, rem) { 820 err = 0; 821 switch (nla_type(attr)) { 822 case IFLA_BRIDGE_VLAN_TUNNEL_INFO: 823 if (!p || !(p->flags & BR_VLAN_TUNNEL)) 824 return -EINVAL; 825 err = br_parse_vlan_tunnel_info(attr, &tinfo_curr); 826 if (err) 827 return err; 828 err = br_process_vlan_tunnel_info(br, p, cmd, 829 &tinfo_curr, 830 &tinfo_last, 831 changed); 832 if (err) 833 return err; 834 break; 835 case IFLA_BRIDGE_VLAN_INFO: 836 if (nla_len(attr) != sizeof(struct bridge_vlan_info)) 837 return -EINVAL; 838 vinfo_curr = nla_data(attr); 839 err = br_process_vlan_info(br, p, cmd, vinfo_curr, 840 &vinfo_last, changed, 841 extack); 842 if (err) 843 return err; 844 break; 845 case IFLA_BRIDGE_MRP: 846 err = br_mrp_parse(br, p, attr, cmd, extack); 847 if (err) 848 return err; 849 break; 850 case IFLA_BRIDGE_CFM: 851 err = br_cfm_parse(br, p, attr, cmd, extack); 852 if (err) 853 return err; 854 break; 855 case IFLA_BRIDGE_MST: 856 if (!p) { 857 NL_SET_ERR_MSG(extack, 858 "MST states can only be set on bridge ports"); 859 return -EINVAL; 860 } 861 862 if (cmd != RTM_SETLINK) { 863 NL_SET_ERR_MSG(extack, 864 "MST states can only be set through RTM_SETLINK"); 865 return -EINVAL; 866 } 867 868 err = br_mst_process(p, attr, extack); 869 if (err) 870 return err; 871 break; 872 } 873 } 874 875 return err; 876 } 877 878 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = { 879 [IFLA_BRPORT_UNSPEC] = { .strict_start_type = 880 IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 }, 881 [IFLA_BRPORT_STATE] = { .type = NLA_U8 }, 882 [IFLA_BRPORT_COST] = { .type = NLA_U32 }, 883 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 }, 884 [IFLA_BRPORT_MODE] = { .type = NLA_U8 }, 885 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 }, 886 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 }, 887 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 }, 888 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 }, 889 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 }, 890 [IFLA_BRPORT_PROXYARP] = { .type = NLA_U8 }, 891 [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 }, 892 [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 }, 893 [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 }, 894 [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 }, 895 [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 }, 896 [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 }, 897 [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 }, 898 [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 }, 899 [IFLA_BRPORT_ISOLATED] = { .type = NLA_U8 }, 900 [IFLA_BRPORT_LOCKED] = { .type = NLA_U8 }, 901 [IFLA_BRPORT_MAB] = { .type = NLA_U8 }, 902 [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 }, 903 [IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 }, 904 [IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT }, 905 [IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 }, 906 [IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1), 907 [IFLA_BRPORT_BACKUP_NHID] = { .type = NLA_U32 }, 908 [IFLA_BRPORT_NEIGH_FORWARD_GRAT] = NLA_POLICY_MAX(NLA_U8, 1), 909 }; 910 911 /* Change the state of the port and notify spanning tree */ 912 static int br_set_port_state(struct net_bridge_port *p, u8 state) 913 { 914 if (state > BR_STATE_BLOCKING) 915 return -EINVAL; 916 917 /* if kernel STP is running, don't allow changes */ 918 if (p->br->stp_enabled == BR_KERNEL_STP) 919 return -EBUSY; 920 921 /* if device is not up, change is not allowed 922 * if link is not present, only allowable state is disabled 923 */ 924 if (!netif_running(p->dev) || 925 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED)) 926 return -ENETDOWN; 927 928 br_set_state(p, state); 929 br_port_state_selection(p->br); 930 return 0; 931 } 932 933 /* Set/clear or port flags based on attribute */ 934 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[], 935 int attrtype, unsigned long mask) 936 { 937 if (!tb[attrtype]) 938 return; 939 940 if (nla_get_u8(tb[attrtype])) 941 p->flags |= mask; 942 else 943 p->flags &= ~mask; 944 } 945 946 /* Process bridge protocol info on port */ 947 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[], 948 struct netlink_ext_ack *extack) 949 { 950 unsigned long old_flags, changed_mask; 951 bool br_vlan_tunnel_old; 952 int err; 953 954 old_flags = p->flags; 955 br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false; 956 957 br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE); 958 br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD); 959 br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE, 960 BR_MULTICAST_FAST_LEAVE); 961 br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK); 962 br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING); 963 br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD); 964 