Loading...
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Bridge netlink control interface
4 *
5 * Authors:
6 * Stephen Hemminger <shemminger@osdl.org>
7 */
8
9#include <linux/kernel.h>
10#include <linux/slab.h>
11#include <linux/etherdevice.h>
12#include <net/rtnetlink.h>
13#include <net/net_namespace.h>
14#include <net/sock.h>
15#include <uapi/linux/if_bridge.h>
16
17#include "br_private.h"
18#include "br_private_stp.h"
19#include "br_private_cfm.h"
20#include "br_private_tunnel.h"
21#include "br_private_mcast_eht.h"
22
23static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
24 u32 filter_mask)
25{
26 struct net_bridge_vlan *v;
27 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
28 u16 flags, pvid;
29 int num_vlans = 0;
30
31 if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
32 return 0;
33
34 pvid = br_get_pvid(vg);
35 /* Count number of vlan infos */
36 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
37 flags = 0;
38 /* only a context, bridge vlan not activated */
39 if (!br_vlan_should_use(v))
40 continue;
41 if (v->vid == pvid)
42 flags |= BRIDGE_VLAN_INFO_PVID;
43
44 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
45 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
46
47 if (vid_range_start == 0) {
48 goto initvars;
49 } else if ((v->vid - vid_range_end) == 1 &&
50 flags == vid_range_flags) {
51 vid_range_end = v->vid;
52 continue;
53 } else {
54 if ((vid_range_end - vid_range_start) > 0)
55 num_vlans += 2;
56 else
57 num_vlans += 1;
58 }
59initvars:
60 vid_range_start = v->vid;
61 vid_range_end = v->vid;
62 vid_range_flags = flags;
63 }
64
65 if (vid_range_start != 0) {
66 if ((vid_range_end - vid_range_start) > 0)
67 num_vlans += 2;
68 else
69 num_vlans += 1;
70 }
71
72 return num_vlans;
73}
74
75static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
76 u32 filter_mask)
77{
78 int num_vlans;
79
80 if (!vg)
81 return 0;
82
83 if (filter_mask & RTEXT_FILTER_BRVLAN)
84 return vg->num_vlans;
85
86 rcu_read_lock();
87 num_vlans = __get_num_vlan_infos(vg, filter_mask);
88 rcu_read_unlock();
89
90 return num_vlans;
91}
92
93static size_t br_get_link_af_size_filtered(const struct net_device *dev,
94 u32 filter_mask)
95{
96 struct net_bridge_vlan_group *vg = NULL;
97 struct net_bridge_port *p = NULL;
98 struct net_bridge *br = NULL;
99 u32 num_cfm_peer_mep_infos;
100 u32 num_cfm_mep_infos;
101 size_t vinfo_sz = 0;
102 int num_vlan_infos;
103
104 rcu_read_lock();
105 if (netif_is_bridge_port(dev)) {
106 p = br_port_get_check_rcu(dev);
107 if (p)
108 vg = nbp_vlan_group_rcu(p);
109 } else if (netif_is_bridge_master(dev)) {
110 br = netdev_priv(dev);
111 vg = br_vlan_group_rcu(br);
112 }
113 num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
114 rcu_read_unlock();
115
116 if (p && (p->flags & BR_VLAN_TUNNEL))
117 vinfo_sz += br_get_vlan_tunnel_info_size(vg);
118
119 /* Each VLAN is returned in bridge_vlan_info along with flags */
120 vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
121
122 if (p && vg && (filter_mask & RTEXT_FILTER_MST))
123 vinfo_sz += br_mst_info_size(vg);
124
125 if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
126 return vinfo_sz;
127
128 if (!br)
129 return vinfo_sz;
130
131 /* CFM status info must be added */
132 br_cfm_mep_count(br, &num_cfm_mep_infos);
133 br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
134
135 vinfo_sz += nla_total_size(0); /* IFLA_BRIDGE_CFM */
136 /* For each status struct the MEP instance (u32) is added */
137 /* MEP instance (u32) + br_cfm_mep_status */
138 vinfo_sz += num_cfm_mep_infos *
139 /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
140 (nla_total_size(sizeof(u32))
141 /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
142 + nla_total_size(sizeof(u32))
143 /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
144 + nla_total_size(sizeof(u32))
145 /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
146 + nla_total_size(sizeof(u32)));
147 /* MEP instance (u32) + br_cfm_cc_peer_status */
148 vinfo_sz += num_cfm_peer_mep_infos *
149 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
150 (nla_total_size(sizeof(u32))
151 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
152 + nla_total_size(sizeof(u32))
153 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
154 + nla_total_size(sizeof(u32))
155 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
156 + nla_total_size(sizeof(u32))
157 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
158 + nla_total_size(sizeof(u8))
159 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
160 + nla_total_size(sizeof(u8))
161 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
162 + nla_total_size(sizeof(u32))
163 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
164 + nla_total_size(sizeof(u32))
165 /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
166 + nla_total_size(sizeof(u32)));
167
168 return vinfo_sz;
169}
170
171static inline size_t br_port_info_size(void)
172{
173 return nla_total_size(1) /* IFLA_BRPORT_STATE */
174 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */
175 + nla_total_size(4) /* IFLA_BRPORT_COST */
176 + nla_total_size(1) /* IFLA_BRPORT_MODE */
177 + nla_total_size(1) /* IFLA_BRPORT_GUARD */
178 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */
179 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */
180 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */
181 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */
182 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */
183 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */
184 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */
185 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */
186 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */
187 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */
188 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */
189 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */
190 + nla_total_size(1) /* IFLA_BRPORT_LOCKED */
191 + nla_total_size(1) /* IFLA_BRPORT_MAB */
192 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */
193 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */
194 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */
195 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_PORT */
196 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_COST */
197 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_ID */
198 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_NO */
199 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
200 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_CONFIG_PENDING */
201 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
202 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
203 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
204#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
205 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MULTICAST_ROUTER */
206 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_N_GROUPS */
207 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_MAX_GROUPS */
208#endif
209 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_GROUP_FWD_MASK */
210 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_RING_OPEN */
211 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_IN_OPEN */
212 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
213 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
214 + nla_total_size(sizeof(u32)) /* IFLA_BRPORT_BACKUP_NHID */
215 + 0;
216}
217
218static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
219{
220 return NLMSG_ALIGN(sizeof(struct ifinfomsg))
221 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
222 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
223 + nla_total_size(4) /* IFLA_MASTER */
224 + nla_total_size(4) /* IFLA_MTU */
225 + nla_total_size(4) /* IFLA_LINK */
226 + nla_total_size(1) /* IFLA_OPERSTATE */
227 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
228 + nla_total_size(br_get_link_af_size_filtered(dev,
229 filter_mask)) /* IFLA_AF_SPEC */
230 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
231}
232
233static int br_port_fill_attrs(struct sk_buff *skb,
234 const struct net_bridge_port *p)
235{
236 u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
237 struct net_bridge_port *backup_p;
238 u64 timerval;
239
240 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
241 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
242 nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
243 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
244 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
245 nla_put_u8(skb, IFLA_BRPORT_PROTECT,
246 !!(p->flags & BR_ROOT_BLOCK)) ||
247 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
248 !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
249 nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
250 !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
251 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
252 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
253 !!(p->flags & BR_FLOOD)) ||
254 nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
255 !!(p->flags & BR_MCAST_FLOOD)) ||
256 nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
257 !!(p->flags & BR_BCAST_FLOOD)) ||
258 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
259 nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
260 !!(p->flags & BR_PROXYARP_WIFI)) ||
261 nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
262 &p->designated_root) ||
263 nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
264 &p->designated_bridge) ||
265 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
266 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
267 nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
268 nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
269 nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
270 p->topology_change_ack) ||
271 nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
272 nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
273 BR_VLAN_TUNNEL)) ||
274 nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
275 nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
276 !!(p->flags & BR_NEIGH_SUPPRESS)) ||
277 nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
278 BR_MRP_LOST_CONT)) ||
279 nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
280 !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
281 nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)) ||
282 nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(p->flags & BR_PORT_LOCKED)) ||
283 nla_put_u8(skb, IFLA_BRPORT_MAB, !!(p->flags & BR_PORT_MAB)) ||
284 nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
285 !!(p->flags & BR_NEIGH_VLAN_SUPPRESS)))
286 return -EMSGSIZE;
287
288 timerval = br_timer_value(&p->message_age_timer);
289 if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
290 IFLA_BRPORT_PAD))
291 return -EMSGSIZE;
292 timerval = br_timer_value(&p->forward_delay_timer);
293 if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
294 IFLA_BRPORT_PAD))
295 return -EMSGSIZE;
296 timerval = br_timer_value(&p->hold_timer);
297 if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
298 IFLA_BRPORT_PAD))
299 return -EMSGSIZE;
300
301#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
302 if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
303 p->multicast_ctx.multicast_router) ||
304 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
305 p->multicast_eht_hosts_limit) ||
306 nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
307 p->multicast_eht_hosts_cnt) ||
308 nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS,
309 br_multicast_ngroups_get(&p->multicast_ctx)) ||
310 nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS,
311 br_multicast_ngroups_get_max(&p->multicast_ctx)))
312 return -EMSGSIZE;
313#endif
314
315 /* we might be called only with br->lock */
316 rcu_read_lock();
317 backup_p = rcu_dereference(p->backup_port);
318 if (backup_p)
319 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
320 backup_p->dev->ifindex);
321 rcu_read_unlock();
322
323 if (p->backup_nhid &&
324 nla_put_u32(skb, IFLA_BRPORT_BACKUP_NHID, p->backup_nhid))
325 return -EMSGSIZE;
326
327 return 0;
328}
329
330static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
331 u16 vid_end, u16 flags)
332{
333 struct bridge_vlan_info vinfo;
334
335 if ((vid_end - vid_start) > 0) {
336 /* add range to skb */
337 vinfo.vid = vid_start;
338 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
339 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
340 sizeof(vinfo), &vinfo))
341 goto nla_put_failure;
342
343 vinfo.vid = vid_end;
344 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
345 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
346 sizeof(vinfo), &vinfo))
347 goto nla_put_failure;
348 } else {
349 vinfo.vid = vid_start;
350 vinfo.flags = flags;
351 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
352 sizeof(vinfo), &vinfo))
353 goto nla_put_failure;
354 }
355
356 return 0;
357
358nla_put_failure:
359 return -EMSGSIZE;
360}
361
362static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
363 struct net_bridge_vlan_group *vg)
364{
365 struct net_bridge_vlan *v;
366 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
367 u16 flags, pvid;
368 int err = 0;
369
370 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
371 * and mark vlan info with begin and end flags
372 * if vlaninfo represents a range
373 */
374 pvid = br_get_pvid(vg);
375 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
376 flags = 0;
377 if (!br_vlan_should_use(v))
378 continue;
379 if (v->vid == pvid)
380 flags |= BRIDGE_VLAN_INFO_PVID;
381
382 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
383 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
384
385 if (vid_range_start == 0) {
386 goto initvars;
387 } else if ((v->vid - vid_range_end) == 1 &&
388 flags == vid_range_flags) {
389 vid_range_end = v->vid;
390 continue;
391 } else {
392 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
393 vid_range_end,
394 vid_range_flags);
395 if (err)
396 return err;
397 }
398
399initvars:
400 vid_range_start = v->vid;
401 vid_range_end = v->vid;
402 vid_range_flags = flags;
403 }
404
405 if (vid_range_start != 0) {
406 /* Call it once more to send any left over vlans */
407 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
408 vid_range_end,
409 vid_range_flags);
410 if (err)
411 return err;
412 }
413
414 return 0;
415}
416
417static int br_fill_ifvlaninfo(struct sk_buff *skb,
418 struct net_bridge_vlan_group *vg)
419{
420 struct bridge_vlan_info vinfo;
421 struct net_bridge_vlan *v;
422 u16 pvid;
423
424 pvid = br_get_pvid(vg);
425 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
426 if (!br_vlan_should_use(v))
427 continue;
428
429 vinfo.vid = v->vid;
430 vinfo.flags = 0;
431 if (v->vid == pvid)
432 vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
433
434 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
435 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
436
437 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
438 sizeof(vinfo), &vinfo))
439 goto nla_put_failure;
440 }
441
442 return 0;
443
444nla_put_failure:
445 return -EMSGSIZE;
446}
447
448/*
449 * Create one netlink message for one interface
450 * Contains port and master info as well as carrier and bridge state.
