1// SPDX-License-Identifier: GPL-2.0-or-later
   2/*
   3 *	Bridge netlink control interface
   4 *
   5 *	Authors:
   6 *	Stephen Hemminger		<shemminger@osdl.org>
   7 */
   8
   9#include <linux/kernel.h>
  10#include <linux/slab.h>
  11#include <linux/etherdevice.h>
  12#include <net/rtnetlink.h>
  13#include <net/net_namespace.h>
  14#include <net/sock.h>
  15#include <uapi/linux/if_bridge.h>
  16
  17#include "br_private.h"
  18#include "br_private_stp.h"
  19#include "br_private_cfm.h"
  20#include "br_private_tunnel.h"
  21#include "br_private_mcast_eht.h"
  22
  23static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
  24				u32 filter_mask)
  25{
  26	struct net_bridge_vlan *v;
  27	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
  28	u16 flags, pvid;
  29	int num_vlans = 0;
  30
  31	if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
  32		return 0;
  33
  34	pvid = br_get_pvid(vg);
  35	/* Count number of vlan infos */
  36	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
  37		flags = 0;
  38		/* only a context, bridge vlan not activated */
  39		if (!br_vlan_should_use(v))
  40			continue;
  41		if (v->vid == pvid)
  42			flags |= BRIDGE_VLAN_INFO_PVID;
  43
  44		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
  45			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
  46
  47		if (vid_range_start == 0) {
  48			goto initvars;
  49		} else if ((v->vid - vid_range_end) == 1 &&
  50			flags == vid_range_flags) {
  51			vid_range_end = v->vid;
  52			continue;
  53		} else {
  54			if ((vid_range_end - vid_range_start) > 0)
  55				num_vlans += 2;
  56			else
  57				num_vlans += 1;
  58		}
  59initvars:
  60		vid_range_start = v->vid;
  61		vid_range_end = v->vid;
  62		vid_range_flags = flags;
  63	}
  64
  65	if (vid_range_start != 0) {
  66		if ((vid_range_end - vid_range_start) > 0)
  67			num_vlans += 2;
  68		else
  69			num_vlans += 1;
  70	}
  71
  72	return num_vlans;
  73}
  74
  75static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
  76				 u32 filter_mask)
  77{
  78	int num_vlans;
  79
  80	if (!vg)
  81		return 0;
  82
  83	if (filter_mask & RTEXT_FILTER_BRVLAN)
  84		return vg->num_vlans;
  85
  86	rcu_read_lock();
  87	num_vlans = __get_num_vlan_infos(vg, filter_mask);
  88	rcu_read_unlock();
  89
  90	return num_vlans;
  91}
  92
  93static size_t br_get_link_af_size_filtered(const struct net_device *dev,
  94					   u32 filter_mask)
  95{
  96	struct net_bridge_vlan_group *vg = NULL;
  97	struct net_bridge_port *p = NULL;
  98	struct net_bridge *br = NULL;
  99	u32 num_cfm_peer_mep_infos;
 100	u32 num_cfm_mep_infos;
 101	size_t vinfo_sz = 0;
 102	int num_vlan_infos;
 103
 104	rcu_read_lock();
 105	if (netif_is_bridge_port(dev)) {
 106		p = br_port_get_check_rcu(dev);
 107		if (p)
 108			vg = nbp_vlan_group_rcu(p);
 109	} else if (netif_is_bridge_master(dev)) {
 110		br = netdev_priv(dev);
 111		vg = br_vlan_group_rcu(br);
 112	}
 113	num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
 114	rcu_read_unlock();
 115
 116	if (p && (p->flags & BR_VLAN_TUNNEL))
 117		vinfo_sz += br_get_vlan_tunnel_info_size(vg);
 118
 119	/* Each VLAN is returned in bridge_vlan_info along with flags */
 120	vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
 121
 122	if (p && vg && (filter_mask & RTEXT_FILTER_MST))
 123		vinfo_sz += br_mst_info_size(vg);
 124
 125	if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
 126		return vinfo_sz;
 127
 128	if (!br)
 129		return vinfo_sz;
 130
 131	/* CFM status info must be added */
 132	br_cfm_mep_count(br, &num_cfm_mep_infos);
 133	br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
 134
 135	vinfo_sz += nla_total_size(0);	/* IFLA_BRIDGE_CFM */
 136	/* For each status struct the MEP instance (u32) is added */
 137	/* MEP instance (u32) + br_cfm_mep_status */
 138	vinfo_sz += num_cfm_mep_infos *
 139		     /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
 140		    (nla_total_size(sizeof(u32))
 141		     /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
 142		     + nla_total_size(sizeof(u32))
 143		     /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
 144		     + nla_total_size(sizeof(u32))
 145		     /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
 146		     + nla_total_size(sizeof(u32)));
 147	/* MEP instance (u32) + br_cfm_cc_peer_status */
 148	vinfo_sz += num_cfm_peer_mep_infos *
 149		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
 150		    (nla_total_size(sizeof(u32))
 151		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
 152		     + nla_total_size(sizeof(u32))
 153		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
 154		     + nla_total_size(sizeof(u32))
 155		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
 156		     + nla_total_size(sizeof(u32))
 157		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
 158		     + nla_total_size(sizeof(u8))
 159		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
 160		     + nla_total_size(sizeof(u8))
 161		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
 162		     + nla_total_size(sizeof(u32))
 163		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
 164		     + nla_total_size(sizeof(u32))
 165		     /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
 166		     + nla_total_size(sizeof(u32)));
 167
 168	return vinfo_sz;
 169}
 170
 171static inline size_t br_port_info_size(void)
 172{
 173	return nla_total_size(1)	/* IFLA_BRPORT_STATE  */
 174		+ nla_total_size(2)	/* IFLA_BRPORT_PRIORITY */
 175		+ nla_total_size(4)	/* IFLA_BRPORT_COST */
 176		+ nla_total_size(1)	/* IFLA_BRPORT_MODE */
 177		+ nla_total_size(1)	/* IFLA_BRPORT_GUARD */
 178		+ nla_total_size(1)	/* IFLA_BRPORT_PROTECT */
 179		+ nla_total_size(1)	/* IFLA_BRPORT_FAST_LEAVE */
 180		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_TO_UCAST */
 181		+ nla_total_size(1)	/* IFLA_BRPORT_LEARNING */
 182		+ nla_total_size(1)	/* IFLA_BRPORT_UNICAST_FLOOD */
 183		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_FLOOD */
 184		+ nla_total_size(1)	/* IFLA_BRPORT_BCAST_FLOOD */
 185		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP */
 186		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP_WIFI */
 187		+ nla_total_size(1)	/* IFLA_BRPORT_VLAN_TUNNEL */
 188		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_SUPPRESS */
 189		+ nla_total_size(1)	/* IFLA_BRPORT_ISOLATED */
 190		+ nla_total_size(1)	/* IFLA_BRPORT_LOCKED */
 191		+ nla_total_size(1)	/* IFLA_BRPORT_MAB */
 192		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */
 193		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_ROOT_ID */
 194		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_BRIDGE_ID */
 195		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_PORT */
 196		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_COST */
 197		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_ID */
 198		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_NO */
 199		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
 200		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_CONFIG_PENDING */
 201		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
 202		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
 203		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
 204#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 205		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MULTICAST_ROUTER */
 206		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_N_GROUPS */
 207		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_MAX_GROUPS */
 208#endif
 209		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_GROUP_FWD_MASK */
 210		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_RING_OPEN */
 211		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MRP_IN_OPEN */
 212		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
 213		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
 214		+ nla_total_size(sizeof(u32))	/* IFLA_BRPORT_BACKUP_NHID */
 215		+ 0;
 216}
 217
 218static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
 219{
 220	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
 221		+ nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
 222		+ nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
 223		+ nla_total_size(4) /* IFLA_MASTER */