br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD); 965 br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST, 966 BR_MULTICAST_TO_UNICAST); 967 br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD); 968 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP); 969 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI); 970 br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL); 971 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS); 972 br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED); 973 br_set_port_flag(p, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED); 974 br_set_port_flag(p, tb, IFLA_BRPORT_MAB, BR_PORT_MAB); 975 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS, 976 BR_NEIGH_VLAN_SUPPRESS); 977 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_FORWARD_GRAT, 978 BR_NEIGH_FORWARD_GRAT); 979 980 if ((p->flags & BR_PORT_MAB) && 981 (!(p->flags & BR_PORT_LOCKED) || !(p->flags & BR_LEARNING))) { 982 NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled"); 983 p->flags = old_flags; 984 return -EINVAL; 985 } else if (!(p->flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) { 986 struct net_bridge_fdb_flush_desc desc = { 987 .flags = BIT(BR_FDB_LOCKED), 988 .flags_mask = BIT(BR_FDB_LOCKED), 989 .port_ifindex = p->dev->ifindex, 990 }; 991 992 br_fdb_flush(p->br, &desc); 993 } 994 995 changed_mask = old_flags ^ p->flags; 996 997 err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack); 998 if (err) { 999 p->flags = old_flags; 1000 return err; 1001 } 1002 1003 if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL)) 1004 nbp_vlan_tunnel_info_flush(p); 1005 1006 br_port_flags_change(p, changed_mask); 1007 1008 if (tb[IFLA_BRPORT_COST]) { 1009 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST])); 1010 if (err) 1011 return err; 1012 } 1013 1014 if (tb[IFLA_BRPORT_PRIORITY]) { 1015 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY])); 1016 if (err) 1017 return err; 1018 } 1019 1020 if (tb[IFLA_BRPORT_STATE]) { 1021 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE])); 1022 if (err) 1023 return err; 1024 } 1025 1026 if (tb[IFLA_BRPORT_FLUSH]) 1027 br_fdb_delete_by_port(p->br, p, 0, 0); 1028 1029 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1030 if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) { 1031 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]); 1032 1033 err = br_multicast_set_port_router(&p->multicast_ctx, 1034 mcast_router); 1035 if (err) 1036 return err; 1037 } 1038 1039 if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) { 1040 u32 hlimit; 1041 1042 hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]); 1043 err = br_multicast_eht_set_hosts_limit(p, hlimit); 1044 if (err) 1045 return err; 1046 } 1047 1048 if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) { 1049 u32 max_groups; 1050 1051 max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]); 1052 br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups); 1053 } 1054 #endif 1055 1056 if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) { 1057 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]); 1058 1059 if (fwd_mask & BR_GROUPFWD_MACPAUSE) 1060 return -EINVAL; 1061 p->group_fwd_mask = fwd_mask; 1062 } 1063 1064 if (tb[IFLA_BRPORT_BACKUP_PORT]) { 1065 struct net_device *backup_dev = NULL; 1066 u32 backup_ifindex; 1067 1068 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]); 1069 if (backup_ifindex) { 1070 backup_dev = __dev_get_by_index(dev_net(p->dev), 1071 backup_ifindex); 1072 if (!backup_dev) 1073 return -ENOENT; 1074 } 1075 1076 err = nbp_backup_change(p, backup_dev); 1077 if (err) 1078 return err; 1079 } 1080 1081 if (tb[IFLA_BRPORT_BACKUP_NHID]) { 1082 u32 backup_nhid = nla_get_u32(tb[IFLA_BRPORT_BACKUP_NHID]); 1083 1084 WRITE_ONCE(p->backup_nhid, backup_nhid); 1085 } 1086 1087 return 0; 1088 } 1089 1090 /* Change state and parameters on port. */ 1091 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags, 1092 struct netlink_ext_ack *extack) 1093 { 1094 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev); 1095 struct nlattr *tb[IFLA_BRPORT_MAX + 1]; 1096 struct net_bridge_port *p; 1097 struct nlattr *protinfo; 1098 struct nlattr *afspec; 1099 bool changed = false; 1100 int err = 0; 1101 1102 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO); 1103 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC); 1104 if (!protinfo && !afspec) 1105 return 0; 1106 1107 p = br_port_get_rtnl(dev); 1108 /* We want to accept dev as bridge itself if the AF_SPEC 1109 * is set to see if someone is setting vlan info on the bridge 1110 */ 1111 if (!p && !afspec) 1112 return -EINVAL; 1113 1114 if (p && protinfo) { 1115 if (protinfo->nla_type & NLA_F_NESTED) { 1116 err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX, 1117 protinfo, 1118 