projects/linux·blob master · refs

2001 lines · 58.3 KiB

1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Bridge netlink control interface
4 *
5 * Authors:
6 * Stephen Hemminger <[email protected]>
7 */
8
9#include <linux/kernel.h>
10#include <linux/slab.h>
11#include <linux/etherdevice.h>
12#include <net/rtnetlink.h>
13#include <net/net_namespace.h>
14#include <net/sock.h>
15#include <uapi/linux/if_bridge.h>
16
17#include "br_private.h"
18#include "br_private_stp.h"
19#include "br_private_cfm.h"
20#include "br_private_tunnel.h"
21#include "br_private_mcast_eht.h"
22
23static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
24 u32 filter_mask)
25{
26 struct net_bridge_vlan *v;
27 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
28 u16 flags, pvid;
29 int num_vlans = 0;
30
31 if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
32 return 0;
33
34 pvid = br_get_pvid(vg);
35 /* Count number of vlan infos */
36 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
37 flags = 0;
38 /* only a context, bridge vlan not activated */
39 if (!br_vlan_should_use(v))
40 continue;
41 if (v->vid == pvid)
42 flags |= BRIDGE_VLAN_INFO_PVID;
43
44 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
45 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
46
47 if (vid_range_start == 0) {
48 goto initvars;
49 } else if ((v->vid - vid_range_end) == 1 &&
50 flags == vid_range_flags) {
51 vid_range_end = v->vid;
52 continue;
53 } else {
54 if ((vid_range_end - vid_range_start) > 0)
55 num_vlans += 2;
56 else
57 num_vlans += 1;
58 }
59initvars:
60 vid_range_start = v->vid;
61 vid_range_end = v->vid;
62 vid_range_flags = flags;
63 }
64
65 if (vid_range_start != 0) {
66 if ((vid_range_end - vid_range_start) > 0)
67 num_vlans += 2;
68 else
69 num_vlans += 1;
70 }
71
72 return num_vlans;
73}
74
75static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
76 u32 filter_mask)
77{
78 int num_vlans;
79
80 if (!vg)
81 return 0;
82
83 if (filter_mask & RTEXT_FILTER_BRVLAN)
84 return vg->num_vlans;
85
86 rcu_read_lock();
87 num_vlans = __get_num_vlan_infos(vg, filter_mask);
88 rcu_read_unlock();
89
90 return num_vlans;
91}
92
93static size_t br_get_link_af_size_filtered(const struct net_device *dev,
94 u32 filter_mask)
95{
96 struct net_bridge_vlan_group *vg = NULL;
97 struct net_bridge_port *p = NULL;
98 struct net_bridge *br = NULL;
99 u32 num_cfm_peer_mep_infos;
100 u32 num_cfm_mep_infos;
101 size_t vinfo_sz = 0;
102 int num_vlan_infos;
103
104 rcu_read_lock();
105 if (netif_is_bridge_port(dev)) {
106 p = br_port_get_check_rcu(dev);
107 if (p)
108 vg = nbp_vlan_group_rcu(p);
109 } else if (netif_is_bridge_master(dev)) {
110 br = netdev_priv(dev);
111 vg = br_vlan_group_rcu(br);
112 }
113 num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
114 rcu_read_unlock();
115
116 if (p && test_bit(BR_VLAN_TUNNEL_BIT, &p->flags))
117 vinfo_sz += br_get_vlan_tunnel_info_size(vg);
118
119 /* Each VLAN is returned in bridge_vlan_info along with flags */
120 vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
121
122 if (p && vg && (filter_mask & RTEXT_FILTER_MST))
123 vinfo_sz += br_mst_info_size(vg);
124
125 if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
126 return vinfo_sz;
127
128 if (!br)
129 return vinfo_sz;
130
131 /* CFM status info must be added */
132 br_cfm_mep_count(br, &num_cfm_mep_infos);
133 br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
134
135 vinfo_sz += nla_total_size(0); /* IFLA_BRIDGE_CFM */
136 /* For each status struct the MEP instance (u32) is added */
137 /* MEP instance (u32) + br_cfm_mep_status */
138 vinfo_sz += num_cfm_mep_infos *
139 /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
140 (nla_total_size(sizeof(u32))
141 /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
142 + nla_total_size(sizeof(u32))
143 /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
144 + nla_total_size(sizeof(u32))
145 /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
146 + nla_total_size(sizeof(u32)));
147 /* MEP instance (u32) + br_cfm_cc_peer_status */
148 vinfo_sz += num_cfm_peer_mep_infos *
149 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
150 (nla_total_size(sizeof(u32))
151 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
152 + nla_total_size(sizeof(u32))
153 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
154 + nla_total_size(sizeof(u32))
155 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
156 + nla_total_size(sizeof(u32))
157 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
158 + nla_total_size(sizeof(u8))
159 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
160 + nla_total_size(sizeof(u8))
161 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
162 + nla_total_size(sizeof(u32))
163 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
164 + nla_total_size(sizeof(u32))
165 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
166 + nla_total_size(sizeof(u32)));
167
168 return vinfo_sz;
169}
170
171static inline size_t br_port_info_size(void)
172{
173 return nla_total_size(1) /* IFLA_BRPORT_STATE */
174 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */
175 + nla_total_size(4) /* IFLA_BRPORT_COST */
176 + nla_total_size(1) /* IFLA_BRPORT_MODE */
177 + nla_total_size(1) /* IFLA_BRPORT_GUARD */
178 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */
179 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */
180 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */
181 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */
182 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */
183 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */
184 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */
185 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */
186 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */
187 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */
188 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */
189 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */
190 + nla_total_size(1) /* IFLA_BRPORT_LOCKED */
191 + nla_total_size(1) /* IFLA_BRPORT_MAB */
192 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */
193 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_FORWARD_GRAT */
194 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */
195 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */
196 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_PORT */
197 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_COST */
198 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_ID */
199 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_NO */
200 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
201 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_CONFIG_PENDING */
202 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
203 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
204 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
205#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
206 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MULTICAST_ROUTER */
207 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_N_GROUPS */
208 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_MAX_GROUPS */
209#endif
210 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_GROUP_FWD_MASK */
211 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_RING_OPEN */
212 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_IN_OPEN */
213 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
214 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
215 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_BACKUP_NHID */
216 + 0;
217}
218
219static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
220{
221 return NLMSG_ALIGN(sizeof(struct ifinfomsg))
222 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
223 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
224 + nla_total_size(4) /* IFLA_MASTER */
225 + nla_total_size(4) /* IFLA_MTU */
