Linux Audio

Check our new training course

Loading...
v3.5.6
   1/*
   2 *	IPv6 Address [auto]configuration
   3 *	Linux INET6 implementation
   4 *
   5 *	Authors:
   6 *	Pedro Roque		<roque@di.fc.ul.pt>
   7 *	Alexey Kuznetsov	<kuznet@ms2.inr.ac.ru>
   8 *
   9 *	This program is free software; you can redistribute it and/or
  10 *      modify it under the terms of the GNU General Public License
  11 *      as published by the Free Software Foundation; either version
  12 *      2 of the License, or (at your option) any later version.
  13 */
  14
  15/*
  16 *	Changes:
  17 *
  18 *	Janos Farkas			:	delete timer on ifdown
  19 *	<chexum@bankinf.banki.hu>
  20 *	Andi Kleen			:	kill double kfree on module
  21 *						unload.
  22 *	Maciej W. Rozycki		:	FDDI support
  23 *	sekiya@USAGI			:	Don't send too many RS
  24 *						packets.
  25 *	yoshfuji@USAGI			:       Fixed interval between DAD
  26 *						packets.
  27 *	YOSHIFUJI Hideaki @USAGI	:	improved accuracy of
  28 *						address validation timer.
  29 *	YOSHIFUJI Hideaki @USAGI	:	Privacy Extensions (RFC3041)
  30 *						support.
  31 *	Yuji SEKIYA @USAGI		:	Don't assign a same IPv6
  32 *						address on a same interface.
  33 *	YOSHIFUJI Hideaki @USAGI	:	ARCnet support
  34 *	YOSHIFUJI Hideaki @USAGI	:	convert /proc/net/if_inet6 to
  35 *						seq_file.
  36 *	YOSHIFUJI Hideaki @USAGI	:	improved source address
  37 *						selection; consider scope,
  38 *						status etc.
  39 */
  40
  41#define pr_fmt(fmt) "IPv6: " fmt
  42
  43#include <linux/errno.h>
  44#include <linux/types.h>
  45#include <linux/kernel.h>
  46#include <linux/socket.h>
  47#include <linux/sockios.h>
  48#include <linux/net.h>
  49#include <linux/in6.h>
  50#include <linux/netdevice.h>
  51#include <linux/if_addr.h>
  52#include <linux/if_arp.h>
  53#include <linux/if_arcnet.h>
  54#include <linux/if_infiniband.h>
  55#include <linux/route.h>
  56#include <linux/inetdevice.h>
  57#include <linux/init.h>
  58#include <linux/slab.h>
  59#ifdef CONFIG_SYSCTL
  60#include <linux/sysctl.h>
  61#endif
  62#include <linux/capability.h>
  63#include <linux/delay.h>
  64#include <linux/notifier.h>
  65#include <linux/string.h>
  66
  67#include <net/net_namespace.h>
  68#include <net/sock.h>
  69#include <net/snmp.h>
  70
  71#include <net/af_ieee802154.h>
  72#include <net/ipv6.h>
  73#include <net/protocol.h>
  74#include <net/ndisc.h>
  75#include <net/ip6_route.h>
  76#include <net/addrconf.h>
  77#include <net/tcp.h>
  78#include <net/ip.h>
  79#include <net/netlink.h>
  80#include <net/pkt_sched.h>
  81#include <linux/if_tunnel.h>
  82#include <linux/rtnetlink.h>
  83
  84#ifdef CONFIG_IPV6_PRIVACY
  85#include <linux/random.h>
  86#endif
  87
  88#include <linux/uaccess.h>
  89#include <asm/unaligned.h>
  90
  91#include <linux/proc_fs.h>
  92#include <linux/seq_file.h>
  93#include <linux/export.h>
  94
  95/* Set to 3 to get tracing... */
  96#define ACONF_DEBUG 2
  97
  98#if ACONF_DEBUG >= 3
  99#define ADBG(x) printk x
 100#else
 101#define ADBG(x)
 102#endif
 103
 104#define	INFINITY_LIFE_TIME	0xFFFFFFFF
 105
 106static inline u32 cstamp_delta(unsigned long cstamp)
 107{
 108	return (cstamp - INITIAL_JIFFIES) * 100UL / HZ;
 109}
 110
 111#define ADDRCONF_TIMER_FUZZ_MINUS	(HZ > 50 ? HZ/50 : 1)
 112#define ADDRCONF_TIMER_FUZZ		(HZ / 4)
 113#define ADDRCONF_TIMER_FUZZ_MAX		(HZ)
 114
 115#ifdef CONFIG_SYSCTL
 116static void addrconf_sysctl_register(struct inet6_dev *idev);
 117static void addrconf_sysctl_unregister(struct inet6_dev *idev);
 118#else
 119static inline void addrconf_sysctl_register(struct inet6_dev *idev)
 120{
 121}
 122
 123static inline void addrconf_sysctl_unregister(struct inet6_dev *idev)
 124{
 125}
 126#endif
 127
 128#ifdef CONFIG_IPV6_PRIVACY
 129static int __ipv6_regen_rndid(struct inet6_dev *idev);
 130static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr);
 131static void ipv6_regen_rndid(unsigned long data);
 132#endif
 133
 134static int ipv6_generate_eui64(u8 *eui, struct net_device *dev);
 135static int ipv6_count_addresses(struct inet6_dev *idev);
 136
 137/*
 138 *	Configured unicast address hash table
 139 */
 140static struct hlist_head inet6_addr_lst[IN6_ADDR_HSIZE];
 141static DEFINE_SPINLOCK(addrconf_hash_lock);
 142
 143static void addrconf_verify(unsigned long);
 144
 145static DEFINE_TIMER(addr_chk_timer, addrconf_verify, 0, 0);
 146static DEFINE_SPINLOCK(addrconf_verify_lock);
 147
 148static void addrconf_join_anycast(struct inet6_ifaddr *ifp);
 149static void addrconf_leave_anycast(struct inet6_ifaddr *ifp);
 150
 151static void addrconf_type_change(struct net_device *dev,
 152				 unsigned long event);
 153static int addrconf_ifdown(struct net_device *dev, int how);
 154
 155static void addrconf_dad_start(struct inet6_ifaddr *ifp);
 156static void addrconf_dad_timer(unsigned long data);
 157static void addrconf_dad_completed(struct inet6_ifaddr *ifp);
 158static void addrconf_dad_run(struct inet6_dev *idev);
 159static void addrconf_rs_timer(unsigned long data);
 160static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
 161static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
 162
 163static void inet6_prefix_notify(int event, struct inet6_dev *idev,
 164				struct prefix_info *pinfo);
 165static bool ipv6_chk_same_addr(struct net *net, const struct in6_addr *addr,
 166			       struct net_device *dev);
 167
 168static ATOMIC_NOTIFIER_HEAD(inet6addr_chain);
 169
 170static struct ipv6_devconf ipv6_devconf __read_mostly = {
 171	.forwarding		= 0,
 172	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
 173	.mtu6			= IPV6_MIN_MTU,
 174	.accept_ra		= 1,
 175	.accept_redirects	= 1,
 176	.autoconf		= 1,
 177	.force_mld_version	= 0,
 178	.dad_transmits		= 1,
 179	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
 180	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
 181	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
 182#ifdef CONFIG_IPV6_PRIVACY
 183	.use_tempaddr 		= 0,
 184	.temp_valid_lft		= TEMP_VALID_LIFETIME,
 185	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
 186	.regen_max_retry	= REGEN_MAX_RETRY,
 187	.max_desync_factor	= MAX_DESYNC_FACTOR,
 188#endif
 189	.max_addresses		= IPV6_MAX_ADDRESSES,
 190	.accept_ra_defrtr	= 1,
 191	.accept_ra_pinfo	= 1,
 192#ifdef CONFIG_IPV6_ROUTER_PREF
 193	.accept_ra_rtr_pref	= 1,
 194	.rtr_probe_interval	= 60 * HZ,
 195#ifdef CONFIG_IPV6_ROUTE_INFO
 196	.accept_ra_rt_info_max_plen = 0,
 197#endif
 198#endif
 199	.proxy_ndp		= 0,
 200	.accept_source_route	= 0,	/* we do not accept RH0 by default. */
 201	.disable_ipv6		= 0,
 202	.accept_dad		= 1,
 203};
 204
 205static struct ipv6_devconf ipv6_devconf_dflt __read_mostly = {
 206	.forwarding		= 0,
 207	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
 208	.mtu6			= IPV6_MIN_MTU,
 209	.accept_ra		= 1,
 210	.accept_redirects	= 1,
 211	.autoconf		= 1,
 212	.dad_transmits		= 1,
 213	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
 214	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
 215	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
 216#ifdef CONFIG_IPV6_PRIVACY
 217	.use_tempaddr		= 0,
 218	.temp_valid_lft		= TEMP_VALID_LIFETIME,
 219	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
 220	.regen_max_retry	= REGEN_MAX_RETRY,
 221	.max_desync_factor	= MAX_DESYNC_FACTOR,
 222#endif
 223	.max_addresses		= IPV6_MAX_ADDRESSES,
 224	.accept_ra_defrtr	= 1,
 225	.accept_ra_pinfo	= 1,
 226#ifdef CONFIG_IPV6_ROUTER_PREF
 227	.accept_ra_rtr_pref	= 1,
 228	.rtr_probe_interval	= 60 * HZ,
 229#ifdef CONFIG_IPV6_ROUTE_INFO
 230	.accept_ra_rt_info_max_plen = 0,
 231#endif
 232#endif
 233	.proxy_ndp		= 0,
 234	.accept_source_route	= 0,	/* we do not accept RH0 by default. */
 235	.disable_ipv6		= 0,
 236	.accept_dad		= 1,
 237};
 238
 239/* IPv6 Wildcard Address and Loopback Address defined by RFC2553 */
 240const struct in6_addr in6addr_any = IN6ADDR_ANY_INIT;
 241const struct in6_addr in6addr_loopback = IN6ADDR_LOOPBACK_INIT;
 242const struct in6_addr in6addr_linklocal_allnodes = IN6ADDR_LINKLOCAL_ALLNODES_INIT;
 243const struct in6_addr in6addr_linklocal_allrouters = IN6ADDR_LINKLOCAL_ALLROUTERS_INIT;
 244
 245/* Check if a valid qdisc is available */
 246static inline bool addrconf_qdisc_ok(const struct net_device *dev)
 247{
 248	return !qdisc_tx_is_noop(dev);
 249}
 250
 251/* Check if a route is valid prefix route */
 252static inline int addrconf_is_prefix_route(const struct rt6_info *rt)
 253{
 254	return (rt->rt6i_flags & (RTF_GATEWAY | RTF_DEFAULT)) == 0;
 255}
 256
 257static void addrconf_del_timer(struct inet6_ifaddr *ifp)
 258{
 259	if (del_timer(&ifp->timer))
 260		__in6_ifa_put(ifp);
 261}
 262
 263enum addrconf_timer_t {
 264	AC_NONE,
 265	AC_DAD,
 266	AC_RS,
 267};
 268
 269static void addrconf_mod_timer(struct inet6_ifaddr *ifp,
 270			       enum addrconf_timer_t what,
 271			       unsigned long when)
 272{
 273	if (!del_timer(&ifp->timer))
 274		in6_ifa_hold(ifp);
 275
 276	switch (what) {
 277	case AC_DAD:
 278		ifp->timer.function = addrconf_dad_timer;
 279		break;
 280	case AC_RS:
 281		ifp->timer.function = addrconf_rs_timer;
 282		break;
 283	default:
 284		break;
 285	}
 286	ifp->timer.expires = jiffies + when;
 287	add_timer(&ifp->timer);
 288}
 289
 290static int snmp6_alloc_dev(struct inet6_dev *idev)
 291{
 292	if (snmp_mib_init((void __percpu **)idev->stats.ipv6,
 293			  sizeof(struct ipstats_mib),
 294			  __alignof__(struct ipstats_mib)) < 0)
 295		goto err_ip;
 296	idev->stats.icmpv6dev = kzalloc(sizeof(struct icmpv6_mib_device),
 297					GFP_KERNEL);
 298	if (!idev->stats.icmpv6dev)
 299		goto err_icmp;
 300	idev->stats.icmpv6msgdev = kzalloc(sizeof(struct icmpv6msg_mib_device),
 301					   GFP_KERNEL);
 302	if (!idev->stats.icmpv6msgdev)
 303		goto err_icmpmsg;
 304
 305	return 0;
 306
 307err_icmpmsg:
 308	kfree(idev->stats.icmpv6dev);
 309err_icmp:
 310	snmp_mib_free((void __percpu **)idev->stats.ipv6);
 311err_ip:
 312	return -ENOMEM;
 313}
 314
 315static void snmp6_free_dev(struct inet6_dev *idev)
 316{
 317	kfree(idev->stats.icmpv6msgdev);
 318	kfree(idev->stats.icmpv6dev);
 319	snmp_mib_free((void __percpu **)idev->stats.ipv6);
 320}
 321
 322/* Nobody refers to this device, we may destroy it. */
 323
 324void in6_dev_finish_destroy(struct inet6_dev *idev)
 325{
 326	struct net_device *dev = idev->dev;
 327
 328	WARN_ON(!list_empty(&idev->addr_list));
 329	WARN_ON(idev->mc_list != NULL);
 330
 331#ifdef NET_REFCNT_DEBUG
 332	pr_debug("%s: %s\n", __func__, dev ? dev->name : "NIL");
 333#endif
 334	dev_put(dev);
 335	if (!idev->dead) {
 336		pr_warn("Freeing alive inet6 device %p\n", idev);
 337		return;
 338	}
 339	snmp6_free_dev(idev);
 340	kfree_rcu(idev, rcu);
 341}
 
 342EXPORT_SYMBOL(in6_dev_finish_destroy);
 343
 344static struct inet6_dev *ipv6_add_dev(struct net_device *dev)
 345{
 346	struct inet6_dev *ndev;
 347
 348	ASSERT_RTNL();
 349
 350	if (dev->mtu < IPV6_MIN_MTU)
 351		return NULL;
 352
 353	ndev = kzalloc(sizeof(struct inet6_dev), GFP_KERNEL);
 354
 355	if (ndev == NULL)
 356		return NULL;
 357
 358	rwlock_init(&ndev->lock);
 359	ndev->dev = dev;
 360	INIT_LIST_HEAD(&ndev->addr_list);
 361
 362	memcpy(&ndev->cnf, dev_net(dev)->ipv6.devconf_dflt, sizeof(ndev->cnf));
 363	ndev->cnf.mtu6 = dev->mtu;
 364	ndev->cnf.sysctl = NULL;
 365	ndev->nd_parms = neigh_parms_alloc(dev, &nd_tbl);
 366	if (ndev->nd_parms == NULL) {
 367		kfree(ndev);
 368		return NULL;
 369	}
 370	if (ndev->cnf.forwarding)
 371		dev_disable_lro(dev);
 372	/* We refer to the device */
 373	dev_hold(dev);
 374
 375	if (snmp6_alloc_dev(ndev) < 0) {
 376		ADBG((KERN_WARNING
 377			"%s: cannot allocate memory for statistics; dev=%s.\n",
 378			__func__, dev->name));
 379		neigh_parms_release(&nd_tbl, ndev->nd_parms);
 380		dev_put(dev);
 381		kfree(ndev);
 382		return NULL;
 383	}
 384
 385	if (snmp6_register_dev(ndev) < 0) {
 386		ADBG((KERN_WARNING
 387			"%s: cannot create /proc/net/dev_snmp6/%s\n",
 388			__func__, dev->name));
 389		neigh_parms_release(&nd_tbl, ndev->nd_parms);
 390		ndev->dead = 1;
 391		in6_dev_finish_destroy(ndev);
 392		return NULL;
 393	}
 394
 395	/* One reference from device.  We must do this before
 396	 * we invoke __ipv6_regen_rndid().
 397	 */
 398	in6_dev_hold(ndev);
 399
 400	if (dev->flags & (IFF_NOARP | IFF_LOOPBACK))
 401		ndev->cnf.accept_dad = -1;
 402
 403#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
 404	if (dev->type == ARPHRD_SIT && (dev->priv_flags & IFF_ISATAP)) {
 405		pr_info("%s: Disabled Multicast RS\n", dev->name);
 
 
 406		ndev->cnf.rtr_solicits = 0;
 407	}
 408#endif
 409
 410#ifdef CONFIG_IPV6_PRIVACY
 411	INIT_LIST_HEAD(&ndev->tempaddr_list);
 412	setup_timer(&ndev->regen_timer, ipv6_regen_rndid, (unsigned long)ndev);
 413	if ((dev->flags&IFF_LOOPBACK) ||
 414	    dev->type == ARPHRD_TUNNEL ||
 415	    dev->type == ARPHRD_TUNNEL6 ||
 416	    dev->type == ARPHRD_SIT ||
 417	    dev->type == ARPHRD_NONE) {
 418		ndev->cnf.use_tempaddr = -1;
 419	} else {
 420		in6_dev_hold(ndev);
 421		ipv6_regen_rndid((unsigned long) ndev);
 422	}
 423#endif
 424
 425	if (netif_running(dev) && addrconf_qdisc_ok(dev))
 426		ndev->if_flags |= IF_READY;
 427
 428	ipv6_mc_init_dev(ndev);
 429	ndev->tstamp = jiffies;
 430	addrconf_sysctl_register(ndev);
 431	/* protected by rtnl_lock */
 432	rcu_assign_pointer(dev->ip6_ptr, ndev);
 433
 434	/* Join all-node multicast group */
 435	ipv6_dev_mc_inc(dev, &in6addr_linklocal_allnodes);
 436
 437	/* Join all-router multicast group if forwarding is set */
 438	if (ndev->cnf.forwarding && (dev->flags & IFF_MULTICAST))
 439		ipv6_dev_mc_inc(dev, &in6addr_linklocal_allrouters);
 440
 441	return ndev;
 442}
 443
 444static struct inet6_dev *ipv6_find_idev(struct net_device *dev)
 445{
 446	struct inet6_dev *idev;
 447
 448	ASSERT_RTNL();
 449
 450	idev = __in6_dev_get(dev);
 451	if (!idev) {
 452		idev = ipv6_add_dev(dev);
 453		if (!idev)
 454			return NULL;
 455	}
 456
 457	if (dev->flags&IFF_UP)
 458		ipv6_mc_up(idev);
 459	return idev;
 460}
 461
 462#ifdef CONFIG_SYSCTL
 463static void dev_forward_change(struct inet6_dev *idev)
 464{
 465	struct net_device *dev;
 466	struct inet6_ifaddr *ifa;
 467
 468	if (!idev)
 469		return;
 470	dev = idev->dev;
 471	if (idev->cnf.forwarding)
 472		dev_disable_lro(dev);
 473	if (dev && (dev->flags & IFF_MULTICAST)) {
 474		if (idev->cnf.forwarding)
 475			ipv6_dev_mc_inc(dev, &in6addr_linklocal_allrouters);
 476		else
 477			ipv6_dev_mc_dec(dev, &in6addr_linklocal_allrouters);
 478	}
 479
 480	list_for_each_entry(ifa, &idev->addr_list, if_list) {
 481		if (ifa->flags&IFA_F_TENTATIVE)
 482			continue;
 483		if (idev->cnf.forwarding)
 484			addrconf_join_anycast(ifa);
 485		else
 486			addrconf_leave_anycast(ifa);
 487	}
 488}
 489
 490
 491static void addrconf_forward_change(struct net *net, __s32 newf)
 492{
 493	struct net_device *dev;
 494	struct inet6_dev *idev;
 495
 496	for_each_netdev(net, dev) {
 
 497		idev = __in6_dev_get(dev);
 498		if (idev) {
 499			int changed = (!idev->cnf.forwarding) ^ (!newf);
 500			idev->cnf.forwarding = newf;
 501			if (changed)
 502				dev_forward_change(idev);
 503		}
 504	}
 
 505}
 506
 507static int addrconf_fixup_forwarding(struct ctl_table *table, int *p, int newf)
 508{
 509	struct net *net;
 510	int old;
 511
 512	if (!rtnl_trylock())
 513		return restart_syscall();
 514
 515	net = (struct net *)table->extra2;
 516	old = *p;
 517	*p = newf;
 518
 519	if (p == &net->ipv6.devconf_dflt->forwarding) {
 520		rtnl_unlock();
 521		return 0;
 
 
 
 
 
 522	}
 523
 524	if (p == &net->ipv6.devconf_all->forwarding) {
 
 525		net->ipv6.devconf_dflt->forwarding = newf;
 526		addrconf_forward_change(net, newf);
 527	} else if ((!newf) ^ (!old))
 528		dev_forward_change((struct inet6_dev *)table->extra1);
 529	rtnl_unlock();
 530
 531	if (newf)
 532		rt6_purge_dflt_routers(net);
 533	return 1;
 534}
 535#endif
 536
 537/* Nobody refers to this ifaddr, destroy it */
 538void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp)
 539{
 540	WARN_ON(!hlist_unhashed(&ifp->addr_lst));
 541
 542#ifdef NET_REFCNT_DEBUG
 543	pr_debug("%s\n", __func__);
 544#endif
 545
 546	in6_dev_put(ifp->idev);
 547
 548	if (del_timer(&ifp->timer))
 549		pr_notice("Timer is still running, when freeing ifa=%p\n", ifp);
 550
 551	if (ifp->state != INET6_IFADDR_STATE_DEAD) {
 552		pr_warn("Freeing alive inet6 address %p\n", ifp);
 553		return;
 554	}
 555	dst_release(&ifp->rt->dst);
 556
 557	kfree_rcu(ifp, rcu);
 558}
 559
 560static void
 561ipv6_link_dev_addr(struct inet6_dev *idev, struct inet6_ifaddr *ifp)
 562{
 563	struct list_head *p;
 564	int ifp_scope = ipv6_addr_src_scope(&ifp->addr);
 565
 566	/*
 567	 * Each device address list is sorted in order of scope -
 568	 * global before linklocal.
 569	 */
 570	list_for_each(p, &idev->addr_list) {
 571		struct inet6_ifaddr *ifa
 572			= list_entry(p, struct inet6_ifaddr, if_list);
 573		if (ifp_scope >= ipv6_addr_src_scope(&ifa->addr))
 574			break;
 575	}
 576
 577	list_add_tail(&ifp->if_list, p);
 578}
 579
 580static u32 ipv6_addr_hash(const struct in6_addr *addr)
 581{
 582	/*
 583	 * We perform the hash function over the last 64 bits of the address
 584	 * This will include the IEEE address token on links that support it.
 585	 */
 586	return jhash_2words((__force u32)addr->s6_addr32[2],
 587			    (__force u32)addr->s6_addr32[3], 0)
 588		& (IN6_ADDR_HSIZE - 1);
 589}
 590
 591/* On success it returns ifp with increased reference count */
 592
 593static struct inet6_ifaddr *
 594ipv6_add_addr(struct inet6_dev *idev, const struct in6_addr *addr, int pfxlen,
 595	      int scope, u32 flags)
 596{
 597	struct inet6_ifaddr *ifa = NULL;
 598	struct rt6_info *rt;
 599	unsigned int hash;
 600	int err = 0;
 601	int addr_type = ipv6_addr_type(addr);
 602
 603	if (addr_type == IPV6_ADDR_ANY ||
 604	    addr_type & IPV6_ADDR_MULTICAST ||
 605	    (!(idev->dev->flags & IFF_LOOPBACK) &&
 606	     addr_type & IPV6_ADDR_LOOPBACK))
 607		return ERR_PTR(-EADDRNOTAVAIL);
 608
 609	rcu_read_lock_bh();
 610	if (idev->dead) {
 611		err = -ENODEV;			/*XXX*/
 612		goto out2;
 613	}
 614
 615	if (idev->cnf.disable_ipv6) {
 616		err = -EACCES;
 617		goto out2;
 618	}
 619
 620	spin_lock(&addrconf_hash_lock);
 621
 622	/* Ignore adding duplicate addresses on an interface */
 623	if (ipv6_chk_same_addr(dev_net(idev->dev), addr, idev->dev)) {
 624		ADBG(("ipv6_add_addr: already assigned\n"));
 625		err = -EEXIST;
 626		goto out;
 627	}
 628
 629	ifa = kzalloc(sizeof(struct inet6_ifaddr), GFP_ATOMIC);
 630
 631	if (ifa == NULL) {
 632		ADBG(("ipv6_add_addr: malloc failed\n"));
 633		err = -ENOBUFS;
 634		goto out;
 635	}
 636
 637	rt = addrconf_dst_alloc(idev, addr, false);
 638	if (IS_ERR(rt)) {
 639		err = PTR_ERR(rt);
 640		goto out;
 641	}
 642
 643	ifa->addr = *addr;
 644
 645	spin_lock_init(&ifa->lock);
 646	spin_lock_init(&ifa->state_lock);
 647	init_timer(&ifa->timer);
 648	INIT_HLIST_NODE(&ifa->addr_lst);
 649	ifa->timer.data = (unsigned long) ifa;
 650	ifa->scope = scope;
 651	ifa->prefix_len = pfxlen;
 652	ifa->flags = flags | IFA_F_TENTATIVE;
 653	ifa->cstamp = ifa->tstamp = jiffies;
 654
 655	ifa->rt = rt;
 656
 
 
 
 
 
 
 
 
 
 
 657	ifa->idev = idev;
 658	in6_dev_hold(idev);
 659	/* For caller */
 660	in6_ifa_hold(ifa);
 661
 662	/* Add to big hash table */
 663	hash = ipv6_addr_hash(addr);
 664
 665	hlist_add_head_rcu(&ifa->addr_lst, &inet6_addr_lst[hash]);
 666	spin_unlock(&addrconf_hash_lock);
 667
 668	write_lock(&idev->lock);
 669	/* Add to inet6_dev unicast addr list. */
 670	ipv6_link_dev_addr(idev, ifa);
 671
 672#ifdef CONFIG_IPV6_PRIVACY
 673	if (ifa->flags&IFA_F_TEMPORARY) {
 674		list_add(&ifa->tmp_list, &idev->tempaddr_list);
 675		in6_ifa_hold(ifa);
 676	}
 677#endif
 678
 679	in6_ifa_hold(ifa);
 680	write_unlock(&idev->lock);
 681out2:
 682	rcu_read_unlock_bh();
 683
 684	if (likely(err == 0))
 685		atomic_notifier_call_chain(&inet6addr_chain, NETDEV_UP, ifa);
 686	else {
 687		kfree(ifa);
 688		ifa = ERR_PTR(err);
 689	}
 690
 691	return ifa;
 692out:
 693	spin_unlock(&addrconf_hash_lock);
 694	goto out2;
 695}
 696
 697/* This function wants to get referenced ifp and releases it before return */
 698
 699static void ipv6_del_addr(struct inet6_ifaddr *ifp)
 700{
 701	struct inet6_ifaddr *ifa, *ifn;
 702	struct inet6_dev *idev = ifp->idev;
 703	int state;
 704	int deleted = 0, onlink = 0;
 705	unsigned long expires = jiffies;
 706
 707	spin_lock_bh(&ifp->state_lock);
 708	state = ifp->state;
 709	ifp->state = INET6_IFADDR_STATE_DEAD;
 710	spin_unlock_bh(&ifp->state_lock);
 711
 712	if (state == INET6_IFADDR_STATE_DEAD)
 713		goto out;
 714
 715	spin_lock_bh(&addrconf_hash_lock);
 716	hlist_del_init_rcu(&ifp->addr_lst);
 717	spin_unlock_bh(&addrconf_hash_lock);
 718
 719	write_lock_bh(&idev->lock);
 720#ifdef CONFIG_IPV6_PRIVACY
 721	if (ifp->flags&IFA_F_TEMPORARY) {
 722		list_del(&ifp->tmp_list);
 723		if (ifp->ifpub) {
 724			in6_ifa_put(ifp->ifpub);
 725			ifp->ifpub = NULL;
 726		}
 727		__in6_ifa_put(ifp);
 728	}
 729#endif
 730
 731	list_for_each_entry_safe(ifa, ifn, &idev->addr_list, if_list) {
 732		if (ifa == ifp) {
 733			list_del_init(&ifp->if_list);
 734			__in6_ifa_put(ifp);
 735
 736			if (!(ifp->flags & IFA_F_PERMANENT) || onlink > 0)
 737				break;
 738			deleted = 1;
 739			continue;
 740		} else if (ifp->flags & IFA_F_PERMANENT) {
 741			if (ipv6_prefix_equal(&ifa->addr, &ifp->addr,
 742					      ifp->prefix_len)) {
 743				if (ifa->flags & IFA_F_PERMANENT) {
 744					onlink = 1;
 745					if (deleted)
 746						break;
 747				} else {
 748					unsigned long lifetime;
 749
 750					if (!onlink)
 751						onlink = -1;
 752
 753					spin_lock(&ifa->lock);
 754
 755					lifetime = addrconf_timeout_fixup(ifa->valid_lft, HZ);
 756					/*
 757					 * Note: Because this address is
 758					 * not permanent, lifetime <
 759					 * LONG_MAX / HZ here.
 760					 */
 761					if (time_before(expires,
 762							ifa->tstamp + lifetime * HZ))
 763						expires = ifa->tstamp + lifetime * HZ;
 764					spin_unlock(&ifa->lock);
 765				}
 766			}
 767		}
 768	}
 769	write_unlock_bh(&idev->lock);
 770
 771	addrconf_del_timer(ifp);
 772
 773	ipv6_ifa_notify(RTM_DELADDR, ifp);
 774
 775	atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifp);
 776
 777	/*
 778	 * Purge or update corresponding prefix
 779	 *
 780	 * 1) we don't purge prefix here if address was not permanent.
 781	 *    prefix is managed by its own lifetime.
 782	 * 2) if there're no addresses, delete prefix.
 783	 * 3) if there're still other permanent address(es),
 784	 *    corresponding prefix is still permanent.
 785	 * 4) otherwise, update prefix lifetime to the
 786	 *    longest valid lifetime among the corresponding
 787	 *    addresses on the device.
 788	 *    Note: subsequent RA will update lifetime.
 789	 *
 790	 * --yoshfuji
 791	 */
 792	if ((ifp->flags & IFA_F_PERMANENT) && onlink < 1) {
 793		struct in6_addr prefix;
 794		struct rt6_info *rt;
 795		struct net *net = dev_net(ifp->idev->dev);
 796		ipv6_addr_prefix(&prefix, &ifp->addr, ifp->prefix_len);
 797		rt = rt6_lookup(net, &prefix, NULL, ifp->idev->dev->ifindex, 1);
 798
 799		if (rt && addrconf_is_prefix_route(rt)) {
 800			if (onlink == 0) {
 801				ip6_del_rt(rt);
 802				rt = NULL;
 803			} else if (!(rt->rt6i_flags & RTF_EXPIRES)) {
 804				rt6_set_expires(rt, expires);
 
 805			}
 806		}
 807		dst_release(&rt->dst);
 808	}
 809
 810	/* clean up prefsrc entries */
 811	rt6_remove_prefsrc(ifp);
 812out:
 813	in6_ifa_put(ifp);
 814}
 815
 816#ifdef CONFIG_IPV6_PRIVACY
 817static int ipv6_create_tempaddr(struct inet6_ifaddr *ifp, struct inet6_ifaddr *ift)
 818{
 819	struct inet6_dev *idev = ifp->idev;
 820	struct in6_addr addr, *tmpaddr;
 821	unsigned long tmp_prefered_lft, tmp_valid_lft, tmp_tstamp, age;
 822	unsigned long regen_advance;
 823	int tmp_plen;
 824	int ret = 0;
 825	int max_addresses;
 826	u32 addr_flags;
 827	unsigned long now = jiffies;
 828
 829	write_lock(&idev->lock);
 830	if (ift) {
 831		spin_lock_bh(&ift->lock);
 832		memcpy(&addr.s6_addr[8], &ift->addr.s6_addr[8], 8);
 833		spin_unlock_bh(&ift->lock);
 834		tmpaddr = &addr;
 835	} else {
 836		tmpaddr = NULL;
 837	}
 838retry:
 839	in6_dev_hold(idev);
 840	if (idev->cnf.use_tempaddr <= 0) {
 841		write_unlock(&idev->lock);
 842		pr_info("%s: use_tempaddr is disabled\n", __func__);
 
 843		in6_dev_put(idev);
 844		ret = -1;
 845		goto out;
 846	}
 847	spin_lock_bh(&ifp->lock);
 848	if (ifp->regen_count++ >= idev->cnf.regen_max_retry) {
 849		idev->cnf.use_tempaddr = -1;	/*XXX*/
 850		spin_unlock_bh(&ifp->lock);
 851		write_unlock(&idev->lock);
 852		pr_warn("%s: regeneration time exceeded - disabled temporary address support\n",
 853			__func__);
 854		in6_dev_put(idev);
 855		ret = -1;
 856		goto out;
 857	}
 858	in6_ifa_hold(ifp);
 859	memcpy(addr.s6_addr, ifp->addr.s6_addr, 8);
 860	if (__ipv6_try_regen_rndid(idev, tmpaddr) < 0) {
 861		spin_unlock_bh(&ifp->lock);
 862		write_unlock(&idev->lock);
 863		pr_warn("%s: regeneration of randomized interface id failed\n",
 864			__func__);
 865		in6_ifa_put(ifp);
 866		in6_dev_put(idev);
 867		ret = -1;
 868		goto out;
 869	}
 870	memcpy(&addr.s6_addr[8], idev->rndid, 8);
 871	age = (now - ifp->tstamp) / HZ;
 872	tmp_valid_lft = min_t(__u32,
 873			      ifp->valid_lft,
 874			      idev->cnf.temp_valid_lft + age);
 875	tmp_prefered_lft = min_t(__u32,
 876				 ifp->prefered_lft,
 877				 idev->cnf.temp_prefered_lft + age -
 878				 idev->cnf.max_desync_factor);
 879	tmp_plen = ifp->prefix_len;
 880	max_addresses = idev->cnf.max_addresses;
 
 881	tmp_tstamp = ifp->tstamp;
 882	spin_unlock_bh(&ifp->lock);
 883
 884	regen_advance = idev->cnf.regen_max_retry *
 885	                idev->cnf.dad_transmits *
 886	                idev->nd_parms->retrans_time / HZ;
 887	write_unlock(&idev->lock);
 888
 889	/* A temporary address is created only if this calculated Preferred
 890	 * Lifetime is greater than REGEN_ADVANCE time units.  In particular,
 891	 * an implementation must not create a temporary address with a zero
 892	 * Preferred Lifetime.
 893	 */
 894	if (tmp_prefered_lft <= regen_advance) {
 895		in6_ifa_put(ifp);
 896		in6_dev_put(idev);
 897		ret = -1;
 898		goto out;
 899	}
 900
 901	addr_flags = IFA_F_TEMPORARY;
 902	/* set in addrconf_prefix_rcv() */
 903	if (ifp->flags & IFA_F_OPTIMISTIC)
 904		addr_flags |= IFA_F_OPTIMISTIC;
 905
 906	ift = !max_addresses ||
 907	      ipv6_count_addresses(idev) < max_addresses ?
 908		ipv6_add_addr(idev, &addr, tmp_plen,
 909			      ipv6_addr_type(&addr)&IPV6_ADDR_SCOPE_MASK,
 910			      addr_flags) : NULL;
 911	if (!ift || IS_ERR(ift)) {
 912		in6_ifa_put(ifp);
 913		in6_dev_put(idev);
 914		pr_info("%s: retry temporary address regeneration\n", __func__);
 
 915		tmpaddr = &addr;
 916		write_lock(&idev->lock);
 917		goto retry;
 918	}
 919
 920	spin_lock_bh(&ift->lock);
 921	ift->ifpub = ifp;
 922	ift->valid_lft = tmp_valid_lft;
 923	ift->prefered_lft = tmp_prefered_lft;
 924	ift->cstamp = now;
 925	ift->tstamp = tmp_tstamp;
 926	spin_unlock_bh(&ift->lock);
 927
 928	addrconf_dad_start(ift);
 929	in6_ifa_put(ift);
 930	in6_dev_put(idev);
 931out:
 932	return ret;
 933}
 934#endif
 935
 936/*
 937 *	Choose an appropriate source address (RFC3484)
 938 */
 939enum {
 940	IPV6_SADDR_RULE_INIT = 0,
 941	IPV6_SADDR_RULE_LOCAL,
 942	IPV6_SADDR_RULE_SCOPE,
 943	IPV6_SADDR_RULE_PREFERRED,
 944#ifdef CONFIG_IPV6_MIP6
 945	IPV6_SADDR_RULE_HOA,
 946#endif
 947	IPV6_SADDR_RULE_OIF,
 948	IPV6_SADDR_RULE_LABEL,
 949#ifdef CONFIG_IPV6_PRIVACY
 950	IPV6_SADDR_RULE_PRIVACY,
 951#endif
 952	IPV6_SADDR_RULE_ORCHID,
 953	IPV6_SADDR_RULE_PREFIX,
 954	IPV6_SADDR_RULE_MAX
 955};
 956
 957struct ipv6_saddr_score {
 958	int			rule;
 959	int			addr_type;
 960	struct inet6_ifaddr	*ifa;
 961	DECLARE_BITMAP(scorebits, IPV6_SADDR_RULE_MAX);
 962	int			scopedist;
 963	int			matchlen;
 964};
 965
 966struct ipv6_saddr_dst {
 967	const struct in6_addr *addr;
 968	int ifindex;
 969	int scope;
 970	int label;
 971	unsigned int prefs;
 972};
 973
 974static inline int ipv6_saddr_preferred(int type)
 975{
 976	if (type & (IPV6_ADDR_MAPPED|IPV6_ADDR_COMPATv4|IPV6_ADDR_LOOPBACK))
 977		return 1;
 978	return 0;
 979}
 980
 981static int ipv6_get_saddr_eval(struct net *net,
 982			       struct ipv6_saddr_score *score,
 983			       struct ipv6_saddr_dst *dst,
 984			       int i)
 985{
 986	int ret;
 987
 988	if (i <= score->rule) {
 989		switch (i) {
 990		case IPV6_SADDR_RULE_SCOPE:
 991			ret = score->scopedist;
 992			break;
 993		case IPV6_SADDR_RULE_PREFIX:
 994			ret = score->matchlen;
 995			break;
 996		default:
 997			ret = !!test_bit(i, score->scorebits);
 998		}
 999		goto out;
1000	}
1001
1002	switch (i) {
1003	case IPV6_SADDR_RULE_INIT:
1004		/* Rule 0: remember if hiscore is not ready yet */
1005		ret = !!score->ifa;
1006		break;
1007	case IPV6_SADDR_RULE_LOCAL:
1008		/* Rule 1: Prefer same address */
1009		ret = ipv6_addr_equal(&score->ifa->addr, dst->addr);
1010		break;
1011	case IPV6_SADDR_RULE_SCOPE:
1012		/* Rule 2: Prefer appropriate scope
1013		 *
1014		 *      ret
1015		 *       ^
1016		 *    -1 |  d 15
1017		 *    ---+--+-+---> scope
1018		 *       |
1019		 *       |             d is scope of the destination.
1020		 *  B-d  |  \
1021		 *       |   \      <- smaller scope is better if
1022		 *  B-15 |    \        if scope is enough for destinaion.
1023		 *       |             ret = B - scope (-1 <= scope >= d <= 15).
1024		 * d-C-1 | /
1025		 *       |/         <- greater is better
1026		 *   -C  /             if scope is not enough for destination.
1027		 *      /|             ret = scope - C (-1 <= d < scope <= 15).
1028		 *
1029		 * d - C - 1 < B -15 (for all -1 <= d <= 15).
1030		 * C > d + 14 - B >= 15 + 14 - B = 29 - B.
1031		 * Assume B = 0 and we get C > 29.
1032		 */
1033		ret = __ipv6_addr_src_scope(score->addr_type);
1034		if (ret >= dst->scope)
1035			ret = -ret;
1036		else
1037			ret -= 128;	/* 30 is enough */
1038		score->scopedist = ret;
1039		break;
1040	case IPV6_SADDR_RULE_PREFERRED:
1041		/* Rule 3: Avoid deprecated and optimistic addresses */
1042		ret = ipv6_saddr_preferred(score->addr_type) ||
1043		      !(score->ifa->flags & (IFA_F_DEPRECATED|IFA_F_OPTIMISTIC));
1044		break;
1045#ifdef CONFIG_IPV6_MIP6
1046	case IPV6_SADDR_RULE_HOA:
1047	    {
1048		/* Rule 4: Prefer home address */
1049		int prefhome = !(dst->prefs & IPV6_PREFER_SRC_COA);
1050		ret = !(score->ifa->flags & IFA_F_HOMEADDRESS) ^ prefhome;
1051		break;
1052	    }
1053#endif
1054	case IPV6_SADDR_RULE_OIF:
1055		/* Rule 5: Prefer outgoing interface */
1056		ret = (!dst->ifindex ||
1057		       dst->ifindex == score->ifa->idev->dev->ifindex);
1058		break;
1059	case IPV6_SADDR_RULE_LABEL:
1060		/* Rule 6: Prefer matching label */
1061		ret = ipv6_addr_label(net,
1062				      &score->ifa->addr, score->addr_type,
1063				      score->ifa->idev->dev->ifindex) == dst->label;
1064		break;
1065#ifdef CONFIG_IPV6_PRIVACY
1066	case IPV6_SADDR_RULE_PRIVACY:
1067	    {
1068		/* Rule 7: Prefer public address
1069		 * Note: prefer temporary address if use_tempaddr >= 2
1070		 */
1071		int preftmp = dst->prefs & (IPV6_PREFER_SRC_PUBLIC|IPV6_PREFER_SRC_TMP) ?
1072				!!(dst->prefs & IPV6_PREFER_SRC_TMP) :
1073				score->ifa->idev->cnf.use_tempaddr >= 2;
1074		ret = (!(score->ifa->flags & IFA_F_TEMPORARY)) ^ preftmp;
1075		break;
1076	    }
1077#endif
1078	case IPV6_SADDR_RULE_ORCHID:
1079		/* Rule 8-: Prefer ORCHID vs ORCHID or
1080		 *	    non-ORCHID vs non-ORCHID
1081		 */
1082		ret = !(ipv6_addr_orchid(&score->ifa->addr) ^
1083			ipv6_addr_orchid(dst->addr));
1084		break;
1085	case IPV6_SADDR_RULE_PREFIX:
1086		/* Rule 8: Use longest matching prefix */
1087		score->matchlen = ret = ipv6_addr_diff(&score->ifa->addr,
1088						       dst->addr);
1089		break;
1090	default:
1091		ret = 0;
1092	}
1093
1094	if (ret)
1095		__set_bit(i, score->scorebits);
1096	score->rule = i;
1097out:
1098	return ret;
1099}
1100
1101int ipv6_dev_get_saddr(struct net *net, struct net_device *dst_dev,
1102		       const struct in6_addr *daddr, unsigned int prefs,
1103		       struct in6_addr *saddr)
1104{
1105	struct ipv6_saddr_score scores[2],
1106				*score = &scores[0], *hiscore = &scores[1];
1107	struct ipv6_saddr_dst dst;
1108	struct net_device *dev;
1109	int dst_type;
1110
1111	dst_type = __ipv6_addr_type(daddr);
1112	dst.addr = daddr;
1113	dst.ifindex = dst_dev ? dst_dev->ifindex : 0;
1114	dst.scope = __ipv6_addr_src_scope(dst_type);
1115	dst.label = ipv6_addr_label(net, daddr, dst_type, dst.ifindex);
1116	dst.prefs = prefs;
1117
1118	hiscore->rule = -1;
1119	hiscore->ifa = NULL;
1120
1121	rcu_read_lock();
1122
1123	for_each_netdev_rcu(net, dev) {
1124		struct inet6_dev *idev;
1125
1126		/* Candidate Source Address (section 4)
1127		 *  - multicast and link-local destination address,
1128		 *    the set of candidate source address MUST only
1129		 *    include addresses assigned to interfaces
1130		 *    belonging to the same link as the outgoing
1131		 *    interface.
1132		 * (- For site-local destination addresses, the
1133		 *    set of candidate source addresses MUST only
1134		 *    include addresses assigned to interfaces
1135		 *    belonging to the same site as the outgoing
1136		 *    interface.)
1137		 */
1138		if (((dst_type & IPV6_ADDR_MULTICAST) ||
1139		     dst.scope <= IPV6_ADDR_SCOPE_LINKLOCAL) &&
1140		    dst.ifindex && dev->ifindex != dst.ifindex)
1141			continue;
1142
1143		idev = __in6_dev_get(dev);
1144		if (!idev)
1145			continue;
1146
1147		read_lock_bh(&idev->lock);
1148		list_for_each_entry(score->ifa, &idev->addr_list, if_list) {
1149			int i;
1150
1151			/*
1152			 * - Tentative Address (RFC2462 section 5.4)
1153			 *  - A tentative address is not considered
1154			 *    "assigned to an interface" in the traditional
1155			 *    sense, unless it is also flagged as optimistic.
1156			 * - Candidate Source Address (section 4)
1157			 *  - In any case, anycast addresses, multicast
1158			 *    addresses, and the unspecified address MUST
1159			 *    NOT be included in a candidate set.
1160			 */
1161			if ((score->ifa->flags & IFA_F_TENTATIVE) &&
1162			    (!(score->ifa->flags & IFA_F_OPTIMISTIC)))
1163				continue;
1164
1165			score->addr_type = __ipv6_addr_type(&score->ifa->addr);
1166
1167			if (unlikely(score->addr_type == IPV6_ADDR_ANY ||
1168				     score->addr_type & IPV6_ADDR_MULTICAST)) {
1169				LIMIT_NETDEBUG(KERN_DEBUG
1170					       "ADDRCONF: unspecified / multicast address "
1171					       "assigned as unicast address on %s",
1172					       dev->name);
1173				continue;
1174			}
1175
1176			score->rule = -1;
1177			bitmap_zero(score->scorebits, IPV6_SADDR_RULE_MAX);
1178
1179			for (i = 0; i < IPV6_SADDR_RULE_MAX; i++) {
1180				int minihiscore, miniscore;
1181
1182				minihiscore = ipv6_get_saddr_eval(net, hiscore, &dst, i);
1183				miniscore = ipv6_get_saddr_eval(net, score, &dst, i);
1184
1185				if (minihiscore > miniscore) {
1186					if (i == IPV6_SADDR_RULE_SCOPE &&
1187					    score->scopedist > 0) {
1188						/*
1189						 * special case:
1190						 * each remaining entry
1191						 * has too small (not enough)
1192						 * scope, because ifa entries
1193						 * are sorted by their scope
1194						 * values.
1195						 */
1196						goto try_nextdev;
1197					}
1198					break;
1199				} else if (minihiscore < miniscore) {
1200					if (hiscore->ifa)
1201						in6_ifa_put(hiscore->ifa);
1202
1203					in6_ifa_hold(score->ifa);
1204
1205					swap(hiscore, score);
1206
1207					/* restore our iterator */
1208					score->ifa = hiscore->ifa;
1209
1210					break;
1211				}
1212			}
1213		}
1214try_nextdev:
1215		read_unlock_bh(&idev->lock);
1216	}
1217	rcu_read_unlock();
1218
1219	if (!hiscore->ifa)
1220		return -EADDRNOTAVAIL;
1221
1222	*saddr = hiscore->ifa->addr;
1223	in6_ifa_put(hiscore->ifa);
1224	return 0;
1225}
1226EXPORT_SYMBOL(ipv6_dev_get_saddr);
1227
1228int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr,
1229		    unsigned char banned_flags)
1230{
1231	struct inet6_dev *idev;
1232	int err = -EADDRNOTAVAIL;
1233
1234	rcu_read_lock();
1235	idev = __in6_dev_get(dev);
1236	if (idev) {
1237		struct inet6_ifaddr *ifp;
1238
1239		read_lock_bh(&idev->lock);
1240		list_for_each_entry(ifp, &idev->addr_list, if_list) {
1241			if (ifp->scope == IFA_LINK &&
1242			    !(ifp->flags & banned_flags)) {
1243				*addr = ifp->addr;
1244				err = 0;
1245				break;
1246			}
1247		}
1248		read_unlock_bh(&idev->lock);
1249	}
1250	rcu_read_unlock();
1251	return err;
1252}
1253
1254static int ipv6_count_addresses(struct inet6_dev *idev)
1255{
1256	int cnt = 0;
1257	struct inet6_ifaddr *ifp;
1258
1259	read_lock_bh(&idev->lock);
1260	list_for_each_entry(ifp, &idev->addr_list, if_list)
1261		cnt++;
1262	read_unlock_bh(&idev->lock);
1263	return cnt;
1264}
1265
1266int ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
1267		  struct net_device *dev, int strict)
1268{
1269	struct inet6_ifaddr *ifp;
1270	struct hlist_node *node;
1271	unsigned int hash = ipv6_addr_hash(addr);
1272
1273	rcu_read_lock_bh();
1274	hlist_for_each_entry_rcu(ifp, node, &inet6_addr_lst[hash], addr_lst) {
1275		if (!net_eq(dev_net(ifp->idev->dev), net))
1276			continue;
1277		if (ipv6_addr_equal(&ifp->addr, addr) &&
1278		    !(ifp->flags&IFA_F_TENTATIVE) &&
1279		    (dev == NULL || ifp->idev->dev == dev ||
1280		     !(ifp->scope&(IFA_LINK|IFA_HOST) || strict))) {
1281			rcu_read_unlock_bh();
1282			return 1;
1283		}
1284	}
1285
1286	rcu_read_unlock_bh();
1287	return 0;
1288}
1289EXPORT_SYMBOL(ipv6_chk_addr);
1290
1291static bool ipv6_chk_same_addr(struct net *net, const struct in6_addr *addr,
1292			       struct net_device *dev)
1293{
1294	unsigned int hash = ipv6_addr_hash(addr);
1295	struct inet6_ifaddr *ifp;
1296	struct hlist_node *node;
1297
1298	hlist_for_each_entry(ifp, node, &inet6_addr_lst[hash], addr_lst) {
1299		if (!net_eq(dev_net(ifp->idev->dev), net))
1300			continue;
1301		if (ipv6_addr_equal(&ifp->addr, addr)) {
1302			if (dev == NULL || ifp->idev->dev == dev)
1303				return true;
1304		}
1305	}
1306	return false;
1307}
1308
1309int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev)
1310{
1311	struct inet6_dev *idev;
1312	struct inet6_ifaddr *ifa;
1313	int	onlink;
1314
1315	onlink = 0;
1316	rcu_read_lock();
1317	idev = __in6_dev_get(dev);
1318	if (idev) {
1319		read_lock_bh(&idev->lock);
1320		list_for_each_entry(ifa, &idev->addr_list, if_list) {
1321			onlink = ipv6_prefix_equal(addr, &ifa->addr,
1322						   ifa->prefix_len);
1323			if (onlink)
1324				break;
1325		}
1326		read_unlock_bh(&idev->lock);
1327	}
1328	rcu_read_unlock();
1329	return onlink;
1330}
 
