Linux Audio

Check our new training course

Buildroot integration, development and maintenance

Need a Buildroot system for your embedded project?
Loading...
v5.9
  1// SPDX-License-Identifier: GPL-2.0-or-later
  2/*
  3 *	Ioctl handler
  4 *	Linux ethernet bridge
  5 *
  6 *	Authors:
  7 *	Lennert Buytenhek		<buytenh@gnu.org>
 
 
 
 
 
  8 */
  9
 10#include <linux/capability.h>
 11#include <linux/kernel.h>
 12#include <linux/if_bridge.h>
 13#include <linux/netdevice.h>
 14#include <linux/slab.h>
 15#include <linux/times.h>
 16#include <net/net_namespace.h>
 17#include <linux/uaccess.h>
 18#include "br_private.h"
 19
 20static int get_bridge_ifindices(struct net *net, int *indices, int num)
 21{
 22	struct net_device *dev;
 23	int i = 0;
 24
 25	rcu_read_lock();
 26	for_each_netdev_rcu(net, dev) {
 27		if (i >= num)
 28			break;
 29		if (dev->priv_flags & IFF_EBRIDGE)
 30			indices[i++] = dev->ifindex;
 31	}
 32	rcu_read_unlock();
 33
 34	return i;
 35}
 36
 37/* called with RTNL */
 38static void get_port_ifindices(struct net_bridge *br, int *ifindices, int num)
 39{
 40	struct net_bridge_port *p;
 41
 42	list_for_each_entry(p, &br->port_list, list) {
 43		if (p->port_no < num)
 44			ifindices[p->port_no] = p->dev->ifindex;
 45	}
 46}
 47
 48/*
 49 * Format up to a page worth of forwarding table entries
 50 * userbuf -- where to copy result
 51 * maxnum  -- maximum number of entries desired
 52 *            (limited to a page for sanity)
 53 * offset  -- number of records to skip
 54 */
 55static int get_fdb_entries(struct net_bridge *br, void __user *userbuf,
 56			   unsigned long maxnum, unsigned long offset)
 57{
 58	int num;
 59	void *buf;
 60	size_t size;
 61
 62	/* Clamp size to PAGE_SIZE, test maxnum to avoid overflow */
 63	if (maxnum > PAGE_SIZE/sizeof(struct __fdb_entry))
 64		maxnum = PAGE_SIZE/sizeof(struct __fdb_entry);
 65
 66	size = maxnum * sizeof(struct __fdb_entry);
 67
 68	buf = kmalloc(size, GFP_USER);
 69	if (!buf)
 70		return -ENOMEM;
 71
 72	num = br_fdb_fillbuf(br, buf, maxnum, offset);
 73	if (num > 0) {
 74		if (copy_to_user(userbuf, buf, num*sizeof(struct __fdb_entry)))
 75			num = -EFAULT;
 76	}
 77	kfree(buf);
 78
 79	return num;
 80}
 81
 82/* called with RTNL */
 83static int add_del_if(struct net_bridge *br, int ifindex, int isadd)
 84{
 85	struct net *net = dev_net(br->dev);
 86	struct net_device *dev;
 87	int ret;
 88
 89	if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
 90		return -EPERM;
 91
 92	dev = __dev_get_by_index(net, ifindex);
 93	if (dev == NULL)
 94		return -EINVAL;
 95
 96	if (isadd)
 97		ret = br_add_if(br, dev, NULL);
 98	else
 99		ret = br_del_if(br, dev);
100
101	return ret;
102}
103
104/*
105 * Legacy ioctl's through SIOCDEVPRIVATE
106 * This interface is deprecated because it was too difficult to
107 * to do the translation for 32/64bit ioctl compatibility.
