Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * INET 802.1Q VLAN
4 * Ethernet-type device handling.
5 *
6 * Authors: Ben Greear <greearb@candelatech.com>
7 * Please send support related email to: netdev@vger.kernel.org
8 * VLAN Home Page: http://www.candelatech.com/~greear/vlan.html
9 *
10 * Fixes:
11 * Fix for packet capture - Nick Eggleston <nick@dccinc.com>;
12 * Add HW acceleration hooks - David S. Miller <davem@redhat.com>;
13 * Correct all the locking - David S. Miller <davem@redhat.com>;
14 * Use hash table for VLAN groups - David S. Miller <davem@redhat.com>
15 */
16
17#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
18
19#include <linux/capability.h>
20#include <linux/module.h>
21#include <linux/netdevice.h>
22#include <linux/skbuff.h>
23#include <linux/slab.h>
24#include <linux/init.h>
25#include <linux/rculist.h>
26#include <net/p8022.h>
27#include <net/arp.h>
28#include <linux/rtnetlink.h>
29#include <linux/notifier.h>
30#include <net/rtnetlink.h>
31#include <net/net_namespace.h>
32#include <net/netns/generic.h>
33#include <linux/uaccess.h>
34
35#include <linux/if_vlan.h>
36#include "vlan.h"
37#include "vlanproc.h"
38
39#define DRV_VERSION "1.8"
40
41/* Global VLAN variables */
42
43unsigned int vlan_net_id __read_mostly;
44
45const char vlan_fullname[] = "802.1Q VLAN Support";
46const char vlan_version[] = DRV_VERSION;
47
48/* End of global variables definitions. */
49
50static int vlan_group_prealloc_vid(struct vlan_group *vg,
51 __be16 vlan_proto, u16 vlan_id)
52{
53 struct net_device **array;
54 unsigned int vidx;
55 unsigned int size;
56 int pidx;
57
58 ASSERT_RTNL();
59
60 pidx = vlan_proto_idx(vlan_proto);
61 if (pidx < 0)
62 return -EINVAL;
63
64 vidx = vlan_id / VLAN_GROUP_ARRAY_PART_LEN;
65 array = vg->vlan_devices_arrays[pidx][vidx];
66 if (array != NULL)
67 return 0;
68
69 size = sizeof(struct net_device *) * VLAN_GROUP_ARRAY_PART_LEN;
70 array = kzalloc(size, GFP_KERNEL_ACCOUNT);
71 if (array == NULL)
72 return -ENOBUFS;
73
74 /* paired with smp_rmb() in __vlan_group_get_device() */
75 smp_wmb();
76
77 vg->vlan_devices_arrays[pidx][vidx] = array;
78 return 0;
79}
80
81static void vlan_stacked_transfer_operstate(const struct net_device *rootdev,
82 struct net_device *dev,
83 struct vlan_dev_priv *vlan)
84{
85 if (!(vlan->flags & VLAN_FLAG_BRIDGE_BINDING))
86 netif_stacked_transfer_operstate(rootdev, dev);
87}
88
89void unregister_vlan_dev(struct net_device *dev, struct list_head *head)
90{
91 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
92 struct net_device *real_dev = vlan->real_dev;
93 struct vlan_info *vlan_info;
94 struct vlan_group *grp;
95 u16 vlan_id = vlan->vlan_id;
96
97 ASSERT_RTNL();
98
99 vlan_info = rtnl_dereference(real_dev->vlan_info);
100 BUG_ON(!vlan_info);
101
102 grp = &vlan_info->grp;
103
104 grp->nr_vlan_devs--;
105
106 if (vlan->flags & VLAN_FLAG_MVRP)
107 vlan_mvrp_request_leave(dev);
108 if (vlan->flags & VLAN_FLAG_GVRP)
109 vlan_gvrp_request_leave(dev);
110
111 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, NULL);
112
113 netdev_upper_dev_unlink(real_dev, dev);
114 /* Because unregister_netdevice_queue() makes sure at least one rcu
115 * grace period is respected before device freeing,
116 * we dont need to call synchronize_net() here.
117 */
118 unregister_netdevice_queue(dev, head);
119
120 if (grp->nr_vlan_devs == 0) {
121 vlan_mvrp_uninit_applicant(real_dev);
122 vlan_gvrp_uninit_applicant(real_dev);
123 }
124
125 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
126}
127
128int vlan_check_real_dev(struct net_device *real_dev,
129 __be16 protocol, u16 vlan_id,
130 struct netlink_ext_ack *extack)
131{
132 const char *name = real_dev->name;
133
134 if (real_dev->features & NETIF_F_VLAN_CHALLENGED ||
135 real_dev->type != ARPHRD_ETHER) {
136 pr_info("VLANs not supported on %s\n", name);
137 NL_SET_ERR_MSG_MOD(extack, "VLANs not supported on device");
138 return -EOPNOTSUPP;
139 }
140
141 if (vlan_find_dev(real_dev, protocol, vlan_id) != NULL) {
142 NL_SET_ERR_MSG_MOD(extack, "VLAN device already exists");
143 return -EEXIST;
144 }
145
146 return 0;
147}
148
149int register_vlan_dev(struct net_device *dev, struct netlink_ext_ack *extack)
150{
151 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
152 struct net_device *real_dev = vlan->real_dev;
153 u16 vlan_id = vlan->vlan_id;
154 struct vlan_info *vlan_info;
155 struct vlan_group *grp;
156 int err;
157
158 err = vlan_vid_add(real_dev, vlan->vlan_proto, vlan_id);
159 if (err)
160 return err;
161
162 vlan_info = rtnl_dereference(real_dev->vlan_info);
163 /* vlan_info should be there now. vlan_vid_add took care of it */
164 BUG_ON(!vlan_info);
165
166 grp = &vlan_info->grp;
167 if (grp->nr_vlan_devs == 0) {
168 err = vlan_gvrp_init_applicant(real_dev);
169 if (err < 0)
170 goto out_vid_del;
171 err = vlan_mvrp_init_applicant(real_dev);
172 if (err < 0)
173 goto out_uninit_gvrp;
174 }
175
176 err = vlan_group_prealloc_vid(grp, vlan->vlan_proto, vlan_id);
177 if (err < 0)
178 goto out_uninit_mvrp;
179
180 err = register_netdevice(dev);
181 if (err < 0)
182 goto out_uninit_mvrp;
183
184 err = netdev_upper_dev_link(real_dev, dev, extack);
185 if (err)
186 goto out_unregister_netdev;
187
188 vlan_stacked_transfer_operstate(real_dev, dev, vlan);
189 linkwatch_fire_event(dev); /* _MUST_ call rfc2863_policy() */
190
191 /* So, got the sucker initialized, now lets place
192 * it into our local structure.