1331EXPORT_SYMBOL(ipv6_chk_prefix);
1332
1333struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net, const struct in6_addr *addr,
1334				     struct net_device *dev, int strict)
1335{
1336	struct inet6_ifaddr *ifp, *result = NULL;
1337	unsigned int hash = ipv6_addr_hash(addr);
1338	struct hlist_node *node;
1339
1340	rcu_read_lock_bh();
1341	hlist_for_each_entry_rcu_bh(ifp, node, &inet6_addr_lst[hash], addr_lst) {
1342		if (!net_eq(dev_net(ifp->idev->dev), net))
1343			continue;
1344		if (ipv6_addr_equal(&ifp->addr, addr)) {
1345			if (dev == NULL || ifp->idev->dev == dev ||
1346			    !(ifp->scope&(IFA_LINK|IFA_HOST) || strict)) {
1347				result = ifp;
1348				in6_ifa_hold(ifp);
1349				break;
1350			}
1351		}
1352	}
1353	rcu_read_unlock_bh();
1354
1355	return result;
1356}
1357
1358/* Gets referenced address, destroys ifaddr */
1359
1360static void addrconf_dad_stop(struct inet6_ifaddr *ifp, int dad_failed)
1361{
1362	if (ifp->flags&IFA_F_PERMANENT) {
1363		spin_lock_bh(&ifp->lock);
1364		addrconf_del_timer(ifp);
1365		ifp->flags |= IFA_F_TENTATIVE;
1366		if (dad_failed)
1367			ifp->flags |= IFA_F_DADFAILED;
1368		spin_unlock_bh(&ifp->lock);
1369		if (dad_failed)
1370			ipv6_ifa_notify(0, ifp);
1371		in6_ifa_put(ifp);
1372#ifdef CONFIG_IPV6_PRIVACY
1373	} else if (ifp->flags&IFA_F_TEMPORARY) {
1374		struct inet6_ifaddr *ifpub;
1375		spin_lock_bh(&ifp->lock);
1376		ifpub = ifp->ifpub;
1377		if (ifpub) {
1378			in6_ifa_hold(ifpub);
1379			spin_unlock_bh(&ifp->lock);
1380			ipv6_create_tempaddr(ifpub, ifp);
1381			in6_ifa_put(ifpub);
1382		} else {
1383			spin_unlock_bh(&ifp->lock);
1384		}
1385		ipv6_del_addr(ifp);
1386#endif
1387	} else
1388		ipv6_del_addr(ifp);
1389}
1390
1391static int addrconf_dad_end(struct inet6_ifaddr *ifp)
1392{
1393	int err = -ENOENT;
1394
1395	spin_lock(&ifp->state_lock);
1396	if (ifp->state == INET6_IFADDR_STATE_DAD) {
1397		ifp->state = INET6_IFADDR_STATE_POSTDAD;
1398		err = 0;
1399	}
1400	spin_unlock(&ifp->state_lock);
1401
1402	return err;
1403}
1404
1405void addrconf_dad_failure(struct inet6_ifaddr *ifp)
1406{
1407	struct inet6_dev *idev = ifp->idev;
1408
1409	if (addrconf_dad_end(ifp)) {
1410		in6_ifa_put(ifp);
1411		return;
1412	}
1413
1414	net_info_ratelimited("%s: IPv6 duplicate address %pI6c detected!\n",
1415			     ifp->idev->dev->name, &ifp->addr);
 
1416
1417	if (idev->cnf.accept_dad > 1 && !idev->cnf.disable_ipv6) {
1418		struct in6_addr addr;
1419
1420		addr.s6_addr32[0] = htonl(0xfe800000);
1421		addr.s6_addr32[1] = 0;
1422
1423		if (!ipv6_generate_eui64(addr.s6_addr + 8, idev->dev) &&
1424		    ipv6_addr_equal(&ifp->addr, &addr)) {
1425			/* DAD failed for link-local based on MAC address */
1426			idev->cnf.disable_ipv6 = 1;
1427
1428			pr_info("%s: IPv6 being disabled!\n",
1429				ifp->idev->dev->name);
1430		}
1431	}
1432
1433	addrconf_dad_stop(ifp, 1);
1434}
1435
1436/* Join to solicited addr multicast group. */
1437
1438void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr)
1439{
1440	struct in6_addr maddr;
1441
1442	if (dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1443		return;
1444
1445	addrconf_addr_solict_mult(addr, &maddr);
1446	ipv6_dev_mc_inc(dev, &maddr);
1447}
1448
1449void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr)
1450{
1451	struct in6_addr maddr;
1452
1453	if (idev->dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1454		return;
1455
1456	addrconf_addr_solict_mult(addr, &maddr);
1457	__ipv6_dev_mc_dec(idev, &maddr);
1458}
1459
1460static void addrconf_join_anycast(struct inet6_ifaddr *ifp)
1461{
1462	struct in6_addr addr;
1463	if (ifp->prefix_len == 127) /* RFC 6164 */
1464		return;
1465	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1466	if (ipv6_addr_any(&addr))
1467		return;
1468	ipv6_dev_ac_inc(ifp->idev->dev, &addr);
1469}
1470
1471static void addrconf_leave_anycast(struct inet6_ifaddr *ifp)
1472{
1473	struct in6_addr addr;
1474	if (ifp->prefix_len == 127) /* RFC 6164 */
1475		return;
1476	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1477	if (ipv6_addr_any(&addr))
1478		return;
1479	__ipv6_dev_ac_dec(ifp->idev, &addr);
1480}
1481
1482static int addrconf_ifid_eui48(u8 *eui, struct net_device *dev)
1483{
1484	if (dev->addr_len != ETH_ALEN)
1485		return -1;
1486	memcpy(eui, dev->dev_addr, 3);
1487	memcpy(eui + 5, dev->dev_addr + 3, 3);
1488
1489	/*
1490	 * The zSeries OSA network cards can be shared among various
1491	 * OS instances, but the OSA cards have only one MAC address.
1492	 * This leads to duplicate address conflicts in conjunction
1493	 * with IPv6 if more than one instance uses the same card.
1494	 *
1495	 * The driver for these cards can deliver a unique 16-bit
1496	 * identifier for each instance sharing the same card.  It is
1497	 * placed instead of 0xFFFE in the interface identifier.  The
1498	 * "u" bit of the interface identifier is not inverted in this
1499	 * case.  Hence the resulting interface identifier has local
1500	 * scope according to RFC2373.
1501	 */
1502	if (dev->dev_id) {
1503		eui[3] = (dev->dev_id >> 8) & 0xFF;
1504		eui[4] = dev->dev_id & 0xFF;
1505	} else {
1506		eui[3] = 0xFF;
1507		eui[4] = 0xFE;
1508		eui[0] ^= 2;
1509	}
1510	return 0;
1511}
1512
1513static int addrconf_ifid_eui64(u8 *eui, struct net_device *dev)
1514{
1515	if (dev->addr_len != IEEE802154_ADDR_LEN)
1516		return -1;
1517	memcpy(eui, dev->dev_addr, 8);
1518	return 0;
1519}
1520
1521static int addrconf_ifid_arcnet(u8 *eui, struct net_device *dev)
1522{
1523	/* XXX: inherit EUI-64 from other interface -- yoshfuji */
1524	if (dev->addr_len != ARCNET_ALEN)
1525		return -1;
1526	memset(eui, 0, 7);
1527	eui[7] = *(u8 *)dev->dev_addr;
1528	return 0;
1529}
1530
1531static int addrconf_ifid_infiniband(u8 *eui, struct net_device *dev)
1532{
1533	if (dev->addr_len != INFINIBAND_ALEN)
1534		return -1;
1535	memcpy(eui, dev->dev_addr + 12, 8);
1536	eui[0] |= 2;
1537	return 0;
1538}
1539
1540static int __ipv6_isatap_ifid(u8 *eui, __be32 addr)
1541{
1542	if (addr == 0)
1543		return -1;
1544	eui[0] = (ipv4_is_zeronet(addr) || ipv4_is_private_10(addr) ||
1545		  ipv4_is_loopback(addr) || ipv4_is_linklocal_169(addr) ||
1546		  ipv4_is_private_172(addr) || ipv4_is_test_192(addr) ||
1547		  ipv4_is_anycast_6to4(addr) || ipv4_is_private_192(addr) ||
1548		  ipv4_is_test_198(addr) || ipv4_is_multicast(addr) ||
1549		  ipv4_is_lbcast(addr)) ? 0x00 : 0x02;
1550	eui[1] = 0;
1551	eui[2] = 0x5E;
1552	eui[3] = 0xFE;
1553	memcpy(eui + 4, &addr, 4);
1554	return 0;
1555}
1556
1557static int addrconf_ifid_sit(u8 *eui, struct net_device *dev)
1558{
1559	if (dev->priv_flags & IFF_ISATAP)
1560		return __ipv6_isatap_ifid(eui, *(__be32 *)dev->dev_addr);
1561	return -1;
1562}
1563
1564static int addrconf_ifid_gre(u8 *eui, struct net_device *dev)
1565{
1566	return __ipv6_isatap_ifid(eui, *(__be32 *)dev->dev_addr);
1567}
1568
1569static int ipv6_generate_eui64(u8 *eui, struct net_device *dev)
1570{
1571	switch (dev->type) {
1572	case ARPHRD_ETHER:
1573	case ARPHRD_FDDI:
 
1574		return addrconf_ifid_eui48(eui, dev);
1575	case ARPHRD_ARCNET:
1576		return addrconf_ifid_arcnet(eui, dev);
1577	case ARPHRD_INFINIBAND:
1578		return addrconf_ifid_infiniband(eui, dev);
1579	case ARPHRD_SIT:
1580		return addrconf_ifid_sit(eui, dev);
1581	case ARPHRD_IPGRE:
1582		return addrconf_ifid_gre(eui, dev);
1583	case ARPHRD_IEEE802154:
1584		return addrconf_ifid_eui64(eui, dev);
1585	}
1586	return -1;
1587}
1588
1589static int ipv6_inherit_eui64(u8 *eui, struct inet6_dev *idev)
1590{
1591	int err = -1;
1592	struct inet6_ifaddr *ifp;
1593
1594	read_lock_bh(&idev->lock);
1595	list_for_each_entry(ifp, &idev->addr_list, if_list) {
1596		if (ifp->scope == IFA_LINK && !(ifp->flags&IFA_F_TENTATIVE)) {
1597			memcpy(eui, ifp->addr.s6_addr+8, 8);
1598			err = 0;
1599			break;
1600		}
1601	}
1602	read_unlock_bh(&idev->lock);
1603	return err;
1604}
1605
1606#ifdef CONFIG_IPV6_PRIVACY
1607/* (re)generation of randomized interface identifier (RFC 3041 3.2, 3.5) */
1608static int __ipv6_regen_rndid(struct inet6_dev *idev)
1609{
1610regen:
1611	get_random_bytes(idev->rndid, sizeof(idev->rndid));
1612	idev->rndid[0] &= ~0x02;
1613
1614	/*
1615	 * <draft-ietf-ipngwg-temp-addresses-v2-00.txt>:
1616	 * check if generated address is not inappropriate
1617	 *
1618	 *  - Reserved subnet anycast (RFC 2526)
1619	 *	11111101 11....11 1xxxxxxx
1620	 *  - ISATAP (RFC4214) 6.1
1621	 *	00-00-5E-FE-xx-xx-xx-xx
1622	 *  - value 0
1623	 *  - XXX: already assigned to an address on the device
1624	 */
1625	if (idev->rndid[0] == 0xfd &&
1626	    (idev->rndid[1]&idev->rndid[2]&idev->rndid[3]&idev->rndid[4]&idev->rndid[5]&idev->rndid[6]) == 0xff &&
1627	    (idev->rndid[7]&0x80))
1628		goto regen;
1629	if ((idev->rndid[0]|idev->rndid[1]) == 0) {
1630		if (idev->rndid[2] == 0x5e && idev->rndid[3] == 0xfe)
1631			goto regen;
1632		if ((idev->rndid[2]|idev->rndid[3]|idev->rndid[4]|idev->rndid[5]|idev->rndid[6]|idev->rndid[7]) == 0x00)
1633			goto regen;
1634	}
1635
1636	return 0;
1637}
1638
1639static void ipv6_regen_rndid(unsigned long data)
1640{
1641	struct inet6_dev *idev = (struct inet6_dev *) data;
1642	unsigned long expires;
1643
1644	rcu_read_lock_bh();
1645	write_lock_bh(&idev->lock);
1646
1647	if (idev->dead)
1648		goto out;
1649
1650	if (__ipv6_regen_rndid(idev) < 0)
1651		goto out;
1652
1653	expires = jiffies +
1654		idev->cnf.temp_prefered_lft * HZ -
1655		idev->cnf.regen_max_retry * idev->cnf.dad_transmits * idev->nd_parms->retrans_time -
1656		idev->cnf.max_desync_factor * HZ;
1657	if (time_before(expires, jiffies)) {
1658		pr_warn("%s: too short regeneration interval; timer disabled for %s\n",
1659			__func__, idev->dev->name);
 
1660		goto out;
1661	}
1662
1663	if (!mod_timer(&idev->regen_timer, expires))
1664		in6_dev_hold(idev);
1665
1666out:
1667	write_unlock_bh(&idev->lock);
1668	rcu_read_unlock_bh();
1669	in6_dev_put(idev);
1670}
1671
1672static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr)
1673{
1674	int ret = 0;
1675
1676	if (tmpaddr && memcmp(idev->rndid, &tmpaddr->s6_addr[8], 8) == 0)
1677		ret = __ipv6_regen_rndid(idev);
1678	return ret;
1679}
1680#endif
1681
1682/*
1683 *	Add prefix route.
1684 */
1685
1686static void
1687addrconf_prefix_route(struct in6_addr *pfx, int plen, struct net_device *dev,
1688		      unsigned long expires, u32 flags)
1689{
1690	struct fib6_config cfg = {
1691		.fc_table = RT6_TABLE_PREFIX,
1692		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1693		.fc_ifindex = dev->ifindex,
1694		.fc_expires = expires,
1695		.fc_dst_len = plen,
1696		.fc_flags = RTF_UP | flags,
1697		.fc_nlinfo.nl_net = dev_net(dev),
1698		.fc_protocol = RTPROT_KERNEL,
1699	};
1700
1701	cfg.fc_dst = *pfx;
1702
1703	/* Prevent useless cloning on PtP SIT.
1704	   This thing is done here expecting that the whole
1705	   class of non-broadcast devices need not cloning.
1706	 */
1707#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1708	if (dev->type == ARPHRD_SIT && (dev->flags & IFF_POINTOPOINT))
1709		cfg.fc_flags |= RTF_NONEXTHOP;
1710#endif
1711
1712	ip6_route_add(&cfg);
1713}
1714
1715
1716static struct rt6_info *addrconf_get_prefix_route(const struct in6_addr *pfx,
1717						  int plen,
1718						  const struct net_device *dev,
1719						  u32 flags, u32 noflags)
1720{
1721	struct fib6_node *fn;
1722	struct rt6_info *rt = NULL;
1723	struct fib6_table *table;
1724
1725	table = fib6_get_table(dev_net(dev), RT6_TABLE_PREFIX);
1726	if (table == NULL)
1727		return NULL;
1728
1729	write_lock_bh(&table->tb6_lock);
1730	fn = fib6_locate(&table->tb6_root, pfx, plen, NULL, 0);
1731	if (!fn)
1732		goto out;
1733	for (rt = fn->leaf; rt; rt = rt->dst.rt6_next) {
1734		if (rt->dst.dev->ifindex != dev->ifindex)
1735			continue;
1736		if ((rt->rt6i_flags & flags) != flags)
1737			continue;
1738		if ((noflags != 0) && ((rt->rt6i_flags & flags) != 0))
1739			continue;
1740		dst_hold(&rt->dst);
1741		break;
1742	}
1743out:
1744	write_unlock_bh(&table->tb6_lock);
1745	return rt;
1746}
1747
1748
1749/* Create "default" multicast route to the interface */
1750
1751static void addrconf_add_mroute(struct net_device *dev)
1752{
1753	struct fib6_config cfg = {
1754		.fc_table = RT6_TABLE_LOCAL,
1755		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1756		.fc_ifindex = dev->ifindex,
1757		.fc_dst_len = 8,
1758		.fc_flags = RTF_UP,
1759		.fc_nlinfo.nl_net = dev_net(dev),
1760	};
1761
1762	ipv6_addr_set(&cfg.fc_dst, htonl(0xFF000000), 0, 0, 0);
1763
1764	ip6_route_add(&cfg);
1765}
1766
1767#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1768static void sit_route_add(struct net_device *dev)
1769{
1770	struct fib6_config cfg = {
1771		.fc_table = RT6_TABLE_MAIN,
1772		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1773		.fc_ifindex = dev->ifindex,
1774		.fc_dst_len = 96,
1775		.fc_flags = RTF_UP | RTF_NONEXTHOP,
1776		.fc_nlinfo.nl_net = dev_net(dev),
1777	};
1778
1779	/* prefix length - 96 bits "::d.d.d.d" */
1780	ip6_route_add(&cfg);
1781}
1782#endif
1783
1784static void addrconf_add_lroute(struct net_device *dev)
1785{
1786	struct in6_addr addr;
1787
1788	ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
1789	addrconf_prefix_route(&addr, 64, dev, 0, 0);
1790}
1791
1792static struct inet6_dev *addrconf_add_dev(struct net_device *dev)
1793{
1794	struct inet6_dev *idev;
1795
1796	ASSERT_RTNL();
1797
1798	idev = ipv6_find_idev(dev);
1799	if (!idev)
1800		return ERR_PTR(-ENOBUFS);
1801
1802	if (idev->cnf.disable_ipv6)
1803		return ERR_PTR(-EACCES);
1804
1805	/* Add default multicast route */
1806	if (!(dev->flags & IFF_LOOPBACK))
1807		addrconf_add_mroute(dev);
1808
1809	/* Add link local route */
1810	addrconf_add_lroute(dev);
1811	return idev;
1812}
1813
1814void addrconf_prefix_rcv(struct net_device *dev, u8 *opt, int len, bool sllao)
1815{
1816	struct prefix_info *pinfo;
1817	__u32 valid_lft;
1818	__u32 prefered_lft;
1819	int addr_type;
1820	struct inet6_dev *in6_dev;
1821	struct net *net = dev_net(dev);
1822
1823	pinfo = (struct prefix_info *) opt;
1824
1825	if (len < sizeof(struct prefix_info)) {
1826		ADBG(("addrconf: prefix option too short\n"));
1827		return;
1828	}
1829
1830	/*
1831	 *	Validation checks ([ADDRCONF], page 19)
1832	 */
1833
1834	addr_type = ipv6_addr_type(&pinfo->prefix);
1835
1836	if (addr_type & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LINKLOCAL))
1837		return;
1838
1839	valid_lft = ntohl(pinfo->valid);
1840	prefered_lft = ntohl(pinfo->prefered);
1841
1842	if (prefered_lft > valid_lft) {
1843		net_warn_ratelimited("addrconf: prefix option has invalid lifetime\n");
 
1844		return;
1845	}
1846
1847	in6_dev = in6_dev_get(dev);
1848
1849	if (in6_dev == NULL) {
1850		net_dbg_ratelimited("addrconf: device %s not configured\n",
1851				    dev->name);
1852		return;
1853	}
1854
1855	/*
1856	 *	Two things going on here:
1857	 *	1) Add routes for on-link prefixes
1858	 *	2) Configure prefixes with the auto flag set
1859	 */
1860
1861	if (pinfo->onlink) {
1862		struct rt6_info *rt;
1863		unsigned long rt_expires;
1864
1865		/* Avoid arithmetic overflow. Really, we could
1866		 * save rt_expires in seconds, likely valid_lft,
1867		 * but it would require division in fib gc, that it
1868		 * not good.
1869		 */
1870		if (HZ > USER_HZ)
1871			rt_expires = addrconf_timeout_fixup(valid_lft, HZ);
1872		else
1873			rt_expires = addrconf_timeout_fixup(valid_lft, USER_HZ);
1874
1875		if (addrconf_finite_timeout(rt_expires))
1876			rt_expires *= HZ;
1877
1878		rt = addrconf_get_prefix_route(&pinfo->prefix,
1879					       pinfo->prefix_len,
1880					       dev,
1881					       RTF_ADDRCONF | RTF_PREFIX_RT,
1882					       RTF_GATEWAY | RTF_DEFAULT);
1883
1884		if (rt) {
1885			/* Autoconf prefix route */
1886			if (valid_lft == 0) {
1887				ip6_del_rt(rt);
1888				rt = NULL;
1889			} else if (addrconf_finite_timeout(rt_expires)) {
1890				/* not infinity */
1891				rt6_set_expires(rt, jiffies + rt_expires);
 
1892			} else {
1893				rt6_clean_expires(rt);
 
1894			}
1895		} else if (valid_lft) {
1896			clock_t expires = 0;
1897			int flags = RTF_ADDRCONF | RTF_PREFIX_RT;
1898			if (addrconf_finite_timeout(rt_expires)) {
1899				/* not infinity */
1900				flags |= RTF_EXPIRES;
1901				expires = jiffies_to_clock_t(rt_expires);
1902			}
1903			addrconf_prefix_route(&pinfo->prefix, pinfo->prefix_len,
1904					      dev, expires, flags);
1905		}
1906		if (rt)
1907			dst_release(&rt->dst);
1908	}
1909
1910	/* Try to figure out our local address for this prefix */
1911
1912	if (pinfo->autoconf && in6_dev->cnf.autoconf) {
1913		struct inet6_ifaddr *ifp;
1914		struct in6_addr addr;
1915		int create = 0, update_lft = 0;
1916
1917		if (pinfo->prefix_len == 64) {
1918			memcpy(&addr, &pinfo->prefix, 8);
1919			if (ipv6_generate_eui64(addr.s6_addr + 8, dev) &&
1920			    ipv6_inherit_eui64(addr.s6_addr + 8, in6_dev)) {
1921				in6_dev_put(in6_dev);
1922				return;
1923			}
1924			goto ok;
1925		}
1926		net_dbg_ratelimited("IPv6 addrconf: prefix with wrong length %d\n",
1927				    pinfo->prefix_len);
 
1928		in6_dev_put(in6_dev);
1929		return;
1930
1931ok:
1932
1933		ifp = ipv6_get_ifaddr(net, &addr, dev, 1);
1934
1935		if (ifp == NULL && valid_lft) {
1936			int max_addresses = in6_dev->cnf.max_addresses;
1937			u32 addr_flags = 0;
1938
1939#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
1940			if (in6_dev->cnf.optimistic_dad &&
1941			    !net->ipv6.devconf_all->forwarding && sllao)
1942				addr_flags = IFA_F_OPTIMISTIC;
1943#endif
1944
1945			/* Do not allow to create too much of autoconfigured
1946			 * addresses; this would be too easy way to crash kernel.
1947			 */
1948			if (!max_addresses ||
1949			    ipv6_count_addresses(in6_dev) < max_addresses)
1950				ifp = ipv6_add_addr(in6_dev, &addr, pinfo->prefix_len,
1951						    addr_type&IPV6_ADDR_SCOPE_MASK,
1952						    addr_flags);
1953
1954			if (!ifp || IS_ERR(ifp)) {
1955				in6_dev_put(in6_dev);
1956				return;
1957			}
1958
1959			update_lft = create = 1;
1960			ifp->cstamp = jiffies;
1961			addrconf_dad_start(ifp);
1962		}
1963
1964		if (ifp) {
1965			int flags;
1966			unsigned long now;
1967#ifdef CONFIG_IPV6_PRIVACY
1968			struct inet6_ifaddr *ift;
1969#endif
1970			u32 stored_lft;
1971
1972			/* update lifetime (RFC2462 5.5.3 e) */
1973			spin_lock(&ifp->lock);
1974			now = jiffies;
1975			if (ifp->valid_lft > (now - ifp->tstamp) / HZ)
1976				stored_lft = ifp->valid_lft - (now - ifp->tstamp) / HZ;
1977			else
1978				stored_lft = 0;
1979			if (!update_lft && stored_lft) {
1980				if (valid_lft > MIN_VALID_LIFETIME ||
1981				    valid_lft > stored_lft)
1982					update_lft = 1;
1983				else if (stored_lft <= MIN_VALID_LIFETIME) {
1984					/* valid_lft <= stored_lft is always true */
1985					/*
1986					 * RFC 4862 Section 5.5.3e:
1987					 * "Note that the preferred lifetime of
1988					 *  the corresponding address is always
1989					 *  reset to the Preferred Lifetime in
1990					 *  the received Prefix Information
1991					 *  option, regardless of whether the
1992					 *  valid lifetime is also reset or
1993					 *  ignored."
1994					 *
1995					 *  So if the preferred lifetime in
1996					 *  this advertisement is different
1997					 *  than what we have stored, but the
1998					 *  valid lifetime is invalid, just
1999					 *  reset prefered_lft.
2000					 *
2001					 *  We must set the valid lifetime
2002					 *  to the stored lifetime since we'll
2003					 *  be updating the timestamp below,
2004					 *  else we'll set it back to the
2005					 *  minimum.
2006					 */
2007					if (prefered_lft != ifp->prefered_lft) {
2008						valid_lft = stored_lft;
2009						update_lft = 1;
2010					}
2011				} else {
2012					valid_lft = MIN_VALID_LIFETIME;
2013					if (valid_lft < prefered_lft)
2014						prefered_lft = valid_lft;
2015					update_lft = 1;
2016				}
2017			}
2018
2019			if (update_lft) {
2020				ifp->valid_lft = valid_lft;
2021				ifp->prefered_lft = prefered_lft;
2022				ifp->tstamp = now;
2023				flags = ifp->flags;
2024				ifp->flags &= ~IFA_F_DEPRECATED;
2025				spin_unlock(&ifp->lock);
2026
2027				if (!(flags&IFA_F_TENTATIVE))
2028					ipv6_ifa_notify(0, ifp);
2029			} else
2030				spin_unlock(&ifp->lock);
2031
2032#ifdef CONFIG_IPV6_PRIVACY
2033			read_lock_bh(&in6_dev->lock);
2034			/* update all temporary addresses in the list */
2035			list_for_each_entry(ift, &in6_dev->tempaddr_list,
2036					    tmp_list) {
2037				int age, max_valid, max_prefered;
2038
2039				if (ifp != ift->ifpub)
2040					continue;
2041
2042				/*
2043				 * RFC 4941 section 3.3:
2044				 * If a received option will extend the lifetime
2045				 * of a public address, the lifetimes of
2046				 * temporary addresses should be extended,
2047				 * subject to the overall constraint that no
2048				 * temporary addresses should ever remain
2049				 * "valid" or "preferred" for a time longer than
2050				 * (TEMP_VALID_LIFETIME) or
2051				 * (TEMP_PREFERRED_LIFETIME - DESYNC_FACTOR),
2052				 * respectively.
2053				 */
2054				age = (now - ift->cstamp) / HZ;
2055				max_valid = in6_dev->cnf.temp_valid_lft - age;
2056				if (max_valid < 0)
2057					max_valid = 0;
2058
2059				max_prefered = in6_dev->cnf.temp_prefered_lft -
2060					       in6_dev->cnf.max_desync_factor -
2061					       age;
2062				if (max_prefered < 0)
2063					max_prefered = 0;
2064
2065				if (valid_lft > max_valid)
2066					valid_lft = max_valid;
2067
2068				if (prefered_lft > max_prefered)
2069					prefered_lft = max_prefered;
2070
2071				spin_lock(&ift->lock);
2072				flags = ift->flags;
2073				ift->valid_lft = valid_lft;
2074				ift->prefered_lft = prefered_lft;
2075				ift->tstamp = now;
2076				if (prefered_lft > 0)
2077					ift->flags &= ~IFA_F_DEPRECATED;
2078
2079				spin_unlock(&ift->lock);
2080				if (!(flags&IFA_F_TENTATIVE))
2081					ipv6_ifa_notify(0, ift);
2082			}
2083
2084			if ((create || list_empty(&in6_dev->tempaddr_list)) && in6_dev->cnf.use_tempaddr > 0) {
2085				/*
2086				 * When a new public address is created as
2087				 * described in [ADDRCONF], also create a new
2088				 * temporary address. Also create a temporary
2089				 * address if it's enabled but no temporary
2090				 * address currently exists.
2091				 */
2092				read_unlock_bh(&in6_dev->lock);
2093				ipv6_create_tempaddr(ifp, NULL);
2094			} else {
2095				read_unlock_bh(&in6_dev->lock);
2096			}
2097#endif
2098			in6_ifa_put(ifp);
2099			addrconf_verify(0);
2100		}
2101	}
2102	inet6_prefix_notify(RTM_NEWPREFIX, in6_dev, pinfo);
2103	in6_dev_put(in6_dev);
2104}
2105
2106/*
2107 *	Set destination address.
2108 *	Special case for SIT interfaces where we create a new "virtual"
2109 *	device.
2110 */
2111int addrconf_set_dstaddr(struct net *net, void __user *arg)
2112{
2113	struct in6_ifreq ireq;
2114	struct net_device *dev;
2115	int err = -EINVAL;
2116
2117	rtnl_lock();
2118
2119	err = -EFAULT;
2120	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2121		goto err_exit;
2122
2123	dev = __dev_get_by_index(net, ireq.ifr6_ifindex);
2124
2125	err = -ENODEV;
2126	if (dev == NULL)
2127		goto err_exit;
2128
2129#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2130	if (dev->type == ARPHRD_SIT) {
2131		const struct net_device_ops *ops = dev->netdev_ops;
2132		struct ifreq ifr;
2133		struct ip_tunnel_parm p;
2134
2135		err = -EADDRNOTAVAIL;
2136		if (!(ipv6_addr_type(&ireq.ifr6_addr) & IPV6_ADDR_COMPATv4))
2137			goto err_exit;
2138
2139		memset(&p, 0, sizeof(p));
2140		p.iph.daddr = ireq.ifr6_addr.s6_addr32[3];
2141		p.iph.saddr = 0;
2142		p.iph.version = 4;
2143		p.iph.ihl = 5;
2144		p.iph.protocol = IPPROTO_IPV6;
2145		p.iph.ttl = 64;
2146		ifr.ifr_ifru.ifru_data = (__force void __user *)&p;
2147
2148		if (ops->ndo_do_ioctl) {
2149			mm_segment_t oldfs = get_fs();
2150
2151			set_fs(KERNEL_DS);
2152			err = ops->ndo_do_ioctl(dev, &ifr, SIOCADDTUNNEL);
2153			set_fs(oldfs);
2154		} else
2155			err = -EOPNOTSUPP;
2156
2157		if (err == 0) {
2158			err = -ENOBUFS;
2159			dev = __dev_get_by_name(net, p.name);
2160			if (!dev)
2161				goto err_exit;
2162			err = dev_open(dev);
2163		}
2164	}
2165#endif
2166
2167err_exit:
2168	rtnl_unlock();
2169	return err;
2170}
2171
2172/*
2173 *	Manual configuration of address on an interface
2174 */
2175static int inet6_addr_add(struct net *net, int ifindex, const struct in6_addr *pfx,
2176			  unsigned int plen, __u8 ifa_flags, __u32 prefered_lft,
2177			  __u32 valid_lft)
2178{
2179	struct inet6_ifaddr *ifp;
2180	struct inet6_dev *idev;
2181	struct net_device *dev;
2182	int scope;
2183	u32 flags;
2184	clock_t expires;
2185	unsigned long timeout;
2186
2187	ASSERT_RTNL();
2188
2189	if (plen > 128)
2190		return -EINVAL;
2191
2192	/* check the lifetime */
2193	if (!valid_lft || prefered_lft > valid_lft)
2194		return -EINVAL;
2195
2196	dev = __dev_get_by_index(net, ifindex);
2197	if (!dev)
2198		return -ENODEV;
2199
2200	idev = addrconf_add_dev(dev);
2201	if (IS_ERR(idev))
2202		return PTR_ERR(idev);
2203
2204	scope = ipv6_addr_scope(pfx);
2205
2206	timeout = addrconf_timeout_fixup(valid_lft, HZ);
2207	if (addrconf_finite_timeout(timeout)) {
2208		expires = jiffies_to_clock_t(timeout * HZ);
2209		valid_lft = timeout;
2210		flags = RTF_EXPIRES;
2211	} else {
2212		expires = 0;
2213		flags = 0;
2214		ifa_flags |= IFA_F_PERMANENT;
2215	}
2216
2217	timeout = addrconf_timeout_fixup(prefered_lft, HZ);
2218	if (addrconf_finite_timeout(timeout)) {
2219		if (timeout == 0)
2220			ifa_flags |= IFA_F_DEPRECATED;
2221		prefered_lft = timeout;
2222	}
2223
2224	ifp = ipv6_add_addr(idev, pfx, plen, scope, ifa_flags);
2225
2226	if (!IS_ERR(ifp)) {
2227		spin_lock_bh(&ifp->lock);
2228		ifp->valid_lft = valid_lft;
2229		ifp->prefered_lft = prefered_lft;
2230		ifp->tstamp = jiffies;
2231		spin_unlock_bh(&ifp->lock);
2232
2233		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, dev,
2234				      expires, flags);
2235		/*
2236		 * Note that section 3.1 of RFC 4429 indicates
2237		 * that the Optimistic flag should not be set for
2238		 * manually configured addresses
2239		 */
2240		addrconf_dad_start(ifp);
2241		in6_ifa_put(ifp);
2242		addrconf_verify(0);
2243		return 0;
2244	}
2245
2246	return PTR_ERR(ifp);
2247}
2248
2249static int inet6_addr_del(struct net *net, int ifindex, const struct in6_addr *pfx,
2250			  unsigned int plen)
2251{
2252	struct inet6_ifaddr *ifp;
2253	struct inet6_dev *idev;
2254	struct net_device *dev;
2255
2256	if (plen > 128)
2257		return -EINVAL;
2258
2259	dev = __dev_get_by_index(net, ifindex);
2260	if (!dev)
2261		return -ENODEV;
2262
2263	if ((idev = __in6_dev_get(dev)) == NULL)
2264		return -ENXIO;
2265
2266	read_lock_bh(&idev->lock);
2267	list_for_each_entry(ifp, &idev->addr_list, if_list) {
2268		if (ifp->prefix_len == plen &&
2269		    ipv6_addr_equal(pfx, &ifp->addr)) {
2270			in6_ifa_hold(ifp);
2271			read_unlock_bh(&idev->lock);
2272
2273			ipv6_del_addr(ifp);
2274
2275			/* If the last address is deleted administratively,
2276			   disable IPv6 on this interface.
2277			 */
2278			if (list_empty(&idev->addr_list))
2279				addrconf_ifdown(idev->dev, 1);
2280			return 0;
2281		}
2282	}
2283	read_unlock_bh(&idev->lock);
2284	return -EADDRNOTAVAIL;
2285}
2286
2287
2288int addrconf_add_ifaddr(struct net *net, void __user *arg)
2289{
2290	struct in6_ifreq ireq;
2291	int err;
2292
2293	if (!capable(CAP_NET_ADMIN))
2294		return -EPERM;
2295
2296	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2297		return -EFAULT;
2298
2299	rtnl_lock();
2300	err = inet6_addr_add(net, ireq.ifr6_ifindex, &ireq.ifr6_addr,
2301			     ireq.ifr6_prefixlen, IFA_F_PERMANENT,
2302			     INFINITY_LIFE_TIME, INFINITY_LIFE_TIME);
2303	rtnl_unlock();
2304	return err;
2305}
2306
2307int addrconf_del_ifaddr(struct net *net, void __user *arg)
2308{
2309	struct in6_ifreq ireq;
2310	int err;
2311
2312	if (!capable(CAP_NET_ADMIN))
2313		return -EPERM;
2314
2315	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2316		return -EFAULT;
2317
2318	rtnl_lock();
2319	err = inet6_addr_del(net, ireq.ifr6_ifindex, &ireq.ifr6_addr,
2320			     ireq.ifr6_prefixlen);
2321	rtnl_unlock();
2322	return err;
2323}
2324
2325static void add_addr(struct inet6_dev *idev, const struct in6_addr *addr,
2326		     int plen, int scope)
2327{
2328	struct inet6_ifaddr *ifp;
2329
2330	ifp = ipv6_add_addr(idev, addr, plen, scope, IFA_F_PERMANENT);
2331	if (!IS_ERR(ifp)) {
2332		spin_lock_bh(&ifp->lock);
2333		ifp->flags &= ~IFA_F_TENTATIVE;
2334		spin_unlock_bh(&ifp->lock);
2335		ipv6_ifa_notify(RTM_NEWADDR, ifp);
2336		in6_ifa_put(ifp);
2337	}
2338}
2339
2340#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2341static void sit_add_v4_addrs(struct inet6_dev *idev)
2342{
2343	struct in6_addr addr;
2344	struct net_device *dev;
2345	struct net *net = dev_net(idev->dev);
2346	int scope;
2347
2348	ASSERT_RTNL();
2349
2350	memset(&addr, 0, sizeof(struct in6_addr));
2351	memcpy(&addr.s6_addr32[3], idev->dev->dev_addr, 4);
2352
2353	if (idev->dev->flags&IFF_POINTOPOINT) {
2354		addr.s6_addr32[0] = htonl(0xfe800000);
2355		scope = IFA_LINK;
2356	} else {
2357		scope = IPV6_ADDR_COMPATv4;
2358	}
2359
2360	if (addr.s6_addr32[3]) {
2361		add_addr(idev, &addr, 128, scope);
2362		return;
2363	}
2364
2365	for_each_netdev(net, dev) {
2366		struct in_device *in_dev = __in_dev_get_rtnl(dev);
2367		if (in_dev && (dev->flags & IFF_UP)) {
2368			struct in_ifaddr *ifa;
2369
2370			int flag = scope;
2371
2372			for (ifa = in_dev->ifa_list; ifa; ifa = ifa->ifa_next) {
2373				int plen;
2374
2375				addr.s6_addr32[3] = ifa->ifa_local;
2376
2377				if (ifa->ifa_scope == RT_SCOPE_LINK)
2378					continue;
2379				if (ifa->ifa_scope >= RT_SCOPE_HOST) {
2380					if (idev->dev->flags&IFF_POINTOPOINT)
2381						continue;
2382					flag |= IFA_HOST;
2383				}
2384				if (idev->dev->flags&IFF_POINTOPOINT)
2385					plen = 64;
2386				else
2387					plen = 96;
2388
2389				add_addr(idev, &addr, plen, flag);
2390			}
2391		}
2392	}
2393}
2394#endif
2395
2396static void init_loopback(struct net_device *dev)
2397{
2398	struct inet6_dev  *idev;
2399
2400	/* ::1 */
2401
2402	ASSERT_RTNL();
2403
2404	if ((idev = ipv6_find_idev(dev)) == NULL) {
2405		pr_debug("%s: add_dev failed\n", __func__);
2406		return;
2407	}
2408
2409	add_addr(idev, &in6addr_loopback, 128, IFA_HOST);
2410}
2411
2412static void addrconf_add_linklocal(struct inet6_dev *idev, const struct in6_addr *addr)
2413{
2414	struct inet6_ifaddr *ifp;
2415	u32 addr_flags = IFA_F_PERMANENT;
2416
2417#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
2418	if (idev->cnf.optimistic_dad &&
2419	    !dev_net(idev->dev)->ipv6.devconf_all->forwarding)
2420		addr_flags |= IFA_F_OPTIMISTIC;
2421#endif
2422
2423
2424	ifp = ipv6_add_addr(idev, addr, 64, IFA_LINK, addr_flags);
2425	if (!IS_ERR(ifp)) {
2426		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, idev->dev, 0, 0);
2427		addrconf_dad_start(ifp);
2428		in6_ifa_put(ifp);
2429	}
2430}
2431
2432static void addrconf_dev_config(struct net_device *dev)
2433{
2434	struct in6_addr addr;
2435	struct inet6_dev *idev;
2436
2437	ASSERT_RTNL();
2438
2439	if ((dev->type != ARPHRD_ETHER) &&
2440	    (dev->type != ARPHRD_FDDI) &&
 