 224		+ nla_total_size(4) /* IFLA_MTU */
 225		+ nla_total_size(4) /* IFLA_LINK */
 226		+ nla_total_size(1) /* IFLA_OPERSTATE */
 227		+ nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
 228		+ nla_total_size(br_get_link_af_size_filtered(dev,
 229				 filter_mask)) /* IFLA_AF_SPEC */
 230		+ nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
 231}
 232
 233static int br_port_fill_attrs(struct sk_buff *skb,
 234			      const struct net_bridge_port *p)
 235{
 236	u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
 237	struct net_bridge_port *backup_p;
 238	u64 timerval;
 239
 240	if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
 241	    nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
 242	    nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
 243	    nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
 244	    nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
 245	    nla_put_u8(skb, IFLA_BRPORT_PROTECT,
 246		       !!(p->flags & BR_ROOT_BLOCK)) ||
 247	    nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
 248		       !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
 249	    nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
 250		       !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
 251	    nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
 252	    nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
 253		       !!(p->flags & BR_FLOOD)) ||
 254	    nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
 255		       !!(p->flags & BR_MCAST_FLOOD)) ||
 256	    nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
 257		       !!(p->flags & BR_BCAST_FLOOD)) ||
 258	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
 259	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
 260		       !!(p->flags & BR_PROXYARP_WIFI)) ||
 261	    nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
 262		    &p->designated_root) ||
 263	    nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
 264		    &p->designated_bridge) ||
 265	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
 266	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
 267	    nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
 268	    nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
 269	    nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
 270		       p->topology_change_ack) ||
 271	    nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
 272	    nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
 273							BR_VLAN_TUNNEL)) ||
 274	    nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
 275	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
 276		       !!(p->flags & BR_NEIGH_SUPPRESS)) ||
 277	    nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
 278							  BR_MRP_LOST_CONT)) ||
 279	    nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
 280		       !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
 281	    nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)) ||
 282	    nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(p->flags & BR_PORT_LOCKED)) ||
 283	    nla_put_u8(skb, IFLA_BRPORT_MAB, !!(p->flags & BR_PORT_MAB)) ||
 284	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
 285		       !!(p->flags & BR_NEIGH_VLAN_SUPPRESS)))
 286		return -EMSGSIZE;
 287
 288	timerval = br_timer_value(&p->message_age_timer);
 289	if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
 290			      IFLA_BRPORT_PAD))
 291		return -EMSGSIZE;
 292	timerval = br_timer_value(&p->forward_delay_timer);
 293	if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
 294			      IFLA_BRPORT_PAD))
 295		return -EMSGSIZE;
 296	timerval = br_timer_value(&p->hold_timer);
 297	if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
 298			      IFLA_BRPORT_PAD))
 299		return -EMSGSIZE;
 300
 301#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 302	if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
 303		       p->multicast_ctx.multicast_router) ||
 304	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
 305			p->multicast_eht_hosts_limit) ||
 306	    nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
 307			p->multicast_eht_hosts_cnt) ||
 308	    nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS,
 309			br_multicast_ngroups_get(&p->multicast_ctx)) ||
 310	    nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS,
 311			br_multicast_ngroups_get_max(&p->multicast_ctx)))
 312		return -EMSGSIZE;
 313#endif
 314
 315	/* we might be called only with br->lock */
 316	rcu_read_lock();
 317	backup_p = rcu_dereference(p->backup_port);
 318	if (backup_p)
 319		nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
 320			    backup_p->dev->ifindex);
 321	rcu_read_unlock();
 322
 323	if (p->backup_nhid &&
 324	    nla_put_u32(skb, IFLA_BRPORT_BACKUP_NHID, p->backup_nhid))
 325		return -EMSGSIZE;
 326
 327	return 0;
 328}
 329
 330static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
 331				    u16 vid_end, u16 flags)
 332{
 333	struct  bridge_vlan_info vinfo;
 334
 335	if ((vid_end - vid_start) > 0) {
 336		/* add range to skb */
 337		vinfo.vid = vid_start;
 338		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
 339		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 340			    sizeof(vinfo), &vinfo))
 341			goto nla_put_failure;
 342
 343		vinfo.vid = vid_end;
 344		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
 345		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 346			    sizeof(vinfo), &vinfo))
 347			goto nla_put_failure;
 348	} else {
 349		vinfo.vid = vid_start;
 350		vinfo.flags = flags;
 351		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 352			    sizeof(vinfo), &vinfo))
 353			goto nla_put_failure;
 354	}
 355
 356	return 0;
 357
 358nla_put_failure:
 359	return -EMSGSIZE;
 360}
 361
 362static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
 363					 struct net_bridge_vlan_group *vg)
 364{
 365	struct net_bridge_vlan *v;
 366	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
 367	u16 flags, pvid;
 368	int err = 0;
 369
 370	/* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
 371	 * and mark vlan info with begin and end flags
 372	 * if vlaninfo represents a range
 373	 */
 374	pvid = br_get_pvid(vg);
 375	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
 376		flags = 0;
 377		if (!br_vlan_should_use(v))
 378			continue;
 379		if (v->vid == pvid)
 380			flags |= BRIDGE_VLAN_INFO_PVID;
 381
 382		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
 383			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
 384
 385		if (vid_range_start == 0) {
 386			goto initvars;
 387		} else if ((v->vid - vid_range_end) == 1 &&
 388			flags == vid_range_flags) {
 389			vid_range_end = v->vid;
 390			continue;
 391		} else {
 392			err = br_fill_ifvlaninfo_range(skb, vid_range_start,
 393						       vid_range_end,
 394						       vid_range_flags);
 395			if (err)
 396				return err;
 397		}
 398
 399initvars:
 400		vid_range_start = v->vid;
 401		vid_range_end = v->vid;
 402		vid_range_flags = flags;
 403	}
 404
 405	if (vid_range_start != 0) {
 406		/* Call it once more to send any left over vlans */
 407		err = br_fill_ifvlaninfo_range(skb, vid_range_start,
 408					       vid_range_end,
 409					       vid_range_flags);
 410		if (err)
 411			return err;
 412	}
 413
 414	return 0;
 415}
 416
 417static int br_fill_ifvlaninfo(struct sk_buff *skb,
 418			      struct net_bridge_vlan_group *vg)
 419{
 420	struct bridge_vlan_info vinfo;
 421	struct net_bridge_vlan *v;
 422	u16 pvid;
 423
 424	pvid = br_get_pvid(vg);
 425	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
 426		if (!br_vlan_should_use(v))
 427			continue;
 428
 429		vinfo.vid = v->vid;
 430		vinfo.flags = 0;
 431		if (v->vid == pvid)
 432			vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
 433
 434		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
 435			vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
 436
 437		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 438			    sizeof(vinfo), &vinfo))
 439			goto nla_put_failure;
 440	}
 441
 442	return 0;
 443
 444nla_put_failure:
 445	return -EMSGSIZE;
 446}
 447
 448/*
 449 * Create one netlink message for one interface
 450 * Contains port and master info as well as carrier and bridge state.