193 */
194 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, dev);
195 grp->nr_vlan_devs++;
196
197 return 0;
198
199out_unregister_netdev:
200 unregister_netdevice(dev);
201out_uninit_mvrp:
202 if (grp->nr_vlan_devs == 0)
203 vlan_mvrp_uninit_applicant(real_dev);
204out_uninit_gvrp:
205 if (grp->nr_vlan_devs == 0)
206 vlan_gvrp_uninit_applicant(real_dev);
207out_vid_del:
208 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
209 return err;
210}
211
212/* Attach a VLAN device to a mac address (ie Ethernet Card).
213 * Returns 0 if the device was created or a negative error code otherwise.
214 */
215static int register_vlan_device(struct net_device *real_dev, u16 vlan_id)
216{
217 struct net_device *new_dev;
218 struct vlan_dev_priv *vlan;
219 struct net *net = dev_net(real_dev);
220 struct vlan_net *vn = net_generic(net, vlan_net_id);
221 char name[IFNAMSIZ];
222 int err;
223
224 if (vlan_id >= VLAN_VID_MASK)
225 return -ERANGE;
226
227 err = vlan_check_real_dev(real_dev, htons(ETH_P_8021Q), vlan_id,
228 NULL);
229 if (err < 0)
230 return err;
231
232 /* Gotta set up the fields for the device. */
233 switch (vn->name_type) {
234 case VLAN_NAME_TYPE_RAW_PLUS_VID:
235 /* name will look like: eth1.0005 */
236 snprintf(name, IFNAMSIZ, "%s.%.4i", real_dev->name, vlan_id);
237 break;
238 case VLAN_NAME_TYPE_PLUS_VID_NO_PAD:
239 /* Put our vlan.VID in the name.
240 * Name will look like: vlan5
241 */
242 snprintf(name, IFNAMSIZ, "vlan%i", vlan_id);
243 break;
244 case VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD:
245 /* Put our vlan.VID in the name.
246 * Name will look like: eth0.5
247 */
248 snprintf(name, IFNAMSIZ, "%s.%i", real_dev->name, vlan_id);
249 break;
250 case VLAN_NAME_TYPE_PLUS_VID:
251 /* Put our vlan.VID in the name.
252 * Name will look like: vlan0005
253 */
254 default:
255 snprintf(name, IFNAMSIZ, "vlan%.4i", vlan_id);
256 }
257
258 new_dev = alloc_netdev(sizeof(struct vlan_dev_priv), name,
259 NET_NAME_UNKNOWN, vlan_setup);
260
261 if (new_dev == NULL)
262 return -ENOBUFS;
263
264 dev_net_set(new_dev, net);
265 /* need 4 bytes for extra VLAN header info,
266 * hope the underlying device can handle it.
267 */
268 new_dev->mtu = real_dev->mtu;
269
270 vlan = vlan_dev_priv(new_dev);
271 vlan->vlan_proto = htons(ETH_P_8021Q);
272 vlan->vlan_id = vlan_id;
273 vlan->real_dev = real_dev;
274 vlan->dent = NULL;
275 vlan->flags = VLAN_FLAG_REORDER_HDR;
276
277 new_dev->rtnl_link_ops = &vlan_link_ops;
278 err = register_vlan_dev(new_dev, NULL);
279 if (err < 0)
280 goto out_free_newdev;
281
282 return 0;
283
284out_free_newdev:
285 free_netdev(new_dev);
286 return err;
287}
288
289static void vlan_sync_address(struct net_device *dev,
290 struct net_device *vlandev)
291{
292 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
293
294 /* May be called without an actual change */
295 if (ether_addr_equal(vlan->real_dev_addr, dev->dev_addr))
296 return;
297
298 /* vlan continues to inherit address of lower device */
299 if (vlan_dev_inherit_address(vlandev, dev))
300 goto out;
301
302 /* vlan address was different from the old address and is equal to
303 * the new address */
304 if (!ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
305 ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
306 dev_uc_del(dev, vlandev->dev_addr);
307
308 /* vlan address was equal to the old address and is different from
309 * the new address */
310 if (ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
311 !ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
312 dev_uc_add(dev, vlandev->dev_addr);
313
314out:
315 ether_addr_copy(vlan->real_dev_addr, dev->dev_addr);
316}
317
318static void vlan_transfer_features(struct net_device *dev,
319 struct net_device *vlandev)
320{
321 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
322
323 netif_inherit_tso_max(vlandev, dev);
324
325 if (vlan_hw_offload_capable(dev->features, vlan->vlan_proto))
326 vlandev->hard_header_len = dev->hard_header_len;
327 else
328 vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN;
329
330#if IS_ENABLED(CONFIG_FCOE)
331 vlandev->fcoe_ddp_xid = dev->fcoe_ddp_xid;
332#endif
333
334 vlandev->priv_flags &= ~IFF_XMIT_DST_RELEASE;
335 vlandev->priv_flags |= (vlan->real_dev->priv_flags & IFF_XMIT_DST_RELEASE);
336 vlandev->hw_enc_features = vlan_tnl_features(vlan->real_dev);
337
338 netdev_update_features(vlandev);
339}
340
341static int __vlan_device_event(struct net_device *dev, unsigned long event)
342{
343 int err = 0;
344
345 switch (event) {
346 case NETDEV_CHANGENAME:
347 vlan_proc_rem_dev(dev);
348 err = vlan_proc_add_dev(dev);
349 break;
350 case NETDEV_REGISTER:
351 err = vlan_proc_add_dev(dev);
352 break;
353 case NETDEV_UNREGISTER:
354 vlan_proc_rem_dev(dev);
355 break;
356 }
357
