Linux Audio

Check our new training course

Loading...
v5.14.15
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 * net/sched/cls_u32.c	Ugly (or Universal) 32bit key Packet Classifier.
   4 *
   5 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
   6 *
   7 *	The filters are packed to hash tables of key nodes
   8 *	with a set of 32bit key/mask pairs at every node.
   9 *	Nodes reference next level hash tables etc.
  10 *
  11 *	This scheme is the best universal classifier I managed to
  12 *	invent; it is not super-fast, but it is not slow (provided you
  13 *	program it correctly), and general enough.  And its relative
  14 *	speed grows as the number of rules becomes larger.
  15 *
  16 *	It seems that it represents the best middle point between
  17 *	speed and manageability both by human and by machine.
  18 *
  19 *	It is especially useful for link sharing combined with QoS;
  20 *	pure RSVP doesn't need such a general approach and can use
  21 *	much simpler (and faster) schemes, sort of cls_rsvp.c.
  22 *
  23 *	nfmark match added by Catalin(ux aka Dino) BOIE <catab at umbrella.ro>
  24 */
  25
  26#include <linux/module.h>
  27#include <linux/slab.h>
  28#include <linux/types.h>
  29#include <linux/kernel.h>
  30#include <linux/string.h>
  31#include <linux/errno.h>
  32#include <linux/percpu.h>
  33#include <linux/rtnetlink.h>
  34#include <linux/skbuff.h>
  35#include <linux/bitmap.h>
  36#include <linux/netdevice.h>
  37#include <linux/hash.h>
  38#include <net/netlink.h>
  39#include <net/act_api.h>
  40#include <net/pkt_cls.h>
  41#include <linux/idr.h>
 
  42
  43struct tc_u_knode {
  44	struct tc_u_knode __rcu	*next;
  45	u32			handle;
  46	struct tc_u_hnode __rcu	*ht_up;
  47	struct tcf_exts		exts;
  48	int			ifindex;
  49	u8			fshift;
  50	struct tcf_result	res;
  51	struct tc_u_hnode __rcu	*ht_down;
  52#ifdef CONFIG_CLS_U32_PERF
  53	struct tc_u32_pcnt __percpu *pf;
  54#endif
  55	u32			flags;
  56	unsigned int		in_hw_count;
  57#ifdef CONFIG_CLS_U32_MARK
  58	u32			val;
  59	u32			mask;
  60	u32 __percpu		*pcpu_success;
  61#endif
  62	struct rcu_work		rwork;
  63	/* The 'sel' field MUST be the last field in structure to allow for
  64	 * tc_u32_keys allocated at end of structure.
  65	 */
  66	struct tc_u32_sel	sel;
  67};
  68
  69struct tc_u_hnode {
  70	struct tc_u_hnode __rcu	*next;
  71	u32			handle;
  72	u32			prio;
  73	int			refcnt;
  74	unsigned int		divisor;
  75	struct idr		handle_idr;
  76	bool			is_root;
  77	struct rcu_head		rcu;
  78	u32			flags;
  79	/* The 'ht' field MUST be the last field in structure to allow for
  80	 * more entries allocated at end of structure.
  81	 */
  82	struct tc_u_knode __rcu	*ht[];
  83};
  84
  85struct tc_u_common {
  86	struct tc_u_hnode __rcu	*hlist;
  87	void			*ptr;
  88	int			refcnt;
  89	struct idr		handle_idr;
  90	struct hlist_node	hnode;
  91	long			knodes;
  92};
  93
 
 
 
 
 
 
 
 
 
 
  94static inline unsigned int u32_hash_fold(__be32 key,
  95					 const struct tc_u32_sel *sel,
  96					 u8 fshift)
  97{
  98	unsigned int h = ntohl(key & sel->hmask) >> fshift;
  99
 100	return h;
 101}
 102
 103static int u32_classify(struct sk_buff *skb, const struct tcf_proto *tp,
 104			struct tcf_result *res)
 
 105{
 106	struct {
 107		struct tc_u_knode *knode;
 108		unsigned int	  off;
 109	} stack[TC_U32_MAXDEPTH];
 110
 111	struct tc_u_hnode *ht = rcu_dereference_bh(tp->root);
 112	unsigned int off = skb_network_offset(skb);
 113	struct tc_u_knode *n;
 114	int sdepth = 0;
 115	int off2 = 0;
 116	int sel = 0;
 117#ifdef CONFIG_CLS_U32_PERF
 118	int j;
 119#endif
 120	int i, r;
 121
 122next_ht:
 123	n = rcu_dereference_bh(ht->ht[sel]);
 124
 125next_knode:
 126	if (n) {
 127		struct tc_u32_key *key = n->sel.keys;
 128
 129#ifdef CONFIG_CLS_U32_PERF
 130		__this_cpu_inc(n->pf->rcnt);
 131		j = 0;
 132#endif
 133
 134		if (tc_skip_sw(n->flags)) {
 135			n = rcu_dereference_bh(n->next);
 136			goto next_knode;
 137		}
 138
 139#ifdef CONFIG_CLS_U32_MARK
 140		if ((skb->mark & n->mask) != n->val) {
 141			n = rcu_dereference_bh(n->next);
 142			goto next_knode;
 143		} else {
 144			__this_cpu_inc(*n->pcpu_success);
 145		}
 146#endif
 147
 148		for (i = n->sel.nkeys; i > 0; i--, key++) {
 149			int toff = off + key->off + (off2 & key->offmask);
 150			__be32 *data, hdata;
 151
 152			if (skb_headroom(skb) + toff > INT_MAX)
 153				goto out;
 154
 155			data = skb_header_pointer(skb, toff, 4, &hdata);
 156			if (!data)
 157				goto out;
 158			if ((*data ^ key->val) & key->mask) {
 159				n = rcu_dereference_bh(n->next);
 160				goto next_knode;
 161			}
 162#ifdef CONFIG_CLS_U32_PERF
 163			__this_cpu_inc(n->pf->kcnts[j]);
 164			j++;
 165#endif
 166		}
 167
 168		ht = rcu_dereference_bh(n->ht_down);
 169		if (!ht) {
 170check_terminal:
 171			if (n->sel.flags & TC_U32_TERMINAL) {
 172
 173				*res = n->res;
 174				if (!tcf_match_indev(skb, n->ifindex)) {
 175					n = rcu_dereference_bh(n->next);
 176					goto next_knode;
 177				}
 178#ifdef CONFIG_CLS_U32_PERF
 179				__this_cpu_inc(n->pf->rhit);
 180#endif
 181				r = tcf_exts_exec(skb, &n->exts, res);
 182				if (r < 0) {
 183					n = rcu_dereference_bh(n->next);
 184					goto next_knode;
 185				}
 186
 187				return r;
 188			}
 189			n = rcu_dereference_bh(n->next);
 190			goto next_knode;
 191		}
 192
 193		/* PUSH */
 194		if (sdepth >= TC_U32_MAXDEPTH)
 195			goto deadloop;
 196		stack[sdepth].knode = n;
 197		stack[sdepth].off = off;
 198		sdepth++;
 199
 200		ht = rcu_dereference_bh(n->ht_down);
 201		sel = 0;
 202		if (ht->divisor) {
 203			__be32 *data, hdata;
 204
 205			data = skb_header_pointer(skb, off + n->sel.hoff, 4,
 206						  &hdata);
 207			if (!data)
 208				goto out;
 209			sel = ht->divisor & u32_hash_fold(*data, &n->sel,
 210							  n->fshift);
 211		}
 212		if (!(n->sel.flags & (TC_U32_VAROFFSET | TC_U32_OFFSET | TC_U32_EAT)))
 213			goto next_ht;
 214
 215		if (n->sel.flags & (TC_U32_OFFSET | TC_U32_VAROFFSET)) {
 216			off2 = n->sel.off + 3;
 217			if (n->sel.flags & TC_U32_VAROFFSET) {
 218				__be16 *data, hdata;
 219
 220				data = skb_header_pointer(skb,
 221							  off + n->sel.offoff,
 222							  2, &hdata);
 223				if (!data)
 224					goto out;
 225				off2 += ntohs(n->sel.offmask & *data) >>
 226					n->sel.offshift;
 227			}
 228			off2 &= ~3;
 229		}
 230		if (n->sel.flags & TC_U32_EAT) {
 231			off += off2;
 232			off2 = 0;
 233		}
 234
 235		if (off < skb->len)
 236			goto next_ht;
 237	}
 238
 239	/* POP */
 240	if (sdepth--) {
 241		n = stack[sdepth].knode;
 242		ht = rcu_dereference_bh(n->ht_up);
 243		off = stack[sdepth].off;
 244		goto check_terminal;
 245	}
 246out:
 247	return -1;
 248
 249deadloop:
 250	net_warn_ratelimited("cls_u32: dead loop\n");
 251	return -1;
 252}
 253
 254static struct tc_u_hnode *u32_lookup_ht(struct tc_u_common *tp_c, u32 handle)
 255{
 256	struct tc_u_hnode *ht;
 257
 258	for (ht = rtnl_dereference(tp_c->hlist);
 259	     ht;
 260	     ht = rtnl_dereference(ht->next))
 261		if (ht->handle == handle)
 262			break;
 263
 264	return ht;
 265}
 266
 267static struct tc_u_knode *u32_lookup_key(struct tc_u_hnode *ht, u32 handle)
 268{
 269	unsigned int sel;
 270	struct tc_u_knode *n = NULL;
 271
 272	sel = TC_U32_HASH(handle);
 273	if (sel > ht->divisor)
 274		goto out;
 275
 276	for (n = rtnl_dereference(ht->ht[sel]);
 277	     n;
 278	     n = rtnl_dereference(n->next))
 279		if (n->handle == handle)
 280			break;
 281out:
 282	return n;
 283}
 284
 285
 286static void *u32_get(struct tcf_proto *tp, u32 handle)
 287{
 288	struct tc_u_hnode *ht;
 289	struct tc_u_common *tp_c = tp->data;
 290
 291	if (TC_U32_HTID(handle) == TC_U32_ROOT)
 292		ht = rtnl_dereference(tp->root);
 293	else
 294		ht = u32_lookup_ht(tp_c, TC_U32_HTID(handle));
 295
 296	if (!ht)
 297		return NULL;
 298
 299	if (TC_U32_KEY(handle) == 0)
 300		return ht;
 301
 302	return u32_lookup_key(ht, handle);
 303}
 304
 305/* Protected by rtnl lock */
 306static u32 gen_new_htid(struct tc_u_common *tp_c, struct tc_u_hnode *ptr)
 307{
 308	int id = idr_alloc_cyclic(&tp_c->handle_idr, ptr, 1, 0x7FF, GFP_KERNEL);
 309	if (id < 0)
 310		return 0;
 311	return (id | 0x800U) << 20;
 312}
 313
 314static struct hlist_head *tc_u_common_hash;
 315
 316#define U32_HASH_SHIFT 10
 317#define U32_HASH_SIZE (1 << U32_HASH_SHIFT)
 318
 319static void *tc_u_common_ptr(const struct tcf_proto *tp)
 320{
 321	struct tcf_block *block = tp->chain->block;
 322
 323	/* The block sharing is currently supported only
 324	 * for classless qdiscs. In that case we use block
 325	 * for tc_u_common identification. In case the
 326	 * block is not shared, block->q is a valid pointer
 327	 * and we can use that. That works for classful qdiscs.
 328	 */
 329	if (tcf_block_shared(block))
 330		return block;
 331	else
 332		return block->q;
 333}
 334
 335static struct hlist_head *tc_u_hash(void *key)
 336{
 337	return tc_u_common_hash + hash_ptr(key, U32_HASH_SHIFT);
 338}
 339
 340static struct tc_u_common *tc_u_common_find(void *key)
 341{
 342	struct tc_u_common *tc;
 343	hlist_for_each_entry(tc, tc_u_hash(key), hnode) {
 344		if (tc->ptr == key)
 345			return tc;
 346	}
 347	return NULL;
 348}
 349
 350static int u32_init(struct tcf_proto *tp)
 351{
 352	struct tc_u_hnode *root_ht;
 353	void *key = tc_u_common_ptr(tp);
 354	struct tc_u_common *tp_c = tc_u_common_find(key);
 355
 356	root_ht = kzalloc(struct_size(root_ht, ht, 1), GFP_KERNEL);
 357	if (root_ht == NULL)
 358		return -ENOBUFS;
 359
 360	root_ht->refcnt++;
 361	root_ht->handle = tp_c ? gen_new_htid(tp_c, root_ht) : 0x80000000;
 362	root_ht->prio = tp->prio;
 363	root_ht->is_root = true;
 364	idr_init(&root_ht->handle_idr);
 365
 366	if (tp_c == NULL) {
 367		tp_c = kzalloc(struct_size(tp_c, hlist->ht, 1), GFP_KERNEL);
 368		if (tp_c == NULL) {
 369			kfree(root_ht);
 370			return -ENOBUFS;
 371		}
 
 372		tp_c->ptr = key;
 373		INIT_HLIST_NODE(&tp_c->hnode);
 374		idr_init(&tp_c->handle_idr);
 375
 376		hlist_add_head(&tp_c->hnode, tc_u_hash(key));
 
 
 377	}
 378
 379	tp_c->refcnt++;
 380	RCU_INIT_POINTER(root_ht->next, tp_c->hlist);
 381	rcu_assign_pointer(tp_c->hlist, root_ht);
 382
 383	root_ht->refcnt++;
 384	rcu_assign_pointer(tp->root, root_ht);
 385	tp->data = tp_c;
 386	return 0;
 387}
 388
 389static int u32_destroy_key(struct tc_u_knode *n, bool free_pf)
 390{
 391	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
 392
 393	tcf_exts_destroy(&n->exts);
 394	tcf_exts_put_net(&n->exts);
 395	if (ht && --ht->refcnt == 0)
 396		kfree(ht);
 
 
 
 
 