2441	    (dev->type != ARPHRD_ARCNET) &&
2442	    (dev->type != ARPHRD_INFINIBAND) &&
2443	    (dev->type != ARPHRD_IEEE802154)) {
2444		/* Alas, we support only Ethernet autoconfiguration. */
2445		return;
2446	}
2447
2448	idev = addrconf_add_dev(dev);
2449	if (IS_ERR(idev))
2450		return;
2451
2452	memset(&addr, 0, sizeof(struct in6_addr));
2453	addr.s6_addr32[0] = htonl(0xFE800000);
2454
2455	if (ipv6_generate_eui64(addr.s6_addr + 8, dev) == 0)
2456		addrconf_add_linklocal(idev, &addr);
2457}
2458
2459#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2460static void addrconf_sit_config(struct net_device *dev)
2461{
2462	struct inet6_dev *idev;
2463
2464	ASSERT_RTNL();
2465
2466	/*
2467	 * Configure the tunnel with one of our IPv4
2468	 * addresses... we should configure all of
2469	 * our v4 addrs in the tunnel
2470	 */
2471
2472	if ((idev = ipv6_find_idev(dev)) == NULL) {
2473		pr_debug("%s: add_dev failed\n", __func__);
2474		return;
2475	}
2476
2477	if (dev->priv_flags & IFF_ISATAP) {
2478		struct in6_addr addr;
2479
2480		ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
2481		addrconf_prefix_route(&addr, 64, dev, 0, 0);
2482		if (!ipv6_generate_eui64(addr.s6_addr + 8, dev))
2483			addrconf_add_linklocal(idev, &addr);
2484		return;
2485	}
2486
2487	sit_add_v4_addrs(idev);
2488
2489	if (dev->flags&IFF_POINTOPOINT) {
2490		addrconf_add_mroute(dev);
2491		addrconf_add_lroute(dev);
2492	} else
2493		sit_route_add(dev);
2494}
2495#endif
2496
2497#if defined(CONFIG_NET_IPGRE) || defined(CONFIG_NET_IPGRE_MODULE)
2498static void addrconf_gre_config(struct net_device *dev)
2499{
2500	struct inet6_dev *idev;
2501	struct in6_addr addr;
2502
2503	pr_info("%s(%s)\n", __func__, dev->name);
2504
2505	ASSERT_RTNL();
2506
2507	if ((idev = ipv6_find_idev(dev)) == NULL) {
2508		pr_debug("%s: add_dev failed\n", __func__);
2509		return;
2510	}
2511
2512	ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
2513	addrconf_prefix_route(&addr, 64, dev, 0, 0);
2514
2515	if (!ipv6_generate_eui64(addr.s6_addr + 8, dev))
2516		addrconf_add_linklocal(idev, &addr);
2517}
2518#endif
2519
2520static inline int
2521ipv6_inherit_linklocal(struct inet6_dev *idev, struct net_device *link_dev)
2522{
2523	struct in6_addr lladdr;
2524
2525	if (!ipv6_get_lladdr(link_dev, &lladdr, IFA_F_TENTATIVE)) {
2526		addrconf_add_linklocal(idev, &lladdr);
2527		return 0;
2528	}
2529	return -1;
2530}
2531
2532static void ip6_tnl_add_linklocal(struct inet6_dev *idev)
2533{
2534	struct net_device *link_dev;
2535	struct net *net = dev_net(idev->dev);
2536
2537	/* first try to inherit the link-local address from the link device */
2538	if (idev->dev->iflink &&
2539	    (link_dev = __dev_get_by_index(net, idev->dev->iflink))) {
2540		if (!ipv6_inherit_linklocal(idev, link_dev))
2541			return;
2542	}
2543	/* then try to inherit it from any device */
2544	for_each_netdev(net, link_dev) {
2545		if (!ipv6_inherit_linklocal(idev, link_dev))
2546			return;
2547	}
2548	pr_debug("init ip6-ip6: add_linklocal failed\n");
2549}
2550
2551/*
2552 * Autoconfigure tunnel with a link-local address so routing protocols,
2553 * DHCPv6, MLD etc. can be run over the virtual link
2554 */
2555
2556static void addrconf_ip6_tnl_config(struct net_device *dev)
2557{
2558	struct inet6_dev *idev;
2559
2560	ASSERT_RTNL();
2561
2562	idev = addrconf_add_dev(dev);
2563	if (IS_ERR(idev)) {
2564		pr_debug("init ip6-ip6: add_dev failed\n");
2565		return;
2566	}
2567	ip6_tnl_add_linklocal(idev);
2568}
2569
2570static int addrconf_notify(struct notifier_block *this, unsigned long event,
2571			   void *data)
2572{
2573	struct net_device *dev = (struct net_device *) data;
2574	struct inet6_dev *idev = __in6_dev_get(dev);
2575	int run_pending = 0;
2576	int err;
2577
2578	switch (event) {
2579	case NETDEV_REGISTER:
2580		if (!idev && dev->mtu >= IPV6_MIN_MTU) {
2581			idev = ipv6_add_dev(dev);
2582			if (!idev)
2583				return notifier_from_errno(-ENOMEM);
2584		}
2585		break;
2586
2587	case NETDEV_UP:
2588	case NETDEV_CHANGE:
2589		if (dev->flags & IFF_SLAVE)
2590			break;
2591
2592		if (event == NETDEV_UP) {
2593			if (!addrconf_qdisc_ok(dev)) {
2594				/* device is not ready yet. */
2595				pr_info("ADDRCONF(NETDEV_UP): %s: link is not ready\n",
 
 
2596					dev->name);
2597				break;
2598			}
2599
2600			if (!idev && dev->mtu >= IPV6_MIN_MTU)
2601				idev = ipv6_add_dev(dev);
2602
2603			if (idev) {
2604				idev->if_flags |= IF_READY;
2605				run_pending = 1;
2606			}
2607		} else {
2608			if (!addrconf_qdisc_ok(dev)) {
2609				/* device is still not ready. */
2610				break;
2611			}
2612
2613			if (idev) {
2614				if (idev->if_flags & IF_READY)
2615					/* device is already configured. */
2616					break;
2617				idev->if_flags |= IF_READY;
2618			}
2619
2620			pr_info("ADDRCONF(NETDEV_CHANGE): %s: link becomes ready\n",
2621				dev->name);
 
 
2622
2623			run_pending = 1;
2624		}
2625
2626		switch (dev->type) {
2627#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2628		case ARPHRD_SIT:
2629			addrconf_sit_config(dev);
2630			break;
2631#endif
2632#if defined(CONFIG_NET_IPGRE) || defined(CONFIG_NET_IPGRE_MODULE)
2633		case ARPHRD_IPGRE:
2634			addrconf_gre_config(dev);
2635			break;
2636#endif
2637		case ARPHRD_TUNNEL6:
2638			addrconf_ip6_tnl_config(dev);
2639			break;
2640		case ARPHRD_LOOPBACK:
2641			init_loopback(dev);
2642			break;
2643
2644		default:
2645			addrconf_dev_config(dev);
2646			break;
2647		}
2648
2649		if (idev) {
2650			if (run_pending)
2651				addrconf_dad_run(idev);
2652
2653			/*
2654			 * If the MTU changed during the interface down,
2655			 * when the interface up, the changed MTU must be
2656			 * reflected in the idev as well as routers.
2657			 */
2658			if (idev->cnf.mtu6 != dev->mtu &&
2659			    dev->mtu >= IPV6_MIN_MTU) {
2660				rt6_mtu_change(dev, dev->mtu);
2661				idev->cnf.mtu6 = dev->mtu;
2662			}
2663			idev->tstamp = jiffies;
2664			inet6_ifinfo_notify(RTM_NEWLINK, idev);
2665
2666			/*
2667			 * If the changed mtu during down is lower than
2668			 * IPV6_MIN_MTU stop IPv6 on this interface.
2669			 */
2670			if (dev->mtu < IPV6_MIN_MTU)
2671				addrconf_ifdown(dev, 1);
2672		}
2673		break;
2674
2675	case NETDEV_CHANGEMTU:
2676		if (idev && dev->mtu >= IPV6_MIN_MTU) {
2677			rt6_mtu_change(dev, dev->mtu);
2678			idev->cnf.mtu6 = dev->mtu;
2679			break;
2680		}
2681
2682		if (!idev && dev->mtu >= IPV6_MIN_MTU) {
2683			idev = ipv6_add_dev(dev);
2684			if (idev)
2685				break;
2686		}
2687
2688		/*
2689		 * MTU falled under IPV6_MIN_MTU.
2690		 * Stop IPv6 on this interface.
2691		 */
2692
2693	case NETDEV_DOWN:
2694	case NETDEV_UNREGISTER:
2695		/*
2696		 *	Remove all addresses from this interface.
2697		 */
2698		addrconf_ifdown(dev, event != NETDEV_DOWN);
2699		break;
2700
2701	case NETDEV_CHANGENAME:
2702		if (idev) {
2703			snmp6_unregister_dev(idev);
2704			addrconf_sysctl_unregister(idev);
2705			addrconf_sysctl_register(idev);
2706			err = snmp6_register_dev(idev);
2707			if (err)
2708				return notifier_from_errno(err);
2709		}
2710		break;
2711
2712	case NETDEV_PRE_TYPE_CHANGE:
2713	case NETDEV_POST_TYPE_CHANGE:
2714		addrconf_type_change(dev, event);
2715		break;
2716	}
2717
2718	return NOTIFY_OK;
2719}
2720
2721/*
2722 *	addrconf module should be notified of a device going up
2723 */
2724static struct notifier_block ipv6_dev_notf = {
2725	.notifier_call = addrconf_notify,
2726};
2727
2728static void addrconf_type_change(struct net_device *dev, unsigned long event)
2729{
2730	struct inet6_dev *idev;
2731	ASSERT_RTNL();
2732
2733	idev = __in6_dev_get(dev);
2734
2735	if (event == NETDEV_POST_TYPE_CHANGE)
2736		ipv6_mc_remap(idev);
2737	else if (event == NETDEV_PRE_TYPE_CHANGE)
2738		ipv6_mc_unmap(idev);
2739}
2740
2741static int addrconf_ifdown(struct net_device *dev, int how)
2742{
2743	struct net *net = dev_net(dev);
2744	struct inet6_dev *idev;
2745	struct inet6_ifaddr *ifa;
2746	int state, i;
2747
2748	ASSERT_RTNL();
2749
2750	rt6_ifdown(net, dev);
2751	neigh_ifdown(&nd_tbl, dev);
2752
2753	idev = __in6_dev_get(dev);
2754	if (idev == NULL)
2755		return -ENODEV;
2756
2757	/*
2758	 * Step 1: remove reference to ipv6 device from parent device.
2759	 *	   Do not dev_put!
2760	 */
2761	if (how) {
2762		idev->dead = 1;
2763
2764		/* protected by rtnl_lock */
2765		RCU_INIT_POINTER(dev->ip6_ptr, NULL);
2766
2767		/* Step 1.5: remove snmp6 entry */
2768		snmp6_unregister_dev(idev);
2769
2770	}
2771
2772	/* Step 2: clear hash table */
2773	for (i = 0; i < IN6_ADDR_HSIZE; i++) {
2774		struct hlist_head *h = &inet6_addr_lst[i];
2775		struct hlist_node *n;
2776
2777		spin_lock_bh(&addrconf_hash_lock);
2778	restart:
2779		hlist_for_each_entry_rcu(ifa, n, h, addr_lst) {
2780			if (ifa->idev == idev) {
2781				hlist_del_init_rcu(&ifa->addr_lst);
2782				addrconf_del_timer(ifa);
2783				goto restart;
2784			}
2785		}
2786		spin_unlock_bh(&addrconf_hash_lock);
2787	}
2788
2789	write_lock_bh(&idev->lock);
2790
2791	/* Step 2: clear flags for stateless addrconf */
2792	if (!how)
2793		idev->if_flags &= ~(IF_RS_SENT|IF_RA_RCVD|IF_READY);
2794
2795#ifdef CONFIG_IPV6_PRIVACY
2796	if (how && del_timer(&idev->regen_timer))
2797		in6_dev_put(idev);
2798
2799	/* Step 3: clear tempaddr list */
2800	while (!list_empty(&idev->tempaddr_list)) {
2801		ifa = list_first_entry(&idev->tempaddr_list,
2802				       struct inet6_ifaddr, tmp_list);
2803		list_del(&ifa->tmp_list);
2804		write_unlock_bh(&idev->lock);
2805		spin_lock_bh(&ifa->lock);
2806
2807		if (ifa->ifpub) {
2808			in6_ifa_put(ifa->ifpub);
2809			ifa->ifpub = NULL;
2810		}
2811		spin_unlock_bh(&ifa->lock);
2812		in6_ifa_put(ifa);
2813		write_lock_bh(&idev->lock);
2814	}
2815#endif
2816
2817	while (!list_empty(&idev->addr_list)) {
2818		ifa = list_first_entry(&idev->addr_list,
2819				       struct inet6_ifaddr, if_list);
2820		addrconf_del_timer(ifa);
2821
2822		list_del(&ifa->if_list);
2823
2824		write_unlock_bh(&idev->lock);
2825
2826		spin_lock_bh(&ifa->state_lock);
2827		state = ifa->state;
2828		ifa->state = INET6_IFADDR_STATE_DEAD;
2829		spin_unlock_bh(&ifa->state_lock);
2830
2831		if (state != INET6_IFADDR_STATE_DEAD) {
2832			__ipv6_ifa_notify(RTM_DELADDR, ifa);
2833			atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifa);
2834		}
2835		in6_ifa_put(ifa);
2836
2837		write_lock_bh(&idev->lock);
2838	}
2839
2840	write_unlock_bh(&idev->lock);
2841
2842	/* Step 5: Discard multicast list */
2843	if (how)
2844		ipv6_mc_destroy_dev(idev);
2845	else
2846		ipv6_mc_down(idev);
2847
2848	idev->tstamp = jiffies;
2849
2850	/* Last: Shot the device (if unregistered) */
2851	if (how) {
2852		addrconf_sysctl_unregister(idev);
2853		neigh_parms_release(&nd_tbl, idev->nd_parms);
2854		neigh_ifdown(&nd_tbl, dev);
2855		in6_dev_put(idev);
2856	}
2857	return 0;
2858}
2859
2860static void addrconf_rs_timer(unsigned long data)
2861{
2862	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2863	struct inet6_dev *idev = ifp->idev;
2864
2865	read_lock(&idev->lock);
2866	if (idev->dead || !(idev->if_flags & IF_READY))
2867		goto out;
2868
2869	if (idev->cnf.forwarding)
2870		goto out;
2871
2872	/* Announcement received after solicitation was sent */
2873	if (idev->if_flags & IF_RA_RCVD)
2874		goto out;
2875
2876	spin_lock(&ifp->lock);
2877	if (ifp->probes++ < idev->cnf.rtr_solicits) {
2878		/* The wait after the last probe can be shorter */
2879		addrconf_mod_timer(ifp, AC_RS,
2880				   (ifp->probes == idev->cnf.rtr_solicits) ?
2881				   idev->cnf.rtr_solicit_delay :
2882				   idev->cnf.rtr_solicit_interval);
2883		spin_unlock(&ifp->lock);
2884
2885		ndisc_send_rs(idev->dev, &ifp->addr, &in6addr_linklocal_allrouters);
2886	} else {
2887		spin_unlock(&ifp->lock);
2888		/*
2889		 * Note: we do not support deprecated "all on-link"
2890		 * assumption any longer.
2891		 */
2892		pr_debug("%s: no IPv6 routers present\n", idev->dev->name);
 
2893	}
2894
2895out:
2896	read_unlock(&idev->lock);
2897	in6_ifa_put(ifp);
2898}
2899
2900/*
2901 *	Duplicate Address Detection
2902 */
2903static void addrconf_dad_kick(struct inet6_ifaddr *ifp)
2904{
2905	unsigned long rand_num;
2906	struct inet6_dev *idev = ifp->idev;
2907
2908	if (ifp->flags & IFA_F_OPTIMISTIC)
2909		rand_num = 0;
2910	else
2911		rand_num = net_random() % (idev->cnf.rtr_solicit_delay ? : 1);
2912
2913	ifp->probes = idev->cnf.dad_transmits;
2914	addrconf_mod_timer(ifp, AC_DAD, rand_num);
2915}
2916
2917static void addrconf_dad_start(struct inet6_ifaddr *ifp)
2918{
2919	struct inet6_dev *idev = ifp->idev;
2920	struct net_device *dev = idev->dev;
2921
2922	addrconf_join_solict(dev, &ifp->addr);
2923
2924	net_srandom(ifp->addr.s6_addr32[3]);
2925
2926	read_lock_bh(&idev->lock);
2927	spin_lock(&ifp->lock);
2928	if (ifp->state == INET6_IFADDR_STATE_DEAD)
2929		goto out;
2930
2931	if (dev->flags&(IFF_NOARP|IFF_LOOPBACK) ||
2932	    idev->cnf.accept_dad < 1 ||
2933	    !(ifp->flags&IFA_F_TENTATIVE) ||
2934	    ifp->flags & IFA_F_NODAD) {
2935		ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
2936		spin_unlock(&ifp->lock);
2937		read_unlock_bh(&idev->lock);
2938
2939		addrconf_dad_completed(ifp);
2940		return;
2941	}
2942
2943	if (!(idev->if_flags & IF_READY)) {
2944		spin_unlock(&ifp->lock);
2945		read_unlock_bh(&idev->lock);
2946		/*
2947		 * If the device is not ready:
2948		 * - keep it tentative if it is a permanent address.
2949		 * - otherwise, kill it.
2950		 */
2951		in6_ifa_hold(ifp);
2952		addrconf_dad_stop(ifp, 0);
2953		return;
2954	}
2955
2956	/*
2957	 * Optimistic nodes can start receiving
2958	 * Frames right away
2959	 */
2960	if (ifp->flags & IFA_F_OPTIMISTIC)
2961		ip6_ins_rt(ifp->rt);
2962
2963	addrconf_dad_kick(ifp);
2964out:
2965	spin_unlock(&ifp->lock);
2966	read_unlock_bh(&idev->lock);
2967}
2968
2969static void addrconf_dad_timer(unsigned long data)
2970{
2971	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2972	struct inet6_dev *idev = ifp->idev;
2973	struct in6_addr mcaddr;
2974
2975	if (!ifp->probes && addrconf_dad_end(ifp))
2976		goto out;
2977
2978	read_lock(&idev->lock);
2979	if (idev->dead || !(idev->if_flags & IF_READY)) {
2980		read_unlock(&idev->lock);
2981		goto out;
2982	}
2983
2984	spin_lock(&ifp->lock);
2985	if (ifp->state == INET6_IFADDR_STATE_DEAD) {
2986		spin_unlock(&ifp->lock);
2987		read_unlock(&idev->lock);
2988		goto out;
2989	}
2990
2991	if (ifp->probes == 0) {
2992		/*
2993		 * DAD was successful
2994		 */
2995
2996		ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
2997		spin_unlock(&ifp->lock);
2998		read_unlock(&idev->lock);
2999
3000		addrconf_dad_completed(ifp);
3001
3002		goto out;
3003	}
3004
3005	ifp->probes--;
3006	addrconf_mod_timer(ifp, AC_DAD, ifp->idev->nd_parms->retrans_time);
3007	spin_unlock(&ifp->lock);
3008	read_unlock(&idev->lock);
3009
3010	/* send a neighbour solicitation for our addr */
3011	addrconf_addr_solict_mult(&ifp->addr, &mcaddr);
3012	ndisc_send_ns(ifp->idev->dev, NULL, &ifp->addr, &mcaddr, &in6addr_any);
3013out:
3014	in6_ifa_put(ifp);
3015}
3016
3017static void addrconf_dad_completed(struct inet6_ifaddr *ifp)
3018{
3019	struct net_device *dev = ifp->idev->dev;
3020
3021	/*
3022	 *	Configure the address for reception. Now it is valid.
3023	 */
3024
3025	ipv6_ifa_notify(RTM_NEWADDR, ifp);
3026
3027	/* If added prefix is link local and we are prepared to process
3028	   router advertisements, start sending router solicitations.
3029	 */
3030
3031	if (((ifp->idev->cnf.accept_ra == 1 && !ifp->idev->cnf.forwarding) ||
3032	     ifp->idev->cnf.accept_ra == 2) &&
3033	    ifp->idev->cnf.rtr_solicits > 0 &&
3034	    (dev->flags&IFF_LOOPBACK) == 0 &&
3035	    (ipv6_addr_type(&ifp->addr) & IPV6_ADDR_LINKLOCAL)) {
3036		/*
3037		 *	If a host as already performed a random delay
3038		 *	[...] as part of DAD [...] there is no need
3039		 *	to delay again before sending the first RS
3040		 */
3041		ndisc_send_rs(ifp->idev->dev, &ifp->addr, &in6addr_linklocal_allrouters);
3042
3043		spin_lock_bh(&ifp->lock);
3044		ifp->probes = 1;
3045		ifp->idev->if_flags |= IF_RS_SENT;
3046		addrconf_mod_timer(ifp, AC_RS, ifp->idev->cnf.rtr_solicit_interval);
3047		spin_unlock_bh(&ifp->lock);
3048	}
3049}
3050
3051static void addrconf_dad_run(struct inet6_dev *idev)
3052{
3053	struct inet6_ifaddr *ifp;
3054
3055	read_lock_bh(&idev->lock);
3056	list_for_each_entry(ifp, &idev->addr_list, if_list) {
3057		spin_lock(&ifp->lock);
3058		if (ifp->flags & IFA_F_TENTATIVE &&
3059		    ifp->state == INET6_IFADDR_STATE_DAD)
3060			addrconf_dad_kick(ifp);
3061		spin_unlock(&ifp->lock);
3062	}
3063	read_unlock_bh(&idev->lock);
3064}
3065
3066#ifdef CONFIG_PROC_FS
3067struct if6_iter_state {
3068	struct seq_net_private p;
3069	int bucket;
3070	int offset;
3071};
3072
3073static struct inet6_ifaddr *if6_get_first(struct seq_file *seq, loff_t pos)
3074{
3075	struct inet6_ifaddr *ifa = NULL;
3076	struct if6_iter_state *state = seq->private;
3077	struct net *net = seq_file_net(seq);
3078	int p = 0;
3079
3080	/* initial bucket if pos is 0 */
3081	if (pos == 0) {
3082		state->bucket = 0;
3083		state->offset = 0;
3084	}
3085
3086	for (; state->bucket < IN6_ADDR_HSIZE; ++state->bucket) {
3087		struct hlist_node *n;
3088		hlist_for_each_entry_rcu_bh(ifa, n, &inet6_addr_lst[state->bucket],
3089					 addr_lst) {
3090			/* sync with offset */
3091			if (p < state->offset) {
3092				p++;
3093				continue;
3094			}
3095			state->offset++;
3096			if (net_eq(dev_net(ifa->idev->dev), net))
3097				return ifa;
3098		}
3099
3100		/* prepare for next bucket */
3101		state->offset = 0;
3102		p = 0;
3103	}
3104	return NULL;
3105}
3106
3107static struct inet6_ifaddr *if6_get_next(struct seq_file *seq,
3108					 struct inet6_ifaddr *ifa)
3109{
3110	struct if6_iter_state *state = seq->private;
3111	struct net *net = seq_file_net(seq);
3112	struct hlist_node *n = &ifa->addr_lst;
3113
3114	hlist_for_each_entry_continue_rcu_bh(ifa, n, addr_lst) {
3115		state->offset++;
3116		if (net_eq(dev_net(ifa->idev->dev), net))
3117			return ifa;
3118	}
3119
3120	while (++state->bucket < IN6_ADDR_HSIZE) {
3121		state->offset = 0;
3122		hlist_for_each_entry_rcu_bh(ifa, n,
3123				     &inet6_addr_lst[state->bucket], addr_lst) {
3124			state->offset++;
3125			if (net_eq(dev_net(ifa->idev->dev), net))
3126				return ifa;
3127		}
3128	}
3129
3130	return NULL;
3131}
3132
 
 
 
 
 
 
 
 
 
 
3133static void *if6_seq_start(struct seq_file *seq, loff_t *pos)
3134	__acquires(rcu_bh)
3135{
3136	rcu_read_lock_bh();
3137	return if6_get_first(seq, *pos);
3138}
3139
3140static void *if6_seq_next(struct seq_file *seq, void *v, loff_t *pos)
3141{
3142	struct inet6_ifaddr *ifa;
3143
3144	ifa = if6_get_next(seq, v);
3145	++*pos;
3146	return ifa;
3147}
3148
3149static void if6_seq_stop(struct seq_file *seq, void *v)
3150	__releases(rcu_bh)
3151{
3152	rcu_read_unlock_bh();
3153}
3154
3155static int if6_seq_show(struct seq_file *seq, void *v)
3156{
3157	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *)v;
3158	seq_printf(seq, "%pi6 %02x %02x %02x %02x %8s\n",
3159		   &ifp->addr,
3160		   ifp->idev->dev->ifindex,
3161		   ifp->prefix_len,
3162		   ifp->scope,
3163		   ifp->flags,
3164		   ifp->idev->dev->name);
3165	return 0;
3166}
3167
3168static const struct seq_operations if6_seq_ops = {
3169	.start	= if6_seq_start,
3170	.next	= if6_seq_next,
3171	.show	= if6_seq_show,
3172	.stop	= if6_seq_stop,
3173};
3174
3175static int if6_seq_open(struct inode *inode, struct file *file)
3176{
3177	return seq_open_net(inode, file, &if6_seq_ops,
3178			    sizeof(struct if6_iter_state));
3179}
3180
3181static const struct file_operations if6_fops = {
3182	.owner		= THIS_MODULE,
3183	.open		= if6_seq_open,
3184	.read		= seq_read,
3185	.llseek		= seq_lseek,
3186	.release	= seq_release_net,
3187};
3188
3189static int __net_init if6_proc_net_init(struct net *net)
3190{
3191	if (!proc_net_fops_create(net, "if_inet6", S_IRUGO, &if6_fops))
3192		return -ENOMEM;
3193	return 0;
3194}
3195
3196static void __net_exit if6_proc_net_exit(struct net *net)
3197{
3198       proc_net_remove(net, "if_inet6");
3199}
3200
3201static struct pernet_operations if6_proc_net_ops = {
3202       .init = if6_proc_net_init,
3203       .exit = if6_proc_net_exit,
3204};
3205
3206int __init if6_proc_init(void)
3207{
3208	return register_pernet_subsys(&if6_proc_net_ops);
3209}
3210
3211void if6_proc_exit(void)
3212{
3213	unregister_pernet_subsys(&if6_proc_net_ops);
3214}
3215#endif	/* CONFIG_PROC_FS */
3216
3217#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
3218/* Check if address is a home address configured on any interface. */
3219int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr)
3220{
3221	int ret = 0;
3222	struct inet6_ifaddr *ifp = NULL;
3223	struct hlist_node *n;
3224	unsigned int hash = ipv6_addr_hash(addr);
3225
3226	rcu_read_lock_bh();
3227	hlist_for_each_entry_rcu_bh(ifp, n, &inet6_addr_lst[hash], addr_lst) {
3228		if (!net_eq(dev_net(ifp->idev->dev), net))
3229			continue;
3230		if (ipv6_addr_equal(&ifp->addr, addr) &&
3231		    (ifp->flags & IFA_F_HOMEADDRESS)) {
3232			ret = 1;
3233			break;
3234		}
3235	}
3236	rcu_read_unlock_bh();
3237	return ret;
3238}
3239#endif
3240
3241/*
3242 *	Periodic address status verification
3243 */
3244
3245static void addrconf_verify(unsigned long foo)
3246{
3247	unsigned long now, next, next_sec, next_sched;
3248	struct inet6_ifaddr *ifp;
3249	struct hlist_node *node;
3250	int i;
3251
3252	rcu_read_lock_bh();
3253	spin_lock(&addrconf_verify_lock);
3254	now = jiffies;
3255	next = round_jiffies_up(now + ADDR_CHECK_FREQUENCY);
3256
3257	del_timer(&addr_chk_timer);
3258
3259	for (i = 0; i < IN6_ADDR_HSIZE; i++) {
3260restart:
3261		hlist_for_each_entry_rcu_bh(ifp, node,
3262					 &inet6_addr_lst[i], addr_lst) {
3263			unsigned long age;
3264
3265			if (ifp->flags & IFA_F_PERMANENT)
3266				continue;
3267
3268			spin_lock(&ifp->lock);
3269			/* We try to batch several events at once. */
3270			age = (now - ifp->tstamp + ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
3271
3272			if (ifp->valid_lft != INFINITY_LIFE_TIME &&
3273			    age >= ifp->valid_lft) {
3274				spin_unlock(&ifp->lock);
3275				in6_ifa_hold(ifp);
3276				ipv6_del_addr(ifp);
3277				goto restart;
3278			} else if (ifp->prefered_lft == INFINITY_LIFE_TIME) {
3279				spin_unlock(&ifp->lock);
3280				continue;
3281			} else if (age >= ifp->prefered_lft) {
3282				/* jiffies - ifp->tstamp > age >= ifp->prefered_lft */
3283				int deprecate = 0;
3284
3285				if (!(ifp->flags&IFA_F_DEPRECATED)) {
3286					deprecate = 1;
3287					ifp->flags |= IFA_F_DEPRECATED;
3288				}
3289
3290				if (time_before(ifp->tstamp + ifp->valid_lft * HZ, next))
3291					next = ifp->tstamp + ifp->valid_lft * HZ;
3292
3293				spin_unlock(&ifp->lock);
3294
3295				if (deprecate) {
3296					in6_ifa_hold(ifp);
3297
3298					ipv6_ifa_notify(0, ifp);
3299					in6_ifa_put(ifp);
3300					goto restart;
3301				}
3302#ifdef CONFIG_IPV6_PRIVACY
3303			} else if ((ifp->flags&IFA_F_TEMPORARY) &&
3304				   !(ifp->flags&IFA_F_TENTATIVE)) {
3305				unsigned long regen_advance = ifp->idev->cnf.regen_max_retry *
3306					ifp->idev->cnf.dad_transmits *
3307					ifp->idev->nd_parms->retrans_time / HZ;
3308
3309				if (age >= ifp->prefered_lft - regen_advance) {
3310					struct inet6_ifaddr *ifpub = ifp->ifpub;
3311					if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
3312						next = ifp->tstamp + ifp->prefered_lft * HZ;
3313					if (!ifp->regen_count && ifpub) {
3314						ifp->regen_count++;
3315						in6_ifa_hold(ifp);
3316						in6_ifa_hold(ifpub);
3317						spin_unlock(&ifp->lock);
3318
3319						spin_lock(&ifpub->lock);
3320						ifpub->regen_count = 0;
3321						spin_unlock(&ifpub->lock);
3322						ipv6_create_tempaddr(ifpub, ifp);
3323						in6_ifa_put(ifpub);
3324						in6_ifa_put(ifp);
3325						goto restart;
3326					}
3327				} else if (time_before(ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ, next))
3328					next = ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ;
3329				spin_unlock(&ifp->lock);
3330#endif
3331			} else {
3332				/* ifp->prefered_lft <= ifp->valid_lft */
3333				if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
3334					next = ifp->tstamp + ifp->prefered_lft * HZ;
3335				spin_unlock(&ifp->lock);
3336			}
3337		}
3338	}
3339
3340	next_sec = round_jiffies_up(next);
3341	next_sched = next;
3342
3343	/* If rounded timeout is accurate enough, accept it. */
3344	if (time_before(next_sec, next + ADDRCONF_TIMER_FUZZ))
3345		next_sched = next_sec;
3346
3347	/* And minimum interval is ADDRCONF_TIMER_FUZZ_MAX. */
3348	if (time_before(next_sched, jiffies + ADDRCONF_TIMER_FUZZ_MAX))
3349		next_sched = jiffies + ADDRCONF_TIMER_FUZZ_MAX;
3350
3351	ADBG((KERN_DEBUG "now = %lu, schedule = %lu, rounded schedule = %lu => %lu\n",
3352	      now, next, next_sec, next_sched));
3353
3354	addr_chk_timer.expires = next_sched;
3355	add_timer(&addr_chk_timer);
3356	spin_unlock(&addrconf_verify_lock);
3357	rcu_read_unlock_bh();
3358}
3359
3360static struct in6_addr *extract_addr(struct nlattr *addr, struct nlattr *local)
3361{
3362	struct in6_addr *pfx = NULL;
3363
3364	if (addr)
3365		pfx = nla_data(addr);
3366
3367	if (local) {
3368		if (pfx && nla_memcmp(local, pfx, sizeof(*pfx)))
3369			pfx = NULL;
3370		else
3371			pfx = nla_data(local);
3372	}
3373
3374	return pfx;
3375}
3376
3377static const struct nla_policy ifa_ipv6_policy[IFA_MAX+1] = {
3378	[IFA_ADDRESS]		= { .len = sizeof(struct in6_addr) },
3379	[IFA_LOCAL]		= { .len = sizeof(struct in6_addr) },
3380	[IFA_CACHEINFO]		= { .len = sizeof(struct ifa_cacheinfo) },
3381};
3382
3383static int
3384inet6_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
3385{
3386	struct net *net = sock_net(skb->sk);
3387	struct ifaddrmsg *ifm;
3388	struct nlattr *tb[IFA_MAX+1];
3389	struct in6_addr *pfx;
3390	int err;
3391
3392	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3393	if (err < 0)
3394		return err;
3395
3396	ifm = nlmsg_data(nlh);
3397	pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3398	if (pfx == NULL)
3399		return -EINVAL;
3400
3401	return inet6_addr_del(net, ifm->ifa_index, pfx, ifm->ifa_prefixlen);
3402}
3403
3404static int inet6_addr_modify(struct inet6_ifaddr *ifp, u8 ifa_flags,
3405			     u32 prefered_lft, u32 valid_lft)
3406{
3407	u32 flags;
3408	clock_t expires;
3409	unsigned long timeout;
3410
3411	if (!valid_lft || (prefered_lft > valid_lft))
3412		return -EINVAL;
3413
3414	timeout = addrconf_timeout_fixup(valid_lft, HZ);
3415	if (addrconf_finite_timeout(timeout)) {
3416		expires = jiffies_to_clock_t(timeout * HZ);
3417		valid_lft = timeout;
3418		flags = RTF_EXPIRES;
3419	} else {
3420		expires = 0;
3421		flags = 0;
3422		ifa_flags |= IFA_F_PERMANENT;
3423	}
3424
3425	timeout = addrconf_timeout_fixup(prefered_lft, HZ);
3426	if (addrconf_finite_timeout(timeout)) {
3427		if (timeout == 0)
3428			ifa_flags |= IFA_F_DEPRECATED;
3429		prefered_lft = timeout;
3430	}
3431
3432	spin_lock_bh(&ifp->lock);
3433	ifp->flags = (ifp->flags & ~(IFA_F_DEPRECATED | IFA_F_PERMANENT | IFA_F_NODAD | IFA_F_HOMEADDRESS)) | ifa_flags;
3434	ifp->tstamp = jiffies;
3435	ifp->valid_lft = valid_lft;
3436	ifp->prefered_lft = prefered_lft;
3437
3438	spin_unlock_bh(&ifp->lock);
3439	if (!(ifp->flags&IFA_F_TENTATIVE))
3440		ipv6_ifa_notify(0, ifp);
3441
3442	addrconf_prefix_route(&ifp->addr, ifp->prefix_len, ifp->idev->dev,
3443			      expires, flags);
3444	addrconf_verify(0);
3445
3446	return 0;
3447}
3448
3449static int
3450inet6_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
3451{
3452	struct net *net = sock_net(skb->sk);
3453	struct ifaddrmsg *ifm;
3454	struct nlattr *tb[IFA_MAX+1];
3455	struct in6_addr *pfx;
3456	struct inet6_ifaddr *ifa;
3457	struct net_device *dev;
3458	u32 valid_lft = INFINITY_LIFE_TIME, preferred_lft = INFINITY_LIFE_TIME;
3459	u8 ifa_flags;
3460	int err;
3461
3462	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3463	if (err < 0)
3464		return err;
3465
3466	ifm = nlmsg_data(nlh);
3467	pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3468	if (pfx == NULL)
3469		return -EINVAL;
3470
3471	if (tb[IFA_CACHEINFO]) {
3472		struct ifa_cacheinfo *ci;
3473
3474		ci = nla_data(tb[IFA_CACHEINFO]);
3475		valid_lft = ci->ifa_valid;
3476		preferred_lft = ci->ifa_prefered;
3477	} else {
3478		preferred_lft = INFINITY_LIFE_TIME;
3479		valid_lft = INFINITY_LIFE_TIME;
3480	}
3481
3482	dev =  __dev_get_by_index(net, ifm->ifa_index);
3483	if (dev == NULL)
3484		return -ENODEV;
3485
3486	/* We ignore other flags so far. */
3487	ifa_flags = ifm->ifa_flags & (IFA_F_NODAD | IFA_F_HOMEADDRESS);
3488
3489	ifa = ipv6_get_ifaddr(net, pfx, dev, 1);
3490	if (ifa == NULL) {
3491		/*
3492		 * It would be best to check for !NLM_F_CREATE here but
3493		 * userspace alreay relies on not having to provide this.
3494		 */
3495		return inet6_addr_add(net, ifm->ifa_index, pfx,
3496				      ifm->ifa_prefixlen, ifa_flags,
3497				      preferred_lft, valid_lft);
3498	}
3499
3500	if (nlh->nlmsg_flags & NLM_F_EXCL ||
3501	    !(nlh->nlmsg_flags & NLM_F_REPLACE))
3502		err = -EEXIST;
3503	else
3504		err = inet6_addr_modify(ifa, ifa_flags, preferred_lft, valid_lft);
3505
3506	in6_ifa_put(ifa);
3507
3508	return err;
3509}
3510
3511static void put_ifaddrmsg(struct nlmsghdr *nlh, u8 prefixlen, u8 flags,
3512			  u8 scope, int ifindex)
3513{
3514	struct ifaddrmsg *ifm;
3515
3516	ifm = nlmsg_data(nlh);
3517	ifm->ifa_family = AF_INET6;
3518	ifm->ifa_prefixlen = prefixlen;
3519	ifm->ifa_flags = flags;
3520	ifm->ifa_scope = scope;
3521	ifm->ifa_index = ifindex;
3522}
3523
3524static int put_cacheinfo(struct sk_buff *skb, unsigned long cstamp,
3525			 unsigned long tstamp, u32 preferred, u32 valid)
3526{
3527	struct ifa_cacheinfo ci;
3528
3529	ci.cstamp = cstamp_delta(cstamp);
3530	ci.tstamp = cstamp_delta(tstamp);
3531	ci.ifa_prefered = preferred;
3532	ci.ifa_valid = valid;
3533
3534	return nla_put(skb, IFA_CACHEINFO, sizeof(ci), &ci);
3535}
3536
3537static inline int rt_scope(int ifa_scope)
3538{
3539	if (ifa_scope & IFA_HOST)
3540		return RT_SCOPE_HOST;
3541	else if (ifa_scope & IFA_LINK)
3542		return RT_SCOPE_LINK;
3543	else if (ifa_scope & IFA_SITE)
3544		return RT_SCOPE_SITE;
3545	else
3546		return RT_SCOPE_UNIVERSE;
3547}
3548
3549static inline int inet6_ifaddr_msgsize(void)
3550{
3551	return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
3552	       + nla_total_size(16) /* IFA_ADDRESS */
3553	       + nla_total_size(sizeof(struct ifa_cacheinfo));
3554}
3555
3556static int inet6_fill_ifaddr(struct sk_buff *skb, struct inet6_ifaddr *ifa,
3557			     u32 pid, u32 seq, int event, unsigned int flags)
3558{
3559	struct nlmsghdr  *nlh;
3560	u32 preferred, valid;
3561
3562	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3563	if (nlh == NULL)
3564		return -EMSGSIZE;
3565
3566	put_ifaddrmsg(nlh, ifa->prefix_len, ifa->flags, rt_scope(ifa->scope),
3567		      ifa->idev->dev->ifindex);
3568
3569	if (!(ifa->flags&IFA_F_PERMANENT)) {
3570		preferred = ifa->prefered_lft;
3571		valid = ifa->valid_lft;
3572		if (preferred != INFINITY_LIFE_TIME) {
3573			long tval = (jiffies - ifa->tstamp)/HZ;
3574			if (preferred > tval)
3575				preferred -= tval;
3576			else
3577				preferred = 0;
3578			if (valid != INFINITY_LIFE_TIME) {
3579				if (valid > tval)
3580					valid -= tval;
3581				else
3582					valid = 0;
3583			}
3584		}
3585	} else {
3586		preferred = INFINITY_LIFE_TIME;
3587		valid = INFINITY_LIFE_TIME;
3588	}
3589
3590	if (nla_put(skb, IFA_ADDRESS, 16, &ifa->addr) < 0 ||
3591	    put_cacheinfo(skb, ifa->cstamp, ifa->tstamp, preferred, valid) < 0) {
3592		nlmsg_cancel(skb, nlh);
3593		return -EMSGSIZE;
3594	}
3595
3596	return nlmsg_end(skb, nlh);
3597}
3598
3599static int inet6_fill_ifmcaddr(struct sk_buff *skb, struct ifmcaddr6 *ifmca,
3600				u32 pid, u32 seq, int event, u16 flags)
3601{
3602	struct nlmsghdr  *nlh;
3603	u8 scope = RT_SCOPE_UNIVERSE;
3604	int ifindex = ifmca->idev->dev->ifindex;
3605
3606	if (ipv6_addr_scope(&ifmca->mca_addr) & IFA_SITE)
3607		scope = RT_SCOPE_SITE;
3608
3609	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3610	if (nlh == NULL)
3611		return -EMSGSIZE;
3612
3613	put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
3614	if (nla_put(skb, IFA_MULTICAST, 16, &ifmca->mca_addr) < 0 ||
3615	    put_cacheinfo(skb, ifmca->mca_cstamp, ifmca->mca_tstamp,
3616			  INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
3617		nlmsg_cancel(skb, nlh);
3618		return -EMSGSIZE;
3619	}
3620
3621	return nlmsg_end(skb, nlh);
3622}
3623
3624static int inet6_fill_ifacaddr(struct sk_buff *skb, struct ifacaddr6 *ifaca,
3625				u32 pid, u32 seq, int event, unsigned int flags)
3626{
3627	struct nlmsghdr  *nlh;
3628	u8 scope = RT_SCOPE_UNIVERSE;
3629	int ifindex = ifaca->aca_idev->dev->ifindex;
3630
3631	if (ipv6_addr_scope(&ifaca->aca_addr) & IFA_SITE)
3632		scope = RT_SCOPE_SITE;
3633
3634	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3635	if (nlh == NULL)
3636		return -EMSGSIZE;
3637
3638	put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
3639	if (nla_put(skb, IFA_ANYCAST, 16, &ifaca->aca_addr) < 0 ||
3640	    put_cacheinfo(skb, ifaca->aca_cstamp, ifaca->aca_tstamp,
3641			  INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
3642		nlmsg_cancel(skb, nlh);
3643		return -EMSGSIZE;
3644	}
3645
3646	return nlmsg_end(skb, nlh);
3647}
3648
3649enum addr_type_t {
3650	UNICAST_ADDR,
3651	MULTICAST_ADDR,
3652	ANYCAST_ADDR,
3653};
3654
3655/* called with rcu_read_lock() */
3656static int in6_dump_addrs(struct inet6_dev *idev, struct sk_buff *skb,
3657			  struct netlink_callback *cb, enum addr_type_t type,
3658			  int s_ip_idx, int *p_ip_idx)
3659{
3660	struct ifmcaddr6 *ifmca;
3661	struct ifacaddr6 *ifaca;
3662	int err = 1;
3663	int ip_idx = *p_ip_idx;
3664
3665	read_lock_bh(&idev->lock);
3666	switch (type) {
3667	case UNICAST_ADDR: {
3668		struct inet6_ifaddr *ifa;
3669
3670		/* unicast address incl. temp addr */
3671		list_for_each_entry(ifa, &idev->addr_list, if_list) {
3672			if (++ip_idx < s_ip_idx)
3673				continue;
3674			err = inet6_fill_ifaddr(skb, ifa,
3675						NETLINK_CB(cb->skb).pid,
3676						cb->nlh->nlmsg_seq,
3677						RTM_NEWADDR,
3678						NLM_F_MULTI);
3679			if (err <= 0)
3680				break;
3681		}
3682		break;
3683	}
3684	case MULTICAST_ADDR:
3685		/* multicast address */
3686		for (ifmca = idev->mc_list; ifmca;
3687		     ifmca = ifmca->next, ip_idx++) {
3688			if (ip_idx < s_ip_idx)
3689				continue;
3690			err = inet6_fill_ifmcaddr(skb, ifmca,
3691						  NETLINK_CB(cb->skb).pid,
3692						  cb->nlh->nlmsg_seq,
3693						  RTM_GETMULTICAST,
3694						  NLM_F_MULTI);
3695			if (err <= 0)
3696				break;
3697		}
3698		break;
3699	case ANYCAST_ADDR:
3700		/* anycast address */
3701		for (ifaca = idev->ac_list; ifaca;
3702		     ifaca = ifaca->aca_next, ip_idx++) {
3703			if (ip_idx < s_ip_idx)
3704				continue;
3705			err = inet6_fill_ifacaddr(skb, ifaca,
3706						  NETLINK_CB(cb->skb).pid,
3707						  cb->nlh->nlmsg_seq,
3708						  RTM_GETANYCAST,
3709						  NLM_F_MULTI);
3710			if (err <= 0)
3711				break;
3712		}
3713		break;
3714	default:
3715		break;
3716	}
3717	read_unlock_bh(&idev->lock);
3718	*p_ip_idx = ip_idx;
3719	return err;
3720}
3721
3722static int inet6_dump_addr(struct sk_buff *skb, struct netlink_callback *cb,
3723			   enum addr_type_t type)
3724{
3725	struct net *net = sock_net(skb->sk);
3726	int h, s_h;
3727	int idx, ip_idx;
3728	int s_idx, s_ip_idx;
3729	struct net_device *dev;
3730	struct inet6_dev *idev;
3731	struct hlist_head *head;
3732	struct hlist_node *node;
3733
3734	s_h = cb->args[0];
3735	s_idx = idx = cb->args[1];
3736	s_ip_idx = ip_idx = cb->args[2];
3737
3738	rcu_read_lock();
3739	for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
3740		idx = 0;
3741		head = &net->dev_index_head[h];
3742		hlist_for_each_entry_rcu(dev, node, head, index_hlist) {
3743			if (idx < s_idx)
3744				goto cont;
3745			if (h > s_h || idx > s_idx)
3746				s_ip_idx = 0;
3747			ip_idx = 0;
3748			idev = __in6_dev_get(dev);
3749			if (!idev)
3750				goto cont;
3751
3752			if (in6_dump_addrs(idev, skb, cb, type,
3753					   s_ip_idx, &ip_idx) <= 0)
3754				goto done;
3755cont:
3756			idx++;
3757		}
3758	}
3759done:
3760	rcu_read_unlock();
3761	cb->args[0] = h;
3762	cb->args[1] = idx;
3763	cb->args[2] = ip_idx;
3764
3765	return skb->len;
3766}
3767
3768static int inet6_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
3769{
3770	enum addr_type_t type = UNICAST_ADDR;
3771
3772	return inet6_dump_addr(skb, cb, type);
3773}
3774
3775static int inet6_dump_ifmcaddr(struct sk_buff *skb, struct netlink_callback *cb)
3776{
3777	enum addr_type_t type = MULTICAST_ADDR;
3778
3779	return inet6_dump_addr(skb, cb, type);
3780}
3781
3782
3783static int inet6_dump_ifacaddr(struct sk_buff *skb, struct netlink_callback *cb)
3784{
3785	enum addr_type_t type = ANYCAST_ADDR;
3786
3787	return inet6_dump_addr(skb, cb, type);
3788}
3789
3790static int inet6_rtm_getaddr(struct sk_buff *in_skb, struct nlmsghdr *nlh,
3791			     void *arg)
3792{
3793	struct net *net = sock_net(in_skb->sk);
3794	struct ifaddrmsg *ifm;
3795	struct nlattr *tb[IFA_MAX+1];
3796	struct in6_addr *addr = NULL;
3797	struct net_device *dev = NULL;
3798	struct inet6_ifaddr *ifa;
3799	struct sk_buff *skb;
3800	int err;
3801
3802	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3803	if (err < 0)
3804		goto errout;
3805
3806	addr = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3807	if (addr == NULL) {
3808		err = -EINVAL;
3809		goto errout;
3810	}
3811
3812	ifm = nlmsg_data(nlh);
3813	if (ifm->ifa_index)
3814		dev = __dev_get_by_index(net, ifm->ifa_index);
3815
3816	ifa = ipv6_get_ifaddr(net, addr, dev, 1);
3817	if (!ifa) {
3818		err = -EADDRNOTAVAIL;
3819		goto errout;
3820	}
3821
3822	skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_KERNEL);
3823	if (!skb) {
3824		err = -ENOBUFS;
3825		goto errout_ifa;
3826	}
3827
3828	err = inet6_fill_ifaddr(skb, ifa, NETLINK_CB(in_skb).pid,
3829				nlh->nlmsg_seq, RTM_NEWADDR, 0);
3830	if (err < 0) {
3831		/* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
3832		WARN_ON(err == -EMSGSIZE);
3833		kfree_skb(skb);
3834		goto errout_ifa;
3835	}
3836	err = rtnl_unicast(skb, net, NETLINK_CB(in_skb).pid);
3837errout_ifa:
3838	in6_ifa_put(ifa);
3839errout:
3840	return err;
3841}
3842
3843static void inet6_ifa_notify(int event, struct inet6_ifaddr *ifa)
3844{
3845	struct sk_buff *skb;
3846	struct net *net = dev_net(ifa->idev->dev);
3847	int err = -ENOBUFS;
3848
3849	skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_ATOMIC);
3850	if (skb == NULL)
3851		goto errout;
3852
3853	err = inet6_fill_ifaddr(skb, ifa, 0, 0, event, 0);
3854	if (err < 0) {
3855		/* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
3856		WARN_ON(err == -EMSGSIZE);
3857		kfree_skb(skb);
3858		goto errout;
3859	}
3860	rtnl_notify(skb, net, 0, RTNLGRP_IPV6_IFADDR, NULL, GFP_ATOMIC);
3861	return;
3862errout:
3863	if (err < 0)
3864		rtnl_set_sk_err(net, RTNLGRP_IPV6_IFADDR, err);
3865}
3866
3867static inline void ipv6_store_devconf(struct ipv6_devconf *cnf,
3868				__s32 *array, int bytes)
3869{
3870	BUG_ON(bytes < (DEVCONF_MAX * 4));
3871
3872	memset(array, 0, bytes);
3873	array[DEVCONF_FORWARDING] = cnf->forwarding;
3874	array[DEVCONF_HOPLIMIT] = cnf->hop_limit;
3875	array[DEVCONF_MTU6] = cnf->mtu6;
3876	array[DEVCONF_ACCEPT_RA] = cnf->accept_ra;
3877	array[DEVCONF_ACCEPT_REDIRECTS] = cnf->accept_redirects;
3878	array[DEVCONF_AUTOCONF] = cnf->autoconf;
3879	array[DEVCONF_DAD_TRANSMITS] = cnf->dad_transmits;
3880	array[DEVCONF_RTR_SOLICITS] = cnf->rtr_solicits;
3881	array[DEVCONF_RTR_SOLICIT_INTERVAL] =
3882		jiffies_to_msecs(cnf->rtr_solicit_interval);
3883	array[DEVCONF_RTR_SOLICIT_DELAY] =
3884		jiffies_to_msecs(cnf->rtr_solicit_delay);
3885	array[DEVCONF_FORCE_MLD_VERSION] = cnf->force_mld_version;
3886#ifdef CONFIG_IPV6_PRIVACY
3887	array[DEVCONF_USE_TEMPADDR] = cnf->use_tempaddr;
3888	array[DEVCONF_TEMP_VALID_LFT] = cnf->temp_valid_lft;
3889	array[DEVCONF_TEMP_PREFERED_LFT] = cnf->temp_prefered_lft;
3890	array[DEVCONF_REGEN_MAX_RETRY] = cnf->regen_max_retry;
3891	array[DEVCONF_MAX_DESYNC_FACTOR] = cnf->max_desync_factor;
3892#endif
3893	array[DEVCONF_MAX_ADDRESSES] = cnf->max_addresses;
3894	array[DEVCONF_ACCEPT_RA_DEFRTR] = cnf->accept_ra_defrtr;
3895	array[DEVCONF_ACCEPT_RA_PINFO] = cnf->accept_ra_pinfo;
3896#ifdef CONFIG_IPV6_ROUTER_PREF
3897	array[DEVCONF_ACCEPT_RA_RTR_PREF] = cnf->accept_ra_rtr_pref;
3898	array[DEVCONF_RTR_PROBE_INTERVAL] =
3899		jiffies_to_msecs(cnf->rtr_probe_interval);
3900#ifdef CONFIG_IPV6_ROUTE_INFO
3901	array[DEVCONF_ACCEPT_RA_RT_INFO_MAX_PLEN] = cnf->accept_ra_rt_info_max_plen;
3902#endif
3903#endif
3904	array[DEVCONF_PROXY_NDP] = cnf->proxy_ndp;
3905	array[DEVCONF_ACCEPT_SOURCE_ROUTE] = cnf->accept_source_route;
3906#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
3907	array[DEVCONF_OPTIMISTIC_DAD] = cnf->optimistic_dad;
3908#endif
3909#ifdef CONFIG_IPV6_MROUTE
3910	array[DEVCONF_MC_FORWARDING] = cnf->mc_forwarding;
3911#endif
3912	array[DEVCONF_DISABLE_IPV6] = cnf->disable_ipv6;
3913	array[DEVCONF_ACCEPT_DAD] = cnf->accept_dad;
3914	array[DEVCONF_FORCE_TLLAO] = cnf->force_tllao;
3915}
3916
3917static inline size_t inet6_ifla6_size(void)
3918{
3919	return nla_total_size(4) /* IFLA_INET6_FLAGS */
3920	     + nla_total_size(sizeof(struct ifla_cacheinfo))
3921	     + nla_total_size(DEVCONF_MAX * 4) /* IFLA_INET6_CONF */
3922	     + nla_total_size(IPSTATS_MIB_MAX * 8) /* IFLA_INET6_STATS */
3923	     + nla_total_size(ICMP6_MIB_MAX * 8); /* IFLA_INET6_ICMP6STATS */
3924}
3925
3926static inline size_t inet6_if_nlmsg_size(void)
3927{
3928	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
3929	       + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
3930	       + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
3931	       + nla_total_size(4) /* IFLA_MTU */
3932	       + nla_total_size(4) /* IFLA_LINK */
3933	       + nla_total_size(inet6_ifla6_size()); /* IFLA_PROTINFO */
3934}
3935
3936static inline void __snmp6_fill_statsdev(u64 *stats, atomic_long_t *mib,
3937				      int items, int bytes)
3938{
3939	int i;
3940	int pad = bytes - sizeof(u64) * items;
3941	BUG_ON(pad < 0);
3942
3943	/* Use put_unaligned() because stats may not be aligned for u64. */
3944	put_unaligned(items, &stats[0]);
3945	for (i = 1; i < items; i++)
3946		put_unaligned(atomic_long_read(&mib[i]), &stats[i]);
3947
3948	memset(&stats[items], 0, pad);
3949}
3950
3951static inline void __snmp6_fill_stats64(u64 *stats, void __percpu **mib,
3952				      int items, int bytes, size_t syncpoff)
3953{
3954	int i;
3955	int pad = bytes - sizeof(u64) * items;
3956	BUG_ON(pad < 0);
3957
3958	/* Use put_unaligned() because stats may not be aligned for u64. */
3959	put_unaligned(items, &stats[0]);
3960	for (i = 1; i < items; i++)
3961		put_unaligned(snmp_fold_field64(mib, i, syncpoff), &stats[i]);
3962
3963	memset(&stats[items], 0, pad);
3964}
3965
3966static void snmp6_fill_stats(u64 *stats, struct inet6_dev *idev, int attrtype,
3967			     int bytes)
3968{
3969	switch (attrtype) {
3970	case IFLA_INET6_STATS:
3971		__snmp6_fill_stats64(stats, (void __percpu **)idev->stats.ipv6,
3972				     IPSTATS_MIB_MAX, bytes, offsetof(struct ipstats_mib, syncp));
3973		break;
3974	case IFLA_INET6_ICMP6STATS:
3975		__snmp6_fill_statsdev(stats, idev->stats.icmpv6dev->mibs, ICMP6_MIB_MAX, bytes);
3976		break;
3977	}
3978}
3979
3980static int inet6_fill_ifla6_attrs(struct sk_buff *skb, struct inet6_dev *idev)
3981{
3982	struct nlattr *nla;
3983	struct ifla_cacheinfo ci;
3984
3985	if (nla_put_u32(skb, IFLA_INET6_FLAGS, idev->if_flags))
3986		goto nla_put_failure;
3987	ci.max_reasm_len = IPV6_MAXPLEN;
3988	ci.tstamp = cstamp_delta(idev->tstamp);
3989	ci.reachable_time = jiffies_to_msecs(idev->nd_parms->reachable_time);
3990	ci.retrans_time = jiffies_to_msecs(idev->nd_parms->retrans_time);
3991	if (nla_put(skb, IFLA_INET6_CACHEINFO, sizeof(ci), &ci))
3992		goto nla_put_failure;
3993	nla = nla_reserve(skb, IFLA_INET6_CONF, DEVCONF_MAX * sizeof(s32));
3994	if (nla == NULL)
3995		goto nla_put_failure;
3996	ipv6_store_devconf(&idev->cnf, nla_data(nla), nla_len(nla));
3997
3998	/* XXX - MC not implemented */
3999
4000	nla = nla_reserve(skb, IFLA_INET6_STATS, IPSTATS_MIB_MAX * sizeof(u64));
4001	if (nla == NULL)
4002		goto nla_put_failure;
4003	snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_STATS, nla_len(nla));
4004
4005	nla = nla_reserve(skb, IFLA_INET6_ICMP6STATS, ICMP6_MIB_MAX * sizeof(u64));
4006	if (nla == NULL)
4007		goto nla_put_failure;
4008	snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_ICMP6STATS, nla_len(nla));
4009
4010	return 0;
4011
4012nla_put_failure:
4013	return -EMSGSIZE;
4014}
4015
4016static size_t inet6_get_link_af_size(const struct net_device *dev)
4017{
4018	if (!__in6_dev_get(dev))
4019		return 0;
4020
4021	return inet6_ifla6_size();
4022}
4023
4024static int inet6_fill_link_af(struct sk_buff *skb, const struct net_device *dev)
4025{
4026	struct inet6_dev *idev = __in6_dev_get(dev);
4027
4028	if (!idev)
4029		return -ENODATA;
4030
4031	if (inet6_fill_ifla6_attrs(skb, idev) < 0)
4032		return -EMSGSIZE;
4033
4034	return 0;
4035}
4036
4037static int inet6_fill_ifinfo(struct sk_buff *skb, struct inet6_dev *idev,
4038			     u32 pid, u32 seq, int event, unsigned int flags)
4039{
4040	struct net_device *dev = idev->dev;
4041	struct ifinfomsg *hdr;
4042	struct nlmsghdr *nlh;
4043	void *protoinfo;
4044
4045	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
4046	if (nlh == NULL)
4047		return -EMSGSIZE;
4048
4049	hdr = nlmsg_data(nlh);
4050	hdr->ifi_family = AF_INET6;
4051	hdr->__ifi_pad = 0;
4052	hdr->ifi_type = dev->type;
4053	hdr->ifi_index = dev->ifindex;
4054	hdr->ifi_flags = dev_get_flags(dev);
4055	hdr->ifi_change = 0;
4056
4057	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
4058	    (dev->addr_len &&
4059	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
4060	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
4061	    (dev->ifindex != dev->iflink &&
4062	     nla_put_u32(skb, IFLA_LINK, dev->iflink)))
4063		goto nla_put_failure;
 