358 return err;
359}
360
361static int vlan_device_event(struct notifier_block *unused, unsigned long event,
362 void *ptr)
363{
364 struct netlink_ext_ack *extack = netdev_notifier_info_to_extack(ptr);
365 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
366 struct vlan_group *grp;
367 struct vlan_info *vlan_info;
368 int i, flgs;
369 struct net_device *vlandev;
370 struct vlan_dev_priv *vlan;
371 bool last = false;
372 LIST_HEAD(list);
373 int err;
374
375 if (is_vlan_dev(dev)) {
376 int err = __vlan_device_event(dev, event);
377
378 if (err)
379 return notifier_from_errno(err);
380 }
381
382 if ((event == NETDEV_UP) &&
383 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER)) {
384 pr_info("adding VLAN 0 to HW filter on device %s\n",
385 dev->name);
386 vlan_vid_add(dev, htons(ETH_P_8021Q), 0);
387 }
388 if (event == NETDEV_DOWN &&
389 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER))
390 vlan_vid_del(dev, htons(ETH_P_8021Q), 0);
391
392 vlan_info = rtnl_dereference(dev->vlan_info);
393 if (!vlan_info)
394 goto out;
395 grp = &vlan_info->grp;
396
397 /* It is OK that we do not hold the group lock right now,
398 * as we run under the RTNL lock.
399 */
400
401 switch (event) {
402 case NETDEV_CHANGE:
403 /* Propagate real device state to vlan devices */
404 vlan_group_for_each_dev(grp, i, vlandev)
405 vlan_stacked_transfer_operstate(dev, vlandev,
406 vlan_dev_priv(vlandev));
407 break;
408
409 case NETDEV_CHANGEADDR:
410 /* Adjust unicast filters on underlying device */
411 vlan_group_for_each_dev(grp, i, vlandev) {
412 flgs = vlandev->flags;
413 if (!(flgs & IFF_UP))
414 continue;
415
416 vlan_sync_address(dev, vlandev);
417 }
418 break;
419
420 case NETDEV_CHANGEMTU:
421 vlan_group_for_each_dev(grp, i, vlandev) {
422 if (vlandev->mtu <= dev->mtu)
423 continue;
424
425 dev_set_mtu(vlandev, dev->mtu);
426 }
427 break;
428
429 case NETDEV_FEAT_CHANGE:
430 /* Propagate device features to underlying device */
431 vlan_group_for_each_dev(grp, i, vlandev)
432 vlan_transfer_features(dev, vlandev);
433 break;
434
435 case NETDEV_DOWN: {
436 struct net_device *tmp;
437 LIST_HEAD(close_list);
438
439 /* Put all VLANs for this dev in the down state too. */
440 vlan_group_for_each_dev(grp, i, vlandev) {
441 flgs = vlandev->flags;
442 if (!(flgs & IFF_UP))
443 continue;
444
445 vlan = vlan_dev_priv(vlandev);
446 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
447 list_add(&vlandev->close_list, &close_list);
448 }
449
450 dev_close_many(&close_list, false);
451
452 list_for_each_entry_safe(vlandev, tmp, &close_list, close_list) {
453 vlan_stacked_transfer_operstate(dev, vlandev,
454 vlan_dev_priv(vlandev));
455 list_del_init(&vlandev->close_list);
456 }
457 list_del(&close_list);
458 break;
459 }
460 case NETDEV_UP:
461 /* Put all VLANs for this dev in the up state too. */
462 vlan_group_for_each_dev(grp, i, vlandev) {
463 flgs = dev_get_flags(vlandev);
464 if (flgs & IFF_UP)
465 continue;
466
467 vlan = vlan_dev_priv(vlandev);
468 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
469 dev_change_flags(vlandev, flgs | IFF_UP,
470 extack);
471 vlan_stacked_transfer_operstate(dev, vlandev, vlan);
472 }
473 break;
474
475 case NETDEV_UNREGISTER:
476 /* twiddle thumbs on netns device moves */
477 if (dev->reg_state != NETREG_UNREGISTERING)
478 break;
479
480 vlan_group_for_each_dev(grp, i, vlandev) {
481 /* removal of last vid destroys vlan_info, abort
482 * afterwards */
483 if (vlan_info->nr_vids == 1)
484 last = true;
485
486 unregister_vlan_dev(vlandev, &list);
487 if (last)
488 break;
489 }
490 unregister_netdevice_many(&list);
491 break;
492
493 case NETDEV_PRE_TYPE_CHANGE:
494 /* Forbid underlaying device to change its type. */
495 if (vlan_uses_dev(dev))
496 return NOTIFY_BAD;
497 break;
498
499 case NETDEV_NOTIFY_PEERS:
500 case NETDEV_BONDING_FAILOVER:
501 case NETDEV_RESEND_IGMP:
502 /* Propagate to vlan devices */
503 vlan_group_for_each_dev(grp, i, vlandev)
504 call_netdevice_notifiers(event, vlandev);
505 break;
506
507 case NETDEV_CVLAN_FILTER_PUSH_INFO:
508 err = vlan_filter_push_vids(vlan_info, htons(ETH_P_8021Q));
509 if (err)
510 return notifier_from_errno(err);
511 break;
512
513 case NETDEV_CVLAN_FILTER_DROP_INFO:
514 vlan_filter_drop_vids(vlan_info, htons(ETH_P_8021Q));
515 break;
516
517 case NETDEV_SVLAN_FILTER_PUSH_INFO:
518 err = vlan_filter_push_vids(vlan_info, htons(ETH_P_8021AD));
519 if (err)
520 return notifier_from_errno(err);
521 break;
522
523 case NETDEV_SVLAN_FILTER_DROP_INFO:
524 vlan_filter_drop_vids(vlan_info, htons(ETH_P_8021AD));
525 break;
526 }
527
528out:
529 return NOTIFY_DONE;
530}
531
532static struct notifier_block vlan_notifier_block __read_mostly = {
533 .notifier_call = vlan_device_event,
534};
535
536/*
537 * VLAN IOCTL handler.
