Loading...
1/*
2 * INET 802.1Q VLAN
3 * Ethernet-type device handling.
4 *
5 * Authors: Ben Greear <greearb@candelatech.com>
6 * Please send support related email to: netdev@vger.kernel.org
7 * VLAN Home Page: http://www.candelatech.com/~greear/vlan.html
8 *
9 * Fixes:
10 * Fix for packet capture - Nick Eggleston <nick@dccinc.com>;
11 * Add HW acceleration hooks - David S. Miller <davem@redhat.com>;
12 * Correct all the locking - David S. Miller <davem@redhat.com>;
13 * Use hash table for VLAN groups - David S. Miller <davem@redhat.com>
14 *
15 * This program is free software; you can redistribute it and/or
16 * modify it under the terms of the GNU General Public License
17 * as published by the Free Software Foundation; either version
18 * 2 of the License, or (at your option) any later version.
19 */
20
21#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
22
23#include <linux/capability.h>
24#include <linux/module.h>
25#include <linux/netdevice.h>
26#include <linux/skbuff.h>
27#include <linux/slab.h>
28#include <linux/init.h>
29#include <linux/rculist.h>
30#include <net/p8022.h>
31#include <net/arp.h>
32#include <linux/rtnetlink.h>
33#include <linux/notifier.h>
34#include <net/rtnetlink.h>
35#include <net/net_namespace.h>
36#include <net/netns/generic.h>
37#include <asm/uaccess.h>
38
39#include <linux/if_vlan.h>
40#include "vlan.h"
41#include "vlanproc.h"
42
43#define DRV_VERSION "1.8"
44
45/* Global VLAN variables */
46
47int vlan_net_id __read_mostly;
48
49const char vlan_fullname[] = "802.1Q VLAN Support";
50const char vlan_version[] = DRV_VERSION;
51
52/* End of global variables definitions. */
53
54static int vlan_group_prealloc_vid(struct vlan_group *vg,
55 __be16 vlan_proto, u16 vlan_id)
56{
57 struct net_device **array;
58 unsigned int pidx, vidx;
59 unsigned int size;
60
61 ASSERT_RTNL();
62
63 pidx = vlan_proto_idx(vlan_proto);
64 vidx = vlan_id / VLAN_GROUP_ARRAY_PART_LEN;
65 array = vg->vlan_devices_arrays[pidx][vidx];
66 if (array != NULL)
67 return 0;
68
69 size = sizeof(struct net_device *) * VLAN_GROUP_ARRAY_PART_LEN;
70 array = kzalloc(size, GFP_KERNEL);
71 if (array == NULL)
72 return -ENOBUFS;
73
74 vg->vlan_devices_arrays[pidx][vidx] = array;
75 return 0;
76}
77
78void unregister_vlan_dev(struct net_device *dev, struct list_head *head)
79{
80 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
81 struct net_device *real_dev = vlan->real_dev;
82 struct vlan_info *vlan_info;
83 struct vlan_group *grp;
84 u16 vlan_id = vlan->vlan_id;
85
86 ASSERT_RTNL();
87
88 vlan_info = rtnl_dereference(real_dev->vlan_info);
89 BUG_ON(!vlan_info);
90
91 grp = &vlan_info->grp;
92
93 grp->nr_vlan_devs--;
94
95 if (vlan->flags & VLAN_FLAG_MVRP)
96 vlan_mvrp_request_leave(dev);
97 if (vlan->flags & VLAN_FLAG_GVRP)
98 vlan_gvrp_request_leave(dev);
99
100 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, NULL);
101
102 netdev_upper_dev_unlink(real_dev, dev);
103 /* Because unregister_netdevice_queue() makes sure at least one rcu
104 * grace period is respected before device freeing,
105 * we dont need to call synchronize_net() here.
106 */
107 unregister_netdevice_queue(dev, head);
108
109 if (grp->nr_vlan_devs == 0) {
110 vlan_mvrp_uninit_applicant(real_dev);
111 vlan_gvrp_uninit_applicant(real_dev);
112 }
113
114 /* Take it out of our own structures, but be sure to interlock with
115 * HW accelerating devices or SW vlan input packet processing if
116 * VLAN is not 0 (leave it there for 802.1p).
117 */
118 if (vlan_id)
119 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
120
121 /* Get rid of the vlan's reference to real_dev */
122 dev_put(real_dev);
123}
124
125int vlan_check_real_dev(struct net_device *real_dev,
126 __be16 protocol, u16 vlan_id)
127{
128 const char *name = real_dev->name;
129
130 if (real_dev->features & NETIF_F_VLAN_CHALLENGED) {
131 pr_info("VLANs not supported on %s\n", name);
132 return -EOPNOTSUPP;
133 }
134
135 if (vlan_find_dev(real_dev, protocol, vlan_id) != NULL)
136 return -EEXIST;
137
138 return 0;
139}
140
141int register_vlan_dev(struct net_device *dev)
142{
143 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
144 struct net_device *real_dev = vlan->real_dev;
145 u16 vlan_id = vlan->vlan_id;
146 struct vlan_info *vlan_info;
147 struct vlan_group *grp;
148 int err;
149
150 err = vlan_vid_add(real_dev, vlan->vlan_proto, vlan_id);
151 if (err)
152 return err;
153
154 vlan_info = rtnl_dereference(real_dev->vlan_info);
155 /* vlan_info should be there now. vlan_vid_add took care of it */
156 BUG_ON(!vlan_info);
157
158 grp = &vlan_info->grp;
159 if (grp->nr_vlan_devs == 0) {
160 err = vlan_gvrp_init_applicant(real_dev);
161 if (err < 0)
162 goto out_vid_del;
163 err = vlan_mvrp_init_applicant(real_dev);
164 if (err < 0)
165 goto out_uninit_gvrp;
166 }
167
168 err = vlan_group_prealloc_vid(grp, vlan->vlan_proto, vlan_id);
169 if (err < 0)
170 goto out_uninit_mvrp;
171
172 vlan->nest_level = dev_get_nest_level(real_dev, is_vlan_dev) + 1;
173 err = register_netdevice(dev);
174 if (err < 0)
175 goto out_uninit_mvrp;
176
177 err = netdev_upper_dev_link(real_dev, dev);
178 if (err)
179 goto out_unregister_netdev;
180
181 /* Account for reference in struct vlan_dev_priv */
182 dev_hold(real_dev);
183
184 netif_stacked_transfer_operstate(real_dev, dev);
185 linkwatch_fire_event(dev); /* _MUST_ call rfc2863_policy() */
186
187 /* So, got the sucker initialized, now lets place
188 * it into our local structure.