 
4064	protoinfo = nla_nest_start(skb, IFLA_PROTINFO);
4065	if (protoinfo == NULL)
4066		goto nla_put_failure;
4067
4068	if (inet6_fill_ifla6_attrs(skb, idev) < 0)
4069		goto nla_put_failure;
4070
4071	nla_nest_end(skb, protoinfo);
4072	return nlmsg_end(skb, nlh);
4073
4074nla_put_failure:
4075	nlmsg_cancel(skb, nlh);
4076	return -EMSGSIZE;
4077}
4078
4079static int inet6_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
4080{
4081	struct net *net = sock_net(skb->sk);
4082	int h, s_h;
4083	int idx = 0, s_idx;
4084	struct net_device *dev;
4085	struct inet6_dev *idev;
4086	struct hlist_head *head;
4087	struct hlist_node *node;
4088
4089	s_h = cb->args[0];
4090	s_idx = cb->args[1];
4091
4092	rcu_read_lock();
4093	for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
4094		idx = 0;
4095		head = &net->dev_index_head[h];
4096		hlist_for_each_entry_rcu(dev, node, head, index_hlist) {
4097			if (idx < s_idx)
4098				goto cont;
4099			idev = __in6_dev_get(dev);
4100			if (!idev)
4101				goto cont;
4102			if (inet6_fill_ifinfo(skb, idev,
4103					      NETLINK_CB(cb->skb).pid,
4104					      cb->nlh->nlmsg_seq,
4105					      RTM_NEWLINK, NLM_F_MULTI) <= 0)
4106				goto out;
4107cont:
4108			idx++;
4109		}
4110	}
4111out:
4112	rcu_read_unlock();
4113	cb->args[1] = idx;
4114	cb->args[0] = h;
4115
4116	return skb->len;
4117}
4118
4119void inet6_ifinfo_notify(int event, struct inet6_dev *idev)
4120{
4121	struct sk_buff *skb;
4122	struct net *net = dev_net(idev->dev);
4123	int err = -ENOBUFS;
4124
4125	skb = nlmsg_new(inet6_if_nlmsg_size(), GFP_ATOMIC);
4126	if (skb == NULL)
4127		goto errout;
4128
4129	err = inet6_fill_ifinfo(skb, idev, 0, 0, event, 0);
4130	if (err < 0) {
4131		/* -EMSGSIZE implies BUG in inet6_if_nlmsg_size() */
4132		WARN_ON(err == -EMSGSIZE);
4133		kfree_skb(skb);
4134		goto errout;
4135	}
4136	rtnl_notify(skb, net, 0, RTNLGRP_IPV6_IFINFO, NULL, GFP_ATOMIC);
4137	return;
4138errout:
4139	if (err < 0)
4140		rtnl_set_sk_err(net, RTNLGRP_IPV6_IFINFO, err);
4141}
4142
4143static inline size_t inet6_prefix_nlmsg_size(void)
4144{
4145	return NLMSG_ALIGN(sizeof(struct prefixmsg))
4146	       + nla_total_size(sizeof(struct in6_addr))
4147	       + nla_total_size(sizeof(struct prefix_cacheinfo));
4148}
4149
4150static int inet6_fill_prefix(struct sk_buff *skb, struct inet6_dev *idev,
4151			     struct prefix_info *pinfo, u32 pid, u32 seq,
4152			     int event, unsigned int flags)
4153{
4154	struct prefixmsg *pmsg;
4155	struct nlmsghdr *nlh;
4156	struct prefix_cacheinfo	ci;
4157
4158	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*pmsg), flags);
4159	if (nlh == NULL)
4160		return -EMSGSIZE;
4161
4162	pmsg = nlmsg_data(nlh);
4163	pmsg->prefix_family = AF_INET6;
4164	pmsg->prefix_pad1 = 0;
4165	pmsg->prefix_pad2 = 0;
4166	pmsg->prefix_ifindex = idev->dev->ifindex;
4167	pmsg->prefix_len = pinfo->prefix_len;
4168	pmsg->prefix_type = pinfo->type;
4169	pmsg->prefix_pad3 = 0;
4170	pmsg->prefix_flags = 0;
4171	if (pinfo->onlink)
4172		pmsg->prefix_flags |= IF_PREFIX_ONLINK;
4173	if (pinfo->autoconf)
4174		pmsg->prefix_flags |= IF_PREFIX_AUTOCONF;
4175
4176	if (nla_put(skb, PREFIX_ADDRESS, sizeof(pinfo->prefix), &pinfo->prefix))
4177		goto nla_put_failure;
4178	ci.preferred_time = ntohl(pinfo->prefered);
4179	ci.valid_time = ntohl(pinfo->valid);
4180	if (nla_put(skb, PREFIX_CACHEINFO, sizeof(ci), &ci))
4181		goto nla_put_failure;
4182	return nlmsg_end(skb, nlh);
4183
4184nla_put_failure:
4185	nlmsg_cancel(skb, nlh);
4186	return -EMSGSIZE;
4187}
4188
4189static void inet6_prefix_notify(int event, struct inet6_dev *idev,
4190			 struct prefix_info *pinfo)
4191{
4192	struct sk_buff *skb;
4193	struct net *net = dev_net(idev->dev);
4194	int err = -ENOBUFS;
4195
4196	skb = nlmsg_new(inet6_prefix_nlmsg_size(), GFP_ATOMIC);
4197	if (skb == NULL)
4198		goto errout;
4199
4200	err = inet6_fill_prefix(skb, idev, pinfo, 0, 0, event, 0);
4201	if (err < 0) {
4202		/* -EMSGSIZE implies BUG in inet6_prefix_nlmsg_size() */
4203		WARN_ON(err == -EMSGSIZE);
4204		kfree_skb(skb);
4205		goto errout;
4206	}
4207	rtnl_notify(skb, net, 0, RTNLGRP_IPV6_PREFIX, NULL, GFP_ATOMIC);
4208	return;
4209errout:
4210	if (err < 0)
4211		rtnl_set_sk_err(net, RTNLGRP_IPV6_PREFIX, err);
4212}
4213
4214static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
4215{
4216	inet6_ifa_notify(event ? : RTM_NEWADDR, ifp);
4217
4218	switch (event) {
4219	case RTM_NEWADDR:
4220		/*
4221		 * If the address was optimistic
4222		 * we inserted the route at the start of
4223		 * our DAD process, so we don't need
4224		 * to do it again
4225		 */
4226		if (!(ifp->rt->rt6i_node))
4227			ip6_ins_rt(ifp->rt);
4228		if (ifp->idev->cnf.forwarding)
4229			addrconf_join_anycast(ifp);
4230		break;
4231	case RTM_DELADDR:
4232		if (ifp->idev->cnf.forwarding)
4233			addrconf_leave_anycast(ifp);
4234		addrconf_leave_solict(ifp->idev, &ifp->addr);
4235		dst_hold(&ifp->rt->dst);
4236
4237		if (ip6_del_rt(ifp->rt))
4238			dst_free(&ifp->rt->dst);
4239		break;
4240	}
4241}
4242
4243static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
4244{
4245	rcu_read_lock_bh();
4246	if (likely(ifp->idev->dead == 0))
4247		__ipv6_ifa_notify(event, ifp);
4248	rcu_read_unlock_bh();
4249}
4250
4251#ifdef CONFIG_SYSCTL
4252
4253static
4254int addrconf_sysctl_forward(ctl_table *ctl, int write,
4255			   void __user *buffer, size_t *lenp, loff_t *ppos)
4256{
4257	int *valp = ctl->data;
4258	int val = *valp;
4259	loff_t pos = *ppos;
4260	ctl_table lctl;
4261	int ret;
4262
4263	/*
4264	 * ctl->data points to idev->cnf.forwarding, we should
4265	 * not modify it until we get the rtnl lock.
4266	 */
4267	lctl = *ctl;
4268	lctl.data = &val;
4269
4270	ret = proc_dointvec(&lctl, write, buffer, lenp, ppos);
4271
4272	if (write)
4273		ret = addrconf_fixup_forwarding(ctl, valp, val);
4274	if (ret)
4275		*ppos = pos;
4276	return ret;
4277}
4278
4279static void dev_disable_change(struct inet6_dev *idev)
4280{
4281	if (!idev || !idev->dev)
4282		return;
4283
4284	if (idev->cnf.disable_ipv6)
4285		addrconf_notify(NULL, NETDEV_DOWN, idev->dev);
4286	else
4287		addrconf_notify(NULL, NETDEV_UP, idev->dev);
4288}
4289
4290static void addrconf_disable_change(struct net *net, __s32 newf)
4291{
4292	struct net_device *dev;
4293	struct inet6_dev *idev;
4294
4295	rcu_read_lock();
4296	for_each_netdev_rcu(net, dev) {
4297		idev = __in6_dev_get(dev);
4298		if (idev) {
4299			int changed = (!idev->cnf.disable_ipv6) ^ (!newf);
4300			idev->cnf.disable_ipv6 = newf;
4301			if (changed)
4302				dev_disable_change(idev);
4303		}
4304	}
4305	rcu_read_unlock();
4306}
4307
4308static int addrconf_disable_ipv6(struct ctl_table *table, int *p, int newf)
4309{
4310	struct net *net;
4311	int old;
4312
4313	if (!rtnl_trylock())
4314		return restart_syscall();
4315
4316	net = (struct net *)table->extra2;
4317	old = *p;
4318	*p = newf;
4319
4320	if (p == &net->ipv6.devconf_dflt->disable_ipv6) {
4321		rtnl_unlock();
4322		return 0;
 
 
 
 
 
4323	}
4324
4325	if (p == &net->ipv6.devconf_all->disable_ipv6) {
 
4326		net->ipv6.devconf_dflt->disable_ipv6 = newf;
4327		addrconf_disable_change(net, newf);
4328	} else if ((!newf) ^ (!old))
4329		dev_disable_change((struct inet6_dev *)table->extra1);
4330
4331	rtnl_unlock();
4332	return 0;
4333}
4334
4335static
4336int addrconf_sysctl_disable(ctl_table *ctl, int write,
4337			    void __user *buffer, size_t *lenp, loff_t *ppos)
4338{
4339	int *valp = ctl->data;
4340	int val = *valp;
4341	loff_t pos = *ppos;
4342	ctl_table lctl;
4343	int ret;
4344
4345	/*
4346	 * ctl->data points to idev->cnf.disable_ipv6, we should
4347	 * not modify it until we get the rtnl lock.
4348	 */
4349	lctl = *ctl;
4350	lctl.data = &val;
4351
4352	ret = proc_dointvec(&lctl, write, buffer, lenp, ppos);
4353
4354	if (write)
4355		ret = addrconf_disable_ipv6(ctl, valp, val);
4356	if (ret)
4357		*ppos = pos;
4358	return ret;
4359}
4360
4361static struct addrconf_sysctl_table
4362{
4363	struct ctl_table_header *sysctl_header;
4364	ctl_table addrconf_vars[DEVCONF_MAX+1];
 
4365} addrconf_sysctl __read_mostly = {
4366	.sysctl_header = NULL,
4367	.addrconf_vars = {
4368		{
4369			.procname	= "forwarding",
4370			.data		= &ipv6_devconf.forwarding,
4371			.maxlen		= sizeof(int),
4372			.mode		= 0644,
4373			.proc_handler	= addrconf_sysctl_forward,
4374		},
4375		{
4376			.procname	= "hop_limit",
4377			.data		= &ipv6_devconf.hop_limit,
4378			.maxlen		= sizeof(int),
4379			.mode		= 0644,
4380			.proc_handler	= proc_dointvec,
4381		},
4382		{
4383			.procname	= "mtu",
4384			.data		= &ipv6_devconf.mtu6,
4385			.maxlen		= sizeof(int),
4386			.mode		= 0644,
4387			.proc_handler	= proc_dointvec,
4388		},
4389		{
4390			.procname	= "accept_ra",
4391			.data		= &ipv6_devconf.accept_ra,
4392			.maxlen		= sizeof(int),
4393			.mode		= 0644,
4394			.proc_handler	= proc_dointvec,
4395		},
4396		{
4397			.procname	= "accept_redirects",
4398			.data		= &ipv6_devconf.accept_redirects,
4399			.maxlen		= sizeof(int),
4400			.mode		= 0644,
4401			.proc_handler	= proc_dointvec,
4402		},
4403		{
4404			.procname	= "autoconf",
4405			.data		= &ipv6_devconf.autoconf,
4406			.maxlen		= sizeof(int),
4407			.mode		= 0644,
4408			.proc_handler	= proc_dointvec,
4409		},
4410		{
4411			.procname	= "dad_transmits",
4412			.data		= &ipv6_devconf.dad_transmits,
4413			.maxlen		= sizeof(int),
4414			.mode		= 0644,
4415			.proc_handler	= proc_dointvec,
4416		},
4417		{
4418			.procname	= "router_solicitations",
4419			.data		= &ipv6_devconf.rtr_solicits,
4420			.maxlen		= sizeof(int),
4421			.mode		= 0644,
4422			.proc_handler	= proc_dointvec,
4423		},
4424		{
4425			.procname	= "router_solicitation_interval",
4426			.data		= &ipv6_devconf.rtr_solicit_interval,
4427			.maxlen		= sizeof(int),
4428			.mode		= 0644,
4429			.proc_handler	= proc_dointvec_jiffies,
4430		},
4431		{
4432			.procname	= "router_solicitation_delay",
4433			.data		= &ipv6_devconf.rtr_solicit_delay,
4434			.maxlen		= sizeof(int),
4435			.mode		= 0644,
4436			.proc_handler	= proc_dointvec_jiffies,
4437		},
4438		{
4439			.procname	= "force_mld_version",
4440			.data		= &ipv6_devconf.force_mld_version,
4441			.maxlen		= sizeof(int),
4442			.mode		= 0644,
4443			.proc_handler	= proc_dointvec,
4444		},
4445#ifdef CONFIG_IPV6_PRIVACY
4446		{
4447			.procname	= "use_tempaddr",
4448			.data		= &ipv6_devconf.use_tempaddr,
4449			.maxlen		= sizeof(int),
4450			.mode		= 0644,
4451			.proc_handler	= proc_dointvec,
4452		},
4453		{
4454			.procname	= "temp_valid_lft",
4455			.data		= &ipv6_devconf.temp_valid_lft,
4456			.maxlen		= sizeof(int),
4457			.mode		= 0644,
4458			.proc_handler	= proc_dointvec,
4459		},
4460		{
4461			.procname	= "temp_prefered_lft",
4462			.data		= &ipv6_devconf.temp_prefered_lft,
4463			.maxlen		= sizeof(int),
4464			.mode		= 0644,
4465			.proc_handler	= proc_dointvec,
4466		},
4467		{
4468			.procname	= "regen_max_retry",
4469			.data		= &ipv6_devconf.regen_max_retry,
4470			.maxlen		= sizeof(int),
4471			.mode		= 0644,
4472			.proc_handler	= proc_dointvec,
4473		},
4474		{
4475			.procname	= "max_desync_factor",
4476			.data		= &ipv6_devconf.max_desync_factor,
4477			.maxlen		= sizeof(int),
4478			.mode		= 0644,
4479			.proc_handler	= proc_dointvec,
4480		},
4481#endif
4482		{
4483			.procname	= "max_addresses",
4484			.data		= &ipv6_devconf.max_addresses,
4485			.maxlen		= sizeof(int),
4486			.mode		= 0644,
4487			.proc_handler	= proc_dointvec,
4488		},
4489		{
4490			.procname	= "accept_ra_defrtr",
4491			.data		= &ipv6_devconf.accept_ra_defrtr,
4492			.maxlen		= sizeof(int),
4493			.mode		= 0644,
4494			.proc_handler	= proc_dointvec,
4495		},
4496		{
4497			.procname	= "accept_ra_pinfo",
4498			.data		= &ipv6_devconf.accept_ra_pinfo,
4499			.maxlen		= sizeof(int),
4500			.mode		= 0644,
4501			.proc_handler	= proc_dointvec,
4502		},
4503#ifdef CONFIG_IPV6_ROUTER_PREF
4504		{
4505			.procname	= "accept_ra_rtr_pref",
4506			.data		= &ipv6_devconf.accept_ra_rtr_pref,
4507			.maxlen		= sizeof(int),
4508			.mode		= 0644,
4509			.proc_handler	= proc_dointvec,
4510		},
4511		{
4512			.procname	= "router_probe_interval",
4513			.data		= &ipv6_devconf.rtr_probe_interval,
4514			.maxlen		= sizeof(int),
4515			.mode		= 0644,
4516			.proc_handler	= proc_dointvec_jiffies,
4517		},
4518#ifdef CONFIG_IPV6_ROUTE_INFO
4519		{
4520			.procname	= "accept_ra_rt_info_max_plen",
4521			.data		= &ipv6_devconf.accept_ra_rt_info_max_plen,
4522			.maxlen		= sizeof(int),
4523			.mode		= 0644,
4524			.proc_handler	= proc_dointvec,
4525		},
4526#endif
4527#endif
4528		{
4529			.procname	= "proxy_ndp",
4530			.data		= &ipv6_devconf.proxy_ndp,
4531			.maxlen		= sizeof(int),
4532			.mode		= 0644,
4533			.proc_handler	= proc_dointvec,
4534		},
4535		{
4536			.procname	= "accept_source_route",
4537			.data		= &ipv6_devconf.accept_source_route,
4538			.maxlen		= sizeof(int),
4539			.mode		= 0644,
4540			.proc_handler	= proc_dointvec,
4541		},
4542#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
4543		{
4544			.procname       = "optimistic_dad",
4545			.data           = &ipv6_devconf.optimistic_dad,
4546			.maxlen         = sizeof(int),
4547			.mode           = 0644,
4548			.proc_handler   = proc_dointvec,
4549
4550		},
4551#endif
4552#ifdef CONFIG_IPV6_MROUTE
4553		{
4554			.procname	= "mc_forwarding",
4555			.data		= &ipv6_devconf.mc_forwarding,
4556			.maxlen		= sizeof(int),
4557			.mode		= 0444,
4558			.proc_handler	= proc_dointvec,
4559		},
4560#endif
4561		{
4562			.procname	= "disable_ipv6",
4563			.data		= &ipv6_devconf.disable_ipv6,
4564			.maxlen		= sizeof(int),
4565			.mode		= 0644,
4566			.proc_handler	= addrconf_sysctl_disable,
4567		},
4568		{
4569			.procname	= "accept_dad",
4570			.data		= &ipv6_devconf.accept_dad,
4571			.maxlen		= sizeof(int),
4572			.mode		= 0644,
4573			.proc_handler	= proc_dointvec,
4574		},
4575		{
4576			.procname       = "force_tllao",
4577			.data           = &ipv6_devconf.force_tllao,
4578			.maxlen         = sizeof(int),
4579			.mode           = 0644,
4580			.proc_handler   = proc_dointvec
4581		},
4582		{
4583			/* sentinel */
4584		}
4585	},
4586};
4587
4588static int __addrconf_sysctl_register(struct net *net, char *dev_name,
4589		struct inet6_dev *idev, struct ipv6_devconf *p)
4590{
4591	int i;
4592	struct addrconf_sysctl_table *t;
4593	char path[sizeof("net/ipv6/conf/") + IFNAMSIZ];
 
 
 
 
 
 
 
 
 
 
4594
4595	t = kmemdup(&addrconf_sysctl, sizeof(*t), GFP_KERNEL);
4596	if (t == NULL)
4597		goto out;
4598
4599	for (i = 0; t->addrconf_vars[i].data; i++) {
4600		t->addrconf_vars[i].data += (char *)p - (char *)&ipv6_devconf;
4601		t->addrconf_vars[i].extra1 = idev; /* embedded; no ref */
4602		t->addrconf_vars[i].extra2 = net;
4603	}
4604
4605	snprintf(path, sizeof(path), "net/ipv6/conf/%s", dev_name);
 
 
 
 
 
 
 
4606
4607	t->sysctl_header = register_net_sysctl(net, path, t->addrconf_vars);
 
 
 
4608	if (t->sysctl_header == NULL)
4609		goto free;
4610
4611	p->sysctl = t;
4612	return 0;
4613
 
 
4614free:
4615	kfree(t);
4616out:
4617	return -ENOBUFS;
4618}
4619
4620static void __addrconf_sysctl_unregister(struct ipv6_devconf *p)
4621{
4622	struct addrconf_sysctl_table *t;
4623
4624	if (p->sysctl == NULL)
4625		return;
4626
4627	t = p->sysctl;
4628	p->sysctl = NULL;
4629	unregister_net_sysctl_table(t->sysctl_header);
 
4630	kfree(t);
4631}
4632
4633static void addrconf_sysctl_register(struct inet6_dev *idev)
4634{
4635	neigh_sysctl_register(idev->dev, idev->nd_parms, "ipv6",
4636			      &ndisc_ifinfo_sysctl_change);
4637	__addrconf_sysctl_register(dev_net(idev->dev), idev->dev->name,
4638					idev, &idev->cnf);
4639}
4640
4641static void addrconf_sysctl_unregister(struct inet6_dev *idev)
4642{
4643	__addrconf_sysctl_unregister(&idev->cnf);
4644	neigh_sysctl_unregister(idev->nd_parms);
4645}
4646
4647
4648#endif
4649
4650static int __net_init addrconf_init_net(struct net *net)
4651{
4652	int err;
4653	struct ipv6_devconf *all, *dflt;
4654
4655	err = -ENOMEM;
4656	all = &ipv6_devconf;
4657	dflt = &ipv6_devconf_dflt;
4658
4659	if (!net_eq(net, &init_net)) {
4660		all = kmemdup(all, sizeof(ipv6_devconf), GFP_KERNEL);
4661		if (all == NULL)
4662			goto err_alloc_all;
4663
4664		dflt = kmemdup(dflt, sizeof(ipv6_devconf_dflt), GFP_KERNEL);
4665		if (dflt == NULL)
4666			goto err_alloc_dflt;
4667	} else {
4668		/* these will be inherited by all namespaces */
4669		dflt->autoconf = ipv6_defaults.autoconf;
4670		dflt->disable_ipv6 = ipv6_defaults.disable_ipv6;
4671	}
4672
4673	net->ipv6.devconf_all = all;
4674	net->ipv6.devconf_dflt = dflt;
4675
4676#ifdef CONFIG_SYSCTL
4677	err = __addrconf_sysctl_register(net, "all", NULL, all);
4678	if (err < 0)
4679		goto err_reg_all;
4680
4681	err = __addrconf_sysctl_register(net, "default", NULL, dflt);
4682	if (err < 0)
4683		goto err_reg_dflt;
4684#endif
4685	return 0;
4686
4687#ifdef CONFIG_SYSCTL
4688err_reg_dflt:
4689	__addrconf_sysctl_unregister(all);
4690err_reg_all:
4691	kfree(dflt);
4692#endif
4693err_alloc_dflt:
4694	kfree(all);
4695err_alloc_all:
4696	return err;
4697}
4698
4699static void __net_exit addrconf_exit_net(struct net *net)
4700{
4701#ifdef CONFIG_SYSCTL
4702	__addrconf_sysctl_unregister(net->ipv6.devconf_dflt);
4703	__addrconf_sysctl_unregister(net->ipv6.devconf_all);
4704#endif
4705	if (!net_eq(net, &init_net)) {
4706		kfree(net->ipv6.devconf_dflt);
4707		kfree(net->ipv6.devconf_all);
4708	}
4709}
4710
4711static struct pernet_operations addrconf_ops = {
4712	.init = addrconf_init_net,
4713	.exit = addrconf_exit_net,
4714};
4715
4716/*
4717 *      Device notifier
4718 */
4719
4720int register_inet6addr_notifier(struct notifier_block *nb)
4721{
4722	return atomic_notifier_chain_register(&inet6addr_chain, nb);
4723}
4724EXPORT_SYMBOL(register_inet6addr_notifier);
4725
4726int unregister_inet6addr_notifier(struct notifier_block *nb)
4727{
4728	return atomic_notifier_chain_unregister(&inet6addr_chain, nb);
4729}
4730EXPORT_SYMBOL(unregister_inet6addr_notifier);
4731
4732static struct rtnl_af_ops inet6_ops = {
4733	.family		  = AF_INET6,
4734	.fill_link_af	  = inet6_fill_link_af,
4735	.get_link_af_size = inet6_get_link_af_size,
4736};
4737
4738/*
4739 *	Init / cleanup code
4740 */
4741
4742int __init addrconf_init(void)
4743{
4744	int i, err;
4745
4746	err = ipv6_addr_label_init();
4747	if (err < 0) {
4748		pr_crit("%s: cannot initialize default policy table: %d\n",
4749			__func__, err);
4750		goto out;
4751	}
4752
4753	err = register_pernet_subsys(&addrconf_ops);
4754	if (err < 0)
4755		goto out_addrlabel;
4756
4757	/* The addrconf netdev notifier requires that loopback_dev
4758	 * has it's ipv6 private information allocated and setup
4759	 * before it can bring up and give link-local addresses
4760	 * to other devices which are up.
4761	 *
4762	 * Unfortunately, loopback_dev is not necessarily the first
4763	 * entry in the global dev_base list of net devices.  In fact,
4764	 * it is likely to be the very last entry on that list.
4765	 * So this causes the notifier registry below to try and
4766	 * give link-local addresses to all devices besides loopback_dev
4767	 * first, then loopback_dev, which cases all the non-loopback_dev
4768	 * devices to fail to get a link-local address.
4769	 *
4770	 * So, as a temporary fix, allocate the ipv6 structure for
4771	 * loopback_dev first by hand.
4772	 * Longer term, all of the dependencies ipv6 has upon the loopback
4773	 * device and it being up should be removed.
4774	 */
4775	rtnl_lock();
4776	if (!ipv6_add_dev(init_net.loopback_dev))
4777		err = -ENOMEM;
4778	rtnl_unlock();
4779	if (err)
4780		goto errlo;
4781
4782	for (i = 0; i < IN6_ADDR_HSIZE; i++)
4783		INIT_HLIST_HEAD(&inet6_addr_lst[i]);
4784
4785	register_netdevice_notifier(&ipv6_dev_notf);
4786
4787	addrconf_verify(0);
4788
4789	err = rtnl_af_register(&inet6_ops);
4790	if (err < 0)
4791		goto errout_af;
4792
4793	err = __rtnl_register(PF_INET6, RTM_GETLINK, NULL, inet6_dump_ifinfo,
4794			      NULL);
4795	if (err < 0)
4796		goto errout;
4797
4798	/* Only the first call to __rtnl_register can fail */
4799	__rtnl_register(PF_INET6, RTM_NEWADDR, inet6_rtm_newaddr, NULL, NULL);
4800	__rtnl_register(PF_INET6, RTM_DELADDR, inet6_rtm_deladdr, NULL, NULL);
4801	__rtnl_register(PF_INET6, RTM_GETADDR, inet6_rtm_getaddr,
4802			inet6_dump_ifaddr, NULL);
4803	__rtnl_register(PF_INET6, RTM_GETMULTICAST, NULL,
4804			inet6_dump_ifmcaddr, NULL);
4805	__rtnl_register(PF_INET6, RTM_GETANYCAST, NULL,
4806			inet6_dump_ifacaddr, NULL);
4807
4808	ipv6_addr_label_rtnl_register();
4809
4810	return 0;
4811errout:
4812	rtnl_af_unregister(&inet6_ops);
4813errout_af:
4814	unregister_netdevice_notifier(&ipv6_dev_notf);
4815errlo:
4816	unregister_pernet_subsys(&addrconf_ops);
4817out_addrlabel:
4818	ipv6_addr_label_cleanup();
4819out:
4820	return err;
4821}
4822
4823void addrconf_cleanup(void)
4824{
4825	struct net_device *dev;
4826	int i;
4827
4828	unregister_netdevice_notifier(&ipv6_dev_notf);
4829	unregister_pernet_subsys(&addrconf_ops);
4830	ipv6_addr_label_cleanup();
4831
4832	rtnl_lock();
4833
4834	__rtnl_af_unregister(&inet6_ops);
4835
4836	/* clean dev list */
4837	for_each_netdev(&init_net, dev) {
4838		if (__in6_dev_get(dev) == NULL)
4839			continue;
4840		addrconf_ifdown(dev, 1);
4841	}
4842	addrconf_ifdown(init_net.loopback_dev, 2);
4843
4844	/*
4845	 *	Check hash table.
4846	 */
4847	spin_lock_bh(&addrconf_hash_lock);
4848	for (i = 0; i < IN6_ADDR_HSIZE; i++)
4849		WARN_ON(!hlist_empty(&inet6_addr_lst[i]));
4850	spin_unlock_bh(&addrconf_hash_lock);
4851
4852	del_timer(&addr_chk_timer);
4853	rtnl_unlock();
4854}
v3.1
   1/*
   2 *	IPv6 Address [auto]configuration
   3 *	Linux INET6 implementation
   4 *
   5 *	Authors:
   6 *	Pedro Roque		<roque@di.fc.ul.pt>
   7 *	Alexey Kuznetsov	<kuznet@ms2.inr.ac.ru>
   8 *
   9 *	This program is free software; you can redistribute it and/or
  10 *      modify it under the terms of the GNU General Public License
  11 *      as published by the Free Software Foundation; either version
  12 *      2 of the License, or (at your option) any later version.
  13 */
  14
  15/*
  16 *	Changes:
  17 *
  18 *	Janos Farkas			:	delete timer on ifdown
  19 *	<chexum@bankinf.banki.hu>
  20 *	Andi Kleen			:	kill double kfree on module
  21 *						unload.
  22 *	Maciej W. Rozycki		:	FDDI support
  23 *	sekiya@USAGI			:	Don't send too many RS
  24 *						packets.
  25 *	yoshfuji@USAGI			:       Fixed interval between DAD
  26 *						packets.
  27 *	YOSHIFUJI Hideaki @USAGI	:	improved accuracy of
  28 *						address validation timer.
  29 *	YOSHIFUJI Hideaki @USAGI	:	Privacy Extensions (RFC3041)
  30 *						support.
  31 *	Yuji SEKIYA @USAGI		:	Don't assign a same IPv6
  32 *						address on a same interface.
  33 *	YOSHIFUJI Hideaki @USAGI	:	ARCnet support
  34 *	YOSHIFUJI Hideaki @USAGI	:	convert /proc/net/if_inet6 to
  35 *						seq_file.
  36 *	YOSHIFUJI Hideaki @USAGI	:	improved source address
  37 *						selection; consider scope,
  38 *						status etc.
  39 */
  40
 