226 + nla_total_size(4) /* IFLA_LINK */
227 + nla_total_size(1) /* IFLA_OPERSTATE */
228 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
229 + nla_total_size(br_get_link_af_size_filtered(dev,
230 filter_mask)) /* IFLA_AF_SPEC */
231 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
232}
233
234static int br_port_fill_attrs(struct sk_buff *skb,
235 const struct net_bridge_port *p)
236{
237 unsigned long flags = READ_ONCE(p->flags);
238 u8 mode = !!(flags & BR_HAIRPIN_MODE);
239 struct net_bridge_port *backup_p;
240 u64 timerval;
241
242 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
243 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, READ_ONCE(p->priority)) ||
244 nla_put_u32(skb, IFLA_BRPORT_COST, READ_ONCE(p->path_cost)) ||
245 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
246 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(flags & BR_BPDU_GUARD)) ||
247 nla_put_u8(skb, IFLA_BRPORT_PROTECT,
248 !!(flags & BR_ROOT_BLOCK)) ||
249 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
250 !!(flags & BR_MULTICAST_FAST_LEAVE)) ||
251 nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
252 !!(flags & BR_MULTICAST_TO_UNICAST)) ||
253 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(flags & BR_LEARNING)) ||
254 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
255 !!(flags & BR_FLOOD)) ||
256 nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
257 !!(flags & BR_MCAST_FLOOD)) ||
258 nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
259 !!(flags & BR_BCAST_FLOOD)) ||
260 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(flags & BR_PROXYARP)) ||
261 nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
262 !!(flags & BR_PROXYARP_WIFI)) ||
263 nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
264 &p->designated_root) ||
265 nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
266 &p->designated_bridge) ||
267 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT,
268 READ_ONCE(p->designated_port)) ||
269 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST,
270 READ_ONCE(p->designated_cost)) ||
271 nla_put_u16(skb, IFLA_BRPORT_ID, READ_ONCE(p->port_id)) ||
272 nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
273 nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
274 p->topology_change_ack) ||
275 nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, READ_ONCE(p->config_pending)) ||
276 nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(flags &
277 BR_VLAN_TUNNEL)) ||
278 nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
279 nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
280 !!(flags & BR_NEIGH_SUPPRESS)) ||
281 nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(flags &
282 BR_MRP_LOST_CONT)) ||
283 nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
284 !!(flags & BR_MRP_LOST_IN_CONT)) ||
285 nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(flags & BR_ISOLATED)) ||
286 nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(flags & BR_PORT_LOCKED)) ||
287 nla_put_u8(skb, IFLA_BRPORT_MAB, !!(flags & BR_PORT_MAB)) ||
288 nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
289 !!(flags & BR_NEIGH_VLAN_SUPPRESS)) ||
290 nla_put_u8(skb, IFLA_BRPORT_NEIGH_FORWARD_GRAT,
291 !!(flags & BR_NEIGH_FORWARD_GRAT)))
292 return -EMSGSIZE;
293
294 timerval = br_timer_value(&p->message_age_timer);
295 if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
296 IFLA_BRPORT_PAD))
297 return -EMSGSIZE;
298 timerval = br_timer_value(&p->forward_delay_timer);
299 if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
300 IFLA_BRPORT_PAD))
301 return -EMSGSIZE;
302 timerval = br_timer_value(&p->hold_timer);
303 if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
304 IFLA_BRPORT_PAD))
305 return -EMSGSIZE;
306
307#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
308 if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
309 p->multicast_ctx.multicast_router) ||
310 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
311 p->multicast_eht_hosts_limit) ||
312 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
313 p->multicast_eht_hosts_cnt) ||
314 nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS,
315 br_multicast_ngroups_get(&p->multicast_ctx)) ||
316 nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS,
317 br_multicast_ngroups_get_max(&p->multicast_ctx)))
318 return -EMSGSIZE;
319#endif
320
321 /* we might be called only with br->lock */
322 rcu_read_lock();
323 backup_p = rcu_dereference(p->backup_port);
324 if (backup_p)
325 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
326 backup_p->dev->ifindex);
327 rcu_read_unlock();
328
329 if (p->backup_nhid &&
330 nla_put_u32(skb, IFLA_BRPORT_BACKUP_NHID, p->backup_nhid))
331 return -EMSGSIZE;
332
333 return 0;
334}
335
336static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
337 u16 vid_end, u16 flags)
338{
339 struct bridge_vlan_info vinfo;
340
341 if ((vid_end - vid_start) > 0) {
342 /* add range to skb */
343 vinfo.vid = vid_start;
344 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
345 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
346 sizeof(vinfo), &vinfo))
347 goto nla_put_failure;
348
349 vinfo.vid = vid_end;
350 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
351 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
352 sizeof(vinfo), &vinfo))
353 goto nla_put_failure;
354 } else {
355 vinfo.vid = vid_start;
356 vinfo.flags = flags;
357 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
358 sizeof(vinfo), &vinfo))
359 goto nla_put_failure;
360 }
361
362 return 0;
363
364nla_put_failure:
365 return -EMSGSIZE;
366}
367
368static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
369 struct net_bridge_vlan_group *vg)
370{
371 struct net_bridge_vlan *v;
372 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
373 u16 flags, pvid;
374 int err = 0;
375
376 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
377 * and mark vlan info with begin and end flags
378 * if vlaninfo represents a range
379 */
380 pvid = br_get_pvid(vg);
381 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
382 flags = 0;
383 if (!br_vlan_should_use(v))
384 continue;
385 if (v->vid == pvid)
386 flags |= BRIDGE_VLAN_INFO_PVID;
387
388 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
389 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
390
391 if (vid_range_start == 0) {
392 goto initvars;
393 } else if ((v->vid - vid_range_end) == 1 &&
394 flags == vid_range_flags) {
395 vid_range_end = v->vid;
396 continue;
397 } else {
398 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
399 vid_range_end,
400 vid_range_flags);
401 if (err)
402 return err;
403 }
404
405initvars:
406 vid_range_start = v->vid;
407 vid_range_end = v->vid;
408 vid_range_flags = flags;
409 }
410
411 if (vid_range_start != 0) {
412 /* Call it once more to send any left over vlans */
413 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
414 vid_range_end,
415 vid_range_flags);
416 if (err)
417 return err;
418 }
419
420 return 0;
421}
422
423static int br_fill_ifvlaninfo(struct sk_buff *skb,
424 struct net_bridge_vlan_group *vg)
425{
426 struct bridge_vlan_info vinfo;
427 struct net_bridge_vlan *v;
428 u16 pvid;
429
430 pvid = br_get_pvid(vg);
431 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
432 if (!br_vlan_should_use(v))
433 continue;
434
435 vinfo.vid = v->vid;
436 vinfo.flags = 0;
437 if (v->vid == pvid)
438 vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
439
440 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
441 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
442
443 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
444 sizeof(vinfo), &vinfo))
445 goto nla_put_failure;
446 }
447
448 return 0;
449
450nla_put_failure:
451 return -EMSGSIZE;
452}
453
454/*
455 * Create one netlink message for one interface
456 * Contains port and master info as well as carrier and bridge state.