 451 */
 452static int br_fill_ifinfo(struct sk_buff *skb,
 453			  const struct net_bridge_port *port,
 454			  u32 pid, u32 seq, int event, unsigned int flags,
 455			  u32 filter_mask, const struct net_device *dev,
 456			  bool getlink)
 457{
 458	u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
 
 459	struct nlattr *af = NULL;
 460	struct net_bridge *br;
 461	struct ifinfomsg *hdr;
 462	struct nlmsghdr *nlh;
 463
 464	if (port)
 465		br = port->br;
 466	else
 467		br = netdev_priv(dev);
 468
 469	br_debug(br, "br_fill_info event %d port %s master %s\n",
 470		     event, dev->name, br->dev->name);
 471
 472	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
 473	if (nlh == NULL)
 474		return -EMSGSIZE;
 475
 476	hdr = nlmsg_data(nlh);
 477	hdr->ifi_family = AF_BRIDGE;
 478	hdr->__ifi_pad = 0;
 479	hdr->ifi_type = dev->type;
 480	hdr->ifi_index = dev->ifindex;
 481	hdr->ifi_flags = dev_get_flags(dev);
 482	hdr->ifi_change = 0;
 483
 484	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
 485	    nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
 486	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
 487	    nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
 488	    (dev->addr_len &&
 489	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
 490	    (dev->ifindex != dev_get_iflink(dev) &&
 491	     nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
 492		goto nla_put_failure;
 493
 494	if (event == RTM_NEWLINK && port) {
 495		struct nlattr *nest;
 496
 497		nest = nla_nest_start(skb, IFLA_PROTINFO);
 498		if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
 499			goto nla_put_failure;
 500		nla_nest_end(skb, nest);
 501	}
 502
 503	if (filter_mask & (RTEXT_FILTER_BRVLAN |
 504			   RTEXT_FILTER_BRVLAN_COMPRESSED |
 505			   RTEXT_FILTER_MRP |
 506			   RTEXT_FILTER_CFM_CONFIG |
 507			   RTEXT_FILTER_CFM_STATUS |
 508			   RTEXT_FILTER_MST)) {
 509		af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
 510		if (!af)
 511			goto nla_put_failure;
 512	}
 513
 514	/* Check if  the VID information is requested */
 515	if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
 516	    (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
 517		struct net_bridge_vlan_group *vg;
 518		int err;
 519
 520		/* RCU needed because of the VLAN locking rules (rcu || rtnl) */
 521		rcu_read_lock();
 522		if (port)
 523			vg = nbp_vlan_group_rcu(port);
 524		else
 525			vg = br_vlan_group_rcu(br);
 526
 527		if (!vg || !vg->num_vlans) {
 528			rcu_read_unlock();
 529			goto done;
 530		}
 531		if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
 532			err = br_fill_ifvlaninfo_compressed(skb, vg);
 533		else
 534			err = br_fill_ifvlaninfo(skb, vg);
 535
 536		if (port && (port->flags & BR_VLAN_TUNNEL))
 537			err = br_fill_vlan_tunnel_info(skb, vg);
 538		rcu_read_unlock();
 539		if (err)
 540			goto nla_put_failure;
 541	}
 542
 543	if (filter_mask & RTEXT_FILTER_MRP) {
 544		int err;
 545
 546		if (!br_mrp_enabled(br) || port)
 547			goto done;
 548
 549		rcu_read_lock();
 550		err = br_mrp_fill_info(skb, br);
 551		rcu_read_unlock();
 552
 553		if (err)
 554			goto nla_put_failure;
 555	}
 556
 557	if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
 558		struct nlattr *cfm_nest = NULL;
 559		int err;
 560
 561		if (!br_cfm_created(br) || port)
 562			goto done;
 563
 564		cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
 565		if (!cfm_nest)
 566			goto nla_put_failure;
 567
 568		if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
 569			rcu_read_lock();
 570			err = br_cfm_config_fill_info(skb, br);
 571			rcu_read_unlock();
 572			if (err)
 573				goto nla_put_failure;
 574		}
 575
 576		if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
 577			rcu_read_lock();
 578			err = br_cfm_status_fill_info(skb, br, getlink);
 579			rcu_read_unlock();
 580			if (err)
 581				goto nla_put_failure;
 582		}
 583
 584		nla_nest_end(skb, cfm_nest);
 585	}
 586
 587	if ((filter_mask & RTEXT_FILTER_MST) &&
 588	    br_opt_get(br, BROPT_MST_ENABLED) && port) {
 589		const struct net_bridge_vlan_group *vg = nbp_vlan_group(port);
 590		struct nlattr *mst_nest;
 591		int err;
 592
 593		if (!vg || !vg->num_vlans)
 594			goto done;
 595
 596		mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST);
 597		if (!mst_nest)
 598			goto nla_put_failure;
 599
 600		err = br_mst_fill_info(skb, vg);
 601		if (err)
 602			goto nla_put_failure;
 603
 604		nla_nest_end(skb, mst_nest);
 605	}
 606
 607done:
 608	if (af) {
 609		if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0))
 610			nla_nest_end(skb, af);
 611		else
 612			nla_nest_cancel(skb, af);
 613	}
 614
 615	nlmsg_end(skb, nlh);
 616	return 0;
 617
 618nla_put_failure:
 619	nlmsg_cancel(skb, nlh);
 620	return -EMSGSIZE;
 621}
 622
 623void br_info_notify(int event, const struct net_bridge *br,
 624		    const struct net_bridge_port *port, u32 filter)
 625{
 626	struct net_device *dev;
 627	struct sk_buff *skb;
 628	int err = -ENOBUFS;
 629	struct net *net;
 630	u16 port_no = 0;
 631
 632	if (WARN_ON(!port && !br))
 633		return;
 634
 635	if (port) {
 636		dev = port->dev;
 637		br = port->br;
 638		port_no = port->port_no;
 639	} else {
 640		dev = br->dev;
 641	}
 642
 643	net = dev_net(dev);
 644	br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
 645
 646	skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
 647	if (skb == NULL)
 648		goto errout;
 649
 650	err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
 651	if (err < 0) {
 652		/* -EMSGSIZE implies BUG in br_nlmsg_size() */
 653		WARN_ON(err == -EMSGSIZE);
 654		kfree_skb(skb);
 655		goto errout;
 656	}
 657	rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
 658	return;
 659errout:
 660	rtnl_set_sk_err(net, RTNLGRP_LINK, err);
 661}
 662
 663/* Notify listeners of a change in bridge or port information */
 664void br_ifinfo_notify(int event, const struct net_bridge *br,
 665		      const struct net_bridge_port *port)
 666{
 667	u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
 668
 669	return br_info_notify(event, br, port, filter);
 670}
 671
 672/*
 673 * Dump information about all ports, in response to GETLINK
 674 */
 675int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
 676	       struct net_device *dev, u32 filter_mask, int nlflags)
 677{
 678	struct net_bridge_port *port = br_port_get_rtnl(dev);
 679
 680	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
 681	    !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
 682	    !(filter_mask & RTEXT_FILTER_MRP) &&
 683	    !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
 684	    !(filter_mask & RTEXT_FILTER_CFM_STATUS))
 685		return 0;
 686
 687	return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
 688			      filter_mask, dev, true);
 689}
 690
 691static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
 692			int cmd, struct bridge_vlan_info *vinfo, bool *changed,
 693			struct netlink_ext_ack *extack)
 694{
 695	bool curr_change;
 696	int err = 0;
 697
 698	switch (cmd) {
 699	case RTM_SETLINK:
 700		if (p) {
 701			/* if the MASTER flag is set this will act on the global
 702			 * per-VLAN entry as well
 703			 */
 704			err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
 705					   &curr_change, extack);
 706		} else {