 
  41#include <linux/errno.h>
  42#include <linux/types.h>
  43#include <linux/kernel.h>
  44#include <linux/socket.h>
  45#include <linux/sockios.h>
  46#include <linux/net.h>
  47#include <linux/in6.h>
  48#include <linux/netdevice.h>
  49#include <linux/if_addr.h>
  50#include <linux/if_arp.h>
  51#include <linux/if_arcnet.h>
  52#include <linux/if_infiniband.h>
  53#include <linux/route.h>
  54#include <linux/inetdevice.h>
  55#include <linux/init.h>
  56#include <linux/slab.h>
  57#ifdef CONFIG_SYSCTL
  58#include <linux/sysctl.h>
  59#endif
  60#include <linux/capability.h>
  61#include <linux/delay.h>
  62#include <linux/notifier.h>
  63#include <linux/string.h>
  64
  65#include <net/net_namespace.h>
  66#include <net/sock.h>
  67#include <net/snmp.h>
  68
 
  69#include <net/ipv6.h>
  70#include <net/protocol.h>
  71#include <net/ndisc.h>
  72#include <net/ip6_route.h>
  73#include <net/addrconf.h>
  74#include <net/tcp.h>
  75#include <net/ip.h>
  76#include <net/netlink.h>
  77#include <net/pkt_sched.h>
  78#include <linux/if_tunnel.h>
  79#include <linux/rtnetlink.h>
  80
  81#ifdef CONFIG_IPV6_PRIVACY
  82#include <linux/random.h>
  83#endif
  84
  85#include <linux/uaccess.h>
  86#include <asm/unaligned.h>
  87
  88#include <linux/proc_fs.h>
  89#include <linux/seq_file.h>
 
  90
  91/* Set to 3 to get tracing... */
  92#define ACONF_DEBUG 2
  93
  94#if ACONF_DEBUG >= 3
  95#define ADBG(x) printk x
  96#else
  97#define ADBG(x)
  98#endif
  99
 100#define	INFINITY_LIFE_TIME	0xFFFFFFFF
 101
 102static inline u32 cstamp_delta(unsigned long cstamp)
 103{
 104	return (cstamp - INITIAL_JIFFIES) * 100UL / HZ;
 105}
 106
 107#define ADDRCONF_TIMER_FUZZ_MINUS	(HZ > 50 ? HZ/50 : 1)
 108#define ADDRCONF_TIMER_FUZZ		(HZ / 4)
 109#define ADDRCONF_TIMER_FUZZ_MAX		(HZ)
 110
 111#ifdef CONFIG_SYSCTL
 112static void addrconf_sysctl_register(struct inet6_dev *idev);
 113static void addrconf_sysctl_unregister(struct inet6_dev *idev);
 114#else
 115static inline void addrconf_sysctl_register(struct inet6_dev *idev)
 116{
 117}
 118
 119static inline void addrconf_sysctl_unregister(struct inet6_dev *idev)
 120{
 121}
 122#endif
 123
 124#ifdef CONFIG_IPV6_PRIVACY
 125static int __ipv6_regen_rndid(struct inet6_dev *idev);
 126static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr);
 127static void ipv6_regen_rndid(unsigned long data);
 128#endif
 129
 130static int ipv6_generate_eui64(u8 *eui, struct net_device *dev);
 131static int ipv6_count_addresses(struct inet6_dev *idev);
 132
 133/*
 134 *	Configured unicast address hash table
 135 */
 136static struct hlist_head inet6_addr_lst[IN6_ADDR_HSIZE];
 137static DEFINE_SPINLOCK(addrconf_hash_lock);
 138
 139static void addrconf_verify(unsigned long);
 140
 141static DEFINE_TIMER(addr_chk_timer, addrconf_verify, 0, 0);
 142static DEFINE_SPINLOCK(addrconf_verify_lock);
 143
 144static void addrconf_join_anycast(struct inet6_ifaddr *ifp);
 145static void addrconf_leave_anycast(struct inet6_ifaddr *ifp);
 146
 147static void addrconf_type_change(struct net_device *dev,
 148				 unsigned long event);
 149static int addrconf_ifdown(struct net_device *dev, int how);
 150
 151static void addrconf_dad_start(struct inet6_ifaddr *ifp, u32 flags);
 152static void addrconf_dad_timer(unsigned long data);
 153static void addrconf_dad_completed(struct inet6_ifaddr *ifp);
 154static void addrconf_dad_run(struct inet6_dev *idev);
 155static void addrconf_rs_timer(unsigned long data);
 156static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
 157static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
 158
 159static void inet6_prefix_notify(int event, struct inet6_dev *idev,
 160				struct prefix_info *pinfo);
 161static bool ipv6_chk_same_addr(struct net *net, const struct in6_addr *addr,
 162			       struct net_device *dev);
 163
 164static ATOMIC_NOTIFIER_HEAD(inet6addr_chain);
 165
 166static struct ipv6_devconf ipv6_devconf __read_mostly = {
 167	.forwarding		= 0,
 168	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
 169	.mtu6			= IPV6_MIN_MTU,
 170	.accept_ra		= 1,
 171	.accept_redirects	= 1,
 172	.autoconf		= 1,
 173	.force_mld_version	= 0,
 174	.dad_transmits		= 1,
 175	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
 176	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
 177	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
 178#ifdef CONFIG_IPV6_PRIVACY
 179	.use_tempaddr 		= 0,
 180	.temp_valid_lft		= TEMP_VALID_LIFETIME,
 181	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
 182	.regen_max_retry	= REGEN_MAX_RETRY,
 183	.max_desync_factor	= MAX_DESYNC_FACTOR,
 184#endif
 185	.max_addresses		= IPV6_MAX_ADDRESSES,
 186	.accept_ra_defrtr	= 1,
 187	.accept_ra_pinfo	= 1,
 188#ifdef CONFIG_IPV6_ROUTER_PREF
 189	.accept_ra_rtr_pref	= 1,
 190	.rtr_probe_interval	= 60 * HZ,
 191#ifdef CONFIG_IPV6_ROUTE_INFO
 192	.accept_ra_rt_info_max_plen = 0,
 193#endif
 194#endif
 195	.proxy_ndp		= 0,
 196	.accept_source_route	= 0,	/* we do not accept RH0 by default. */
 197	.disable_ipv6		= 0,
 198	.accept_dad		= 1,
 199};
 200
 201static struct ipv6_devconf ipv6_devconf_dflt __read_mostly = {
 202	.forwarding		= 0,
 203	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
 204	.mtu6			= IPV6_MIN_MTU,
 205	.accept_ra		= 1,
 206	.accept_redirects	= 1,
 207	.autoconf		= 1,
 208	.dad_transmits		= 1,
 209	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
 210	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
 211	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
 212#ifdef CONFIG_IPV6_PRIVACY
 213	.use_tempaddr		= 0,
 214	.temp_valid_lft		= TEMP_VALID_LIFETIME,
 215	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
 216	.regen_max_retry	= REGEN_MAX_RETRY,
 217	.max_desync_factor	= MAX_DESYNC_FACTOR,
 218#endif
 219	.max_addresses		= IPV6_MAX_ADDRESSES,
 220	.accept_ra_defrtr	= 1,
 221	.accept_ra_pinfo	= 1,
 222#ifdef CONFIG_IPV6_ROUTER_PREF
 223	.accept_ra_rtr_pref	= 1,
 224	.rtr_probe_interval	= 60 * HZ,
 225#ifdef CONFIG_IPV6_ROUTE_INFO
 226	.accept_ra_rt_info_max_plen = 0,
 227#endif
 228#endif
 229	.proxy_ndp		= 0,
 230	.accept_source_route	= 0,	/* we do not accept RH0 by default. */
 231	.disable_ipv6		= 0,
 232	.accept_dad		= 1,
 233};
 234
 235/* IPv6 Wildcard Address and Loopback Address defined by RFC2553 */
 236const struct in6_addr in6addr_any = IN6ADDR_ANY_INIT;
 237const struct in6_addr in6addr_loopback = IN6ADDR_LOOPBACK_INIT;
 238const struct in6_addr in6addr_linklocal_allnodes = IN6ADDR_LINKLOCAL_ALLNODES_INIT;
 239const struct in6_addr in6addr_linklocal_allrouters = IN6ADDR_LINKLOCAL_ALLROUTERS_INIT;
 240
 241/* Check if a valid qdisc is available */
 242static inline bool addrconf_qdisc_ok(const struct net_device *dev)
 243{
 244	return !qdisc_tx_is_noop(dev);
 245}
 246
 247/* Check if a route is valid prefix route */
 248static inline int addrconf_is_prefix_route(const struct rt6_info *rt)
 249{
 250	return (rt->rt6i_flags & (RTF_GATEWAY | RTF_DEFAULT)) == 0;
 251}
 252
 253static void addrconf_del_timer(struct inet6_ifaddr *ifp)
 254{
 255	if (del_timer(&ifp->timer))
 256		__in6_ifa_put(ifp);
 257}
 258
 259enum addrconf_timer_t {
 260	AC_NONE,
 261	AC_DAD,
 262	AC_RS,
 263};
 264
 265static void addrconf_mod_timer(struct inet6_ifaddr *ifp,
 266			       enum addrconf_timer_t what,
 267			       unsigned long when)
 268{
 269	if (!del_timer(&ifp->timer))
 270		in6_ifa_hold(ifp);
 271
 272	switch (what) {
 273	case AC_DAD:
 274		ifp->timer.function = addrconf_dad_timer;
 275		break;
 276	case AC_RS:
 277		ifp->timer.function = addrconf_rs_timer;
 278		break;
 279	default:
 280		break;
 281	}
 282	ifp->timer.expires = jiffies + when;
 283	add_timer(&ifp->timer);
 284}
 285
 286static int snmp6_alloc_dev(struct inet6_dev *idev)
 287{
 288	if (snmp_mib_init((void __percpu **)idev->stats.ipv6,
 289			  sizeof(struct ipstats_mib),
 290			  __alignof__(struct ipstats_mib)) < 0)
 291		goto err_ip;
 292	idev->stats.icmpv6dev = kzalloc(sizeof(struct icmpv6_mib_device),
 293					GFP_KERNEL);
 294	if (!idev->stats.icmpv6dev)
 295		goto err_icmp;
 296	idev->stats.icmpv6msgdev = kzalloc(sizeof(struct icmpv6msg_mib_device),
 297					   GFP_KERNEL);
 298	if (!idev->stats.icmpv6msgdev)
 299		goto err_icmpmsg;
 300
 301	return 0;
 302
 303err_icmpmsg:
 304	kfree(idev->stats.icmpv6dev);
 305err_icmp:
 306	snmp_mib_free((void __percpu **)idev->stats.ipv6);
 307err_ip:
 308	return -ENOMEM;
 309}
 310
 311static void snmp6_free_dev(struct inet6_dev *idev)
 312{
 313	kfree(idev->stats.icmpv6msgdev);
 314	kfree(idev->stats.icmpv6dev);
 315	snmp_mib_free((void __percpu **)idev->stats.ipv6);
 316}
 317
 318/* Nobody refers to this device, we may destroy it. */
 319
 320void in6_dev_finish_destroy(struct inet6_dev *idev)
 321{
 322	struct net_device *dev = idev->dev;
 323
 324	WARN_ON(!list_empty(&idev->addr_list));
 325	WARN_ON(idev->mc_list != NULL);
 326
 327#ifdef NET_REFCNT_DEBUG
 328	printk(KERN_DEBUG "in6_dev_finish_destroy: %s\n", dev ? dev->name : "NIL");
 329#endif
 330	dev_put(dev);
 331	if (!idev->dead) {
 332		pr_warning("Freeing alive inet6 device %p\n", idev);
 333		return;
 334	}
 335	snmp6_free_dev(idev);
 336	kfree_rcu(idev, rcu);
 337}
 338
 339EXPORT_SYMBOL(in6_dev_finish_destroy);
 340
 341static struct inet6_dev * ipv6_add_dev(struct net_device *dev)
 342{
 343	struct inet6_dev *ndev;
 344
 345	ASSERT_RTNL();
 346
 347	if (dev->mtu < IPV6_MIN_MTU)
 348		return NULL;
 349
 350	ndev = kzalloc(sizeof(struct inet6_dev), GFP_KERNEL);
 351
 352	if (ndev == NULL)
 353		return NULL;
 354
 355	rwlock_init(&ndev->lock);
 356	ndev->dev = dev;
 357	INIT_LIST_HEAD(&ndev->addr_list);
 358
 359	memcpy(&ndev->cnf, dev_net(dev)->ipv6.devconf_dflt, sizeof(ndev->cnf));
 360	ndev->cnf.mtu6 = dev->mtu;
 361	ndev->cnf.sysctl = NULL;
 362	ndev->nd_parms = neigh_parms_alloc(dev, &nd_tbl);
 363	if (ndev->nd_parms == NULL) {
 364		kfree(ndev);
 365		return NULL;
 366	}
 367	if (ndev->cnf.forwarding)
 368		dev_disable_lro(dev);
 369	/* We refer to the device */
 370	dev_hold(dev);
 371
 372	if (snmp6_alloc_dev(ndev) < 0) {
 373		ADBG((KERN_WARNING
 374			"%s(): cannot allocate memory for statistics; dev=%s.\n",
 375			__func__, dev->name));
 376		neigh_parms_release(&nd_tbl, ndev->nd_parms);
 377		dev_put(dev);
 378		kfree(ndev);
 379		return NULL;
 380	}
 381
 382	if (snmp6_register_dev(ndev) < 0) {
 383		ADBG((KERN_WARNING
 384			"%s(): cannot create /proc/net/dev_snmp6/%s\n",
 385			__func__, dev->name));
 386		neigh_parms_release(&nd_tbl, ndev->nd_parms);
 387		ndev->dead = 1;
 388		in6_dev_finish_destroy(ndev);
 389		return NULL;
 390	}
 391
 392	/* One reference from device.  We must do this before
 393	 * we invoke __ipv6_regen_rndid().
 394	 */
 395	in6_dev_hold(ndev);
 396
 397	if (dev->flags & (IFF_NOARP | IFF_LOOPBACK))
 398		ndev->cnf.accept_dad = -1;
 399
 400#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
 401	if (dev->type == ARPHRD_SIT && (dev->priv_flags & IFF_ISATAP)) {
 402		printk(KERN_INFO
 403		       "%s: Disabled Multicast RS\n",
 404		       dev->name);
 405		ndev->cnf.rtr_solicits = 0;
 406	}
 407#endif
 408
 409#ifdef CONFIG_IPV6_PRIVACY
 410	INIT_LIST_HEAD(&ndev->tempaddr_list);
 411	setup_timer(&ndev->regen_timer, ipv6_regen_rndid, (unsigned long)ndev);
 412	if ((dev->flags&IFF_LOOPBACK) ||
 413	    dev->type == ARPHRD_TUNNEL ||
 414	    dev->type == ARPHRD_TUNNEL6 ||
 415	    dev->type == ARPHRD_SIT ||
 416	    dev->type == ARPHRD_NONE) {
 417		ndev->cnf.use_tempaddr = -1;
 418	} else {
 419		in6_dev_hold(ndev);
 420		ipv6_regen_rndid((unsigned long) ndev);
 421	}
 422#endif
 423
 424	if (netif_running(dev) && addrconf_qdisc_ok(dev))
 425		ndev->if_flags |= IF_READY;
 426
 427	ipv6_mc_init_dev(ndev);
 428	ndev->tstamp = jiffies;
 429	addrconf_sysctl_register(ndev);
 430	/* protected by rtnl_lock */
 431	rcu_assign_pointer(dev->ip6_ptr, ndev);
 432
 433	/* Join all-node multicast group */
 434	ipv6_dev_mc_inc(dev, &in6addr_linklocal_allnodes);
 435
 
 
 
 
 436	return ndev;
 437}
 438
 439static struct inet6_dev * ipv6_find_idev(struct net_device *dev)
 440{
 441	struct inet6_dev *idev;
 442
 443	ASSERT_RTNL();
 444
 445	idev = __in6_dev_get(dev);
 446	if (!idev) {
 447		idev = ipv6_add_dev(dev);
 448		if (!idev)
 449			return NULL;
 450	}
 451
 452	if (dev->flags&IFF_UP)
 453		ipv6_mc_up(idev);
 454	return idev;
 455}
 456
 457#ifdef CONFIG_SYSCTL
 458static void dev_forward_change(struct inet6_dev *idev)
 459{
 460	struct net_device *dev;
 461	struct inet6_ifaddr *ifa;
 462
 463	if (!idev)
 464		return;
 465	dev = idev->dev;
 466	if (idev->cnf.forwarding)
 467		dev_disable_lro(dev);
 468	if (dev && (dev->flags & IFF_MULTICAST)) {
 469		if (idev->cnf.forwarding)
 470			ipv6_dev_mc_inc(dev, &in6addr_linklocal_allrouters);
 471		else
 472			ipv6_dev_mc_dec(dev, &in6addr_linklocal_allrouters);
 473	}
 474
 475	list_for_each_entry(ifa, &idev->addr_list, if_list) {
 476		if (ifa->flags&IFA_F_TENTATIVE)
 477			continue;
 478		if (idev->cnf.forwarding)
 479			addrconf_join_anycast(ifa);
 480		else
 481			addrconf_leave_anycast(ifa);
 482	}
 483}
 484
 485
 486static void addrconf_forward_change(struct net *net, __s32 newf)
 487{
 488	struct net_device *dev;
 489	struct inet6_dev *idev;
 490
 491	rcu_read_lock();
 492	for_each_netdev_rcu(net, dev) {
 493		idev = __in6_dev_get(dev);
 494		if (idev) {
 495			int changed = (!idev->cnf.forwarding) ^ (!newf);
 496			idev->cnf.forwarding = newf;
 497			if (changed)
 498				dev_forward_change(idev);
 499		}
 500	}
 501	rcu_read_unlock();
 502}
 503
 504static int addrconf_fixup_forwarding(struct ctl_table *table, int *p, int old)
 505{
 506	struct net *net;
 
 
 
 
 507
 508	net = (struct net *)table->extra2;
 509	if (p == &net->ipv6.devconf_dflt->forwarding)
 
 
 
 
 510		return 0;
 511
 512	if (!rtnl_trylock()) {
 513		/* Restore the original values before restarting */
 514		*p = old;
 515		return restart_syscall();
 516	}
 517
 518	if (p == &net->ipv6.devconf_all->forwarding) {
 519		__s32 newf = net->ipv6.devconf_all->forwarding;
 520		net->ipv6.devconf_dflt->forwarding = newf;
 521		addrconf_forward_change(net, newf);
 522	} else if ((!*p) ^ (!old))
 523		dev_forward_change((struct inet6_dev *)table->extra1);
 524	rtnl_unlock();
 525
 526	if (*p)
 527		rt6_purge_dflt_routers(net);
 528	return 1;
 529}
 530#endif
 531
 532/* Nobody refers to this ifaddr, destroy it */
 533void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp)
 534{
 535	WARN_ON(!hlist_unhashed(&ifp->addr_lst));
 536
 537#ifdef NET_REFCNT_DEBUG
 538	printk(KERN_DEBUG "inet6_ifa_finish_destroy\n");
 539#endif
 540
 541	in6_dev_put(ifp->idev);
 542
 543	if (del_timer(&ifp->timer))
 544		pr_notice("Timer is still running, when freeing ifa=%p\n", ifp);
 545
 546	if (ifp->state != INET6_IFADDR_STATE_DEAD) {
 547		pr_warning("Freeing alive inet6 address %p\n", ifp);
 548		return;
 549	}
 550	dst_release(&ifp->rt->dst);
 551
 552	kfree_rcu(ifp, rcu);
 553}
 554
 555static void
 556ipv6_link_dev_addr(struct inet6_dev *idev, struct inet6_ifaddr *ifp)
 557{
 558	struct list_head *p;
 559	int ifp_scope = ipv6_addr_src_scope(&ifp->addr);
 560
 561	/*
 562	 * Each device address list is sorted in order of scope -
 563	 * global before linklocal.
 564	 */
 565	list_for_each(p, &idev->addr_list) {
 566		struct inet6_ifaddr *ifa
 567			= list_entry(p, struct inet6_ifaddr, if_list);
 568		if (ifp_scope >= ipv6_addr_src_scope(&ifa->addr))
 569			break;
 570	}
 571
 572	list_add_tail(&ifp->if_list, p);
 573}
 574
 575static u32 ipv6_addr_hash(const struct in6_addr *addr)
 576{
 577	/*
 578	 * We perform the hash function over the last 64 bits of the address
 579	 * This will include the IEEE address token on links that support it.
 580	 */
 581	return jhash_2words((__force u32)addr->s6_addr32[2],
 582			    (__force u32)addr->s6_addr32[3], 0)
 583		& (IN6_ADDR_HSIZE - 1);
 584}
 585
 586/* On success it returns ifp with increased reference count */
 587
 588static struct inet6_ifaddr *
 589ipv6_add_addr(struct inet6_dev *idev, const struct in6_addr *addr, int pfxlen,
 590	      int scope, u32 flags)
 591{
 592	struct inet6_ifaddr *ifa = NULL;
 593	struct rt6_info *rt;
 594	unsigned int hash;
 595	int err = 0;
 596	int addr_type = ipv6_addr_type(addr);
 597
 598	if (addr_type == IPV6_ADDR_ANY ||
 599	    addr_type & IPV6_ADDR_MULTICAST ||
 600	    (!(idev->dev->flags & IFF_LOOPBACK) &&
 601	     addr_type & IPV6_ADDR_LOOPBACK))
 602		return ERR_PTR(-EADDRNOTAVAIL);
 603
 604	rcu_read_lock_bh();
 605	if (idev->dead) {
 606		err = -ENODEV;			/*XXX*/
 607		goto out2;
 608	}
 609
 610	if (idev->cnf.disable_ipv6) {
 611		err = -EACCES;
 612		goto out2;
 613	}
 614
 615	spin_lock(&addrconf_hash_lock);
 616
 617	/* Ignore adding duplicate addresses on an interface */
 618	if (ipv6_chk_same_addr(dev_net(idev->dev), addr, idev->dev)) {
 619		ADBG(("ipv6_add_addr: already assigned\n"));
 620		err = -EEXIST;
 621		goto out;
 622	}
 623
 624	ifa = kzalloc(sizeof(struct inet6_ifaddr), GFP_ATOMIC);
 625
 626	if (ifa == NULL) {
 627		ADBG(("ipv6_add_addr: malloc failed\n"));
 628		err = -ENOBUFS;
 629		goto out;
 630	}
 631
 632	rt = addrconf_dst_alloc(idev, addr, 0);
 633	if (IS_ERR(rt)) {
 634		err = PTR_ERR(rt);
 635		goto out;
 636	}
 637
 638	ipv6_addr_copy(&ifa->addr, addr);
 639
 640	spin_lock_init(&ifa->lock);
 641	spin_lock_init(&ifa->state_lock);
 642	init_timer(&ifa->timer);
 643	INIT_HLIST_NODE(&ifa->addr_lst);
 644	ifa->timer.data = (unsigned long) ifa;
 645	ifa->scope = scope;
 646	ifa->prefix_len = pfxlen;
 647	ifa->flags = flags | IFA_F_TENTATIVE;
 648	ifa->cstamp = ifa->tstamp = jiffies;
 649
 650	ifa->rt = rt;
 651
 652	/*
 653	 * part one of RFC 4429, section 3.3
 654	 * We should not configure an address as
 655	 * optimistic if we do not yet know the link
 656	 * layer address of our nexhop router
 657	 */
 658
 659	if (dst_get_neighbour_raw(&rt->dst) == NULL)
 660		ifa->flags &= ~IFA_F_OPTIMISTIC;
 661
 662	ifa->idev = idev;
 663	in6_dev_hold(idev);
 664	/* For caller */
 665	in6_ifa_hold(ifa);
 666
 667	/* Add to big hash table */
 668	hash = ipv6_addr_hash(addr);
 669
 670	hlist_add_head_rcu(&ifa->addr_lst, &inet6_addr_lst[hash]);
 671	spin_unlock(&addrconf_hash_lock);
 672
 673	write_lock(&idev->lock);
 674	/* Add to inet6_dev unicast addr list. */
 675	ipv6_link_dev_addr(idev, ifa);
 676
 677#ifdef CONFIG_IPV6_PRIVACY
 678	if (ifa->flags&IFA_F_TEMPORARY) {
 679		list_add(&ifa->tmp_list, &idev->tempaddr_list);
 680		in6_ifa_hold(ifa);
 681	}
 682#endif
 683
 684	in6_ifa_hold(ifa);
 685	write_unlock(&idev->lock);
 686out2:
 687	rcu_read_unlock_bh();
 688
 689	if (likely(err == 0))
 690		atomic_notifier_call_chain(&inet6addr_chain, NETDEV_UP, ifa);
 691	else {
 692		kfree(ifa);
 693		ifa = ERR_PTR(err);
 694	}
 695
 696	return ifa;
 697out:
 698	spin_unlock(&addrconf_hash_lock);
 699	goto out2;
 700}
 701
 702/* This function wants to get referenced ifp and releases it before return */
 703
 704static void ipv6_del_addr(struct inet6_ifaddr *ifp)
 705{
 706	struct inet6_ifaddr *ifa, *ifn;
 707	struct inet6_dev *idev = ifp->idev;
 708	int state;
 709	int deleted = 0, onlink = 0;
 710	unsigned long expires = jiffies;
 711
 712	spin_lock_bh(&ifp->state_lock);
 713	state = ifp->state;
 714	ifp->state = INET6_IFADDR_STATE_DEAD;
 715	spin_unlock_bh(&ifp->state_lock);
 716
 717	if (state == INET6_IFADDR_STATE_DEAD)
 718		goto out;
 719
 720	spin_lock_bh(&addrconf_hash_lock);
 721	hlist_del_init_rcu(&ifp->addr_lst);
 722	spin_unlock_bh(&addrconf_hash_lock);
 723
 724	write_lock_bh(&idev->lock);
 725#ifdef CONFIG_IPV6_PRIVACY
 726	if (ifp->flags&IFA_F_TEMPORARY) {
 727		list_del(&ifp->tmp_list);
 728		if (ifp->ifpub) {
 729			in6_ifa_put(ifp->ifpub);
 730			ifp->ifpub = NULL;
 731		}
 732		__in6_ifa_put(ifp);
 733	}
 734#endif
 735
 736	list_for_each_entry_safe(ifa, ifn, &idev->addr_list, if_list) {
 737		if (ifa == ifp) {
 738			list_del_init(&ifp->if_list);
 739			__in6_ifa_put(ifp);
 740
 741			if (!(ifp->flags & IFA_F_PERMANENT) || onlink > 0)
 742				break;
 743			deleted = 1;
 744			continue;
 745		} else if (ifp->flags & IFA_F_PERMANENT) {
 746			if (ipv6_prefix_equal(&ifa->addr, &ifp->addr,
 747					      ifp->prefix_len)) {
 748				if (ifa->flags & IFA_F_PERMANENT) {
 749					onlink = 1;
 750					if (deleted)
 751						break;
 752				} else {
 753					unsigned long lifetime;
 754
 755					if (!onlink)
 756						onlink = -1;
 757
 758					spin_lock(&ifa->lock);
 759
 760					lifetime = addrconf_timeout_fixup(ifa->valid_lft, HZ);
 761					/*
 762					 * Note: Because this address is
 763					 * not permanent, lifetime <
 764					 * LONG_MAX / HZ here.
 765					 */
 766					if (time_before(expires,
 767							ifa->tstamp + lifetime * HZ))
 768						expires = ifa->tstamp + lifetime * HZ;
 769					spin_unlock(&ifa->lock);
 770				}
 771			}
 772		}
 773	}
 774	write_unlock_bh(&idev->lock);
 775
 776	addrconf_del_timer(ifp);
 777
 778	ipv6_ifa_notify(RTM_DELADDR, ifp);
 779
 780	atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifp);
 781
 782	/*
 783	 * Purge or update corresponding prefix
 784	 *
 785	 * 1) we don't purge prefix here if address was not permanent.
 786	 *    prefix is managed by its own lifetime.
 787	 * 2) if there're no addresses, delete prefix.
 788	 * 3) if there're still other permanent address(es),
 789	 *    corresponding prefix is still permanent.
 790	 * 4) otherwise, update prefix lifetime to the
 791	 *    longest valid lifetime among the corresponding
 792	 *    addresses on the device.
 793	 *    Note: subsequent RA will update lifetime.
 794	 *
 795	 * --yoshfuji
 796	 */
 797	if ((ifp->flags & IFA_F_PERMANENT) && onlink < 1) {
 798		struct in6_addr prefix;
 799		struct rt6_info *rt;
 800		struct net *net = dev_net(ifp->idev->dev);
 801		ipv6_addr_prefix(&prefix, &ifp->addr, ifp->prefix_len);
 802		rt = rt6_lookup(net, &prefix, NULL, ifp->idev->dev->ifindex, 1);
 803
 804		if (rt && addrconf_is_prefix_route(rt)) {
 805			if (onlink == 0) {
 806				ip6_del_rt(rt);
 807				rt = NULL;
 808			} else if (!(rt->rt6i_flags & RTF_EXPIRES)) {
 809				rt->rt6i_expires = expires;
 810				rt->rt6i_flags |= RTF_EXPIRES;
 811			}
 812		}
 813		dst_release(&rt->dst);
 814	}
 815
 816	/* clean up prefsrc entries */
 817	rt6_remove_prefsrc(ifp);
 818out:
 819	in6_ifa_put(ifp);
 820}
 821
 822#ifdef CONFIG_IPV6_PRIVACY
 823static int ipv6_create_tempaddr(struct inet6_ifaddr *ifp, struct inet6_ifaddr *ift)
 824{
 825	struct inet6_dev *idev = ifp->idev;
 826	struct in6_addr addr, *tmpaddr;
 827	unsigned long tmp_prefered_lft, tmp_valid_lft, tmp_cstamp, tmp_tstamp, age;
 828	unsigned long regen_advance;
 829	int tmp_plen;
 830	int ret = 0;
 831	int max_addresses;
 832	u32 addr_flags;
 