457 */
458static int br_fill_ifinfo(struct sk_buff *skb,
459 const struct net_bridge_port *port,
460 u32 pid, u32 seq, int event, unsigned int flags,
461 u32 filter_mask, const struct net_device *dev,
462 bool getlink)
463{
464 u8 operstate = netif_running(dev) ? READ_ONCE(dev->operstate) :
465 IF_OPER_DOWN;
466 struct nlattr *af = NULL;
467 struct net_bridge *br;
468 struct ifinfomsg *hdr;
469 struct nlmsghdr *nlh;
470
471 if (port)
472 br = port->br;
473 else
474 br = netdev_priv(dev);
475
476 br_debug(br, "br_fill_ifinfo event %d port %s master %s\n",
477 event, dev->name, br->dev->name);
478
479 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
480 if (nlh == NULL)
481 return -EMSGSIZE;
482
483 hdr = nlmsg_data(nlh);
484 hdr->ifi_family = AF_BRIDGE;
485 hdr->__ifi_pad = 0;
486 hdr->ifi_type = dev->type;
487 hdr->ifi_index = dev->ifindex;
488 hdr->ifi_flags = netif_get_flags(dev);
489 hdr->ifi_change = 0;
490
491 if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
492 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
493 nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
494 nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
495 (dev->addr_len &&
496 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
497 (dev->ifindex != dev_get_iflink(dev) &&
498 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
499 goto nla_put_failure;
500
501 if (event == RTM_NEWLINK && port) {
502 struct nlattr *nest;
503
504 nest = nla_nest_start(skb, IFLA_PROTINFO);
505 if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
506 goto nla_put_failure;
507 nla_nest_end(skb, nest);
508 }
509
510 if (filter_mask & (RTEXT_FILTER_BRVLAN |
511 RTEXT_FILTER_BRVLAN_COMPRESSED |
512 RTEXT_FILTER_MRP |
513 RTEXT_FILTER_CFM_CONFIG |
514 RTEXT_FILTER_CFM_STATUS |
515 RTEXT_FILTER_MST)) {
516 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
517 if (!af)
518 goto nla_put_failure;
519 }
520
521 /* Check if the VID information is requested */
522 if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
523 (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
524 struct net_bridge_vlan_group *vg;
525 int err;
526
527 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
528 rcu_read_lock();
529 if (port)
530 vg = nbp_vlan_group_rcu(port);
531 else
532 vg = br_vlan_group_rcu(br);
533
534 if (!vg || !vg->num_vlans) {
535 rcu_read_unlock();
536 goto done;
537 }
538 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
539 err = br_fill_ifvlaninfo_compressed(skb, vg);
540 else
541 err = br_fill_ifvlaninfo(skb, vg);
542
543 if (port && test_bit(BR_VLAN_TUNNEL_BIT, &port->flags))
544 err = br_fill_vlan_tunnel_info(skb, vg);
545 rcu_read_unlock();
546 if (err)
547 goto nla_put_failure;
548 }
549
550 if (filter_mask & RTEXT_FILTER_MRP) {
551 int err;
552
553 if (!br_mrp_enabled(br) || port)
554 goto done;
555
556 rcu_read_lock();
557 err = br_mrp_fill_info(skb, br);
558 rcu_read_unlock();
559
560 if (err)
561 goto nla_put_failure;
562 }
563
564 if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
565 struct nlattr *cfm_nest = NULL;
566 int err;
567
568 if (!br_cfm_created(br) || port)
569 goto done;
570
571 cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
572 if (!cfm_nest)
573 goto nla_put_failure;
574
575 if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
576 rcu_read_lock();
577 err = br_cfm_config_fill_info(skb, br);
578 rcu_read_unlock();
579 if (err)
580 goto nla_put_failure;
581 }
582
583 if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
584 rcu_read_lock();
585 err = br_cfm_status_fill_info(skb, br, getlink);
586 rcu_read_unlock();
587 if (err)
588 goto nla_put_failure;
589 }
590
591 nla_nest_end(skb, cfm_nest);
592 }
593
594 if ((filter_mask & RTEXT_FILTER_MST) &&
595 br_opt_get(br, BROPT_MST_ENABLED) && port) {
596 const struct net_bridge_vlan_group *vg = nbp_vlan_group(port);
597 struct nlattr *mst_nest;
598 int err;
599
600 if (!vg || !vg->num_vlans)
601 goto done;
602
603 mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST);
604 if (!mst_nest)
605 goto nla_put_failure;
606
607 err = br_mst_fill_info(skb, vg);
608 if (err)
609 goto nla_put_failure;
610
611 nla_nest_end(skb, mst_nest);
612 }
613
614done:
615 if (af) {
616 if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0))
617 nla_nest_end(skb, af);
618 else
619 nla_nest_cancel(skb, af);
620 }
621
622 nlmsg_end(skb, nlh);
623 return 0;
624
625nla_put_failure:
626 nlmsg_cancel(skb, nlh);
627 return -EMSGSIZE;
628}
629
630void br_info_notify(int event, const struct net_bridge *br,
631 const struct net_bridge_port *port, u32 filter)
632{
633 struct net_device *dev;
634 struct sk_buff *skb;
635 int err = -ENOBUFS;
636 struct net *net;
637 u16 port_no = 0;
638
639 if (WARN_ON(!port && !br))
640 return;
641
642 if (port) {
643 dev = port->dev;
644 br = port->br;
645 port_no = port->port_no;
646 } else {
647 dev = br->dev;
648 }
649
650 net = dev_net(dev);
651 br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
652
653 skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
654 if (skb == NULL)
655 goto errout;
656
657 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
658 if (err < 0) {
659 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
660 WARN_ON(err == -EMSGSIZE);
661 kfree_skb(skb);
662 goto errout;
663 }
664 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
665 return;
666errout:
667 rtnl_set_sk_err(net, RTNLGRP_LINK, err);
668}
669
670/* Notify listeners of a change in bridge or port information */
671void br_ifinfo_notify(int event, const struct net_bridge *br,
672 const struct net_bridge_port *port)
673{
674 u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
675
676 br_info_notify(event, br, port, filter);
677}
678
679/*
680 * Dump information about all ports, in response to GETLINK
681 */
682int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
683 struct net_device *dev, u32 filter_mask, int nlflags)
684{
685 struct net_bridge_port *port = br_port_get_rtnl(dev);
686
687 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
688 !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
689 !(filter_mask & RTEXT_FILTER_MRP) &&
690 !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
691 !(filter_mask & RTEXT_FILTER_CFM_STATUS))
692 return 0;
693
694 return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
695 filter_mask, dev, true);
696}
697
698static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
699 int cmd, struct bridge_vlan_info *vinfo, bool *changed,
700 struct netlink_ext_ack *extack)
701{
702 bool curr_change;
703 int err = 0;
704
705 switch (cmd) {
706 case RTM_SETLINK:
707 if (p) {
708 /* if the MASTER flag is set this will act on the global
709 * per-VLAN entry as well
710 */
711 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
712 &curr_change, extack);
713 } else {
714 vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
715 err = br_vlan_add(br, vinfo->vid, vinfo->flags,
716 &curr_change, extack);
717 }
718 if (curr_change)
719 *changed = true;
720 break;
721
722 case RTM_DELLINK:
723 if (p) {
724 if (!nbp_vlan_delete(p, vinfo->vid))
725 *changed = true;
726
727 if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
728 !br_vlan_delete(p->br, vinfo->vid))
729 *changed = true;
730 } else if (!br_vlan_delete(br, vinfo->vid)) {
731 *changed = true;
732 }
733 break;
734 }
735
736 return err;
737}
738
739int br_process_vlan_info(struct net_bridge *br,
740 struct net_bridge_port *p, int cmd,
741 struct bridge_vlan_info *vinfo_curr,
742 struct bridge_vlan_info **vinfo_last,
743 bool *changed,
744 struct netlink_ext_ack *extack)
745{
746 int err, rtm_cmd;
747
748 if (!br_vlan_valid_id(vinfo_curr->vid, extack))
749 return -EINVAL;
750
751 /* needed for vlan-only NEWVLAN/DELVLAN notifications */
752 rtm_cmd = br_afspec_cmd_to_rtm(cmd);
753
754 if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
755 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
756 return -EINVAL;
757 *vinfo_last = vinfo_curr;
758 return 0;
759 }
760
761 if (*vinfo_last) {