 
 397#ifdef CONFIG_CLS_U32_PERF
 398	if (free_pf)
 399		free_percpu(n->pf);
 400#endif
 401#ifdef CONFIG_CLS_U32_MARK
 402	if (free_pf)
 403		free_percpu(n->pcpu_success);
 404#endif
 405	kfree(n);
 406	return 0;
 407}
 408
 409/* u32_delete_key_rcu should be called when free'ing a copied
 410 * version of a tc_u_knode obtained from u32_init_knode(). When
 411 * copies are obtained from u32_init_knode() the statistics are
 412 * shared between the old and new copies to allow readers to
 413 * continue to update the statistics during the copy. To support
 414 * this the u32_delete_key_rcu variant does not free the percpu
 415 * statistics.
 416 */
 417static void u32_delete_key_work(struct work_struct *work)
 418{
 419	struct tc_u_knode *key = container_of(to_rcu_work(work),
 420					      struct tc_u_knode,
 421					      rwork);
 422	rtnl_lock();
 423	u32_destroy_key(key, false);
 424	rtnl_unlock();
 425}
 426
 427/* u32_delete_key_freepf_rcu is the rcu callback variant
 428 * that free's the entire structure including the statistics
 429 * percpu variables. Only use this if the key is not a copy
 430 * returned by u32_init_knode(). See u32_delete_key_rcu()
 431 * for the variant that should be used with keys return from
 432 * u32_init_knode()
 433 */
 434static void u32_delete_key_freepf_work(struct work_struct *work)
 435{
 436	struct tc_u_knode *key = container_of(to_rcu_work(work),
 437					      struct tc_u_knode,
 438					      rwork);
 439	rtnl_lock();
 440	u32_destroy_key(key, true);
 441	rtnl_unlock();
 442}
 443
 444static int u32_delete_key(struct tcf_proto *tp, struct tc_u_knode *key)
 445{
 446	struct tc_u_common *tp_c = tp->data;
 447	struct tc_u_knode __rcu **kp;
 448	struct tc_u_knode *pkp;
 449	struct tc_u_hnode *ht = rtnl_dereference(key->ht_up);
 450
 451	if (ht) {
 452		kp = &ht->ht[TC_U32_HASH(key->handle)];
 453		for (pkp = rtnl_dereference(*kp); pkp;
 454		     kp = &pkp->next, pkp = rtnl_dereference(*kp)) {
 455			if (pkp == key) {
 456				RCU_INIT_POINTER(*kp, key->next);
 457				tp_c->knodes--;
 458
 459				tcf_unbind_filter(tp, &key->res);
 460				idr_remove(&ht->handle_idr, key->handle);
 461				tcf_exts_get_net(&key->exts);
 462				tcf_queue_work(&key->rwork, u32_delete_key_freepf_work);
 463				return 0;
 464			}
 465		}
 466	}
 467	WARN_ON(1);
 468	return 0;
 469}
 470
 471static void u32_clear_hw_hnode(struct tcf_proto *tp, struct tc_u_hnode *h,
 472			       struct netlink_ext_ack *extack)
 473{
 474	struct tcf_block *block = tp->chain->block;
 475	struct tc_cls_u32_offload cls_u32 = {};
 476
 477	tc_cls_common_offload_init(&cls_u32.common, tp, h->flags, extack);
 478	cls_u32.command = TC_CLSU32_DELETE_HNODE;
 479	cls_u32.hnode.divisor = h->divisor;
 480	cls_u32.hnode.handle = h->handle;
 481	cls_u32.hnode.prio = h->prio;
 482
 483	tc_setup_cb_call(block, TC_SETUP_CLSU32, &cls_u32, false, true);
 484}
 485
 486static int u32_replace_hw_hnode(struct tcf_proto *tp, struct tc_u_hnode *h,
 487				u32 flags, struct netlink_ext_ack *extack)
 488{
 489	struct tcf_block *block = tp->chain->block;
 490	struct tc_cls_u32_offload cls_u32 = {};
 491	bool skip_sw = tc_skip_sw(flags);
 492	bool offloaded = false;
 493	int err;
 494
 495	tc_cls_common_offload_init(&cls_u32.common, tp, flags, extack);
 496	cls_u32.command = TC_CLSU32_NEW_HNODE;
 497	cls_u32.hnode.divisor = h->divisor;
 498	cls_u32.hnode.handle = h->handle;
 499	cls_u32.hnode.prio = h->prio;
 500
 501	err = tc_setup_cb_call(block, TC_SETUP_CLSU32, &cls_u32, skip_sw, true);
 502	if (err < 0) {
 503		u32_clear_hw_hnode(tp, h, NULL);
 504		return err;
 505	} else if (err > 0) {
 506		offloaded = true;
 507	}
 508
 509	if (skip_sw && !offloaded)
 510		return -EINVAL;
 511
 512	return 0;
 513}
 514
 515static void u32_remove_hw_knode(struct tcf_proto *tp, struct tc_u_knode *n,
 516				struct netlink_ext_ack *extack)
 517{
 518	struct tcf_block *block = tp->chain->block;
 519	struct tc_cls_u32_offload cls_u32 = {};
 520
 521	tc_cls_common_offload_init(&cls_u32.common, tp, n->flags, extack);
 522	cls_u32.command = TC_CLSU32_DELETE_KNODE;
 523	cls_u32.knode.handle = n->handle;
 524
 525	tc_setup_cb_destroy(block, tp, TC_SETUP_CLSU32, &cls_u32, false,
 526			    &n->flags, &n->in_hw_count, true);
 527}
 528
 529static int u32_replace_hw_knode(struct tcf_proto *tp, struct tc_u_knode *n,
 530				u32 flags, struct netlink_ext_ack *extack)
 531{
 532	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
 533	struct tcf_block *block = tp->chain->block;
 534	struct tc_cls_u32_offload cls_u32 = {};
 535	bool skip_sw = tc_skip_sw(flags);
 536	int err;
 537
 538	tc_cls_common_offload_init(&cls_u32.common, tp, flags, extack);
 539	cls_u32.command = TC_CLSU32_REPLACE_KNODE;
 540	cls_u32.knode.handle = n->handle;
 541	cls_u32.knode.fshift = n->fshift;
 542#ifdef CONFIG_CLS_U32_MARK
 543	cls_u32.knode.val = n->val;
 544	cls_u32.knode.mask = n->mask;
 545#else
 546	cls_u32.knode.val = 0;
 547	cls_u32.knode.mask = 0;
 548#endif
 549	cls_u32.knode.sel = &n->sel;
 550	cls_u32.knode.res = &n->res;
 551	cls_u32.knode.exts = &n->exts;
 552	if (n->ht_down)
 553		cls_u32.knode.link_handle = ht->handle;
 554
 555	err = tc_setup_cb_add(block, tp, TC_SETUP_CLSU32, &cls_u32, skip_sw,
 556			      &n->flags, &n->in_hw_count, true);
 557	if (err) {
 558		u32_remove_hw_knode(tp, n, NULL);
 559		return err;
 560	}
 561
 562	if (skip_sw && !(n->flags & TCA_CLS_FLAGS_IN_HW))
 563		return -EINVAL;
 564
 565	return 0;
 566}
 567
 568static void u32_clear_hnode(struct tcf_proto *tp, struct tc_u_hnode *ht,
 569			    struct netlink_ext_ack *extack)
 570{
 571	struct tc_u_common *tp_c = tp->data;
 572	struct tc_u_knode *n;
 573	unsigned int h;
 574
 575	for (h = 0; h <= ht->divisor; h++) {
 576		while ((n = rtnl_dereference(ht->ht[h])) != NULL) {
 577			RCU_INIT_POINTER(ht->ht[h],
 578					 rtnl_dereference(n->next));
 579			tp_c->knodes--;
 580			tcf_unbind_filter(tp, &n->res);
 581			u32_remove_hw_knode(tp, n, extack);
 582			idr_remove(&ht->handle_idr, n->handle);
 583			if (tcf_exts_get_net(&n->exts))
 584				tcf_queue_work(&n->rwork, u32_delete_key_freepf_work);
 585			else
 586				u32_destroy_key(n, true);
 587		}
 588	}
 589}
 590
 591static int u32_destroy_hnode(struct tcf_proto *tp, struct tc_u_hnode *ht,
 592			     struct netlink_ext_ack *extack)
 593{
 594	struct tc_u_common *tp_c = tp->data;
 595	struct tc_u_hnode __rcu **hn;
 596	struct tc_u_hnode *phn;
 597
 598	WARN_ON(--ht->refcnt);
 599
 600	u32_clear_hnode(tp, ht, extack);
 601
 602	hn = &tp_c->hlist;
 603	for (phn = rtnl_dereference(*hn);
 604	     phn;
 605	     hn = &phn->next, phn = rtnl_dereference(*hn)) {
 606		if (phn == ht) {
 607			u32_clear_hw_hnode(tp, ht, extack);
 608			idr_destroy(&ht->handle_idr);
 609			idr_remove(&tp_c->handle_idr, ht->handle);
 610			RCU_INIT_POINTER(*hn, ht->next);
 611			kfree_rcu(ht, rcu);
 612			return 0;
 613		}
 614	}
 615
 616	return -ENOENT;
 617}
 618
 619static void u32_destroy(struct tcf_proto *tp, bool rtnl_held,
 620			struct netlink_ext_ack *extack)
 621{
 622	struct tc_u_common *tp_c = tp->data;
 623	struct tc_u_hnode *root_ht = rtnl_dereference(tp->root);
 624
 625	WARN_ON(root_ht == NULL);
 626
 627	if (root_ht && --root_ht->refcnt == 1)
 628		u32_destroy_hnode(tp, root_ht, extack);
 629
 630	if (--tp_c->refcnt == 0) {
 631		struct tc_u_hnode *ht;
 632
 633		hlist_del(&tp_c->hnode);
 634
 635		while ((ht = rtnl_dereference(tp_c->hlist)) != NULL) {
 636			u32_clear_hnode(tp, ht, extack);
 637			RCU_INIT_POINTER(tp_c->hlist, ht->next);
 638
 639			/* u32_destroy_key() will later free ht for us, if it's
 640			 * still referenced by some knode
 641			 */
 642			if (--ht->refcnt == 0)
 643				kfree_rcu(ht, rcu);
 644		}
 645
 646		idr_destroy(&tp_c->handle_idr);
 647		kfree(tp_c);
 648	}
 649
 650	tp->data = NULL;
 651}
 652
 653static int u32_delete(struct tcf_proto *tp, void *arg, bool *last,
 654		      bool rtnl_held, struct netlink_ext_ack *extack)
 655{
 656	struct tc_u_hnode *ht = arg;
 657	struct tc_u_common *tp_c = tp->data;
 658	int ret = 0;
 659
 660	if (TC_U32_KEY(ht->handle)) {
 661		u32_remove_hw_knode(tp, (struct tc_u_knode *)ht, extack);
 662		ret = u32_delete_key(tp, (struct tc_u_knode *)ht);
 663		goto out;
 664	}
 665
 666	if (ht->is_root) {
 667		NL_SET_ERR_MSG_MOD(extack, "Not allowed to delete root node");
 668		return -EINVAL;
 669	}
 670
 671	if (ht->refcnt == 1) {
 672		u32_destroy_hnode(tp, ht, extack);
 673	} else {
 674		NL_SET_ERR_MSG_MOD(extack, "Can not delete in-use filter");
 675		return -EBUSY;
 676	}
 677
 678out:
 679	*last = tp_c->refcnt == 1 && tp_c->knodes == 0;
 680	return ret;
 681}
 682
 683static u32 gen_new_kid(struct tc_u_hnode *ht, u32 htid)
 684{
 685	u32 index = htid | 0x800;
 686	u32 max = htid | 0xFFF;
 687
 688	if (idr_alloc_u32(&ht->handle_idr, NULL, &index, max, GFP_KERNEL)) {
 689		index = htid + 1;
 690		if (idr_alloc_u32(&ht->handle_idr, NULL, &index, max,
 691				 GFP_KERNEL))
 692			index = max;
 693	}
 694
 695	return index;
 696}
 697
 698static const struct nla_policy u32_policy[TCA_U32_MAX + 1] = {
 699	[TCA_U32_CLASSID]	= { .type = NLA_U32 },
 700	[TCA_U32_HASH]		= { .type = NLA_U32 },
 701	[TCA_U32_LINK]		= { .type = NLA_U32 },
 702	[TCA_U32_DIVISOR]	= { .type = NLA_U32 },
 703	[TCA_U32_SEL]		= { .len = sizeof(struct tc_u32_sel) },
 704	[TCA_U32_INDEV]		= { .type = NLA_STRING, .len = IFNAMSIZ },
 705	[TCA_U32_MARK]		= { .len = sizeof(struct tc_u32_mark) },
 706	[TCA_U32_FLAGS]		= { .type = NLA_U32 },
 707};
 708
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 709static int u32_set_parms(struct net *net, struct tcf_proto *tp,
 710			 unsigned long base,
 711			 struct tc_u_knode *n, struct nlattr **tb,
 712			 struct nlattr *est, bool ovr,
 713			 struct netlink_ext_ack *extack)
 714{
 715	int err;
 716
 717	err = tcf_exts_validate(net, tp, tb, est, &n->exts, ovr, true, extack);
 
 718	if (err < 0)
 719		return err;
 720
 
 
 
 
 