 833
 834	write_lock(&idev->lock);
 835	if (ift) {
 836		spin_lock_bh(&ift->lock);
 837		memcpy(&addr.s6_addr[8], &ift->addr.s6_addr[8], 8);
 838		spin_unlock_bh(&ift->lock);
 839		tmpaddr = &addr;
 840	} else {
 841		tmpaddr = NULL;
 842	}
 843retry:
 844	in6_dev_hold(idev);
 845	if (idev->cnf.use_tempaddr <= 0) {
 846		write_unlock(&idev->lock);
 847		printk(KERN_INFO
 848			"ipv6_create_tempaddr(): use_tempaddr is disabled.\n");
 849		in6_dev_put(idev);
 850		ret = -1;
 851		goto out;
 852	}
 853	spin_lock_bh(&ifp->lock);
 854	if (ifp->regen_count++ >= idev->cnf.regen_max_retry) {
 855		idev->cnf.use_tempaddr = -1;	/*XXX*/
 856		spin_unlock_bh(&ifp->lock);
 857		write_unlock(&idev->lock);
 858		printk(KERN_WARNING
 859			"ipv6_create_tempaddr(): regeneration time exceeded. disabled temporary address support.\n");
 860		in6_dev_put(idev);
 861		ret = -1;
 862		goto out;
 863	}
 864	in6_ifa_hold(ifp);
 865	memcpy(addr.s6_addr, ifp->addr.s6_addr, 8);
 866	if (__ipv6_try_regen_rndid(idev, tmpaddr) < 0) {
 867		spin_unlock_bh(&ifp->lock);
 868		write_unlock(&idev->lock);
 869		printk(KERN_WARNING
 870			"ipv6_create_tempaddr(): regeneration of randomized interface id failed.\n");
 871		in6_ifa_put(ifp);
 872		in6_dev_put(idev);
 873		ret = -1;
 874		goto out;
 875	}
 876	memcpy(&addr.s6_addr[8], idev->rndid, 8);
 877	age = (jiffies - ifp->tstamp) / HZ;
 878	tmp_valid_lft = min_t(__u32,
 879			      ifp->valid_lft,
 880			      idev->cnf.temp_valid_lft + age);
 881	tmp_prefered_lft = min_t(__u32,
 882				 ifp->prefered_lft,
 883				 idev->cnf.temp_prefered_lft + age -
 884				 idev->cnf.max_desync_factor);
 885	tmp_plen = ifp->prefix_len;
 886	max_addresses = idev->cnf.max_addresses;
 887	tmp_cstamp = ifp->cstamp;
 888	tmp_tstamp = ifp->tstamp;
 889	spin_unlock_bh(&ifp->lock);
 890
 891	regen_advance = idev->cnf.regen_max_retry *
 892	                idev->cnf.dad_transmits *
 893	                idev->nd_parms->retrans_time / HZ;
 894	write_unlock(&idev->lock);
 895
 896	/* A temporary address is created only if this calculated Preferred
 897	 * Lifetime is greater than REGEN_ADVANCE time units.  In particular,
 898	 * an implementation must not create a temporary address with a zero
 899	 * Preferred Lifetime.
 900	 */
 901	if (tmp_prefered_lft <= regen_advance) {
 902		in6_ifa_put(ifp);
 903		in6_dev_put(idev);
 904		ret = -1;
 905		goto out;
 906	}
 907
 908	addr_flags = IFA_F_TEMPORARY;
 909	/* set in addrconf_prefix_rcv() */
 910	if (ifp->flags & IFA_F_OPTIMISTIC)
 911		addr_flags |= IFA_F_OPTIMISTIC;
 912
 913	ift = !max_addresses ||
 914	      ipv6_count_addresses(idev) < max_addresses ?
 915		ipv6_add_addr(idev, &addr, tmp_plen,
 916			      ipv6_addr_type(&addr)&IPV6_ADDR_SCOPE_MASK,
 917			      addr_flags) : NULL;
 918	if (!ift || IS_ERR(ift)) {
 919		in6_ifa_put(ifp);
 920		in6_dev_put(idev);
 921		printk(KERN_INFO
 922			"ipv6_create_tempaddr(): retry temporary address regeneration.\n");
 923		tmpaddr = &addr;
 924		write_lock(&idev->lock);
 925		goto retry;
 926	}
 927
 928	spin_lock_bh(&ift->lock);
 929	ift->ifpub = ifp;
 930	ift->valid_lft = tmp_valid_lft;
 931	ift->prefered_lft = tmp_prefered_lft;
 932	ift->cstamp = tmp_cstamp;
 933	ift->tstamp = tmp_tstamp;
 934	spin_unlock_bh(&ift->lock);
 935
 936	addrconf_dad_start(ift, 0);
 937	in6_ifa_put(ift);
 938	in6_dev_put(idev);
 939out:
 940	return ret;
 941}
 942#endif
 943
 944/*
 945 *	Choose an appropriate source address (RFC3484)
 946 */
 947enum {
 948	IPV6_SADDR_RULE_INIT = 0,
 949	IPV6_SADDR_RULE_LOCAL,
 950	IPV6_SADDR_RULE_SCOPE,
 951	IPV6_SADDR_RULE_PREFERRED,
 952#ifdef CONFIG_IPV6_MIP6
 953	IPV6_SADDR_RULE_HOA,
 954#endif
 955	IPV6_SADDR_RULE_OIF,
 956	IPV6_SADDR_RULE_LABEL,
 957#ifdef CONFIG_IPV6_PRIVACY
 958	IPV6_SADDR_RULE_PRIVACY,
 959#endif
 960	IPV6_SADDR_RULE_ORCHID,
 961	IPV6_SADDR_RULE_PREFIX,
 962	IPV6_SADDR_RULE_MAX
 963};
 964
 965struct ipv6_saddr_score {
 966	int			rule;
 967	int			addr_type;
 968	struct inet6_ifaddr	*ifa;
 969	DECLARE_BITMAP(scorebits, IPV6_SADDR_RULE_MAX);
 970	int			scopedist;
 971	int			matchlen;
 972};
 973
 974struct ipv6_saddr_dst {
 975	const struct in6_addr *addr;
 976	int ifindex;
 977	int scope;
 978	int label;
 979	unsigned int prefs;
 980};
 981
 982static inline int ipv6_saddr_preferred(int type)
 983{
 984	if (type & (IPV6_ADDR_MAPPED|IPV6_ADDR_COMPATv4|IPV6_ADDR_LOOPBACK))
 985		return 1;
 986	return 0;
 987}
 988
 989static int ipv6_get_saddr_eval(struct net *net,
 990			       struct ipv6_saddr_score *score,
 991			       struct ipv6_saddr_dst *dst,
 992			       int i)
 993{
 994	int ret;
 995
 996	if (i <= score->rule) {
 997		switch (i) {
 998		case IPV6_SADDR_RULE_SCOPE:
 999			ret = score->scopedist;
1000			break;
1001		case IPV6_SADDR_RULE_PREFIX:
1002			ret = score->matchlen;
1003			break;
1004		default:
1005			ret = !!test_bit(i, score->scorebits);
1006		}
1007		goto out;
1008	}
1009
1010	switch (i) {
1011	case IPV6_SADDR_RULE_INIT:
1012		/* Rule 0: remember if hiscore is not ready yet */
1013		ret = !!score->ifa;
1014		break;
1015	case IPV6_SADDR_RULE_LOCAL:
1016		/* Rule 1: Prefer same address */
1017		ret = ipv6_addr_equal(&score->ifa->addr, dst->addr);
1018		break;
1019	case IPV6_SADDR_RULE_SCOPE:
1020		/* Rule 2: Prefer appropriate scope
1021		 *
1022		 *      ret
1023		 *       ^
1024		 *    -1 |  d 15
1025		 *    ---+--+-+---> scope
1026		 *       |
1027		 *       |             d is scope of the destination.
1028		 *  B-d  |  \
1029		 *       |   \      <- smaller scope is better if
1030		 *  B-15 |    \        if scope is enough for destinaion.
1031		 *       |             ret = B - scope (-1 <= scope >= d <= 15).
1032		 * d-C-1 | /
1033		 *       |/         <- greater is better
1034		 *   -C  /             if scope is not enough for destination.
1035		 *      /|             ret = scope - C (-1 <= d < scope <= 15).
1036		 *
1037		 * d - C - 1 < B -15 (for all -1 <= d <= 15).
1038		 * C > d + 14 - B >= 15 + 14 - B = 29 - B.
1039		 * Assume B = 0 and we get C > 29.
1040		 */
1041		ret = __ipv6_addr_src_scope(score->addr_type);
1042		if (ret >= dst->scope)
1043			ret = -ret;
1044		else
1045			ret -= 128;	/* 30 is enough */
1046		score->scopedist = ret;
1047		break;
1048	case IPV6_SADDR_RULE_PREFERRED:
1049		/* Rule 3: Avoid deprecated and optimistic addresses */
1050		ret = ipv6_saddr_preferred(score->addr_type) ||
1051		      !(score->ifa->flags & (IFA_F_DEPRECATED|IFA_F_OPTIMISTIC));
1052		break;
1053#ifdef CONFIG_IPV6_MIP6
1054	case IPV6_SADDR_RULE_HOA:
1055	    {
1056		/* Rule 4: Prefer home address */
1057		int prefhome = !(dst->prefs & IPV6_PREFER_SRC_COA);
1058		ret = !(score->ifa->flags & IFA_F_HOMEADDRESS) ^ prefhome;
1059		break;
1060	    }
1061#endif
1062	case IPV6_SADDR_RULE_OIF:
1063		/* Rule 5: Prefer outgoing interface */
1064		ret = (!dst->ifindex ||
1065		       dst->ifindex == score->ifa->idev->dev->ifindex);
1066		break;
1067	case IPV6_SADDR_RULE_LABEL:
1068		/* Rule 6: Prefer matching label */
1069		ret = ipv6_addr_label(net,
1070				      &score->ifa->addr, score->addr_type,
1071				      score->ifa->idev->dev->ifindex) == dst->label;
1072		break;
1073#ifdef CONFIG_IPV6_PRIVACY
1074	case IPV6_SADDR_RULE_PRIVACY:
1075	    {
1076		/* Rule 7: Prefer public address
1077		 * Note: prefer temporary address if use_tempaddr >= 2
1078		 */
1079		int preftmp = dst->prefs & (IPV6_PREFER_SRC_PUBLIC|IPV6_PREFER_SRC_TMP) ?
1080				!!(dst->prefs & IPV6_PREFER_SRC_TMP) :
1081				score->ifa->idev->cnf.use_tempaddr >= 2;
1082		ret = (!(score->ifa->flags & IFA_F_TEMPORARY)) ^ preftmp;
1083		break;
1084	    }
1085#endif
1086	case IPV6_SADDR_RULE_ORCHID:
1087		/* Rule 8-: Prefer ORCHID vs ORCHID or
1088		 *	    non-ORCHID vs non-ORCHID
1089		 */
1090		ret = !(ipv6_addr_orchid(&score->ifa->addr) ^
1091			ipv6_addr_orchid(dst->addr));
1092		break;
1093	case IPV6_SADDR_RULE_PREFIX:
1094		/* Rule 8: Use longest matching prefix */
1095		score->matchlen = ret = ipv6_addr_diff(&score->ifa->addr,
1096						       dst->addr);
1097		break;
1098	default:
1099		ret = 0;
1100	}
1101
1102	if (ret)
1103		__set_bit(i, score->scorebits);
1104	score->rule = i;
1105out:
1106	return ret;
1107}
1108
1109int ipv6_dev_get_saddr(struct net *net, struct net_device *dst_dev,
1110		       const struct in6_addr *daddr, unsigned int prefs,
1111		       struct in6_addr *saddr)
1112{
1113	struct ipv6_saddr_score scores[2],
1114				*score = &scores[0], *hiscore = &scores[1];
1115	struct ipv6_saddr_dst dst;
1116	struct net_device *dev;
1117	int dst_type;
1118
1119	dst_type = __ipv6_addr_type(daddr);
1120	dst.addr = daddr;
1121	dst.ifindex = dst_dev ? dst_dev->ifindex : 0;
1122	dst.scope = __ipv6_addr_src_scope(dst_type);
1123	dst.label = ipv6_addr_label(net, daddr, dst_type, dst.ifindex);
1124	dst.prefs = prefs;
1125
1126	hiscore->rule = -1;
1127	hiscore->ifa = NULL;
1128
1129	rcu_read_lock();
1130
1131	for_each_netdev_rcu(net, dev) {
1132		struct inet6_dev *idev;
1133
1134		/* Candidate Source Address (section 4)
1135		 *  - multicast and link-local destination address,
1136		 *    the set of candidate source address MUST only
1137		 *    include addresses assigned to interfaces
1138		 *    belonging to the same link as the outgoing
1139		 *    interface.
1140		 * (- For site-local destination addresses, the
1141		 *    set of candidate source addresses MUST only
1142		 *    include addresses assigned to interfaces
1143		 *    belonging to the same site as the outgoing
1144		 *    interface.)
1145		 */
1146		if (((dst_type & IPV6_ADDR_MULTICAST) ||
1147		     dst.scope <= IPV6_ADDR_SCOPE_LINKLOCAL) &&
1148		    dst.ifindex && dev->ifindex != dst.ifindex)
1149			continue;
1150
1151		idev = __in6_dev_get(dev);
1152		if (!idev)
1153			continue;
1154
1155		read_lock_bh(&idev->lock);
1156		list_for_each_entry(score->ifa, &idev->addr_list, if_list) {
1157			int i;
1158
1159			/*
1160			 * - Tentative Address (RFC2462 section 5.4)
1161			 *  - A tentative address is not considered
1162			 *    "assigned to an interface" in the traditional
1163			 *    sense, unless it is also flagged as optimistic.
1164			 * - Candidate Source Address (section 4)
1165			 *  - In any case, anycast addresses, multicast
1166			 *    addresses, and the unspecified address MUST
1167			 *    NOT be included in a candidate set.
1168			 */
1169			if ((score->ifa->flags & IFA_F_TENTATIVE) &&
1170			    (!(score->ifa->flags & IFA_F_OPTIMISTIC)))
1171				continue;
1172
1173			score->addr_type = __ipv6_addr_type(&score->ifa->addr);
1174
1175			if (unlikely(score->addr_type == IPV6_ADDR_ANY ||
1176				     score->addr_type & IPV6_ADDR_MULTICAST)) {
1177				LIMIT_NETDEBUG(KERN_DEBUG
1178					       "ADDRCONF: unspecified / multicast address "
1179					       "assigned as unicast address on %s",
1180					       dev->name);
1181				continue;
1182			}
1183
1184			score->rule = -1;
1185			bitmap_zero(score->scorebits, IPV6_SADDR_RULE_MAX);
1186
1187			for (i = 0; i < IPV6_SADDR_RULE_MAX; i++) {
1188				int minihiscore, miniscore;
1189
1190				minihiscore = ipv6_get_saddr_eval(net, hiscore, &dst, i);
1191				miniscore = ipv6_get_saddr_eval(net, score, &dst, i);
1192
1193				if (minihiscore > miniscore) {
1194					if (i == IPV6_SADDR_RULE_SCOPE &&
1195					    score->scopedist > 0) {
1196						/*
1197						 * special case:
1198						 * each remaining entry
1199						 * has too small (not enough)
1200						 * scope, because ifa entries
1201						 * are sorted by their scope
1202						 * values.
1203						 */
1204						goto try_nextdev;
1205					}
1206					break;
1207				} else if (minihiscore < miniscore) {
1208					if (hiscore->ifa)
1209						in6_ifa_put(hiscore->ifa);
1210
1211					in6_ifa_hold(score->ifa);
1212
1213					swap(hiscore, score);
1214
1215					/* restore our iterator */
1216					score->ifa = hiscore->ifa;
1217
1218					break;
1219				}
1220			}
1221		}
1222try_nextdev:
1223		read_unlock_bh(&idev->lock);
1224	}
1225	rcu_read_unlock();
1226
1227	if (!hiscore->ifa)
1228		return -EADDRNOTAVAIL;
1229
1230	ipv6_addr_copy(saddr, &hiscore->ifa->addr);
1231	in6_ifa_put(hiscore->ifa);
1232	return 0;
1233}
1234EXPORT_SYMBOL(ipv6_dev_get_saddr);
1235
1236int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr,
1237		    unsigned char banned_flags)
1238{
1239	struct inet6_dev *idev;
1240	int err = -EADDRNOTAVAIL;
1241
1242	rcu_read_lock();
1243	idev = __in6_dev_get(dev);
1244	if (idev) {
1245		struct inet6_ifaddr *ifp;
1246
1247		read_lock_bh(&idev->lock);
1248		list_for_each_entry(ifp, &idev->addr_list, if_list) {
1249			if (ifp->scope == IFA_LINK &&
1250			    !(ifp->flags & banned_flags)) {
1251				ipv6_addr_copy(addr, &ifp->addr);
1252				err = 0;
1253				break;
1254			}
1255		}
1256		read_unlock_bh(&idev->lock);
1257	}
1258	rcu_read_unlock();
1259	return err;
1260}
1261
1262static int ipv6_count_addresses(struct inet6_dev *idev)
1263{
1264	int cnt = 0;
1265	struct inet6_ifaddr *ifp;
1266
1267	read_lock_bh(&idev->lock);
1268	list_for_each_entry(ifp, &idev->addr_list, if_list)
1269		cnt++;
1270	read_unlock_bh(&idev->lock);
1271	return cnt;
1272}
1273
1274int ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
1275		  struct net_device *dev, int strict)
1276{
1277	struct inet6_ifaddr *ifp;
1278	struct hlist_node *node;
1279	unsigned int hash = ipv6_addr_hash(addr);
1280
1281	rcu_read_lock_bh();
1282	hlist_for_each_entry_rcu(ifp, node, &inet6_addr_lst[hash], addr_lst) {
1283		if (!net_eq(dev_net(ifp->idev->dev), net))
1284			continue;
1285		if (ipv6_addr_equal(&ifp->addr, addr) &&
1286		    !(ifp->flags&IFA_F_TENTATIVE) &&
1287		    (dev == NULL || ifp->idev->dev == dev ||
1288		     !(ifp->scope&(IFA_LINK|IFA_HOST) || strict))) {
1289			rcu_read_unlock_bh();
1290			return 1;
1291		}
1292	}
1293
1294	rcu_read_unlock_bh();
1295	return 0;
1296}
1297EXPORT_SYMBOL(ipv6_chk_addr);
1298
1299static bool ipv6_chk_same_addr(struct net *net, const struct in6_addr *addr,
1300			       struct net_device *dev)
1301{
1302	unsigned int hash = ipv6_addr_hash(addr);
1303	struct inet6_ifaddr *ifp;
1304	struct hlist_node *node;
1305
1306	hlist_for_each_entry(ifp, node, &inet6_addr_lst[hash], addr_lst) {
1307		if (!net_eq(dev_net(ifp->idev->dev), net))
1308			continue;
1309		if (ipv6_addr_equal(&ifp->addr, addr)) {
1310			if (dev == NULL || ifp->idev->dev == dev)
1311				return true;
1312		}
1313	}
1314	return false;
1315}
1316
1317int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev)
1318{
1319	struct inet6_dev *idev;
1320	struct inet6_ifaddr *ifa;
1321	int	onlink;
1322
1323	onlink = 0;
1324	rcu_read_lock();
1325	idev = __in6_dev_get(dev);
1326	if (idev) {
1327		read_lock_bh(&idev->lock);
1328		list_for_each_entry(ifa, &idev->addr_list, if_list) {
1329			onlink = ipv6_prefix_equal(addr, &ifa->addr,
1330						   ifa->prefix_len);
1331			if (onlink)
1332				break;
1333		}
1334		read_unlock_bh(&idev->lock);
1335	}
1336	rcu_read_unlock();
1337	return onlink;
1338}
1339
1340EXPORT_SYMBOL(ipv6_chk_prefix);
1341
1342struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net, const struct in6_addr *addr,
1343				     struct net_device *dev, int strict)
1344{
1345	struct inet6_ifaddr *ifp, *result = NULL;
1346	unsigned int hash = ipv6_addr_hash(addr);
1347	struct hlist_node *node;
1348
1349	rcu_read_lock_bh();
1350	hlist_for_each_entry_rcu_bh(ifp, node, &inet6_addr_lst[hash], addr_lst) {
1351		if (!net_eq(dev_net(ifp->idev->dev), net))
1352			continue;
1353		if (ipv6_addr_equal(&ifp->addr, addr)) {
1354			if (dev == NULL || ifp->idev->dev == dev ||
1355			    !(ifp->scope&(IFA_LINK|IFA_HOST) || strict)) {
1356				result = ifp;
1357				in6_ifa_hold(ifp);
1358				break;
1359			}
1360		}
1361	}
1362	rcu_read_unlock_bh();
1363
1364	return result;
1365}
1366
1367/* Gets referenced address, destroys ifaddr */
1368
1369static void addrconf_dad_stop(struct inet6_ifaddr *ifp, int dad_failed)
1370{
1371	if (ifp->flags&IFA_F_PERMANENT) {
1372		spin_lock_bh(&ifp->lock);
1373		addrconf_del_timer(ifp);
1374		ifp->flags |= IFA_F_TENTATIVE;
1375		if (dad_failed)
1376			ifp->flags |= IFA_F_DADFAILED;
1377		spin_unlock_bh(&ifp->lock);
1378		if (dad_failed)
1379			ipv6_ifa_notify(0, ifp);
1380		in6_ifa_put(ifp);
1381#ifdef CONFIG_IPV6_PRIVACY
1382	} else if (ifp->flags&IFA_F_TEMPORARY) {
1383		struct inet6_ifaddr *ifpub;
1384		spin_lock_bh(&ifp->lock);
1385		ifpub = ifp->ifpub;
1386		if (ifpub) {
1387			in6_ifa_hold(ifpub);
1388			spin_unlock_bh(&ifp->lock);
1389			ipv6_create_tempaddr(ifpub, ifp);
1390			in6_ifa_put(ifpub);
1391		} else {
1392			spin_unlock_bh(&ifp->lock);
1393		}
1394		ipv6_del_addr(ifp);
1395#endif
1396	} else
1397		ipv6_del_addr(ifp);
1398}
1399
1400static int addrconf_dad_end(struct inet6_ifaddr *ifp)
1401{
1402	int err = -ENOENT;
1403
1404	spin_lock(&ifp->state_lock);
1405	if (ifp->state == INET6_IFADDR_STATE_DAD) {
1406		ifp->state = INET6_IFADDR_STATE_POSTDAD;
1407		err = 0;
1408	}
1409	spin_unlock(&ifp->state_lock);
1410
1411	return err;
1412}
1413
1414void addrconf_dad_failure(struct inet6_ifaddr *ifp)
1415{
1416	struct inet6_dev *idev = ifp->idev;
1417
1418	if (addrconf_dad_end(ifp)) {
1419		in6_ifa_put(ifp);
1420		return;
1421	}
1422
1423	if (net_ratelimit())
1424		printk(KERN_INFO "%s: IPv6 duplicate address %pI6c detected!\n",
1425			ifp->idev->dev->name, &ifp->addr);
1426
1427	if (idev->cnf.accept_dad > 1 && !idev->cnf.disable_ipv6) {
1428		struct in6_addr addr;
1429
1430		addr.s6_addr32[0] = htonl(0xfe800000);
1431		addr.s6_addr32[1] = 0;
1432
1433		if (!ipv6_generate_eui64(addr.s6_addr + 8, idev->dev) &&
1434		    ipv6_addr_equal(&ifp->addr, &addr)) {
1435			/* DAD failed for link-local based on MAC address */
1436			idev->cnf.disable_ipv6 = 1;
1437
1438			printk(KERN_INFO "%s: IPv6 being disabled!\n",
1439				ifp->idev->dev->name);
1440		}
1441	}
1442
1443	addrconf_dad_stop(ifp, 1);
1444}
1445
1446/* Join to solicited addr multicast group. */
1447
1448void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr)
1449{
1450	struct in6_addr maddr;
1451
1452	if (dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1453		return;
1454
1455	addrconf_addr_solict_mult(addr, &maddr);
1456	ipv6_dev_mc_inc(dev, &maddr);
1457}
1458
1459void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr)
1460{
1461	struct in6_addr maddr;
1462
1463	if (idev->dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1464		return;
1465
1466	addrconf_addr_solict_mult(addr, &maddr);
1467	__ipv6_dev_mc_dec(idev, &maddr);
1468}
1469
1470static void addrconf_join_anycast(struct inet6_ifaddr *ifp)
1471{
1472	struct in6_addr addr;
1473	if (ifp->prefix_len == 127) /* RFC 6164 */
1474		return;
1475	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1476	if (ipv6_addr_any(&addr))
1477		return;
1478	ipv6_dev_ac_inc(ifp->idev->dev, &addr);
1479}
1480
1481static void addrconf_leave_anycast(struct inet6_ifaddr *ifp)
1482{
1483	struct in6_addr addr;
1484	if (ifp->prefix_len == 127) /* RFC 6164 */
1485		return;
1486	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1487	if (ipv6_addr_any(&addr))
1488		return;
1489	__ipv6_dev_ac_dec(ifp->idev, &addr);
1490}
1491
1492static int addrconf_ifid_eui48(u8 *eui, struct net_device *dev)
1493{
1494	if (dev->addr_len != ETH_ALEN)
1495		return -1;
1496	memcpy(eui, dev->dev_addr, 3);
1497	memcpy(eui + 5, dev->dev_addr + 3, 3);
1498
1499	/*
1500	 * The zSeries OSA network cards can be shared among various
1501	 * OS instances, but the OSA cards have only one MAC address.
1502	 * This leads to duplicate address conflicts in conjunction
1503	 * with IPv6 if more than one instance uses the same card.
1504	 *
1505	 * The driver for these cards can deliver a unique 16-bit
1506	 * identifier for each instance sharing the same card.  It is
1507	 * placed instead of 0xFFFE in the interface identifier.  The
1508	 * "u" bit of the interface identifier is not inverted in this
1509	 * case.  Hence the resulting interface identifier has local
1510	 * scope according to RFC2373.
1511	 */
1512	if (dev->dev_id) {
1513		eui[3] = (dev->dev_id >> 8) & 0xFF;
1514		eui[4] = dev->dev_id & 0xFF;
1515	} else {
1516		eui[3] = 0xFF;
1517		eui[4] = 0xFE;
1518		eui[0] ^= 2;
1519	}
1520	return 0;
1521}
1522
 
 
 
 
 
 
 
 
1523static int addrconf_ifid_arcnet(u8 *eui, struct net_device *dev)
1524{
1525	/* XXX: inherit EUI-64 from other interface -- yoshfuji */
1526	if (dev->addr_len != ARCNET_ALEN)
1527		return -1;
1528	memset(eui, 0, 7);
1529	eui[7] = *(u8*)dev->dev_addr;
1530	return 0;
1531}
1532
1533static int addrconf_ifid_infiniband(u8 *eui, struct net_device *dev)
1534{
1535	if (dev->addr_len != INFINIBAND_ALEN)
1536		return -1;
1537	memcpy(eui, dev->dev_addr + 12, 8);
1538	eui[0] |= 2;
1539	return 0;
1540}
1541
1542static int __ipv6_isatap_ifid(u8 *eui, __be32 addr)
1543{
1544	if (addr == 0)
1545		return -1;
1546	eui[0] = (ipv4_is_zeronet(addr) || ipv4_is_private_10(addr) ||
1547		  ipv4_is_loopback(addr) || ipv4_is_linklocal_169(addr) ||
1548		  ipv4_is_private_172(addr) || ipv4_is_test_192(addr) ||
1549		  ipv4_is_anycast_6to4(addr) || ipv4_is_private_192(addr) ||
1550		  ipv4_is_test_198(addr) || ipv4_is_multicast(addr) ||
1551		  ipv4_is_lbcast(addr)) ? 0x00 : 0x02;
1552	eui[1] = 0;
1553	eui[2] = 0x5E;
1554	eui[3] = 0xFE;
1555	memcpy(eui + 4, &addr, 4);
1556	return 0;
1557}
1558
1559static int addrconf_ifid_sit(u8 *eui, struct net_device *dev)
1560{
1561	if (dev->priv_flags & IFF_ISATAP)
1562		return __ipv6_isatap_ifid(eui, *(__be32 *)dev->dev_addr);
1563	return -1;
1564}
1565
1566static int addrconf_ifid_gre(u8 *eui, struct net_device *dev)
1567{
1568	return __ipv6_isatap_ifid(eui, *(__be32 *)dev->dev_addr);
1569}
1570
1571static int ipv6_generate_eui64(u8 *eui, struct net_device *dev)
1572{
1573	switch (dev->type) {
1574	case ARPHRD_ETHER:
1575	case ARPHRD_FDDI:
1576	case ARPHRD_IEEE802_TR:
1577		return addrconf_ifid_eui48(eui, dev);
1578	case ARPHRD_ARCNET:
1579		return addrconf_ifid_arcnet(eui, dev);
1580	case ARPHRD_INFINIBAND:
1581		return addrconf_ifid_infiniband(eui, dev);
1582	case ARPHRD_SIT:
1583		return addrconf_ifid_sit(eui, dev);
1584	case ARPHRD_IPGRE:
1585		return addrconf_ifid_gre(eui, dev);
 
 
1586	}
1587	return -1;
1588}
1589
1590static int ipv6_inherit_eui64(u8 *eui, struct inet6_dev *idev)
1591{
1592	int err = -1;
1593	struct inet6_ifaddr *ifp;
1594
1595	read_lock_bh(&idev->lock);
1596	list_for_each_entry(ifp, &idev->addr_list, if_list) {
1597		if (ifp->scope == IFA_LINK && !(ifp->flags&IFA_F_TENTATIVE)) {
1598			memcpy(eui, ifp->addr.s6_addr+8, 8);
1599			err = 0;
1600			break;
1601		}
1602	}
1603	read_unlock_bh(&idev->lock);
1604	return err;
1605}
1606
1607#ifdef CONFIG_IPV6_PRIVACY
1608/* (re)generation of randomized interface identifier (RFC 3041 3.2, 3.5) */
1609static int __ipv6_regen_rndid(struct inet6_dev *idev)
1610{
1611regen:
1612	get_random_bytes(idev->rndid, sizeof(idev->rndid));
1613	idev->rndid[0] &= ~0x02;
1614
1615	/*
1616	 * <draft-ietf-ipngwg-temp-addresses-v2-00.txt>:
1617	 * check if generated address is not inappropriate
1618	 *
1619	 *  - Reserved subnet anycast (RFC 2526)
1620	 *	11111101 11....11 1xxxxxxx
1621	 *  - ISATAP (RFC4214) 6.1
1622	 *	00-00-5E-FE-xx-xx-xx-xx
1623	 *  - value 0
1624	 *  - XXX: already assigned to an address on the device
1625	 */
1626	if (idev->rndid[0] == 0xfd &&
1627	    (idev->rndid[1]&idev->rndid[2]&idev->rndid[3]&idev->rndid[4]&idev->rndid[5]&idev->rndid[6]) == 0xff &&
1628	    (idev->rndid[7]&0x80))
1629		goto regen;
1630	if ((idev->rndid[0]|idev->rndid[1]) == 0) {
1631		if (idev->rndid[2] == 0x5e && idev->rndid[3] == 0xfe)
1632			goto regen;
1633		if ((idev->rndid[2]|idev->rndid[3]|idev->rndid[4]|idev->rndid[5]|idev->rndid[6]|idev->rndid[7]) == 0x00)
1634			goto regen;
1635	}
1636
1637	return 0;
1638}
1639
1640static void ipv6_regen_rndid(unsigned long data)
1641{
1642	struct inet6_dev *idev = (struct inet6_dev *) data;
1643	unsigned long expires;
1644
1645	rcu_read_lock_bh();
1646	write_lock_bh(&idev->lock);
1647
1648	if (idev->dead)
1649		goto out;
1650
1651	if (__ipv6_regen_rndid(idev) < 0)
1652		goto out;
1653
1654	expires = jiffies +
1655		idev->cnf.temp_prefered_lft * HZ -
1656		idev->cnf.regen_max_retry * idev->cnf.dad_transmits * idev->nd_parms->retrans_time -
1657		idev->cnf.max_desync_factor * HZ;
1658	if (time_before(expires, jiffies)) {
1659		printk(KERN_WARNING
1660			"ipv6_regen_rndid(): too short regeneration interval; timer disabled for %s.\n",
1661			idev->dev->name);
1662		goto out;
1663	}
1664
1665	if (!mod_timer(&idev->regen_timer, expires))
1666		in6_dev_hold(idev);
1667
1668out:
1669	write_unlock_bh(&idev->lock);
1670	rcu_read_unlock_bh();
1671	in6_dev_put(idev);
1672}
1673
1674static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr) {
 
1675	int ret = 0;
1676
1677	if (tmpaddr && memcmp(idev->rndid, &tmpaddr->s6_addr[8], 8) == 0)
1678		ret = __ipv6_regen_rndid(idev);
1679	return ret;
1680}
1681#endif
1682
1683/*
1684 *	Add prefix route.
1685 */
1686
1687static void
1688addrconf_prefix_route(struct in6_addr *pfx, int plen, struct net_device *dev,
1689		      unsigned long expires, u32 flags)
1690{
1691	struct fib6_config cfg = {
1692		.fc_table = RT6_TABLE_PREFIX,
1693		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1694		.fc_ifindex = dev->ifindex,
1695		.fc_expires = expires,
1696		.fc_dst_len = plen,
1697		.fc_flags = RTF_UP | flags,
1698		.fc_nlinfo.nl_net = dev_net(dev),
1699		.fc_protocol = RTPROT_KERNEL,
1700	};
1701
1702	ipv6_addr_copy(&cfg.fc_dst, pfx);
1703
1704	/* Prevent useless cloning on PtP SIT.
1705	   This thing is done here expecting that the whole
1706	   class of non-broadcast devices need not cloning.
1707	 */
1708#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1709	if (dev->type == ARPHRD_SIT && (dev->flags & IFF_POINTOPOINT))
1710		cfg.fc_flags |= RTF_NONEXTHOP;
1711#endif
1712
1713	ip6_route_add(&cfg);
1714}
1715
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1716/* Create "default" multicast route to the interface */
1717
1718static void addrconf_add_mroute(struct net_device *dev)
1719{
1720	struct fib6_config cfg = {
1721		.fc_table = RT6_TABLE_LOCAL,
1722		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1723		.fc_ifindex = dev->ifindex,
1724		.fc_dst_len = 8,
1725		.fc_flags = RTF_UP,
1726		.fc_nlinfo.nl_net = dev_net(dev),
1727	};
1728
1729	ipv6_addr_set(&cfg.fc_dst, htonl(0xFF000000), 0, 0, 0);
1730
1731	ip6_route_add(&cfg);
1732}
1733
1734#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1735static void sit_route_add(struct net_device *dev)
1736{
1737	struct fib6_config cfg = {
1738		.fc_table = RT6_TABLE_MAIN,
1739		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1740		.fc_ifindex = dev->ifindex,
1741		.fc_dst_len = 96,
1742		.fc_flags = RTF_UP | RTF_NONEXTHOP,
1743		.fc_nlinfo.nl_net = dev_net(dev),
1744	};
1745
1746	/* prefix length - 96 bits "::d.d.d.d" */
1747	ip6_route_add(&cfg);
1748}
1749#endif
1750
1751static void addrconf_add_lroute(struct net_device *dev)
1752{
1753	struct in6_addr addr;
1754
1755	ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
1756	addrconf_prefix_route(&addr, 64, dev, 0, 0);
1757}
1758
1759static struct inet6_dev *addrconf_add_dev(struct net_device *dev)
1760{
1761	struct inet6_dev *idev;
1762
1763	ASSERT_RTNL();
1764
1765	idev = ipv6_find_idev(dev);
1766	if (!idev)
1767		return ERR_PTR(-ENOBUFS);
1768
1769	if (idev->cnf.disable_ipv6)
1770		return ERR_PTR(-EACCES);
1771
1772	/* Add default multicast route */
1773	addrconf_add_mroute(dev);
 
1774
1775	/* Add link local route */
1776	addrconf_add_lroute(dev);
1777	return idev;
1778}
1779
1780void addrconf_prefix_rcv(struct net_device *dev, u8 *opt, int len)
1781{
1782	struct prefix_info *pinfo;
1783	__u32 valid_lft;
1784	__u32 prefered_lft;
1785	int addr_type;
1786	struct inet6_dev *in6_dev;
1787	struct net *net = dev_net(dev);
1788
1789	pinfo = (struct prefix_info *) opt;
1790
1791	if (len < sizeof(struct prefix_info)) {
1792		ADBG(("addrconf: prefix option too short\n"));
1793		return;
1794	}
1795
1796	/*
1797	 *	Validation checks ([ADDRCONF], page 19)
1798	 */
1799
1800	addr_type = ipv6_addr_type(&pinfo->prefix);
1801
1802	if (addr_type & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LINKLOCAL))
1803		return;
1804
1805	valid_lft = ntohl(pinfo->valid);
1806	prefered_lft = ntohl(pinfo->prefered);
1807
1808	if (prefered_lft > valid_lft) {
1809		if (net_ratelimit())
1810			printk(KERN_WARNING "addrconf: prefix option has invalid lifetime\n");
1811		return;
1812	}
1813
1814	in6_dev = in6_dev_get(dev);
1815
1816	if (in6_dev == NULL) {
1817		if (net_ratelimit())
1818			printk(KERN_DEBUG "addrconf: device %s not configured\n", dev->name);
1819		return;
1820	}
1821
1822	/*
1823	 *	Two things going on here:
1824	 *	1) Add routes for on-link prefixes
1825	 *	2) Configure prefixes with the auto flag set
1826	 */
1827
1828	if (pinfo->onlink) {
1829		struct rt6_info *rt;
1830		unsigned long rt_expires;
1831
1832		/* Avoid arithmetic overflow. Really, we could
1833		 * save rt_expires in seconds, likely valid_lft,
1834		 * but it would require division in fib gc, that it
1835		 * not good.
1836		 */
1837		if (HZ > USER_HZ)
1838			rt_expires = addrconf_timeout_fixup(valid_lft, HZ);
1839		else
1840			rt_expires = addrconf_timeout_fixup(valid_lft, USER_HZ);
1841
1842		if (addrconf_finite_timeout(rt_expires))
1843			rt_expires *= HZ;
1844
1845		rt = rt6_lookup(net, &pinfo->prefix, NULL,
1846				dev->ifindex, 1);
 
 
 
1847
1848		if (rt && addrconf_is_prefix_route(rt)) {
1849			/* Autoconf prefix route */
1850			if (valid_lft == 0) {
1851				ip6_del_rt(rt);
1852				rt = NULL;
1853			} else if (addrconf_finite_timeout(rt_expires)) {
1854				/* not infinity */
1855				rt->rt6i_expires = jiffies + rt_expires;
1856				rt->rt6i_flags |= RTF_EXPIRES;
1857			} else {
1858				rt->rt6i_flags &= ~RTF_EXPIRES;
1859				rt->rt6i_expires = 0;
1860			}
1861		} else if (valid_lft) {
1862			clock_t expires = 0;
1863			int flags = RTF_ADDRCONF | RTF_PREFIX_RT;
1864			if (addrconf_finite_timeout(rt_expires)) {
1865				/* not infinity */
1866				flags |= RTF_EXPIRES;
1867				expires = jiffies_to_clock_t(rt_expires);
1868			}
1869			addrconf_prefix_route(&pinfo->prefix, pinfo->prefix_len,
1870					      dev, expires, flags);
1871		}
1872		if (rt)
1873			dst_release(&rt->dst);
1874	}
1875
1876	/* Try to figure out our local address for this prefix */
1877
1878	if (pinfo->autoconf && in6_dev->cnf.autoconf) {
1879		struct inet6_ifaddr * ifp;
1880		struct in6_addr addr;
1881		int create = 0, update_lft = 0;
1882
1883		if (pinfo->prefix_len == 64) {
1884			memcpy(&addr, &pinfo->prefix, 8);
1885			if (ipv6_generate_eui64(addr.s6_addr + 8, dev) &&
1886			    ipv6_inherit_eui64(addr.s6_addr + 8, in6_dev)) {
1887				in6_dev_put(in6_dev);
1888				return;
1889			}
1890			goto ok;
1891		}
1892		if (net_ratelimit())
1893			printk(KERN_DEBUG "IPv6 addrconf: prefix with wrong length %d\n",
1894			       pinfo->prefix_len);
1895		in6_dev_put(in6_dev);
1896		return;
1897
1898ok:
1899
1900		ifp = ipv6_get_ifaddr(net, &addr, dev, 1);
1901
1902		if (ifp == NULL && valid_lft) {
1903			int max_addresses = in6_dev->cnf.max_addresses;
1904			u32 addr_flags = 0;
1905
1906#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
1907			if (in6_dev->cnf.optimistic_dad &&
1908			    !net->ipv6.devconf_all->forwarding)
1909				addr_flags = IFA_F_OPTIMISTIC;
1910#endif
1911
1912			/* Do not allow to create too much of autoconfigured
1913			 * addresses; this would be too easy way to crash kernel.
1914			 */
1915			if (!max_addresses ||
1916			    ipv6_count_addresses(in6_dev) < max_addresses)
1917				ifp = ipv6_add_addr(in6_dev, &addr, pinfo->prefix_len,
1918						    addr_type&IPV6_ADDR_SCOPE_MASK,
1919						    addr_flags);
1920
1921			if (!ifp || IS_ERR(ifp)) {
1922				in6_dev_put(in6_dev);
1923				return;
1924			}
1925
1926			update_lft = create = 1;
1927			ifp->cstamp = jiffies;
1928			addrconf_dad_start(ifp, RTF_ADDRCONF|RTF_PREFIX_RT);
1929		}
1930
1931		if (ifp) {
1932			int flags;
1933			unsigned long now;
1934#ifdef CONFIG_IPV6_PRIVACY
1935			struct inet6_ifaddr *ift;
1936#endif
1937			u32 stored_lft;
1938
1939			/* update lifetime (RFC2462 5.5.3 e) */
1940			spin_lock(&ifp->lock);
1941			now = jiffies;
1942			if (ifp->valid_lft > (now - ifp->tstamp) / HZ)
1943				stored_lft = ifp->valid_lft - (now - ifp->tstamp) / HZ;
1944			else
1945				stored_lft = 0;
1946			if (!update_lft && stored_lft) {
1947				if (valid_lft > MIN_VALID_LIFETIME ||
1948				    valid_lft > stored_lft)
1949					update_lft = 1;
1950				else if (stored_lft <= MIN_VALID_LIFETIME) {
1951					/* valid_lft <= stored_lft is always true */
1952					/*
1953					 * RFC 4862 Section 5.5.3e:
1954					 * "Note that the preferred lifetime of
1955					 *  the corresponding address is always
1956					 *  reset to the Preferred Lifetime in
1957					 *  the received Prefix Information
1958					 *  option, regardless of whether the
1959					 *  valid lifetime is also reset or
1960					 *  ignored."
1961					 *
1962					 *  So if the preferred lifetime in
1963					 *  this advertisement is different
1964					 *  than what we have stored, but the
1965					 *  valid lifetime is invalid, just
1966					 *  reset prefered_lft.
1967					 *
1968					 *  We must set the valid lifetime
1969					 *  to the stored lifetime since we'll
1970					 *  be updating the timestamp below,
1971					 *  else we'll set it back to the
1972					 *  minimum.
1973					 */
1974					if (prefered_lft != ifp->prefered_lft) {
1975						valid_lft = stored_lft;
1976						update_lft = 1;
1977					}
1978				} else {
1979					valid_lft = MIN_VALID_LIFETIME;
1980					if (valid_lft < prefered_lft)
1981						prefered_lft = valid_lft;
1982					update_lft = 1;
1983				}
1984			}
1985
1986			if (update_lft) {
1987				ifp->valid_lft = valid_lft;
1988				ifp->prefered_lft = prefered_lft;
1989				ifp->tstamp = now;
1990				flags = ifp->flags;
1991				ifp->flags &= ~IFA_F_DEPRECATED;
1992				spin_unlock(&ifp->lock);
1993
1994				if (!(flags&IFA_F_TENTATIVE))
1995					ipv6_ifa_notify(0, ifp);
1996			} else
1997				spin_unlock(&ifp->lock);
1998
1999#ifdef CONFIG_IPV6_PRIVACY
2000			read_lock_bh(&in6_dev->lock);
2001			/* update all temporary addresses in the list */
2002			list_for_each_entry(ift, &in6_dev->tempaddr_list, tmp_list) {
 
 
 
 
 
 
2003				/*
2004				 * When adjusting the lifetimes of an existing
2005				 * temporary address, only lower the lifetimes.
2006				 * Implementations must not increase the
2007				 * lifetimes of an existing temporary address
2008				 * when processing a Prefix Information Option.
 
 
 
 
 
2009				 */
2010				if (ifp != ift->ifpub)
2011					continue;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
2012
2013				spin_lock(&ift->lock);
2014				flags = ift->flags;
2015				if (ift->valid_lft > valid_lft &&
2016				    ift->valid_lft - valid_lft > (jiffies - ift->tstamp) / HZ)
2017					ift->valid_lft = valid_lft + (jiffies - ift->tstamp) / HZ;
2018				if (ift->prefered_lft > prefered_lft &&
2019				    ift->prefered_lft - prefered_lft > (jiffies - ift->tstamp) / HZ)
2020					ift->prefered_lft = prefered_lft + (jiffies - ift->tstamp) / HZ;
2021				spin_unlock(&ift->lock);
2022				if (!(flags&IFA_F_TENTATIVE))
2023					ipv6_ifa_notify(0, ift);
2024			}
2025
2026			if ((create || list_empty(&in6_dev->tempaddr_list)) && in6_dev->cnf.use_tempaddr > 0) {
2027				/*
2028				 * When a new public address is created as described in [ADDRCONF],
2029				 * also create a new temporary address. Also create a temporary
2030				 * address if it's enabled but no temporary address currently exists.
 
 
2031				 */
2032				read_unlock_bh(&in6_dev->lock);
2033				ipv6_create_tempaddr(ifp, NULL);
2034			} else {
2035				read_unlock_bh(&in6_dev->lock);
2036			}
2037#endif
2038			in6_ifa_put(ifp);
2039			addrconf_verify(0);
2040		}
2041	}
2042	inet6_prefix_notify(RTM_NEWPREFIX, in6_dev, pinfo);
2043	in6_dev_put(in6_dev);
2044}
2045
2046/*
2047 *	Set destination address.
2048 *	Special case for SIT interfaces where we create a new "virtual"
2049 *	device.
2050 */
2051int addrconf_set_dstaddr(struct net *net, void __user *arg)
2052{
2053	struct in6_ifreq ireq;
2054	struct net_device *dev;
2055	int err = -EINVAL;
2056
2057	rtnl_lock();
2058
2059	err = -EFAULT;
2060	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2061		goto err_exit;
2062
2063	dev = __dev_get_by_index(net, ireq.ifr6_ifindex);
2064
2065	err = -ENODEV;
2066	if (dev == NULL)
2067		goto err_exit;
2068
2069#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2070	if (dev->type == ARPHRD_SIT) {
2071		const struct net_device_ops *ops = dev->netdev_ops;
2072		struct ifreq ifr;
2073		struct ip_tunnel_parm p;
2074
2075		err = -EADDRNOTAVAIL;
2076		if (!(ipv6_addr_type(&ireq.ifr6_addr) & IPV6_ADDR_COMPATv4))
2077			goto err_exit;
2078
2079		memset(&p, 0, sizeof(p));
2080		p.iph.daddr = ireq.ifr6_addr.s6_addr32[3];
2081		p.iph.saddr = 0;
2082		p.iph.version = 4;
2083		p.iph.ihl = 5;
2084		p.iph.protocol = IPPROTO_IPV6;
2085		p.iph.ttl = 64;
2086		ifr.ifr_ifru.ifru_data = (__force void __user *)&p;
2087
2088		if (ops->ndo_do_ioctl) {
2089			mm_segment_t oldfs = get_fs();
2090
2091			set_fs(KERNEL_DS);
2092			err = ops->ndo_do_ioctl(dev, &ifr, SIOCADDTUNNEL);
2093			set_fs(oldfs);
2094		} else
2095			err = -EOPNOTSUPP;
2096
2097		if (err == 0) {
2098			err = -ENOBUFS;
2099			dev = __dev_get_by_name(net, p.name);
2100			if (!dev)
2101				goto err_exit;
2102			err = dev_open(dev);
2103		}
2104	}
2105#endif
2106
2107err_exit:
2108	rtnl_unlock();
2109	return err;
2110}
2111
2112/*
2113 *	Manual configuration of address on an interface
2114 */
2115static int inet6_addr_add(struct net *net, int ifindex, const struct in6_addr *pfx,
2116			  unsigned int plen, __u8 ifa_flags, __u32 prefered_lft,
2117			  __u32 valid_lft)
2118{
2119	struct inet6_ifaddr *ifp;
2120	struct inet6_dev *idev;
2121	struct net_device *dev;
2122	int scope;
2123	u32 flags;
2124	clock_t expires;
2125	unsigned long timeout;
2126
2127	ASSERT_RTNL();
2128
2129	if (plen > 128)
2130		return -EINVAL;
2131
2132	/* check the lifetime */
2133	if (!valid_lft || prefered_lft > valid_lft)
2134		return -EINVAL;
2135
2136	dev = __dev_get_by_index(net, ifindex);
2137	if (!dev)
2138		return -ENODEV;
2139
2140	idev = addrconf_add_dev(dev);
2141	if (IS_ERR(idev))
2142		return PTR_ERR(idev);
2143
2144	scope = ipv6_addr_scope(pfx);
2145
2146	timeout = addrconf_timeout_fixup(valid_lft, HZ);
2147	if (addrconf_finite_timeout(timeout)) {
2148		expires = jiffies_to_clock_t(timeout * HZ);
2149		valid_lft = timeout;
2150		flags = RTF_EXPIRES;
2151	} else {
2152		expires = 0;
2153		flags = 0;
2154		ifa_flags |= IFA_F_PERMANENT;
2155	}
2156
2157	timeout = addrconf_timeout_fixup(prefered_lft, HZ);
2158	if (addrconf_finite_timeout(timeout)) {
2159		if (timeout == 0)
2160			ifa_flags |= IFA_F_DEPRECATED;
2161		prefered_lft = timeout;
2162	}
2163
2164	ifp = ipv6_add_addr(idev, pfx, plen, scope, ifa_flags);
2165
2166	if (!IS_ERR(ifp)) {
2167		spin_lock_bh(&ifp->lock);
2168		ifp->valid_lft = valid_lft;
2169		ifp->prefered_lft = prefered_lft;
2170		ifp->tstamp = jiffies;
2171		spin_unlock_bh(&ifp->lock);
2172
2173		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, dev,
2174				      expires, flags);
2175		/*
2176		 * Note that section 3.1 of RFC 4429 indicates
2177		 * that the Optimistic flag should not be set for
2178		 * manually configured addresses
2179		 */
2180		addrconf_dad_start(ifp, 0);
2181		in6_ifa_put(ifp);
2182		addrconf_verify(0);
2183		return 0;
2184	}
2185
2186	return PTR_ERR(ifp);
2187}
2188
2189static int inet6_addr_del(struct net *net, int ifindex, const struct in6_addr *pfx,
2190			  unsigned int plen)
2191{
2192	struct inet6_ifaddr *ifp;
2193	struct inet6_dev *idev;
2194	struct net_device *dev;
2195
2196	if (plen > 128)
2197		return -EINVAL;
2198
2199	dev = __dev_get_by_index(net, ifindex);
2200	if (!dev)
2201		return -ENODEV;
2202
2203	if ((idev = __in6_dev_get(dev)) == NULL)
2204		return -ENXIO;
2205
2206	read_lock_bh(&idev->lock);
2207	list_for_each_entry(ifp, &idev->addr_list, if_list) {
2208		if (ifp->prefix_len == plen &&
2209		    ipv6_addr_equal(pfx, &ifp->addr)) {
2210			in6_ifa_hold(ifp);
2211			read_unlock_bh(&idev->lock);
2212
2213			ipv6_del_addr(ifp);
2214
2215			/* If the last address is deleted administratively,
2216			   disable IPv6 on this interface.
2217			 */
2218			if (list_empty(&idev->addr_list))
2219				addrconf_ifdown(idev->dev, 1);
2220			return 0;
2221		}
2222	}
2223	read_unlock_bh(&idev->lock);
2224	return -EADDRNOTAVAIL;
2225}
2226
2227
2228int addrconf_add_ifaddr(struct net *net, void __user *arg)
2229{
2230	struct in6_ifreq ireq;
2231	int err;
2232
2233	if (!capable(CAP_NET_ADMIN))
2234		return -EPERM;
2235
2236	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2237		return -EFAULT;
2238
2239	rtnl_lock();
2240	err = inet6_addr_add(net, ireq.ifr6_ifindex, &ireq.ifr6_addr,
2241			     ireq.ifr6_prefixlen, IFA_F_PERMANENT,
2242			     INFINITY_LIFE_TIME, INFINITY_LIFE_TIME);
2243	rtnl_unlock();
2244	return err;
2245}
2246
2247int addrconf_del_ifaddr(struct net *net, void __user *arg)
2248{
2249	struct in6_ifreq ireq;
2250	int err;
2251
2252	if (!capable(CAP_NET_ADMIN))
2253		return -EPERM;
2254
2255	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2256		return -EFAULT;
2257
2258	rtnl_lock();
2259	err = inet6_addr_del(net, ireq.ifr6_ifindex, &ireq.ifr6_addr,
2260			     ireq.ifr6_prefixlen);
2261	rtnl_unlock();
2262	return err;
2263}
2264
2265static void add_addr(struct inet6_dev *idev, const struct in6_addr *addr,
2266		     int plen, int scope)
2267{
2268	struct inet6_ifaddr *ifp;
2269
2270	ifp = ipv6_add_addr(idev, addr, plen, scope, IFA_F_PERMANENT);
2271	if (!IS_ERR(ifp)) {
2272		spin_lock_bh(&ifp->lock);
2273		ifp->flags &= ~IFA_F_TENTATIVE;
2274		spin_unlock_bh(&ifp->lock);
2275		ipv6_ifa_notify(RTM_NEWADDR, ifp);
2276		in6_ifa_put(ifp);
2277	}
2278}
2279
2280#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2281static void sit_add_v4_addrs(struct inet6_dev *idev)
2282{
2283	struct in6_addr addr;
2284	struct net_device *dev;
2285	struct net *net = dev_net(idev->dev);
2286	int scope;
2287
2288	ASSERT_RTNL();
2289
2290	memset(&addr, 0, sizeof(struct in6_addr));
2291	memcpy(&addr.s6_addr32[3], idev->dev->dev_addr, 4);
2292
2293	if (idev->dev->flags&IFF_POINTOPOINT) {
2294		addr.s6_addr32[0] = htonl(0xfe800000);
2295		scope = IFA_LINK;
2296	} else {
2297		scope = IPV6_ADDR_COMPATv4;
2298	}
2299
2300	if (addr.s6_addr32[3]) {
2301		add_addr(idev, &addr, 128, scope);
2302		return;
2303	}
2304
2305	for_each_netdev(net, dev) {
2306		struct in_device * in_dev = __in_dev_get_rtnl(dev);
2307		if (in_dev && (dev->flags & IFF_UP)) {
2308			struct in_ifaddr * ifa;
2309
2310			int flag = scope;
2311
2312			for (ifa = in_dev->ifa_list; ifa; ifa = ifa->ifa_next) {
2313				int plen;
2314
2315				addr.s6_addr32[3] = ifa->ifa_local;
2316
2317				if (ifa->ifa_scope == RT_SCOPE_LINK)
2318					continue;
2319				if (ifa->ifa_scope >= RT_SCOPE_HOST) {
2320					if (idev->dev->flags&IFF_POINTOPOINT)
2321						continue;
2322					flag |= IFA_HOST;
2323				}
2324				if (idev->dev->flags&IFF_POINTOPOINT)
2325					plen = 64;
2326				else
2327					plen = 96;
2328
2329				add_addr(idev, &addr, plen, flag);
2330			}
2331		}
2332	}
2333}
2334#endif
2335
2336static void init_loopback(struct net_device *dev)
2337{
2338	struct inet6_dev  *idev;
2339
2340	/* ::1 */
2341
2342	ASSERT_RTNL();
2343
2344	if ((idev = ipv6_find_idev(dev)) == NULL) {
2345		printk(KERN_DEBUG "init loopback: add_dev failed\n");
2346		return;
2347	}
2348
2349	add_addr(idev, &in6addr_loopback, 128, IFA_HOST);
2350}
2351
2352static void addrconf_add_linklocal(struct inet6_dev *idev, const struct in6_addr *addr)
2353{
2354	struct inet6_ifaddr * ifp;
2355	u32 addr_flags = IFA_F_PERMANENT;
2356
2357#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
2358	if (idev->cnf.optimistic_dad &&
2359	    !dev_net(idev->dev)->ipv6.devconf_all->forwarding)
2360		addr_flags |= IFA_F_OPTIMISTIC;
2361#endif
2362
2363
2364	ifp = ipv6_add_addr(idev, addr, 64, IFA_LINK, addr_flags);
2365	if (!IS_ERR(ifp)) {
2366		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, idev->dev, 0, 0);
2367		addrconf_dad_start(ifp, 0);
2368		in6_ifa_put(ifp);
2369	}
2370}
2371
2372static void addrconf_dev_config(struct net_device *dev)
2373{
2374	struct in6_addr addr;
2375	struct inet6_dev    * idev;
2376
2377	ASSERT_RTNL();
2378
2379	if ((dev->type != ARPHRD_ETHER) &&
2380	    (dev->type != ARPHRD_FDDI) &&
2381	    (dev->type != ARPHRD_IEEE802_TR) &&
2382	    (dev->type != ARPHRD_ARCNET) &&
2383	    (dev->type != ARPHRD_INFINIBAND)) {
 