762 struct bridge_vlan_info tmp_vinfo;
763 int v, v_change_start = 0;
764
765 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
766 return -EINVAL;
767
768 memcpy(&tmp_vinfo, *vinfo_last,
769 sizeof(struct bridge_vlan_info));
770 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
771 bool curr_change = false;
772
773 tmp_vinfo.vid = v;
774 err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
775 extack);
776 if (err)
777 break;
778 if (curr_change) {
779 *changed = curr_change;
780 if (!v_change_start)
781 v_change_start = v;
782 } else {
783 /* nothing to notify yet */
784 if (!v_change_start)
785 continue;
786 br_vlan_notify(br, p, v_change_start,
787 v - 1, rtm_cmd);
788 v_change_start = 0;
789 }
790 cond_resched();
791 }
792 /* v_change_start is set only if the last/whole range changed */
793 if (v_change_start)
794 br_vlan_notify(br, p, v_change_start,
795 v - 1, rtm_cmd);
796
797 *vinfo_last = NULL;
798
799 return err;
800 }
801
802 err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
803 if (*changed)
804 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
805
806 return err;
807}
808
809static int br_afspec(struct net_bridge *br,
810 struct net_bridge_port *p,
811 struct nlattr *af_spec,
812 int cmd, bool *changed,
813 struct netlink_ext_ack *extack)
814{
815 struct bridge_vlan_info *vinfo_curr = NULL;
816 struct bridge_vlan_info *vinfo_last = NULL;
817 struct nlattr *attr;
818 struct vtunnel_info tinfo_last = {};
819 struct vtunnel_info tinfo_curr = {};
820 int err = 0, rem;
821
822 nla_for_each_nested(attr, af_spec, rem) {
823 err = 0;
824 switch (nla_type(attr)) {
825 case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
826 if (!p || !test_bit(BR_VLAN_TUNNEL_BIT, &p->flags))
827 return -EINVAL;
828 err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
829 if (err)
830 return err;
831 err = br_process_vlan_tunnel_info(br, p, cmd,
832 &tinfo_curr,
833 &tinfo_last,
834 changed);
835 if (err)
836 return err;
837 break;
838 case IFLA_BRIDGE_VLAN_INFO:
839 if (nla_len(attr) != sizeof(struct bridge_vlan_info))
840 return -EINVAL;
841 vinfo_curr = nla_data(attr);
842 err = br_process_vlan_info(br, p, cmd, vinfo_curr,
843 &vinfo_last, changed,
844 extack);
845 if (err)
846 return err;
847 break;
848 case IFLA_BRIDGE_MRP:
849 err = br_mrp_parse(br, p, attr, cmd, extack);
850 if (err)
851 return err;
852 break;
853 case IFLA_BRIDGE_CFM:
854 err = br_cfm_parse(br, p, attr, cmd, extack);
855 if (err)
856 return err;
857 break;
858 case IFLA_BRIDGE_MST:
859 if (!p) {
860 NL_SET_ERR_MSG(extack,
861 "MST states can only be set on bridge ports");
862 return -EINVAL;
863 }
864
865 if (cmd != RTM_SETLINK) {
866 NL_SET_ERR_MSG(extack,
867 "MST states can only be set through RTM_SETLINK");
868 return -EINVAL;
869 }
870
871 err = br_mst_process(p, attr, extack);
872 if (err)
873 return err;
874 break;
875 }
876 }
877
878 return err;
879}
880
881static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
882 [IFLA_BRPORT_UNSPEC] = { .strict_start_type =
883 IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 },
884 [IFLA_BRPORT_STATE] = { .type = NLA_U8 },
885 [IFLA_BRPORT_COST] = { .type = NLA_U32 },
886 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 },
887 [IFLA_BRPORT_MODE] = { .type = NLA_U8 },
888 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 },
889 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 },
890 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
891 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 },
892 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
893 [IFLA_BRPORT_PROXYARP] = { .type = NLA_U8 },
894 [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
895 [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
896 [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
897 [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
898 [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
899 [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
900 [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
901 [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
902 [IFLA_BRPORT_ISOLATED] = { .type = NLA_U8 },
903 [IFLA_BRPORT_LOCKED] = { .type = NLA_U8 },
904 [IFLA_BRPORT_MAB] = { .type = NLA_U8 },
905 [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
906 [IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
907 [IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT },
908 [IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 },
909 [IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1),
910 [IFLA_BRPORT_BACKUP_NHID] = { .type = NLA_U32 },
911 [IFLA_BRPORT_NEIGH_FORWARD_GRAT] = NLA_POLICY_MAX(NLA_U8, 1),
912};
913
914/* Change the state of the port and notify spanning tree */
915static int br_set_port_state(struct net_bridge_port *p, u8 state)
916{
917 if (state > BR_STATE_BLOCKING)
918 return -EINVAL;
919
920 /* if kernel STP is running, don't allow changes */
921 if (p->br->stp_enabled == BR_KERNEL_STP)
922 return -EBUSY;
923
924 /* if device is not up, change is not allowed
925 * if link is not present, only allowable state is disabled
926 */
927 if (!netif_running(p->dev) ||
928 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
929 return -ENETDOWN;
930
931 br_set_state(p, state);
932 br_port_state_selection(p->br);
933 return 0;
934}
935
936/* Set/clear or port flags based on attribute */
937static void br_set_port_flag(unsigned long *set_flags,
938 unsigned long *clear_flags,
939 struct nlattr *tb[],
940 int attrtype, unsigned long mask)
941{
942 if (tb[attrtype]) {
943 if (nla_get_u8(tb[attrtype]))
944 *set_flags |= mask;
945 else
946 *clear_flags |= mask;
947 }
948}
949
950/* Process bridge protocol info on port */
951static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
952 struct netlink_ext_ack *extack)
953{
954 unsigned long old_flags, flags, changed_mask;
955 unsigned long set = 0, clear = 0;
956 bool br_vlan_tunnel_old;
957 int err;
958
959 old_flags = READ_ONCE(p->flags);
960 br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
961
962 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
963 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
964 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_FAST_LEAVE,
965 BR_MULTICAST_FAST_LEAVE);
966 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
967 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
968 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
969 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MCAST_FLOOD,
970 BR_MCAST_FLOOD);
971 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MCAST_TO_UCAST,
972 BR_MULTICAST_TO_UNICAST);
973 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_BCAST_FLOOD,
974 BR_BCAST_FLOOD);
975 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
976 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_PROXYARP_WIFI,
977 BR_PROXYARP_WIFI);
978 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_VLAN_TUNNEL,
979 BR_VLAN_TUNNEL);
980 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_NEIGH_SUPPRESS,
981 BR_NEIGH_SUPPRESS);
982 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
983 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED);
984 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_MAB, BR_PORT_MAB);
985 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
986 BR_NEIGH_VLAN_SUPPRESS);
987 br_set_port_flag(&set, &clear, tb, IFLA_BRPORT_NEIGH_FORWARD_GRAT,
988 BR_NEIGH_FORWARD_GRAT);
989
990 flags = (old_flags | set) & ~clear;
991
992 if ((flags & BR_PORT_MAB) &&
993 (!(flags & BR_PORT_LOCKED) || !(flags & BR_LEARNING))) {
994 NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled");
995 return -EINVAL;
996 }
997 if (!(flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) {
998 struct net_bridge_fdb_flush_desc desc = {
999 .flags = BIT(BR_FDB_LOCKED),
1000 .flags_mask = BIT(BR_FDB_LOCKED),
1001 .port_ifindex = p->dev->ifindex,
1002 };
1003
1004 br_fdb_flush(p->br, &desc);
1005 }
1006
1007 changed_mask = old_flags ^ flags;
1008