538 * o execute requested action or pass command to the device driver
539 * arg is really a struct vlan_ioctl_args __user *.
540 */
541static int vlan_ioctl_handler(struct net *net, void __user *arg)
542{
543 int err;
544 struct vlan_ioctl_args args;
545 struct net_device *dev = NULL;
546
547 if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args)))
548 return -EFAULT;
549
550 /* Null terminate this sucker, just in case. */
551 args.device1[sizeof(args.device1) - 1] = 0;
552 args.u.device2[sizeof(args.u.device2) - 1] = 0;
553
554 rtnl_lock();
555
556 switch (args.cmd) {
557 case SET_VLAN_INGRESS_PRIORITY_CMD:
558 case SET_VLAN_EGRESS_PRIORITY_CMD:
559 case SET_VLAN_FLAG_CMD:
560 case ADD_VLAN_CMD:
561 case DEL_VLAN_CMD:
562 case GET_VLAN_REALDEV_NAME_CMD:
563 case GET_VLAN_VID_CMD:
564 err = -ENODEV;
565 dev = __dev_get_by_name(net, args.device1);
566 if (!dev)
567 goto out;
568
569 err = -EINVAL;
570 if (args.cmd != ADD_VLAN_CMD && !is_vlan_dev(dev))
571 goto out;
572 }
573
574 switch (args.cmd) {
575 case SET_VLAN_INGRESS_PRIORITY_CMD:
576 err = -EPERM;
577 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
578 break;
579 vlan_dev_set_ingress_priority(dev,
580 args.u.skb_priority,
581 args.vlan_qos);
582 err = 0;
583 break;
584
585 case SET_VLAN_EGRESS_PRIORITY_CMD:
586 err = -EPERM;
587 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
588 break;
589 err = vlan_dev_set_egress_priority(dev,
590 args.u.skb_priority,
591 args.vlan_qos);
592 break;
593
594 case SET_VLAN_FLAG_CMD:
595 err = -EPERM;
596 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
597 break;
598 err = vlan_dev_change_flags(dev,
599 args.vlan_qos ? args.u.flag : 0,
600 args.u.flag);
601 break;
602
603 case SET_VLAN_NAME_TYPE_CMD:
604 err = -EPERM;
605 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
606 break;
607 if (args.u.name_type < VLAN_NAME_TYPE_HIGHEST) {
608 struct vlan_net *vn;
609
610 vn = net_generic(net, vlan_net_id);
611 vn->name_type = args.u.name_type;
612 err = 0;
613 } else {
614 err = -EINVAL;
615 }
616 break;
617
618 case ADD_VLAN_CMD:
619 err = -EPERM;
620 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
621 break;
622 err = register_vlan_device(dev, args.u.VID);
623 break;
624
625 case DEL_VLAN_CMD:
626 err = -EPERM;
627 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
628 break;
629 unregister_vlan_dev(dev, NULL);
630 err = 0;
631 break;
632
633 case GET_VLAN_REALDEV_NAME_CMD:
634 err = 0;
635 vlan_dev_get_realdev_name(dev, args.u.device2,
636 sizeof(args.u.device2));
637 if (copy_to_user(arg, &args,
638 sizeof(struct vlan_ioctl_args)))
639 err = -EFAULT;
640 break;
641
642 case GET_VLAN_VID_CMD:
643 err = 0;
644 args.u.VID = vlan_dev_vlan_id(dev);
645 if (copy_to_user(arg, &args,
646 sizeof(struct vlan_ioctl_args)))
647 err = -EFAULT;
648 break;
649
650 default:
651 err = -EOPNOTSUPP;
652 break;
653 }
654out:
655 rtnl_unlock();
656 return err;
657}
658
659static int __net_init vlan_init_net(struct net *net)
660{
661 struct vlan_net *vn = net_generic(net, vlan_net_id);
662 int err;
663
664 vn->name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD;
665
666 err = vlan_proc_init(net);
667
668 return err;
669}
670
671static void __net_exit vlan_exit_net(struct net *net)
672{
673 vlan_proc_cleanup(net);
674}
675
676static struct pernet_operations vlan_net_ops = {
677 .init = vlan_init_net,
678 .exit = vlan_exit_net,
679 .id = &vlan_net_id,
680 .size = sizeof(struct vlan_net),
681};
682
683static int __init vlan_proto_init(void)
684{
685 int err;
686
687 pr_info("%s v%s\n", vlan_fullname, vlan_version);
688
689 err = register_pernet_subsys(&vlan_net_ops);
690 if (err < 0)
691 goto err0;
692
693 err = register_netdevice_notifier(&vlan_notifier_block);
694 if (err < 0)
695 goto err2;
696
697 err = vlan_gvrp_init();
698 if (err < 0)
699 goto err3;
700
701 err = vlan_mvrp_init();
702 if (err < 0)
703 goto err4;
704
705 err = vlan_netlink_init();
706 if (err < 0)
707 goto err5;
708
709 vlan_ioctl_set(vlan_ioctl_handler);
710 return 0;
711
712err5:
713 vlan_mvrp_uninit();
714err4:
715 vlan_gvrp_uninit();
716err3:
717 unregister_netdevice_notifier(&vlan_notifier_block);
718err2:
719 unregister_pernet_subsys(&vlan_net_ops);
720err0:
721 return err;
722}
723
724static void __exit vlan_cleanup_module(void)
725{
726 vlan_ioctl_set(NULL);
727
728 vlan_netlink_fini();
729
730 unregister_netdevice_notifier(&vlan_notifier_block);
731
732 unregister_pernet_subsys(&vlan_net_ops);
733 rcu_barrier(); /* Wait for completion of call_rcu()'s */
734
735 vlan_mvrp_uninit();
736 vlan_gvrp_uninit();
737}
738
739module_init(vlan_proto_init);
740module_exit(vlan_cleanup_module);
741
742MODULE_DESCRIPTION("802.1Q/802.1ad VLAN Protocol");
743MODULE_LICENSE("GPL");
744MODULE_VERSION(DRV_VERSION);
1/*
2 * INET 802.1Q VLAN
3 * Ethernet-type device handling.