189 */
190 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, dev);
191 grp->nr_vlan_devs++;
192
193 return 0;
194
195out_unregister_netdev:
196 unregister_netdevice(dev);
197out_uninit_mvrp:
198 if (grp->nr_vlan_devs == 0)
199 vlan_mvrp_uninit_applicant(real_dev);
200out_uninit_gvrp:
201 if (grp->nr_vlan_devs == 0)
202 vlan_gvrp_uninit_applicant(real_dev);
203out_vid_del:
204 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
205 return err;
206}
207
208/* Attach a VLAN device to a mac address (ie Ethernet Card).
209 * Returns 0 if the device was created or a negative error code otherwise.
210 */
211static int register_vlan_device(struct net_device *real_dev, u16 vlan_id)
212{
213 struct net_device *new_dev;
214 struct vlan_dev_priv *vlan;
215 struct net *net = dev_net(real_dev);
216 struct vlan_net *vn = net_generic(net, vlan_net_id);
217 char name[IFNAMSIZ];
218 int err;
219
220 if (vlan_id >= VLAN_VID_MASK)
221 return -ERANGE;
222
223 err = vlan_check_real_dev(real_dev, htons(ETH_P_8021Q), vlan_id);
224 if (err < 0)
225 return err;
226
227 /* Gotta set up the fields for the device. */
228 switch (vn->name_type) {
229 case VLAN_NAME_TYPE_RAW_PLUS_VID:
230 /* name will look like: eth1.0005 */
231 snprintf(name, IFNAMSIZ, "%s.%.4i", real_dev->name, vlan_id);
232 break;
233 case VLAN_NAME_TYPE_PLUS_VID_NO_PAD:
234 /* Put our vlan.VID in the name.
235 * Name will look like: vlan5
236 */
237 snprintf(name, IFNAMSIZ, "vlan%i", vlan_id);
238 break;
239 case VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD:
240 /* Put our vlan.VID in the name.
241 * Name will look like: eth0.5
242 */
243 snprintf(name, IFNAMSIZ, "%s.%i", real_dev->name, vlan_id);
244 break;
245 case VLAN_NAME_TYPE_PLUS_VID:
246 /* Put our vlan.VID in the name.
247 * Name will look like: vlan0005
248 */
249 default:
250 snprintf(name, IFNAMSIZ, "vlan%.4i", vlan_id);
251 }
252
253 new_dev = alloc_netdev(sizeof(struct vlan_dev_priv), name, vlan_setup);
254
255 if (new_dev == NULL)
256 return -ENOBUFS;
257
258 dev_net_set(new_dev, net);
259 /* need 4 bytes for extra VLAN header info,
260 * hope the underlying device can handle it.
261 */
262 new_dev->mtu = real_dev->mtu;
263 new_dev->priv_flags |= (real_dev->priv_flags & IFF_UNICAST_FLT);
264
265 vlan = vlan_dev_priv(new_dev);
266 vlan->vlan_proto = htons(ETH_P_8021Q);
267 vlan->vlan_id = vlan_id;
268 vlan->real_dev = real_dev;
269 vlan->dent = NULL;
270 vlan->flags = VLAN_FLAG_REORDER_HDR;
271
272 new_dev->rtnl_link_ops = &vlan_link_ops;
273 err = register_vlan_dev(new_dev);
274 if (err < 0)
275 goto out_free_newdev;
276
277 return 0;
278
279out_free_newdev:
280 free_netdev(new_dev);
281 return err;
282}
283
284static void vlan_sync_address(struct net_device *dev,
285 struct net_device *vlandev)
286{
287 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
288
289 /* May be called without an actual change */
290 if (ether_addr_equal(vlan->real_dev_addr, dev->dev_addr))
291 return;
292
293 /* vlan address was different from the old address and is equal to
294 * the new address */
295 if (!ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
296 ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
297 dev_uc_del(dev, vlandev->dev_addr);
298
299 /* vlan address was equal to the old address and is different from
300 * the new address */
301 if (ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
302 !ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
303 dev_uc_add(dev, vlandev->dev_addr);
304
305 ether_addr_copy(vlan->real_dev_addr, dev->dev_addr);
306}
307
308static void vlan_transfer_features(struct net_device *dev,
309 struct net_device *vlandev)
310{
311 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
312
313 vlandev->gso_max_size = dev->gso_max_size;
314
315 if (vlan_hw_offload_capable(dev->features, vlan->vlan_proto))
316 vlandev->hard_header_len = dev->hard_header_len;
317 else
318 vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN;
319
320#if IS_ENABLED(CONFIG_FCOE)
321 vlandev->fcoe_ddp_xid = dev->fcoe_ddp_xid;
322#endif
323
324 netdev_update_features(vlandev);
325}
326
327static void __vlan_device_event(struct net_device *dev, unsigned long event)
328{
329 switch (event) {
330 case NETDEV_CHANGENAME:
331 vlan_proc_rem_dev(dev);
332 if (vlan_proc_add_dev(dev) < 0)
333 pr_warn("failed to change proc name for %s\n",
334 dev->name);
335 break;
336 case NETDEV_REGISTER:
337 if (vlan_proc_add_dev(dev) < 0)
338 pr_warn("failed to add proc entry for %s\n", dev->name);
339 break;
340 case NETDEV_UNREGISTER:
341 vlan_proc_rem_dev(dev);
342 break;
343 }
344}
345
346static int vlan_device_event(struct notifier_block *unused, unsigned long event,
347 void *ptr)
348{
349 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
350 struct vlan_group *grp;
351 struct vlan_info *vlan_info;
352 int i, flgs;
353 struct net_device *vlandev;
354 struct vlan_dev_priv *vlan;
355 bool last = false;
356 LIST_HEAD(list);
357
358 if (is_vlan_dev(dev))
359 __vlan_device_event(dev, event);
360
361 if ((event == NETDEV_UP) &&
362 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER)) {
363 pr_info("adding VLAN 0 to HW filter on device %s\n",
364 dev->name);
365 vlan_vid_add(dev, htons(ETH_P_8021Q), 0);
366 }
367
368 vlan_info = rtnl_dereference(dev->vlan_info);
369 if (!vlan_info)
370 goto out;
371 grp = &vlan_info->grp;
372
373 /* It is OK that we do not hold the group lock right now,
374 * as we run under the RTNL lock.