1009 err = br_switchdev_set_port_flag(p, flags, changed_mask, extack);
1010 if (err)
1011 return err;
1012
1013 do {
1014 flags = (old_flags | set) & ~clear;
1015 } while (!try_cmpxchg(&p->flags, &old_flags, flags));
1016
1017 if (br_vlan_tunnel_old && !(flags & BR_VLAN_TUNNEL))
1018 nbp_vlan_tunnel_info_flush(p);
1019
1020 br_port_flags_change(p, changed_mask);
1021
1022 if (tb[IFLA_BRPORT_COST]) {
1023 spin_lock_bh(&p->br->lock);
1024 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
1025 spin_unlock_bh(&p->br->lock);
1026 if (err)
1027 return err;
1028 }
1029
1030 if (tb[IFLA_BRPORT_PRIORITY]) {
1031 spin_lock_bh(&p->br->lock);
1032 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
1033 spin_unlock_bh(&p->br->lock);
1034 if (err)
1035 return err;
1036 }
1037
1038 if (tb[IFLA_BRPORT_STATE]) {
1039 spin_lock_bh(&p->br->lock);
1040 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
1041 spin_unlock_bh(&p->br->lock);
1042 if (err)
1043 return err;
1044 }
1045
1046 if (tb[IFLA_BRPORT_FLUSH])
1047 br_fdb_delete_by_port(p->br, p, 0, 0);
1048
1049#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1050 if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
1051 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
1052
1053 err = br_multicast_set_port_router(&p->multicast_ctx,
1054 mcast_router);
1055 if (err)
1056 return err;
1057 }
1058
1059 if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
1060 u32 hlimit;
1061
1062 hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
1063 err = br_multicast_eht_set_hosts_limit(p, hlimit);
1064 if (err)
1065 return err;
1066 }
1067
1068 if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) {
1069 u32 max_groups;
1070
1071 max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]);
1072 br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups);
1073 }
1074#endif
1075
1076 if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
1077 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
1078
1079 if (fwd_mask & BR_GROUPFWD_MACPAUSE)
1080 return -EINVAL;
1081 p->group_fwd_mask = fwd_mask;
1082 }
1083
1084 if (tb[IFLA_BRPORT_BACKUP_PORT]) {
1085 struct net_device *backup_dev = NULL;
1086 u32 backup_ifindex;
1087
1088 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
1089 if (backup_ifindex) {
1090 backup_dev = __dev_get_by_index(dev_net(p->dev),
1091 backup_ifindex);
1092 if (!backup_dev)
1093 return -ENOENT;
1094 }
1095
1096 err = nbp_backup_change(p, backup_dev);
1097 if (err)
1098 return err;
1099 }
1100
1101 if (tb[IFLA_BRPORT_BACKUP_NHID]) {
1102 u32 backup_nhid = nla_get_u32(tb[IFLA_BRPORT_BACKUP_NHID]);
1103
1104 WRITE_ONCE(p->backup_nhid, backup_nhid);
1105 }
1106
1107 return 0;
1108}
1109
1110/* Change state and parameters on port. */
1111int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
1112 struct netlink_ext_ack *extack)
1113{
1114 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1115 struct nlattr *tb[IFLA_BRPORT_MAX + 1];
1116 struct net_bridge_port *p;
1117 struct nlattr *protinfo;
1118 struct nlattr *afspec;
1119 bool changed = false;
1120 int err = 0;
1121
1122 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
1123 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1124 if (!protinfo && !afspec)
1125 return 0;
1126
1127 p = br_port_get_rtnl(dev);
1128 /* We want to accept dev as bridge itself if the AF_SPEC
1129 * is set to see if someone is setting vlan info on the bridge
1130 */
1131 if (!p && !afspec)
1132 return -EINVAL;
1133
1134 if (p && protinfo) {
1135 if (protinfo->nla_type & NLA_F_NESTED) {
1136 err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1137 protinfo,
1138 br_port_policy,
1139 NULL);
1140 if (err)
1141 return err;
1142
1143 err = br_setport(p, tb, extack);
1144 } else {
1145 /* Binary compatibility with old RSTP */
1146 if (nla_len(protinfo) < sizeof(u8))
1147 return -EINVAL;
1148
1149 spin_lock_bh(&p->br->lock);
1150 err = br_set_port_state(p, nla_get_u8(protinfo));
1151 spin_unlock_bh(&p->br->lock);
1152 }
1153 if (err)
1154 goto out;
1155 changed = true;
1156 }
1157
1158 if (afspec)
1159 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1160
1161 if (changed)
1162 br_ifinfo_notify(RTM_NEWLINK, br, p);
1163out:
1164 return err;
1165}
1166
1167/* Delete port information */
1168int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1169{
1170 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1171 struct net_bridge_port *p;
1172 struct nlattr *afspec;
1173 bool changed = false;
1174 int err = 0;
1175
1176 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1177 if (!afspec)
1178 return 0;
1179
1180 p = br_port_get_rtnl(dev);
1181 /* We want to accept dev as bridge itself as well */
1182 if (!p && !netif_is_bridge_master(dev))
1183 return -EINVAL;
1184
1185 err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1186 if (changed)
1187 /* Send RTM_NEWLINK because userspace
1188 * expects RTM_NEWLINK for vlan dels
1189 */
1190 br_ifinfo_notify(RTM_NEWLINK, br, p);
1191
1192 return err;
1193}
1194
1195static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1196 struct netlink_ext_ack *extack)
1197{
1198 if (tb[IFLA_ADDRESS]) {
1199 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1200 return -EINVAL;
1201 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1202 return -EADDRNOTAVAIL;
1203 }
1204
1205 if (!data)
1206 return 0;
1207
1208#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1209 if (data[IFLA_BR_VLAN_PROTOCOL] &&
1210 !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1211 return -EPROTONOSUPPORT;
1212
1213 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1214 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1215
1216 if (defpvid >= VLAN_VID_MASK)
1217 return -EINVAL;
1218 }
1219#endif
1220
1221 return 0;
1222}
1223
1224static int br_port_slave_changelink(struct net_device *brdev,
1225 struct net_device *dev,
1226 struct nlattr *tb[],
1227 struct nlattr *data[],
1228 struct netlink_ext_ack *extack)
1229{
1230 if (!data)
1231 return 0;
1232
1233 return br_setport(br_port_get_rtnl(dev), data, extack);
1234}
1235
1236static int br_port_fill_slave_info(struct sk_buff *skb,
1237 const struct net_device *brdev,
1238 const struct net_device *dev)
1239{
1240 return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1241}
1242
1243static size_t br_port_get_slave_size(const struct net_device *brdev,
1244 const struct net_device *dev)
1245{
1246 return br_port_info_size();
1247}
1248
1249static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1250 [IFLA_BR_UNSPEC] = { .strict_start_type =
1251 IFLA_BR_FDB_N_LEARNED },
1252 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 },
1253 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 },
1254 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 },
1255 [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1256 [IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1257 [IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1258 [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1259 [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1260 [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1261 [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1262 .len = ETH_ALEN },
1263 [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1264 [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1265 [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1266 [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1267 [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1268 [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1269 [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1270 [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1271 [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1272 [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1273 [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1274 [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1275 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1276 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1277 [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1278 [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1279 [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1280 [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1281 [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1282 [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1283 [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1284 [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1285 [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1286 [IFLA_BR_MULTI_BOOLOPT] =