451 */
452static int br_fill_ifinfo(struct sk_buff *skb,
453 const struct net_bridge_port *port,
454 u32 pid, u32 seq, int event, unsigned int flags,
455 u32 filter_mask, const struct net_device *dev,
456 bool getlink)
457{
458 u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
459 struct nlattr *af = NULL;
460 struct net_bridge *br;
461 struct ifinfomsg *hdr;
462 struct nlmsghdr *nlh;
463
464 if (port)
465 br = port->br;
466 else
467 br = netdev_priv(dev);
468
469 br_debug(br, "br_fill_info event %d port %s master %s\n",
470 event, dev->name, br->dev->name);
471
472 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
473 if (nlh == NULL)
474 return -EMSGSIZE;
475
476 hdr = nlmsg_data(nlh);
477 hdr->ifi_family = AF_BRIDGE;
478 hdr->__ifi_pad = 0;
479 hdr->ifi_type = dev->type;
480 hdr->ifi_index = dev->ifindex;
481 hdr->ifi_flags = dev_get_flags(dev);
482 hdr->ifi_change = 0;
483
484 if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
485 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
486 nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
487 nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
488 (dev->addr_len &&
489 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
490 (dev->ifindex != dev_get_iflink(dev) &&
491 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
492 goto nla_put_failure;
493
494 if (event == RTM_NEWLINK && port) {
495 struct nlattr *nest;
496
497 nest = nla_nest_start(skb, IFLA_PROTINFO);
498 if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
499 goto nla_put_failure;
500 nla_nest_end(skb, nest);
501 }
502
503 if (filter_mask & (RTEXT_FILTER_BRVLAN |
504 RTEXT_FILTER_BRVLAN_COMPRESSED |
505 RTEXT_FILTER_MRP |
506 RTEXT_FILTER_CFM_CONFIG |
507 RTEXT_FILTER_CFM_STATUS |
508 RTEXT_FILTER_MST)) {
509 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
510 if (!af)
511 goto nla_put_failure;
512 }
513
514 /* Check if the VID information is requested */
515 if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
516 (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
517 struct net_bridge_vlan_group *vg;
518 int err;
519
520 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
521 rcu_read_lock();
522 if (port)
523 vg = nbp_vlan_group_rcu(port);
524 else
525 vg = br_vlan_group_rcu(br);
526
527 if (!vg || !vg->num_vlans) {
528 rcu_read_unlock();
529 goto done;
530 }
531 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
532 err = br_fill_ifvlaninfo_compressed(skb, vg);
533 else
534 err = br_fill_ifvlaninfo(skb, vg);
535
536 if (port && (port->flags & BR_VLAN_TUNNEL))
537 err = br_fill_vlan_tunnel_info(skb, vg);
538 rcu_read_unlock();
539 if (err)
540 goto nla_put_failure;
541 }
542
543 if (filter_mask & RTEXT_FILTER_MRP) {
544 int err;
545
546 if (!br_mrp_enabled(br) || port)
547 goto done;
548
549 rcu_read_lock();
550 err = br_mrp_fill_info(skb, br);
551 rcu_read_unlock();
552
553 if (err)
554 goto nla_put_failure;
555 }
556
557 if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
558 struct nlattr *cfm_nest = NULL;
559 int err;
560
561 if (!br_cfm_created(br) || port)
562 goto done;
563
564 cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
565 if (!cfm_nest)
566 goto nla_put_failure;
567
568 if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
569 rcu_read_lock();
570 err = br_cfm_config_fill_info(skb, br);
571 rcu_read_unlock();
572 if (err)
573 goto nla_put_failure;
574 }
575
576 if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
577 rcu_read_lock();
578 err = br_cfm_status_fill_info(skb, br, getlink);
579 rcu_read_unlock();
580 if (err)
581 goto nla_put_failure;
582 }
583
584 nla_nest_end(skb, cfm_nest);
585 }
586
587 if ((filter_mask & RTEXT_FILTER_MST) &&
588 br_opt_get(br, BROPT_MST_ENABLED) && port) {
589 const struct net_bridge_vlan_group *vg = nbp_vlan_group(port);
590 struct nlattr *mst_nest;
591 int err;
592
593 if (!vg || !vg->num_vlans)
594 goto done;
595
596 mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST);
597 if (!mst_nest)
598 goto nla_put_failure;
599
600 err = br_mst_fill_info(skb, vg);
601 if (err)
602 goto nla_put_failure;
603
604 nla_nest_end(skb, mst_nest);
605 }
606
607done:
608 if (af) {
609 if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0))
610 nla_nest_end(skb, af);
611 else
612 nla_nest_cancel(skb, af);
613 }
614
615 nlmsg_end(skb, nlh);
616 return 0;
617
618nla_put_failure:
619 nlmsg_cancel(skb, nlh);
620 return -EMSGSIZE;
621}
622
623void br_info_notify(int event, const struct net_bridge *br,
624 const struct net_bridge_port *port, u32 filter)
625{
626 struct net_device *dev;
627 struct sk_buff *skb;
628 int err = -ENOBUFS;
629 struct net *net;
630 u16 port_no = 0;
631
632 if (WARN_ON(!port && !br))
633 return;
634
635 if (port) {
636 dev = port->dev;
637 br = port->br;
638 port_no = port->port_no;
639 } else {
640 dev = br->dev;
641 }
642
643 net = dev_net(dev);
644 br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
645
646 skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
647 if (skb == NULL)
648 goto errout;
649
650 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
651 if (err < 0) {
652 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
653 WARN_ON(err == -EMSGSIZE);
654 kfree_skb(skb);
655 goto errout;
656 }
657 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
658 return;
659errout:
660 rtnl_set_sk_err(net, RTNLGRP_LINK, err);
661}
662
663/* Notify listeners of a change in bridge or port information */
664void br_ifinfo_notify(int event, const struct net_bridge *br,
665 const struct net_bridge_port *port)
666{
667 u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
668
669 return br_info_notify(event, br, port, filter);
670}
671
672/*
673 * Dump information about all ports, in response to GETLINK
674 */
675int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
676 struct net_device *dev, u32 filter_mask, int nlflags)
677{
678 struct net_bridge_port *port = br_port_get_rtnl(dev);
679
680 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
681 !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
682 !(filter_mask & RTEXT_FILTER_MRP) &&
683 !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
684 !(filter_mask & RTEXT_FILTER_CFM_STATUS))
685 return 0;
686
687 return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
688 filter_mask, dev, true);
689}
690
691static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
692 int cmd, struct bridge_vlan_info *vinfo, bool *changed,
693 struct netlink_ext_ack *extack)
694{
695 bool curr_change;
696 int err = 0;
697
698 switch (cmd) {
699 case RTM_SETLINK:
700 if (p) {
701 /* if the MASTER flag is set this will act on the global
702 * per-VLAN entry as well
703 */
704 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
705 &curr_change, extack);
706 } else {
707 vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
708 err = br_vlan_add(br, vinfo->vid, vinfo->flags,
709 &curr_change, extack);
710 }
711 if (curr_change)
712 *changed = true;
713 break;
714
715 case RTM_DELLINK:
716 if (p) {
717 if (!nbp_vlan_delete(p, vinfo->vid))
718 *changed = true;
719
720 if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
721 !br_vlan_delete(p->br, vinfo->vid))
722 *changed = true;
723 } else if (!br_vlan_delete(br, vinfo->vid)) {
724 *changed = true;
725 }
726 break;
727 }
728
729 return err;
730}
731
732int br_process_vlan_info(struct net_bridge *br,
733 struct net_bridge_port *p, int cmd,
734 struct bridge_vlan_info *vinfo_curr,
735 struct bridge_vlan_info **vinfo_last,
736 bool *changed,
737 struct netlink_ext_ack *extack)
738{
739 int err, rtm_cmd;
740
741 if (!br_vlan_valid_id(vinfo_curr->vid, extack))
742 return -EINVAL;
743
744 /* needed for vlan-only NEWVLAN/DELVLAN notifications */
745 rtm_cmd = br_afspec_cmd_to_rtm(cmd);
746
747 if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
748 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
749 return -EINVAL;
750 *vinfo_last = vinfo_curr;
751 return 0;
752 }
753
754 if (*vinfo_last) {
755 struct bridge_vlan_info tmp_vinfo;
756 int v, v_change_start = 0;
757
758 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
759 return -EINVAL;
760
761 memcpy(&tmp_vinfo, *vinfo_last,
762 sizeof(struct bridge_vlan_info));
763 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
764 bool curr_change = false;
765
766 tmp_vinfo.vid = v;
767 err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
768 extack);
769 if (err)
770 break;
771 if (curr_change) {
772 *changed = curr_change;
773 if (!v_change_start)
774 v_change_start = v;
775 } else {
776 /* nothing to notify yet */
777 if (!v_change_start)
778 continue;
779 br_vlan_notify(br, p, v_change_start,
780 v - 1, rtm_cmd);
781 v_change_start = 0;
782 }
783 cond_resched();
784 }
785 /* v_change_start is set only if the last/whole range changed */
786 if (v_change_start)
787 br_vlan_notify(br, p, v_change_start,
788 v - 1, rtm_cmd);
789
790 *vinfo_last = NULL;
791
792 return err;
793 }
794
795 err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
796 if (*changed)
797 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
798
799 return err;
800}
801
802static int br_afspec(struct net_bridge *br,
803 struct net_bridge_port *p,
804 struct nlattr *af_spec,
805 int cmd, bool *changed,
806 struct netlink_ext_ack *extack)
807{
808 struct bridge_vlan_info *vinfo_curr = NULL;
809 struct bridge_vlan_info *vinfo_last = NULL;
810 struct nlattr *attr;
811 struct vtunnel_info tinfo_last = {};
812 struct vtunnel_info tinfo_curr = {};
813 int err = 0, rem;
814
815 nla_for_each_nested(attr, af_spec, rem) {
816 err = 0;
817 switch (nla_type(attr)) {
818 case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
819 if (!p || !(p->flags & BR_VLAN_TUNNEL))
820 return -EINVAL;
821 err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
822 if (err)
823 return err;
824 err = br_process_vlan_tunnel_info(br, p, cmd,
825 &tinfo_curr,
826 &tinfo_last,
827 changed);
828 if (err)
829 return err;
830 break;
831 case IFLA_BRIDGE_VLAN_INFO:
832 if (nla_len(attr) != sizeof(struct bridge_vlan_info))
833 return -EINVAL;
834 vinfo_curr = nla_data(attr);
835 err = br_process_vlan_info(br, p, cmd, vinfo_curr,
836 &vinfo_last, changed,
837 extack);
838 if (err)
839 return err;
840 break;
841 case IFLA_BRIDGE_MRP:
842 err = br_mrp_parse(br, p, attr, cmd, extack);
843 if (err)
844 return err;
845 break;
846 case IFLA_BRIDGE_CFM:
847 err = br_cfm_parse(br, p, attr, cmd, extack);
848 if (err)
849 return err;
850 break;
851 case IFLA_BRIDGE_MST:
852 if (!p) {
853 NL_SET_ERR_MSG(extack,
854 "MST states can only be set on bridge ports");
855 return -EINVAL;
856 }
857
858 if (cmd != RTM_SETLINK) {
859 NL_SET_ERR_MSG(extack,
860 "MST states can only be set through RTM_SETLINK");
861 return -EINVAL;
862 }
863
864 err = br_mst_process(p, attr, extack);
865 if (err)
866 return err;
867 break;
868 }
869 }
870
871 return err;
872}
873
874static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
875 [IFLA_BRPORT_UNSPEC] = { .strict_start_type =
876 IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 },
877 [IFLA_BRPORT_STATE] = { .type = NLA_U8 },
878 [IFLA_BRPORT_COST] = { .type = NLA_U32 },
879 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 },
880 [IFLA_BRPORT_MODE] = { .type = NLA_U8 },
881 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 },
882 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 },
883 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
884 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 },
885 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
886 [IFLA_BRPORT_PROXYARP] = { .type = NLA_U8 },
887 [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
888 [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
889 [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
890 [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
891 [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
892 [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
893 [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
894 [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
895 [IFLA_BRPORT_ISOLATED] = { .type = NLA_U8 },
896 [IFLA_BRPORT_LOCKED] = { .type = NLA_U8 },
897 [IFLA_BRPORT_MAB] = { .type = NLA_U8 },
898 [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
899 [IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
900 [IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT },
901 [IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 },
902 [IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1),
903 [IFLA_BRPORT_BACKUP_NHID] = { .type = NLA_U32 },
904};
905
906/* Change the state of the port and notify spanning tree */
907static int br_set_port_state(struct net_bridge_port *p, u8 state)
908{
909 if (state > BR_STATE_BLOCKING)
910 return -EINVAL;
911
912 /* if kernel STP is running, don't allow changes */
913 if (p->br->stp_enabled == BR_KERNEL_STP)
914 return -EBUSY;
915
916 /* if device is not up, change is not allowed
917 * if link is not present, only allowable state is disabled
918 */
919 if (!netif_running(p->dev) ||
920 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
921 return -ENETDOWN;
922
923 br_set_state(p, state);
924 br_port_state_selection(p->br);
925 return 0;
926}
927
928/* Set/clear or port flags based on attribute */
929static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
930 int attrtype, unsigned long mask)
931{
932 if (!tb[attrtype])
933 return;
934
935 if (nla_get_u8(tb[attrtype]))
936 p->flags |= mask;
937 else
938 p->flags &= ~mask;
939}
940
941/* Process bridge protocol info on port */
942static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
943 struct netlink_ext_ack *extack)
944{
945 unsigned long old_flags, changed_mask;
946 bool br_vlan_tunnel_old;
947 int err;
948
949 old_flags = p->flags;
950 br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
951
952 br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
953 br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
954 br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
955 BR_MULTICAST_FAST_LEAVE);
956 br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
957 br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
958 br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
959 br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
960 br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
961 BR_MULTICAST_TO_UNICAST);
962 br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
963 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
964 br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