 
 721	if (tb[TCA_U32_LINK]) {
 722		u32 handle = nla_get_u32(tb[TCA_U32_LINK]);
 723		struct tc_u_hnode *ht_down = NULL, *ht_old;
 724
 725		if (TC_U32_KEY(handle)) {
 726			NL_SET_ERR_MSG_MOD(extack, "u32 Link handle must be a hash table");
 727			return -EINVAL;
 728		}
 729
 730		if (handle) {
 731			ht_down = u32_lookup_ht(tp->data, handle);
 732
 733			if (!ht_down) {
 734				NL_SET_ERR_MSG_MOD(extack, "Link hash table not found");
 735				return -EINVAL;
 736			}
 737			if (ht_down->is_root) {
 738				NL_SET_ERR_MSG_MOD(extack, "Not linking to root node");
 739				return -EINVAL;
 740			}
 741			ht_down->refcnt++;
 742		}
 743
 744		ht_old = rtnl_dereference(n->ht_down);
 745		rcu_assign_pointer(n->ht_down, ht_down);
 746
 747		if (ht_old)
 748			ht_old->refcnt--;
 749	}
 750	if (tb[TCA_U32_CLASSID]) {
 751		n->res.classid = nla_get_u32(tb[TCA_U32_CLASSID]);
 752		tcf_bind_filter(tp, &n->res, base);
 753	}
 754
 755	if (tb[TCA_U32_INDEV]) {
 756		int ret;
 757		ret = tcf_change_indev(net, tb[TCA_U32_INDEV], extack);
 758		if (ret < 0)
 759			return -EINVAL;
 760		n->ifindex = ret;
 761	}
 762	return 0;
 763}
 764
 765static void u32_replace_knode(struct tcf_proto *tp, struct tc_u_common *tp_c,
 766			      struct tc_u_knode *n)
 767{
 768	struct tc_u_knode __rcu **ins;
 769	struct tc_u_knode *pins;
 770	struct tc_u_hnode *ht;
 771
 772	if (TC_U32_HTID(n->handle) == TC_U32_ROOT)
 773		ht = rtnl_dereference(tp->root);
 774	else
 775		ht = u32_lookup_ht(tp_c, TC_U32_HTID(n->handle));
 776
 777	ins = &ht->ht[TC_U32_HASH(n->handle)];
 778
 779	/* The node must always exist for it to be replaced if this is not the
 780	 * case then something went very wrong elsewhere.
 781	 */
 782	for (pins = rtnl_dereference(*ins); ;
 783	     ins = &pins->next, pins = rtnl_dereference(*ins))
 784		if (pins->handle == n->handle)
 785			break;
 786
 787	idr_replace(&ht->handle_idr, n, n->handle);
 788	RCU_INIT_POINTER(n->next, pins->next);
 789	rcu_assign_pointer(*ins, n);
 790}
 791
 792static struct tc_u_knode *u32_init_knode(struct net *net, struct tcf_proto *tp,
 793					 struct tc_u_knode *n)
 794{
 795	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
 796	struct tc_u32_sel *s = &n->sel;
 797	struct tc_u_knode *new;
 798
 799	new = kzalloc(struct_size(new, sel.keys, s->nkeys), GFP_KERNEL);
 800	if (!new)
 801		return NULL;
 802
 803	RCU_INIT_POINTER(new->next, n->next);
 804	new->handle = n->handle;
 805	RCU_INIT_POINTER(new->ht_up, n->ht_up);
 806
 807	new->ifindex = n->ifindex;
 808	new->fshift = n->fshift;
 809	new->res = n->res;
 810	new->flags = n->flags;
 811	RCU_INIT_POINTER(new->ht_down, ht);
 812
 813	/* bump reference count as long as we hold pointer to structure */
 814	if (ht)
 815		ht->refcnt++;
 816
 817#ifdef CONFIG_CLS_U32_PERF
 818	/* Statistics may be incremented by readers during update
 819	 * so we must keep them in tact. When the node is later destroyed
 820	 * a special destroy call must be made to not free the pf memory.
 821	 */
 822	new->pf = n->pf;
 823#endif
 824
 825#ifdef CONFIG_CLS_U32_MARK
 826	new->val = n->val;
 827	new->mask = n->mask;
 828	/* Similarly success statistics must be moved as pointers */
 829	new->pcpu_success = n->pcpu_success;
 830#endif
 831	memcpy(&new->sel, s, struct_size(s, keys, s->nkeys));
 832
 833	if (tcf_exts_init(&new->exts, net, TCA_U32_ACT, TCA_U32_POLICE)) {
 834		kfree(new);
 835		return NULL;
 836	}
 837
 
 
 
 
 838	return new;
 839}
 840
 841static int u32_change(struct net *net, struct sk_buff *in_skb,
 842		      struct tcf_proto *tp, unsigned long base, u32 handle,
 843		      struct nlattr **tca, void **arg, bool ovr, bool rtnl_held,
 844		      struct netlink_ext_ack *extack)
 845{
 846	struct tc_u_common *tp_c = tp->data;
 847	struct tc_u_hnode *ht;
 848	struct tc_u_knode *n;
 849	struct tc_u32_sel *s;
 850	struct nlattr *opt = tca[TCA_OPTIONS];
 851	struct nlattr *tb[TCA_U32_MAX + 1];
 852	u32 htid, flags = 0;
 853	size_t sel_size;
 854	int err;
 855
 856	if (!opt) {
 857		if (handle) {
 858			NL_SET_ERR_MSG_MOD(extack, "Filter handle requires options");
 859			return -EINVAL;
 860		} else {
 861			return 0;
 862		}
 863	}
 864
 865	err = nla_parse_nested_deprecated(tb, TCA_U32_MAX, opt, u32_policy,
 866					  extack);
 867	if (err < 0)
 868		return err;
 869
 870	if (tb[TCA_U32_FLAGS]) {
 871		flags = nla_get_u32(tb[TCA_U32_FLAGS]);
 872		if (!tc_flags_valid(flags)) {
 873			NL_SET_ERR_MSG_MOD(extack, "Invalid filter flags");
 874			return -EINVAL;
 875		}
 876	}
 877
 878	n = *arg;
 879	if (n) {
 880		struct tc_u_knode *new;
 881
 882		if (TC_U32_KEY(n->handle) == 0) {
 883			NL_SET_ERR_MSG_MOD(extack, "Key node id cannot be zero");
 884			return -EINVAL;
 885		}
 886
 887		if ((n->flags ^ flags) &
 888		    ~(TCA_CLS_FLAGS_IN_HW | TCA_CLS_FLAGS_NOT_IN_HW)) {
 889			NL_SET_ERR_MSG_MOD(extack, "Key node flags do not match passed flags");
 890			return -EINVAL;
 891		}
 892
 893		new = u32_init_knode(net, tp, n);
 894		if (!new)
 895			return -ENOMEM;
 896
 897		err = u32_set_parms(net, tp, base, new, tb,
 898				    tca[TCA_RATE], ovr, extack);
 899
 900		if (err) {
 901			u32_destroy_key(new, false);
 902			return err;
 903		}
 904
 
 
 905		err = u32_replace_hw_knode(tp, new, flags, extack);
 906		if (err) {
 907			u32_destroy_key(new, false);
 
 
 
 
 
 
 
 
 
 908			return err;
 909		}
 910
 911		if (!tc_in_hw(new->flags))
 912			new->flags |= TCA_CLS_FLAGS_NOT_IN_HW;
 913
 
 
 914		u32_replace_knode(tp, tp_c, new);
 915		tcf_unbind_filter(tp, &n->res);
 916		tcf_exts_get_net(&n->exts);
 917		tcf_queue_work(&n->rwork, u32_delete_key_work);
 918		return 0;
 919	}
 920
 921	if (tb[TCA_U32_DIVISOR]) {
 922		unsigned int divisor = nla_get_u32(tb[TCA_U32_DIVISOR]);
 923
 924		if (!is_power_of_2(divisor)) {
 925			NL_SET_ERR_MSG_MOD(extack, "Divisor is not a power of 2");
 926			return -EINVAL;
 927		}
 928		if (divisor-- > 0x100) {
 929			NL_SET_ERR_MSG_MOD(extack, "Exceeded maximum 256 hash buckets");
 930			return -EINVAL;
 931		}
 932		if (TC_U32_KEY(handle)) {
 933			NL_SET_ERR_MSG_MOD(extack, "Divisor can only be used on a hash table");
 934			return -EINVAL;
 935		}
 936		ht = kzalloc(struct_size(ht, ht, divisor + 1), GFP_KERNEL);
 937		if (ht == NULL)
 938			return -ENOBUFS;
 939		if (handle == 0) {
 940			handle = gen_new_htid(tp->data, ht);
 941			if (handle == 0) {
 942				kfree(ht);
 943				return -ENOMEM;
 944			}
 945		} else {
 946			err = idr_alloc_u32(&tp_c->handle_idr, ht, &handle,
 947					    handle, GFP_KERNEL);
 948			if (err) {
 949				kfree(ht);
 950				return err;
 951			}
 952		}
 953		ht->refcnt = 1;
 954		ht->divisor = divisor;
 955		ht->handle = handle;
 956		ht->prio = tp->prio;
 957		idr_init(&ht->handle_idr);
 958		ht->flags = flags;
 959
 960		err = u32_replace_hw_hnode(tp, ht, flags, extack);
 961		if (err) {
 962			idr_remove(&tp_c->handle_idr, handle);
 963			kfree(ht);
 964			return err;
 965		}
 966
 967		RCU_INIT_POINTER(ht->next, tp_c->hlist);
 968		rcu_assign_pointer(tp_c->hlist, ht);
 969		*arg = ht;
 970
 971		return 0;
 972	}
 973
 974	if (tb[TCA_U32_HASH]) {
 975		htid = nla_get_u32(tb[TCA_U32_HASH]);
 976		if (TC_U32_HTID(htid) == TC_U32_ROOT) {
 977			ht = rtnl_dereference(tp->root);
 978			htid = ht->handle;
 979		} else {
 980			ht = u32_lookup_ht(tp->data, TC_U32_HTID(htid));
 981			if (!ht) {
 982				NL_SET_ERR_MSG_MOD(extack, "Specified hash table not found");
 983				return -EINVAL;
 984			}
 985		}
 986	} else {
 987		ht = rtnl_dereference(tp->root);
 988		htid = ht->handle;
 989	}
 990
 991	if (ht->divisor < TC_U32_HASH(htid)) {
 992		NL_SET_ERR_MSG_MOD(extack, "Specified hash table buckets exceed configured value");
 993		return -EINVAL;
 994	}
 995
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 996	if (handle) {
 
 997		if (TC_U32_HTID(handle) && TC_U32_HTID(handle ^ htid)) {
 998			NL_SET_ERR_MSG_MOD(extack, "Handle specified hash table address mismatch");
 999			return -EINVAL;
1000		}
1001		handle = htid | TC_U32_NODE(handle);
1002		err = idr_alloc_u32(&ht->handle_idr, NULL, &handle, handle,
1003				    GFP_KERNEL);
1004		if (err)
1005			return err;
1006	} else
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
1007		handle = gen_new_kid(ht, htid);
 
1008
1009	if (tb[TCA_U32_SEL] == NULL) {
1010		NL_SET_ERR_MSG_MOD(extack, "Selector not specified");
1011		err = -EINVAL;
1012		goto erridr;
1013	}
1014
1015	s = nla_data(tb[TCA_U32_SEL]);
1016	sel_size = struct_size(s, keys, s->nkeys);
1017	if (nla_len(tb[TCA_U32_SEL]) < sel_size) {
1018		err = -EINVAL;
1019		goto erridr;
1020	}
1021
1022	n = kzalloc(struct_size(n, sel.keys, s->nkeys), GFP_KERNEL);
1023	if (n == NULL) {
1024		err = -ENOBUFS;
1025		goto erridr;
1026	}
1027
1028#ifdef CONFIG_CLS_U32_PERF
1029	n->pf = __alloc_percpu(struct_size(n->pf, kcnts, s->nkeys),
1030			       __alignof__(struct tc_u32_pcnt));
1031	if (!n->pf) {
1032		err = -ENOBUFS;
1033		goto errfree;
1034	}
1035#endif
1036
1037	memcpy(&n->sel, s, sel_size);
 
 
 
 
1038	RCU_INIT_POINTER(n->ht_up, ht);
1039	n->handle = handle;
1040	n->fshift = s->hmask ? ffs(ntohl(s->hmask)) - 1 : 0;
1041	n->flags = flags;
1042
1043	err = tcf_exts_init(&n->exts, net, TCA_U32_ACT, TCA_U32_POLICE);
1044	if (err < 0)
1045		goto errout;
1046
1047#ifdef CONFIG_CLS_U32_MARK
1048	n->pcpu_success = alloc_percpu(u32);
1049	if (!n->pcpu_success) {
1050		err = -ENOMEM;
1051		goto errout;
1052	}
1053
1054	if (tb[TCA_U32_MARK]) {
1055		struct tc_u32_mark *mark;
1056
1057		mark = nla_data(tb[TCA_U32_MARK]);
1058		n->val = mark->val;
1059		n->mask = mark->mask;
1060	}
1061#endif
1062
1063	err = u32_set_parms(net, tp, base, n, tb, tca[TCA_RATE], ovr,
1064			    extack);
 
 
 
1065	if (err == 0) {
1066		struct tc_u_knode __rcu **ins;
1067		struct tc_u_knode *pins;
1068
1069		err = u32_replace_hw_knode(tp, n, flags, extack);
1070		if (err)
1071			goto errhw;
1072
1073		if (!tc_in_hw(n->flags))
1074			n->flags |= TCA_CLS_FLAGS_NOT_IN_HW;
1075
 
 
1076		ins = &ht->ht[TC_U32_HASH(handle)];
1077		for (pins = rtnl_dereference(*ins); pins;
1078		     ins = &pins->next, pins = rtnl_dereference(*ins))
1079			if (TC_U32_NODE(handle) < TC_U32_NODE(pins->handle))
1080				break;
1081
1082		RCU_INIT_POINTER(n->next, pins);
1083		rcu_assign_pointer(*ins, n);
1084		tp_c->knodes++;
1085		*arg = n;
1086		return 0;
1087	}
1088
1089errhw:
 