1287 NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1288 [IFLA_BR_FDB_N_LEARNED] = { .type = NLA_REJECT },
1289 [IFLA_BR_FDB_MAX_LEARNED] = { .type = NLA_U32 },
1290 [IFLA_BR_STP_MODE] = NLA_POLICY_RANGE(NLA_U32,
1291 BR_STP_MODE_AUTO,
1292 BR_STP_MODE_MAX),
1293};
1294
1295static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1296 struct nlattr *data[],
1297 struct netlink_ext_ack *extack)
1298{
1299 struct net_bridge *br = netdev_priv(brdev);
1300 int err;
1301
1302 if (!data)
1303 return 0;
1304
1305 if (data[IFLA_BR_FORWARD_DELAY]) {
1306 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1307 if (err)
1308 return err;
1309 }
1310
1311 if (data[IFLA_BR_HELLO_TIME]) {
1312 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1313 if (err)
1314 return err;
1315 }
1316
1317 if (data[IFLA_BR_MAX_AGE]) {
1318 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1319 if (err)
1320 return err;
1321 }
1322
1323 if (data[IFLA_BR_AGEING_TIME]) {
1324 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1325 if (err)
1326 return err;
1327 }
1328
1329 if (data[IFLA_BR_STP_MODE]) {
1330 u32 mode = nla_get_u32(data[IFLA_BR_STP_MODE]);
1331
1332 if (mode != br->stp_mode) {
1333 bool stp_off = br->stp_enabled == BR_NO_STP ||
1334 (data[IFLA_BR_STP_STATE] &&
1335 !nla_get_u32(data[IFLA_BR_STP_STATE]));
1336
1337 if (!stp_off) {
1338 NL_SET_ERR_MSG_MOD(extack,
1339 "Can't change STP mode while STP is enabled");
1340 return -EBUSY;
1341 }
1342 }
1343 br->stp_mode = mode;
1344 }
1345
1346 if (data[IFLA_BR_STP_STATE]) {
1347 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1348
1349 err = br_stp_set_enabled(br, stp_enabled, extack);
1350 if (err)
1351 return err;
1352 }
1353
1354 if (data[IFLA_BR_PRIORITY]) {
1355 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1356
1357 br_stp_set_bridge_priority(br, priority);
1358 }
1359
1360 if (data[IFLA_BR_VLAN_FILTERING]) {
1361 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1362
1363 err = br_vlan_filter_toggle(br, vlan_filter, extack);
1364 if (err)
1365 return err;
1366 }
1367
1368#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1369 if (data[IFLA_BR_VLAN_PROTOCOL]) {
1370 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1371
1372 err = __br_vlan_set_proto(br, vlan_proto, extack);
1373 if (err)
1374 return err;
1375 }
1376
1377 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1378 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1379
1380 err = __br_vlan_set_default_pvid(br, defpvid, extack);
1381 if (err)
1382 return err;
1383 }
1384
1385 if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1386 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1387
1388 err = br_vlan_set_stats(br, vlan_stats);
1389 if (err)
1390 return err;
1391 }
1392
1393 if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1394 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1395
1396 err = br_vlan_set_stats_per_port(br, per_port);
1397 if (err)
1398 return err;
1399 }
1400#endif
1401
1402 if (data[IFLA_BR_GROUP_FWD_MASK]) {
1403 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1404
1405 if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1406 return -EINVAL;
1407 br->group_fwd_mask = fwd_mask;
1408 }
1409
1410 if (data[IFLA_BR_GROUP_ADDR]) {
1411 u8 new_addr[ETH_ALEN];
1412
1413 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1414 return -EINVAL;
1415 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1416 if (!is_link_local_ether_addr(new_addr))
1417 return -EINVAL;
1418 if (new_addr[5] == 1 || /* 802.3x Pause address */
1419 new_addr[5] == 2 || /* 802.3ad Slow protocols */
1420 new_addr[5] == 3) /* 802.1X PAE address */
1421 return -EINVAL;
1422 spin_lock_bh(&br->lock);
1423 memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1424 spin_unlock_bh(&br->lock);
1425 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1426 br_recalculate_fwd_mask(br);
1427 }
1428
1429 if (data[IFLA_BR_FDB_FLUSH]) {
1430 struct net_bridge_fdb_flush_desc desc = {
1431 .flags_mask = BIT(BR_FDB_STATIC)
1432 };
1433
1434 br_fdb_flush(br, &desc);
1435 }
1436
1437#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1438 if (data[IFLA_BR_MCAST_ROUTER]) {
1439 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1440
1441 err = br_multicast_set_router(&br->multicast_ctx,
1442 multicast_router);
1443 if (err)
1444 return err;
1445 }
1446
1447 if (data[IFLA_BR_MCAST_SNOOPING]) {
1448 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1449
1450 err = br_multicast_toggle(br, mcast_snooping, extack);
1451 if (err)
1452 return err;
1453 }
1454
1455 if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1456 u8 val;
1457
1458 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1459 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1460 }
1461
1462 if (data[IFLA_BR_MCAST_QUERIER]) {
1463 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1464
1465 err = br_multicast_set_querier(&br->multicast_ctx,
1466 mcast_querier);
1467 if (err)
1468 return err;
1469 }
1470
1471 if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1472 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1473 RHT_ELASTICITY);
1474
1475 if (data[IFLA_BR_MCAST_HASH_MAX])
1476 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1477
1478 if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1479 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1480
1481 br->multicast_ctx.multicast_last_member_count = val;
1482 }
1483
1484 if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1485 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1486
1487 br->multicast_ctx.multicast_startup_query_count = val;
1488 }
1489
1490 if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1491 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1492
1493 br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
1494 }
1495
1496 if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1497 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1498
1499 br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
1500 }
1501
1502 if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1503 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1504
1505 br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
1506 }
1507
1508 if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1509 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1510
1511 br_multicast_set_query_intvl(&br->multicast_ctx, val);
1512 }
1513
1514 if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1515 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1516
1517 br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
1518 }
1519
1520 if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1521 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1522
1523 br_multicast_set_startup_query_intvl(&br->multicast_ctx, val);
1524 }
1525
1526 if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1527 __u8 mcast_stats;
1528
1529 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1530 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1531 }
1532
1533 if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1534 __u8 igmp_version;
1535
1536 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1537 err = br_multicast_set_igmp_version(&br->multicast_ctx,
1538 igmp_version);
1539 if (err)
1540 return err;
1541 }
1542
1543#if IS_ENABLED(CONFIG_IPV6)
1544 if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1545 __u8 mld_version;
1546
1547 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1548 err = br_multicast_set_mld_version(&br->multicast_ctx,