965 br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
966 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
967 br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
968 br_set_port_flag(p, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED);
969 br_set_port_flag(p, tb, IFLA_BRPORT_MAB, BR_PORT_MAB);
970 br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
971 BR_NEIGH_VLAN_SUPPRESS);
972
973 if ((p->flags & BR_PORT_MAB) &&
974 (!(p->flags & BR_PORT_LOCKED) || !(p->flags & BR_LEARNING))) {
975 NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled");
976 p->flags = old_flags;
977 return -EINVAL;
978 } else if (!(p->flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) {
979 struct net_bridge_fdb_flush_desc desc = {
980 .flags = BIT(BR_FDB_LOCKED),
981 .flags_mask = BIT(BR_FDB_LOCKED),
982 .port_ifindex = p->dev->ifindex,
983 };
984
985 br_fdb_flush(p->br, &desc);
986 }
987
988 changed_mask = old_flags ^ p->flags;
989
990 err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack);
991 if (err) {
992 p->flags = old_flags;
993 return err;
994 }
995
996 if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
997 nbp_vlan_tunnel_info_flush(p);
998
999 br_port_flags_change(p, changed_mask);
1000
1001 if (tb[IFLA_BRPORT_COST]) {
1002 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
1003 if (err)
1004 return err;
1005 }
1006
1007 if (tb[IFLA_BRPORT_PRIORITY]) {
1008 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
1009 if (err)
1010 return err;
1011 }
1012
1013 if (tb[IFLA_BRPORT_STATE]) {
1014 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
1015 if (err)
1016 return err;
1017 }
1018
1019 if (tb[IFLA_BRPORT_FLUSH])
1020 br_fdb_delete_by_port(p->br, p, 0, 0);
1021
1022#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1023 if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
1024 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
1025
1026 err = br_multicast_set_port_router(&p->multicast_ctx,
1027 mcast_router);
1028 if (err)
1029 return err;
1030 }
1031
1032 if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
1033 u32 hlimit;
1034
1035 hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
1036 err = br_multicast_eht_set_hosts_limit(p, hlimit);
1037 if (err)
1038 return err;
1039 }
1040
1041 if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) {
1042 u32 max_groups;
1043
1044 max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]);
1045 br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups);
1046 }
1047#endif
1048
1049 if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
1050 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
1051
1052 if (fwd_mask & BR_GROUPFWD_MACPAUSE)
1053 return -EINVAL;
1054 p->group_fwd_mask = fwd_mask;
1055 }
1056
1057 if (tb[IFLA_BRPORT_BACKUP_PORT]) {
1058 struct net_device *backup_dev = NULL;
1059 u32 backup_ifindex;
1060
1061 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
1062 if (backup_ifindex) {
1063 backup_dev = __dev_get_by_index(dev_net(p->dev),
1064 backup_ifindex);
1065 if (!backup_dev)
1066 return -ENOENT;
1067 }
1068
1069 err = nbp_backup_change(p, backup_dev);
1070 if (err)
1071 return err;
1072 }
1073
1074 if (tb[IFLA_BRPORT_BACKUP_NHID]) {
1075 u32 backup_nhid = nla_get_u32(tb[IFLA_BRPORT_BACKUP_NHID]);
1076
1077 WRITE_ONCE(p->backup_nhid, backup_nhid);
1078 }
1079
1080 return 0;
1081}
1082
1083/* Change state and parameters on port. */
1084int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
1085 struct netlink_ext_ack *extack)
1086{
1087 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1088 struct nlattr *tb[IFLA_BRPORT_MAX + 1];
1089 struct net_bridge_port *p;
1090 struct nlattr *protinfo;
1091 struct nlattr *afspec;
1092 bool changed = false;
1093 int err = 0;
1094
1095 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
1096 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1097 if (!protinfo && !afspec)
1098 return 0;
1099
1100 p = br_port_get_rtnl(dev);
1101 /* We want to accept dev as bridge itself if the AF_SPEC
1102 * is set to see if someone is setting vlan info on the bridge
1103 */
1104 if (!p && !afspec)
1105 return -EINVAL;
1106
1107 if (p && protinfo) {
1108 if (protinfo->nla_type & NLA_F_NESTED) {
1109 err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1110 protinfo,
1111 br_port_policy,
1112 NULL);
1113 if (err)
1114 return err;
1115
1116 spin_lock_bh(&p->br->lock);
1117 err = br_setport(p, tb, extack);
1118 spin_unlock_bh(&p->br->lock);
1119 } else {
1120 /* Binary compatibility with old RSTP */
1121 if (nla_len(protinfo) < sizeof(u8))
1122 return -EINVAL;
1123
1124 spin_lock_bh(&p->br->lock);
1125 err = br_set_port_state(p, nla_get_u8(protinfo));
1126 spin_unlock_bh(&p->br->lock);
1127 }
1128 if (err)
1129 goto out;
1130 changed = true;
1131 }
1132
1133 if (afspec)
1134 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1135
1136 if (changed)
1137 br_ifinfo_notify(RTM_NEWLINK, br, p);
1138out:
1139 return err;
1140}
1141
1142/* Delete port information */
1143int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1144{
1145 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1146 struct net_bridge_port *p;
1147 struct nlattr *afspec;
1148 bool changed = false;
1149 int err = 0;
1150
1151 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1152 if (!afspec)
1153 return 0;
1154
1155 p = br_port_get_rtnl(dev);
1156 /* We want to accept dev as bridge itself as well */
1157 if (!p && !netif_is_bridge_master(dev))
1158 return -EINVAL;
1159
1160 err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1161 if (changed)
1162 /* Send RTM_NEWLINK because userspace
1163 * expects RTM_NEWLINK for vlan dels
1164 */
1165 br_ifinfo_notify(RTM_NEWLINK, br, p);
1166
1167 return err;
1168}
1169
1170static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1171 struct netlink_ext_ack *extack)
1172{
1173 if (tb[IFLA_ADDRESS]) {
1174 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1175 return -EINVAL;
1176 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1177 return -EADDRNOTAVAIL;
1178 }
1179
1180 if (!data)
1181 return 0;
1182
1183#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1184 if (data[IFLA_BR_VLAN_PROTOCOL] &&
1185 !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1186 return -EPROTONOSUPPORT;
1187
1188 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1189 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1190
1191 if (defpvid >= VLAN_VID_MASK)
1192 return -EINVAL;
1193 }
1194#endif
1195
1196 return 0;
1197}
1198
1199static int br_port_slave_changelink(struct net_device *brdev,
1200 struct net_device *dev,
1201 struct nlattr *tb[],
1202 struct nlattr *data[],
1203 struct netlink_ext_ack *extack)
1204{
1205 struct net_bridge *br = netdev_priv(brdev);
1206 int ret;
1207
1208 if (!data)
1209 return 0;
1210
1211 spin_lock_bh(&br->lock);
1212 ret = br_setport(br_port_get_rtnl(dev), data, extack);
1213 spin_unlock_bh(&br->lock);
1214
1215 return ret;
1216}
1217
1218static int br_port_fill_slave_info(struct sk_buff *skb,
1219 const struct net_device *brdev,
1220 const struct net_device *dev)
1221{
1222 return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1223}
1224
1225static size_t br_port_get_slave_size(const struct net_device *brdev,
1226 const struct net_device *dev)
1227{
1228 return br_port_info_size();
1229}
1230
1231static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1232 [IFLA_BR_UNSPEC] = { .strict_start_type =
1233 IFLA_BR_FDB_N_LEARNED },
1234 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 },
1235 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 },
1236 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 },
1237 [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1238 [IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1239 [IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1240 [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1241 [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1242 [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1243 [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1244 .len = ETH_ALEN },
1245 [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1246 [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1247 [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1248 [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1249 [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1250 [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1251 [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1252 [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1253 [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1254 [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1255 [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1256 [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1257 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1258 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1259 [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1260 [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1261 [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1262 [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1263 [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1264 [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1265 [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1266 [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1267 [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1268 [IFLA_BR_MULTI_BOOLOPT] =
1269 NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1270 [IFLA_BR_FDB_N_LEARNED] = { .type = NLA_REJECT },
1271 [IFLA_BR_FDB_MAX_LEARNED] = { .type = NLA_U32 },
1272};
1273
1274static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1275 struct nlattr *data[],
1276 struct netlink_ext_ack *extack)
1277{
1278 struct net_bridge *br = netdev_priv(brdev);
1279 int err;
1280
1281 if (!data)
1282 return 0;
1283
1284 if (data[IFLA_BR_FORWARD_DELAY]) {
1285 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1286 if (err)
1287 return err;
1288 }
1289
1290 if (data[IFLA_BR_HELLO_TIME]) {
1291 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1292 if (err)
1293 return err;
1294 }
1295
1296 if (data[IFLA_BR_MAX_AGE]) {
1297 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1298 if (err)
1299 return err;
1300 }
1301
1302 if (data[IFLA_BR_AGEING_TIME]) {
1303 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1304 if (err)
1305 return err;
1306 }
1307
1308 if (data[IFLA_BR_STP_STATE]) {
1309 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1310
1311 err = br_stp_set_enabled(br, stp_enabled, extack);
1312 if (err)
1313 return err;
1314 }
1315
1316 if (data[IFLA_BR_PRIORITY]) {
1317 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1318
1319 br_stp_set_bridge_priority(br, priority);
1320 }
1321
1322 if (data[IFLA_BR_VLAN_FILTERING]) {
1323 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1324
1325 err = br_vlan_filter_toggle(br, vlan_filter, extack);
1326 if (err)
1327 return err;
1328 }
1329
1330#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1331 if (data[IFLA_BR_VLAN_PROTOCOL]) {
1332 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1333
1334 err = __br_vlan_set_proto(br, vlan_proto, extack);
1335 if (err)
1336 return err;
1337 }
1338
1339 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1340 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1341
1342 err = __br_vlan_set_default_pvid(br, defpvid, extack);
1343 if (err)
1344 return err;
1345 }
1346
1347 if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1348 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1349
1350 err = br_vlan_set_stats(br, vlan_stats);
1351 if (err)
1352 return err;
1353 }
1354
1355 if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1356 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1357
1358 err = br_vlan_set_stats_per_port(br, per_port);
1359 if (err)
1360 return err;
1361 }
1362#endif
1363
1364 if (data[IFLA_BR_GROUP_FWD_MASK]) {
1365 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1366
1367 if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1368 return -EINVAL;
1369 br->group_fwd_mask = fwd_mask;
1370 }
1371
1372 if (data[IFLA_BR_GROUP_ADDR]) {
1373 u8 new_addr[ETH_ALEN];
1374
1375 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1376 return -EINVAL;
1377 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1378 if (!is_link_local_ether_addr(new_addr))
1379 return -EINVAL;
1380 if (new_addr[5] == 1 || /* 802.3x Pause address */
1381 new_addr[5] == 2 || /* 802.3ad Slow protocols */
1382 new_addr[5] == 3) /* 802.1X PAE address */
1383 return -EINVAL;
1384 spin_lock_bh(&br->lock);
1385 memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1386 spin_unlock_bh(&br->lock);
1387 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1388 br_recalculate_fwd_mask(br);
1389 }
1390
1391 if (data[IFLA_BR_FDB_FLUSH]) {
1392 struct net_bridge_fdb_flush_desc desc = {
1393 .flags_mask = BIT(BR_FDB_STATIC)
1394 };
1395
1396 br_fdb_flush(br, &desc);
1397 }
1398
1399#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1400 if (data[IFLA_BR_MCAST_ROUTER]) {
1401 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1402
1403 err = br_multicast_set_router(&br->multicast_ctx,
1404 multicast_router);
1405 if (err)
1406 return err;
1407 }
1408
1409 if (data[IFLA_BR_MCAST_SNOOPING]) {
1410 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1411
1412 err = br_multicast_toggle(br, mcast_snooping, extack);
1413 if (err)
1414 return err;
1415 }
1416
1417 if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1418 u8 val;
1419
1420 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1421 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1422 }
1423
1424 if (data[IFLA_BR_MCAST_QUERIER]) {
1425 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1426
1427 err = br_multicast_set_querier(&br->multicast_ctx,
1428 mcast_querier);
1429 if (err)
1430 return err;
1431 }
1432
1433 if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1434 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1435 RHT_ELASTICITY);
1436
1437 if (data[IFLA_BR_MCAST_HASH_MAX])
1438 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1439
1440 if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1441 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1442
1443 br->multicast_ctx.multicast_last_member_count = val;
1444 }
1445
1446 if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1447 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1448
1449 br->multicast_ctx.multicast_startup_query_count = val;
1450 }
1451