br_port_policy, 1119 NULL); 1120 if (err) 1121 return err; 1122 1123 spin_lock_bh(&p->br->lock); 1124 err = br_setport(p, tb, extack); 1125 spin_unlock_bh(&p->br->lock); 1126 } else { 1127 /* Binary compatibility with old RSTP */ 1128 if (nla_len(protinfo) < sizeof(u8)) 1129 return -EINVAL; 1130 1131 spin_lock_bh(&p->br->lock); 1132 err = br_set_port_state(p, nla_get_u8(protinfo)); 1133 spin_unlock_bh(&p->br->lock); 1134 } 1135 if (err) 1136 goto out; 1137 changed = true; 1138 } 1139 1140 if (afspec) 1141 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack); 1142 1143 if (changed) 1144 br_ifinfo_notify(RTM_NEWLINK, br, p); 1145 out: 1146 return err; 1147 } 1148 1149 /* Delete port information */ 1150 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags) 1151 { 1152 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev); 1153 struct net_bridge_port *p; 1154 struct nlattr *afspec; 1155 bool changed = false; 1156 int err = 0; 1157 1158 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC); 1159 if (!afspec) 1160 return 0; 1161 1162 p = br_port_get_rtnl(dev); 1163 /* We want to accept dev as bridge itself as well */ 1164 if (!p && !netif_is_bridge_master(dev)) 1165 return -EINVAL; 1166 1167 err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL); 1168 if (changed) 1169 /* Send RTM_NEWLINK because userspace 1170 * expects RTM_NEWLINK for vlan dels 1171 */ 1172 br_ifinfo_notify(RTM_NEWLINK, br, p); 1173 1174 return err; 1175 } 1176 1177 static int br_validate(struct nlattr *tb[], struct nlattr *data[], 1178 struct netlink_ext_ack *extack) 1179 { 1180 if (tb[IFLA_ADDRESS]) { 1181 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN) 1182 return -EINVAL; 1183 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS]))) 1184 return -EADDRNOTAVAIL; 1185 } 1186 1187 if (!data) 1188 return 0; 1189 1190 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1191 if (data[IFLA_BR_VLAN_PROTOCOL] && 1192 !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]))) 1193 return -EPROTONOSUPPORT; 1194 1195 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) { 1196 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]); 1197 1198 if (defpvid >= VLAN_VID_MASK) 1199 return -EINVAL; 1200 } 1201 #endif 1202 1203 return 0; 1204 } 1205 1206 static int br_port_slave_changelink(struct net_device *brdev, 1207 struct net_device *dev, 1208 struct nlattr *tb[], 1209 struct nlattr *data[], 1210 struct netlink_ext_ack *extack) 1211 { 1212 struct net_bridge *br = netdev_priv(brdev); 1213 int ret; 1214 1215 if (!data) 1216 return 0; 1217 1218 spin_lock_bh(&br->lock); 1219 ret = br_setport(br_port_get_rtnl(dev), data, extack); 1220 spin_unlock_bh(&br->lock); 1221 1222 return ret; 1223 } 1224 1225 static int br_port_fill_slave_info(struct sk_buff *skb, 1226 const struct net_device *brdev, 1227 const struct net_device *dev) 1228 { 1229 return br_port_fill_attrs(skb, br_port_get_rtnl(dev)); 1230 } 1231 1232 static size_t br_port_get_slave_size(const struct net_device *brdev, 1233 const struct net_device *dev) 1234 { 1235 return br_port_info_size(); 1236 } 1237 1238 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = { 1239 [IFLA_BR_UNSPEC] = { .strict_start_type = 1240 IFLA_BR_FDB_N_LEARNED }, 1241 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 }, 1242 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 }, 1243 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 }, 1244 [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 }, 1245 [IFLA_BR_STP_STATE] = { .type = NLA_U32 }, 1246 [IFLA_BR_PRIORITY] = { .type = NLA_U16 }, 1247 [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 }, 1248 [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 }, 1249 [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 }, 1250 [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY, 1251 .len = ETH_ALEN }, 1252 [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 }, 1253 [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 }, 1254 [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 }, 1255 [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 }, 1256 [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 }, 1257 [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 }, 1258 [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 }, 1259 [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 }, 1260 [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 }, 1261 [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 }, 1262 [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 }, 1263 [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 }, 1264 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 }, 1265 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 }, 1266 [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 }, 1267 [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 }, 1268 [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 }, 1269 [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 }, 1270 [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 }, 1271 [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 }, 1272 [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 }, 1273 [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 }, 1274 [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 }, 1275 [IFLA_BR_MULTI_BOOLOPT] = 1276 NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)), 1277 [IFLA_BR_FDB_N_LEARNED] = { .type = NLA_REJECT }, 1278 [IFLA_BR_FDB_MAX_LEARNED] = { .type = NLA_U32 }, 1279 [IFLA_BR_STP_MODE] = NLA_POLICY_RANGE(NLA_U32, 1280 BR_STP_MODE_AUTO, 1281 BR_STP_MODE_MAX), 1282 }; 1283 1284 static int br_changelink(struct net_device *brdev, struct nlattr *tb[], 1285 struct nlattr *data[], 1286 struct netlink_ext_ack *extack) 1287 { 1288 struct net_bridge *br = netdev_priv(brdev); 1289 int err; 1290 1291 if (!data) 1292 return 0; 1293 1294 if (data[IFLA_BR_FORWARD_DELAY]) { 1295 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY])); 1296 if (err) 1297 return err; 1298 } 1299 1300 if (data[IFLA_BR_HELLO_TIME]) { 1301 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME])); 1302 if (err) 1303 return err; 1304 } 1305 1306 if (data[IFLA_BR_MAX_AGE]) { 1307 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE])); 1308 if (err) 1309 return err; 1310 } 1311 1312 if (data[IFLA_BR_AGEING_TIME]) { 1313 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME])); 1314 if (err) 1315 return err; 1316 } 1317 1318 if (data[IFLA_BR_STP_MODE]) { 1319 u32 mode = nla_get_u32(data[IFLA_BR_STP_MODE]); 1320 1321 if (mode != br->stp_mode) { 1322 bool stp_off = br->stp_enabled == BR_NO_STP || 1323 (data[IFLA_BR_STP_STATE] && 1324 !nla_get_u32(data[IFLA_BR_STP_STATE])); 1325 1326 if (!stp_off) { 1327 NL_SET_ERR_MSG_MOD(extack, 1328 "Can't change STP mode while STP is enabled"); 1329 return -EBUSY; 1330 } 1331 } 1332 br->stp_mode = mode; 1333 } 1334 1335 if (data[IFLA_BR_STP_STATE]) { 1336 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]); 1337 1338 err = br_stp_set_enabled(br, stp_enabled, extack); 1339 if (err) 1340 return err; 1341 } 1342 1343 if (data[IFLA_BR_PRIORITY]) { 1344 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]); 1345 1346 br_stp_set_bridge_priority(br, priority); 1347 } 1348 1349 if (data[IFLA_BR_VLAN_FILTERING]) { 1350 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]); 1351 1352 err = br_vlan_filter_toggle(br, vlan_filter, extack); 1353 if (err) 1354 return err; 1355 } 1356 1357 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1358 if (data[IFLA_BR_VLAN_PROTOCOL]) { 1359 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]); 1360 1361 err = __br_vlan_set_proto(br, vlan_proto, extack); 1362 if (err) 1363 return err; 1364 } 1365 1366 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) { 1367 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]); 1368 1369 err = __br_vlan_set_default_pvid(br, defpvid, extack); 1370 if (err) 1371 return err; 1372 } 1373 1374 if (data[IFLA_BR_VLAN_STATS_ENABLED]) { 1375 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]); 1376 1377 err = br_vlan_set_stats(br, vlan_stats); 1378 if (err) 1379 return err; 1380 } 1381 1382 if (data[IFLA_BR_VLAN_STATS_PER_PORT]) { 1383 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]); 1384 1385 err = br_vlan_set_stats_per_port(br, per_port); 1386 if (err) 1387 return err; 1388 } 1389 #endif 1390 1391 if (data[IFLA_BR_GROUP_FWD_MASK]) { 1392 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]); 1393 1394 if (fwd_mask & BR_GROUPFWD_RESTRICTED) 1395 return -EINVAL; 1396 br->group_fwd_mask = fwd_mask; 1397 } 1398 1399 if (data[IFLA_BR_GROUP_ADDR]) { 1400 u8 new_addr[ETH_ALEN]; 1401 1402 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN) 1403 return -EINVAL; 1404 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN); 1405 if (!is_link_local_ether_addr(new_addr)) 1406 return -EINVAL; 1407 if (new_addr[5] == 1 || /* 802.3x Pause address */ 1408 new_addr[5] == 2 || /* 802.3ad Slow protocols */ 1409 new_addr[5] == 3) /* 802.1X PAE address */ 1410 return -EINVAL; 1411 spin_lock_bh(&br->lock); 1412 memcpy(br->group_addr, new_addr, sizeof(br->group_addr)); 1413 spin_unlock_bh(&br->lock); 1414 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true); 1415 br_recalculate_fwd_mask(br); 1416 } 1417 1418 if (data[IFLA_BR_FDB_FLUSH]) { 1419 struct net_bridge_fdb_flush_desc desc = { 1420 .flags_mask = BIT(BR_FDB_STATIC) 1421 }; 1422 1423 br_fdb_flush(br, &desc); 1424 } 1425 1426 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1427 if (data[IFLA_BR_MCAST_ROUTER]) { 1428 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]); 1429 