 707			vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
 708			err = br_vlan_add(br, vinfo->vid, vinfo->flags,
 709					  &curr_change, extack);
 710		}
 711		if (curr_change)
 712			*changed = true;
 713		break;
 714
 715	case RTM_DELLINK:
 716		if (p) {
 717			if (!nbp_vlan_delete(p, vinfo->vid))
 718				*changed = true;
 719
 720			if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
 721			    !br_vlan_delete(p->br, vinfo->vid))
 722				*changed = true;
 723		} else if (!br_vlan_delete(br, vinfo->vid)) {
 724			*changed = true;
 725		}
 726		break;
 727	}
 728
 729	return err;
 730}
 731
 732int br_process_vlan_info(struct net_bridge *br,
 733			 struct net_bridge_port *p, int cmd,
 734			 struct bridge_vlan_info *vinfo_curr,
 735			 struct bridge_vlan_info **vinfo_last,
 736			 bool *changed,
 737			 struct netlink_ext_ack *extack)
 738{
 739	int err, rtm_cmd;
 740
 741	if (!br_vlan_valid_id(vinfo_curr->vid, extack))
 742		return -EINVAL;
 743
 744	/* needed for vlan-only NEWVLAN/DELVLAN notifications */
 745	rtm_cmd = br_afspec_cmd_to_rtm(cmd);
 746
 747	if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
 748		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
 749			return -EINVAL;
 750		*vinfo_last = vinfo_curr;
 751		return 0;
 752	}
 753
 754	if (*vinfo_last) {
 755		struct bridge_vlan_info tmp_vinfo;
 756		int v, v_change_start = 0;
 757
 758		if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
 759			return -EINVAL;
 760
 761		memcpy(&tmp_vinfo, *vinfo_last,
 762		       sizeof(struct bridge_vlan_info));
 763		for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
 764			bool curr_change = false;
 765
 766			tmp_vinfo.vid = v;
 767			err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
 768					   extack);
 769			if (err)
 770				break;
 771			if (curr_change) {
 772				*changed = curr_change;
 773				if (!v_change_start)
 774					v_change_start = v;
 775			} else {
 776				/* nothing to notify yet */
 777				if (!v_change_start)
 778					continue;
 779				br_vlan_notify(br, p, v_change_start,
 780					       v - 1, rtm_cmd);
 781				v_change_start = 0;
 782			}
 783			cond_resched();
 784		}
 785		/* v_change_start is set only if the last/whole range changed */
 786		if (v_change_start)
 787			br_vlan_notify(br, p, v_change_start,
 788				       v - 1, rtm_cmd);
 789
 790		*vinfo_last = NULL;
 791
 792		return err;
 793	}
 794
 795	err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
 796	if (*changed)
 797		br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
 798
 799	return err;
 800}
 801
 802static int br_afspec(struct net_bridge *br,
 803		     struct net_bridge_port *p,
 804		     struct nlattr *af_spec,
 805		     int cmd, bool *changed,
 806		     struct netlink_ext_ack *extack)
 807{
 808	struct bridge_vlan_info *vinfo_curr = NULL;
 809	struct bridge_vlan_info *vinfo_last = NULL;
 810	struct nlattr *attr;
 811	struct vtunnel_info tinfo_last = {};
 812	struct vtunnel_info tinfo_curr = {};
 813	int err = 0, rem;
 814
 815	nla_for_each_nested(attr, af_spec, rem) {
 816		err = 0;
 817		switch (nla_type(attr)) {
 818		case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
 819			if (!p || !(p->flags & BR_VLAN_TUNNEL))
 820				return -EINVAL;
 821			err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
 822			if (err)
 823				return err;
 824			err = br_process_vlan_tunnel_info(br, p, cmd,
 825							  &tinfo_curr,
 826							  &tinfo_last,
 827							  changed);
 828			if (err)
 829				return err;
 830			break;
 831		case IFLA_BRIDGE_VLAN_INFO:
 832			if (nla_len(attr) != sizeof(struct bridge_vlan_info))
 833				return -EINVAL;
 834			vinfo_curr = nla_data(attr);
 835			err = br_process_vlan_info(br, p, cmd, vinfo_curr,
 836						   &vinfo_last, changed,
 837						   extack);
 838			if (err)
 839				return err;
 840			break;
 841		case IFLA_BRIDGE_MRP:
 842			err = br_mrp_parse(br, p, attr, cmd, extack);
 843			if (err)
 844				return err;
 845			break;
 846		case IFLA_BRIDGE_CFM:
 847			err = br_cfm_parse(br, p, attr, cmd, extack);
 848			if (err)
 849				return err;
 850			break;
 851		case IFLA_BRIDGE_MST:
 852			if (!p) {
 853				NL_SET_ERR_MSG(extack,
 854					       "MST states can only be set on bridge ports");
 855				return -EINVAL;
 856			}
 857
 858			if (cmd != RTM_SETLINK) {
 859				NL_SET_ERR_MSG(extack,
 860					       "MST states can only be set through RTM_SETLINK");
 861				return -EINVAL;
 862			}
 863
 864			err = br_mst_process(p, attr, extack);
 865			if (err)
 866				return err;
 867			break;
 868		}
 869	}
 870
 871	return err;
 872}
 873
 874static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
 875	[IFLA_BRPORT_UNSPEC]	= { .strict_start_type =
 876					IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 },
 877	[IFLA_BRPORT_STATE]	= { .type = NLA_U8 },
 878	[IFLA_BRPORT_COST]	= { .type = NLA_U32 },
 879	[IFLA_BRPORT_PRIORITY]	= { .type = NLA_U16 },
 880	[IFLA_BRPORT_MODE]	= { .type = NLA_U8 },
 881	[IFLA_BRPORT_GUARD]	= { .type = NLA_U8 },
 882	[IFLA_BRPORT_PROTECT]	= { .type = NLA_U8 },
 883	[IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
 884	[IFLA_BRPORT_LEARNING]	= { .type = NLA_U8 },
 885	[IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
 886	[IFLA_BRPORT_PROXYARP]	= { .type = NLA_U8 },
 887	[IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
 888	[IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
 889	[IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
 890	[IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
 891	[IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
 892	[IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
 893	[IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
 894	[IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
 895	[IFLA_BRPORT_ISOLATED]	= { .type = NLA_U8 },
 896	[IFLA_BRPORT_LOCKED] = { .type = NLA_U8 },
 897	[IFLA_BRPORT_MAB] = { .type = NLA_U8 },
 898	[IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
 899	[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
 900	[IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT },
 901	[IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 },
 902	[IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1),
 903	[IFLA_BRPORT_BACKUP_NHID] = { .type = NLA_U32 },
 904};
 905
 906/* Change the state of the port and notify spanning tree */
 907static int br_set_port_state(struct net_bridge_port *p, u8 state)
 908{
 909	if (state > BR_STATE_BLOCKING)
 910		return -EINVAL;
 911
 912	/* if kernel STP is running, don't allow changes */
 913	if (p->br->stp_enabled == BR_KERNEL_STP)
 914		return -EBUSY;
 915
 916	/* if device is not up, change is not allowed
 917	 * if link is not present, only allowable state is disabled
 918	 */
 919	if (!netif_running(p->dev) ||
 920	    (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
 921		return -ENETDOWN;
 922
 923	br_set_state(p, state);
 924	br_port_state_selection(p->br);
 925	return 0;
 926}
 927
 928/* Set/clear or port flags based on attribute */
 929static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
 930			     int attrtype, unsigned long mask)
 931{
 932	if (!tb[attrtype])
 933		return;
 934
 935	if (nla_get_u8(tb[attrtype]))
 936		p->flags |= mask;
 937	else
 938		p->flags &= ~mask;
 939}
 940