375 */
376
377 switch (event) {
378 case NETDEV_CHANGE:
379 /* Propagate real device state to vlan devices */
380 vlan_group_for_each_dev(grp, i, vlandev)
381 netif_stacked_transfer_operstate(dev, vlandev);
382 break;
383
384 case NETDEV_CHANGEADDR:
385 /* Adjust unicast filters on underlying device */
386 vlan_group_for_each_dev(grp, i, vlandev) {
387 flgs = vlandev->flags;
388 if (!(flgs & IFF_UP))
389 continue;
390
391 vlan_sync_address(dev, vlandev);
392 }
393 break;
394
395 case NETDEV_CHANGEMTU:
396 vlan_group_for_each_dev(grp, i, vlandev) {
397 if (vlandev->mtu <= dev->mtu)
398 continue;
399
400 dev_set_mtu(vlandev, dev->mtu);
401 }
402 break;
403
404 case NETDEV_FEAT_CHANGE:
405 /* Propagate device features to underlying device */
406 vlan_group_for_each_dev(grp, i, vlandev)
407 vlan_transfer_features(dev, vlandev);
408 break;
409
410 case NETDEV_DOWN:
411 if (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER)
412 vlan_vid_del(dev, htons(ETH_P_8021Q), 0);
413
414 /* Put all VLANs for this dev in the down state too. */
415 vlan_group_for_each_dev(grp, i, vlandev) {
416 flgs = vlandev->flags;
417 if (!(flgs & IFF_UP))
418 continue;
419
420 vlan = vlan_dev_priv(vlandev);
421 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
422 dev_change_flags(vlandev, flgs & ~IFF_UP);
423 netif_stacked_transfer_operstate(dev, vlandev);
424 }
425 break;
426
427 case NETDEV_UP:
428 /* Put all VLANs for this dev in the up state too. */
429 vlan_group_for_each_dev(grp, i, vlandev) {
430 flgs = vlandev->flags;
431 if (flgs & IFF_UP)
432 continue;
433
434 vlan = vlan_dev_priv(vlandev);
435 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
436 dev_change_flags(vlandev, flgs | IFF_UP);
437 netif_stacked_transfer_operstate(dev, vlandev);
438 }
439 break;
440
441 case NETDEV_UNREGISTER:
442 /* twiddle thumbs on netns device moves */
443 if (dev->reg_state != NETREG_UNREGISTERING)
444 break;
445
446 vlan_group_for_each_dev(grp, i, vlandev) {
447 /* removal of last vid destroys vlan_info, abort
448 * afterwards */
449 if (vlan_info->nr_vids == 1)
450 last = true;
451
452 unregister_vlan_dev(vlandev, &list);
453 if (last)
454 break;
455 }
456 unregister_netdevice_many(&list);
457 break;
458
459 case NETDEV_PRE_TYPE_CHANGE:
460 /* Forbid underlaying device to change its type. */
461 if (vlan_uses_dev(dev))
462 return NOTIFY_BAD;
463 break;
464
465 case NETDEV_NOTIFY_PEERS:
466 case NETDEV_BONDING_FAILOVER:
467 case NETDEV_RESEND_IGMP:
468 /* Propagate to vlan devices */
469 vlan_group_for_each_dev(grp, i, vlandev)
470 call_netdevice_notifiers(event, vlandev);
471 break;
472 }
473
474out:
475 return NOTIFY_DONE;
476}
477
478static struct notifier_block vlan_notifier_block __read_mostly = {
479 .notifier_call = vlan_device_event,
480};
481
482/*
483 * VLAN IOCTL handler.
484 * o execute requested action or pass command to the device driver
485 * arg is really a struct vlan_ioctl_args __user *.