108 */
109static int old_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
110{
111	struct net_bridge *br = netdev_priv(dev);
112	struct net_bridge_port *p = NULL;
113	unsigned long args[4];
114	int ret = -EOPNOTSUPP;
115
116	if (copy_from_user(args, rq->ifr_data, sizeof(args)))
117		return -EFAULT;
118
119	switch (args[0]) {
120	case BRCTL_ADD_IF:
121	case BRCTL_DEL_IF:
122		return add_del_if(br, args[1], args[0] == BRCTL_ADD_IF);
123
124	case BRCTL_GET_BRIDGE_INFO:
125	{
126		struct __bridge_info b;
127
128		memset(&b, 0, sizeof(struct __bridge_info));
129		rcu_read_lock();
130		memcpy(&b.designated_root, &br->designated_root, 8);
131		memcpy(&b.bridge_id, &br->bridge_id, 8);
132		b.root_path_cost = br->root_path_cost;
133		b.max_age = jiffies_to_clock_t(br->max_age);
134		b.hello_time = jiffies_to_clock_t(br->hello_time);
135		b.forward_delay = br->forward_delay;
136		b.bridge_max_age = br->bridge_max_age;
137		b.bridge_hello_time = br->bridge_hello_time;
138		b.bridge_forward_delay = jiffies_to_clock_t(br->bridge_forward_delay);
139		b.topology_change = br->topology_change;
140		b.topology_change_detected = br->topology_change_detected;
141		b.root_port = br->root_port;
142
143		b.stp_enabled = (br->stp_enabled != BR_NO_STP);
144		b.ageing_time = jiffies_to_clock_t(br->ageing_time);
145		b.hello_timer_value = br_timer_value(&br->hello_timer);
146		b.tcn_timer_value = br_timer_value(&br->tcn_timer);
147		b.topology_change_timer_value = br_timer_value(&br->topology_change_timer);
148		b.gc_timer_value = br_timer_value(&br->gc_work.timer);
149		rcu_read_unlock();
150
151		if (copy_to_user((void __user *)args[1], &b, sizeof(b)))
152			return -EFAULT;
153
154		return 0;
155	}
156
157	case BRCTL_GET_PORT_LIST:
158	{
159		int num, *indices;
160
161		num = args[2];
162		if (num < 0)
163			return -EINVAL;
164		if (num == 0)
165			num = 256;
166		if (num > BR_MAX_PORTS)
167			num = BR_MAX_PORTS;
168
169		indices = kcalloc(num, sizeof(int), GFP_KERNEL);
170		if (indices == NULL)
171			return -ENOMEM;
172
173		get_port_ifindices(br, indices, num);
174		if (copy_to_user((void __user *)args[1], indices, num*sizeof(int)))
175			num =  -EFAULT;
176		kfree(indices);
177		return num;
178	}
179
180	case BRCTL_SET_BRIDGE_FORWARD_DELAY:
181		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
182			return -EPERM;
183
184		ret = br_set_forward_delay(br, args[1]);
185		break;
186
187	case BRCTL_SET_BRIDGE_HELLO_TIME:
188		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
189			return -EPERM;
190
191		ret = br_set_hello_time(br, args[1]);
192		break;
193
194	case BRCTL_SET_BRIDGE_MAX_AGE:
195		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
196			return -EPERM;
197
198		ret = br_set_max_age(br, args[1]);
199		break;
200
201	case BRCTL_SET_AGEING_TIME:
202		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
203			return -EPERM;
204
205		ret = br_set_ageing_time(br, args[1]);
206		break;
207
208	case BRCTL_GET_PORT_INFO:
209	{
210		struct __port_info p;
211		struct net_bridge_port *pt;
212
213		rcu_read_lock();
214		if ((pt = br_get_port(br, args[2])) == NULL) {
215			rcu_read_unlock();
216			return -EINVAL;
217		}
218
219		memset(&p, 0, sizeof(struct __port_info));
220		memcpy(&p.designated_root, &pt->designated_root, 8);
221		memcpy(&p.designated_bridge, &pt->designated_bridge, 8);
222		p.port_id = pt->port_id;
223		p.designated_port = pt->designated_port;
224		p.path_cost = pt->path_cost;
225		p.designated_cost = pt->designated_cost;
226		p.state = pt->state;
227		p.top_change_ack = pt->topology_change_ack;
228		p.config_pending = pt->config_pending;
229		p.message_age_timer_value = br_timer_value(&pt->message_age_timer);
230		p.forward_delay_timer_value = br_timer_value(&pt->forward_delay_timer);
231		p.hold_timer_value = br_timer_value(&pt->hold_timer);
232
233		rcu_read_unlock();
234
235		if (copy_to_user((void __user *)args[1], &p, sizeof(p)))
236			return -EFAULT;
237
238		return 0;