 
1090#ifdef CONFIG_CLS_U32_MARK
1091	free_percpu(n->pcpu_success);
1092#endif
1093
1094errout:
1095	tcf_exts_destroy(&n->exts);
1096#ifdef CONFIG_CLS_U32_PERF
1097errfree:
1098	free_percpu(n->pf);
1099#endif
1100	kfree(n);
1101erridr:
1102	idr_remove(&ht->handle_idr, handle);
1103	return err;
1104}
1105
1106static void u32_walk(struct tcf_proto *tp, struct tcf_walker *arg,
1107		     bool rtnl_held)
1108{
1109	struct tc_u_common *tp_c = tp->data;
1110	struct tc_u_hnode *ht;
1111	struct tc_u_knode *n;
1112	unsigned int h;
1113
1114	if (arg->stop)
1115		return;
1116
1117	for (ht = rtnl_dereference(tp_c->hlist);
1118	     ht;
1119	     ht = rtnl_dereference(ht->next)) {
1120		if (ht->prio != tp->prio)
1121			continue;
1122		if (arg->count >= arg->skip) {
1123			if (arg->fn(tp, ht, arg) < 0) {
1124				arg->stop = 1;
1125				return;
1126			}
1127		}
1128		arg->count++;
1129		for (h = 0; h <= ht->divisor; h++) {
1130			for (n = rtnl_dereference(ht->ht[h]);
1131			     n;
1132			     n = rtnl_dereference(n->next)) {
1133				if (arg->count < arg->skip) {
1134					arg->count++;
1135					continue;
1136				}
1137				if (arg->fn(tp, n, arg) < 0) {
1138					arg->stop = 1;
1139					return;
1140				}
1141				arg->count++;
1142			}
1143		}
1144	}
1145}
1146
1147static int u32_reoffload_hnode(struct tcf_proto *tp, struct tc_u_hnode *ht,
1148			       bool add, flow_setup_cb_t *cb, void *cb_priv,
1149			       struct netlink_ext_ack *extack)
1150{
1151	struct tc_cls_u32_offload cls_u32 = {};
1152	int err;
1153
1154	tc_cls_common_offload_init(&cls_u32.common, tp, ht->flags, extack);
1155	cls_u32.command = add ? TC_CLSU32_NEW_HNODE : TC_CLSU32_DELETE_HNODE;
1156	cls_u32.hnode.divisor = ht->divisor;
1157	cls_u32.hnode.handle = ht->handle;
1158	cls_u32.hnode.prio = ht->prio;
1159
1160	err = cb(TC_SETUP_CLSU32, &cls_u32, cb_priv);
1161	if (err && add && tc_skip_sw(ht->flags))
1162		return err;
1163
1164	return 0;
1165}
1166
1167static int u32_reoffload_knode(struct tcf_proto *tp, struct tc_u_knode *n,
1168			       bool add, flow_setup_cb_t *cb, void *cb_priv,
1169			       struct netlink_ext_ack *extack)
1170{
1171	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
1172	struct tcf_block *block = tp->chain->block;
1173	struct tc_cls_u32_offload cls_u32 = {};
1174
1175	tc_cls_common_offload_init(&cls_u32.common, tp, n->flags, extack);
1176	cls_u32.command = add ?
1177		TC_CLSU32_REPLACE_KNODE : TC_CLSU32_DELETE_KNODE;
1178	cls_u32.knode.handle = n->handle;
1179
1180	if (add) {
1181		cls_u32.knode.fshift = n->fshift;
1182#ifdef CONFIG_CLS_U32_MARK
1183		cls_u32.knode.val = n->val;
1184		cls_u32.knode.mask = n->mask;
1185#else
1186		cls_u32.knode.val = 0;
1187		cls_u32.knode.mask = 0;
1188#endif
1189		cls_u32.knode.sel = &n->sel;
1190		cls_u32.knode.res = &n->res;
1191		cls_u32.knode.exts = &n->exts;
1192		if (n->ht_down)
1193			cls_u32.knode.link_handle = ht->handle;
1194	}
1195
1196	return tc_setup_cb_reoffload(block, tp, add, cb, TC_SETUP_CLSU32,
1197				     &cls_u32, cb_priv, &n->flags,
1198				     &n->in_hw_count);
1199}
1200
1201static int u32_reoffload(struct tcf_proto *tp, bool add, flow_setup_cb_t *cb,
1202			 void *cb_priv, struct netlink_ext_ack *extack)
1203{
1204	struct tc_u_common *tp_c = tp->data;
1205	struct tc_u_hnode *ht;
1206	struct tc_u_knode *n;
1207	unsigned int h;
1208	int err;
1209
1210	for (ht = rtnl_dereference(tp_c->hlist);
1211	     ht;
1212	     ht = rtnl_dereference(ht->next)) {
1213		if (ht->prio != tp->prio)
1214			continue;
1215
1216		/* When adding filters to a new dev, try to offload the
1217		 * hashtable first. When removing, do the filters before the
1218		 * hashtable.
1219		 */
1220		if (add && !tc_skip_hw(ht->flags)) {
1221			err = u32_reoffload_hnode(tp, ht, add, cb, cb_priv,
1222						  extack);
1223			if (err)
1224				return err;
1225		}
1226
1227		for (h = 0; h <= ht->divisor; h++) {
1228			for (n = rtnl_dereference(ht->ht[h]);
1229			     n;
1230			     n = rtnl_dereference(n->next)) {
1231				if (tc_skip_hw(n->flags))
1232					continue;
1233
1234				err = u32_reoffload_knode(tp, n, add, cb,
1235							  cb_priv, extack);
1236				if (err)
1237					return err;
1238			}
1239		}
1240
1241		if (!add && !tc_skip_hw(ht->flags))
1242			u32_reoffload_hnode(tp, ht, add, cb, cb_priv, extack);
1243	}
1244
1245	return 0;
1246}
1247
1248static void u32_bind_class(void *fh, u32 classid, unsigned long cl, void *q,
1249			   unsigned long base)
1250{
1251	struct tc_u_knode *n = fh;
1252
1253	if (n && n->res.classid == classid) {
1254		if (cl)
1255			__tcf_bind_filter(q, &n->res, base);
1256		else
1257			__tcf_unbind_filter(q, &n->res);
1258	}
1259}
1260
1261static int u32_dump(struct net *net, struct tcf_proto *tp, void *fh,
1262		    struct sk_buff *skb, struct tcmsg *t, bool rtnl_held)
1263{
1264	struct tc_u_knode *n = fh;
1265	struct tc_u_hnode *ht_up, *ht_down;
1266	struct nlattr *nest;
1267
1268	if (n == NULL)
1269		return skb->len;
1270
1271	t->tcm_handle = n->handle;
1272
1273	nest = nla_nest_start_noflag(skb, TCA_OPTIONS);
1274	if (nest == NULL)
1275		goto nla_put_failure;
1276
1277	if (TC_U32_KEY(n->handle) == 0) {
1278		struct tc_u_hnode *ht = fh;
1279		u32 divisor = ht->divisor + 1;
1280
1281		if (nla_put_u32(skb, TCA_U32_DIVISOR, divisor))
1282			goto nla_put_failure;
1283	} else {
1284#ifdef CONFIG_CLS_U32_PERF
1285		struct tc_u32_pcnt *gpf;
1286		int cpu;
1287#endif
1288
1289		if (nla_put(skb, TCA_U32_SEL, struct_size(&n->sel, keys, n->sel.nkeys),
1290			    &n->sel))
1291			goto nla_put_failure;
1292
1293		ht_up = rtnl_dereference(n->ht_up);
1294		if (ht_up) {
1295			u32 htid = n->handle & 0xFFFFF000;
1296			if (nla_put_u32(skb, TCA_U32_HASH, htid))
1297				goto nla_put_failure;
1298		}
1299		if (n->res.classid &&
1300		    nla_put_u32(skb, TCA_U32_CLASSID, n->res.classid))
1301			goto nla_put_failure;
1302
1303		ht_down = rtnl_dereference(n->ht_down);
1304		if (ht_down &&
1305		    nla_put_u32(skb, TCA_U32_LINK, ht_down->handle))
1306			goto nla_put_failure;
1307
1308		if (n->flags && nla_put_u32(skb, TCA_U32_FLAGS, n->flags))
1309			goto nla_put_failure;
1310
1311#ifdef CONFIG_CLS_U32_MARK
1312		if ((n->val || n->mask)) {
1313			struct tc_u32_mark mark = {.val = n->val,
1314						   .mask = n->mask,
1315						   .success = 0};
1316			int cpum;
1317
1318			for_each_possible_cpu(cpum) {
1319				__u32 cnt = *per_cpu_ptr(n->pcpu_success, cpum);
1320
1321				mark.success += cnt;
1322			}
1323
1324			if (nla_put(skb, TCA_U32_MARK, sizeof(mark), &mark))
1325				goto nla_put_failure;
1326		}
1327#endif
1328
1329		if (tcf_exts_dump(skb, &n->exts) < 0)
1330			goto nla_put_failure;
1331
1332		if (n->ifindex) {
1333			struct net_device *dev;
1334			dev = __dev_get_by_index(net, n->ifindex);
1335			if (dev && nla_put_string(skb, TCA_U32_INDEV, dev->name))
1336				goto nla_put_failure;
1337		}
1338#ifdef CONFIG_CLS_U32_PERF
1339		gpf = kzalloc(struct_size(gpf, kcnts, n->sel.nkeys), GFP_KERNEL);
1340		if (!gpf)
1341			goto nla_put_failure;
1342
1343		for_each_possible_cpu(cpu) {
1344			int i;
1345			struct tc_u32_pcnt *pf = per_cpu_ptr(n->pf, cpu);
1346
1347			gpf->rcnt += pf->rcnt;
1348			gpf->rhit += pf->rhit;
1349			for (i = 0; i < n->sel.nkeys; i++)
1350				gpf->kcnts[i] += pf->kcnts[i];
1351		}
1352
1353		if (nla_put_64bit(skb, TCA_U32_PCNT, struct_size(gpf, kcnts, n->sel.nkeys),
1354				  gpf, TCA_U32_PAD)) {
1355			kfree(gpf);
1356			goto nla_put_failure;
1357		}
1358		kfree(gpf);
1359#endif
1360	}
1361
1362	nla_nest_end(skb, nest);
1363
1364	if (TC_U32_KEY(n->handle))
1365		if (tcf_exts_dump_stats(skb, &n->exts) < 0)
1366			goto nla_put_failure;
1367	return skb->len;
1368
1369nla_put_failure:
1370	nla_nest_cancel(skb, nest);
1371	return -1;
1372}
1373
1374static struct tcf_proto_ops cls_u32_ops __read_mostly = {
1375	.kind		=	"u32",
1376	.classify	=	u32_classify,
1377	.init		=	u32_init,
1378	.destroy	=	u32_destroy,
1379	.get		=	u32_get,
1380	.change		=	u32_change,
1381	.delete		=	u32_delete,
1382	.walk		=	u32_walk,
1383	.reoffload	=	u32_reoffload,
1384	.dump		=	u32_dump,
1385	.bind_class	=	u32_bind_class,
1386	.owner		=	THIS_MODULE,
1387};
 
1388
1389static int __init init_u32(void)
1390{
1391	int i, ret;
1392
1393	pr_info("u32 classifier\n");
1394#ifdef CONFIG_CLS_U32_PERF
1395	pr_info("    Performance counters on\n");
1396#endif
1397	pr_info("    input device check on\n");
1398#ifdef CONFIG_NET_CLS_ACT
1399	pr_info("    Actions configured\n");
1400#endif
1401	tc_u_common_hash = kvmalloc_array(U32_HASH_SIZE,
1402					  sizeof(struct hlist_head),
1403					  GFP_KERNEL);
1404	if (!tc_u_common_hash)
1405		return -ENOMEM;
1406
1407	for (i = 0; i < U32_HASH_SIZE; i++)
1408		INIT_HLIST_HEAD(&tc_u_common_hash[i]);
1409
1410	ret = register_tcf_proto_ops(&cls_u32_ops);
1411	if (ret)
1412		kvfree(tc_u_common_hash);
1413	return ret;
1414}
1415
1416static void __exit exit_u32(void)
1417{
1418	unregister_tcf_proto_ops(&cls_u32_ops);
1419	kvfree(tc_u_common_hash);
1420}
1421
1422module_init(init_u32)
1423module_exit(exit_u32)
 