486 */
487static int vlan_ioctl_handler(struct net *net, void __user *arg)
488{
489 int err;
490 struct vlan_ioctl_args args;
491 struct net_device *dev = NULL;
492
493 if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args)))
494 return -EFAULT;
495
496 /* Null terminate this sucker, just in case. */
497 args.device1[23] = 0;
498 args.u.device2[23] = 0;
499
500 rtnl_lock();
501
502 switch (args.cmd) {
503 case SET_VLAN_INGRESS_PRIORITY_CMD:
504 case SET_VLAN_EGRESS_PRIORITY_CMD:
505 case SET_VLAN_FLAG_CMD:
506 case ADD_VLAN_CMD:
507 case DEL_VLAN_CMD:
508 case GET_VLAN_REALDEV_NAME_CMD:
509 case GET_VLAN_VID_CMD:
510 err = -ENODEV;
511 dev = __dev_get_by_name(net, args.device1);
512 if (!dev)
513 goto out;
514
515 err = -EINVAL;
516 if (args.cmd != ADD_VLAN_CMD && !is_vlan_dev(dev))
517 goto out;
518 }
519
520 switch (args.cmd) {
521 case SET_VLAN_INGRESS_PRIORITY_CMD:
522 err = -EPERM;
523 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
524 break;
525 vlan_dev_set_ingress_priority(dev,
526 args.u.skb_priority,
527 args.vlan_qos);
528 err = 0;
529 break;
530
531 case SET_VLAN_EGRESS_PRIORITY_CMD:
532 err = -EPERM;
533 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
534 break;
535 err = vlan_dev_set_egress_priority(dev,
536 args.u.skb_priority,
537 args.vlan_qos);
538 break;
539
540 case SET_VLAN_FLAG_CMD:
541 err = -EPERM;
542 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
543 break;
544 err = vlan_dev_change_flags(dev,
545 args.vlan_qos ? args.u.flag : 0,
546 args.u.flag);
547 break;
548
549 case SET_VLAN_NAME_TYPE_CMD:
550 err = -EPERM;
551 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
552 break;
553 if ((args.u.name_type >= 0) &&
554 (args.u.name_type < VLAN_NAME_TYPE_HIGHEST)) {
555 struct vlan_net *vn;
556
557 vn = net_generic(net, vlan_net_id);
558 vn->name_type = args.u.name_type;
559 err = 0;
560 } else {
561 err = -EINVAL;
562 }
563 break;
564
565 case ADD_VLAN_CMD:
566 err = -EPERM;
567 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
568 break;
569 err = register_vlan_device(dev, args.u.VID);
570 break;
571
572 case DEL_VLAN_CMD:
573 err = -EPERM;
574 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
575 break;
576 unregister_vlan_dev(dev, NULL);
577 err = 0;
578 break;
579
580 case GET_VLAN_REALDEV_NAME_CMD:
581 err = 0;
582 vlan_dev_get_realdev_name(dev, args.u.device2);
583 if (copy_to_user(arg, &args,
584 sizeof(struct vlan_ioctl_args)))
585 err = -EFAULT;
586 break;
587
588 case GET_VLAN_VID_CMD:
589 err = 0;
590 args.u.VID = vlan_dev_vlan_id(dev);
591 if (copy_to_user(arg, &args,
592 sizeof(struct vlan_ioctl_args)))
593 err = -EFAULT;
594 break;
595
596 default:
597 err = -EOPNOTSUPP;
598 break;
599 }
600out:
601 rtnl_unlock();
602 return err;
603}
604
605static int __net_init vlan_init_net(struct net *net)
606{
607 struct vlan_net *vn = net_generic(net, vlan_net_id);
608 int err;
609
610 vn->name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD;
611
612 err = vlan_proc_init(net);
613
614 return err;
615}
616
617static void __net_exit vlan_exit_net(struct net *net)
618{
619 vlan_proc_cleanup(net);
620}
621
622static struct pernet_operations vlan_net_ops = {
623 .init = vlan_init_net,
624 .exit = vlan_exit_net,
625 .id = &vlan_net_id,
626 .size = sizeof(struct vlan_net),
627};
628
629static int __init vlan_proto_init(void)
630{
631 int err;
632
633 pr_info("%s v%s\n", vlan_fullname, vlan_version);
634
635 err = register_pernet_subsys(&vlan_net_ops);
636 if (err < 0)
637 goto err0;
638
639 err = register_netdevice_notifier(&vlan_notifier_block);
640 if (err < 0)
641 goto err2;
642
643 err = vlan_gvrp_init();
644 if (err < 0)
645 goto err3;
646
647 err = vlan_mvrp_init();
648 if (err < 0)
649 goto err4;
650
651 err = vlan_netlink_init();
652 if (err < 0)
653 goto err5;
654
655 vlan_ioctl_set(vlan_ioctl_handler);
656 return 0;
657
658err5:
659 vlan_mvrp_uninit();
660err4:
661 vlan_gvrp_uninit();
662err3:
663 unregister_netdevice_notifier(&vlan_notifier_block);
664err2:
665 unregister_pernet_subsys(&vlan_net_ops);
666err0:
667 return err;
668}
669
670static void __exit vlan_cleanup_module(void)
671{
672 vlan_ioctl_set(NULL);
673 vlan_netlink_fini();
674
675 unregister_netdevice_notifier(&vlan_notifier_block);
676
677 unregister_pernet_subsys(&vlan_net_ops);
678 rcu_barrier(); /* Wait for completion of call_rcu()'s */
679
680 vlan_mvrp_uninit();
681 vlan_gvrp_uninit();
682}
683
684module_init(vlan_proto_init);
685module_exit(vlan_cleanup_module);
686
687MODULE_LICENSE("GPL");
688MODULE_VERSION(DRV_VERSION);
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * INET 802.1Q VLAN
4 * Ethernet-type device handling.