4 *
5 * Authors: Ben Greear <greearb@candelatech.com>
6 * Please send support related email to: netdev@vger.kernel.org
7 * VLAN Home Page: http://www.candelatech.com/~greear/vlan.html
8 *
9 * Fixes:
10 * Fix for packet capture - Nick Eggleston <nick@dccinc.com>;
11 * Add HW acceleration hooks - David S. Miller <davem@redhat.com>;
12 * Correct all the locking - David S. Miller <davem@redhat.com>;
13 * Use hash table for VLAN groups - David S. Miller <davem@redhat.com>
14 *
15 * This program is free software; you can redistribute it and/or
16 * modify it under the terms of the GNU General Public License
17 * as published by the Free Software Foundation; either version
18 * 2 of the License, or (at your option) any later version.
19 */
20
21#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
22
23#include <linux/capability.h>
24#include <linux/module.h>
25#include <linux/netdevice.h>
26#include <linux/skbuff.h>
27#include <linux/slab.h>
28#include <linux/init.h>
29#include <linux/rculist.h>
30#include <net/p8022.h>
31#include <net/arp.h>
32#include <linux/rtnetlink.h>
33#include <linux/notifier.h>
34#include <net/rtnetlink.h>
35#include <net/net_namespace.h>
36#include <net/netns/generic.h>
37#include <asm/uaccess.h>
38
39#include <linux/if_vlan.h>
40#include "vlan.h"
41#include "vlanproc.h"
42
43#define DRV_VERSION "1.8"
44
45/* Global VLAN variables */
46
47int vlan_net_id __read_mostly;
48
49const char vlan_fullname[] = "802.1Q VLAN Support";
50const char vlan_version[] = DRV_VERSION;
51
52/* End of global variables definitions. */
53
54static int vlan_group_prealloc_vid(struct vlan_group *vg, u16 vlan_id)
55{
56 struct net_device **array;
57 unsigned int size;
58
59 ASSERT_RTNL();
60
61 array = vg->vlan_devices_arrays[vlan_id / VLAN_GROUP_ARRAY_PART_LEN];
62 if (array != NULL)
63 return 0;
64
65 size = sizeof(struct net_device *) * VLAN_GROUP_ARRAY_PART_LEN;
66 array = kzalloc(size, GFP_KERNEL);
67 if (array == NULL)
68 return -ENOBUFS;
69
70 vg->vlan_devices_arrays[vlan_id / VLAN_GROUP_ARRAY_PART_LEN] = array;
71 return 0;
72}
73
74void unregister_vlan_dev(struct net_device *dev, struct list_head *head)
75{
76 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
77 struct net_device *real_dev = vlan->real_dev;
78 struct vlan_info *vlan_info;
79 struct vlan_group *grp;
80 u16 vlan_id = vlan->vlan_id;
81
82 ASSERT_RTNL();
83
84 vlan_info = rtnl_dereference(real_dev->vlan_info);
85 BUG_ON(!vlan_info);
86
87 grp = &vlan_info->grp;
88
89 /* Take it out of our own structures, but be sure to interlock with
90 * HW accelerating devices or SW vlan input packet processing if
91 * VLAN is not 0 (leave it there for 802.1p).
92 */
93 if (vlan_id)
94 vlan_vid_del(real_dev, vlan_id);
95
96 grp->nr_vlan_devs--;
97
98 if (vlan->flags & VLAN_FLAG_GVRP)
99 vlan_gvrp_request_leave(dev);
100
101 vlan_group_set_device(grp, vlan_id, NULL);
102 /* Because unregister_netdevice_queue() makes sure at least one rcu
103 * grace period is respected before device freeing,
104 * we dont need to call synchronize_net() here.