1430 err = br_multicast_set_router(&br->multicast_ctx, 1431 multicast_router); 1432 if (err) 1433 return err; 1434 } 1435 1436 if (data[IFLA_BR_MCAST_SNOOPING]) { 1437 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]); 1438 1439 err = br_multicast_toggle(br, mcast_snooping, extack); 1440 if (err) 1441 return err; 1442 } 1443 1444 if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) { 1445 u8 val; 1446 1447 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]); 1448 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val); 1449 } 1450 1451 if (data[IFLA_BR_MCAST_QUERIER]) { 1452 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]); 1453 1454 err = br_multicast_set_querier(&br->multicast_ctx, 1455 mcast_querier); 1456 if (err) 1457 return err; 1458 } 1459 1460 if (data[IFLA_BR_MCAST_HASH_ELASTICITY]) 1461 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n", 1462 RHT_ELASTICITY); 1463 1464 if (data[IFLA_BR_MCAST_HASH_MAX]) 1465 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]); 1466 1467 if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) { 1468 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]); 1469 1470 br->multicast_ctx.multicast_last_member_count = val; 1471 } 1472 1473 if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) { 1474 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]); 1475 1476 br->multicast_ctx.multicast_startup_query_count = val; 1477 } 1478 1479 if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) { 1480 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]); 1481 1482 br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val); 1483 } 1484 1485 if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) { 1486 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]); 1487 1488 br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val); 1489 } 1490 1491 if (data[IFLA_BR_MCAST_QUERIER_INTVL]) { 1492 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]); 1493 1494 br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val); 1495 } 1496 1497 if (data[IFLA_BR_MCAST_QUERY_INTVL]) { 1498 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]); 1499 1500 br_multicast_set_query_intvl(&br->multicast_ctx, val); 1501 } 1502 1503 if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) { 1504 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]); 1505 1506 br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val); 1507 } 1508 1509 if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) { 1510 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]); 1511 1512 br_multicast_set_startup_query_intvl(&br->multicast_ctx, val); 1513 } 1514 1515 if (data[IFLA_BR_MCAST_STATS_ENABLED]) { 1516 __u8 mcast_stats; 1517 1518 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]); 1519 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats); 1520 } 1521 1522 if (data[IFLA_BR_MCAST_IGMP_VERSION]) { 1523 __u8 igmp_version; 1524 1525 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]); 1526 err = br_multicast_set_igmp_version(&br->multicast_ctx, 1527 igmp_version); 1528 if (err) 1529 return err; 1530 } 1531 1532 #if IS_ENABLED(CONFIG_IPV6) 1533 if (data[IFLA_BR_MCAST_MLD_VERSION]) { 1534 __u8 mld_version; 1535 1536 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]); 1537 err = br_multicast_set_mld_version(&br->multicast_ctx, 1538 mld_version); 1539 if (err) 1540 return err; 1541 } 1542 #endif 1543 #endif 1544 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 1545 if (data[IFLA_BR_NF_CALL_IPTABLES]) { 1546 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]); 1547 1548 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val); 1549 } 1550 1551 if (data[IFLA_BR_NF_CALL_IP6TABLES]) { 1552 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]); 1553 1554 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val); 1555 } 1556 1557 if (data[IFLA_BR_NF_CALL_ARPTABLES]) { 1558 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]); 1559 1560 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val); 1561 } 1562 #endif 1563 1564 if (data[IFLA_BR_MULTI_BOOLOPT]) { 1565 struct br_boolopt_multi *bm; 1566 1567 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]); 1568 err = br_boolopt_multi_toggle(br, bm, extack); 1569 if (err) 1570 return err; 1571 } 1572 1573 if (data[IFLA_BR_FDB_MAX_LEARNED]) { 1574 u32 val = nla_get_u32(data[IFLA_BR_FDB_MAX_LEARNED]); 1575 1576 WRITE_ONCE(br->fdb_max_learned, val); 1577 } 1578 1579 return 0; 1580 } 1581 1582 static int br_dev_newlink(struct net_device *dev, 1583 struct rtnl_newlink_params *params, 1584 struct netlink_ext_ack *extack) 1585 { 1586 struct net_bridge *br = netdev_priv(dev); 1587 struct nlattr **data = params->data; 1588 struct nlattr **tb = params->tb; 1589 int err; 1590 1591 err = register_netdevice(dev); 1592 if (err) 