1452 if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1453 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1454
1455 br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
1456 }
1457
1458 if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1459 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1460
1461 br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
1462 }
1463
1464 if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1465 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1466
1467 br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
1468 }
1469
1470 if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1471 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1472
1473 br_multicast_set_query_intvl(&br->multicast_ctx, val);
1474 }
1475
1476 if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1477 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1478
1479 br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
1480 }
1481
1482 if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1483 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1484
1485 br_multicast_set_startup_query_intvl(&br->multicast_ctx, val);
1486 }
1487
1488 if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1489 __u8 mcast_stats;
1490
1491 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1492 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1493 }
1494
1495 if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1496 __u8 igmp_version;
1497
1498 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1499 err = br_multicast_set_igmp_version(&br->multicast_ctx,
1500 igmp_version);
1501 if (err)
1502 return err;
1503 }
1504
1505#if IS_ENABLED(CONFIG_IPV6)
1506 if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1507 __u8 mld_version;
1508
1509 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1510 err = br_multicast_set_mld_version(&br->multicast_ctx,
1511 mld_version);
1512 if (err)
1513 return err;
1514 }
1515#endif
1516#endif
1517#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1518 if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1519 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1520
1521 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1522 }
1523
1524 if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1525 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1526
1527 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1528 }
1529
1530 if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1531 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1532
1533 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1534 }
1535#endif
1536
1537 if (data[IFLA_BR_MULTI_BOOLOPT]) {
1538 struct br_boolopt_multi *bm;
1539
1540 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1541 err = br_boolopt_multi_toggle(br, bm, extack);
1542 if (err)
1543 return err;
1544 }
1545
1546 if (data[IFLA_BR_FDB_MAX_LEARNED]) {
1547 u32 val = nla_get_u32(data[IFLA_BR_FDB_MAX_LEARNED]);
1548
1549 WRITE_ONCE(br->fdb_max_learned, val);
1550 }
1551
1552 return 0;
1553}
1554
1555static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1556 struct nlattr *tb[], struct nlattr *data[],
1557 struct netlink_ext_ack *extack)
1558{
1559 struct net_bridge *br = netdev_priv(dev);
1560 int err;
1561
1562 err = register_netdevice(dev);
1563 if (err)
1564 return err;
1565
1566 if (tb[IFLA_ADDRESS]) {
1567 spin_lock_bh(&br->lock);
1568 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1569 spin_unlock_bh(&br->lock);
1570 }
1571
1572 err = br_changelink(dev, tb, data, extack);
1573 if (err)
1574 br_dev_delete(dev, NULL);
1575
1576 return err;
1577}
1578
1579static size_t br_get_size(const struct net_device *brdev)
1580{
1581 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */
1582 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */
1583 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */
1584 nla_total_size(sizeof(u32)) + /* IFLA_BR_AGEING_TIME */
1585 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_STATE */
1586 nla_total_size(sizeof(u16)) + /* IFLA_BR_PRIORITY */
1587 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_FILTERING */
1588#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1589 nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */
1590 nla_total_size(sizeof(u16)) + /* IFLA_BR_VLAN_DEFAULT_PVID */
1591 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_ENABLED */
1592 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_PER_PORT */
1593#endif
1594 nla_total_size(sizeof(u16)) + /* IFLA_BR_GROUP_FWD_MASK */
1595 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_ROOT_ID */
1596 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_BRIDGE_ID */
1597 nla_total_size(sizeof(u16)) + /* IFLA_BR_ROOT_PORT */
1598 nla_total_size(sizeof(u32)) + /* IFLA_BR_ROOT_PATH_COST */
1599 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE */
1600 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1601 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1602 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1603 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1604 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1605 nla_total_size(ETH_ALEN) + /* IFLA_BR_GROUP_ADDR */
1606 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_N_LEARNED */
1607 nla_total_size(sizeof(u32)) + /* IFLA_BR_FDB_MAX_LEARNED */
1608#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1609 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_ROUTER */
1610 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_SNOOPING */
1611 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1612 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERIER */
1613 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_STATS_ENABLED */
1614 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */
1615 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_MAX */
1616 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1617 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1618 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1619 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1620 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1621 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1622 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1623 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1624 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_IGMP_VERSION */
1625 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_MLD_VERSION */
1626 br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */
1627#endif
1628#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1629 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IPTABLES */
1630 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IP6TABLES */
1631 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_ARPTABLES */
1632#endif
1633 nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1634 0;
1635}
1636
1637static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1638{
1639 struct net_bridge *br = netdev_priv(brdev);
1640 u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1641 u32 hello_time = jiffies_to_clock_t(br->hello_time);
1642 u32 age_time = jiffies_to_clock_t(br->max_age);
1643 u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1644 u32 stp_enabled = br->stp_enabled;
1645 u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1646 u8 vlan_enabled = br_vlan_enabled(br->dev);
1647 struct br_boolopt_multi bm;
1648 u64 clockval;
1649
1650 clockval = br_timer_value(&br->hello_timer);
1651 if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1652 return -EMSGSIZE;
1653 clockval = br_timer_value(&br->tcn_timer);
1654 if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1655 return -EMSGSIZE;
1656 clockval = br_timer_value(&br->topology_change_timer);
1657 if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1658 IFLA_BR_PAD))
1659 return -EMSGSIZE;
1660 clockval = br_timer_value(&br->gc_work.timer);
1661 if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1662 return -EMSGSIZE;
1663
1664 br_boolopt_multi_get(br, &bm);
1665 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1666 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1667 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1668 nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1669 nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1670 nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1671 nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1672 nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1673 nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1674 &br->bridge_id) ||
1675 nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1676 &br->designated_root) ||
1677 nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1678 nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1679 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1680 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1681 br->topology_change_detected) ||
1682 nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1683 nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm) ||
1684 nla_put_u32(skb, IFLA_BR_FDB_N_LEARNED,
1685 atomic_read(&br->fdb_n_learned)) ||
1686 nla_put_u32(skb, IFLA_BR_FDB_MAX_LEARNED, br->fdb_max_learned))
1687 return -EMSGSIZE;
1688
1689#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1690 if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1691 nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1692 nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1693 br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1694 nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1695 br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1696 return -EMSGSIZE;
1697#endif
1698#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1699 if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER,
1700 br->multicast_ctx.multicast_router) ||
1701 nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1702 br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1703 nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1704 br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1705 nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1706 br->multicast_ctx.multicast_querier) ||
1707 nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1708 br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1709 nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1710 nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1711 nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1712 br->multicast_ctx.multicast_last_member_count) ||
1713 nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1714 br->multicast_ctx.multicast_startup_query_count) ||
1715 nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1716 br->multicast_ctx.multicast_igmp_version) ||
1717 br_multicast_dump_querier_state(skb, &br->multicast_ctx,
1718 IFLA_BR_MCAST_QUERIER_STATE))
1719 return -EMSGSIZE;
1720#if IS_ENABLED(CONFIG_IPV6)
1721 if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1722 br->multicast_ctx.multicast_mld_version))
1723 return -EMSGSIZE;
1724#endif
1725 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval);
1726 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1727 IFLA_BR_PAD))
1728 return -EMSGSIZE;
1729 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval);
1730 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1731 IFLA_BR_PAD))
1732 return -EMSGSIZE;
1733 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval);
1734 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1735 IFLA_BR_PAD))
1736 return -EMSGSIZE;
1737 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval);
1738 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1739 IFLA_BR_PAD))
1740 return -EMSGSIZE;
1741 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval);
1742 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1743 IFLA_BR_PAD))
1744 return -EMSGSIZE;
1745 clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval);
1746 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1747 IFLA_BR_PAD))
1748 return -EMSGSIZE;
1749#endif
1750#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1751 if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1752 br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1753 nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1754 br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1755 nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1756 br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1757 return -EMSGSIZE;
1758#endif
1759
1760 return 0;
1761}
1762
1763static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1764{
1765 struct net_bridge_port *p = NULL;
1766 struct net_bridge_vlan_group *vg;
1767 struct net_bridge_vlan *v;
1768 struct net_bridge *br;
1769 int numvls = 0;
1770
1771 switch (attr) {
1772 case IFLA_STATS_LINK_XSTATS:
1773 br = netdev_priv(dev);
1774 vg = br_vlan_group(br);
1775 break;
1776 case IFLA_STATS_LINK_XSTATS_SLAVE:
1777 p = br_port_get_rtnl(dev);
1778 if (!p)
1779 return 0;
1780 vg = nbp_vlan_group(p);
1781 break;
1782 default:
1783 return 0;
1784 }
1785
1786 if (vg) {
1787 /* we need to count all, even placeholder entries */
1788 list_for_each_entry(v, &vg->vlan_list, vlist)
1789 numvls++;
1790 }
1791
1792 return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1793 nla_total_size_64bit(sizeof(struct br_mcast_stats)) +
1794 (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) +
1795 nla_total_size(0);
1796}
1797
1798static int br_fill_linkxstats(struct sk_buff *skb,
1799 const struct net_device *dev,
1800 int *prividx, int attr)
1801{
1802 struct nlattr *nla __maybe_unused;
1803 struct net_bridge_port *p = NULL;
1804 struct net_bridge_vlan_group *vg;
1805 struct net_bridge_vlan *v;
1806 struct net_bridge *br;
1807 struct nlattr *nest;
1808 int vl_idx = 0;
1809
1810 switch (attr) {
1811 case IFLA_STATS_LINK_XSTATS:
1812 br = netdev_priv(dev);
1813 vg = br_vlan_group(br);
1814 break;
1815 case IFLA_STATS_LINK_XSTATS_SLAVE:
1816 p = br_port_get_rtnl(dev);
1817 if (!p)
1818 return 0;
1819 br = p->br;
1820 vg = nbp_vlan_group(p);
1821 break;
1822 default:
1823 return -EINVAL;
1824 }
1825
1826 nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1827 if (!nest)
1828 return -EMSGSIZE;
1829
1830 if (vg) {
1831 u16 pvid;
1832
1833 pvid = br_get_pvid(vg);
1834 list_for_each_entry(v, &vg->vlan_list, vlist) {
1835 struct bridge_vlan_xstats vxi;
1836 struct pcpu_sw_netstats stats;
1837
1838 if (++vl_idx < *prividx)
1839 continue;
1840 memset(&vxi, 0, sizeof(vxi));
1841 vxi.vid = v->vid;
1842 vxi.flags = v->flags;