105 */
106 unregister_netdevice_queue(dev, head);
107
108 if (grp->nr_vlan_devs == 0)
109 vlan_gvrp_uninit_applicant(real_dev);
110
111 /* Get rid of the vlan's reference to real_dev */
112 dev_put(real_dev);
113}
114
115int vlan_check_real_dev(struct net_device *real_dev, u16 vlan_id)
116{
117 const char *name = real_dev->name;
118 const struct net_device_ops *ops = real_dev->netdev_ops;
119
120 if (real_dev->features & NETIF_F_VLAN_CHALLENGED) {
121 pr_info("VLANs not supported on %s\n", name);
122 return -EOPNOTSUPP;
123 }
124
125 if ((real_dev->features & NETIF_F_HW_VLAN_FILTER) &&
126 (!ops->ndo_vlan_rx_add_vid || !ops->ndo_vlan_rx_kill_vid)) {
127 pr_info("Device %s has buggy VLAN hw accel\n", name);
128 return -EOPNOTSUPP;
129 }
130
131 if (vlan_find_dev(real_dev, vlan_id) != NULL)
132 return -EEXIST;
133
134 return 0;
135}
136
137int register_vlan_dev(struct net_device *dev)
138{
139 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
140 struct net_device *real_dev = vlan->real_dev;
141 u16 vlan_id = vlan->vlan_id;
142 struct vlan_info *vlan_info;
143 struct vlan_group *grp;
144 int err;
145
146 err = vlan_vid_add(real_dev, vlan_id);
147 if (err)
148 return err;
149
150 vlan_info = rtnl_dereference(real_dev->vlan_info);
151 /* vlan_info should be there now. vlan_vid_add took care of it */
152 BUG_ON(!vlan_info);
153
154 grp = &vlan_info->grp;
155 if (grp->nr_vlan_devs == 0) {
156 err = vlan_gvrp_init_applicant(real_dev);
157 if (err < 0)
158 goto out_vid_del;
159 }
160
161 err = vlan_group_prealloc_vid(grp, vlan_id);
162 if (err < 0)
163 goto out_uninit_applicant;
164
165 err = register_netdevice(dev);
166 if (err < 0)
167 goto out_uninit_applicant;
168
169 /* Account for reference in struct vlan_dev_priv */
170 dev_hold(real_dev);
171
172 netif_stacked_transfer_operstate(real_dev, dev);
173 linkwatch_fire_event(dev); /* _MUST_ call rfc2863_policy() */
174
175 /* So, got the sucker initialized, now lets place
176 * it into our local structure.
177 */
178 vlan_group_set_device(grp, vlan_id, dev);
179 grp->nr_vlan_devs++;
180
181 return 0;
182
183out_uninit_applicant:
184 if (grp->nr_vlan_devs == 0)
185 vlan_gvrp_uninit_applicant(real_dev);
186out_vid_del:
187 vlan_vid_del(real_dev, vlan_id);
188 return err;
189}
190
191/* Attach a VLAN device to a mac address (ie Ethernet Card).
192 * Returns 0 if the device was created or a negative error code otherwise.
193 */
194static int register_vlan_device(struct net_device *real_dev, u16 vlan_id)
195{
196 struct net_device *new_dev;
197 struct net *net = dev_net(real_dev);
198 struct vlan_net *vn = net_generic(net, vlan_net_id);
199 char name[IFNAMSIZ];
200 int err;
201
202 if (vlan_id >= VLAN_VID_MASK)
203 return -ERANGE;
204
205 err = vlan_check_real_dev(real_dev, vlan_id);
206 if (err < 0)
207 return err;
208
209 /* Gotta set up the fields for the device. */
210 switch (vn->name_type) {
211 case VLAN_NAME_TYPE_RAW_PLUS_VID:
212 /* name will look like: eth1.0005 */
213 snprintf(name, IFNAMSIZ, "%s.%.4i", real_dev->name, vlan_id);
214 break;
215 case VLAN_NAME_TYPE_PLUS_VID_NO_PAD:
216 /* Put our vlan.VID in the name.
217 * Name will look like: vlan5
218 */
219 snprintf(name, IFNAMSIZ, "vlan%i", vlan_id);
220 break;
221 case VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD:
222 /* Put our vlan.VID in the name.
223 * Name will look like: eth0.5
224 */
225 snprintf(name, IFNAMSIZ, "%s.%i", real_dev->name, vlan_id);
226 break;
227 case VLAN_NAME_TYPE_PLUS_VID:
228 /* Put our vlan.VID in the name.
229 * Name will look like: vlan0005
230 */
231 default:
232 snprintf(name, IFNAMSIZ, "vlan%.4i", vlan_id);
233 }
234
235 new_dev = alloc_netdev(sizeof(struct vlan_dev_priv), name, vlan_setup);
236
237 if (new_dev == NULL)
238 return -ENOBUFS;
239
240 dev_net_set(new_dev, net);
241 /* need 4 bytes for extra VLAN header info,
242 * hope the underlying device can handle it.
243 */
244 new_dev->mtu = real_dev->mtu;
245
246 vlan_dev_priv(new_dev)->vlan_id = vlan_id;
247 vlan_dev_priv(new_dev)->real_dev = real_dev;
248 vlan_dev_priv(new_dev)->dent = NULL;
249 vlan_dev_priv(new_dev)->flags = VLAN_FLAG_REORDER_HDR;
250
251 new_dev->rtnl_link_ops = &vlan_link_ops;
252 err = register_vlan_dev(new_dev);
253 if (err < 0)
254 goto out_free_newdev;
255
256 return 0;
257
258out_free_newdev:
259 free_netdev(new_dev);
260 return err;
261}
262
263static void vlan_sync_address(struct net_device *dev,
264 struct net_device *vlandev)
265{
266 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
267
268 /* May be called without an actual change */
269 if (ether_addr_equal(vlan->real_dev_addr, dev->dev_addr))
270 return;
271
272 /* vlan address was different from the old address and is equal to
273 * the new address */
274 if (!ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
275 ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
276 dev_uc_del(dev, vlandev->dev_addr);
277
278 /* vlan address was equal to the old address and is different from
279 * the new address */
280 if (ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
281 !ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
282 dev_uc_add(dev, vlandev->dev_addr);
283
284 memcpy(vlan->real_dev_addr, dev->dev_addr, ETH_ALEN);
285}
286
287static void vlan_transfer_features(struct net_device *dev,
288 struct net_device *vlandev)
289{
290 vlandev->gso_max_size = dev->gso_max_size;
291
292 if (dev->features & NETIF_F_HW_VLAN_TX)
293 vlandev->hard_header_len = dev->hard_header_len;
294 else
295 vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN;
296
297#if defined(CONFIG_FCOE) || defined(CONFIG_FCOE_MODULE)
298 vlandev->fcoe_ddp_xid = dev->fcoe_ddp_xid;
299#endif
300
301 netdev_update_features(vlandev);
302}
303
304static void __vlan_device_event(struct net_device *dev, unsigned long event)
305{
306 switch (event) {
307 case NETDEV_CHANGENAME:
308 vlan_proc_rem_dev(dev);
309 if (vlan_proc_add_dev(dev) < 0)
310 pr_warn("failed to change proc name for %s\n",
311 dev->name);
312 break;
313 case NETDEV_REGISTER:
314 if (vlan_proc_add_dev(dev) < 0)
315 pr_warn("failed to add proc entry for %s\n", dev->name);
316 break;
317 case NETDEV_UNREGISTER:
318 vlan_proc_rem_dev(dev);
319 break;
320 }
321}
322
323static int vlan_device_event(struct notifier_block *unused, unsigned long event,
324 void *ptr)
325{
326 struct net_device *dev = ptr;
327 struct vlan_group *grp;
328 struct vlan_info *vlan_info;
329 int i, flgs;
330 struct net_device *vlandev;
331 struct vlan_dev_priv *vlan;
332 LIST_HEAD(list);
333
334 if (is_vlan_dev(dev))
335 __vlan_device_event(dev, event);
336
337 if ((event == NETDEV_UP) &&
338 (dev->features & NETIF_F_HW_VLAN_FILTER)) {
339 pr_info("adding VLAN 0 to HW filter on device %s\n",
340 dev->name);
341 vlan_vid_add(dev, 0);
342 }
343
344 vlan_info = rtnl_dereference(dev->vlan_info);
345 if (!vlan_info)
346 goto out;
347 grp = &vlan_info->grp;
348
349 /* It is OK that we do not hold the group lock right now,
350 * as we run under the RTNL lock.