1593 return err; 1594 1595 if (tb[IFLA_ADDRESS]) { 1596 spin_lock_bh(&br->lock); 1597 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS])); 1598 spin_unlock_bh(&br->lock); 1599 } 1600 1601 err = br_changelink(dev, tb, data, extack); 1602 if (err) 1603 br_dev_delete(dev, NULL); 1604 1605 return err; 1606 } 1607 1608 static size_t br_get_size(const struct net_device *brdev) 1609 { 1610 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */ 1611 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */ 1612 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */ 1613 nla_total_size(sizeof(u32)) + /* IFLA_BR_AGEING_TIME */ 1614 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_STATE */ 1615 nla_total_size(sizeof(u16)) + /* IFLA_BR_PRIORITY */ 1616 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_FILTERING */ 1617 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1618 nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */ 1619 nla_total_size(sizeof(u16)) + /* IFLA_BR_VLAN_DEFAULT_PVID */ 1620 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_ENABLED */ 1621 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_PER_PORT */ 1622 #endif 1623 nla_total_size(sizeof(u16)) + /* IFLA_BR_GROUP_FWD_MASK */ 1624 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_ROOT_ID */ 1625 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_BRIDGE_ID */ 1626 nla_total_size(sizeof(u16)) + /* IFLA_BR_ROOT_PORT */ 1627 nla_total_size(sizeof(u32)) + /* IFLA_BR_ROOT_PATH_COST */ 1628 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE */ 1629 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */ 1630 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */ 1631 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */ 1632 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */ 1633 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */ 1634 nla_total_size(ETH_ALEN) + /* IFLA_BR_GROUP_ADDR */ 1635 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_N_LEARNED */ 1636 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_MAX_LEARNED */ 1637 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1638 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_ROUTER */ 1639 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_SNOOPING */ 1640 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */ 1641 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERIER */ 1642 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_STATS_ENABLED */ 1643 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */ 1644 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_MAX */ 1645 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */ 1646 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */ 1647 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */ 1648 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */ 1649 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */ 1650 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */ 1651 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */ 1652 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */ 1653 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_IGMP_VERSION */ 1654 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_MLD_VERSION */ 1655 br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */ 1656 #endif 1657 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 1658 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IPTABLES */ 1659 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IP6TABLES */ 1660 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_ARPTABLES */ 1661 #endif 1662 nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */ 1663 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_MODE */ 1664 0; 1665 } 1666 1667 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev) 1668 { 1669 struct net_bridge *br = netdev_priv(brdev); 1670 u32 forward_delay = jiffies_to_clock_t(br->forward_delay); 1671 u32 hello_time = jiffies_to_clock_t(br->hello_time); 1672 u32 age_time = jiffies_to_clock_t(br->max_age); 1673 u32 ageing_time = jiffies_to_clock_t(br->ageing_time); 1674 u32 stp_enabled = br->stp_enabled; 1675 u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1]; 1676 u8 vlan_enabled = br_vlan_enabled(br->dev); 1677 struct br_boolopt_multi bm; 1678 u64 clockval; 1679 1680 clockval = br_timer_value(&br->hello_timer); 1681 if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD)) 1682 return -EMSGSIZE; 1683 clockval = br_timer_value(&br->tcn_timer); 1684 if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD)) 1685 return -EMSGSIZE; 1686 clockval = br_timer_value(&br->topology_change_timer); 1687 if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval, 1688 IFLA_BR_PAD)) 1689 return -EMSGSIZE; 1690 clockval = br_timer_value(&br->gc_work.timer); 1691 