1843 if (v->vid == pvid)
1844 vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1845 br_vlan_get_stats(v, &stats);
1846 vxi.rx_bytes = u64_stats_read(&stats.rx_bytes);
1847 vxi.rx_packets = u64_stats_read(&stats.rx_packets);
1848 vxi.tx_bytes = u64_stats_read(&stats.tx_bytes);
1849 vxi.tx_packets = u64_stats_read(&stats.tx_packets);
1850
1851 if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1852 goto nla_put_failure;
1853 }
1854 }
1855
1856#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1857 if (++vl_idx >= *prividx) {
1858 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1859 sizeof(struct br_mcast_stats),
1860 BRIDGE_XSTATS_PAD);
1861 if (!nla)
1862 goto nla_put_failure;
1863 br_multicast_get_stats(br, p, nla_data(nla));
1864 }
1865#endif
1866
1867 if (p) {
1868 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1869 sizeof(p->stp_xstats),
1870 BRIDGE_XSTATS_PAD);
1871 if (!nla)
1872 goto nla_put_failure;
1873
1874 spin_lock_bh(&br->lock);
1875 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1876 spin_unlock_bh(&br->lock);
1877 }
1878
1879 nla_nest_end(skb, nest);
1880 *prividx = 0;
1881
1882 return 0;
1883
1884nla_put_failure:
1885 nla_nest_end(skb, nest);
1886 *prividx = vl_idx;
1887
1888 return -EMSGSIZE;
1889}
1890
1891static struct rtnl_af_ops br_af_ops __read_mostly = {
1892 .family = AF_BRIDGE,
1893 .get_link_af_size = br_get_link_af_size_filtered,
1894};
1895
1896struct rtnl_link_ops br_link_ops __read_mostly = {
1897 .kind = "bridge",
1898 .priv_size = sizeof(struct net_bridge),
1899 .setup = br_dev_setup,
1900 .maxtype = IFLA_BR_MAX,
1901 .policy = br_policy,
1902 .validate = br_validate,
1903 .newlink = br_dev_newlink,
1904 .changelink = br_changelink,
1905 .dellink = br_dev_delete,
1906 .get_size = br_get_size,
1907 .fill_info = br_fill_info,
1908 .fill_linkxstats = br_fill_linkxstats,
1909 .get_linkxstats_size = br_get_linkxstats_size,
1910
1911 .slave_maxtype = IFLA_BRPORT_MAX,
1912 .slave_policy = br_port_policy,
1913 .slave_changelink = br_port_slave_changelink,
1914 .get_slave_size = br_port_get_slave_size,
1915 .fill_slave_info = br_port_fill_slave_info,
1916};
1917
1918int __init br_netlink_init(void)
1919{
1920 int err;
1921
1922 br_vlan_rtnl_init();
1923 rtnl_af_register(&br_af_ops);
1924
1925 err = rtnl_link_register(&br_link_ops);
1926 if (err)
1927 goto out_af;
1928
1929 return 0;
1930
1931out_af:
1932 rtnl_af_unregister(&br_af_ops);
1933 return err;
1934}
1935
1936void br_netlink_fini(void)
1937{
1938 br_vlan_rtnl_uninit();
1939 rtnl_af_unregister(&br_af_ops);
1940 rtnl_link_unregister(&br_link_ops);
1941}
1// SPDX-License-Identifier: GPL-2.0-or-later
2/*
3 * Bridge netlink control interface
4 *
5 * Authors:
6 * Stephen Hemminger <shemminger@osdl.org>
7 */
8
9#include <linux/kernel.h>
10#include <linux/slab.h>
11#include <linux/etherdevice.h>
12#include <net/rtnetlink.h>
13#include <net/net_namespace.h>
14#include <net/sock.h>
15#include <uapi/linux/if_bridge.h>
16
17#include "br_private.h"
18#include "br_private_stp.h"
19#include "br_private_tunnel.h"
20
21static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
22 u32 filter_mask)
23{
24 struct net_bridge_vlan *v;
25 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
26 u16 flags, pvid;
27 int num_vlans = 0;
28
29 if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
30 return 0;
31
32 pvid = br_get_pvid(vg);
33 /* Count number of vlan infos */
34 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
35 flags = 0;
36 /* only a context, bridge vlan not activated */
37 if (!br_vlan_should_use(v))
38 continue;
39 if (v->vid == pvid)
40 flags |= BRIDGE_VLAN_INFO_PVID;
41
42 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
43 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
44
45 if (vid_range_start == 0) {
46 goto initvars;
47 } else if ((v->vid - vid_range_end) == 1 &&
48 flags == vid_range_flags) {
49 vid_range_end = v->vid;
50 continue;
51 } else {
52 if ((vid_range_end - vid_range_start) > 0)
53 num_vlans += 2;
54 else
55 num_vlans += 1;
56 }
57initvars:
58 vid_range_start = v->vid;
59 vid_range_end = v->vid;
60 vid_range_flags = flags;
61 }
62
63 if (vid_range_start != 0) {
64 if ((vid_range_end - vid_range_start) > 0)
65 num_vlans += 2;
66 else
67 num_vlans += 1;
68 }
69
70 return num_vlans;
71}
72
73static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
74 u32 filter_mask)
75{
76 int num_vlans;
77
78 if (!vg)
79 return 0;
80
81 if (filter_mask & RTEXT_FILTER_BRVLAN)
82 return vg->num_vlans;
83
84 rcu_read_lock();
85 num_vlans = __get_num_vlan_infos(vg, filter_mask);
86 rcu_read_unlock();
87
88 return num_vlans;
89}
90
91static size_t br_get_link_af_size_filtered(const struct net_device *dev,
92 u32 filter_mask)
93{
94 struct net_bridge_vlan_group *vg = NULL;
95 struct net_bridge_port *p = NULL;
96 struct net_bridge *br;
97 int num_vlan_infos;
98 size_t vinfo_sz = 0;
99
100 rcu_read_lock();
101 if (netif_is_bridge_port(dev)) {
102 p = br_port_get_rcu(dev);
103 vg = nbp_vlan_group_rcu(p);
104 } else if (dev->priv_flags & IFF_EBRIDGE) {
105 br = netdev_priv(dev);
106 vg = br_vlan_group_rcu(br);
107 }
108 num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
109 rcu_read_unlock();
110
111 if (p && (p->flags & BR_VLAN_TUNNEL))
112 vinfo_sz += br_get_vlan_tunnel_info_size(vg);
113
114 /* Each VLAN is returned in bridge_vlan_info along with flags */
115 vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
116
117 return vinfo_sz;
118}
119
120static inline size_t br_port_info_size(void)
121{
122 return nla_total_size(1) /* IFLA_BRPORT_STATE */
123 + nla_total_size(2) /* IFLA_BRPORT_PRIORITY */
124 + nla_total_size(4) /* IFLA_BRPORT_COST */
125 + nla_total_size(1) /* IFLA_BRPORT_MODE */
126 + nla_total_size(1) /* IFLA_BRPORT_GUARD */
127 + nla_total_size(1) /* IFLA_BRPORT_PROTECT */
128 + nla_total_size(1) /* IFLA_BRPORT_FAST_LEAVE */
129 + nla_total_size(1) /* IFLA_BRPORT_MCAST_TO_UCAST */
130 + nla_total_size(1) /* IFLA_BRPORT_LEARNING */
131 + nla_total_size(1) /* IFLA_BRPORT_UNICAST_FLOOD */
132 + nla_total_size(1) /* IFLA_BRPORT_MCAST_FLOOD */
133 + nla_total_size(1) /* IFLA_BRPORT_BCAST_FLOOD */
134 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP */
135 + nla_total_size(1) /* IFLA_BRPORT_PROXYARP_WIFI */
136 + nla_total_size(1) /* IFLA_BRPORT_VLAN_TUNNEL */
137 + nla_total_size(1) /* IFLA_BRPORT_NEIGH_SUPPRESS */
138 + nla_total_size(1) /* IFLA_BRPORT_ISOLATED */
139 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */
140 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */
141 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_PORT */
142 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_DESIGNATED_COST */
143 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_ID */
144 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_NO */
145 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
146 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_CONFIG_PENDING */
147 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
148 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
149 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
150#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
151 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MULTICAST_ROUTER */
152#endif
153 + nla_total_size(sizeof(u16)) /* IFLA_BRPORT_GROUP_FWD_MASK */
154 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_RING_OPEN */
155 + nla_total_size(sizeof(u8)) /* IFLA_BRPORT_MRP_IN_OPEN */
156 + 0;
157}
158
159static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
160{
161 return NLMSG_ALIGN(sizeof(struct ifinfomsg))
162 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
163 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
164 + nla_total_size(4) /* IFLA_MASTER */
165 + nla_total_size(4) /* IFLA_MTU */
166 + nla_total_size(4) /* IFLA_LINK */
167 + nla_total_size(1) /* IFLA_OPERSTATE */
168 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
169 + nla_total_size(br_get_link_af_size_filtered(dev,
170 filter_mask)) /* IFLA_AF_SPEC */
171 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
172}
173
174static int br_port_fill_attrs(struct sk_buff *skb,
175 const struct net_bridge_port *p)
176{
177 u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
178 struct net_bridge_port *backup_p;
179 u64 timerval;
180
181 if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
182 nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
183 nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
184 nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
185 nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
186 nla_put_u8(skb, IFLA_BRPORT_PROTECT,
187 !!(p->flags & BR_ROOT_BLOCK)) ||
188 nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
189 !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
190 nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
191 !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
192 nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
193 nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
194 !!(p->flags & BR_FLOOD)) ||
195 nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
196 !!(p->flags & BR_MCAST_FLOOD)) ||
197 nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
198 !!(p->flags & BR_BCAST_FLOOD)) ||
199 nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
200 nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
201 !!(p->flags & BR_PROXYARP_WIFI)) ||
202 nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
203 &p->designated_root) ||
204 nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
205 &p->designated_bridge) ||
206 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
207 nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
208 nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
209 nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
210 nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
211 p->topology_change_ack) ||
212 nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
213 nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
214 BR_VLAN_TUNNEL)) ||
215 nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
216 nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
217 !!(p->flags & BR_NEIGH_SUPPRESS)) ||
218 nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
219 BR_MRP_LOST_CONT)) ||
220 nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
221 !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
222 nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)))
223 return -EMSGSIZE;
224
225 timerval = br_timer_value(&p->message_age_timer);
226 if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
227 IFLA_BRPORT_PAD))
228 return -EMSGSIZE;
229 timerval = br_timer_value(&p->forward_delay_timer);
230 if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
231 IFLA_BRPORT_PAD))
232 return -EMSGSIZE;
233 timerval = br_timer_value(&p->hold_timer);
234 if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
235 IFLA_BRPORT_PAD))
236 return -EMSGSIZE;
237
238#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
239 if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
240 p->multicast_router))
241 return -EMSGSIZE;
242#endif
243
244 /* we might be called only with br->lock */
245 rcu_read_lock();
246 backup_p = rcu_dereference(p->backup_port);
247 if (backup_p)
248 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
249 backup_p->dev->ifindex);
250 rcu_read_unlock();
251
252 return 0;
253}
254
255static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
256 u16 vid_end, u16 flags)
257{
258 struct bridge_vlan_info vinfo;
259
260 if ((vid_end - vid_start) > 0) {
261 /* add range to skb */
262 vinfo.vid = vid_start;
263 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
264 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
265 sizeof(vinfo), &vinfo))
266 goto nla_put_failure;
267
268 vinfo.vid = vid_end;
269 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
270 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
271 sizeof(vinfo), &vinfo))
272 goto nla_put_failure;
273 } else {
274 vinfo.vid = vid_start;
275 vinfo.flags = flags;
276 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
277 sizeof(vinfo), &vinfo))
278 goto nla_put_failure;
279 }
280
281 return 0;
282
283nla_put_failure:
284 return -EMSGSIZE;
285}
286
287static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
288 struct net_bridge_vlan_group *vg)
289{
290 struct net_bridge_vlan *v;
291 u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
292 u16 flags, pvid;
293 int err = 0;
294
295 /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
296 * and mark vlan info with begin and end flags
297 * if vlaninfo represents a range
298 */
299 pvid = br_get_pvid(vg);
300 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
301 flags = 0;
302 if (!br_vlan_should_use(v))
303 continue;
304 if (v->vid == pvid)
305 flags |= BRIDGE_VLAN_INFO_PVID;
306
307 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
308 flags |= BRIDGE_VLAN_INFO_UNTAGGED;
309
310 if (vid_range_start == 0) {
311 goto initvars;
312 } else if ((v->vid - vid_range_end) == 1 &&
313 flags == vid_range_flags) {
314 vid_range_end = v->vid;
315 continue;
316 } else {
317 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
318 vid_range_end,
319 vid_range_flags);
320 if (err)
321 return err;
322 }
323
324initvars:
325 vid_range_start = v->vid;
326 vid_range_end = v->vid;
327 vid_range_flags = flags;
328 }
329
330 if (vid_range_start != 0) {
331 /* Call it once more to send any left over vlans */
332 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
333 vid_range_end,
334 vid_range_flags);
335 if (err)
336 return err;
337 }
338
339 return 0;
340}
341
342static int br_fill_ifvlaninfo(struct sk_buff *skb,
343 struct net_bridge_vlan_group *vg)
344{
345 struct bridge_vlan_info vinfo;
346 struct net_bridge_vlan *v;
347 u16 pvid;
348
349 pvid = br_get_pvid(vg);
350 list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
351 if (!br_vlan_should_use(v))
352 continue;
353
354 vinfo.vid = v->vid;
355 vinfo.flags = 0;
356 if (v->vid == pvid)
357 vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
358
359 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
360 vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
361
362 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
363 sizeof(vinfo), &vinfo))
364 goto nla_put_failure;
365 }
366
367 return 0;
368
369nla_put_failure:
370 return -EMSGSIZE;
371}
372
373/*
374 * Create one netlink message for one interface
375 * Contains port and master info as well as carrier and bridge state.