1424MODULE_LICENSE("GPL");
v6.13.7
   1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 * net/sched/cls_u32.c	Ugly (or Universal) 32bit key Packet Classifier.
   4 *
   5 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
   6 *
   7 *	The filters are packed to hash tables of key nodes
   8 *	with a set of 32bit key/mask pairs at every node.
   9 *	Nodes reference next level hash tables etc.
  10 *
  11 *	This scheme is the best universal classifier I managed to
  12 *	invent; it is not super-fast, but it is not slow (provided you
  13 *	program it correctly), and general enough.  And its relative
  14 *	speed grows as the number of rules becomes larger.
  15 *
  16 *	It seems that it represents the best middle point between
  17 *	speed and manageability both by human and by machine.
  18 *
  19 *	It is especially useful for link sharing combined with QoS;
  20 *	pure RSVP doesn't need such a general approach and can use
  21 *	much simpler (and faster) schemes, sort of cls_rsvp.c.
  22 *
  23 *	nfmark match added by Catalin(ux aka Dino) BOIE <catab at umbrella.ro>
  24 */
  25
  26#include <linux/module.h>
  27#include <linux/slab.h>
  28#include <linux/types.h>
  29#include <linux/kernel.h>
  30#include <linux/string.h>
  31#include <linux/errno.h>
  32#include <linux/percpu.h>
  33#include <linux/rtnetlink.h>
  34#include <linux/skbuff.h>
  35#include <linux/bitmap.h>
  36#include <linux/netdevice.h>
  37#include <linux/hash.h>
  38#include <net/netlink.h>
  39#include <net/act_api.h>
  40#include <net/pkt_cls.h>
  41#include <linux/idr.h>
  42#include <net/tc_wrapper.h>
  43
  44struct tc_u_knode {
  45	struct tc_u_knode __rcu	*next;
  46	u32			handle;
  47	struct tc_u_hnode __rcu	*ht_up;
  48	struct tcf_exts		exts;
  49	int			ifindex;
  50	u8			fshift;
  51	struct tcf_result	res;
  52	struct tc_u_hnode __rcu	*ht_down;
  53#ifdef CONFIG_CLS_U32_PERF
  54	struct tc_u32_pcnt __percpu *pf;
  55#endif
  56	u32			flags;
  57	unsigned int		in_hw_count;
  58#ifdef CONFIG_CLS_U32_MARK
  59	u32			val;
  60	u32			mask;
  61	u32 __percpu		*pcpu_success;
  62#endif
  63	struct rcu_work		rwork;
  64	/* The 'sel' field MUST be the last field in structure to allow for
  65	 * tc_u32_keys allocated at end of structure.
  66	 */
  67	struct tc_u32_sel	sel;
  68};
  69
  70struct tc_u_hnode {
  71	struct tc_u_hnode __rcu	*next;
  72	u32			handle;
  73	u32			prio;
  74	refcount_t		refcnt;
  75	unsigned int		divisor;
  76	struct idr		handle_idr;
  77	bool			is_root;
  78	struct rcu_head		rcu;
  79	u32			flags;
  80	/* The 'ht' field MUST be the last field in structure to allow for
  81	 * more entries allocated at end of structure.
  82	 */
  83	struct tc_u_knode __rcu	*ht[];
  84};
  85
  86struct tc_u_common {
  87	struct tc_u_hnode __rcu	*hlist;
  88	void			*ptr;
  89	refcount_t		refcnt;
  90	struct idr		handle_idr;
  91	struct hlist_node	hnode;
  92	long			knodes;
  93};
  94
  95static u32 handle2id(u32 h)
  96{
  97	return ((h & 0x80000000) ? ((h >> 20) & 0x7FF) : h);
  98}
  99
 100static u32 id2handle(u32 id)
 101{
 102	return (id | 0x800U) << 20;
 103}
 104
 105static inline unsigned int u32_hash_fold(__be32 key,
 106					 const struct tc_u32_sel *sel,
 107					 u8 fshift)
 108{
 109	unsigned int h = ntohl(key & sel->hmask) >> fshift;
 110
 111	return h;
 112}
 113
 114TC_INDIRECT_SCOPE int u32_classify(struct sk_buff *skb,
 115				   const struct tcf_proto *tp,
 116				   struct tcf_result *res)
 117{
 118	struct {
 119		struct tc_u_knode *knode;
 120		unsigned int	  off;
 121	} stack[TC_U32_MAXDEPTH];
 122
 123	struct tc_u_hnode *ht = rcu_dereference_bh(tp->root);
 124	unsigned int off = skb_network_offset(skb);
 125	struct tc_u_knode *n;
 126	int sdepth = 0;
 127	int off2 = 0;
 128	int sel = 0;
 129#ifdef CONFIG_CLS_U32_PERF
 130	int j;
 131#endif
 132	int i, r;
 133
 134next_ht:
 135	n = rcu_dereference_bh(ht->ht[sel]);
 136
 137next_knode:
 138	if (n) {
 139		struct tc_u32_key *key = n->sel.keys;
 140
 141#ifdef CONFIG_CLS_U32_PERF
 142		__this_cpu_inc(n->pf->rcnt);
 143		j = 0;
 144#endif
 145
 146		if (tc_skip_sw(n->flags)) {
 147			n = rcu_dereference_bh(n->next);
 148			goto next_knode;
 149		}
 150
 151#ifdef CONFIG_CLS_U32_MARK
 152		if ((skb->mark & n->mask) != n->val) {
 153			n = rcu_dereference_bh(n->next);
 154			goto next_knode;
 155		} else {
 156			__this_cpu_inc(*n->pcpu_success);
 157		}
 158#endif
 159
 160		for (i = n->sel.nkeys; i > 0; i--, key++) {
 161			int toff = off + key->off + (off2 & key->offmask);
 162			__be32 *data, hdata;
 163
 164			if (skb_headroom(skb) + toff > INT_MAX)
 165				goto out;
 166
 167			data = skb_header_pointer(skb, toff, 4, &hdata);
 168			if (!data)
 169				goto out;
 170			if ((*data ^ key->val) & key->mask) {
 171				n = rcu_dereference_bh(n->next);
 172				goto next_knode;
 173			}
 174#ifdef CONFIG_CLS_U32_PERF
 175			__this_cpu_inc(n->pf->kcnts[j]);
 176			j++;
 177#endif
 178		}
 179
 180		ht = rcu_dereference_bh(n->ht_down);
 181		if (!ht) {
 182check_terminal:
 183			if (n->sel.flags & TC_U32_TERMINAL) {
 184
 185				*res = n->res;
 186				if (!tcf_match_indev(skb, n->ifindex)) {
 187					n = rcu_dereference_bh(n->next);
 188					goto next_knode;
 189				}
 190#ifdef CONFIG_CLS_U32_PERF
 191				__this_cpu_inc(n->pf->rhit);
 192#endif
 193				r = tcf_exts_exec(skb, &n->exts, res);
 194				if (r < 0) {
 195					n = rcu_dereference_bh(n->next);
 196					goto next_knode;
 197				}
 198
 199				return r;
 200			}
 201			n = rcu_dereference_bh(n->next);
 202			goto next_knode;
 203		}
 204
 205		/* PUSH */
 206		if (sdepth >= TC_U32_MAXDEPTH)
 207			goto deadloop;
 208		stack[sdepth].knode = n;
 209		stack[sdepth].off = off;
 210		sdepth++;
 211
 212		ht = rcu_dereference_bh(n->ht_down);
 213		sel = 0;
 214		if (ht->divisor) {
 215			__be32 *data, hdata;
 216
 217			data = skb_header_pointer(skb, off + n->sel.hoff, 4,
 218						  &hdata);
 219			if (!data)
 220				goto out;
 221			sel = ht->divisor & u32_hash_fold(*data, &n->sel,
 222							  n->fshift);
 223		}
 224		if (!(n->sel.flags & (TC_U32_VAROFFSET | TC_U32_OFFSET | TC_U32_EAT)))
 225			goto next_ht;
 226
 227		if (n->sel.flags & (TC_U32_OFFSET | TC_U32_VAROFFSET)) {
 228			off2 = n->sel.off + 3;
 229			if (n->sel.flags & TC_U32_VAROFFSET) {
 230				__be16 *data, hdata;
 231
 232				data = skb_header_pointer(skb,
 233							  off + n->sel.offoff,
 234							  2, &hdata);
 235				if (!data)
 236					goto out;
 237				off2 += ntohs(n->sel.offmask & *data) >>
 238					n->sel.offshift;
 239			}
 240			off2 &= ~3;
 241		}
 242		if (n->sel.flags & TC_U32_EAT) {
 243			off += off2;
 244			off2 = 0;
 245		}
 246
 247		if (off < skb->len)
 248			goto next_ht;
 249	}
 250
 251	/* POP */
 252	if (sdepth--) {
 253		n = stack[sdepth].knode;
 254		ht = rcu_dereference_bh(n->ht_up);
 255		off = stack[sdepth].off;
 256		goto check_terminal;
 257	}
 258out:
 259	return -1;
 260
 261deadloop:
 262	net_warn_ratelimited("cls_u32: dead loop\n");
 263	return -1;
 264}
 265
 266static struct tc_u_hnode *u32_lookup_ht(struct tc_u_common *tp_c, u32 handle)
 267{
 268	struct tc_u_hnode *ht;
 269
 270	for (ht = rtnl_dereference(tp_c->hlist);
 271	     ht;
 272	     ht = rtnl_dereference(ht->next))
 273		if (ht->handle == handle)
 274			break;
 275
 276	return ht;
 277}
 278
 279static struct tc_u_knode *u32_lookup_key(struct tc_u_hnode *ht, u32 handle)
 280{
 281	unsigned int sel;
 282	struct tc_u_knode *n = NULL;
 283
 284	sel = TC_U32_HASH(handle);
 285	if (sel > ht->divisor)
 286		goto out;
 287
 288	for (n = rtnl_dereference(ht->ht[sel]);
 289	     n;
 290	     n = rtnl_dereference(n->next))
 291		if (n->handle == handle)
 292			break;
 293out:
 294	return n;
 295}
 296
 297
 298static void *u32_get(struct tcf_proto *tp, u32 handle)
 299{
 300	struct tc_u_hnode *ht;
 301	struct tc_u_common *tp_c = tp->data;
 302
 303	if (TC_U32_HTID(handle) == TC_U32_ROOT)
 304		ht = rtnl_dereference(tp->root);
 305	else
 306		ht = u32_lookup_ht(tp_c, TC_U32_HTID(handle));
 307
 308	if (!ht)
 309		return NULL;
 310
 311	if (TC_U32_KEY(handle) == 0)
 312		return ht;
 313
 314	return u32_lookup_key(ht, handle);
 315}
 316
 317/* Protected by rtnl lock */
 318static u32 gen_new_htid(struct tc_u_common *tp_c, struct tc_u_hnode *ptr)
 319{
 320	int id = idr_alloc_cyclic(&tp_c->handle_idr, ptr, 1, 0x7FF, GFP_KERNEL);
 321	if (id < 0)
 322		return 0;
 323	return id2handle(id);
 324}
 325
 326static struct hlist_head *tc_u_common_hash;
 327
 328#define U32_HASH_SHIFT 10
 329#define U32_HASH_SIZE (1 << U32_HASH_SHIFT)
 330
 331static void *tc_u_common_ptr(const struct tcf_proto *tp)
 332{
 333	struct tcf_block *block = tp->chain->block;
 334
 335	/* The block sharing is currently supported only
 336	 * for classless qdiscs. In that case we use block
 337	 * for tc_u_common identification. In case the
 338	 * block is not shared, block->q is a valid pointer
 339	 * and we can use that. That works for classful qdiscs.
 340	 */
 341	if (tcf_block_shared(block))
 342		return block;
 343	else
 344		return block->q;
 345}
 346
 347static struct hlist_head *tc_u_hash(void *key)
 348{
 349	return tc_u_common_hash + hash_ptr(key, U32_HASH_SHIFT);
 350}
 351
 352static struct tc_u_common *tc_u_common_find(void *key)
 353{
 354	struct tc_u_common *tc;
 355	hlist_for_each_entry(tc, tc_u_hash(key), hnode) {
 356		if (tc->ptr == key)
 357			return tc;
 358	}
 359	return NULL;
 360}
 361
 362static int u32_init(struct tcf_proto *tp)
 363{
 364	struct tc_u_hnode *root_ht;
 365	void *key = tc_u_common_ptr(tp);
 366	struct tc_u_common *tp_c = tc_u_common_find(key);
 367
 368	root_ht = kzalloc(struct_size(root_ht, ht, 1), GFP_KERNEL);
 369	if (root_ht == NULL)
 370		return -ENOBUFS;
 371
 372	refcount_set(&root_ht->refcnt, 1);
 373	root_ht->handle = tp_c ? gen_new_htid(tp_c, root_ht) : id2handle(0);
 374	root_ht->prio = tp->prio;
 375	root_ht->is_root = true;
 376	idr_init(&root_ht->handle_idr);
 377
 378	if (tp_c == NULL) {
 379		tp_c = kzalloc(sizeof(*tp_c), GFP_KERNEL);
 380		if (tp_c == NULL) {
 381			kfree(root_ht);
 382			return -ENOBUFS;
 383		}
 384		refcount_set(&tp_c->refcnt, 1);
 385		tp_c->ptr = key;
 386		INIT_HLIST_NODE(&tp_c->hnode);
 387		idr_init(&tp_c->handle_idr);
 388
 389		hlist_add_head(&tp_c->hnode, tc_u_hash(key));
 390	} else {
 391		refcount_inc(&tp_c->refcnt);
 392	}
 393
 
 394	RCU_INIT_POINTER(root_ht->next, tp_c->hlist);
 395	rcu_assign_pointer(tp_c->hlist, root_ht);
 396
 397	/* root_ht must be destroyed when tcf_proto is destroyed */
 398	rcu_assign_pointer(tp->root, root_ht);
 399	tp->data = tp_c;
 400	return 0;
 401}
 402
 403static void __u32_destroy_key(struct tc_u_knode *n)
 404{
 405	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
 406
 407	tcf_exts_destroy(&n->exts);
 408	if (ht && refcount_dec_and_test(&ht->refcnt))
 
 409		kfree(ht);
 410	kfree(n);
 411}
 412
 413static void u32_destroy_key(struct tc_u_knode *n, bool free_pf)
 414{
 415	tcf_exts_put_net(&n->exts);
 416#ifdef CONFIG_CLS_U32_PERF
 417	if (free_pf)
 418		free_percpu(n->pf);
 419#endif
 420#ifdef CONFIG_CLS_U32_MARK
 421	if (free_pf)
 422		free_percpu(n->pcpu_success);
 423#endif
 424	__u32_destroy_key(n);
 