 941/* Process bridge protocol info on port */
 942static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
 943		      struct netlink_ext_ack *extack)
 944{
 945	unsigned long old_flags, changed_mask;
 946	bool br_vlan_tunnel_old;
 947	int err;
 948
 949	old_flags = p->flags;
 950	br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
 951
 952	br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
 953	br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
 954	br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
 955			 BR_MULTICAST_FAST_LEAVE);
 956	br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
 957	br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
 958	br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
 959	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
 960	br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
 961			 BR_MULTICAST_TO_UNICAST);
 962	br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
 963	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
 964	br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
 965	br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
 966	br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
 967	br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
 968	br_set_port_flag(p, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED);
 969	br_set_port_flag(p, tb, IFLA_BRPORT_MAB, BR_PORT_MAB);
 970	br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
 971			 BR_NEIGH_VLAN_SUPPRESS);
 972
 973	if ((p->flags & BR_PORT_MAB) &&
 974	    (!(p->flags & BR_PORT_LOCKED) || !(p->flags & BR_LEARNING))) {
 975		NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled");
 976		p->flags = old_flags;
 977		return -EINVAL;
 978	} else if (!(p->flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) {
 979		struct net_bridge_fdb_flush_desc desc = {
 980			.flags = BIT(BR_FDB_LOCKED),
 981			.flags_mask = BIT(BR_FDB_LOCKED),
 982			.port_ifindex = p->dev->ifindex,
 983		};
 984
 985		br_fdb_flush(p->br, &desc);
 986	}
 987
 988	changed_mask = old_flags ^ p->flags;
 989
 990	err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack);
 991	if (err) {
 992		p->flags = old_flags;
 993		return err;
 994	}
 995
 996	if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
 997		nbp_vlan_tunnel_info_flush(p);
 998
 999	br_port_flags_change(p, changed_mask);
1000
1001	if (tb[IFLA_BRPORT_COST]) {
1002		err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
1003		if (err)
1004			return err;
1005	}
1006
1007	if (tb[IFLA_BRPORT_PRIORITY]) {
1008		err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
1009		if (err)
1010			return err;
1011	}
1012
1013	if (tb[IFLA_BRPORT_STATE]) {
1014		err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
1015		if (err)
1016			return err;
1017	}
1018
1019	if (tb[IFLA_BRPORT_FLUSH])
1020		br_fdb_delete_by_port(p->br, p, 0, 0);
1021
1022#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1023	if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
1024		u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
1025
1026		err = br_multicast_set_port_router(&p->multicast_ctx,
1027						   mcast_router);
1028		if (err)
1029			return err;
1030	}
1031
1032	if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
1033		u32 hlimit;
1034
1035		hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
1036		err = br_multicast_eht_set_hosts_limit(p, hlimit);
1037		if (err)
1038			return err;
1039	}
1040
1041	if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) {
1042		u32 max_groups;
1043
1044		max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]);
1045		br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups);
1046	}
1047#endif
1048
1049	if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
1050		u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
1051
1052		if (fwd_mask & BR_GROUPFWD_MACPAUSE)
1053			return -EINVAL;
1054		p->group_fwd_mask = fwd_mask;
1055	}
1056
1057	if (tb[IFLA_BRPORT_BACKUP_PORT]) {
1058		struct net_device *backup_dev = NULL;
1059		u32 backup_ifindex;
1060
1061		backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
1062		if (backup_ifindex) {
1063			backup_dev = __dev_get_by_index(dev_net(p->dev),
1064							backup_ifindex);
1065			if (!backup_dev)
1066				return -ENOENT;
1067		}
1068
1069		err = nbp_backup_change(p, backup_dev);
1070		if (err)
1071			return err;
1072	}
1073
1074	if (tb[IFLA_BRPORT_BACKUP_NHID]) {
1075		u32 backup_nhid = nla_get_u32(tb[IFLA_BRPORT_BACKUP_NHID]);
1076
1077		WRITE_ONCE(p->backup_nhid, backup_nhid);
1078	}
1079
1080	return 0;
1081}
1082
1083/* Change state and parameters on port. */
1084int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
1085	       struct netlink_ext_ack *extack)
1086{
1087	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1088	struct nlattr *tb[IFLA_BRPORT_MAX + 1];
1089	struct net_bridge_port *p;
1090	struct nlattr *protinfo;
1091	struct nlattr *afspec;
1092	bool changed = false;
1093	int err = 0;
1094
1095	protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
1096	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1097	if (!protinfo && !afspec)
1098		return 0;
1099
1100	p = br_port_get_rtnl(dev);
1101	/* We want to accept dev as bridge itself if the AF_SPEC
1102	 * is set to see if someone is setting vlan info on the bridge
1103	 */
1104	if (!p && !afspec)
1105		return -EINVAL;
1106
1107	if (p && protinfo) {
1108		if (protinfo->nla_type & NLA_F_NESTED) {
1109			err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1110							  protinfo,
1111							  br_port_policy,
1112							  NULL);
1113			if (err)
1114				return err;
1115
1116			spin_lock_bh(&p->br->lock);
1117			err = br_setport(p, tb, extack);
1118			spin_unlock_bh(&p->br->lock);
1119		} else {
1120			/* Binary compatibility with old RSTP */
1121			if (nla_len(protinfo) < sizeof(u8))
1122				return -EINVAL;
1123
1124			spin_lock_bh(&p->br->lock);
1125			err = br_set_port_state(p, nla_get_u8(protinfo));
1126			spin_unlock_bh(&p->br->lock);
1127		}
1128		if (err)
1129			goto out;
1130		changed = true;
1131	}
1132
1133	if (afspec)
1134		err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1135
1136	if (changed)
1137		br_ifinfo_notify(RTM_NEWLINK, br, p);
1138out:
1139	return err;
1140}
1141
1142/* Delete port information */
1143int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1144{
1145	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1146	struct net_bridge_port *p;
1147	struct nlattr *afspec;
1148	bool changed = false;
1149	int err = 0;
1150
1151	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1152	if (!afspec)
1153		return 0;
1154
1155	p = br_port_get_rtnl(dev);
1156	/* We want to accept dev as bridge itself as well */
1157	if (!p && !netif_is_bridge_master(dev))
1158		return -EINVAL;
1159
1160	err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1161	if (changed)
1162		/* Send RTM_NEWLINK because userspace
1163		 * expects RTM_NEWLINK for vlan dels
1164		 */
1165		br_ifinfo_notify(RTM_NEWLINK, br, p);
1166
1167	return err;
1168}
1169
1170static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1171		       struct netlink_ext_ack *extack)
1172{
1173	if (tb[IFLA_ADDRESS]) {
1174		if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1175			return -EINVAL;
1176		if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1177			return -EADDRNOTAVAIL;