351 */
352
353 switch (event) {
354 case NETDEV_CHANGE:
355 /* Propagate real device state to vlan devices */
356 for (i = 0; i < VLAN_N_VID; i++) {
357 vlandev = vlan_group_get_device(grp, i);
358 if (!vlandev)
359 continue;
360
361 netif_stacked_transfer_operstate(dev, vlandev);
362 }
363 break;
364
365 case NETDEV_CHANGEADDR:
366 /* Adjust unicast filters on underlying device */
367 for (i = 0; i < VLAN_N_VID; i++) {
368 vlandev = vlan_group_get_device(grp, i);
369 if (!vlandev)
370 continue;
371
372 flgs = vlandev->flags;
373 if (!(flgs & IFF_UP))
374 continue;
375
376 vlan_sync_address(dev, vlandev);
377 }
378 break;
379
380 case NETDEV_CHANGEMTU:
381 for (i = 0; i < VLAN_N_VID; i++) {
382 vlandev = vlan_group_get_device(grp, i);
383 if (!vlandev)
384 continue;
385
386 if (vlandev->mtu <= dev->mtu)
387 continue;
388
389 dev_set_mtu(vlandev, dev->mtu);
390 }
391 break;
392
393 case NETDEV_FEAT_CHANGE:
394 /* Propagate device features to underlying device */
395 for (i = 0; i < VLAN_N_VID; i++) {
396 vlandev = vlan_group_get_device(grp, i);
397 if (!vlandev)
398 continue;
399
400 vlan_transfer_features(dev, vlandev);
401 }
402
403 break;
404
405 case NETDEV_DOWN:
406 if (dev->features & NETIF_F_HW_VLAN_FILTER)
407 vlan_vid_del(dev, 0);
408
409 /* Put all VLANs for this dev in the down state too. */
410 for (i = 0; i < VLAN_N_VID; i++) {
411 vlandev = vlan_group_get_device(grp, i);
412 if (!vlandev)
413 continue;
414
415 flgs = vlandev->flags;
416 if (!(flgs & IFF_UP))
417 continue;
418
419 vlan = vlan_dev_priv(vlandev);
420 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
421 dev_change_flags(vlandev, flgs & ~IFF_UP);
422 netif_stacked_transfer_operstate(dev, vlandev);
423 }
424 break;
425
426 case NETDEV_UP:
427 /* Put all VLANs for this dev in the up state too. */
428 for (i = 0; i < VLAN_N_VID; i++) {
429 vlandev = vlan_group_get_device(grp, i);
430 if (!vlandev)
431 continue;
432
433 flgs = vlandev->flags;
434 if (flgs & IFF_UP)
435 continue;
436
437 vlan = vlan_dev_priv(vlandev);
438 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
439 dev_change_flags(vlandev, flgs | IFF_UP);
440 netif_stacked_transfer_operstate(dev, vlandev);
441 }
442 break;
443
444 case NETDEV_UNREGISTER:
445 /* twiddle thumbs on netns device moves */
446 if (dev->reg_state != NETREG_UNREGISTERING)
447 break;
448
449 for (i = 0; i < VLAN_N_VID; i++) {
450 vlandev = vlan_group_get_device(grp, i);
451 if (!vlandev)
452 continue;
453
454 /* removal of last vid destroys vlan_info, abort
455 * afterwards */
456 if (vlan_info->nr_vids == 1)
457 i = VLAN_N_VID;
458
459 unregister_vlan_dev(vlandev, &list);
460 }
461 unregister_netdevice_many(&list);
462 break;
463
464 case NETDEV_PRE_TYPE_CHANGE:
465 /* Forbid underlaying device to change its type. */
466 return NOTIFY_BAD;
467
468 case NETDEV_NOTIFY_PEERS:
469 case NETDEV_BONDING_FAILOVER:
470 /* Propagate to vlan devices */
471 for (i = 0; i < VLAN_N_VID; i++) {
472 vlandev = vlan_group_get_device(grp, i);
473 if (!vlandev)
474 continue;
475
476 call_netdevice_notifiers(event, vlandev);
477 }
478 break;
479 }
480
481out:
482 return NOTIFY_DONE;
483}
484
485static struct notifier_block vlan_notifier_block __read_mostly = {
486 .notifier_call = vlan_device_event,
487};
488
489/*
490 * VLAN IOCTL handler.
491 * o execute requested action or pass command to the device driver
492 * arg is really a struct vlan_ioctl_args __user *.