 425}
 426
 427/* u32_delete_key_rcu should be called when free'ing a copied
 428 * version of a tc_u_knode obtained from u32_init_knode(). When
 429 * copies are obtained from u32_init_knode() the statistics are
 430 * shared between the old and new copies to allow readers to
 431 * continue to update the statistics during the copy. To support
 432 * this the u32_delete_key_rcu variant does not free the percpu
 433 * statistics.
 434 */
 435static void u32_delete_key_work(struct work_struct *work)
 436{
 437	struct tc_u_knode *key = container_of(to_rcu_work(work),
 438					      struct tc_u_knode,
 439					      rwork);
 440	rtnl_lock();
 441	u32_destroy_key(key, false);
 442	rtnl_unlock();
 443}
 444
 445/* u32_delete_key_freepf_rcu is the rcu callback variant
 446 * that free's the entire structure including the statistics
 447 * percpu variables. Only use this if the key is not a copy
 448 * returned by u32_init_knode(). See u32_delete_key_rcu()
 449 * for the variant that should be used with keys return from
 450 * u32_init_knode()
 451 */
 452static void u32_delete_key_freepf_work(struct work_struct *work)
 453{
 454	struct tc_u_knode *key = container_of(to_rcu_work(work),
 455					      struct tc_u_knode,
 456					      rwork);
 457	rtnl_lock();
 458	u32_destroy_key(key, true);
 459	rtnl_unlock();
 460}
 461
 462static int u32_delete_key(struct tcf_proto *tp, struct tc_u_knode *key)
 463{
 464	struct tc_u_common *tp_c = tp->data;
 465	struct tc_u_knode __rcu **kp;
 466	struct tc_u_knode *pkp;
 467	struct tc_u_hnode *ht = rtnl_dereference(key->ht_up);
 468
 469	if (ht) {
 470		kp = &ht->ht[TC_U32_HASH(key->handle)];
 471		for (pkp = rtnl_dereference(*kp); pkp;
 472		     kp = &pkp->next, pkp = rtnl_dereference(*kp)) {
 473			if (pkp == key) {
 474				RCU_INIT_POINTER(*kp, key->next);
 475				tp_c->knodes--;
 476
 477				tcf_unbind_filter(tp, &key->res);
 478				idr_remove(&ht->handle_idr, key->handle);
 479				tcf_exts_get_net(&key->exts);
 480				tcf_queue_work(&key->rwork, u32_delete_key_freepf_work);
 481				return 0;
 482			}
 483		}
 484	}
 485	WARN_ON(1);
 486	return 0;
 487}
 488
 489static void u32_clear_hw_hnode(struct tcf_proto *tp, struct tc_u_hnode *h,
 490			       struct netlink_ext_ack *extack)
 491{
 492	struct tcf_block *block = tp->chain->block;
 493	struct tc_cls_u32_offload cls_u32 = {};
 494
 495	tc_cls_common_offload_init(&cls_u32.common, tp, h->flags, extack);
 496	cls_u32.command = TC_CLSU32_DELETE_HNODE;
 497	cls_u32.hnode.divisor = h->divisor;
 498	cls_u32.hnode.handle = h->handle;
 499	cls_u32.hnode.prio = h->prio;
 500
 501	tc_setup_cb_call(block, TC_SETUP_CLSU32, &cls_u32, false, true);
 502}
 503
 504static int u32_replace_hw_hnode(struct tcf_proto *tp, struct tc_u_hnode *h,
 505				u32 flags, struct netlink_ext_ack *extack)
 506{
 507	struct tcf_block *block = tp->chain->block;
 508	struct tc_cls_u32_offload cls_u32 = {};
 509	bool skip_sw = tc_skip_sw(flags);
 510	bool offloaded = false;
 511	int err;
 512
 513	tc_cls_common_offload_init(&cls_u32.common, tp, flags, extack);
 514	cls_u32.command = TC_CLSU32_NEW_HNODE;
 515	cls_u32.hnode.divisor = h->divisor;
 516	cls_u32.hnode.handle = h->handle;
 517	cls_u32.hnode.prio = h->prio;
 518
 519	err = tc_setup_cb_call(block, TC_SETUP_CLSU32, &cls_u32, skip_sw, true);
 520	if (err < 0) {
 521		u32_clear_hw_hnode(tp, h, NULL);
 522		return err;
 523	} else if (err > 0) {
 524		offloaded = true;
 525	}
 526
 527	if (skip_sw && !offloaded)
 528		return -EINVAL;
 529
 530	return 0;
 531}
 532
 533static void u32_remove_hw_knode(struct tcf_proto *tp, struct tc_u_knode *n,
 534				struct netlink_ext_ack *extack)
 535{
 536	struct tcf_block *block = tp->chain->block;
 537	struct tc_cls_u32_offload cls_u32 = {};
 538
 539	tc_cls_common_offload_init(&cls_u32.common, tp, n->flags, extack);
 540	cls_u32.command = TC_CLSU32_DELETE_KNODE;
 541	cls_u32.knode.handle = n->handle;
 542
 543	tc_setup_cb_destroy(block, tp, TC_SETUP_CLSU32, &cls_u32, false,
 544			    &n->flags, &n->in_hw_count, true);
 545}
 546
 547static int u32_replace_hw_knode(struct tcf_proto *tp, struct tc_u_knode *n,
 548				u32 flags, struct netlink_ext_ack *extack)
 549{
 550	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
 551	struct tcf_block *block = tp->chain->block;
 552	struct tc_cls_u32_offload cls_u32 = {};
 553	bool skip_sw = tc_skip_sw(flags);
 554	int err;
 555
 556	tc_cls_common_offload_init(&cls_u32.common, tp, flags, extack);
 557	cls_u32.command = TC_CLSU32_REPLACE_KNODE;
 558	cls_u32.knode.handle = n->handle;
 559	cls_u32.knode.fshift = n->fshift;
 560#ifdef CONFIG_CLS_U32_MARK
 561	cls_u32.knode.val = n->val;
 562	cls_u32.knode.mask = n->mask;
 563#else
 564	cls_u32.knode.val = 0;
 565	cls_u32.knode.mask = 0;
 566#endif
 567	cls_u32.knode.sel = &n->sel;
 568	cls_u32.knode.res = &n->res;
 569	cls_u32.knode.exts = &n->exts;
 570	if (n->ht_down)
 571		cls_u32.knode.link_handle = ht->handle;
 572
 573	err = tc_setup_cb_add(block, tp, TC_SETUP_CLSU32, &cls_u32, skip_sw,
 574			      &n->flags, &n->in_hw_count, true);
 575	if (err) {
 576		u32_remove_hw_knode(tp, n, NULL);
 577		return err;
 578	}
 579
 580	if (skip_sw && !(n->flags & TCA_CLS_FLAGS_IN_HW))
 581		return -EINVAL;
 582
 583	return 0;
 584}
 585
 586static void u32_clear_hnode(struct tcf_proto *tp, struct tc_u_hnode *ht,
 587			    struct netlink_ext_ack *extack)
 588{
 589	struct tc_u_common *tp_c = tp->data;
 590	struct tc_u_knode *n;
 591	unsigned int h;
 592
 593	for (h = 0; h <= ht->divisor; h++) {
 594		while ((n = rtnl_dereference(ht->ht[h])) != NULL) {
 595			RCU_INIT_POINTER(ht->ht[h],
 596					 rtnl_dereference(n->next));
 597			tp_c->knodes--;
 598			tcf_unbind_filter(tp, &n->res);
 599			u32_remove_hw_knode(tp, n, extack);
 600			idr_remove(&ht->handle_idr, n->handle);
 601			if (tcf_exts_get_net(&n->exts))
 602				tcf_queue_work(&n->rwork, u32_delete_key_freepf_work);
 603			else
 604				u32_destroy_key(n, true);
 605		}
 606	}
 607}
 608
 609static int u32_destroy_hnode(struct tcf_proto *tp, struct tc_u_hnode *ht,
 610			     struct netlink_ext_ack *extack)
 611{
 612	struct tc_u_common *tp_c = tp->data;
 613	struct tc_u_hnode __rcu **hn;
 614	struct tc_u_hnode *phn;
 615
 
 
 616	u32_clear_hnode(tp, ht, extack);
 617
 618	hn = &tp_c->hlist;
 619	for (phn = rtnl_dereference(*hn);
 620	     phn;
 621	     hn = &phn->next, phn = rtnl_dereference(*hn)) {
 622		if (phn == ht) {
 623			u32_clear_hw_hnode(tp, ht, extack);
 624			idr_destroy(&ht->handle_idr);
 625			idr_remove(&tp_c->handle_idr, handle2id(ht->handle));
 626			RCU_INIT_POINTER(*hn, ht->next);
 627			kfree_rcu(ht, rcu);
 628			return 0;
 629		}
 630	}
 631
 632	return -ENOENT;
 633}
 634
 635static void u32_destroy(struct tcf_proto *tp, bool rtnl_held,
 636			struct netlink_ext_ack *extack)
 637{
 638	struct tc_u_common *tp_c = tp->data;
 639	struct tc_u_hnode *root_ht = rtnl_dereference(tp->root);
 640
 641	WARN_ON(root_ht == NULL);
 642
 643	if (root_ht && refcount_dec_and_test(&root_ht->refcnt))
 644		u32_destroy_hnode(tp, root_ht, extack);
 645
 646	if (refcount_dec_and_test(&tp_c->refcnt)) {
 647		struct tc_u_hnode *ht;
 648
 649		hlist_del(&tp_c->hnode);
 650
 651		while ((ht = rtnl_dereference(tp_c->hlist)) != NULL) {
 652			u32_clear_hnode(tp, ht, extack);
 653			RCU_INIT_POINTER(tp_c->hlist, ht->next);
 654
 655			/* u32_destroy_key() will later free ht for us, if it's
 656			 * still referenced by some knode
 657			 */
 658			if (refcount_dec_and_test(&ht->refcnt))
 659				kfree_rcu(ht, rcu);
 660		}
 661
 662		idr_destroy(&tp_c->handle_idr);
 663		kfree(tp_c);
 664	}
 665
 666	tp->data = NULL;
 667}
 668
 669static int u32_delete(struct tcf_proto *tp, void *arg, bool *last,
 670		      bool rtnl_held, struct netlink_ext_ack *extack)
 671{
 672	struct tc_u_hnode *ht = arg;
 673	struct tc_u_common *tp_c = tp->data;
 674	int ret = 0;
 675
 676	if (TC_U32_KEY(ht->handle)) {
 677		u32_remove_hw_knode(tp, (struct tc_u_knode *)ht, extack);
 678		ret = u32_delete_key(tp, (struct tc_u_knode *)ht);
 679		goto out;
 680	}
 681
 682	if (ht->is_root) {
 683		NL_SET_ERR_MSG_MOD(extack, "Not allowed to delete root node");
 684		return -EINVAL;
 685	}
 686
 687	if (refcount_dec_if_one(&ht->refcnt)) {
 688		u32_destroy_hnode(tp, ht, extack);
 689	} else {
 690		NL_SET_ERR_MSG_MOD(extack, "Can not delete in-use filter");
 691		return -EBUSY;
 692	}
 693
 694out:
 695	*last = refcount_read(&tp_c->refcnt) == 1 && tp_c->knodes == 0;
 696	return ret;
 697}
 698
 699static u32 gen_new_kid(struct tc_u_hnode *ht, u32 htid)
 700{
 701	u32 index = htid | 0x800;
 702	u32 max = htid | 0xFFF;
 703
 704	if (idr_alloc_u32(&ht->handle_idr, NULL, &index, max, GFP_KERNEL)) {
 705		index = htid + 1;
 706		if (idr_alloc_u32(&ht->handle_idr, NULL, &index, max,
 707				 GFP_KERNEL))
 708			index = max;
 709	}
 710
 711	return index;
 712}
 713
 714static const struct nla_policy u32_policy[TCA_U32_MAX + 1] = {
 715	[TCA_U32_CLASSID]	= { .type = NLA_U32 },
 716	[TCA_U32_HASH]		= { .type = NLA_U32 },
 717	[TCA_U32_LINK]		= { .type = NLA_U32 },
 718	[TCA_U32_DIVISOR]	= { .type = NLA_U32 },
 719	[TCA_U32_SEL]		= { .len = sizeof(struct tc_u32_sel) },
 720	[TCA_U32_INDEV]		= { .type = NLA_STRING, .len = IFNAMSIZ },
 721	[TCA_U32_MARK]		= { .len = sizeof(struct tc_u32_mark) },
 722	[TCA_U32_FLAGS]		= { .type = NLA_U32 },
 723};
 724
 725static void u32_unbind_filter(struct tcf_proto *tp, struct tc_u_knode *n,
 726			      struct nlattr **tb)
 727{
 728	if (tb[TCA_U32_CLASSID])
 729		tcf_unbind_filter(tp, &n->res);
 730}
 731
 732static void u32_bind_filter(struct tcf_proto *tp, struct tc_u_knode *n,
 733			    unsigned long base, struct nlattr **tb)
 734{
 735	if (tb[TCA_U32_CLASSID]) {
 736		n->res.classid = nla_get_u32(tb[TCA_U32_CLASSID]);
 737		tcf_bind_filter(tp, &n->res, base);
 738	}
 739}
 740
 741static int u32_set_parms(struct net *net, struct tcf_proto *tp,
 
 742			 struct tc_u_knode *n, struct nlattr **tb,
 743			 struct nlattr *est, u32 flags, u32 fl_flags,
 744			 struct netlink_ext_ack *extack)
 745{
 746	int err, ifindex = -1;
 747
 748	err = tcf_exts_validate_ex(net, tp, tb, est, &n->exts, flags,
 749				   fl_flags, extack);
 750	if (err < 0)
 751		return err;
 752
 753	if (tb[TCA_U32_INDEV]) {
 754		ifindex = tcf_change_indev(net, tb[TCA_U32_INDEV], extack);
 755		if (ifindex < 0)
 756			return -EINVAL;
 757	}
 758
 759	if (tb[TCA_U32_LINK]) {
 760		u32 handle = nla_get_u32(tb[TCA_U32_LINK]);
 761		struct tc_u_hnode *ht_down = NULL, *ht_old;
 762
 763		if (TC_U32_KEY(handle)) {
 764			NL_SET_ERR_MSG_MOD(extack, "u32 Link handle must be a hash table");
 765			return -EINVAL;
 766		}
 767
 768		if (handle) {
 769			ht_down = u32_lookup_ht(tp->data, handle);
 770
 771			if (!ht_down) {
 772				NL_SET_ERR_MSG_MOD(extack, "Link hash table not found");
 773				return -EINVAL;
 774			}
 775			if (ht_down->is_root) {
 776				NL_SET_ERR_MSG_MOD(extack, "Not linking to root node");
 777				return -EINVAL;
 778			}
 779			refcount_inc(&ht_down->refcnt);
 780		}
 781
 782		ht_old = rtnl_dereference(n->ht_down);
 783		rcu_assign_pointer(n->ht_down, ht_down);
 784
 785		if (ht_old)
 786			refcount_dec(&ht_old->refcnt);
 
 
 
 
 787	}
 788
 789	if (ifindex >= 0)
 790		n->ifindex = ifindex;
 791
 
 
 