1178	}
1179
1180	if (!data)
1181		return 0;
1182
1183#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1184	if (data[IFLA_BR_VLAN_PROTOCOL] &&
1185	    !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1186		return -EPROTONOSUPPORT;
1187
1188	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1189		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1190
1191		if (defpvid >= VLAN_VID_MASK)
1192			return -EINVAL;
1193	}
1194#endif
1195
1196	return 0;
1197}
1198
1199static int br_port_slave_changelink(struct net_device *brdev,
1200				    struct net_device *dev,
1201				    struct nlattr *tb[],
1202				    struct nlattr *data[],
1203				    struct netlink_ext_ack *extack)
1204{
1205	struct net_bridge *br = netdev_priv(brdev);
1206	int ret;
1207
1208	if (!data)
1209		return 0;
1210
1211	spin_lock_bh(&br->lock);
1212	ret = br_setport(br_port_get_rtnl(dev), data, extack);
1213	spin_unlock_bh(&br->lock);
1214
1215	return ret;
1216}
1217
1218static int br_port_fill_slave_info(struct sk_buff *skb,
1219				   const struct net_device *brdev,
1220				   const struct net_device *dev)
1221{
1222	return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1223}
1224
1225static size_t br_port_get_slave_size(const struct net_device *brdev,
1226				     const struct net_device *dev)
1227{
1228	return br_port_info_size();
1229}
1230
1231static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1232	[IFLA_BR_UNSPEC]	= { .strict_start_type =
1233				    IFLA_BR_FDB_N_LEARNED },
1234	[IFLA_BR_FORWARD_DELAY]	= { .type = NLA_U32 },
1235	[IFLA_BR_HELLO_TIME]	= { .type = NLA_U32 },
1236	[IFLA_BR_MAX_AGE]	= { .type = NLA_U32 },
1237	[IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1238	[IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1239	[IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1240	[IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1241	[IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1242	[IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1243	[IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1244				 .len  = ETH_ALEN },
1245	[IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1246	[IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1247	[IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1248	[IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1249	[IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1250	[IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1251	[IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1252	[IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1253	[IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1254	[IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1255	[IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1256	[IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1257	[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1258	[IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1259	[IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1260	[IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1261	[IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1262	[IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1263	[IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1264	[IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1265	[IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1266	[IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1267	[IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1268	[IFLA_BR_MULTI_BOOLOPT] =
1269		NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1270	[IFLA_BR_FDB_N_LEARNED] = { .type = NLA_REJECT },
1271	[IFLA_BR_FDB_MAX_LEARNED] = { .type = NLA_U32 },
1272};
1273
1274static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1275			 struct nlattr *data[],
1276			 struct netlink_ext_ack *extack)
1277{
1278	struct net_bridge *br = netdev_priv(brdev);
1279	int err;
1280
1281	if (!data)
1282		return 0;
1283
1284	if (data[IFLA_BR_FORWARD_DELAY]) {
1285		err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1286		if (err)
1287			return err;
1288	}
1289
1290	if (data[IFLA_BR_HELLO_TIME]) {
1291		err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1292		if (err)
1293			return err;
1294	}
1295
1296	if (data[IFLA_BR_MAX_AGE]) {
1297		err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1298		if (err)
1299			return err;
1300	}
1301
1302	if (data[IFLA_BR_AGEING_TIME]) {
1303		err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1304		if (err)
1305			return err;
1306	}
1307
1308	if (data[IFLA_BR_STP_STATE]) {
1309		u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1310
1311		err = br_stp_set_enabled(br, stp_enabled, extack);
1312		if (err)
1313			return err;
1314	}
1315
1316	if (data[IFLA_BR_PRIORITY]) {
1317		u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1318
1319		br_stp_set_bridge_priority(br, priority);
1320	}
1321
1322	if (data[IFLA_BR_VLAN_FILTERING]) {
1323		u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1324
1325		err = br_vlan_filter_toggle(br, vlan_filter, extack);
1326		if (err)
1327			return err;
1328	}
1329
1330#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1331	if (data[IFLA_BR_VLAN_PROTOCOL]) {
1332		__be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1333
1334		err = __br_vlan_set_proto(br, vlan_proto, extack);
1335		if (err)
1336			return err;
1337	}
1338
1339	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1340		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1341
1342		err = __br_vlan_set_default_pvid(br, defpvid, extack);
1343		if (err)
1344			return err;
1345	}
1346
1347	if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1348		__u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1349
1350		err = br_vlan_set_stats(br, vlan_stats);
1351		if (err)
1352			return err;
1353	}
1354
1355	if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1356		__u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1357
1358		err = br_vlan_set_stats_per_port(br, per_port);
1359		if (err)
1360			return err;
1361	}
1362#endif
1363
1364	if (data[IFLA_BR_GROUP_FWD_MASK]) {
1365		u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1366
1367		if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1368			return -EINVAL;
1369		br->group_fwd_mask = fwd_mask;
1370	}
1371
1372	if (data[IFLA_BR_GROUP_ADDR]) {
1373		u8 new_addr[ETH_ALEN];
1374
1375		if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1376			return -EINVAL;
1377		memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1378		if (!is_link_local_ether_addr(new_addr))
1379			return -EINVAL;
1380		if (new_addr[5] == 1 ||		/* 802.3x Pause address */
1381		    new_addr[5] == 2 ||		/* 802.3ad Slow protocols */
1382		    new_addr[5] == 3)		/* 802.1X PAE address */
1383			return -EINVAL;
1384		spin_lock_bh(&br->lock);
1385		memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1386		spin_unlock_bh(&br->lock);
1387		br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1388		br_recalculate_fwd_mask(br);
1389	}
1390
1391	if (data[IFLA_BR_FDB_FLUSH]) {
1392		struct net_bridge_fdb_flush_desc desc = {
1393			.flags_mask = BIT(BR_FDB_STATIC)
1394		};
1395
1396		br_fdb_flush(br, &desc);
1397	}
1398
1399#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1400	if (data[IFLA_BR_MCAST_ROUTER]) {