376 */
377static int br_fill_ifinfo(struct sk_buff *skb,
378 const struct net_bridge_port *port,
379 u32 pid, u32 seq, int event, unsigned int flags,
380 u32 filter_mask, const struct net_device *dev)
381{
382 u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
383 struct nlattr *af = NULL;
384 struct net_bridge *br;
385 struct ifinfomsg *hdr;
386 struct nlmsghdr *nlh;
387
388 if (port)
389 br = port->br;
390 else
391 br = netdev_priv(dev);
392
393 br_debug(br, "br_fill_info event %d port %s master %s\n",
394 event, dev->name, br->dev->name);
395
396 nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
397 if (nlh == NULL)
398 return -EMSGSIZE;
399
400 hdr = nlmsg_data(nlh);
401 hdr->ifi_family = AF_BRIDGE;
402 hdr->__ifi_pad = 0;
403 hdr->ifi_type = dev->type;
404 hdr->ifi_index = dev->ifindex;
405 hdr->ifi_flags = dev_get_flags(dev);
406 hdr->ifi_change = 0;
407
408 if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
409 nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
410 nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
411 nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
412 (dev->addr_len &&
413 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
414 (dev->ifindex != dev_get_iflink(dev) &&
415 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
416 goto nla_put_failure;
417
418 if (event == RTM_NEWLINK && port) {
419 struct nlattr *nest;
420
421 nest = nla_nest_start(skb, IFLA_PROTINFO);
422 if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
423 goto nla_put_failure;
424 nla_nest_end(skb, nest);
425 }
426
427 if (filter_mask & (RTEXT_FILTER_BRVLAN |
428 RTEXT_FILTER_BRVLAN_COMPRESSED |
429 RTEXT_FILTER_MRP)) {
430 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
431 if (!af)
432 goto nla_put_failure;
433 }
434
435 /* Check if the VID information is requested */
436 if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
437 (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
438 struct net_bridge_vlan_group *vg;
439 int err;
440
441 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
442 rcu_read_lock();
443 if (port)
444 vg = nbp_vlan_group_rcu(port);
445 else
446 vg = br_vlan_group_rcu(br);
447
448 if (!vg || !vg->num_vlans) {
449 rcu_read_unlock();
450 goto done;
451 }
452 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
453 err = br_fill_ifvlaninfo_compressed(skb, vg);
454 else
455 err = br_fill_ifvlaninfo(skb, vg);
456
457 if (port && (port->flags & BR_VLAN_TUNNEL))
458 err = br_fill_vlan_tunnel_info(skb, vg);
459 rcu_read_unlock();
460 if (err)
461 goto nla_put_failure;
462 }
463
464 if (filter_mask & RTEXT_FILTER_MRP) {
465 int err;
466
467 if (!br_mrp_enabled(br) || port)
468 goto done;
469
470 rcu_read_lock();
471 err = br_mrp_fill_info(skb, br);
472 rcu_read_unlock();
473
474 if (err)
475 goto nla_put_failure;
476 }
477
478done:
479 if (af)
480 nla_nest_end(skb, af);
481 nlmsg_end(skb, nlh);
482 return 0;
483
484nla_put_failure:
485 nlmsg_cancel(skb, nlh);
486 return -EMSGSIZE;
487}
488
489/* Notify listeners of a change in bridge or port information */
490void br_ifinfo_notify(int event, const struct net_bridge *br,
491 const struct net_bridge_port *port)
492{
493 u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
494 struct net_device *dev;
495 struct sk_buff *skb;
496 int err = -ENOBUFS;
497 struct net *net;
498 u16 port_no = 0;
499
500 if (WARN_ON(!port && !br))
501 return;
502
503 if (port) {
504 dev = port->dev;
505 br = port->br;
506 port_no = port->port_no;
507 } else {
508 dev = br->dev;
509 }
510
511 net = dev_net(dev);
512 br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
513
514 skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
515 if (skb == NULL)
516 goto errout;
517
518 err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev);
519 if (err < 0) {
520 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
521 WARN_ON(err == -EMSGSIZE);
522 kfree_skb(skb);
523 goto errout;
524 }
525 rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
526 return;
527errout:
528 rtnl_set_sk_err(net, RTNLGRP_LINK, err);
529}
530
531/*
532 * Dump information about all ports, in response to GETLINK
533 */
534int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
535 struct net_device *dev, u32 filter_mask, int nlflags)
536{
537 struct net_bridge_port *port = br_port_get_rtnl(dev);
538
539 if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
540 !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
541 !(filter_mask & RTEXT_FILTER_MRP))
542 return 0;
543
544 return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
545 filter_mask, dev);
546}
547
548static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
549 int cmd, struct bridge_vlan_info *vinfo, bool *changed,
550 struct netlink_ext_ack *extack)
551{
552 bool curr_change;
553 int err = 0;
554
555 switch (cmd) {
556 case RTM_SETLINK:
557 if (p) {
558 /* if the MASTER flag is set this will act on the global
559 * per-VLAN entry as well
560 */
561 err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
562 &curr_change, extack);
563 } else {
564 vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
565 err = br_vlan_add(br, vinfo->vid, vinfo->flags,
566 &curr_change, extack);
567 }
568 if (curr_change)
569 *changed = true;
570 break;
571
572 case RTM_DELLINK:
573 if (p) {
574 if (!nbp_vlan_delete(p, vinfo->vid))
575 *changed = true;
576
577 if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
578 !br_vlan_delete(p->br, vinfo->vid))
579 *changed = true;
580 } else if (!br_vlan_delete(br, vinfo->vid)) {
581 *changed = true;
582 }
583 break;
584 }
585
586 return err;
587}
588
589int br_process_vlan_info(struct net_bridge *br,
590 struct net_bridge_port *p, int cmd,
591 struct bridge_vlan_info *vinfo_curr,
592 struct bridge_vlan_info **vinfo_last,
593 bool *changed,
594 struct netlink_ext_ack *extack)
595{
596 int err, rtm_cmd;
597
598 if (!br_vlan_valid_id(vinfo_curr->vid, extack))
599 return -EINVAL;
600
601 /* needed for vlan-only NEWVLAN/DELVLAN notifications */
602 rtm_cmd = br_afspec_cmd_to_rtm(cmd);
603
604 if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
605 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
606 return -EINVAL;
607 *vinfo_last = vinfo_curr;
608 return 0;
609 }
610
611 if (*vinfo_last) {
612 struct bridge_vlan_info tmp_vinfo;
613 int v, v_change_start = 0;
614
615 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
616 return -EINVAL;
617
618 memcpy(&tmp_vinfo, *vinfo_last,
619 sizeof(struct bridge_vlan_info));
620 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
621 bool curr_change = false;
622
623 tmp_vinfo.vid = v;
624 err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
625 extack);
626 if (err)
627 break;
628 if (curr_change) {
629 *changed = curr_change;
630 if (!v_change_start)
631 v_change_start = v;
632 } else {
633 /* nothing to notify yet */
634 if (!v_change_start)
635 continue;
636 br_vlan_notify(br, p, v_change_start,
637 v - 1, rtm_cmd);
638 v_change_start = 0;
639 }
640 cond_resched();
641 }
642 /* v_change_start is set only if the last/whole range changed */
643 if (v_change_start)
644 br_vlan_notify(br, p, v_change_start,
645 v - 1, rtm_cmd);
646
647 *vinfo_last = NULL;
648
649 return err;
650 }
651
652 err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
653 if (*changed)
654 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
655
656 return err;
657}
658
659static int br_afspec(struct net_bridge *br,
660 struct net_bridge_port *p,
661 struct nlattr *af_spec,
662 int cmd, bool *changed,
663 struct netlink_ext_ack *extack)
664{
665 struct bridge_vlan_info *vinfo_curr = NULL;
666 struct bridge_vlan_info *vinfo_last = NULL;
667 struct nlattr *attr;
668 struct vtunnel_info tinfo_last = {};
669 struct vtunnel_info tinfo_curr = {};
670 int err = 0, rem;
671
672 nla_for_each_nested(attr, af_spec, rem) {
673 err = 0;
674 switch (nla_type(attr)) {
675 case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
676 if (!p || !(p->flags & BR_VLAN_TUNNEL))
677 return -EINVAL;
678 err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
679 if (err)
680 return err;
681 err = br_process_vlan_tunnel_info(br, p, cmd,
682 &tinfo_curr,
683 &tinfo_last,
684 changed);
685 if (err)
686 return err;
687 break;
688 case IFLA_BRIDGE_VLAN_INFO:
689 if (nla_len(attr) != sizeof(struct bridge_vlan_info))
690 return -EINVAL;
691 vinfo_curr = nla_data(attr);
692 err = br_process_vlan_info(br, p, cmd, vinfo_curr,
693 &vinfo_last, changed,
694 extack);
695 if (err)
696 return err;
697 break;
698 case IFLA_BRIDGE_MRP:
699 err = br_mrp_parse(br, p, attr, cmd, extack);
700 if (err)
701 return err;
702 break;
703 }
704 }
705
706 return err;
707}
708
709static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
710 [IFLA_BRPORT_STATE] = { .type = NLA_U8 },
711 [IFLA_BRPORT_COST] = { .type = NLA_U32 },
712 [IFLA_BRPORT_PRIORITY] = { .type = NLA_U16 },
713 [IFLA_BRPORT_MODE] = { .type = NLA_U8 },
714 [IFLA_BRPORT_GUARD] = { .type = NLA_U8 },
715 [IFLA_BRPORT_PROTECT] = { .type = NLA_U8 },
716 [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
717 [IFLA_BRPORT_LEARNING] = { .type = NLA_U8 },
718 [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
719 [IFLA_BRPORT_PROXYARP] = { .type = NLA_U8 },
720 [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
721 [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
722 [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
723 [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
724 [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
725 [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
726 [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
727 [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
728 [IFLA_BRPORT_ISOLATED] = { .type = NLA_U8 },
729 [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
730};
731
732/* Change the state of the port and notify spanning tree */
733static int br_set_port_state(struct net_bridge_port *p, u8 state)
734{
735 if (state > BR_STATE_BLOCKING)
736 return -EINVAL;
737
738 /* if kernel STP is running, don't allow changes */
739 if (p->br->stp_enabled == BR_KERNEL_STP)
740 return -EBUSY;
741
742 /* if device is not up, change is not allowed
743 * if link is not present, only allowable state is disabled
744 */
745 if (!netif_running(p->dev) ||
746 (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
747 return -ENETDOWN;
748
749 br_set_state(p, state);
750 br_port_state_selection(p->br);
751 return 0;
752}
753
754/* Set/clear or port flags based on attribute */
755static int br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
756 int attrtype, unsigned long mask)
757{
758 unsigned long flags;
759 int err;
760
761 if (!tb[attrtype])
762 return 0;
763
764 if (nla_get_u8(tb[attrtype]))
765 flags = p->flags | mask;
766 else
767 flags = p->flags & ~mask;
768
769 err = br_switchdev_set_port_flag(p, flags, mask);
770 if (err)
771 return err;
772
773 p->flags = flags;
774 return 0;
775}
776
777/* Process bridge protocol info on port */
778static int br_setport(struct net_bridge_port *p, struct nlattr *tb[])
779{
780 unsigned long old_flags = p->flags;
781 bool br_vlan_tunnel_old = false;
782 int err;
783
784 err = br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
785 if (err)
786 return err;
787
788 err = br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
789 if (err)
790 return err;
791
792 err = br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE, BR_MULTICAST_FAST_LEAVE);
793 if (err)
794 return err;
795
796 err = br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
797 if (err)
798 return err;
799
800 err = br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
801 if (err)
802 return err;
803
804 err = br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
805 if (err)
806 return err;
807
808 err = br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
809 if (err)
810 return err;
811
812 err = br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST, BR_MULTICAST_TO_UNICAST);
813 if (err)
814 return err;
815
816 err = br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
817 if (err)
818 return err;
819
820 err = br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
821 if (err)
822 return err;
823
824 err = br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
825 if (err)
826 return err;
827
828 br_vlan_tunnel_old = (p->flags & BR_VLAN_TUNNEL) ? true : false;
829 err = br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
830 if (err)
831 return err;
832
833 if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
834 nbp_vlan_tunnel_info_flush(p);
835
836 if (tb[IFLA_BRPORT_COST]) {
837 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
838 if (err)
839 return err;
840 }
841
842 if (tb[IFLA_BRPORT_PRIORITY]) {
843 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
844 if (err)
845 return err;
846 }
847
848 if (tb[IFLA_BRPORT_STATE]) {
849 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
850 if (err)
851 return err;
852 }
853
854 if (tb[IFLA_BRPORT_FLUSH])
855 br_fdb_delete_by_port(p->br, p, 0, 0);
856
857#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
858 if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
859 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
860
861 err = br_multicast_set_port_router(p, mcast_router);
862 if (err)
863 return err;
864 }
865#endif
866
867 if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
868 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
869
870 if (fwd_mask & BR_GROUPFWD_MACPAUSE)
871 return -EINVAL;
872 p->group_fwd_mask = fwd_mask;
873 }
874
875 err = br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS,
876 BR_NEIGH_SUPPRESS);
877 if (err)
878 return err;
879
880 err = br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
881 if (err)
882 return err;
883
884 if (tb[IFLA_BRPORT_BACKUP_PORT]) {
885 struct net_device *backup_dev = NULL;