 
 792	return 0;
 793}
 794
 795static void u32_replace_knode(struct tcf_proto *tp, struct tc_u_common *tp_c,
 796			      struct tc_u_knode *n)
 797{
 798	struct tc_u_knode __rcu **ins;
 799	struct tc_u_knode *pins;
 800	struct tc_u_hnode *ht;
 801
 802	if (TC_U32_HTID(n->handle) == TC_U32_ROOT)
 803		ht = rtnl_dereference(tp->root);
 804	else
 805		ht = u32_lookup_ht(tp_c, TC_U32_HTID(n->handle));
 806
 807	ins = &ht->ht[TC_U32_HASH(n->handle)];
 808
 809	/* The node must always exist for it to be replaced if this is not the
 810	 * case then something went very wrong elsewhere.
 811	 */
 812	for (pins = rtnl_dereference(*ins); ;
 813	     ins = &pins->next, pins = rtnl_dereference(*ins))
 814		if (pins->handle == n->handle)
 815			break;
 816
 817	idr_replace(&ht->handle_idr, n, n->handle);
 818	RCU_INIT_POINTER(n->next, pins->next);
 819	rcu_assign_pointer(*ins, n);
 820}
 821
 822static struct tc_u_knode *u32_init_knode(struct net *net, struct tcf_proto *tp,
 823					 struct tc_u_knode *n)
 824{
 825	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
 826	struct tc_u32_sel *s = &n->sel;
 827	struct tc_u_knode *new;
 828
 829	new = kzalloc(struct_size(new, sel.keys, s->nkeys), GFP_KERNEL);
 830	if (!new)
 831		return NULL;
 832
 833	RCU_INIT_POINTER(new->next, n->next);
 834	new->handle = n->handle;
 835	RCU_INIT_POINTER(new->ht_up, n->ht_up);
 836
 837	new->ifindex = n->ifindex;
 838	new->fshift = n->fshift;
 
 839	new->flags = n->flags;
 840	RCU_INIT_POINTER(new->ht_down, ht);
 841
 
 
 
 
 842#ifdef CONFIG_CLS_U32_PERF
 843	/* Statistics may be incremented by readers during update
 844	 * so we must keep them in tact. When the node is later destroyed
 845	 * a special destroy call must be made to not free the pf memory.
 846	 */
 847	new->pf = n->pf;
 848#endif
 849
 850#ifdef CONFIG_CLS_U32_MARK
 851	new->val = n->val;
 852	new->mask = n->mask;
 853	/* Similarly success statistics must be moved as pointers */
 854	new->pcpu_success = n->pcpu_success;
 855#endif
 856	memcpy(&new->sel, s, struct_size(s, keys, s->nkeys));
 857
 858	if (tcf_exts_init(&new->exts, net, TCA_U32_ACT, TCA_U32_POLICE)) {
 859		kfree(new);
 860		return NULL;
 861	}
 862
 863	/* bump reference count as long as we hold pointer to structure */
 864	if (ht)
 865		refcount_inc(&ht->refcnt);
 866
 867	return new;
 868}
 869
 870static int u32_change(struct net *net, struct sk_buff *in_skb,
 871		      struct tcf_proto *tp, unsigned long base, u32 handle,
 872		      struct nlattr **tca, void **arg, u32 flags,
 873		      struct netlink_ext_ack *extack)
 874{
 875	struct tc_u_common *tp_c = tp->data;
 876	struct tc_u_hnode *ht;
 877	struct tc_u_knode *n;
 878	struct tc_u32_sel *s;
 879	struct nlattr *opt = tca[TCA_OPTIONS];
 880	struct nlattr *tb[TCA_U32_MAX + 1];
 881	u32 htid, userflags = 0;
 882	size_t sel_size;
 883	int err;
 884
 885	if (!opt) {
 886		if (handle) {
 887			NL_SET_ERR_MSG_MOD(extack, "Filter handle requires options");
 888			return -EINVAL;
 889		} else {
 890			return 0;
 891		}
 892	}
 893
 894	err = nla_parse_nested_deprecated(tb, TCA_U32_MAX, opt, u32_policy,
 895					  extack);
 896	if (err < 0)
 897		return err;
 898
 899	if (tb[TCA_U32_FLAGS]) {
 900		userflags = nla_get_u32(tb[TCA_U32_FLAGS]);
 901		if (!tc_flags_valid(userflags)) {
 902			NL_SET_ERR_MSG_MOD(extack, "Invalid filter flags");
 903			return -EINVAL;
 904		}
 905	}
 906
 907	n = *arg;
 908	if (n) {
 909		struct tc_u_knode *new;
 910
 911		if (TC_U32_KEY(n->handle) == 0) {
 912			NL_SET_ERR_MSG_MOD(extack, "Key node id cannot be zero");
 913			return -EINVAL;
 914		}
 915
 916		if ((n->flags ^ userflags) &
 917		    ~(TCA_CLS_FLAGS_IN_HW | TCA_CLS_FLAGS_NOT_IN_HW)) {
 918			NL_SET_ERR_MSG_MOD(extack, "Key node flags do not match passed flags");
 919			return -EINVAL;
 920		}
 921
 922		new = u32_init_knode(net, tp, n);
 923		if (!new)
 924			return -ENOMEM;
 925
 926		err = u32_set_parms(net, tp, new, tb, tca[TCA_RATE],
 927				    flags, new->flags, extack);
 928
 929		if (err) {
 930			__u32_destroy_key(new);
 931			return err;
 932		}
 933
 934		u32_bind_filter(tp, new, base, tb);
 935
 936		err = u32_replace_hw_knode(tp, new, flags, extack);
 937		if (err) {
 938			u32_unbind_filter(tp, new, tb);
 939
 940			if (tb[TCA_U32_LINK]) {
 941				struct tc_u_hnode *ht_old;
 942
 943				ht_old = rtnl_dereference(n->ht_down);
 944				if (ht_old)
 945					refcount_inc(&ht_old->refcnt);
 946			}
 947			__u32_destroy_key(new);
 948			return err;
 949		}
 950
 951		if (!tc_in_hw(new->flags))
 952			new->flags |= TCA_CLS_FLAGS_NOT_IN_HW;
 953
 954		tcf_proto_update_usesw(tp, new->flags);
 955
 956		u32_replace_knode(tp, tp_c, new);
 957		tcf_unbind_filter(tp, &n->res);
 958		tcf_exts_get_net(&n->exts);
 959		tcf_queue_work(&n->rwork, u32_delete_key_work);
 960		return 0;
 961	}
 962
 963	if (tb[TCA_U32_DIVISOR]) {
 964		unsigned int divisor = nla_get_u32(tb[TCA_U32_DIVISOR]);
 965
 966		if (!is_power_of_2(divisor)) {
 967			NL_SET_ERR_MSG_MOD(extack, "Divisor is not a power of 2");
 968			return -EINVAL;
 969		}
 970		if (divisor-- > 0x100) {
 971			NL_SET_ERR_MSG_MOD(extack, "Exceeded maximum 256 hash buckets");
 972			return -EINVAL;
 973		}
 974		if (TC_U32_KEY(handle)) {
 975			NL_SET_ERR_MSG_MOD(extack, "Divisor can only be used on a hash table");
 976			return -EINVAL;
 977		}
 978		ht = kzalloc(struct_size(ht, ht, divisor + 1), GFP_KERNEL);
 979		if (ht == NULL)
 980			return -ENOBUFS;
 981		if (handle == 0) {
 982			handle = gen_new_htid(tp->data, ht);
 983			if (handle == 0) {
 984				kfree(ht);
 985				return -ENOMEM;
 986			}
 987		} else {
 988			err = idr_alloc_u32(&tp_c->handle_idr, ht, &handle,
 989					    handle, GFP_KERNEL);
 990			if (err) {
 991				kfree(ht);
 992				return err;
 993			}
 994		}
 995		refcount_set(&ht->refcnt, 1);
 996		ht->divisor = divisor;
 997		ht->handle = handle;
 998		ht->prio = tp->prio;
 999		idr_init(&ht->handle_idr);
1000		ht->flags = userflags;
1001
1002		err = u32_replace_hw_hnode(tp, ht, userflags, extack);
1003		if (err) {
1004			idr_remove(&tp_c->handle_idr, handle2id(handle));
1005			kfree(ht);
1006			return err;
1007		}
1008
1009		RCU_INIT_POINTER(ht->next, tp_c->hlist);
1010		rcu_assign_pointer(tp_c->hlist, ht);
1011		*arg = ht;
1012
1013		return 0;
1014	}
1015
1016	if (tb[TCA_U32_HASH]) {
1017		htid = nla_get_u32(tb[TCA_U32_HASH]);
1018		if (TC_U32_HTID(htid) == TC_U32_ROOT) {
1019			ht = rtnl_dereference(tp->root);
1020			htid = ht->handle;
1021		} else {
1022			ht = u32_lookup_ht(tp->data, TC_U32_HTID(htid));
1023			if (!ht) {
1024				NL_SET_ERR_MSG_MOD(extack, "Specified hash table not found");
1025				return -EINVAL;
1026			}
1027		}
1028	} else {
1029		ht = rtnl_dereference(tp->root);
1030		htid = ht->handle;
1031	}
1032
1033	if (ht->divisor < TC_U32_HASH(htid)) {
1034		NL_SET_ERR_MSG_MOD(extack, "Specified hash table buckets exceed configured value");
1035		return -EINVAL;
1036	}
1037
1038	/* At this point, we need to derive the new handle that will be used to
1039	 * uniquely map the identity of this table match entry. The
1040	 * identity of the entry that we need to construct is 32 bits made of:
1041	 *     htid(12b):bucketid(8b):node/entryid(12b)
1042	 *
1043	 * At this point _we have the table(ht)_ in which we will insert this
1044	 * entry. We carry the table's id in variable "htid".
1045	 * Note that earlier code picked the ht selection either by a) the user
1046	 * providing the htid specified via TCA_U32_HASH attribute or b) when
1047	 * no such attribute is passed then the root ht, is default to at ID
1048	 * 0x[800][00][000]. Rule: the root table has a single bucket with ID 0.
1049	 * If OTOH the user passed us the htid, they may also pass a bucketid of
1050	 * choice. 0 is fine. For example a user htid is 0x[600][01][000] it is
1051	 * indicating hash bucketid of 1. Rule: the entry/node ID _cannot_ be
1052	 * passed via the htid, so even if it was non-zero it will be ignored.
1053	 *
1054	 * We may also have a handle, if the user passed one. The handle also
1055	 * carries the same addressing of htid(12b):bucketid(8b):node/entryid(12b).
1056	 * Rule: the bucketid on the handle is ignored even if one was passed;
1057	 * rather the value on "htid" is always assumed to be the bucketid.
1058	 */
1059	if (handle) {
1060		/* Rule: The htid from handle and tableid from htid must match */
1061		if (TC_U32_HTID(handle) && TC_U32_HTID(handle ^ htid)) {
1062			NL_SET_ERR_MSG_MOD(extack, "Handle specified hash table address mismatch");
1063			return -EINVAL;
1064		}
1065		/* Ok, so far we have a valid htid(12b):bucketid(8b) but we
1066		 * need to finalize the table entry identification with the last
1067		 * part - the node/entryid(12b)). Rule: Nodeid _cannot be 0_ for
1068		 * entries. Rule: nodeid of 0 is reserved only for tables(see
1069		 * earlier code which processes TC_U32_DIVISOR attribute).
1070		 * Rule: The nodeid can only be derived from the handle (and not
1071		 * htid).
1072		 * Rule: if the handle specified zero for the node id example
1073		 * 0x60000000, then pick a new nodeid from the pool of IDs
1074		 * this hash table has been allocating from.
1075		 * If OTOH it is specified (i.e for example the user passed a
1076		 * handle such as 0x60000123), then we use it generate our final
1077		 * handle which is used to uniquely identify the match entry.
1078		 */
1079		if (!TC_U32_NODE(handle)) {
1080			handle = gen_new_kid(ht, htid);
1081		} else {
1082			handle = htid | TC_U32_NODE(handle);
1083			err = idr_alloc_u32(&ht->handle_idr, NULL, &handle,
1084					    handle, GFP_KERNEL);
1085			if (err)
1086				return err;
1087		}
1088	} else {
1089		/* The user did not give us a handle; lets just generate one
1090		 * from the table's pool of nodeids.
1091		 */
1092		handle = gen_new_kid(ht, htid);
1093	}
1094
1095	if (tb[TCA_U32_SEL] == NULL) {
1096		NL_SET_ERR_MSG_MOD(extack, "Selector not specified");
1097		err = -EINVAL;
1098		goto erridr;
1099	}
1100
1101	s = nla_data(tb[TCA_U32_SEL]);
1102	sel_size = struct_size(s, keys, s->nkeys);
1103	if (nla_len(tb[TCA_U32_SEL]) < sel_size) {
1104		err = -EINVAL;
1105		goto erridr;
1106	}
1107
1108	n = kzalloc(struct_size(n, sel.keys, s->nkeys), GFP_KERNEL);
1109	if (n == NULL) {
1110		err = -ENOBUFS;
1111		goto erridr;
1112	}
1113
1114#ifdef CONFIG_CLS_U32_PERF
1115	n->pf = __alloc_percpu(struct_size(n->pf, kcnts, s->nkeys),
1116			       __alignof__(struct tc_u32_pcnt));
1117	if (!n->pf) {
1118		err = -ENOBUFS;
1119		goto errfree;
1120	}
1121#endif
1122
1123	unsafe_memcpy(&n->sel, s, sel_size,
1124		      /* A composite flex-array structure destination,
1125		       * which was correctly sized with struct_size(),
1126		       * bounds-checked against nla_len(), and allocated
1127		       * above. */);
1128	RCU_INIT_POINTER(n->ht_up, ht);
1129	n->handle = handle;
1130	n->fshift = s->hmask ? ffs(ntohl(s->hmask)) - 1 : 0;
1131	n->flags = userflags;
1132
1133	err = tcf_exts_init(&n->exts, net, TCA_U32_ACT, TCA_U32_POLICE);
1134	if (err < 0)
1135		goto errout;
1136
1137#ifdef CONFIG_CLS_U32_MARK
1138	n->pcpu_success = alloc_percpu(u32);
1139	if (!n->pcpu_success) {
1140		err = -ENOMEM;
1141		goto errout;
1142	}
1143
1144	if (tb[TCA_U32_MARK]) {
1145		struct tc_u32_mark *mark;
1146
1147		mark = nla_data(tb[TCA_U32_MARK]);
1148		n->val = mark->val;
1149		n->mask = mark->mask;
1150	}
1151#endif
1152
1153	err = u32_set_parms(net, tp, n, tb, tca[TCA_RATE],
1154			    flags, n->flags, extack);
1155
1156	u32_bind_filter(tp, n, base, tb);
1157
1158	if (err == 0) {
1159		struct tc_u_knode __rcu **ins;
1160		struct tc_u_knode *pins;
1161
1162		err = u32_replace_hw_knode(tp, n, flags, extack);
1163		if (err)
1164			goto errunbind;
1165
1166		if (!tc_in_hw(n->flags))
1167			n->flags |= TCA_CLS_FLAGS_NOT_IN_HW;
1168
1169		tcf_proto_update_usesw(tp, n->flags);
1170
1171		ins = &ht->ht[TC_U32_HASH(handle)];
1172		for (pins = rtnl_dereference(*ins); pins;
1173		     ins = &pins->next, pins = rtnl_dereference(*ins))
1174			if (TC_U32_NODE(handle) < TC_U32_NODE(pins->handle))
1175				break;
1176
1177		RCU_INIT_POINTER(n->next, pins);
1178		rcu_assign_pointer(*ins, n);
1179		tp_c->knodes++;
1180		*arg = n;
1181		return 0;
1182	}
1183
1184errunbind:
1185	u32_unbind_filter(tp, n, tb);
1186
1187#ifdef CONFIG_CLS_U32_MARK
1188	free_percpu(n->pcpu_success);
1189#endif
1190
1191errout:
1192	tcf_exts_destroy(&n->exts);
1193#ifdef CONFIG_CLS_U32_PERF
1194errfree:
1195	free_percpu(n->pf);
1196#endif
1197	kfree(n);
1198erridr:
1199	idr_remove(&ht->handle_idr, handle);
1200	return err;
1201}
1202
1203static void u32_walk(struct tcf_proto *tp, struct tcf_walker *arg,
1204		     bool rtnl_held)
1205{
1206	struct tc_u_common *tp_c = tp->data;
1207	struct tc_u_hnode *ht;
1208	struct tc_u_knode *n;
1209	unsigned int h;
1210
1211	if (arg->stop)
1212		return;
1213
1214	for (ht = rtnl_dereference(tp_c->hlist);
1215	     ht;
1216	     ht = rtnl_dereference(ht->next)) {
1217		if (ht->prio != tp->prio)
1218			continue;
1219
1220		if (!tc_cls_stats_dump(tp, arg, ht))
1221			return;
1222
 