1401		u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1402
1403		err = br_multicast_set_router(&br->multicast_ctx,
1404					      multicast_router);
1405		if (err)
1406			return err;
1407	}
1408
1409	if (data[IFLA_BR_MCAST_SNOOPING]) {
1410		u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1411
1412		err = br_multicast_toggle(br, mcast_snooping, extack);
1413		if (err)
1414			return err;
1415	}
1416
1417	if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1418		u8 val;
1419
1420		val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1421		br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1422	}
1423
1424	if (data[IFLA_BR_MCAST_QUERIER]) {
1425		u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1426
1427		err = br_multicast_set_querier(&br->multicast_ctx,
1428					       mcast_querier);
1429		if (err)
1430			return err;
1431	}
1432
1433	if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1434		br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1435			RHT_ELASTICITY);
1436
1437	if (data[IFLA_BR_MCAST_HASH_MAX])
1438		br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1439
1440	if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1441		u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1442
1443		br->multicast_ctx.multicast_last_member_count = val;
1444	}
1445
1446	if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1447		u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1448
1449		br->multicast_ctx.multicast_startup_query_count = val;
1450	}
1451
1452	if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1453		u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1454
1455		br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
1456	}
1457
1458	if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1459		u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1460
1461		br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
1462	}
1463
1464	if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1465		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1466
1467		br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
1468	}
1469
1470	if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1471		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1472
1473		br_multicast_set_query_intvl(&br->multicast_ctx, val);
1474	}
1475
1476	if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1477		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1478
1479		br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
1480	}
1481
1482	if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1483		u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1484
1485		br_multicast_set_startup_query_intvl(&br->multicast_ctx, val);
1486	}
1487
1488	if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1489		__u8 mcast_stats;
1490
1491		mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1492		br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1493	}
1494
1495	if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1496		__u8 igmp_version;
1497
1498		igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1499		err = br_multicast_set_igmp_version(&br->multicast_ctx,
1500						    igmp_version);
1501		if (err)
1502			return err;
1503	}
1504
1505#if IS_ENABLED(CONFIG_IPV6)
1506	if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1507		__u8 mld_version;
1508
1509		mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1510		err = br_multicast_set_mld_version(&br->multicast_ctx,
1511						   mld_version);
1512		if (err)
1513			return err;
1514	}
1515#endif
1516#endif
1517#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1518	if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1519		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1520
1521		br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1522	}
1523
1524	if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1525		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1526
1527		br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1528	}
1529
1530	if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1531		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1532
1533		br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1534	}
1535#endif
1536
1537	if (data[IFLA_BR_MULTI_BOOLOPT]) {
1538		struct br_boolopt_multi *bm;
1539
1540		bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1541		err = br_boolopt_multi_toggle(br, bm, extack);
1542		if (err)
1543			return err;
1544	}
1545
1546	if (data[IFLA_BR_FDB_MAX_LEARNED]) {
1547		u32 val = nla_get_u32(data[IFLA_BR_FDB_MAX_LEARNED]);
1548
1549		WRITE_ONCE(br->fdb_max_learned, val);
1550	}
1551
1552	return 0;
1553}
1554
1555static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1556			  struct nlattr *tb[], struct nlattr *data[],
1557			  struct netlink_ext_ack *extack)
1558{
1559	struct net_bridge *br = netdev_priv(dev);
1560	int err;
1561
1562	err = register_netdevice(dev);
1563	if (err)
1564		return err;
1565
1566	if (tb[IFLA_ADDRESS]) {
1567		spin_lock_bh(&br->lock);
1568		br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1569		spin_unlock_bh(&br->lock);
1570	}
1571
1572	err = br_changelink(dev, tb, data, extack);
1573	if (err)
1574		br_dev_delete(dev, NULL);
1575
1576	return err;
1577}
1578
1579static size_t br_get_size(const struct net_device *brdev)
1580{
1581	return nla_total_size(sizeof(u32)) +	/* IFLA_BR_FORWARD_DELAY  */
1582	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_HELLO_TIME */
1583	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_MAX_AGE */
1584	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1585	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1586	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1587	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1588#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1589	       nla_total_size(sizeof(__be16)) +	/* IFLA_BR_VLAN_PROTOCOL */
1590	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1591	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1592	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_VLAN_STATS_PER_PORT */
1593#endif
1594	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1595	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1596	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1597	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1598	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1599	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1600	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1601	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1602	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1603	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1604	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1605	       nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1606	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_FDB_N_LEARNED */
1607	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_FDB_MAX_LEARNED */