2384		/* Alas, we support only Ethernet autoconfiguration. */
2385		return;
2386	}
2387
2388	idev = addrconf_add_dev(dev);
2389	if (IS_ERR(idev))
2390		return;
2391
2392	memset(&addr, 0, sizeof(struct in6_addr));
2393	addr.s6_addr32[0] = htonl(0xFE800000);
2394
2395	if (ipv6_generate_eui64(addr.s6_addr + 8, dev) == 0)
2396		addrconf_add_linklocal(idev, &addr);
2397}
2398
2399#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2400static void addrconf_sit_config(struct net_device *dev)
2401{
2402	struct inet6_dev *idev;
2403
2404	ASSERT_RTNL();
2405
2406	/*
2407	 * Configure the tunnel with one of our IPv4
2408	 * addresses... we should configure all of
2409	 * our v4 addrs in the tunnel
2410	 */
2411
2412	if ((idev = ipv6_find_idev(dev)) == NULL) {
2413		printk(KERN_DEBUG "init sit: add_dev failed\n");
2414		return;
2415	}
2416
2417	if (dev->priv_flags & IFF_ISATAP) {
2418		struct in6_addr addr;
2419
2420		ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
2421		addrconf_prefix_route(&addr, 64, dev, 0, 0);
2422		if (!ipv6_generate_eui64(addr.s6_addr + 8, dev))
2423			addrconf_add_linklocal(idev, &addr);
2424		return;
2425	}
2426
2427	sit_add_v4_addrs(idev);
2428
2429	if (dev->flags&IFF_POINTOPOINT) {
2430		addrconf_add_mroute(dev);
2431		addrconf_add_lroute(dev);
2432	} else
2433		sit_route_add(dev);
2434}
2435#endif
2436
2437#if defined(CONFIG_NET_IPGRE) || defined(CONFIG_NET_IPGRE_MODULE)
2438static void addrconf_gre_config(struct net_device *dev)
2439{
2440	struct inet6_dev *idev;
2441	struct in6_addr addr;
2442
2443	pr_info("ipv6: addrconf_gre_config(%s)\n", dev->name);
2444
2445	ASSERT_RTNL();
2446
2447	if ((idev = ipv6_find_idev(dev)) == NULL) {
2448		printk(KERN_DEBUG "init gre: add_dev failed\n");
2449		return;
2450	}
2451
2452	ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
2453	addrconf_prefix_route(&addr, 64, dev, 0, 0);
2454
2455	if (!ipv6_generate_eui64(addr.s6_addr + 8, dev))
2456		addrconf_add_linklocal(idev, &addr);
2457}
2458#endif
2459
2460static inline int
2461ipv6_inherit_linklocal(struct inet6_dev *idev, struct net_device *link_dev)
2462{
2463	struct in6_addr lladdr;
2464
2465	if (!ipv6_get_lladdr(link_dev, &lladdr, IFA_F_TENTATIVE)) {
2466		addrconf_add_linklocal(idev, &lladdr);
2467		return 0;
2468	}
2469	return -1;
2470}
2471
2472static void ip6_tnl_add_linklocal(struct inet6_dev *idev)
2473{
2474	struct net_device *link_dev;
2475	struct net *net = dev_net(idev->dev);
2476
2477	/* first try to inherit the link-local address from the link device */
2478	if (idev->dev->iflink &&
2479	    (link_dev = __dev_get_by_index(net, idev->dev->iflink))) {
2480		if (!ipv6_inherit_linklocal(idev, link_dev))
2481			return;
2482	}
2483	/* then try to inherit it from any device */
2484	for_each_netdev(net, link_dev) {
2485		if (!ipv6_inherit_linklocal(idev, link_dev))
2486			return;
2487	}
2488	printk(KERN_DEBUG "init ip6-ip6: add_linklocal failed\n");
2489}
2490
2491/*
2492 * Autoconfigure tunnel with a link-local address so routing protocols,
2493 * DHCPv6, MLD etc. can be run over the virtual link
2494 */
2495
2496static void addrconf_ip6_tnl_config(struct net_device *dev)
2497{
2498	struct inet6_dev *idev;
2499
2500	ASSERT_RTNL();
2501
2502	idev = addrconf_add_dev(dev);
2503	if (IS_ERR(idev)) {
2504		printk(KERN_DEBUG "init ip6-ip6: add_dev failed\n");
2505		return;
2506	}
2507	ip6_tnl_add_linklocal(idev);
2508}
2509
2510static int addrconf_notify(struct notifier_block *this, unsigned long event,
2511			   void * data)
2512{
2513	struct net_device *dev = (struct net_device *) data;
2514	struct inet6_dev *idev = __in6_dev_get(dev);
2515	int run_pending = 0;
2516	int err;
2517
2518	switch (event) {
2519	case NETDEV_REGISTER:
2520		if (!idev && dev->mtu >= IPV6_MIN_MTU) {
2521			idev = ipv6_add_dev(dev);
2522			if (!idev)
2523				return notifier_from_errno(-ENOMEM);
2524		}
2525		break;
2526
2527	case NETDEV_UP:
2528	case NETDEV_CHANGE:
2529		if (dev->flags & IFF_SLAVE)
2530			break;
2531
2532		if (event == NETDEV_UP) {
2533			if (!addrconf_qdisc_ok(dev)) {
2534				/* device is not ready yet. */
2535				printk(KERN_INFO
2536					"ADDRCONF(NETDEV_UP): %s: "
2537					"link is not ready\n",
2538					dev->name);
2539				break;
2540			}
2541
2542			if (!idev && dev->mtu >= IPV6_MIN_MTU)
2543				idev = ipv6_add_dev(dev);
2544
2545			if (idev) {
2546				idev->if_flags |= IF_READY;
2547				run_pending = 1;
2548			}
2549		} else {
2550			if (!addrconf_qdisc_ok(dev)) {
2551				/* device is still not ready. */
2552				break;
2553			}
2554
2555			if (idev) {
2556				if (idev->if_flags & IF_READY)
2557					/* device is already configured. */
2558					break;
2559				idev->if_flags |= IF_READY;
2560			}
2561
2562			printk(KERN_INFO
2563					"ADDRCONF(NETDEV_CHANGE): %s: "
2564					"link becomes ready\n",
2565					dev->name);
2566
2567			run_pending = 1;
2568		}
2569
2570		switch (dev->type) {
2571#if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2572		case ARPHRD_SIT:
2573			addrconf_sit_config(dev);
2574			break;
2575#endif
2576#if defined(CONFIG_NET_IPGRE) || defined(CONFIG_NET_IPGRE_MODULE)
2577		case ARPHRD_IPGRE:
2578			addrconf_gre_config(dev);
2579			break;
2580#endif
2581		case ARPHRD_TUNNEL6:
2582			addrconf_ip6_tnl_config(dev);
2583			break;
2584		case ARPHRD_LOOPBACK:
2585			init_loopback(dev);
2586			break;
2587
2588		default:
2589			addrconf_dev_config(dev);
2590			break;
2591		}
2592
2593		if (idev) {
2594			if (run_pending)
2595				addrconf_dad_run(idev);
2596
2597			/*
2598			 * If the MTU changed during the interface down,
2599			 * when the interface up, the changed MTU must be
2600			 * reflected in the idev as well as routers.
2601			 */
2602			if (idev->cnf.mtu6 != dev->mtu &&
2603			    dev->mtu >= IPV6_MIN_MTU) {
2604				rt6_mtu_change(dev, dev->mtu);
2605				idev->cnf.mtu6 = dev->mtu;
2606			}
2607			idev->tstamp = jiffies;
2608			inet6_ifinfo_notify(RTM_NEWLINK, idev);
2609
2610			/*
2611			 * If the changed mtu during down is lower than
2612			 * IPV6_MIN_MTU stop IPv6 on this interface.
2613			 */
2614			if (dev->mtu < IPV6_MIN_MTU)
2615				addrconf_ifdown(dev, 1);
2616		}
2617		break;
2618
2619	case NETDEV_CHANGEMTU:
2620		if (idev && dev->mtu >= IPV6_MIN_MTU) {
2621			rt6_mtu_change(dev, dev->mtu);
2622			idev->cnf.mtu6 = dev->mtu;
2623			break;
2624		}
2625
2626		if (!idev && dev->mtu >= IPV6_MIN_MTU) {
2627			idev = ipv6_add_dev(dev);
2628			if (idev)
2629				break;
2630		}
2631
2632		/*
2633		 * MTU falled under IPV6_MIN_MTU.
2634		 * Stop IPv6 on this interface.
2635		 */
2636
2637	case NETDEV_DOWN:
2638	case NETDEV_UNREGISTER:
2639		/*
2640		 *	Remove all addresses from this interface.
2641		 */
2642		addrconf_ifdown(dev, event != NETDEV_DOWN);
2643		break;
2644
2645	case NETDEV_CHANGENAME:
2646		if (idev) {
2647			snmp6_unregister_dev(idev);
2648			addrconf_sysctl_unregister(idev);
2649			addrconf_sysctl_register(idev);
2650			err = snmp6_register_dev(idev);
2651			if (err)
2652				return notifier_from_errno(err);
2653		}
2654		break;
2655
2656	case NETDEV_PRE_TYPE_CHANGE:
2657	case NETDEV_POST_TYPE_CHANGE:
2658		addrconf_type_change(dev, event);
2659		break;
2660	}
2661
2662	return NOTIFY_OK;
2663}
2664
2665/*
2666 *	addrconf module should be notified of a device going up
2667 */
2668static struct notifier_block ipv6_dev_notf = {
2669	.notifier_call = addrconf_notify,
2670};
2671
2672static void addrconf_type_change(struct net_device *dev, unsigned long event)
2673{
2674	struct inet6_dev *idev;
2675	ASSERT_RTNL();
2676
2677	idev = __in6_dev_get(dev);
2678
2679	if (event == NETDEV_POST_TYPE_CHANGE)
2680		ipv6_mc_remap(idev);
2681	else if (event == NETDEV_PRE_TYPE_CHANGE)
2682		ipv6_mc_unmap(idev);
2683}
2684
2685static int addrconf_ifdown(struct net_device *dev, int how)
2686{
2687	struct net *net = dev_net(dev);
2688	struct inet6_dev *idev;
2689	struct inet6_ifaddr *ifa;
2690	int state, i;
2691
2692	ASSERT_RTNL();
2693
2694	rt6_ifdown(net, dev);
2695	neigh_ifdown(&nd_tbl, dev);
2696
2697	idev = __in6_dev_get(dev);
2698	if (idev == NULL)
2699		return -ENODEV;
2700
2701	/*
2702	 * Step 1: remove reference to ipv6 device from parent device.
2703	 *	   Do not dev_put!
2704	 */
2705	if (how) {
2706		idev->dead = 1;
2707
2708		/* protected by rtnl_lock */
2709		rcu_assign_pointer(dev->ip6_ptr, NULL);
2710
2711		/* Step 1.5: remove snmp6 entry */
2712		snmp6_unregister_dev(idev);
2713
2714	}
2715
2716	/* Step 2: clear hash table */
2717	for (i = 0; i < IN6_ADDR_HSIZE; i++) {
2718		struct hlist_head *h = &inet6_addr_lst[i];
2719		struct hlist_node *n;
2720
2721		spin_lock_bh(&addrconf_hash_lock);
2722	restart:
2723		hlist_for_each_entry_rcu(ifa, n, h, addr_lst) {
2724			if (ifa->idev == idev) {
2725				hlist_del_init_rcu(&ifa->addr_lst);
2726				addrconf_del_timer(ifa);
2727				goto restart;
2728			}
2729		}
2730		spin_unlock_bh(&addrconf_hash_lock);
2731	}
2732
2733	write_lock_bh(&idev->lock);
2734
2735	/* Step 2: clear flags for stateless addrconf */
2736	if (!how)
2737		idev->if_flags &= ~(IF_RS_SENT|IF_RA_RCVD|IF_READY);
2738
2739#ifdef CONFIG_IPV6_PRIVACY
2740	if (how && del_timer(&idev->regen_timer))
2741		in6_dev_put(idev);
2742
2743	/* Step 3: clear tempaddr list */
2744	while (!list_empty(&idev->tempaddr_list)) {
2745		ifa = list_first_entry(&idev->tempaddr_list,
2746				       struct inet6_ifaddr, tmp_list);
2747		list_del(&ifa->tmp_list);
2748		write_unlock_bh(&idev->lock);
2749		spin_lock_bh(&ifa->lock);
2750
2751		if (ifa->ifpub) {
2752			in6_ifa_put(ifa->ifpub);
2753			ifa->ifpub = NULL;
2754		}
2755		spin_unlock_bh(&ifa->lock);
2756		in6_ifa_put(ifa);
2757		write_lock_bh(&idev->lock);
2758	}
2759#endif
2760
2761	while (!list_empty(&idev->addr_list)) {
2762		ifa = list_first_entry(&idev->addr_list,
2763				       struct inet6_ifaddr, if_list);
2764		addrconf_del_timer(ifa);
2765
2766		list_del(&ifa->if_list);
2767
2768		write_unlock_bh(&idev->lock);
2769
2770		spin_lock_bh(&ifa->state_lock);
2771		state = ifa->state;
2772		ifa->state = INET6_IFADDR_STATE_DEAD;
2773		spin_unlock_bh(&ifa->state_lock);
2774
2775		if (state != INET6_IFADDR_STATE_DEAD) {
2776			__ipv6_ifa_notify(RTM_DELADDR, ifa);
2777			atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifa);
2778		}
2779		in6_ifa_put(ifa);
2780
2781		write_lock_bh(&idev->lock);
2782	}
2783
2784	write_unlock_bh(&idev->lock);
2785
2786	/* Step 5: Discard multicast list */
2787	if (how)
2788		ipv6_mc_destroy_dev(idev);
2789	else
2790		ipv6_mc_down(idev);
2791
2792	idev->tstamp = jiffies;
2793
2794	/* Last: Shot the device (if unregistered) */
2795	if (how) {
2796		addrconf_sysctl_unregister(idev);
2797		neigh_parms_release(&nd_tbl, idev->nd_parms);
2798		neigh_ifdown(&nd_tbl, dev);
2799		in6_dev_put(idev);
2800	}
2801	return 0;
2802}
2803
2804static void addrconf_rs_timer(unsigned long data)
2805{
2806	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2807	struct inet6_dev *idev = ifp->idev;
2808
2809	read_lock(&idev->lock);
2810	if (idev->dead || !(idev->if_flags & IF_READY))
2811		goto out;
2812
2813	if (idev->cnf.forwarding)
2814		goto out;
2815
2816	/* Announcement received after solicitation was sent */
2817	if (idev->if_flags & IF_RA_RCVD)
2818		goto out;
2819
2820	spin_lock(&ifp->lock);
2821	if (ifp->probes++ < idev->cnf.rtr_solicits) {
2822		/* The wait after the last probe can be shorter */
2823		addrconf_mod_timer(ifp, AC_RS,
2824				   (ifp->probes == idev->cnf.rtr_solicits) ?
2825				   idev->cnf.rtr_solicit_delay :
2826				   idev->cnf.rtr_solicit_interval);
2827		spin_unlock(&ifp->lock);
2828
2829		ndisc_send_rs(idev->dev, &ifp->addr, &in6addr_linklocal_allrouters);
2830	} else {
2831		spin_unlock(&ifp->lock);
2832		/*
2833		 * Note: we do not support deprecated "all on-link"
2834		 * assumption any longer.
2835		 */
2836		printk(KERN_DEBUG "%s: no IPv6 routers present\n",
2837		       idev->dev->name);
2838	}
2839
2840out:
2841	read_unlock(&idev->lock);
2842	in6_ifa_put(ifp);
2843}
2844
2845/*
2846 *	Duplicate Address Detection
2847 */
2848static void addrconf_dad_kick(struct inet6_ifaddr *ifp)
2849{
2850	unsigned long rand_num;
2851	struct inet6_dev *idev = ifp->idev;
2852
2853	if (ifp->flags & IFA_F_OPTIMISTIC)
2854		rand_num = 0;
2855	else
2856		rand_num = net_random() % (idev->cnf.rtr_solicit_delay ? : 1);
2857
2858	ifp->probes = idev->cnf.dad_transmits;
2859	addrconf_mod_timer(ifp, AC_DAD, rand_num);
2860}
2861
2862static void addrconf_dad_start(struct inet6_ifaddr *ifp, u32 flags)
2863{
2864	struct inet6_dev *idev = ifp->idev;
2865	struct net_device *dev = idev->dev;
2866
2867	addrconf_join_solict(dev, &ifp->addr);
2868
2869	net_srandom(ifp->addr.s6_addr32[3]);
2870
2871	read_lock_bh(&idev->lock);
2872	spin_lock(&ifp->lock);
2873	if (ifp->state == INET6_IFADDR_STATE_DEAD)
2874		goto out;
2875
2876	if (dev->flags&(IFF_NOARP|IFF_LOOPBACK) ||
2877	    idev->cnf.accept_dad < 1 ||
2878	    !(ifp->flags&IFA_F_TENTATIVE) ||
2879	    ifp->flags & IFA_F_NODAD) {
2880		ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
2881		spin_unlock(&ifp->lock);
2882		read_unlock_bh(&idev->lock);
2883
2884		addrconf_dad_completed(ifp);
2885		return;
2886	}
2887
2888	if (!(idev->if_flags & IF_READY)) {
2889		spin_unlock(&ifp->lock);
2890		read_unlock_bh(&idev->lock);
2891		/*
2892		 * If the device is not ready:
2893		 * - keep it tentative if it is a permanent address.
2894		 * - otherwise, kill it.
2895		 */
2896		in6_ifa_hold(ifp);
2897		addrconf_dad_stop(ifp, 0);
2898		return;
2899	}
2900
2901	/*
2902	 * Optimistic nodes can start receiving
2903	 * Frames right away
2904	 */
2905	if (ifp->flags & IFA_F_OPTIMISTIC)
2906		ip6_ins_rt(ifp->rt);
2907
2908	addrconf_dad_kick(ifp);
2909out:
2910	spin_unlock(&ifp->lock);
2911	read_unlock_bh(&idev->lock);
2912}
2913
2914static void addrconf_dad_timer(unsigned long data)
2915{
2916	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2917	struct inet6_dev *idev = ifp->idev;
2918	struct in6_addr mcaddr;
2919
2920	if (!ifp->probes && addrconf_dad_end(ifp))
2921		goto out;
2922
2923	read_lock(&idev->lock);
2924	if (idev->dead || !(idev->if_flags & IF_READY)) {
2925		read_unlock(&idev->lock);
2926		goto out;
2927	}
2928
2929	spin_lock(&ifp->lock);
2930	if (ifp->state == INET6_IFADDR_STATE_DEAD) {
2931		spin_unlock(&ifp->lock);
2932		read_unlock(&idev->lock);
2933		goto out;
2934	}
2935
2936	if (ifp->probes == 0) {
2937		/*
2938		 * DAD was successful
2939		 */
2940
2941		ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
2942		spin_unlock(&ifp->lock);
2943		read_unlock(&idev->lock);
2944
2945		addrconf_dad_completed(ifp);
2946
2947		goto out;
2948	}
2949
2950	ifp->probes--;
2951	addrconf_mod_timer(ifp, AC_DAD, ifp->idev->nd_parms->retrans_time);
2952	spin_unlock(&ifp->lock);
2953	read_unlock(&idev->lock);
2954
2955	/* send a neighbour solicitation for our addr */
2956	addrconf_addr_solict_mult(&ifp->addr, &mcaddr);
2957	ndisc_send_ns(ifp->idev->dev, NULL, &ifp->addr, &mcaddr, &in6addr_any);
2958out:
2959	in6_ifa_put(ifp);
2960}
2961
2962static void addrconf_dad_completed(struct inet6_ifaddr *ifp)
2963{
2964	struct net_device *dev = ifp->idev->dev;
2965
2966	/*
2967	 *	Configure the address for reception. Now it is valid.
2968	 */
2969
2970	ipv6_ifa_notify(RTM_NEWADDR, ifp);
2971
2972	/* If added prefix is link local and forwarding is off,
2973	   start sending router solicitations.
2974	 */
2975
2976	if ((ifp->idev->cnf.forwarding == 0 ||
2977	     ifp->idev->cnf.forwarding == 2) &&
2978	    ifp->idev->cnf.rtr_solicits > 0 &&
2979	    (dev->flags&IFF_LOOPBACK) == 0 &&
2980	    (ipv6_addr_type(&ifp->addr) & IPV6_ADDR_LINKLOCAL)) {
2981		/*
2982		 *	If a host as already performed a random delay
2983		 *	[...] as part of DAD [...] there is no need
2984		 *	to delay again before sending the first RS
2985		 */
2986		ndisc_send_rs(ifp->idev->dev, &ifp->addr, &in6addr_linklocal_allrouters);
2987
2988		spin_lock_bh(&ifp->lock);
2989		ifp->probes = 1;
2990		ifp->idev->if_flags |= IF_RS_SENT;
2991		addrconf_mod_timer(ifp, AC_RS, ifp->idev->cnf.rtr_solicit_interval);
2992		spin_unlock_bh(&ifp->lock);
2993	}
2994}
2995
2996static void addrconf_dad_run(struct inet6_dev *idev)
2997{
2998	struct inet6_ifaddr *ifp;
2999
3000	read_lock_bh(&idev->lock);
3001	list_for_each_entry(ifp, &idev->addr_list, if_list) {
3002		spin_lock(&ifp->lock);
3003		if (ifp->flags & IFA_F_TENTATIVE &&
3004		    ifp->state == INET6_IFADDR_STATE_DAD)
3005			addrconf_dad_kick(ifp);
3006		spin_unlock(&ifp->lock);
3007	}
3008	read_unlock_bh(&idev->lock);
3009}
3010
3011#ifdef CONFIG_PROC_FS
3012struct if6_iter_state {
3013	struct seq_net_private p;
3014	int bucket;
 
3015};
3016
3017static struct inet6_ifaddr *if6_get_first(struct seq_file *seq)
3018{
3019	struct inet6_ifaddr *ifa = NULL;
3020	struct if6_iter_state *state = seq->private;
3021	struct net *net = seq_file_net(seq);
 
 
 
 
 
 
 
3022
3023	for (state->bucket = 0; state->bucket < IN6_ADDR_HSIZE; ++state->bucket) {
3024		struct hlist_node *n;
3025		hlist_for_each_entry_rcu_bh(ifa, n, &inet6_addr_lst[state->bucket],
3026					 addr_lst)
 
 
 
 
 
 
3027			if (net_eq(dev_net(ifa->idev->dev), net))
3028				return ifa;
 
 
 
 
 
3029	}
3030	return NULL;
3031}
3032
3033static struct inet6_ifaddr *if6_get_next(struct seq_file *seq,
3034					 struct inet6_ifaddr *ifa)
3035{
3036	struct if6_iter_state *state = seq->private;
3037	struct net *net = seq_file_net(seq);
3038	struct hlist_node *n = &ifa->addr_lst;
3039
3040	hlist_for_each_entry_continue_rcu_bh(ifa, n, addr_lst)
 
3041		if (net_eq(dev_net(ifa->idev->dev), net))
3042			return ifa;
 
3043
3044	while (++state->bucket < IN6_ADDR_HSIZE) {
 
3045		hlist_for_each_entry_rcu_bh(ifa, n,
3046				     &inet6_addr_lst[state->bucket], addr_lst) {
 