if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD)) 1692 return -EMSGSIZE; 1693 1694 br_boolopt_multi_get(br, &bm); 1695 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) || 1696 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) || 1697 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) || 1698 nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) || 1699 nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) || 1700 nla_put_u16(skb, IFLA_BR_PRIORITY, priority) || 1701 nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) || 1702 nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) || 1703 nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id), 1704 &br->bridge_id) || 1705 nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id), 1706 &br->designated_root) || 1707 nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) || 1708 nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) || 1709 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) || 1710 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED, 1711 br->topology_change_detected) || 1712 nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) || 1713 nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm) || 1714 nla_put_u32(skb, IFLA_BR_FDB_N_LEARNED, 1715 atomic_read(&br->fdb_n_learned)) || 1716 nla_put_u32(skb, IFLA_BR_FDB_MAX_LEARNED, br->fdb_max_learned) || 1717 nla_put_u32(skb, IFLA_BR_STP_MODE, br->stp_mode)) 1718 return -EMSGSIZE; 1719 1720 #ifdef CONFIG_BRIDGE_VLAN_FILTERING 1721 if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) || 1722 nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) || 1723 nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED, 1724 br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) || 1725 nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT, 1726 br_opt_get(br, BROPT_VLAN_STATS_PER_PORT))) 1727 return -EMSGSIZE; 1728 #endif 1729 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1730 if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, 1731 br->multicast_ctx.multicast_router) || 1732 nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING, 1733 br_opt_get(br, BROPT_MULTICAST_ENABLED)) || 1734 nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR, 1735 br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) || 1736 nla_put_u8(skb, IFLA_BR_MCAST_QUERIER, 1737 br->multicast_ctx.multicast_querier) || 1738 nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED, 1739 br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) || 1740 nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) || 1741 nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) || 1742 nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT, 1743 br->multicast_ctx.multicast_last_member_count) || 1744 nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT, 1745 br->multicast_ctx.multicast_startup_query_count) || 1746 nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION, 1747 br->multicast_ctx.multicast_igmp_version) || 1748 br_multicast_dump_querier_state(skb, &br->multicast_ctx, 1749 IFLA_BR_MCAST_QUERIER_STATE)) 1750 return -EMSGSIZE; 1751 #if IS_ENABLED(CONFIG_IPV6) 1752 if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION, 1753 br->multicast_ctx.multicast_mld_version)) 1754 return -EMSGSIZE; 1755 #endif 1756 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval); 1757 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval, 1758 IFLA_BR_PAD)) 1759 return -EMSGSIZE; 1760 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval); 1761 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval, 1762 IFLA_BR_PAD)) 1763 return -EMSGSIZE; 1764 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval); 1765 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval, 1766 IFLA_BR_PAD)) 1767 return -EMSGSIZE; 1768 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval); 1769 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval, 1770 IFLA_BR_PAD)) 1771 return -EMSGSIZE; 1772 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval); 1773 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval, 1774 IFLA_BR_PAD)) 1775 return -EMSGSIZE; 1776 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval); 1777 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval, 1778 IFLA_BR_PAD)) 1779 return -EMSGSIZE; 1780 #endif 1781 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER) 1782 if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES, 1783 br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) || 1784 nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES, 1785 br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) || 1786 nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES, 1787 br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0)) 1788 return -EMSGSIZE; 1789 #endif 1790 1791 