5 *
6 * Authors: Ben Greear <greearb@candelatech.com>
7 * Please send support related email to: netdev@vger.kernel.org
8 * VLAN Home Page: http://www.candelatech.com/~greear/vlan.html
9 *
10 * Fixes:
11 * Fix for packet capture - Nick Eggleston <nick@dccinc.com>;
12 * Add HW acceleration hooks - David S. Miller <davem@redhat.com>;
13 * Correct all the locking - David S. Miller <davem@redhat.com>;
14 * Use hash table for VLAN groups - David S. Miller <davem@redhat.com>
15 */
16
17#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
18
19#include <linux/capability.h>
20#include <linux/module.h>
21#include <linux/netdevice.h>
22#include <linux/skbuff.h>
23#include <linux/slab.h>
24#include <linux/init.h>
25#include <linux/rculist.h>
26#include <net/p8022.h>
27#include <net/arp.h>
28#include <linux/rtnetlink.h>
29#include <linux/notifier.h>
30#include <net/rtnetlink.h>
31#include <net/net_namespace.h>
32#include <net/netns/generic.h>
33#include <linux/uaccess.h>
34
35#include <linux/if_vlan.h>
36#include "vlan.h"
37#include "vlanproc.h"
38
39#define DRV_VERSION "1.8"
40
41/* Global VLAN variables */
42
43unsigned int vlan_net_id __read_mostly;
44
45const char vlan_fullname[] = "802.1Q VLAN Support";
46const char vlan_version[] = DRV_VERSION;
47
48/* End of global variables definitions. */
49
50static int vlan_group_prealloc_vid(struct vlan_group *vg,
51 __be16 vlan_proto, u16 vlan_id)
52{
53 struct net_device **array;
54 unsigned int pidx, vidx;
55 unsigned int size;
56
57 ASSERT_RTNL();
58
59 pidx = vlan_proto_idx(vlan_proto);
60 vidx = vlan_id / VLAN_GROUP_ARRAY_PART_LEN;
61 array = vg->vlan_devices_arrays[pidx][vidx];
62 if (array != NULL)
63 return 0;
64
65 size = sizeof(struct net_device *) * VLAN_GROUP_ARRAY_PART_LEN;
66 array = kzalloc(size, GFP_KERNEL);
67 if (array == NULL)
68 return -ENOBUFS;
69
70 vg->vlan_devices_arrays[pidx][vidx] = array;
71 return 0;
72}
73
74static void vlan_stacked_transfer_operstate(const struct net_device *rootdev,
75 struct net_device *dev,
76 struct vlan_dev_priv *vlan)
77{
78 if (!(vlan->flags & VLAN_FLAG_BRIDGE_BINDING))
79 netif_stacked_transfer_operstate(rootdev, dev);
80}
81
82void unregister_vlan_dev(struct net_device *dev, struct list_head *head)
83{
84 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
85 struct net_device *real_dev = vlan->real_dev;
86 struct vlan_info *vlan_info;
87 struct vlan_group *grp;
88 u16 vlan_id = vlan->vlan_id;
89
90 ASSERT_RTNL();
91
92 vlan_info = rtnl_dereference(real_dev->vlan_info);
93 BUG_ON(!vlan_info);
94
95 grp = &vlan_info->grp;
96
97 grp->nr_vlan_devs--;
98
99 if (vlan->flags & VLAN_FLAG_MVRP)
100 vlan_mvrp_request_leave(dev);
101 if (vlan->flags & VLAN_FLAG_GVRP)
102 vlan_gvrp_request_leave(dev);
103
104 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, NULL);
105
106 netdev_upper_dev_unlink(real_dev, dev);
107 /* Because unregister_netdevice_queue() makes sure at least one rcu
108 * grace period is respected before device freeing,
109 * we dont need to call synchronize_net() here.
110 */
111 unregister_netdevice_queue(dev, head);
112
113 if (grp->nr_vlan_devs == 0) {
114 vlan_mvrp_uninit_applicant(real_dev);
115 vlan_gvrp_uninit_applicant(real_dev);
116 }
117
118 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
119
120 /* Get rid of the vlan's reference to real_dev */
121 dev_put(real_dev);
122}
123
124int vlan_check_real_dev(struct net_device *real_dev,
125 __be16 protocol, u16 vlan_id,
126 struct netlink_ext_ack *extack)
127{
128 const char *name = real_dev->name;
129
130 if (real_dev->features & NETIF_F_VLAN_CHALLENGED) {
131 pr_info("VLANs not supported on %s\n", name);
132 NL_SET_ERR_MSG_MOD(extack, "VLANs not supported on device");
133 return -EOPNOTSUPP;
134 }
135
136 if (vlan_find_dev(real_dev, protocol, vlan_id) != NULL) {
137 NL_SET_ERR_MSG_MOD(extack, "VLAN device already exists");
138 return -EEXIST;
139 }
140
141 return 0;
142}
143
144int register_vlan_dev(struct net_device *dev, struct netlink_ext_ack *extack)
145{
146 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
147 struct net_device *real_dev = vlan->real_dev;
148 u16 vlan_id = vlan->vlan_id;
149 struct vlan_info *vlan_info;
150 struct vlan_group *grp;
151 int err;
152
153 err = vlan_vid_add(real_dev, vlan->vlan_proto, vlan_id);
154 if (err)
155 return err;
156
157 vlan_info = rtnl_dereference(real_dev->vlan_info);
158 /* vlan_info should be there now. vlan_vid_add took care of it */
159 BUG_ON(!vlan_info);
160
161 grp = &vlan_info->grp;
162 if (grp->nr_vlan_devs == 0) {
163 err = vlan_gvrp_init_applicant(real_dev);
164 if (err < 0)
165 goto out_vid_del;
166 err = vlan_mvrp_init_applicant(real_dev);
167 if (err < 0)
168 goto out_uninit_gvrp;
169 }
170
171 err = vlan_group_prealloc_vid(grp, vlan->vlan_proto, vlan_id);
172 if (err < 0)
173 goto out_uninit_mvrp;
174
175 err = register_netdevice(dev);
176 if (err < 0)
177 goto out_uninit_mvrp;
178
179 err = netdev_upper_dev_link(real_dev, dev, extack);
180 if (err)
181 goto out_unregister_netdev;
182
183 /* Account for reference in struct vlan_dev_priv */
184 dev_hold(real_dev);
185
186 vlan_stacked_transfer_operstate(real_dev, dev, vlan);
187 linkwatch_fire_event(dev); /* _MUST_ call rfc2863_policy() */
188
189 /* So, got the sucker initialized, now lets place
190 * it into our local structure.