1549 mld_version);
1550 if (err)
1551 return err;
1552 }
1553#endif
1554#endif
1555#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1556 if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1557 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1558
1559 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1560 }
1561
1562 if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1563 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1564
1565 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1566 }
1567
1568 if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1569 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1570
1571 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1572 }
1573#endif
1574
1575 if (data[IFLA_BR_MULTI_BOOLOPT]) {
1576 struct br_boolopt_multi *bm;
1577
1578 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1579 err = br_boolopt_multi_toggle(br, bm, extack);
1580 if (err)
1581 return err;
1582 }
1583
1584 if (data[IFLA_BR_FDB_MAX_LEARNED]) {
1585 u32 val = nla_get_u32(data[IFLA_BR_FDB_MAX_LEARNED]);
1586
1587 WRITE_ONCE(br->fdb_max_learned, val);
1588 }
1589
1590 return 0;
1591}
1592
1593static int br_dev_newlink(struct net_device *dev,
1594 struct rtnl_newlink_params *params,
1595 struct netlink_ext_ack *extack)
1596{
1597 struct net_bridge *br = netdev_priv(dev);
1598 struct nlattr **data = params->data;
1599 struct nlattr **tb = params->tb;
1600 int err;
1601
1602 err = register_netdevice(dev);
1603 if (err)
1604 return err;
1605
1606 if (tb[IFLA_ADDRESS]) {
1607 spin_lock_bh(&br->lock);
1608 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1609 spin_unlock_bh(&br->lock);
1610 }
1611
1612 err = br_changelink(dev, tb, data, extack);
1613 if (err)
1614 br_dev_delete(dev, NULL);
1615
1616 return err;
1617}
1618
1619static size_t br_get_size(const struct net_device *brdev)
1620{
1621 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */
1622 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */
1623 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */
1624 nla_total_size(sizeof(u32)) + /* IFLA_BR_AGEING_TIME */
1625 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_STATE */
1626 nla_total_size(sizeof(u16)) + /* IFLA_BR_PRIORITY */
1627 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_FILTERING */
1628#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1629 nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */
1630 nla_total_size(sizeof(u16)) + /* IFLA_BR_VLAN_DEFAULT_PVID */
1631 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_ENABLED */
1632 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_PER_PORT */
1633#endif
1634 nla_total_size(sizeof(u16)) + /* IFLA_BR_GROUP_FWD_MASK */
1635 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_ROOT_ID */
1636 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_BRIDGE_ID */
1637 nla_total_size(sizeof(u16)) + /* IFLA_BR_ROOT_PORT */
1638 nla_total_size(sizeof(u32)) + /* IFLA_BR_ROOT_PATH_COST */
1639 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE */
1640 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1641 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1642 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1643 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1644 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1645 nla_total_size(ETH_ALEN) + /* IFLA_BR_GROUP_ADDR */
1646 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_N_LEARNED */
1647 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_MAX_LEARNED */
1648#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1649 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_ROUTER */
1650 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_SNOOPING */
1651 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1652 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERIER */
1653 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_STATS_ENABLED */
1654 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */
1655 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_MAX */
1656 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1657 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1658 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1659 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1660 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1661 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1662 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1663 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1664 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_IGMP_VERSION */
1665 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_MLD_VERSION */
1666 br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */
1667#endif
1668#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1669 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IPTABLES */
1670 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IP6TABLES */
1671 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_ARPTABLES */
1672#endif
1673 nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1674 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_MODE */
1675 0;
1676}
1677
1678static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1679{
1680 struct net_bridge *br = netdev_priv(brdev);
1681 u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1682 u32 hello_time = jiffies_to_clock_t(br->hello_time);
1683 u32 age_time = jiffies_to_clock_t(br->max_age);
1684 u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1685 u32 stp_enabled = br->stp_enabled;
1686 u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1687 u8 vlan_enabled = br_vlan_enabled(br->dev);
1688 struct br_boolopt_multi bm;
1689 u64 clockval;
1690
1691 clockval = br_timer_value(&br->hello_timer);
1692 if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1693 return -EMSGSIZE;
1694 clockval = br_timer_value(&br->tcn_timer);
1695 if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1696 return -EMSGSIZE;
1697 clockval = br_timer_value(&br->topology_change_timer);
1698 if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1699 IFLA_BR_PAD))
1700 return -EMSGSIZE;
1701 clockval = br_timer_value(&br->gc_work.timer);
1702 if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1703 return -EMSGSIZE;
1704
1705 br_boolopt_multi_get(br, &bm);
1706 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1707 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1708 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1709 nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1710 nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1711 nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1712 nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1713 nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1714 nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1715 &br->bridge_id) ||
1716 nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1717 &br->designated_root) ||
1718 nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1719 nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1720 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1721 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1722 br->topology_change_detected) ||
1723 nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1724 nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm) ||
1725 nla_put_u32(skb, IFLA_BR_FDB_N_LEARNED,
1726 atomic_read(&br->fdb_n_learned)) ||
1727 nla_put_u32(skb, IFLA_BR_FDB_MAX_LEARNED, br->fdb_max_learned) ||
1728 nla_put_u32(skb, IFLA_BR_STP_MODE, br->stp_mode))
1729 return -EMSGSIZE;
1730
1731#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1732 if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1733 nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1734 nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1735 br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1736 nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1737 br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1738 return -EMSGSIZE;