239	}
240
241	case BRCTL_SET_BRIDGE_STP_STATE:
242		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
243			return -EPERM;
244
245		ret = br_stp_set_enabled(br, args[1], NULL);
 
246		break;
247
248	case BRCTL_SET_BRIDGE_PRIORITY:
249		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
250			return -EPERM;
251
252		br_stp_set_bridge_priority(br, args[1]);
253		ret = 0;
254		break;
255
256	case BRCTL_SET_PORT_PRIORITY:
257	{
258		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
259			return -EPERM;
260
261		spin_lock_bh(&br->lock);
262		if ((p = br_get_port(br, args[1])) == NULL)
263			ret = -EINVAL;
264		else
265			ret = br_stp_set_port_priority(p, args[2]);
266		spin_unlock_bh(&br->lock);
267		break;
268	}
269
270	case BRCTL_SET_PATH_COST:
271	{
272		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
273			return -EPERM;
274
275		spin_lock_bh(&br->lock);
276		if ((p = br_get_port(br, args[1])) == NULL)
277			ret = -EINVAL;
278		else
279			ret = br_stp_set_path_cost(p, args[2]);
280		spin_unlock_bh(&br->lock);
281		break;
282	}
283
284	case BRCTL_GET_FDB_ENTRIES:
285		return get_fdb_entries(br, (void __user *)args[1],
286				       args[2], args[3]);
287	}
288
289	if (!ret) {
290		if (p)
291			br_ifinfo_notify(RTM_NEWLINK, NULL, p);
292		else
293			netdev_state_change(br->dev);
294	}
295
296	return ret;
297}
298
299static int old_deviceless(struct net *net, void __user *uarg)
300{
301	unsigned long args[3];
302
303	if (copy_from_user(args, uarg, sizeof(args)))
304		return -EFAULT;
305
306	switch (args[0]) {
307	case BRCTL_GET_VERSION:
308		return BRCTL_VERSION;
309
310	case BRCTL_GET_BRIDGES:
311	{
312		int *indices;
313		int ret = 0;
314
315		if (args[2] >= 2048)
316			return -ENOMEM;
317		indices = kcalloc(args[2], sizeof(int), GFP_KERNEL);
318		if (indices == NULL)
319			return -ENOMEM;
320
321		args[2] = get_bridge_ifindices(net, indices, args[2]);
322
323		ret = copy_to_user((void __user *)args[1], indices, args[2]*sizeof(int))
324			? -EFAULT : args[2];
325
326		kfree(indices);
327		return ret;
328	}
329
330	case BRCTL_ADD_BRIDGE:
331	case BRCTL_DEL_BRIDGE:
332	{
333		char buf[IFNAMSIZ];
334
335		if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
336			return -EPERM;
337
338		if (copy_from_user(buf, (void __user *)args[1], IFNAMSIZ))
339			return -EFAULT;
340
341		buf[IFNAMSIZ-1] = 0;
342
343		if (args[0] == BRCTL_ADD_BRIDGE)
344			return br_add_bridge(net, buf);
345
346		return br_del_bridge(net, buf);
347	}
348	}
349
350	return -EOPNOTSUPP;
351}
352
353int br_ioctl_deviceless_stub(struct net *net, unsigned int cmd, void __user *uarg)
354{
355	switch (cmd) {
356	case SIOCGIFBR:
357	case SIOCSIFBR:
358		return old_deviceless(net, uarg);
359
360	case SIOCBRADDBR:
361	case SIOCBRDELBR:
362	{
363		char buf[IFNAMSIZ];
364
365		if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
366			return -EPERM;
367
368		if (copy_from_user(buf, uarg, IFNAMSIZ))
369			return -EFAULT;
370
371		buf[IFNAMSIZ-1] = 0;
372		if (cmd == SIOCBRADDBR)
373			return br_add_bridge(net, buf);
374
375		return br_del_bridge(net, buf);
376	}
377	}
378	return -EOPNOTSUPP;
379}
380
381int br_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
382{
383	struct net_bridge *br = netdev_priv(dev);
384
385	switch (cmd) {
386	case SIOCDEVPRIVATE:
387		return old_dev_ioctl(dev, rq, cmd);
388
389	case SIOCBRADDIF:
390	case SIOCBRDELIF:
391		return add_del_if(br, rq->ifr_ifindex, cmd == SIOCBRADDIF);
392
393	}
394
395	br_debug(br, "Bridge does not support ioctl 0x%x\n", cmd);
396	return -EOPNOTSUPP;
397}
v4.10.11
 
  1/*
  2 *	Ioctl handler
  3 *	Linux ethernet bridge
  4 *
  5 *	Authors:
  6 *	Lennert Buytenhek		<buytenh@gnu.org>
  7 *
  8 *	This program is free software; you can redistribute it and/or
  9 *	modify it under the terms of the GNU General Public License
 10 *	as published by the Free Software Foundation; either version
 11 *	2 of the License, or (at your option) any later version.