191 */
192 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, dev);
193 grp->nr_vlan_devs++;
194
195 return 0;
196
197out_unregister_netdev:
198 unregister_netdevice(dev);
199out_uninit_mvrp:
200 if (grp->nr_vlan_devs == 0)
201 vlan_mvrp_uninit_applicant(real_dev);
202out_uninit_gvrp:
203 if (grp->nr_vlan_devs == 0)
204 vlan_gvrp_uninit_applicant(real_dev);
205out_vid_del:
206 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
207 return err;
208}
209
210/* Attach a VLAN device to a mac address (ie Ethernet Card).
211 * Returns 0 if the device was created or a negative error code otherwise.
212 */
213static int register_vlan_device(struct net_device *real_dev, u16 vlan_id)
214{
215 struct net_device *new_dev;
216 struct vlan_dev_priv *vlan;
217 struct net *net = dev_net(real_dev);
218 struct vlan_net *vn = net_generic(net, vlan_net_id);
219 char name[IFNAMSIZ];
220 int err;
221
222 if (vlan_id >= VLAN_VID_MASK)
223 return -ERANGE;
224
225 err = vlan_check_real_dev(real_dev, htons(ETH_P_8021Q), vlan_id,
226 NULL);
227 if (err < 0)
228 return err;
229
230 /* Gotta set up the fields for the device. */
231 switch (vn->name_type) {
232 case VLAN_NAME_TYPE_RAW_PLUS_VID:
233 /* name will look like: eth1.0005 */
234 snprintf(name, IFNAMSIZ, "%s.%.4i", real_dev->name, vlan_id);
235 break;
236 case VLAN_NAME_TYPE_PLUS_VID_NO_PAD:
237 /* Put our vlan.VID in the name.
238 * Name will look like: vlan5
239 */
240 snprintf(name, IFNAMSIZ, "vlan%i", vlan_id);
241 break;
242 case VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD:
243 /* Put our vlan.VID in the name.
244 * Name will look like: eth0.5
245 */
246 snprintf(name, IFNAMSIZ, "%s.%i", real_dev->name, vlan_id);
247 break;
248 case VLAN_NAME_TYPE_PLUS_VID:
249 /* Put our vlan.VID in the name.
250 * Name will look like: vlan0005
251 */
252 default:
253 snprintf(name, IFNAMSIZ, "vlan%.4i", vlan_id);
254 }
255
256 new_dev = alloc_netdev(sizeof(struct vlan_dev_priv), name,
257 NET_NAME_UNKNOWN, vlan_setup);
258
259 if (new_dev == NULL)
260 return -ENOBUFS;
261
262 dev_net_set(new_dev, net);
263 /* need 4 bytes for extra VLAN header info,
264 * hope the underlying device can handle it.
265 */
266 new_dev->mtu = real_dev->mtu;
267
268 vlan = vlan_dev_priv(new_dev);
269 vlan->vlan_proto = htons(ETH_P_8021Q);
270 vlan->vlan_id = vlan_id;
271 vlan->real_dev = real_dev;
272 vlan->dent = NULL;
273 vlan->flags = VLAN_FLAG_REORDER_HDR;
274
275 new_dev->rtnl_link_ops = &vlan_link_ops;
276 err = register_vlan_dev(new_dev, NULL);
277 if (err < 0)
278 goto out_free_newdev;
279
280 return 0;
281
282out_free_newdev:
283 if (new_dev->reg_state == NETREG_UNINITIALIZED)
284 free_netdev(new_dev);
285 return err;
286}
287
288static void vlan_sync_address(struct net_device *dev,
289 struct net_device *vlandev)
290{
291 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
292
293 /* May be called without an actual change */
294 if (ether_addr_equal(vlan->real_dev_addr, dev->dev_addr))
295 return;
296
297 /* vlan continues to inherit address of lower device */
298 if (vlan_dev_inherit_address(vlandev, dev))
299 goto out;
300
301 /* vlan address was different from the old address and is equal to
302 * the new address */
303 if (!ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
304 ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
305 dev_uc_del(dev, vlandev->dev_addr);
306
307 /* vlan address was equal to the old address and is different from
308 * the new address */
309 if (ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
310 !ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
311 dev_uc_add(dev, vlandev->dev_addr);
312
313out:
314 ether_addr_copy(vlan->real_dev_addr, dev->dev_addr);
315}
316
317static void vlan_transfer_features(struct net_device *dev,
318 struct net_device *vlandev)
319{
320 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
321
322 vlandev->gso_max_size = dev->gso_max_size;
323 vlandev->gso_max_segs = dev->gso_max_segs;
324
325 if (vlan_hw_offload_capable(dev->features, vlan->vlan_proto))
326 vlandev->hard_header_len = dev->hard_header_len;
327 else
328 vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN;
329
330#if IS_ENABLED(CONFIG_FCOE)
331 vlandev->fcoe_ddp_xid = dev->fcoe_ddp_xid;
332#endif
333
334 vlandev->priv_flags &= ~IFF_XMIT_DST_RELEASE;
335 vlandev->priv_flags |= (vlan->real_dev->priv_flags & IFF_XMIT_DST_RELEASE);
336 vlandev->hw_enc_features = vlan_tnl_features(vlan->real_dev);
337
338 netdev_update_features(vlandev);
339}
340
341static int __vlan_device_event(struct net_device *dev, unsigned long event)
342{
343 int err = 0;
344
345 switch (event) {
346 case NETDEV_CHANGENAME:
347 vlan_proc_rem_dev(dev);
348 err = vlan_proc_add_dev(dev);
349 break;
350 case NETDEV_REGISTER:
351 err = vlan_proc_add_dev(dev);
352 break;
353 case NETDEV_UNREGISTER:
354 vlan_proc_rem_dev(dev);
355 break;
356 }
357
358 return err;
359}
360
361static int vlan_device_event(struct notifier_block *unused, unsigned long event,
362 void *ptr)
363{
364 struct netlink_ext_ack *extack = netdev_notifier_info_to_extack(ptr);
365 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
366 struct vlan_group *grp;
367 struct vlan_info *vlan_info;
368 int i, flgs;
369 struct net_device *vlandev;
370 struct vlan_dev_priv *vlan;
371 bool last = false;
372 LIST_HEAD(list);
373 int err;
374
375 if (is_vlan_dev(dev)) {
376 int err = __vlan_device_event(dev, event);
377
378 if (err)
379 return notifier_from_errno(err);
380 }
381
382 if ((event == NETDEV_UP) &&
383 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER)) {
384 pr_info("adding VLAN 0 to HW filter on device %s\n",
385 dev->name);
386 vlan_vid_add(dev, htons(ETH_P_8021Q), 0);
387 }
388 if (event == NETDEV_DOWN &&
389 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER))
390 vlan_vid_del(dev, htons(ETH_P_8021Q), 0);
391
392 vlan_info = rtnl_dereference(dev->vlan_info);
393 if (!vlan_info)
394 goto out;
395 grp = &vlan_info->grp;
396
397 /* It is OK that we do not hold the group lock right now,
398 * as we run under the RTNL lock.