1739#endif
1740#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1741 if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER,
1742 br->multicast_ctx.multicast_router) ||
1743 nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1744 br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1745 nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1746 br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1747 nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1748 br->multicast_ctx.multicast_querier) ||
1749 nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1750 br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1751 nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1752 nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1753 nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1754 br->multicast_ctx.multicast_last_member_count) ||
1755 nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1756 br->multicast_ctx.multicast_startup_query_count) ||
1757 nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1758 br->multicast_ctx.multicast_igmp_version) ||
1759 br_multicast_dump_querier_state(skb, &br->multicast_ctx,
1760 IFLA_BR_MCAST_QUERIER_STATE))
1761 return -EMSGSIZE;
1762#if IS_ENABLED(CONFIG_IPV6)
1763 if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1764 br->multicast_ctx.multicast_mld_version))
1765 return -EMSGSIZE;
1766#endif
1767 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval);
1768 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1769 IFLA_BR_PAD))
1770 return -EMSGSIZE;
1771 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval);
1772 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1773 IFLA_BR_PAD))
1774 return -EMSGSIZE;
1775 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval);
1776 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1777 IFLA_BR_PAD))
1778 return -EMSGSIZE;
1779 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval);
1780 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1781 IFLA_BR_PAD))
1782 return -EMSGSIZE;
1783 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval);
1784 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1785 IFLA_BR_PAD))
1786 return -EMSGSIZE;
1787 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval);
1788 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1789 IFLA_BR_PAD))
1790 return -EMSGSIZE;
1791#endif
1792#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1793 if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1794 br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1795 nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1796 br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1797 nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1798 br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1799 return -EMSGSIZE;
1800#endif
1801
1802 return 0;
1803}
1804
1805static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1806{
1807 struct net_bridge_port *p = NULL;
1808 struct net_bridge_vlan_group *vg;
1809 struct net_bridge_vlan *v;
1810 struct net_bridge *br;
1811 int numvls = 0;
1812
1813 switch (attr) {
1814 case IFLA_STATS_LINK_XSTATS:
1815 br = netdev_priv(dev);
1816 vg = br_vlan_group(br);
1817 break;
1818 case IFLA_STATS_LINK_XSTATS_SLAVE:
1819 p = br_port_get_rtnl(dev);
1820 if (!p)
1821 return 0;
1822 vg = nbp_vlan_group(p);
1823 break;
1824 default:
1825 return 0;
1826 }
1827
1828 if (vg) {
1829 /* we need to count all, even placeholder entries */
1830 list_for_each_entry(v, &vg->vlan_list, vlist)
1831 numvls++;
1832 }
1833
1834 return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1835 nla_total_size_64bit(sizeof(struct br_mcast_stats)) +
1836 (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) +
1837 nla_total_size(0);
1838}
1839
1840static int br_fill_linkxstats(struct sk_buff *skb,
1841 const struct net_device *dev,
1842 int *prividx, int attr)
1843{
1844 unsigned int limit = U16_MAX - nla_total_size(0);
1845 struct nlattr *nla __maybe_unused;
1846 struct net_bridge_port *p = NULL;
1847 struct net_bridge_vlan_group *vg;
1848 struct net_bridge_vlan *v;
1849 struct net_bridge *br;
1850 struct nlattr *nest;
1851 int vl_idx = 0;
1852
1853 switch (attr) {
1854 case IFLA_STATS_LINK_XSTATS:
1855 br = netdev_priv(dev);
1856 vg = br_vlan_group(br);
1857 break;
1858 case IFLA_STATS_LINK_XSTATS_SLAVE:
1859 p = br_port_get_rtnl(dev);
1860 if (!p)
1861 return 0;
1862 limit -= nla_total_size_64bit(sizeof(p->stp_xstats));
1863 br = p->br;
1864 vg = nbp_vlan_group(p);
1865 break;
1866 default:
1867 return -EINVAL;
1868 }
1869
1870 nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1871 if (!nest)
1872 return -EMSGSIZE;
1873
1874 if (vg) {
1875 u16 pvid;
1876
1877#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1878 limit -= nla_total_size_64bit(sizeof(struct br_mcast_stats));
1879#endif
1880 pvid = br_get_pvid(vg);
1881 list_for_each_entry(v, &vg->vlan_list, vlist) {
1882 struct bridge_vlan_xstats vxi;
1883 struct pcpu_sw_netstats stats;
1884
1885 if (++vl_idx < *prividx)
1886 continue;
1887
1888 if (skb_tail_pointer(skb) - (unsigned char *)nest +
1889 nla_total_size(sizeof(vxi)) >= limit)
1890 goto nla_put_failure;
1891
1892 memset(&vxi, 0, sizeof(vxi));
1893 vxi.vid = v->vid;
1894 vxi.flags = v->flags;
1895 if (v->vid == pvid)
1896 vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1897 br_vlan_get_stats(v, &stats);
1898 vxi.rx_bytes = u64_stats_read(&stats.rx_bytes);
1899 vxi.rx_packets = u64_stats_read(&stats.rx_packets);
1900 vxi.tx_bytes = u64_stats_read(&stats.tx_bytes);
1901 vxi.tx_packets = u64_stats_read(&stats.tx_packets);
1902
1903 if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1904 goto nla_put_failure;
1905 }
1906 }
1907
1908#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1909 if (++vl_idx >= *prividx) {
1910 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1911 sizeof(struct br_mcast_stats),
1912 BRIDGE_XSTATS_PAD);
1913 if (!nla)
1914 goto nla_put_failure;
1915 br_multicast_get_stats(br, p, nla_data(nla));
1916 }
1917#endif
1918
1919 if (p) {
1920 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1921 sizeof(p->stp_xstats),
1922 BRIDGE_XSTATS_PAD);
1923 if (!nla)
1924 goto nla_put_failure;
1925
1926 spin_lock_bh(&br->lock);
1927 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1928 spin_unlock_bh(&br->lock);
1929 }
1930
1931 nla_nest_end(skb, nest);
1932 *prividx = 0;
1933
1934 return 0;
1935
1936nla_put_failure:
1937 nla_nest_end(skb, nest);
1938 *prividx = vl_idx;
1939
1940 return -EMSGSIZE;
1941}
1942
1943static struct rtnl_af_ops br_af_ops __read_mostly = {
1944 .family = AF_BRIDGE,
1945 .get_link_af_size = br_get_link_af_size_filtered,
1946};
1947
1948struct rtnl_link_ops br_link_ops __read_mostly = {
1949 .kind = "bridge",
1950 .priv_size = sizeof(struct net_bridge),
1951 .setup = br_dev_setup,
1952 .maxtype = IFLA_BR_MAX,
1953 .policy = br_policy,
1954 .validate = br_validate,
1955 .newlink = br_dev_newlink,
1956 .changelink = br_changelink,
1957 .dellink = br_dev_delete,
1958 .get_size = br_get_size,
1959 .fill_info = br_fill_info,
1960 .fill_linkxstats = br_fill_linkxstats,
1961 .get_linkxstats_size = br_get_linkxstats_size,
1962
1963 .slave_maxtype = IFLA_BRPORT_MAX,
1964 .slave_policy = br_port_policy,
1965 .slave_changelink = br_port_slave_changelink,
1966 .get_slave_size = br_port_get_slave_size,
1967 .fill_slave_info = br_port_fill_slave_info,
1968};
1969
1970int __init br_netlink_init(void)
1971{
1972 int err;
1973
1974 err = br_vlan_rtnl_init();
1975 if (err)
1976 goto out;
1977
1978 err = rtnl_af_register(&br_af_ops);
1979 if (err)
1980 goto out_vlan;
1981
1982 err = rtnl_link_register(&br_link_ops);
1983 if (err)
1984 goto out_af;
1985
1986 return 0;
1987
1988out_af:
1989 rtnl_af_unregister(&br_af_ops);
1990out_vlan:
1991 br_vlan_rtnl_uninit();
1992out:
1993 return err;
1994}
1995
1996void br_netlink_fini(void)
1997{
1998 br_vlan_rtnl_uninit();
1999 rtnl_af_unregister(&br_af_ops);
2000 rtnl_link_unregister(&br_link_ops);
2001}