886 u32 backup_ifindex;
887
888 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
889 if (backup_ifindex) {
890 backup_dev = __dev_get_by_index(dev_net(p->dev),
891 backup_ifindex);
892 if (!backup_dev)
893 return -ENOENT;
894 }
895
896 err = nbp_backup_change(p, backup_dev);
897 if (err)
898 return err;
899 }
900
901 br_port_flags_change(p, old_flags ^ p->flags);
902 return 0;
903}
904
905/* Change state and parameters on port. */
906int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
907 struct netlink_ext_ack *extack)
908{
909 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
910 struct nlattr *tb[IFLA_BRPORT_MAX + 1];
911 struct net_bridge_port *p;
912 struct nlattr *protinfo;
913 struct nlattr *afspec;
914 bool changed = false;
915 int err = 0;
916
917 protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
918 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
919 if (!protinfo && !afspec)
920 return 0;
921
922 p = br_port_get_rtnl(dev);
923 /* We want to accept dev as bridge itself if the AF_SPEC
924 * is set to see if someone is setting vlan info on the bridge
925 */
926 if (!p && !afspec)
927 return -EINVAL;
928
929 if (p && protinfo) {
930 if (protinfo->nla_type & NLA_F_NESTED) {
931 err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
932 protinfo,
933 br_port_policy,
934 NULL);
935 if (err)
936 return err;
937
938 spin_lock_bh(&p->br->lock);
939 err = br_setport(p, tb);
940 spin_unlock_bh(&p->br->lock);
941 } else {
942 /* Binary compatibility with old RSTP */
943 if (nla_len(protinfo) < sizeof(u8))
944 return -EINVAL;
945
946 spin_lock_bh(&p->br->lock);
947 err = br_set_port_state(p, nla_get_u8(protinfo));
948 spin_unlock_bh(&p->br->lock);
949 }
950 if (err)
951 goto out;
952 changed = true;
953 }
954
955 if (afspec)
956 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
957
958 if (changed)
959 br_ifinfo_notify(RTM_NEWLINK, br, p);
960out:
961 return err;
962}
963
964/* Delete port information */
965int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
966{
967 struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
968 struct net_bridge_port *p;
969 struct nlattr *afspec;
970 bool changed = false;
971 int err = 0;
972
973 afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
974 if (!afspec)
975 return 0;
976
977 p = br_port_get_rtnl(dev);
978 /* We want to accept dev as bridge itself as well */
979 if (!p && !(dev->priv_flags & IFF_EBRIDGE))
980 return -EINVAL;
981
982 err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
983 if (changed)
984 /* Send RTM_NEWLINK because userspace
985 * expects RTM_NEWLINK for vlan dels
986 */
987 br_ifinfo_notify(RTM_NEWLINK, br, p);
988
989 return err;
990}
991
992static int br_validate(struct nlattr *tb[], struct nlattr *data[],
993 struct netlink_ext_ack *extack)
994{
995 if (tb[IFLA_ADDRESS]) {
996 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
997 return -EINVAL;
998 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
999 return -EADDRNOTAVAIL;
1000 }
1001
1002 if (!data)
1003 return 0;
1004
1005#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1006 if (data[IFLA_BR_VLAN_PROTOCOL]) {
1007 switch (nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])) {
1008 case htons(ETH_P_8021Q):
1009 case htons(ETH_P_8021AD):
1010 break;
1011 default:
1012 return -EPROTONOSUPPORT;
1013 }
1014 }
1015
1016 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1017 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1018
1019 if (defpvid >= VLAN_VID_MASK)
1020 return -EINVAL;
1021 }
1022#endif
1023
1024 return 0;
1025}
1026
1027static int br_port_slave_changelink(struct net_device *brdev,
1028 struct net_device *dev,
1029 struct nlattr *tb[],
1030 struct nlattr *data[],
1031 struct netlink_ext_ack *extack)
1032{
1033 struct net_bridge *br = netdev_priv(brdev);
1034 int ret;
1035
1036 if (!data)
1037 return 0;
1038
1039 spin_lock_bh(&br->lock);
1040 ret = br_setport(br_port_get_rtnl(dev), data);
1041 spin_unlock_bh(&br->lock);
1042
1043 return ret;
1044}
1045
1046static int br_port_fill_slave_info(struct sk_buff *skb,
1047 const struct net_device *brdev,
1048 const struct net_device *dev)
1049{
1050 return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1051}
1052
1053static size_t br_port_get_slave_size(const struct net_device *brdev,
1054 const struct net_device *dev)
1055{
1056 return br_port_info_size();
1057}
1058
1059static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1060 [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 },
1061 [IFLA_BR_HELLO_TIME] = { .type = NLA_U32 },
1062 [IFLA_BR_MAX_AGE] = { .type = NLA_U32 },
1063 [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1064 [IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1065 [IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1066 [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1067 [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1068 [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1069 [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1070 .len = ETH_ALEN },
1071 [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1072 [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1073 [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1074 [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1075 [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1076 [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1077 [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1078 [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1079 [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1080 [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1081 [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1082 [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1083 [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1084 [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1085 [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1086 [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1087 [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1088 [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1089 [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1090 [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1091 [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1092 [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1093 [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1094 [IFLA_BR_MULTI_BOOLOPT] = { .type = NLA_EXACT_LEN,
1095 .len = sizeof(struct br_boolopt_multi) },
1096};
1097
1098static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1099 struct nlattr *data[],
1100 struct netlink_ext_ack *extack)
1101{
1102 struct net_bridge *br = netdev_priv(brdev);
1103 int err;
1104
1105 if (!data)
1106 return 0;
1107
1108 if (data[IFLA_BR_FORWARD_DELAY]) {
1109 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1110 if (err)
1111 return err;
1112 }
1113
1114 if (data[IFLA_BR_HELLO_TIME]) {
1115 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1116 if (err)
1117 return err;
1118 }
1119
1120 if (data[IFLA_BR_MAX_AGE]) {
1121 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1122 if (err)
1123 return err;
1124 }
1125
1126 if (data[IFLA_BR_AGEING_TIME]) {
1127 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1128 if (err)
1129 return err;
1130 }
1131
1132 if (data[IFLA_BR_STP_STATE]) {
1133 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1134
1135 err = br_stp_set_enabled(br, stp_enabled, extack);
1136 if (err)
1137 return err;
1138 }
1139
1140 if (data[IFLA_BR_PRIORITY]) {
1141 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1142
1143 br_stp_set_bridge_priority(br, priority);
1144 }
1145
1146 if (data[IFLA_BR_VLAN_FILTERING]) {
1147 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1148
1149 err = __br_vlan_filter_toggle(br, vlan_filter);
1150 if (err)
1151 return err;
1152 }
1153
1154#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1155 if (data[IFLA_BR_VLAN_PROTOCOL]) {
1156 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1157
1158 err = __br_vlan_set_proto(br, vlan_proto);
1159 if (err)
1160 return err;
1161 }
1162
1163 if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1164 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1165
1166 err = __br_vlan_set_default_pvid(br, defpvid, extack);
1167 if (err)
1168 return err;
1169 }
1170
1171 if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1172 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1173
1174 err = br_vlan_set_stats(br, vlan_stats);
1175 if (err)
1176 return err;
1177 }
1178
1179 if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1180 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1181
1182 err = br_vlan_set_stats_per_port(br, per_port);
1183 if (err)
1184 return err;
1185 }
1186#endif
1187
1188 if (data[IFLA_BR_GROUP_FWD_MASK]) {
1189 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1190
1191 if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1192 return -EINVAL;
1193 br->group_fwd_mask = fwd_mask;
1194 }
1195
1196 if (data[IFLA_BR_GROUP_ADDR]) {
1197 u8 new_addr[ETH_ALEN];
1198
1199 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1200 return -EINVAL;
1201 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1202 if (!is_link_local_ether_addr(new_addr))
1203 return -EINVAL;
1204 if (new_addr[5] == 1 || /* 802.3x Pause address */
1205 new_addr[5] == 2 || /* 802.3ad Slow protocols */
1206 new_addr[5] == 3) /* 802.1X PAE address */
1207 return -EINVAL;
1208 spin_lock_bh(&br->lock);
1209 memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1210 spin_unlock_bh(&br->lock);
1211 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1212 br_recalculate_fwd_mask(br);
1213 }
1214
1215 if (data[IFLA_BR_FDB_FLUSH])
1216 br_fdb_flush(br);
1217
1218#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1219 if (data[IFLA_BR_MCAST_ROUTER]) {
1220 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1221
1222 err = br_multicast_set_router(br, multicast_router);
1223 if (err)
1224 return err;
1225 }
1226
1227 if (data[IFLA_BR_MCAST_SNOOPING]) {
1228 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1229
1230 br_multicast_toggle(br, mcast_snooping);
1231 }
1232
1233 if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1234 u8 val;
1235
1236 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1237 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1238 }
1239
1240 if (data[IFLA_BR_MCAST_QUERIER]) {
1241 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1242
1243 err = br_multicast_set_querier(br, mcast_querier);
1244 if (err)
1245 return err;
1246 }
1247
1248 if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1249 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1250 RHT_ELASTICITY);
1251
1252 if (data[IFLA_BR_MCAST_HASH_MAX])
1253 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1254
1255 if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1256 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1257
1258 br->multicast_last_member_count = val;
1259 }
1260
1261 if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1262 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1263
1264 br->multicast_startup_query_count = val;
1265 }
1266
1267 if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1268 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1269
1270 br->multicast_last_member_interval = clock_t_to_jiffies(val);
1271 }
1272
1273 if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1274 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1275
1276 br->multicast_membership_interval = clock_t_to_jiffies(val);
1277 }
1278
1279 if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1280 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1281
1282 br->multicast_querier_interval = clock_t_to_jiffies(val);
1283 }
1284
1285 if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1286 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1287
1288 br->multicast_query_interval = clock_t_to_jiffies(val);
1289 }
1290
1291 if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1292 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1293
1294 br->multicast_query_response_interval = clock_t_to_jiffies(val);
1295 }
1296
1297 if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1298 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1299
1300 br->multicast_startup_query_interval = clock_t_to_jiffies(val);
1301 }
1302
1303 if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1304 __u8 mcast_stats;
1305
1306 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1307 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1308 }
1309
1310 if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1311 __u8 igmp_version;
1312
1313 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1314 err = br_multicast_set_igmp_version(br, igmp_version);
1315 if (err)
1316 return err;
1317 }
1318
1319#if IS_ENABLED(CONFIG_IPV6)
1320 if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1321 __u8 mld_version;
1322
1323 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1324 err = br_multicast_set_mld_version(br, mld_version);
1325 if (err)
1326 return err;
1327 }
1328#endif
1329#endif
1330#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1331 if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1332 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1333
1334 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1335 }
1336
1337 if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1338 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1339
1340 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1341 }
1342
1343 if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1344 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1345
1346 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1347 }
1348#endif
1349
1350 if (data[IFLA_BR_MULTI_BOOLOPT]) {
1351 struct br_boolopt_multi *bm;