399 */
400
401 switch (event) {
402 case NETDEV_CHANGE:
403 /* Propagate real device state to vlan devices */
404 vlan_group_for_each_dev(grp, i, vlandev)
405 vlan_stacked_transfer_operstate(dev, vlandev,
406 vlan_dev_priv(vlandev));
407 break;
408
409 case NETDEV_CHANGEADDR:
410 /* Adjust unicast filters on underlying device */
411 vlan_group_for_each_dev(grp, i, vlandev) {
412 flgs = vlandev->flags;
413 if (!(flgs & IFF_UP))
414 continue;
415
416 vlan_sync_address(dev, vlandev);
417 }
418 break;
419
420 case NETDEV_CHANGEMTU:
421 vlan_group_for_each_dev(grp, i, vlandev) {
422 if (vlandev->mtu <= dev->mtu)
423 continue;
424
425 dev_set_mtu(vlandev, dev->mtu);
426 }
427 break;
428
429 case NETDEV_FEAT_CHANGE:
430 /* Propagate device features to underlying device */
431 vlan_group_for_each_dev(grp, i, vlandev)
432 vlan_transfer_features(dev, vlandev);
433 break;
434
435 case NETDEV_DOWN: {
436 struct net_device *tmp;
437 LIST_HEAD(close_list);
438
439 /* Put all VLANs for this dev in the down state too. */
440 vlan_group_for_each_dev(grp, i, vlandev) {
441 flgs = vlandev->flags;
442 if (!(flgs & IFF_UP))
443 continue;
444
445 vlan = vlan_dev_priv(vlandev);
446 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
447 list_add(&vlandev->close_list, &close_list);
448 }
449
450 dev_close_many(&close_list, false);
451
452 list_for_each_entry_safe(vlandev, tmp, &close_list, close_list) {
453 vlan_stacked_transfer_operstate(dev, vlandev,
454 vlan_dev_priv(vlandev));
455 list_del_init(&vlandev->close_list);
456 }
457 list_del(&close_list);
458 break;
459 }
460 case NETDEV_UP:
461 /* Put all VLANs for this dev in the up state too. */
462 vlan_group_for_each_dev(grp, i, vlandev) {
463 flgs = dev_get_flags(vlandev);
464 if (flgs & IFF_UP)
465 continue;
466
467 vlan = vlan_dev_priv(vlandev);
468 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
469 dev_change_flags(vlandev, flgs | IFF_UP,
470 extack);
471 vlan_stacked_transfer_operstate(dev, vlandev, vlan);
472 }
473 break;
474
475 case NETDEV_UNREGISTER:
476 /* twiddle thumbs on netns device moves */
477 if (dev->reg_state != NETREG_UNREGISTERING)
478 break;
479
480 vlan_group_for_each_dev(grp, i, vlandev) {
481 /* removal of last vid destroys vlan_info, abort
482 * afterwards */
483 if (vlan_info->nr_vids == 1)
484 last = true;
485
486 unregister_vlan_dev(vlandev, &list);
487 if (last)
488 break;
489 }
490 unregister_netdevice_many(&list);
491 break;
492
493 case NETDEV_PRE_TYPE_CHANGE:
494 /* Forbid underlaying device to change its type. */
495 if (vlan_uses_dev(dev))
496 return NOTIFY_BAD;
497 break;
498
499 case NETDEV_NOTIFY_PEERS:
500 case NETDEV_BONDING_FAILOVER:
501 case NETDEV_RESEND_IGMP:
502 /* Propagate to vlan devices */
503 vlan_group_for_each_dev(grp, i, vlandev)
504 call_netdevice_notifiers(event, vlandev);
505 break;
506
507 case NETDEV_CVLAN_FILTER_PUSH_INFO:
508 err = vlan_filter_push_vids(vlan_info, htons(ETH_P_8021Q));
509 if (err)
510 return notifier_from_errno(err);
511 break;
512
513 case NETDEV_CVLAN_FILTER_DROP_INFO:
514 vlan_filter_drop_vids(vlan_info, htons(ETH_P_8021Q));
515 break;
516
517 case NETDEV_SVLAN_FILTER_PUSH_INFO:
518 err = vlan_filter_push_vids(vlan_info, htons(ETH_P_8021AD));
519 if (err)
520 return notifier_from_errno(err);
521 break;
522
523 case NETDEV_SVLAN_FILTER_DROP_INFO:
524 vlan_filter_drop_vids(vlan_info, htons(ETH_P_8021AD));
525 break;
526 }
527
528out:
529 return NOTIFY_DONE;
530}
531
532static struct notifier_block vlan_notifier_block __read_mostly = {
533 .notifier_call = vlan_device_event,
534};
535
536/*
537 * VLAN IOCTL handler.