493 */
494static int vlan_ioctl_handler(struct net *net, void __user *arg)
495{
496 int err;
497 struct vlan_ioctl_args args;
498 struct net_device *dev = NULL;
499
500 if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args)))
501 return -EFAULT;
502
503 /* Null terminate this sucker, just in case. */
504 args.device1[23] = 0;
505 args.u.device2[23] = 0;
506
507 rtnl_lock();
508
509 switch (args.cmd) {
510 case SET_VLAN_INGRESS_PRIORITY_CMD:
511 case SET_VLAN_EGRESS_PRIORITY_CMD:
512 case SET_VLAN_FLAG_CMD:
513 case ADD_VLAN_CMD:
514 case DEL_VLAN_CMD:
515 case GET_VLAN_REALDEV_NAME_CMD:
516 case GET_VLAN_VID_CMD:
517 err = -ENODEV;
518 dev = __dev_get_by_name(net, args.device1);
519 if (!dev)
520 goto out;
521
522 err = -EINVAL;
523 if (args.cmd != ADD_VLAN_CMD && !is_vlan_dev(dev))
524 goto out;
525 }
526
527 switch (args.cmd) {
528 case SET_VLAN_INGRESS_PRIORITY_CMD:
529 err = -EPERM;
530 if (!capable(CAP_NET_ADMIN))
531 break;
532 vlan_dev_set_ingress_priority(dev,
533 args.u.skb_priority,
534 args.vlan_qos);
535 err = 0;
536 break;
537
538 case SET_VLAN_EGRESS_PRIORITY_CMD:
539 err = -EPERM;
540 if (!capable(CAP_NET_ADMIN))
541 break;
542 err = vlan_dev_set_egress_priority(dev,
543 args.u.skb_priority,
544 args.vlan_qos);
545 break;
546
547 case SET_VLAN_FLAG_CMD:
548 err = -EPERM;
549 if (!capable(CAP_NET_ADMIN))
550 break;
551 err = vlan_dev_change_flags(dev,
552 args.vlan_qos ? args.u.flag : 0,
553 args.u.flag);
554 break;
555
556 case SET_VLAN_NAME_TYPE_CMD:
557 err = -EPERM;
558 if (!capable(CAP_NET_ADMIN))
559 break;
560 if ((args.u.name_type >= 0) &&
561 (args.u.name_type < VLAN_NAME_TYPE_HIGHEST)) {
562 struct vlan_net *vn;
563
564 vn = net_generic(net, vlan_net_id);
565 vn->name_type = args.u.name_type;
566 err = 0;
567 } else {
568 err = -EINVAL;
569 }
570 break;
571
572 case ADD_VLAN_CMD:
573 err = -EPERM;
574 if (!capable(CAP_NET_ADMIN))
575 break;
576 err = register_vlan_device(dev, args.u.VID);
577 break;
578
579 case DEL_VLAN_CMD:
580 err = -EPERM;
581 if (!capable(CAP_NET_ADMIN))
582 break;
583 unregister_vlan_dev(dev, NULL);
584 err = 0;
585 break;
586
587 case GET_VLAN_REALDEV_NAME_CMD:
588 err = 0;
589 vlan_dev_get_realdev_name(dev, args.u.device2);
590 if (copy_to_user(arg, &args,
591 sizeof(struct vlan_ioctl_args)))
592 err = -EFAULT;
593 break;
594
595 case GET_VLAN_VID_CMD:
596 err = 0;
597 args.u.VID = vlan_dev_vlan_id(dev);
598 if (copy_to_user(arg, &args,
599 sizeof(struct vlan_ioctl_args)))
600 err = -EFAULT;
601 break;
602
603 default:
604 err = -EOPNOTSUPP;
605 break;
606 }
607out:
608 rtnl_unlock();
609 return err;
610}
611
612static int __net_init vlan_init_net(struct net *net)
613{
614 struct vlan_net *vn = net_generic(net, vlan_net_id);
615 int err;
616
617 vn->name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD;
618
619 err = vlan_proc_init(net);
620
621 return err;
622}
623
624static void __net_exit vlan_exit_net(struct net *net)
625{
626 vlan_proc_cleanup(net);
627}
628
629static struct pernet_operations vlan_net_ops = {
630 .init = vlan_init_net,
631 .exit = vlan_exit_net,
632 .id = &vlan_net_id,
633 .size = sizeof(struct vlan_net),
634};
635
636static int __init vlan_proto_init(void)
637{
638 int err;
639
640 pr_info("%s v%s\n", vlan_fullname, vlan_version);
641
642 err = register_pernet_subsys(&vlan_net_ops);
643 if (err < 0)
644 goto err0;
645
646 err = register_netdevice_notifier(&vlan_notifier_block);
647 if (err < 0)
648 goto err2;
649
650 err = vlan_gvrp_init();
651 if (err < 0)
652 goto err3;
653
654 err = vlan_netlink_init();
655 if (err < 0)
656 goto err4;
657
658 vlan_ioctl_set(vlan_ioctl_handler);
659 return 0;
660
661err4:
662 vlan_gvrp_uninit();
663err3:
664 unregister_netdevice_notifier(&vlan_notifier_block);
665err2:
666 unregister_pernet_subsys(&vlan_net_ops);
667err0:
668 return err;
669}
670
671static void __exit vlan_cleanup_module(void)
672{
673 vlan_ioctl_set(NULL);
674 vlan_netlink_fini();
675
676 unregister_netdevice_notifier(&vlan_notifier_block);
677
678 unregister_pernet_subsys(&vlan_net_ops);
679 rcu_barrier(); /* Wait for completion of call_rcu()'s */
680
681 vlan_gvrp_uninit();
682}
683
684module_init(vlan_proto_init);
685module_exit(vlan_cleanup_module);
686
687MODULE_LICENSE("GPL");
688MODULE_VERSION(DRV_VERSION);