1352
1353 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1354 err = br_boolopt_multi_toggle(br, bm, extack);
1355 if (err)
1356 return err;
1357 }
1358
1359 return 0;
1360}
1361
1362static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1363 struct nlattr *tb[], struct nlattr *data[],
1364 struct netlink_ext_ack *extack)
1365{
1366 struct net_bridge *br = netdev_priv(dev);
1367 int err;
1368
1369 err = register_netdevice(dev);
1370 if (err)
1371 return err;
1372
1373 if (tb[IFLA_ADDRESS]) {
1374 spin_lock_bh(&br->lock);
1375 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1376 spin_unlock_bh(&br->lock);
1377 }
1378
1379 err = br_changelink(dev, tb, data, extack);
1380 if (err)
1381 br_dev_delete(dev, NULL);
1382
1383 return err;
1384}
1385
1386static size_t br_get_size(const struct net_device *brdev)
1387{
1388 return nla_total_size(sizeof(u32)) + /* IFLA_BR_FORWARD_DELAY */
1389 nla_total_size(sizeof(u32)) + /* IFLA_BR_HELLO_TIME */
1390 nla_total_size(sizeof(u32)) + /* IFLA_BR_MAX_AGE */
1391 nla_total_size(sizeof(u32)) + /* IFLA_BR_AGEING_TIME */
1392 nla_total_size(sizeof(u32)) + /* IFLA_BR_STP_STATE */
1393 nla_total_size(sizeof(u16)) + /* IFLA_BR_PRIORITY */
1394 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_FILTERING */
1395#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1396 nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */
1397 nla_total_size(sizeof(u16)) + /* IFLA_BR_VLAN_DEFAULT_PVID */
1398 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_ENABLED */
1399 nla_total_size(sizeof(u8)) + /* IFLA_BR_VLAN_STATS_PER_PORT */
1400#endif
1401 nla_total_size(sizeof(u16)) + /* IFLA_BR_GROUP_FWD_MASK */
1402 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_ROOT_ID */
1403 nla_total_size(sizeof(struct ifla_bridge_id)) + /* IFLA_BR_BRIDGE_ID */
1404 nla_total_size(sizeof(u16)) + /* IFLA_BR_ROOT_PORT */
1405 nla_total_size(sizeof(u32)) + /* IFLA_BR_ROOT_PATH_COST */
1406 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE */
1407 nla_total_size(sizeof(u8)) + /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1408 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1409 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1410 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1411 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1412 nla_total_size(ETH_ALEN) + /* IFLA_BR_GROUP_ADDR */
1413#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1414 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_ROUTER */
1415 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_SNOOPING */
1416 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1417 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_QUERIER */
1418 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_STATS_ENABLED */
1419 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_ELASTICITY */
1420 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_HASH_MAX */
1421 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1422 nla_total_size(sizeof(u32)) + /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1423 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1424 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1425 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1426 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1427 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1428 nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1429 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_IGMP_VERSION */
1430 nla_total_size(sizeof(u8)) + /* IFLA_BR_MCAST_MLD_VERSION */
1431#endif
1432#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1433 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IPTABLES */
1434 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_IP6TABLES */
1435 nla_total_size(sizeof(u8)) + /* IFLA_BR_NF_CALL_ARPTABLES */
1436#endif
1437 nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1438 0;
1439}
1440
1441static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1442{
1443 struct net_bridge *br = netdev_priv(brdev);
1444 u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1445 u32 hello_time = jiffies_to_clock_t(br->hello_time);
1446 u32 age_time = jiffies_to_clock_t(br->max_age);
1447 u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1448 u32 stp_enabled = br->stp_enabled;
1449 u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1450 u8 vlan_enabled = br_vlan_enabled(br->dev);
1451 struct br_boolopt_multi bm;
1452 u64 clockval;
1453
1454 clockval = br_timer_value(&br->hello_timer);
1455 if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1456 return -EMSGSIZE;
1457 clockval = br_timer_value(&br->tcn_timer);
1458 if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1459 return -EMSGSIZE;
1460 clockval = br_timer_value(&br->topology_change_timer);
1461 if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1462 IFLA_BR_PAD))
1463 return -EMSGSIZE;
1464 clockval = br_timer_value(&br->gc_work.timer);
1465 if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1466 return -EMSGSIZE;
1467
1468 br_boolopt_multi_get(br, &bm);
1469 if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1470 nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1471 nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1472 nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1473 nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1474 nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1475 nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1476 nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1477 nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1478 &br->bridge_id) ||
1479 nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1480 &br->designated_root) ||
1481 nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1482 nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1483 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1484 nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1485 br->topology_change_detected) ||
1486 nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1487 nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1488 return -EMSGSIZE;
1489
1490#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1491 if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1492 nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1493 nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1494 br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1495 nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1496 br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1497 return -EMSGSIZE;
1498#endif
1499#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1500 if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, br->multicast_router) ||
1501 nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1502 br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1503 nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1504 br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1505 nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1506 br_opt_get(br, BROPT_MULTICAST_QUERIER)) ||
1507 nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1508 br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1509 nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1510 nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1511 nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1512 br->multicast_last_member_count) ||
1513 nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1514 br->multicast_startup_query_count) ||
1515 nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1516 br->multicast_igmp_version))
1517 return -EMSGSIZE;
1518#if IS_ENABLED(CONFIG_IPV6)
1519 if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1520 br->multicast_mld_version))
1521 return -EMSGSIZE;
1522#endif
1523 clockval = jiffies_to_clock_t(br->multicast_last_member_interval);
1524 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1525 IFLA_BR_PAD))
1526 return -EMSGSIZE;
1527 clockval = jiffies_to_clock_t(br->multicast_membership_interval);
1528 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1529 IFLA_BR_PAD))
1530 return -EMSGSIZE;
1531 clockval = jiffies_to_clock_t(br->multicast_querier_interval);
1532 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1533 IFLA_BR_PAD))
1534 return -EMSGSIZE;
1535 clockval = jiffies_to_clock_t(br->multicast_query_interval);
1536 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1537 IFLA_BR_PAD))
1538 return -EMSGSIZE;
1539 clockval = jiffies_to_clock_t(br->multicast_query_response_interval);
1540 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1541 IFLA_BR_PAD))
1542 return -EMSGSIZE;
1543 clockval = jiffies_to_clock_t(br->multicast_startup_query_interval);
1544 if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1545 IFLA_BR_PAD))
1546 return -EMSGSIZE;
1547#endif
1548#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1549 if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1550 br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1551 nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1552 br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1553 nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1554 br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1555 return -EMSGSIZE;
1556#endif
1557
1558 return 0;
1559}
1560
1561static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1562{
1563 struct net_bridge_port *p = NULL;
1564 struct net_bridge_vlan_group *vg;
1565 struct net_bridge_vlan *v;
1566 struct net_bridge *br;
1567 int numvls = 0;
1568
1569 switch (attr) {
1570 case IFLA_STATS_LINK_XSTATS:
1571 br = netdev_priv(dev);
1572 vg = br_vlan_group(br);
1573 break;
1574 case IFLA_STATS_LINK_XSTATS_SLAVE:
1575 p = br_port_get_rtnl(dev);
1576 if (!p)
1577 return 0;
1578 br = p->br;
1579 vg = nbp_vlan_group(p);
1580 break;
1581 default:
1582 return 0;
1583 }
1584
1585 if (vg) {
1586 /* we need to count all, even placeholder entries */
1587 list_for_each_entry(v, &vg->vlan_list, vlist)
1588 numvls++;
1589 }
1590
1591 return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1592 nla_total_size(sizeof(struct br_mcast_stats)) +
1593 nla_total_size(0);
1594}
1595
1596static int br_fill_linkxstats(struct sk_buff *skb,
1597 const struct net_device *dev,
1598 int *prividx, int attr)
1599{
1600 struct nlattr *nla __maybe_unused;
1601 struct net_bridge_port *p = NULL;
1602 struct net_bridge_vlan_group *vg;
1603 struct net_bridge_vlan *v;
1604 struct net_bridge *br;
1605 struct nlattr *nest;
1606 int vl_idx = 0;
1607
1608 switch (attr) {
1609 case IFLA_STATS_LINK_XSTATS:
1610 br = netdev_priv(dev);
1611 vg = br_vlan_group(br);
1612 break;
1613 case IFLA_STATS_LINK_XSTATS_SLAVE:
1614 p = br_port_get_rtnl(dev);
1615 if (!p)
1616 return 0;
1617 br = p->br;
1618 vg = nbp_vlan_group(p);
1619 break;
1620 default:
1621 return -EINVAL;
1622 }
1623
1624 nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1625 if (!nest)
1626 return -EMSGSIZE;
1627
1628 if (vg) {
1629 u16 pvid;
1630
1631 pvid = br_get_pvid(vg);
1632 list_for_each_entry(v, &vg->vlan_list, vlist) {
1633 struct bridge_vlan_xstats vxi;
1634 struct br_vlan_stats stats;
1635
1636 if (++vl_idx < *prividx)
1637 continue;
1638 memset(&vxi, 0, sizeof(vxi));
1639 vxi.vid = v->vid;
1640 vxi.flags = v->flags;
1641 if (v->vid == pvid)
1642 vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1643 br_vlan_get_stats(v, &stats);
1644 vxi.rx_bytes = stats.rx_bytes;
1645 vxi.rx_packets = stats.rx_packets;
1646 vxi.tx_bytes = stats.tx_bytes;
1647 vxi.tx_packets = stats.tx_packets;
1648
1649 if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1650 goto nla_put_failure;
1651 }
1652 }
1653
1654#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1655 if (++vl_idx >= *prividx) {
1656 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1657 sizeof(struct br_mcast_stats),
1658 BRIDGE_XSTATS_PAD);
1659 if (!nla)
1660 goto nla_put_failure;
1661 br_multicast_get_stats(br, p, nla_data(nla));
1662 }
1663#endif
1664
1665 if (p) {
1666 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1667 sizeof(p->stp_xstats),
1668 BRIDGE_XSTATS_PAD);
1669 if (!nla)
1670 goto nla_put_failure;
1671
1672 spin_lock_bh(&br->lock);
1673 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1674 spin_unlock_bh(&br->lock);
1675 }
1676
1677 nla_nest_end(skb, nest);
1678 *prividx = 0;
1679
1680 return 0;
1681
1682nla_put_failure:
1683 nla_nest_end(skb, nest);
1684 *prividx = vl_idx;
1685
1686 return -EMSGSIZE;
1687}
1688
1689static struct rtnl_af_ops br_af_ops __read_mostly = {
1690 .family = AF_BRIDGE,
1691 .get_link_af_size = br_get_link_af_size_filtered,
1692};
1693
1694struct rtnl_link_ops br_link_ops __read_mostly = {
1695 .kind = "bridge",
1696 .priv_size = sizeof(struct net_bridge),
1697 .setup = br_dev_setup,
1698 .maxtype = IFLA_BR_MAX,
1699 .policy = br_policy,
1700 .validate = br_validate,
1701 .newlink = br_dev_newlink,
1702 .changelink = br_changelink,
1703 .dellink = br_dev_delete,
1704 .get_size = br_get_size,
1705 .fill_info = br_fill_info,
1706 .fill_linkxstats = br_fill_linkxstats,
1707 .get_linkxstats_size = br_get_linkxstats_size,
1708
1709 .slave_maxtype = IFLA_BRPORT_MAX,
1710 .slave_policy = br_port_policy,
1711 .slave_changelink = br_port_slave_changelink,
1712 .get_slave_size = br_port_get_slave_size,
1713 .fill_slave_info = br_port_fill_slave_info,
1714};
1715
1716int __init br_netlink_init(void)
1717{
1718 int err;
1719
1720 br_mdb_init();
1721 br_vlan_rtnl_init();
1722 rtnl_af_register(&br_af_ops);
1723
1724 err = rtnl_link_register(&br_link_ops);
1725 if (err)
1726 goto out_af;
1727
1728 return 0;
1729
1730out_af:
1731 rtnl_af_unregister(&br_af_ops);
1732 br_mdb_uninit();
1733 return err;
1734}
1735
1736void br_netlink_fini(void)
1737{
1738 br_mdb_uninit();
1739 br_vlan_rtnl_uninit();
1740 rtnl_af_unregister(&br_af_ops);
1741 rtnl_link_unregister(&br_link_ops);
1742}