538 * o execute requested action or pass command to the device driver
539 * arg is really a struct vlan_ioctl_args __user *.
540 */
541static int vlan_ioctl_handler(struct net *net, void __user *arg)
542{
543 int err;
544 struct vlan_ioctl_args args;
545 struct net_device *dev = NULL;
546
547 if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args)))
548 return -EFAULT;
549
550 /* Null terminate this sucker, just in case. */
551 args.device1[sizeof(args.device1) - 1] = 0;
552 args.u.device2[sizeof(args.u.device2) - 1] = 0;
553
554 rtnl_lock();
555
556 switch (args.cmd) {
557 case SET_VLAN_INGRESS_PRIORITY_CMD:
558 case SET_VLAN_EGRESS_PRIORITY_CMD:
559 case SET_VLAN_FLAG_CMD:
560 case ADD_VLAN_CMD:
561 case DEL_VLAN_CMD:
562 case GET_VLAN_REALDEV_NAME_CMD:
563 case GET_VLAN_VID_CMD:
564 err = -ENODEV;
565 dev = __dev_get_by_name(net, args.device1);
566 if (!dev)
567 goto out;
568
569 err = -EINVAL;
570 if (args.cmd != ADD_VLAN_CMD && !is_vlan_dev(dev))
571 goto out;
572 }
573
574 switch (args.cmd) {
575 case SET_VLAN_INGRESS_PRIORITY_CMD:
576 err = -EPERM;
577 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
578 break;
579 vlan_dev_set_ingress_priority(dev,
580 args.u.skb_priority,
581 args.vlan_qos);
582 err = 0;
583 break;
584
585 case SET_VLAN_EGRESS_PRIORITY_CMD:
586 err = -EPERM;
587 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
588 break;
589 err = vlan_dev_set_egress_priority(dev,
590 args.u.skb_priority,
591 args.vlan_qos);
592 break;
593
594 case SET_VLAN_FLAG_CMD:
595 err = -EPERM;
596 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
597 break;
598 err = vlan_dev_change_flags(dev,
599 args.vlan_qos ? args.u.flag : 0,
600 args.u.flag);
601 break;
602
603 case SET_VLAN_NAME_TYPE_CMD:
604 err = -EPERM;
605 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
606 break;
607 if (args.u.name_type < VLAN_NAME_TYPE_HIGHEST) {
608 struct vlan_net *vn;
609
610 vn = net_generic(net, vlan_net_id);
611 vn->name_type = args.u.name_type;
612 err = 0;
613 } else {
614 err = -EINVAL;
615 }
616 break;
617
618 case ADD_VLAN_CMD:
619 err = -EPERM;
620 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
621 break;
622 err = register_vlan_device(dev, args.u.VID);
623 break;
624
625 case DEL_VLAN_CMD:
626 err = -EPERM;
627 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
628 break;
629 unregister_vlan_dev(dev, NULL);
630 err = 0;
631 break;
632
633 case GET_VLAN_REALDEV_NAME_CMD:
634 err = 0;
635 vlan_dev_get_realdev_name(dev, args.u.device2);
636 if (copy_to_user(arg, &args,
637 sizeof(struct vlan_ioctl_args)))
638 err = -EFAULT;
639 break;
640
641 case GET_VLAN_VID_CMD:
642 err = 0;
643 args.u.VID = vlan_dev_vlan_id(dev);
644 if (copy_to_user(arg, &args,
645 sizeof(struct vlan_ioctl_args)))
646 err = -EFAULT;
647 break;
648
649 default:
650 err = -EOPNOTSUPP;
651 break;
652 }
653out:
654 rtnl_unlock();
655 return err;
656}
657
658static int __net_init vlan_init_net(struct net *net)
659{
660 struct vlan_net *vn = net_generic(net, vlan_net_id);
661 int err;
662
663 vn->name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD;
664
665 err = vlan_proc_init(net);
666
667 return err;
668}
669
670static void __net_exit vlan_exit_net(struct net *net)
671{
672 vlan_proc_cleanup(net);
673}
674
675static struct pernet_operations vlan_net_ops = {
676 .init = vlan_init_net,
677 .exit = vlan_exit_net,
678 .id = &vlan_net_id,
679 .size = sizeof(struct vlan_net),
680};
681
682static int __init vlan_proto_init(void)
683{
684 int err;
685
686 pr_info("%s v%s\n", vlan_fullname, vlan_version);
687
688 err = register_pernet_subsys(&vlan_net_ops);
689 if (err < 0)
690 goto err0;
691
692 err = register_netdevice_notifier(&vlan_notifier_block);
693 if (err < 0)
694 goto err2;
695
696 err = vlan_gvrp_init();
697 if (err < 0)
698 goto err3;
699
700 err = vlan_mvrp_init();
701 if (err < 0)
702 goto err4;
703
704 err = vlan_netlink_init();
705 if (err < 0)
706 goto err5;
707
708 vlan_ioctl_set(vlan_ioctl_handler);
709 return 0;
710
711err5:
712 vlan_mvrp_uninit();
713err4:
714 vlan_gvrp_uninit();
715err3:
716 unregister_netdevice_notifier(&vlan_notifier_block);
717err2:
718 unregister_pernet_subsys(&vlan_net_ops);
719err0:
720 return err;
721}
722
723static void __exit vlan_cleanup_module(void)
724{
725 vlan_ioctl_set(NULL);
726
727 vlan_netlink_fini();
728
729 unregister_netdevice_notifier(&vlan_notifier_block);
730
731 unregister_pernet_subsys(&vlan_net_ops);
732 rcu_barrier(); /* Wait for completion of call_rcu()'s */
733
734 vlan_mvrp_uninit();
735 vlan_gvrp_uninit();
736}
737
738module_init(vlan_proto_init);
739module_exit(vlan_cleanup_module);
740
741MODULE_LICENSE("GPL");
742MODULE_VERSION(DRV_VERSION);