3047			if (net_eq(dev_net(ifa->idev->dev), net))
3048				return ifa;
3049		}
3050	}
3051
3052	return NULL;
3053}
3054
3055static struct inet6_ifaddr *if6_get_idx(struct seq_file *seq, loff_t pos)
3056{
3057	struct inet6_ifaddr *ifa = if6_get_first(seq);
3058
3059	if (ifa)
3060		while (pos && (ifa = if6_get_next(seq, ifa)) != NULL)
3061			--pos;
3062	return pos ? NULL : ifa;
3063}
3064
3065static void *if6_seq_start(struct seq_file *seq, loff_t *pos)
3066	__acquires(rcu_bh)
3067{
3068	rcu_read_lock_bh();
3069	return if6_get_idx(seq, *pos);
3070}
3071
3072static void *if6_seq_next(struct seq_file *seq, void *v, loff_t *pos)
3073{
3074	struct inet6_ifaddr *ifa;
3075
3076	ifa = if6_get_next(seq, v);
3077	++*pos;
3078	return ifa;
3079}
3080
3081static void if6_seq_stop(struct seq_file *seq, void *v)
3082	__releases(rcu_bh)
3083{
3084	rcu_read_unlock_bh();
3085}
3086
3087static int if6_seq_show(struct seq_file *seq, void *v)
3088{
3089	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *)v;
3090	seq_printf(seq, "%pi6 %02x %02x %02x %02x %8s\n",
3091		   &ifp->addr,
3092		   ifp->idev->dev->ifindex,
3093		   ifp->prefix_len,
3094		   ifp->scope,
3095		   ifp->flags,
3096		   ifp->idev->dev->name);
3097	return 0;
3098}
3099
3100static const struct seq_operations if6_seq_ops = {
3101	.start	= if6_seq_start,
3102	.next	= if6_seq_next,
3103	.show	= if6_seq_show,
3104	.stop	= if6_seq_stop,
3105};
3106
3107static int if6_seq_open(struct inode *inode, struct file *file)
3108{
3109	return seq_open_net(inode, file, &if6_seq_ops,
3110			    sizeof(struct if6_iter_state));
3111}
3112
3113static const struct file_operations if6_fops = {
3114	.owner		= THIS_MODULE,
3115	.open		= if6_seq_open,
3116	.read		= seq_read,
3117	.llseek		= seq_lseek,
3118	.release	= seq_release_net,
3119};
3120
3121static int __net_init if6_proc_net_init(struct net *net)
3122{
3123	if (!proc_net_fops_create(net, "if_inet6", S_IRUGO, &if6_fops))
3124		return -ENOMEM;
3125	return 0;
3126}
3127
3128static void __net_exit if6_proc_net_exit(struct net *net)
3129{
3130       proc_net_remove(net, "if_inet6");
3131}
3132
3133static struct pernet_operations if6_proc_net_ops = {
3134       .init = if6_proc_net_init,
3135       .exit = if6_proc_net_exit,
3136};
3137
3138int __init if6_proc_init(void)
3139{
3140	return register_pernet_subsys(&if6_proc_net_ops);
3141}
3142
3143void if6_proc_exit(void)
3144{
3145	unregister_pernet_subsys(&if6_proc_net_ops);
3146}
3147#endif	/* CONFIG_PROC_FS */
3148
3149#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
3150/* Check if address is a home address configured on any interface. */
3151int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr)
3152{
3153	int ret = 0;
3154	struct inet6_ifaddr *ifp = NULL;
3155	struct hlist_node *n;
3156	unsigned int hash = ipv6_addr_hash(addr);
3157
3158	rcu_read_lock_bh();
3159	hlist_for_each_entry_rcu_bh(ifp, n, &inet6_addr_lst[hash], addr_lst) {
3160		if (!net_eq(dev_net(ifp->idev->dev), net))
3161			continue;
3162		if (ipv6_addr_equal(&ifp->addr, addr) &&
3163		    (ifp->flags & IFA_F_HOMEADDRESS)) {
3164			ret = 1;
3165			break;
3166		}
3167	}
3168	rcu_read_unlock_bh();
3169	return ret;
3170}
3171#endif
3172
3173/*
3174 *	Periodic address status verification
3175 */
3176
3177static void addrconf_verify(unsigned long foo)
3178{
3179	unsigned long now, next, next_sec, next_sched;
3180	struct inet6_ifaddr *ifp;
3181	struct hlist_node *node;
3182	int i;
3183
3184	rcu_read_lock_bh();
3185	spin_lock(&addrconf_verify_lock);
3186	now = jiffies;
3187	next = round_jiffies_up(now + ADDR_CHECK_FREQUENCY);
3188
3189	del_timer(&addr_chk_timer);
3190
3191	for (i = 0; i < IN6_ADDR_HSIZE; i++) {
3192restart:
3193		hlist_for_each_entry_rcu_bh(ifp, node,
3194					 &inet6_addr_lst[i], addr_lst) {
3195			unsigned long age;
3196
3197			if (ifp->flags & IFA_F_PERMANENT)
3198				continue;
3199
3200			spin_lock(&ifp->lock);
3201			/* We try to batch several events at once. */
3202			age = (now - ifp->tstamp + ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
3203
3204			if (ifp->valid_lft != INFINITY_LIFE_TIME &&
3205			    age >= ifp->valid_lft) {
3206				spin_unlock(&ifp->lock);
3207				in6_ifa_hold(ifp);
3208				ipv6_del_addr(ifp);
3209				goto restart;
3210			} else if (ifp->prefered_lft == INFINITY_LIFE_TIME) {
3211				spin_unlock(&ifp->lock);
3212				continue;
3213			} else if (age >= ifp->prefered_lft) {
3214				/* jiffies - ifp->tstamp > age >= ifp->prefered_lft */
3215				int deprecate = 0;
3216
3217				if (!(ifp->flags&IFA_F_DEPRECATED)) {
3218					deprecate = 1;
3219					ifp->flags |= IFA_F_DEPRECATED;
3220				}
3221
3222				if (time_before(ifp->tstamp + ifp->valid_lft * HZ, next))
3223					next = ifp->tstamp + ifp->valid_lft * HZ;
3224
3225				spin_unlock(&ifp->lock);
3226
3227				if (deprecate) {
3228					in6_ifa_hold(ifp);
3229
3230					ipv6_ifa_notify(0, ifp);
3231					in6_ifa_put(ifp);
3232					goto restart;
3233				}
3234#ifdef CONFIG_IPV6_PRIVACY
3235			} else if ((ifp->flags&IFA_F_TEMPORARY) &&
3236				   !(ifp->flags&IFA_F_TENTATIVE)) {
3237				unsigned long regen_advance = ifp->idev->cnf.regen_max_retry *
3238					ifp->idev->cnf.dad_transmits *
3239					ifp->idev->nd_parms->retrans_time / HZ;
3240
3241				if (age >= ifp->prefered_lft - regen_advance) {
3242					struct inet6_ifaddr *ifpub = ifp->ifpub;
3243					if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
3244						next = ifp->tstamp + ifp->prefered_lft * HZ;
3245					if (!ifp->regen_count && ifpub) {
3246						ifp->regen_count++;
3247						in6_ifa_hold(ifp);
3248						in6_ifa_hold(ifpub);
3249						spin_unlock(&ifp->lock);
3250
3251						spin_lock(&ifpub->lock);
3252						ifpub->regen_count = 0;
3253						spin_unlock(&ifpub->lock);
3254						ipv6_create_tempaddr(ifpub, ifp);
3255						in6_ifa_put(ifpub);
3256						in6_ifa_put(ifp);
3257						goto restart;
3258					}
3259				} else if (time_before(ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ, next))
3260					next = ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ;
3261				spin_unlock(&ifp->lock);
3262#endif
3263			} else {
3264				/* ifp->prefered_lft <= ifp->valid_lft */
3265				if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
3266					next = ifp->tstamp + ifp->prefered_lft * HZ;
3267				spin_unlock(&ifp->lock);
3268			}
3269		}
3270	}
3271
3272	next_sec = round_jiffies_up(next);
3273	next_sched = next;
3274
3275	/* If rounded timeout is accurate enough, accept it. */
3276	if (time_before(next_sec, next + ADDRCONF_TIMER_FUZZ))
3277		next_sched = next_sec;
3278
3279	/* And minimum interval is ADDRCONF_TIMER_FUZZ_MAX. */
3280	if (time_before(next_sched, jiffies + ADDRCONF_TIMER_FUZZ_MAX))
3281		next_sched = jiffies + ADDRCONF_TIMER_FUZZ_MAX;
3282
3283	ADBG((KERN_DEBUG "now = %lu, schedule = %lu, rounded schedule = %lu => %lu\n",
3284	      now, next, next_sec, next_sched));
3285
3286	addr_chk_timer.expires = next_sched;
3287	add_timer(&addr_chk_timer);
3288	spin_unlock(&addrconf_verify_lock);
3289	rcu_read_unlock_bh();
3290}
3291
3292static struct in6_addr *extract_addr(struct nlattr *addr, struct nlattr *local)
3293{
3294	struct in6_addr *pfx = NULL;
3295
3296	if (addr)
3297		pfx = nla_data(addr);
3298
3299	if (local) {
3300		if (pfx && nla_memcmp(local, pfx, sizeof(*pfx)))
3301			pfx = NULL;
3302		else
3303			pfx = nla_data(local);
3304	}
3305
3306	return pfx;
3307}
3308
3309static const struct nla_policy ifa_ipv6_policy[IFA_MAX+1] = {
3310	[IFA_ADDRESS]		= { .len = sizeof(struct in6_addr) },
3311	[IFA_LOCAL]		= { .len = sizeof(struct in6_addr) },
3312	[IFA_CACHEINFO]		= { .len = sizeof(struct ifa_cacheinfo) },
3313};
3314
3315static int
3316inet6_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
3317{
3318	struct net *net = sock_net(skb->sk);
3319	struct ifaddrmsg *ifm;
3320	struct nlattr *tb[IFA_MAX+1];
3321	struct in6_addr *pfx;
3322	int err;
3323
3324	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3325	if (err < 0)
3326		return err;
3327
3328	ifm = nlmsg_data(nlh);
3329	pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3330	if (pfx == NULL)
3331		return -EINVAL;
3332
3333	return inet6_addr_del(net, ifm->ifa_index, pfx, ifm->ifa_prefixlen);
3334}
3335
3336static int inet6_addr_modify(struct inet6_ifaddr *ifp, u8 ifa_flags,
3337			     u32 prefered_lft, u32 valid_lft)
3338{
3339	u32 flags;
3340	clock_t expires;
3341	unsigned long timeout;
3342
3343	if (!valid_lft || (prefered_lft > valid_lft))
3344		return -EINVAL;
3345
3346	timeout = addrconf_timeout_fixup(valid_lft, HZ);
3347	if (addrconf_finite_timeout(timeout)) {
3348		expires = jiffies_to_clock_t(timeout * HZ);
3349		valid_lft = timeout;
3350		flags = RTF_EXPIRES;
3351	} else {
3352		expires = 0;
3353		flags = 0;
3354		ifa_flags |= IFA_F_PERMANENT;
3355	}
3356
3357	timeout = addrconf_timeout_fixup(prefered_lft, HZ);
3358	if (addrconf_finite_timeout(timeout)) {
3359		if (timeout == 0)
3360			ifa_flags |= IFA_F_DEPRECATED;
3361		prefered_lft = timeout;
3362	}
3363
3364	spin_lock_bh(&ifp->lock);
3365	ifp->flags = (ifp->flags & ~(IFA_F_DEPRECATED | IFA_F_PERMANENT | IFA_F_NODAD | IFA_F_HOMEADDRESS)) | ifa_flags;
3366	ifp->tstamp = jiffies;
3367	ifp->valid_lft = valid_lft;
3368	ifp->prefered_lft = prefered_lft;
3369
3370	spin_unlock_bh(&ifp->lock);
3371	if (!(ifp->flags&IFA_F_TENTATIVE))
3372		ipv6_ifa_notify(0, ifp);
3373
3374	addrconf_prefix_route(&ifp->addr, ifp->prefix_len, ifp->idev->dev,
3375			      expires, flags);
3376	addrconf_verify(0);
3377
3378	return 0;
3379}
3380
3381static int
3382inet6_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
3383{
3384	struct net *net = sock_net(skb->sk);
3385	struct ifaddrmsg *ifm;
3386	struct nlattr *tb[IFA_MAX+1];
3387	struct in6_addr *pfx;
3388	struct inet6_ifaddr *ifa;
3389	struct net_device *dev;
3390	u32 valid_lft = INFINITY_LIFE_TIME, preferred_lft = INFINITY_LIFE_TIME;
3391	u8 ifa_flags;
3392	int err;
3393
3394	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3395	if (err < 0)
3396		return err;
3397
3398	ifm = nlmsg_data(nlh);
3399	pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3400	if (pfx == NULL)
3401		return -EINVAL;
3402
3403	if (tb[IFA_CACHEINFO]) {
3404		struct ifa_cacheinfo *ci;
3405
3406		ci = nla_data(tb[IFA_CACHEINFO]);
3407		valid_lft = ci->ifa_valid;
3408		preferred_lft = ci->ifa_prefered;
3409	} else {
3410		preferred_lft = INFINITY_LIFE_TIME;
3411		valid_lft = INFINITY_LIFE_TIME;
3412	}
3413
3414	dev =  __dev_get_by_index(net, ifm->ifa_index);
3415	if (dev == NULL)
3416		return -ENODEV;
3417
3418	/* We ignore other flags so far. */
3419	ifa_flags = ifm->ifa_flags & (IFA_F_NODAD | IFA_F_HOMEADDRESS);
3420
3421	ifa = ipv6_get_ifaddr(net, pfx, dev, 1);
3422	if (ifa == NULL) {
3423		/*
3424		 * It would be best to check for !NLM_F_CREATE here but
3425		 * userspace alreay relies on not having to provide this.
3426		 */
3427		return inet6_addr_add(net, ifm->ifa_index, pfx,
3428				      ifm->ifa_prefixlen, ifa_flags,
3429				      preferred_lft, valid_lft);
3430	}
3431
3432	if (nlh->nlmsg_flags & NLM_F_EXCL ||
3433	    !(nlh->nlmsg_flags & NLM_F_REPLACE))
3434		err = -EEXIST;
3435	else
3436		err = inet6_addr_modify(ifa, ifa_flags, preferred_lft, valid_lft);
3437
3438	in6_ifa_put(ifa);
3439
3440	return err;
3441}
3442
3443static void put_ifaddrmsg(struct nlmsghdr *nlh, u8 prefixlen, u8 flags,
3444			  u8 scope, int ifindex)
3445{
3446	struct ifaddrmsg *ifm;
3447
3448	ifm = nlmsg_data(nlh);
3449	ifm->ifa_family = AF_INET6;
3450	ifm->ifa_prefixlen = prefixlen;
3451	ifm->ifa_flags = flags;
3452	ifm->ifa_scope = scope;
3453	ifm->ifa_index = ifindex;
3454}
3455
3456static int put_cacheinfo(struct sk_buff *skb, unsigned long cstamp,
3457			 unsigned long tstamp, u32 preferred, u32 valid)
3458{
3459	struct ifa_cacheinfo ci;
3460
3461	ci.cstamp = cstamp_delta(cstamp);
3462	ci.tstamp = cstamp_delta(tstamp);
3463	ci.ifa_prefered = preferred;
3464	ci.ifa_valid = valid;
3465
3466	return nla_put(skb, IFA_CACHEINFO, sizeof(ci), &ci);
3467}
3468
3469static inline int rt_scope(int ifa_scope)
3470{
3471	if (ifa_scope & IFA_HOST)
3472		return RT_SCOPE_HOST;
3473	else if (ifa_scope & IFA_LINK)
3474		return RT_SCOPE_LINK;
3475	else if (ifa_scope & IFA_SITE)
3476		return RT_SCOPE_SITE;
3477	else
3478		return RT_SCOPE_UNIVERSE;
3479}
3480
3481static inline int inet6_ifaddr_msgsize(void)
3482{
3483	return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
3484	       + nla_total_size(16) /* IFA_ADDRESS */
3485	       + nla_total_size(sizeof(struct ifa_cacheinfo));
3486}
3487
3488static int inet6_fill_ifaddr(struct sk_buff *skb, struct inet6_ifaddr *ifa,
3489			     u32 pid, u32 seq, int event, unsigned int flags)
3490{
3491	struct nlmsghdr  *nlh;
3492	u32 preferred, valid;
3493
3494	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3495	if (nlh == NULL)
3496		return -EMSGSIZE;
3497
3498	put_ifaddrmsg(nlh, ifa->prefix_len, ifa->flags, rt_scope(ifa->scope),
3499		      ifa->idev->dev->ifindex);
3500
3501	if (!(ifa->flags&IFA_F_PERMANENT)) {
3502		preferred = ifa->prefered_lft;
3503		valid = ifa->valid_lft;
3504		if (preferred != INFINITY_LIFE_TIME) {
3505			long tval = (jiffies - ifa->tstamp)/HZ;
3506			if (preferred > tval)
3507				preferred -= tval;
3508			else
3509				preferred = 0;
3510			if (valid != INFINITY_LIFE_TIME) {
3511				if (valid > tval)
3512					valid -= tval;
3513				else
3514					valid = 0;
3515			}
3516		}
3517	} else {
3518		preferred = INFINITY_LIFE_TIME;
3519		valid = INFINITY_LIFE_TIME;
3520	}
3521
3522	if (nla_put(skb, IFA_ADDRESS, 16, &ifa->addr) < 0 ||
3523	    put_cacheinfo(skb, ifa->cstamp, ifa->tstamp, preferred, valid) < 0) {
3524		nlmsg_cancel(skb, nlh);
3525		return -EMSGSIZE;
3526	}
3527
3528	return nlmsg_end(skb, nlh);
3529}
3530
3531static int inet6_fill_ifmcaddr(struct sk_buff *skb, struct ifmcaddr6 *ifmca,
3532				u32 pid, u32 seq, int event, u16 flags)
3533{
3534	struct nlmsghdr  *nlh;
3535	u8 scope = RT_SCOPE_UNIVERSE;
3536	int ifindex = ifmca->idev->dev->ifindex;
3537
3538	if (ipv6_addr_scope(&ifmca->mca_addr) & IFA_SITE)
3539		scope = RT_SCOPE_SITE;
3540
3541	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3542	if (nlh == NULL)
3543		return -EMSGSIZE;
3544
3545	put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
3546	if (nla_put(skb, IFA_MULTICAST, 16, &ifmca->mca_addr) < 0 ||
3547	    put_cacheinfo(skb, ifmca->mca_cstamp, ifmca->mca_tstamp,
3548			  INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
3549		nlmsg_cancel(skb, nlh);
3550		return -EMSGSIZE;
3551	}
3552
3553	return nlmsg_end(skb, nlh);
3554}
3555
3556static int inet6_fill_ifacaddr(struct sk_buff *skb, struct ifacaddr6 *ifaca,
3557				u32 pid, u32 seq, int event, unsigned int flags)
3558{
3559	struct nlmsghdr  *nlh;
3560	u8 scope = RT_SCOPE_UNIVERSE;
3561	int ifindex = ifaca->aca_idev->dev->ifindex;
3562
3563	if (ipv6_addr_scope(&ifaca->aca_addr) & IFA_SITE)
3564		scope = RT_SCOPE_SITE;
3565
3566	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3567	if (nlh == NULL)
3568		return -EMSGSIZE;
3569
3570	put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
3571	if (nla_put(skb, IFA_ANYCAST, 16, &ifaca->aca_addr) < 0 ||
3572	    put_cacheinfo(skb, ifaca->aca_cstamp, ifaca->aca_tstamp,
3573			  INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
3574		nlmsg_cancel(skb, nlh);
3575		return -EMSGSIZE;
3576	}
3577
3578	return nlmsg_end(skb, nlh);
3579}
3580
3581enum addr_type_t {
3582	UNICAST_ADDR,
3583	MULTICAST_ADDR,
3584	ANYCAST_ADDR,
3585};
3586
3587/* called with rcu_read_lock() */
3588static int in6_dump_addrs(struct inet6_dev *idev, struct sk_buff *skb,
3589			  struct netlink_callback *cb, enum addr_type_t type,
3590			  int s_ip_idx, int *p_ip_idx)
3591{
3592	struct ifmcaddr6 *ifmca;
3593	struct ifacaddr6 *ifaca;
3594	int err = 1;
3595	int ip_idx = *p_ip_idx;
3596
3597	read_lock_bh(&idev->lock);
3598	switch (type) {
3599	case UNICAST_ADDR: {
3600		struct inet6_ifaddr *ifa;
3601
3602		/* unicast address incl. temp addr */
3603		list_for_each_entry(ifa, &idev->addr_list, if_list) {
3604			if (++ip_idx < s_ip_idx)
3605				continue;
3606			err = inet6_fill_ifaddr(skb, ifa,
3607						NETLINK_CB(cb->skb).pid,
3608						cb->nlh->nlmsg_seq,
3609						RTM_NEWADDR,
3610						NLM_F_MULTI);
3611			if (err <= 0)
3612				break;
3613		}
3614		break;
3615	}
3616	case MULTICAST_ADDR:
3617		/* multicast address */
3618		for (ifmca = idev->mc_list; ifmca;
3619		     ifmca = ifmca->next, ip_idx++) {
3620			if (ip_idx < s_ip_idx)
3621				continue;
3622			err = inet6_fill_ifmcaddr(skb, ifmca,
3623						  NETLINK_CB(cb->skb).pid,
3624						  cb->nlh->nlmsg_seq,
3625						  RTM_GETMULTICAST,
3626						  NLM_F_MULTI);
3627			if (err <= 0)
3628				break;
3629		}
3630		break;
3631	case ANYCAST_ADDR:
3632		/* anycast address */
3633		for (ifaca = idev->ac_list; ifaca;
3634		     ifaca = ifaca->aca_next, ip_idx++) {
3635			if (ip_idx < s_ip_idx)
3636				continue;
3637			err = inet6_fill_ifacaddr(skb, ifaca,
3638						  NETLINK_CB(cb->skb).pid,
3639						  cb->nlh->nlmsg_seq,
3640						  RTM_GETANYCAST,
3641						  NLM_F_MULTI);
3642			if (err <= 0)
3643				break;
3644		}
3645		break;
3646	default:
3647		break;
3648	}
3649	read_unlock_bh(&idev->lock);
3650	*p_ip_idx = ip_idx;
3651	return err;
3652}
3653
3654static int inet6_dump_addr(struct sk_buff *skb, struct netlink_callback *cb,
3655			   enum addr_type_t type)
3656{
3657	struct net *net = sock_net(skb->sk);
3658	int h, s_h;
3659	int idx, ip_idx;
3660	int s_idx, s_ip_idx;
3661	struct net_device *dev;
3662	struct inet6_dev *idev;
3663	struct hlist_head *head;
3664	struct hlist_node *node;
3665
3666	s_h = cb->args[0];
3667	s_idx = idx = cb->args[1];
3668	s_ip_idx = ip_idx = cb->args[2];
3669
3670	rcu_read_lock();
3671	for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
3672		idx = 0;
3673		head = &net->dev_index_head[h];
3674		hlist_for_each_entry_rcu(dev, node, head, index_hlist) {
3675			if (idx < s_idx)
3676				goto cont;
3677			if (h > s_h || idx > s_idx)
3678				s_ip_idx = 0;
3679			ip_idx = 0;
3680			idev = __in6_dev_get(dev);
3681			if (!idev)
3682				goto cont;
3683
3684			if (in6_dump_addrs(idev, skb, cb, type,
3685					   s_ip_idx, &ip_idx) <= 0)
3686				goto done;
3687cont:
3688			idx++;
3689		}
3690	}
3691done:
3692	rcu_read_unlock();
3693	cb->args[0] = h;
3694	cb->args[1] = idx;
3695	cb->args[2] = ip_idx;
3696
3697	return skb->len;
3698}
3699
3700static int inet6_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
3701{
3702	enum addr_type_t type = UNICAST_ADDR;
3703
3704	return inet6_dump_addr(skb, cb, type);
3705}
3706
3707static int inet6_dump_ifmcaddr(struct sk_buff *skb, struct netlink_callback *cb)
3708{
3709	enum addr_type_t type = MULTICAST_ADDR;
3710
3711	return inet6_dump_addr(skb, cb, type);
3712}
3713
3714
3715static int inet6_dump_ifacaddr(struct sk_buff *skb, struct netlink_callback *cb)
3716{
3717	enum addr_type_t type = ANYCAST_ADDR;
3718
3719	return inet6_dump_addr(skb, cb, type);
3720}
3721
3722static int inet6_rtm_getaddr(struct sk_buff *in_skb, struct nlmsghdr* nlh,
3723			     void *arg)
3724{
3725	struct net *net = sock_net(in_skb->sk);
3726	struct ifaddrmsg *ifm;
3727	struct nlattr *tb[IFA_MAX+1];
3728	struct in6_addr *addr = NULL;
3729	struct net_device *dev = NULL;
3730	struct inet6_ifaddr *ifa;
3731	struct sk_buff *skb;
3732	int err;
3733
3734	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3735	if (err < 0)
3736		goto errout;
3737
3738	addr = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3739	if (addr == NULL) {
3740		err = -EINVAL;
3741		goto errout;
3742	}
3743
3744	ifm = nlmsg_data(nlh);
3745	if (ifm->ifa_index)
3746		dev = __dev_get_by_index(net, ifm->ifa_index);
3747
3748	ifa = ipv6_get_ifaddr(net, addr, dev, 1);
3749	if (!ifa) {
3750		err = -EADDRNOTAVAIL;
3751		goto errout;
3752	}
3753
3754	skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_KERNEL);
3755	if (!skb) {
3756		err = -ENOBUFS;
3757		goto errout_ifa;
3758	}
3759
3760	err = inet6_fill_ifaddr(skb, ifa, NETLINK_CB(in_skb).pid,
3761				nlh->nlmsg_seq, RTM_NEWADDR, 0);
3762	if (err < 0) {
3763		/* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
3764		WARN_ON(err == -EMSGSIZE);
3765		kfree_skb(skb);
3766		goto errout_ifa;
3767	}
3768	err = rtnl_unicast(skb, net, NETLINK_CB(in_skb).pid);
3769errout_ifa:
3770	in6_ifa_put(ifa);
3771errout:
3772	return err;
3773}
3774
3775static void inet6_ifa_notify(int event, struct inet6_ifaddr *ifa)
3776{
3777	struct sk_buff *skb;
3778	struct net *net = dev_net(ifa->idev->dev);
3779	int err = -ENOBUFS;
3780
3781	skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_ATOMIC);
3782	if (skb == NULL)
3783		goto errout;
3784
3785	err = inet6_fill_ifaddr(skb, ifa, 0, 0, event, 0);
3786	if (err < 0) {
3787		/* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
3788		WARN_ON(err == -EMSGSIZE);
3789		kfree_skb(skb);
3790		goto errout;
3791	}
3792	rtnl_notify(skb, net, 0, RTNLGRP_IPV6_IFADDR, NULL, GFP_ATOMIC);
3793	return;
3794errout:
3795	if (err < 0)
3796		rtnl_set_sk_err(net, RTNLGRP_IPV6_IFADDR, err);
3797}
3798
3799static inline void ipv6_store_devconf(struct ipv6_devconf *cnf,
3800				__s32 *array, int bytes)
3801{
3802	BUG_ON(bytes < (DEVCONF_MAX * 4));
3803
3804	memset(array, 0, bytes);
3805	array[DEVCONF_FORWARDING] = cnf->forwarding;
3806	array[DEVCONF_HOPLIMIT] = cnf->hop_limit;
3807	array[DEVCONF_MTU6] = cnf->mtu6;
3808	array[DEVCONF_ACCEPT_RA] = cnf->accept_ra;
3809	array[DEVCONF_ACCEPT_REDIRECTS] = cnf->accept_redirects;
3810	array[DEVCONF_AUTOCONF] = cnf->autoconf;
3811	array[DEVCONF_DAD_TRANSMITS] = cnf->dad_transmits;
3812	array[DEVCONF_RTR_SOLICITS] = cnf->rtr_solicits;
3813	array[DEVCONF_RTR_SOLICIT_INTERVAL] =
3814		jiffies_to_msecs(cnf->rtr_solicit_interval);
3815	array[DEVCONF_RTR_SOLICIT_DELAY] =
3816		jiffies_to_msecs(cnf->rtr_solicit_delay);
3817	array[DEVCONF_FORCE_MLD_VERSION] = cnf->force_mld_version;
3818#ifdef CONFIG_IPV6_PRIVACY
3819	array[DEVCONF_USE_TEMPADDR] = cnf->use_tempaddr;
3820	array[DEVCONF_TEMP_VALID_LFT] = cnf->temp_valid_lft;
3821	array[DEVCONF_TEMP_PREFERED_LFT] = cnf->temp_prefered_lft;
3822	array[DEVCONF_REGEN_MAX_RETRY] = cnf->regen_max_retry;
3823	array[DEVCONF_MAX_DESYNC_FACTOR] = cnf->max_desync_factor;
3824#endif
3825	array[DEVCONF_MAX_ADDRESSES] = cnf->max_addresses;
3826	array[DEVCONF_ACCEPT_RA_DEFRTR] = cnf->accept_ra_defrtr;
3827	array[DEVCONF_ACCEPT_RA_PINFO] = cnf->accept_ra_pinfo;
3828#ifdef CONFIG_IPV6_ROUTER_PREF
3829	array[DEVCONF_ACCEPT_RA_RTR_PREF] = cnf->accept_ra_rtr_pref;
3830	array[DEVCONF_RTR_PROBE_INTERVAL] =
3831		jiffies_to_msecs(cnf->rtr_probe_interval);
3832#ifdef CONFIG_IPV6_ROUTE_INFO
3833	array[DEVCONF_ACCEPT_RA_RT_INFO_MAX_PLEN] = cnf->accept_ra_rt_info_max_plen;
3834#endif
3835#endif
3836	array[DEVCONF_PROXY_NDP] = cnf->proxy_ndp;
3837	array[DEVCONF_ACCEPT_SOURCE_ROUTE] = cnf->accept_source_route;
3838#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
3839	array[DEVCONF_OPTIMISTIC_DAD] = cnf->optimistic_dad;
3840#endif
3841#ifdef CONFIG_IPV6_MROUTE
3842	array[DEVCONF_MC_FORWARDING] = cnf->mc_forwarding;
3843#endif
3844	array[DEVCONF_DISABLE_IPV6] = cnf->disable_ipv6;
3845	array[DEVCONF_ACCEPT_DAD] = cnf->accept_dad;
3846	array[DEVCONF_FORCE_TLLAO] = cnf->force_tllao;
3847}
3848
3849static inline size_t inet6_ifla6_size(void)
3850{
3851	return nla_total_size(4) /* IFLA_INET6_FLAGS */
3852	     + nla_total_size(sizeof(struct ifla_cacheinfo))
3853	     + nla_total_size(DEVCONF_MAX * 4) /* IFLA_INET6_CONF */
3854	     + nla_total_size(IPSTATS_MIB_MAX * 8) /* IFLA_INET6_STATS */
3855	     + nla_total_size(ICMP6_MIB_MAX * 8); /* IFLA_INET6_ICMP6STATS */
3856}
3857
3858static inline size_t inet6_if_nlmsg_size(void)
3859{
3860	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
3861	       + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
3862	       + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
3863	       + nla_total_size(4) /* IFLA_MTU */
3864	       + nla_total_size(4) /* IFLA_LINK */
3865	       + nla_total_size(inet6_ifla6_size()); /* IFLA_PROTINFO */
3866}
3867
3868static inline void __snmp6_fill_statsdev(u64 *stats, atomic_long_t *mib,
3869				      int items, int bytes)
3870{
3871	int i;
3872	int pad = bytes - sizeof(u64) * items;
3873	BUG_ON(pad < 0);
3874
3875	/* Use put_unaligned() because stats may not be aligned for u64. */
3876	put_unaligned(items, &stats[0]);
3877	for (i = 1; i < items; i++)
3878		put_unaligned(atomic_long_read(&mib[i]), &stats[i]);
3879
3880	memset(&stats[items], 0, pad);
3881}
3882
3883static inline void __snmp6_fill_stats64(u64 *stats, void __percpu **mib,
3884				      int items, int bytes, size_t syncpoff)
3885{
3886	int i;
3887	int pad = bytes - sizeof(u64) * items;
3888	BUG_ON(pad < 0);
3889
3890	/* Use put_unaligned() because stats may not be aligned for u64. */
3891	put_unaligned(items, &stats[0]);
3892	for (i = 1; i < items; i++)
3893		put_unaligned(snmp_fold_field64(mib, i, syncpoff), &stats[i]);
3894
3895	memset(&stats[items], 0, pad);
3896}
3897
3898static void snmp6_fill_stats(u64 *stats, struct inet6_dev *idev, int attrtype,
3899			     int bytes)
3900{
3901	switch (attrtype) {
3902	case IFLA_INET6_STATS:
3903		__snmp6_fill_stats64(stats, (void __percpu **)idev->stats.ipv6,
3904				     IPSTATS_MIB_MAX, bytes, offsetof(struct ipstats_mib, syncp));
3905		break;
3906	case IFLA_INET6_ICMP6STATS:
3907		__snmp6_fill_statsdev(stats, idev->stats.icmpv6dev->mibs, ICMP6_MIB_MAX, bytes);
3908		break;
3909	}
3910}
3911
3912static int inet6_fill_ifla6_attrs(struct sk_buff *skb, struct inet6_dev *idev)
3913{
3914	struct nlattr *nla;
3915	struct ifla_cacheinfo ci;
3916
3917	NLA_PUT_U32(skb, IFLA_INET6_FLAGS, idev->if_flags);
3918
3919	ci.max_reasm_len = IPV6_MAXPLEN;
3920	ci.tstamp = cstamp_delta(idev->tstamp);
3921	ci.reachable_time = jiffies_to_msecs(idev->nd_parms->reachable_time);
3922	ci.retrans_time = jiffies_to_msecs(idev->nd_parms->retrans_time);
3923	NLA_PUT(skb, IFLA_INET6_CACHEINFO, sizeof(ci), &ci);
3924
3925	nla = nla_reserve(skb, IFLA_INET6_CONF, DEVCONF_MAX * sizeof(s32));
3926	if (nla == NULL)
3927		goto nla_put_failure;
3928	ipv6_store_devconf(&idev->cnf, nla_data(nla), nla_len(nla));
3929
3930	/* XXX - MC not implemented */
3931
3932	nla = nla_reserve(skb, IFLA_INET6_STATS, IPSTATS_MIB_MAX * sizeof(u64));
3933	if (nla == NULL)
3934		goto nla_put_failure;
3935	snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_STATS, nla_len(nla));
3936
3937	nla = nla_reserve(skb, IFLA_INET6_ICMP6STATS, ICMP6_MIB_MAX * sizeof(u64));
3938	if (nla == NULL)
3939		goto nla_put_failure;
3940	snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_ICMP6STATS, nla_len(nla));
3941
3942	return 0;
3943
3944nla_put_failure:
3945	return -EMSGSIZE;
3946}
3947
3948static size_t inet6_get_link_af_size(const struct net_device *dev)
3949{
3950	if (!__in6_dev_get(dev))
3951		return 0;
3952
3953	return inet6_ifla6_size();
3954}
3955
3956static int inet6_fill_link_af(struct sk_buff *skb, const struct net_device *dev)
3957{
3958	struct inet6_dev *idev = __in6_dev_get(dev);
3959
3960	if (!idev)
3961		return -ENODATA;
3962
3963	if (inet6_fill_ifla6_attrs(skb, idev) < 0)
3964		return -EMSGSIZE;
3965
3966	return 0;
3967}
3968
3969static int inet6_fill_ifinfo(struct sk_buff *skb, struct inet6_dev *idev,
3970			     u32 pid, u32 seq, int event, unsigned int flags)
3971{
3972	struct net_device *dev = idev->dev;
3973	struct ifinfomsg *hdr;
3974	struct nlmsghdr *nlh;
3975	void *protoinfo;
3976
3977	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
3978	if (nlh == NULL)
3979		return -EMSGSIZE;
3980
3981	hdr = nlmsg_data(nlh);
3982	hdr->ifi_family = AF_INET6;
3983	hdr->__ifi_pad = 0;
3984	hdr->ifi_type = dev->type;
3985	hdr->ifi_index = dev->ifindex;
3986	hdr->ifi_flags = dev_get_flags(dev);
3987	hdr->ifi_change = 0;
3988
3989	NLA_PUT_STRING(skb, IFLA_IFNAME, dev->name);
3990
3991	if (dev->addr_len)
3992		NLA_PUT(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr);
3993
3994	NLA_PUT_U32(skb, IFLA_MTU, dev->mtu);
3995	if (dev->ifindex != dev->iflink)
3996		NLA_PUT_U32(skb, IFLA_LINK, dev->iflink);
3997
3998	protoinfo = nla_nest_start(skb, IFLA_PROTINFO);
3999	if (protoinfo == NULL)
4000		goto nla_put_failure;
4001
4002	if (inet6_fill_ifla6_attrs(skb, idev) < 0)
4003		goto nla_put_failure;
4004
4005	nla_nest_end(skb, protoinfo);
4006	return nlmsg_end(skb, nlh);
4007
4008nla_put_failure:
4009	nlmsg_cancel(skb, nlh);
4010	return -EMSGSIZE;
4011}
4012
4013static int inet6_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
4014{
4015	struct net *net = sock_net(skb->sk);
4016	int h, s_h;
4017	int idx = 0, s_idx;
4018	struct net_device *dev;
4019	struct inet6_dev *idev;
4020	struct hlist_head *head;
4021	struct hlist_node *node;
4022
4023	s_h = cb->args[0];
4024	s_idx = cb->args[1];
4025
4026	rcu_read_lock();
4027	for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
4028		idx = 0;
4029		head = &net->dev_index_head[h];
4030		hlist_for_each_entry_rcu(dev, node, head, index_hlist) {
4031			if (idx < s_idx)
4032				goto cont;
4033			idev = __in6_dev_get(dev);
4034			if (!idev)
4035				goto cont;
4036			if (inet6_fill_ifinfo(skb, idev,
4037					      NETLINK_CB(cb->skb).pid,
4038					      cb->nlh->nlmsg_seq,
4039					      RTM_NEWLINK, NLM_F_MULTI) <= 0)
4040				goto out;
4041cont:
4042			idx++;
4043		}
4044	}
4045out:
4046	rcu_read_unlock();
4047	cb->args[1] = idx;
4048	cb->args[0] = h;
4049
4050	return skb->len;
4051}
4052
4053void inet6_ifinfo_notify(int event, struct inet6_dev *idev)
4054{
4055	struct sk_buff *skb;
4056	struct net *net = dev_net(idev->dev);
4057	int err = -ENOBUFS;
4058
4059	skb = nlmsg_new(inet6_if_nlmsg_size(), GFP_ATOMIC);
4060	if (skb == NULL)
4061		goto errout;
4062
4063	err = inet6_fill_ifinfo(skb, idev, 0, 0, event, 0);
4064	if (err < 0) {
4065		/* -EMSGSIZE implies BUG in inet6_if_nlmsg_size() */
4066		WARN_ON(err == -EMSGSIZE);
4067		kfree_skb(skb);
4068		goto errout;
4069	}
4070	rtnl_notify(skb, net, 0, RTNLGRP_IPV6_IFINFO, NULL, GFP_ATOMIC);
4071	return;
4072errout:
4073	if (err < 0)
4074		rtnl_set_sk_err(net, RTNLGRP_IPV6_IFINFO, err);
4075}
4076
4077static inline size_t inet6_prefix_nlmsg_size(void)
4078{
4079	return NLMSG_ALIGN(sizeof(struct prefixmsg))
4080	       + nla_total_size(sizeof(struct in6_addr))
4081	       + nla_total_size(sizeof(struct prefix_cacheinfo));
4082}
4083
4084static int inet6_fill_prefix(struct sk_buff *skb, struct inet6_dev *idev,
4085			     struct prefix_info *pinfo, u32 pid, u32 seq,
4086			     int event, unsigned int flags)
4087{
4088	struct prefixmsg *pmsg;
4089	struct nlmsghdr *nlh;
4090	struct prefix_cacheinfo	ci;
4091
4092	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*pmsg), flags);
4093	if (nlh == NULL)
4094		return -EMSGSIZE;
4095
4096	pmsg = nlmsg_data(nlh);
4097	pmsg->prefix_family = AF_INET6;
4098	pmsg->prefix_pad1 = 0;
4099	pmsg->prefix_pad2 = 0;
4100	pmsg->prefix_ifindex = idev->dev->ifindex;
4101	pmsg->prefix_len = pinfo->prefix_len;
4102	pmsg->prefix_type = pinfo->type;
4103	pmsg->prefix_pad3 = 0;
4104	pmsg->prefix_flags = 0;
4105	if (pinfo->onlink)
4106		pmsg->prefix_flags |= IF_PREFIX_ONLINK;
4107	if (pinfo->autoconf)
4108		pmsg->prefix_flags |= IF_PREFIX_AUTOCONF;
4109
4110	NLA_PUT(skb, PREFIX_ADDRESS, sizeof(pinfo->prefix), &pinfo->prefix);
4111
4112	ci.preferred_time = ntohl(pinfo->prefered);
4113	ci.valid_time = ntohl(pinfo->valid);
4114	NLA_PUT(skb, PREFIX_CACHEINFO, sizeof(ci), &ci);
4115
4116	return nlmsg_end(skb, nlh);
4117
4118nla_put_failure:
4119	nlmsg_cancel(skb, nlh);
4120	return -EMSGSIZE;
4121}
4122
4123static void inet6_prefix_notify(int event, struct inet6_dev *idev,
4124			 struct prefix_info *pinfo)
4125{
4126	struct sk_buff *skb;
4127	struct net *net = dev_net(idev->dev);
4128	int err = -ENOBUFS;
4129
4130	skb = nlmsg_new(inet6_prefix_nlmsg_size(), GFP_ATOMIC);
4131	if (skb == NULL)
4132		goto errout;
4133
4134	err = inet6_fill_prefix(skb, idev, pinfo, 0, 0, event, 0);
4135	if (err < 0) {
4136		/* -EMSGSIZE implies BUG in inet6_prefix_nlmsg_size() */
4137		WARN_ON(err == -EMSGSIZE);
4138		kfree_skb(skb);
4139		goto errout;
4140	}
4141	rtnl_notify(skb, net, 0, RTNLGRP_IPV6_PREFIX, NULL, GFP_ATOMIC);
4142	return;
4143errout:
4144	if (err < 0)
4145		rtnl_set_sk_err(net, RTNLGRP_IPV6_PREFIX, err);
4146}
4147
4148static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
4149{
4150	inet6_ifa_notify(event ? : RTM_NEWADDR, ifp);
4151
4152	switch (event) {
4153	case RTM_NEWADDR:
4154		/*
4155		 * If the address was optimistic
4156		 * we inserted the route at the start of
4157		 * our DAD process, so we don't need
4158		 * to do it again
4159		 */
4160		if (!(ifp->rt->rt6i_node))
4161			ip6_ins_rt(ifp->rt);
4162		if (ifp->idev->cnf.forwarding)
4163			addrconf_join_anycast(ifp);
4164		break;
4165	case RTM_DELADDR:
4166		if (ifp->idev->cnf.forwarding)
4167			addrconf_leave_anycast(ifp);
4168		addrconf_leave_solict(ifp->idev, &ifp->addr);
4169		dst_hold(&ifp->rt->dst);
4170
4171		if (ip6_del_rt(ifp->rt))
4172			dst_free(&ifp->rt->dst);
4173		break;
4174	}
4175}
4176
4177static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
4178{
4179	rcu_read_lock_bh();
4180	if (likely(ifp->idev->dead == 0))
4181		__ipv6_ifa_notify(event, ifp);
4182	rcu_read_unlock_bh();
4183}
4184
4185#ifdef CONFIG_SYSCTL
4186
4187static
4188int addrconf_sysctl_forward(ctl_table *ctl, int write,
4189			   void __user *buffer, size_t *lenp, loff_t *ppos)
4190{
4191	int *valp = ctl->data;
4192	int val = *valp;
4193	loff_t pos = *ppos;
 
4194	int ret;
4195
4196	ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
 
 
 
 
 
 
 
4197
4198	if (write)
4199		ret = addrconf_fixup_forwarding(ctl, valp, val);
4200	if (ret)
4201		*ppos = pos;
4202	return ret;
4203}
4204
4205static void dev_disable_change(struct inet6_dev *idev)
4206{
4207	if (!idev || !idev->dev)
4208		return;
4209
4210	if (idev->cnf.disable_ipv6)
4211		addrconf_notify(NULL, NETDEV_DOWN, idev->dev);
4212	else
4213		addrconf_notify(NULL, NETDEV_UP, idev->dev);
4214}
4215
4216static void addrconf_disable_change(struct net *net, __s32 newf)
4217{
4218	struct net_device *dev;
4219	struct inet6_dev *idev;
4220
4221	rcu_read_lock();
4222	for_each_netdev_rcu(net, dev) {
4223		idev = __in6_dev_get(dev);
4224		if (idev) {
4225			int changed = (!idev->cnf.disable_ipv6) ^ (!newf);
4226			idev->cnf.disable_ipv6 = newf;
4227			if (changed)
4228				dev_disable_change(idev);
4229		}
4230	}
4231	rcu_read_unlock();
4232}
4233
4234static int addrconf_disable_ipv6(struct ctl_table *table, int *p, int old)
4235{
4236	struct net *net;
 
 
 
 
4237
4238	net = (struct net *)table->extra2;
 
 
4239
4240	if (p == &net->ipv6.devconf_dflt->disable_ipv6)
 
4241		return 0;
4242
4243	if (!rtnl_trylock()) {
4244		/* Restore the original values before restarting */
4245		*p = old;
4246		return restart_syscall();
4247	}
4248
4249	if (p == &net->ipv6.devconf_all->disable_ipv6) {
4250		__s32 newf = net->ipv6.devconf_all->disable_ipv6;
4251		net->ipv6.devconf_dflt->disable_ipv6 = newf;
4252		addrconf_disable_change(net, newf);
4253	} else if ((!*p) ^ (!old))
4254		dev_disable_change((struct inet6_dev *)table->extra1);
4255
4256	rtnl_unlock();
4257	return 0;
4258}
4259
4260static
4261int addrconf_sysctl_disable(ctl_table *ctl, int write,
4262			    void __user *buffer, size_t *lenp, loff_t *ppos)
4263{
4264	int *valp = ctl->data;
4265	int val = *valp;
4266	loff_t pos = *ppos;
 
4267	int ret;
4268
4269	ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
 
 
 
 
 
 
 
4270
4271	if (write)
4272		ret = addrconf_disable_ipv6(ctl, valp, val);
4273	if (ret)
4274		*ppos = pos;
4275	return ret;
4276}
4277
4278static struct addrconf_sysctl_table
4279{
4280	struct ctl_table_header *sysctl_header;
4281	ctl_table addrconf_vars[DEVCONF_MAX+1];
4282	char *dev_name;
4283} addrconf_sysctl __read_mostly = {
4284	.sysctl_header = NULL,
4285	.addrconf_vars = {
4286		{
4287			.procname	= "forwarding",
4288			.data		= &ipv6_devconf.forwarding,
4289			.maxlen		= sizeof(int),
4290			.mode		= 0644,
4291			.proc_handler	= addrconf_sysctl_forward,
4292		},
4293		{
4294			.procname	= "hop_limit",
4295			.data		= &ipv6_devconf.hop_limit,
4296			.maxlen		= sizeof(int),
4297			.mode		= 0644,
4298			.proc_handler	= proc_dointvec,
4299		},
4300		{
4301			.procname	= "mtu",
4302			.data		= &ipv6_devconf.mtu6,
4303			.maxlen		= sizeof(int),
4304			.mode		= 0644,
4305			.proc_handler	= proc_dointvec,
4306		},
4307		{
4308			.procname	= "accept_ra",
4309			.data		= &ipv6_devconf.accept_ra,
4310			.maxlen		= sizeof(int),
4311			.mode		= 0644,
4312			.proc_handler	= proc_dointvec,
4313		},
4314		{
4315			.procname	= "accept_redirects",
4316			.data		= &ipv6_devconf.accept_redirects,
4317			.maxlen		= sizeof(int),
4318			.mode		= 0644,
4319			.proc_handler	= proc_dointvec,
4320		},
4321		{
4322			.procname	= "autoconf",
4323			.data		= &ipv6_devconf.autoconf,
4324			.maxlen		= sizeof(int),
4325			.mode		= 0644,
4326			.proc_handler	= proc_dointvec,
4327		},
4328		{
4329			.procname	= "dad_transmits",
4330			.data		= &ipv6_devconf.dad_transmits,
4331			.maxlen		= sizeof(int),
4332			.mode		= 0644,
4333			.proc_handler	= proc_dointvec,
4334		},
4335		{
4336			.procname	= "router_solicitations",
4337			.data		= &ipv6_devconf.rtr_solicits,
4338			.maxlen		= sizeof(int),
4339			.mode		= 0644,
4340			.proc_handler	= proc_dointvec,
4341		},
4342		{
4343			.procname	= "router_solicitation_interval",
4344			.data		= &ipv6_devconf.rtr_solicit_interval,
4345			.maxlen		= sizeof(int),
4346			.mode		= 0644,
4347			.proc_handler	= proc_dointvec_jiffies,
4348		},
4349		{
4350			.procname	= "router_solicitation_delay",
4351			.data		= &ipv6_devconf.rtr_solicit_delay,
4352			.maxlen		= sizeof(int),
4353			.mode		= 0644,
4354			.proc_handler	= proc_dointvec_jiffies,
4355		},
4356		{
4357			.procname	= "force_mld_version",
4358			.data		= &ipv6_devconf.force_mld_version,
4359			.maxlen		= sizeof(int),
4360			.mode		= 0644,
4361			.proc_handler	= proc_dointvec,
4362		},
4363#ifdef CONFIG_IPV6_PRIVACY
4364		{
4365			.procname	= "use_tempaddr",
4366			.data		= &ipv6_devconf.use_tempaddr,
4367			.maxlen		= sizeof(int),
4368			.mode		= 0644,
4369			.proc_handler	= proc_dointvec,
4370		},
4371		{
4372			.procname	= "temp_valid_lft",
4373			.data		= &ipv6_devconf.temp_valid_lft,
4374			.maxlen		= sizeof(int),
4375			.mode		= 0644,
4376			.proc_handler	= proc_dointvec,
4377		},
4378		{
4379			.procname	= "temp_prefered_lft",
4380			.data		= &ipv6_devconf.temp_prefered_lft,
4381			.maxlen		= sizeof(int),
4382			.mode		= 0644,
4383			.proc_handler	= proc_dointvec,
4384		},
4385		{
4386			.procname	= "regen_max_retry",
4387			.data		= &ipv6_devconf.regen_max_retry,
4388			.maxlen		= sizeof(int),
4389			.mode		= 0644,
4390			.proc_handler	= proc_dointvec,
4391		},
4392		{
4393			.procname	= "max_desync_factor",
4394			.data		= &ipv6_devconf.max_desync_factor,
4395			.maxlen		= sizeof(int),
4396			.mode		= 0644,
4397			.proc_handler	= proc_dointvec,
4398		},
4399#endif
4400		{
4401			.procname	= "max_addresses",
4402			.data		= &ipv6_devconf.max_addresses,
4403			.maxlen		= sizeof(int),
4404			.mode		= 0644,
4405			.proc_handler	= proc_dointvec,
4406		},
4407		{
4408			.procname	= "accept_ra_defrtr",
4409			.data		= &ipv6_devconf.accept_ra_defrtr,
4410			.maxlen		= sizeof(int),
4411			.mode		= 0644,
4412			.proc_handler	= proc_dointvec,
4413		},
4414		{
4415			.procname	= "accept_ra_pinfo",
4416			.data		= &ipv6_devconf.accept_ra_pinfo,
4417			.maxlen		= sizeof(int),
4418			.mode		= 0644,
4419			.proc_handler	= proc_dointvec,
4420		},
4421#ifdef CONFIG_IPV6_ROUTER_PREF
4422		{
4423			.procname	= "accept_ra_rtr_pref",
4424			.data		= &ipv6_devconf.accept_ra_rtr_pref,
4425			.maxlen		= sizeof(int),
4426			.mode		= 0644,
4427			.proc_handler	= proc_dointvec,
4428		},
4429		{
4430			.procname	= "router_probe_interval",
4431			.data		= &ipv6_devconf.rtr_probe_interval,
4432			.maxlen		= sizeof(int),
4433			.mode		= 0644,
4434			.proc_handler	= proc_dointvec_jiffies,
4435		},
4436#ifdef CONFIG_IPV6_ROUTE_INFO
4437		{
4438			.procname	= "accept_ra_rt_info_max_plen",
4439			.data		= &ipv6_devconf.accept_ra_rt_info_max_plen,
4440			.maxlen		= sizeof(int),
4441			.mode		= 0644,
4442			.proc_handler	= proc_dointvec,
4443		},
4444#endif
4445#endif
4446		{
4447			.procname	= "proxy_ndp",
4448			.data		= &ipv6_devconf.proxy_ndp,
4449			.maxlen		= sizeof(int),
4450			.mode		= 0644,
4451			.proc_handler	= proc_dointvec,
4452		},
4453		{
4454			.procname	= "accept_source_route",
4455			.data		= &ipv6_devconf.accept_source_route,
4456			.maxlen		= sizeof(int),
4457			.mode		= 0644,
4458			.proc_handler	= proc_dointvec,
4459		},
4460#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
4461		{
4462			.procname       = "optimistic_dad",
4463			.data           = &ipv6_devconf.optimistic_dad,
4464			.maxlen         = sizeof(int),
4465			.mode           = 0644,
4466			.proc_handler   = proc_dointvec,
4467
4468		},
4469#endif
4470#ifdef CONFIG_IPV6_MROUTE
4471		{
4472			.procname	= "mc_forwarding",
4473			.data		= &ipv6_devconf.mc_forwarding,
4474			.maxlen		= sizeof(int),
4475			.mode		= 0444,
4476			.proc_handler	= proc_dointvec,
4477		},
4478#endif
4479		{
4480			.procname	= "disable_ipv6",
4481			.data		= &ipv6_devconf.disable_ipv6,
4482			.maxlen		= sizeof(int),
4483			.mode		= 0644,
4484			.proc_handler	= addrconf_sysctl_disable,
4485		},
4486		{
4487			.procname	= "accept_dad",
4488			.data		= &ipv6_devconf.accept_dad,
4489			.maxlen		= sizeof(int),
4490			.mode		= 0644,
4491			.proc_handler	= proc_dointvec,
4492		},
4493		{
4494			.procname       = "force_tllao",
4495			.data           = &ipv6_devconf.force_tllao,
4496			.maxlen         = sizeof(int),
4497			.mode           = 0644,
4498			.proc_handler   = proc_dointvec
4499		},
4500		{
4501			/* sentinel */
4502		}
4503	},
4504};
4505
4506static int __addrconf_sysctl_register(struct net *net, char *dev_name,
4507		struct inet6_dev *idev, struct ipv6_devconf *p)
4508{
4509	int i;
4510	struct addrconf_sysctl_table *t;
4511
4512#define ADDRCONF_CTL_PATH_DEV	3
4513
4514	struct ctl_path addrconf_ctl_path[] = {
4515		{ .procname = "net", },
4516		{ .procname = "ipv6", },
4517		{ .procname = "conf", },
4518		{ /* to be set */ },
4519		{ },
4520	};
4521
4522
4523	t = kmemdup(&addrconf_sysctl, sizeof(*t), GFP_KERNEL);
4524	if (t == NULL)
4525		goto out;
4526
4527	for (i = 0; t->addrconf_vars[i].data; i++) {
4528		t->addrconf_vars[i].data += (char *)p - (char *)&ipv6_devconf;
4529		t->addrconf_vars[i].extra1 = idev; /* embedded; no ref */
4530		t->addrconf_vars[i].extra2 = net;
4531	}
4532
4533	/*
4534	 * Make a copy of dev_name, because '.procname' is regarded as const
4535	 * by sysctl and we wouldn't want anyone to change it under our feet
4536	 * (see SIOCSIFNAME).
4537	 */
4538	t->dev_name = kstrdup(dev_name, GFP_KERNEL);
4539	if (!t->dev_name)
4540		goto free;
4541
4542	addrconf_ctl_path[ADDRCONF_CTL_PATH_DEV].procname = t->dev_name;
4543
4544	t->sysctl_header = register_net_sysctl_table(net, addrconf_ctl_path,
4545			t->addrconf_vars);
4546	if (t->sysctl_header == NULL)
4547		goto free_procname;
4548
4549	p->sysctl = t;
4550	return 0;
4551
4552free_procname:
4553	kfree(t->dev_name);
4554free:
4555	kfree(t);
4556out:
4557	return -ENOBUFS;
4558}
4559
4560static void __addrconf_sysctl_unregister(struct ipv6_devconf *p)
4561{
4562	struct addrconf_sysctl_table *t;
4563
4564	if (p->sysctl == NULL)
4565		return;
4566
4567	t = p->sysctl;
4568	p->sysctl = NULL;
4569	unregister_net_sysctl_table(t->sysctl_header);
4570	kfree(t->dev_name);
4571	kfree(t);
4572}
4573
4574static void addrconf_sysctl_register(struct inet6_dev *idev)
4575{
4576	neigh_sysctl_register(idev->dev, idev->nd_parms, "ipv6",
4577			      &ndisc_ifinfo_sysctl_change);
4578	__addrconf_sysctl_register(dev_net(idev->dev), idev->dev->name,
4579					idev, &idev->cnf);
4580}
4581
4582static void addrconf_sysctl_unregister(struct inet6_dev *idev)
4583{
4584	__addrconf_sysctl_unregister(&idev->cnf);
4585	neigh_sysctl_unregister(idev->nd_parms);
4586}
4587
4588
4589#endif
4590
4591static int __net_init addrconf_init_net(struct net *net)
4592{
4593	int err;
4594	struct ipv6_devconf *all, *dflt;
4595
4596	err = -ENOMEM;
4597	all = &ipv6_devconf;
4598	dflt = &ipv6_devconf_dflt;
4599
4600	if (!net_eq(net, &init_net)) {
4601		all = kmemdup(all, sizeof(ipv6_devconf), GFP_KERNEL);
4602		if (all == NULL)
4603			goto err_alloc_all;
4604
4605		dflt = kmemdup(dflt, sizeof(ipv6_devconf_dflt), GFP_KERNEL);
4606		if (dflt == NULL)
4607			goto err_alloc_dflt;
4608	} else {
4609		/* these will be inherited by all namespaces */
4610		dflt->autoconf = ipv6_defaults.autoconf;
4611		dflt->disable_ipv6 = ipv6_defaults.disable_ipv6;
4612	}
4613
4614	net->ipv6.devconf_all = all;
4615	net->ipv6.devconf_dflt = dflt;
4616
4617#ifdef CONFIG_SYSCTL
4618	err = __addrconf_sysctl_register(net, "all", NULL, all);
4619	if (err < 0)
4620		goto err_reg_all;
4621
4622	err = __addrconf_sysctl_register(net, "default", NULL, dflt);
4623	if (err < 0)
4624		goto err_reg_dflt;
4625#endif
4626	return 0;
4627
4628#ifdef CONFIG_SYSCTL
4629err_reg_dflt:
4630	__addrconf_sysctl_unregister(all);
4631err_reg_all:
4632	kfree(dflt);
4633#endif
4634err_alloc_dflt:
4635	kfree(all);
4636err_alloc_all:
4637	return err;
4638}
4639
4640static void __net_exit addrconf_exit_net(struct net *net)
4641{
4642#ifdef CONFIG_SYSCTL
4643	__addrconf_sysctl_unregister(net->ipv6.devconf_dflt);
4644	__addrconf_sysctl_unregister(net->ipv6.devconf_all);
4645#endif
4646	if (!net_eq(net, &init_net)) {
4647		kfree(net->ipv6.devconf_dflt);
4648		kfree(net->ipv6.devconf_all);
4649	}
4650}
4651
4652static struct pernet_operations addrconf_ops = {
4653	.init = addrconf_init_net,
4654	.exit = addrconf_exit_net,
4655};
4656
4657/*
4658 *      Device notifier
4659 */
4660
4661int register_inet6addr_notifier(struct notifier_block *nb)
4662{
4663	return atomic_notifier_chain_register(&inet6addr_chain, nb);
4664}
4665EXPORT_SYMBOL(register_inet6addr_notifier);
4666
4667int unregister_inet6addr_notifier(struct notifier_block *nb)
4668{
4669	return atomic_notifier_chain_unregister(&inet6addr_chain, nb);
4670}
4671EXPORT_SYMBOL(unregister_inet6addr_notifier);
4672
4673static struct rtnl_af_ops inet6_ops = {
4674	.family		  = AF_INET6,
4675	.fill_link_af	  = inet6_fill_link_af,
4676	.get_link_af_size = inet6_get_link_af_size,
4677};
4678
4679/*
4680 *	Init / cleanup code
4681 */
4682
4683int __init addrconf_init(void)
4684{
4685	int i, err;
4686
4687	err = ipv6_addr_label_init();
4688	if (err < 0) {
4689		printk(KERN_CRIT "IPv6 Addrconf:"
4690		       " cannot initialize default policy table: %d.\n", err);
4691		goto out;
4692	}
4693
4694	err = register_pernet_subsys(&addrconf_ops);
4695	if (err < 0)
4696		goto out_addrlabel;
4697
4698	/* The addrconf netdev notifier requires that loopback_dev
4699	 * has it's ipv6 private information allocated and setup
4700	 * before it can bring up and give link-local addresses
4701	 * to other devices which are up.
4702	 *
4703	 * Unfortunately, loopback_dev is not necessarily the first
4704	 * entry in the global dev_base list of net devices.  In fact,
4705	 * it is likely to be the very last entry on that list.
4706	 * So this causes the notifier registry below to try and
4707	 * give link-local addresses to all devices besides loopback_dev
4708	 * first, then loopback_dev, which cases all the non-loopback_dev
4709	 * devices to fail to get a link-local address.
4710	 *
4711	 * So, as a temporary fix, allocate the ipv6 structure for
4712	 * loopback_dev first by hand.
4713	 * Longer term, all of the dependencies ipv6 has upon the loopback
4714	 * device and it being up should be removed.
4715	 */
4716	rtnl_lock();
4717	if (!ipv6_add_dev(init_net.loopback_dev))
4718		err = -ENOMEM;
4719	rtnl_unlock();
4720	if (err)
4721		goto errlo;
4722
4723	for (i = 0; i < IN6_ADDR_HSIZE; i++)
4724		INIT_HLIST_HEAD(&inet6_addr_lst[i]);
4725
4726	register_netdevice_notifier(&ipv6_dev_notf);
4727
4728	addrconf_verify(0);
4729
4730	err = rtnl_af_register(&inet6_ops);
4731	if (err < 0)
4732		goto errout_af;
4733
4734	err = __rtnl_register(PF_INET6, RTM_GETLINK, NULL, inet6_dump_ifinfo,
4735			      NULL);
4736	if (err < 0)
4737		goto errout;
4738
4739	/* Only the first call to __rtnl_register can fail */
4740	__rtnl_register(PF_INET6, RTM_NEWADDR, inet6_rtm_newaddr, NULL, NULL);
4741	__rtnl_register(PF_INET6, RTM_DELADDR, inet6_rtm_deladdr, NULL, NULL);
4742	__rtnl_register(PF_INET6, RTM_GETADDR, inet6_rtm_getaddr,
4743			inet6_dump_ifaddr, NULL);
4744	__rtnl_register(PF_INET6, RTM_GETMULTICAST, NULL,
4745			inet6_dump_ifmcaddr, NULL);
4746	__rtnl_register(PF_INET6, RTM_GETANYCAST, NULL,
4747			inet6_dump_ifacaddr, NULL);
4748
4749	ipv6_addr_label_rtnl_register();
4750
4751	return 0;
4752errout:
4753	rtnl_af_unregister(&inet6_ops);
4754errout_af:
4755	unregister_netdevice_notifier(&ipv6_dev_notf);
4756errlo:
4757	unregister_pernet_subsys(&addrconf_ops);
4758out_addrlabel:
4759	ipv6_addr_label_cleanup();
4760out:
4761	return err;
4762}
4763
4764void addrconf_cleanup(void)
4765{
4766	struct net_device *dev;
4767	int i;
4768
4769	unregister_netdevice_notifier(&ipv6_dev_notf);
4770	unregister_pernet_subsys(&addrconf_ops);
4771	ipv6_addr_label_cleanup();
4772
4773	rtnl_lock();
4774
4775	__rtnl_af_unregister(&inet6_ops);
4776
4777	/* clean dev list */
4778	for_each_netdev(&init_net, dev) {
4779		if (__in6_dev_get(dev) == NULL)
4780			continue;
4781		addrconf_ifdown(dev, 1);
4782	}
4783	addrconf_ifdown(init_net.loopback_dev, 2);
4784
4785	/*
4786	 *	Check hash table.
4787	 */
4788	spin_lock_bh(&addrconf_hash_lock);
4789	for (i = 0; i < IN6_ADDR_HSIZE; i++)
4790		WARN_ON(!hlist_empty(&inet6_addr_lst[i]));
4791	spin_unlock_bh(&addrconf_hash_lock);
4792
4793	del_timer(&addr_chk_timer);
4794	rtnl_unlock();
4795}