 
 
1223		for (h = 0; h <= ht->divisor; h++) {
1224			for (n = rtnl_dereference(ht->ht[h]);
1225			     n;
1226			     n = rtnl_dereference(n->next)) {
1227				if (!tc_cls_stats_dump(tp, arg, n))
 
 
 
 
 
1228					return;
 
 
1229			}
1230		}
1231	}
1232}
1233
1234static int u32_reoffload_hnode(struct tcf_proto *tp, struct tc_u_hnode *ht,
1235			       bool add, flow_setup_cb_t *cb, void *cb_priv,
1236			       struct netlink_ext_ack *extack)
1237{
1238	struct tc_cls_u32_offload cls_u32 = {};
1239	int err;
1240
1241	tc_cls_common_offload_init(&cls_u32.common, tp, ht->flags, extack);
1242	cls_u32.command = add ? TC_CLSU32_NEW_HNODE : TC_CLSU32_DELETE_HNODE;
1243	cls_u32.hnode.divisor = ht->divisor;
1244	cls_u32.hnode.handle = ht->handle;
1245	cls_u32.hnode.prio = ht->prio;
1246
1247	err = cb(TC_SETUP_CLSU32, &cls_u32, cb_priv);
1248	if (err && add && tc_skip_sw(ht->flags))
1249		return err;
1250
1251	return 0;
1252}
1253
1254static int u32_reoffload_knode(struct tcf_proto *tp, struct tc_u_knode *n,
1255			       bool add, flow_setup_cb_t *cb, void *cb_priv,
1256			       struct netlink_ext_ack *extack)
1257{
1258	struct tc_u_hnode *ht = rtnl_dereference(n->ht_down);
1259	struct tcf_block *block = tp->chain->block;
1260	struct tc_cls_u32_offload cls_u32 = {};
1261
1262	tc_cls_common_offload_init(&cls_u32.common, tp, n->flags, extack);
1263	cls_u32.command = add ?
1264		TC_CLSU32_REPLACE_KNODE : TC_CLSU32_DELETE_KNODE;
1265	cls_u32.knode.handle = n->handle;
1266
1267	if (add) {
1268		cls_u32.knode.fshift = n->fshift;
1269#ifdef CONFIG_CLS_U32_MARK
1270		cls_u32.knode.val = n->val;
1271		cls_u32.knode.mask = n->mask;
1272#else
1273		cls_u32.knode.val = 0;
1274		cls_u32.knode.mask = 0;
1275#endif
1276		cls_u32.knode.sel = &n->sel;
1277		cls_u32.knode.res = &n->res;
1278		cls_u32.knode.exts = &n->exts;
1279		if (n->ht_down)
1280			cls_u32.knode.link_handle = ht->handle;
1281	}
1282
1283	return tc_setup_cb_reoffload(block, tp, add, cb, TC_SETUP_CLSU32,
1284				     &cls_u32, cb_priv, &n->flags,
1285				     &n->in_hw_count);
1286}
1287
1288static int u32_reoffload(struct tcf_proto *tp, bool add, flow_setup_cb_t *cb,
1289			 void *cb_priv, struct netlink_ext_ack *extack)
1290{
1291	struct tc_u_common *tp_c = tp->data;
1292	struct tc_u_hnode *ht;
1293	struct tc_u_knode *n;
1294	unsigned int h;
1295	int err;
1296
1297	for (ht = rtnl_dereference(tp_c->hlist);
1298	     ht;
1299	     ht = rtnl_dereference(ht->next)) {
1300		if (ht->prio != tp->prio)
1301			continue;
1302
1303		/* When adding filters to a new dev, try to offload the
1304		 * hashtable first. When removing, do the filters before the
1305		 * hashtable.
1306		 */
1307		if (add && !tc_skip_hw(ht->flags)) {
1308			err = u32_reoffload_hnode(tp, ht, add, cb, cb_priv,
1309						  extack);
1310			if (err)
1311				return err;
1312		}
1313
1314		for (h = 0; h <= ht->divisor; h++) {
1315			for (n = rtnl_dereference(ht->ht[h]);
1316			     n;
1317			     n = rtnl_dereference(n->next)) {
1318				if (tc_skip_hw(n->flags))
1319					continue;
1320
1321				err = u32_reoffload_knode(tp, n, add, cb,
1322							  cb_priv, extack);
1323				if (err)
1324					return err;
1325			}
1326		}
1327
1328		if (!add && !tc_skip_hw(ht->flags))
1329			u32_reoffload_hnode(tp, ht, add, cb, cb_priv, extack);
1330	}
1331
1332	return 0;
1333}
1334
1335static void u32_bind_class(void *fh, u32 classid, unsigned long cl, void *q,
1336			   unsigned long base)
1337{
1338	struct tc_u_knode *n = fh;
1339
1340	tc_cls_bind_class(classid, cl, q, &n->res, base);
 
 
 
 
 
1341}
1342
1343static int u32_dump(struct net *net, struct tcf_proto *tp, void *fh,
1344		    struct sk_buff *skb, struct tcmsg *t, bool rtnl_held)
1345{
1346	struct tc_u_knode *n = fh;
1347	struct tc_u_hnode *ht_up, *ht_down;
1348	struct nlattr *nest;
1349
1350	if (n == NULL)
1351		return skb->len;
1352
1353	t->tcm_handle = n->handle;
1354
1355	nest = nla_nest_start_noflag(skb, TCA_OPTIONS);
1356	if (nest == NULL)
1357		goto nla_put_failure;
1358
1359	if (TC_U32_KEY(n->handle) == 0) {
1360		struct tc_u_hnode *ht = fh;
1361		u32 divisor = ht->divisor + 1;
1362
1363		if (nla_put_u32(skb, TCA_U32_DIVISOR, divisor))
1364			goto nla_put_failure;
1365	} else {
1366#ifdef CONFIG_CLS_U32_PERF
1367		struct tc_u32_pcnt *gpf;
1368		int cpu;
1369#endif
1370
1371		if (nla_put(skb, TCA_U32_SEL, struct_size(&n->sel, keys, n->sel.nkeys),
1372			    &n->sel))
1373			goto nla_put_failure;
1374
1375		ht_up = rtnl_dereference(n->ht_up);
1376		if (ht_up) {
1377			u32 htid = n->handle & 0xFFFFF000;
1378			if (nla_put_u32(skb, TCA_U32_HASH, htid))
1379				goto nla_put_failure;
1380		}
1381		if (n->res.classid &&
1382		    nla_put_u32(skb, TCA_U32_CLASSID, n->res.classid))
1383			goto nla_put_failure;
1384
1385		ht_down = rtnl_dereference(n->ht_down);
1386		if (ht_down &&
1387		    nla_put_u32(skb, TCA_U32_LINK, ht_down->handle))
1388			goto nla_put_failure;
1389
1390		if (n->flags && nla_put_u32(skb, TCA_U32_FLAGS, n->flags))
1391			goto nla_put_failure;
1392
1393#ifdef CONFIG_CLS_U32_MARK
1394		if ((n->val || n->mask)) {
1395			struct tc_u32_mark mark = {.val = n->val,
1396						   .mask = n->mask,
1397						   .success = 0};
1398			int cpum;
1399
1400			for_each_possible_cpu(cpum) {
1401				__u32 cnt = *per_cpu_ptr(n->pcpu_success, cpum);
1402
1403				mark.success += cnt;
1404			}
1405
1406			if (nla_put(skb, TCA_U32_MARK, sizeof(mark), &mark))
1407				goto nla_put_failure;
1408		}
1409#endif
1410
1411		if (tcf_exts_dump(skb, &n->exts) < 0)
1412			goto nla_put_failure;
1413
1414		if (n->ifindex) {
1415			struct net_device *dev;
1416			dev = __dev_get_by_index(net, n->ifindex);
1417			if (dev && nla_put_string(skb, TCA_U32_INDEV, dev->name))
1418				goto nla_put_failure;
1419		}
1420#ifdef CONFIG_CLS_U32_PERF
1421		gpf = kzalloc(struct_size(gpf, kcnts, n->sel.nkeys), GFP_KERNEL);
1422		if (!gpf)
1423			goto nla_put_failure;
1424
1425		for_each_possible_cpu(cpu) {
1426			int i;
1427			struct tc_u32_pcnt *pf = per_cpu_ptr(n->pf, cpu);
1428
1429			gpf->rcnt += pf->rcnt;
1430			gpf->rhit += pf->rhit;
1431			for (i = 0; i < n->sel.nkeys; i++)
1432				gpf->kcnts[i] += pf->kcnts[i];
1433		}
1434
1435		if (nla_put_64bit(skb, TCA_U32_PCNT, struct_size(gpf, kcnts, n->sel.nkeys),
1436				  gpf, TCA_U32_PAD)) {
1437			kfree(gpf);
1438			goto nla_put_failure;
1439		}
1440		kfree(gpf);
1441#endif
1442	}
1443
1444	nla_nest_end(skb, nest);
1445
1446	if (TC_U32_KEY(n->handle))
1447		if (tcf_exts_dump_stats(skb, &n->exts) < 0)
1448			goto nla_put_failure;
1449	return skb->len;
1450
1451nla_put_failure:
1452	nla_nest_cancel(skb, nest);
1453	return -1;
1454}
1455
1456static struct tcf_proto_ops cls_u32_ops __read_mostly = {
1457	.kind		=	"u32",
1458	.classify	=	u32_classify,
1459	.init		=	u32_init,
1460	.destroy	=	u32_destroy,
1461	.get		=	u32_get,
1462	.change		=	u32_change,
1463	.delete		=	u32_delete,
1464	.walk		=	u32_walk,
1465	.reoffload	=	u32_reoffload,
1466	.dump		=	u32_dump,
1467	.bind_class	=	u32_bind_class,
1468	.owner		=	THIS_MODULE,
1469};
1470MODULE_ALIAS_NET_CLS("u32");
1471
1472static int __init init_u32(void)
1473{
1474	int i, ret;
1475
1476	pr_info("u32 classifier\n");
1477#ifdef CONFIG_CLS_U32_PERF
1478	pr_info("    Performance counters on\n");
1479#endif
1480	pr_info("    input device check on\n");
1481#ifdef CONFIG_NET_CLS_ACT
1482	pr_info("    Actions configured\n");
1483#endif
1484	tc_u_common_hash = kvmalloc_array(U32_HASH_SIZE,
1485					  sizeof(struct hlist_head),
1486					  GFP_KERNEL);
1487	if (!tc_u_common_hash)
1488		return -ENOMEM;
1489
1490	for (i = 0; i < U32_HASH_SIZE; i++)
1491		INIT_HLIST_HEAD(&tc_u_common_hash[i]);
1492
1493	ret = register_tcf_proto_ops(&cls_u32_ops);
1494	if (ret)
1495		kvfree(tc_u_common_hash);
1496	return ret;
1497}
1498
1499static void __exit exit_u32(void)
1500{
1501	unregister_tcf_proto_ops(&cls_u32_ops);
1502	kvfree(tc_u_common_hash);
1503}
1504
1505module_init(init_u32)
1506module_exit(exit_u32)
1507MODULE_DESCRIPTION("Universal 32bit based TC Classifier");
1508MODULE_LICENSE("GPL");