 12 */
 13
 14#include <linux/capability.h>
 15#include <linux/kernel.h>
 16#include <linux/if_bridge.h>
 17#include <linux/netdevice.h>
 18#include <linux/slab.h>
 19#include <linux/times.h>
 20#include <net/net_namespace.h>
 21#include <linux/uaccess.h>
 22#include "br_private.h"
 23
 24static int get_bridge_ifindices(struct net *net, int *indices, int num)
 25{
 26	struct net_device *dev;
 27	int i = 0;
 28
 29	rcu_read_lock();
 30	for_each_netdev_rcu(net, dev) {
 31		if (i >= num)
 32			break;
 33		if (dev->priv_flags & IFF_EBRIDGE)
 34			indices[i++] = dev->ifindex;
 35	}
 36	rcu_read_unlock();
 37
 38	return i;
 39}
 40
 41/* called with RTNL */
 42static void get_port_ifindices(struct net_bridge *br, int *ifindices, int num)
 43{
 44	struct net_bridge_port *p;
 45
 46	list_for_each_entry(p, &br->port_list, list) {
 47		if (p->port_no < num)
 48			ifindices[p->port_no] = p->dev->ifindex;
 49	}
 50}
 51
 52/*
 53 * Format up to a page worth of forwarding table entries
 54 * userbuf -- where to copy result
 55 * maxnum  -- maximum number of entries desired
 56 *            (limited to a page for sanity)
 57 * offset  -- number of records to skip
 58 */
 59static int get_fdb_entries(struct net_bridge *br, void __user *userbuf,
 60			   unsigned long maxnum, unsigned long offset)
 61{
 62	int num;
 63	void *buf;
 64	size_t size;
 65
 66	/* Clamp size to PAGE_SIZE, test maxnum to avoid overflow */
 67	if (maxnum > PAGE_SIZE/sizeof(struct __fdb_entry))
 68		maxnum = PAGE_SIZE/sizeof(struct __fdb_entry);
 69
 70	size = maxnum * sizeof(struct __fdb_entry);
 71
 72	buf = kmalloc(size, GFP_USER);
 73	if (!buf)
 74		return -ENOMEM;
 75
 76	num = br_fdb_fillbuf(br, buf, maxnum, offset);
 77	if (num > 0) {
 78		if (copy_to_user(userbuf, buf, num*sizeof(struct __fdb_entry)))
 79			num = -EFAULT;
 80	}
 81	kfree(buf);
 82
 83	return num;
 84}
 85
 86/* called with RTNL */
 87static int add_del_if(struct net_bridge *br, int ifindex, int isadd)
 88{
 89	struct net *net = dev_net(br->dev);
 90	struct net_device *dev;
 91	int ret;
 92
 93	if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
 94		return -EPERM;
 95
 96	dev = __dev_get_by_index(net, ifindex);
 97	if (dev == NULL)
 98		return -EINVAL;
 99
100	if (isadd)
101		ret = br_add_if(br, dev);
102	else
103		ret = br_del_if(br, dev);
104
105	return ret;
106}
107
108/*
109 * Legacy ioctl's through SIOCDEVPRIVATE
110 * This interface is deprecated because it was too difficult to
111 * to do the translation for 32/64bit ioctl compatibility.