return 0; 1792 } 1793 1794 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr) 1795 { 1796 struct net_bridge_port *p = NULL; 1797 struct net_bridge_vlan_group *vg; 1798 struct net_bridge_vlan *v; 1799 struct net_bridge *br; 1800 int numvls = 0; 1801 1802 switch (attr) { 1803 case IFLA_STATS_LINK_XSTATS: 1804 br = netdev_priv(dev); 1805 vg = br_vlan_group(br); 1806 break; 1807 case IFLA_STATS_LINK_XSTATS_SLAVE: 1808 p = br_port_get_rtnl(dev); 1809 if (!p) 1810 return 0; 1811 vg = nbp_vlan_group(p); 1812 break; 1813 default: 1814 return 0; 1815 } 1816 1817 if (vg) { 1818 /* we need to count all, even placeholder entries */ 1819 list_for_each_entry(v, &vg->vlan_list, vlist) 1820 numvls++; 1821 } 1822 1823 return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) + 1824 nla_total_size_64bit(sizeof(struct br_mcast_stats)) + 1825 (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) + 1826 nla_total_size(0); 1827 } 1828 1829 static int br_fill_linkxstats(struct sk_buff *skb, 1830 const struct net_device *dev, 1831 int *prividx, int attr) 1832 { 1833 struct nlattr *nla __maybe_unused; 1834 struct net_bridge_port *p = NULL; 1835 struct net_bridge_vlan_group *vg; 1836 struct net_bridge_vlan *v; 1837 struct net_bridge *br; 1838 struct nlattr *nest; 1839 int vl_idx = 0; 1840 1841 switch (attr) { 1842 case IFLA_STATS_LINK_XSTATS: 1843 br = netdev_priv(dev); 1844 vg = br_vlan_group(br); 1845 break; 1846 case IFLA_STATS_LINK_XSTATS_SLAVE: 1847 p = br_port_get_rtnl(dev); 1848 if (!p) 1849 return 0; 1850 br = p->br; 1851 vg = nbp_vlan_group(p); 1852 break; 1853 default: 1854 return -EINVAL; 1855 } 1856 1857 nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE); 1858 if (!nest) 1859 return -EMSGSIZE; 1860 1861 if (vg) { 1862 u16 pvid; 1863 1864 pvid = br_get_pvid(vg); 1865 list_for_each_entry(v, &vg->vlan_list, vlist) { 1866 struct bridge_vlan_xstats vxi; 1867 struct pcpu_sw_netstats stats; 1868 1869 if (++vl_idx < *prividx) 1870 continue; 1871 memset(&vxi, 0, sizeof(vxi)); 1872 vxi.vid = v->vid; 1873 vxi.flags = v->flags; 1874 if (v->vid == pvid) 1875 vxi.flags |= BRIDGE_VLAN_INFO_PVID; 1876 br_vlan_get_stats(v, &stats); 1877 vxi.rx_bytes = u64_stats_read(&stats.rx_bytes); 1878 vxi.rx_packets = u64_stats_read(&stats.rx_packets); 1879 vxi.tx_bytes = u64_stats_read(&stats.tx_bytes); 1880 vxi.tx_packets = u64_stats_read(&stats.tx_packets); 1881 1882 if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi)) 1883 goto nla_put_failure; 1884 } 1885 } 1886 1887 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 1888 if (++vl_idx >= *prividx) { 1889 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST, 1890 sizeof(struct br_mcast_stats), 1891 BRIDGE_XSTATS_PAD); 1892 if (!nla) 1893 goto nla_put_failure; 1894 br_multicast_get_stats(br, p, nla_data(nla)); 1895 } 1896 #endif 1897 1898 if (p) { 1899 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP, 1900 sizeof(p->stp_xstats), 1901 BRIDGE_XSTATS_PAD); 1902 if (!nla) 1903 goto nla_put_failure; 1904 1905 spin_lock_bh(&br->lock); 1906 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats)); 1907 spin_unlock_bh(&br->lock); 1908 } 1909 1910 nla_nest_end(skb, nest); 1911 *prividx = 0; 1912 1913 return 0; 1914 1915 nla_put_failure: 1916 nla_nest_end(skb, nest); 1917 *prividx = vl_idx; 1918 1919 return -EMSGSIZE; 1920 } 1921 1922 static struct rtnl_af_ops br_af_ops __read_mostly = { 1923 .family = AF_BRIDGE, 1924 .get_link_af_size = br_get_link_af_size_filtered, 1925 }; 1926 1927 struct rtnl_link_ops br_link_ops __read_mostly = { 1928 .kind = "bridge", 1929 .priv_size = sizeof(struct net_bridge), 1930 .setup = br_dev_setup, 1931 .maxtype = IFLA_BR_MAX, 1932 .policy = br_policy, 1933 .validate = br_validate, 1934 .newlink = br_dev_newlink, 1935 .changelink = br_changelink, 1936 .dellink = br_dev_delete, 1937 .get_size = br_get_size, 1938 .fill_info = br_fill_info, 1939 .fill_linkxstats = br_fill_linkxstats, 1940 .get_linkxstats_size = br_get_linkxstats_size, 1941 1942 .slave_maxtype = IFLA_BRPORT_MAX, 1943 .slave_policy = br_port_policy, 1944 .slave_changelink = br_port_slave_changelink, 1945 .get_slave_size = br_port_get_slave_size, 1946 .fill_slave_info = br_port_fill_slave_info, 1947 }; 1948 1949 int __init br_netlink_init(void) 1950 { 1951 int err; 1952 1953 err = br_vlan_rtnl_init(); 1954 if (err) 1955 goto out; 1956 1957 err = rtnl_af_register(&br_af_ops); 1958 if (err) 1959 goto out_vlan; 1960 1961 err = rtnl_link_register(&br_link_ops); 1962 if (err) 1963 goto out_af; 1964 1965 return 0; 1966 1967 out_af: 1968 rtnl_af_unregister(&br_af_ops); 1969 out_vlan: 1970 br_vlan_rtnl_uninit(); 1971 out: 1972 return err; 1973 } 1974 1975 void br_netlink_fini(void) 1976 { 1977 br_vlan_rtnl_uninit(); 1978 rtnl_af_unregister(&br_af_ops); 1979 rtnl_link_unregister(&br_link_ops); 1980 } 1981