112 */
113static int old_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
114{
115	struct net_bridge *br = netdev_priv(dev);
116	struct net_bridge_port *p = NULL;
117	unsigned long args[4];
118	int ret = -EOPNOTSUPP;
119
120	if (copy_from_user(args, rq->ifr_data, sizeof(args)))
121		return -EFAULT;
122
123	switch (args[0]) {
124	case BRCTL_ADD_IF:
125	case BRCTL_DEL_IF:
126		return add_del_if(br, args[1], args[0] == BRCTL_ADD_IF);
127
128	case BRCTL_GET_BRIDGE_INFO:
129	{
130		struct __bridge_info b;
131
132		memset(&b, 0, sizeof(struct __bridge_info));
133		rcu_read_lock();
134		memcpy(&b.designated_root, &br->designated_root, 8);
135		memcpy(&b.bridge_id, &br->bridge_id, 8);
136		b.root_path_cost = br->root_path_cost;
137		b.max_age = jiffies_to_clock_t(br->max_age);
138		b.hello_time = jiffies_to_clock_t(br->hello_time);
139		b.forward_delay = br->forward_delay;
140		b.bridge_max_age = br->bridge_max_age;
141		b.bridge_hello_time = br->bridge_hello_time;
142		b.bridge_forward_delay = jiffies_to_clock_t(br->bridge_forward_delay);
143		b.topology_change = br->topology_change;
144		b.topology_change_detected = br->topology_change_detected;
145		b.root_port = br->root_port;
146
147		b.stp_enabled = (br->stp_enabled != BR_NO_STP);
148		b.ageing_time = jiffies_to_clock_t(br->ageing_time);
149		b.hello_timer_value = br_timer_value(&br->hello_timer);
150		b.tcn_timer_value = br_timer_value(&br->tcn_timer);
151		b.topology_change_timer_value = br_timer_value(&br->topology_change_timer);
152		b.gc_timer_value = br_timer_value(&br->gc_timer);
153		rcu_read_unlock();
154
155		if (copy_to_user((void __user *)args[1], &b, sizeof(b)))
156			return -EFAULT;
157
158		return 0;
159	}
160
161	case BRCTL_GET_PORT_LIST:
162	{
163		int num, *indices;
164
165		num = args[2];
166		if (num < 0)
167			return -EINVAL;
168		if (num == 0)
169			num = 256;
170		if (num > BR_MAX_PORTS)
171			num = BR_MAX_PORTS;
172
173		indices = kcalloc(num, sizeof(int), GFP_KERNEL);
174		if (indices == NULL)
175			return -ENOMEM;
176
177		get_port_ifindices(br, indices, num);
178		if (copy_to_user((void __user *)args[1], indices, num*sizeof(int)))
179			num =  -EFAULT;
180		kfree(indices);
181		return num;
182	}
183
184	case BRCTL_SET_BRIDGE_FORWARD_DELAY:
185		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
186			return -EPERM;
187
188		ret = br_set_forward_delay(br, args[1]);
189		break;
190
191	case BRCTL_SET_BRIDGE_HELLO_TIME:
192		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
193			return -EPERM;
194
195		ret = br_set_hello_time(br, args[1]);
196		break;
197
198	case BRCTL_SET_BRIDGE_MAX_AGE:
199		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
200			return -EPERM;
201
202		ret = br_set_max_age(br, args[1]);
203		break;
204
205	case BRCTL_SET_AGEING_TIME:
206		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
207			return -EPERM;
208
209		ret = br_set_ageing_time(br, args[1]);
210		break;
211
212	case BRCTL_GET_PORT_INFO:
213	{
214		struct __port_info p;
215		struct net_bridge_port *pt;
216
217		rcu_read_lock();
218		if ((pt = br_get_port(br, args[2])) == NULL) {
219			rcu_read_unlock();
220			return -EINVAL;
221		}
222
223		memset(&p, 0, sizeof(struct __port_info));
224		memcpy(&p.designated_root, &pt->designated_root, 8);
225		memcpy(&p.designated_bridge, &pt->designated_bridge, 8);
226		p.port_id = pt->port_id;
227		p.designated_port = pt->designated_port;
228		p.path_cost = pt->path_cost;
229		p.designated_cost = pt->designated_cost;
230		p.state = pt->state;
231		p.top_change_ack = pt->topology_change_ack;
232		p.config_pending = pt->config_pending;
233		p.message_age_timer_value = br_timer_value(&pt->message_age_timer);
234		p.forward_delay_timer_value = br_timer_value(&pt->forward_delay_timer);
235		p.hold_timer_value = br_timer_value(&pt->hold_timer);
236
237		rcu_read_unlock();
238
239		if (copy_to_user((void __user *)args[1], &p, sizeof(p)))
240			return -EFAULT;
241
242		return 0;
243	}
244
245	case BRCTL_SET_BRIDGE_STP_STATE:
246		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
247			return -EPERM;
248
249		br_stp_set_enabled(br, args[1]);
250		ret = 0;
251		break;
252
253	case BRCTL_SET_BRIDGE_PRIORITY:
254		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
255			return -EPERM;
256
257		br_stp_set_bridge_priority(br, args[1]);
258		ret = 0;
259		break;
260
261	case BRCTL_SET_PORT_PRIORITY:
262	{
263		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
264			return -EPERM;
265
266		spin_lock_bh(&br->lock);
267		if ((p = br_get_port(br, args[1])) == NULL)
268			ret = -EINVAL;
269		else
270			ret = br_stp_set_port_priority(p, args[2]);
271		spin_unlock_bh(&br->lock);
272		break;
273	}
274
275	case BRCTL_SET_PATH_COST:
276	{
277		if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN))
278			return -EPERM;
279
280		spin_lock_bh(&br->lock);
281		if ((p = br_get_port(br, args[1])) == NULL)
282			ret = -EINVAL;
283		else
284			ret = br_stp_set_path_cost(p, args[2]);
285		spin_unlock_bh(&br->lock);
286		break;
287	}
288
289	case BRCTL_GET_FDB_ENTRIES:
290		return get_fdb_entries(br, (void __user *)args[1],
291				       args[2], args[3]);
292	}
293
294	if (!ret) {
295		if (p)
296			br_ifinfo_notify(RTM_NEWLINK, p);
297		else
298			netdev_state_change(br->dev);
299	}
300
301	return ret;
302}
303
304static int old_deviceless(struct net *net, void __user *uarg)
305{
306	unsigned long args[3];
307
308	if (copy_from_user(args, uarg, sizeof(args)))
309		return -EFAULT;
310
311	switch (args[0]) {
312	case BRCTL_GET_VERSION:
313		return BRCTL_VERSION;
314
315	case BRCTL_GET_BRIDGES:
316	{
317		int *indices;
318		int ret = 0;
319
320		if (args[2] >= 2048)
321			return -ENOMEM;
322		indices = kcalloc(args[2], sizeof(int), GFP_KERNEL);
323		if (indices == NULL)
324			return -ENOMEM;
325
326		args[2] = get_bridge_ifindices(net, indices, args[2]);
327
328		ret = copy_to_user((void __user *)args[1], indices, args[2]*sizeof(int))
329			? -EFAULT : args[2];
330
331		kfree(indices);
332		return ret;
333	}
334
335	case BRCTL_ADD_BRIDGE:
336	case BRCTL_DEL_BRIDGE:
337	{
338		char buf[IFNAMSIZ];
339
340		if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
341			return -EPERM;
342
343		if (copy_from_user(buf, (void __user *)args[1], IFNAMSIZ))
344			return -EFAULT;
345
346		buf[IFNAMSIZ-1] = 0;
347
348		if (args[0] == BRCTL_ADD_BRIDGE)
349			return br_add_bridge(net, buf);
350
351		return br_del_bridge(net, buf);
352	}
353	}
354
355	return -EOPNOTSUPP;
356}
357
358int br_ioctl_deviceless_stub(struct net *net, unsigned int cmd, void __user *uarg)
359{
360	switch (cmd) {
361	case SIOCGIFBR:
362	case SIOCSIFBR:
363		return old_deviceless(net, uarg);
364
365	case SIOCBRADDBR:
366	case SIOCBRDELBR:
367	{
368		char buf[IFNAMSIZ];
369
370		if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
371			return -EPERM;
372
373		if (copy_from_user(buf, uarg, IFNAMSIZ))
374			return -EFAULT;
375
376		buf[IFNAMSIZ-1] = 0;
377		if (cmd == SIOCBRADDBR)
378			return br_add_bridge(net, buf);
379
380		return br_del_bridge(net, buf);
381	}
382	}
383	return -EOPNOTSUPP;
384}
385
386int br_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd)
387{
388	struct net_bridge *br = netdev_priv(dev);
389
390	switch (cmd) {
391	case SIOCDEVPRIVATE:
392		return old_dev_ioctl(dev, rq, cmd);
393
394	case SIOCBRADDIF:
395	case SIOCBRDELIF:
396		return add_del_if(br, rq->ifr_ifindex, cmd == SIOCBRADDIF);
397
398	}
399
400	br_debug(br, "Bridge does not support ioctl 0x%x\n", cmd);
401	return -EOPNOTSUPP;
402}