1608#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1609	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1610	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1611	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1612	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1613	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1614	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1615	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1616	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1617	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1618	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1619	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1620	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1621	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1622	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1623	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1624	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_IGMP_VERSION */
1625	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_MLD_VERSION */
1626	       br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */
1627#endif
1628#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1629	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1630	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1631	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1632#endif
1633	       nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1634	       0;
1635}
1636
1637static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1638{
1639	struct net_bridge *br = netdev_priv(brdev);
1640	u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1641	u32 hello_time = jiffies_to_clock_t(br->hello_time);
1642	u32 age_time = jiffies_to_clock_t(br->max_age);
1643	u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1644	u32 stp_enabled = br->stp_enabled;
1645	u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1646	u8 vlan_enabled = br_vlan_enabled(br->dev);
1647	struct br_boolopt_multi bm;
1648	u64 clockval;
1649
1650	clockval = br_timer_value(&br->hello_timer);
1651	if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1652		return -EMSGSIZE;
1653	clockval = br_timer_value(&br->tcn_timer);
1654	if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1655		return -EMSGSIZE;
1656	clockval = br_timer_value(&br->topology_change_timer);
1657	if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1658			      IFLA_BR_PAD))
1659		return -EMSGSIZE;
1660	clockval = br_timer_value(&br->gc_work.timer);
1661	if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1662		return -EMSGSIZE;
1663
1664	br_boolopt_multi_get(br, &bm);
1665	if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1666	    nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1667	    nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1668	    nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1669	    nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1670	    nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1671	    nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1672	    nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1673	    nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1674		    &br->bridge_id) ||
1675	    nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1676		    &br->designated_root) ||
1677	    nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1678	    nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1679	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1680	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1681		       br->topology_change_detected) ||
1682	    nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1683	    nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm) ||
1684	    nla_put_u32(skb, IFLA_BR_FDB_N_LEARNED,
1685			atomic_read(&br->fdb_n_learned)) ||
1686	    nla_put_u32(skb, IFLA_BR_FDB_MAX_LEARNED, br->fdb_max_learned))
1687		return -EMSGSIZE;
1688
1689#ifdef CONFIG_BRIDGE_VLAN_FILTERING
1690	if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1691	    nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1692	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1693		       br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1694	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1695		       br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1696		return -EMSGSIZE;
1697#endif
1698#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1699	if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER,
1700		       br->multicast_ctx.multicast_router) ||
1701	    nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1702		       br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1703	    nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1704		       br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1705	    nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1706		       br->multicast_ctx.multicast_querier) ||
1707	    nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1708		       br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1709	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1710	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1711	    nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1712			br->multicast_ctx.multicast_last_member_count) ||
1713	    nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1714			br->multicast_ctx.multicast_startup_query_count) ||
1715	    nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1716		       br->multicast_ctx.multicast_igmp_version) ||
1717	    br_multicast_dump_querier_state(skb, &br->multicast_ctx,
1718					    IFLA_BR_MCAST_QUERIER_STATE))
1719		return -EMSGSIZE;
1720#if IS_ENABLED(CONFIG_IPV6)
1721	if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1722		       br->multicast_ctx.multicast_mld_version))
1723		return -EMSGSIZE;
1724#endif
1725	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval);
1726	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1727			      IFLA_BR_PAD))
1728		return -EMSGSIZE;
1729	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval);
1730	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1731			      IFLA_BR_PAD))
1732		return -EMSGSIZE;
1733	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval);
1734	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1735			      IFLA_BR_PAD))
1736		return -EMSGSIZE;
1737	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval);
1738	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1739			      IFLA_BR_PAD))
1740		return -EMSGSIZE;
1741	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval);
1742	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1743			      IFLA_BR_PAD))
1744		return -EMSGSIZE;
1745	clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval);
1746	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1747			      IFLA_BR_PAD))
1748		return -EMSGSIZE;
1749#endif
1750#if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1751	if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1752		       br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1753	    nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1754		       br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1755	    nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1756		       br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1757		return -EMSGSIZE;
1758#endif
1759
1760	return 0;
1761}
1762
1763static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1764{
1765	struct net_bridge_port *p = NULL;
1766	struct net_bridge_vlan_group *vg;
1767	struct net_bridge_vlan *v;
1768	struct net_bridge *br;
1769	int numvls = 0;
1770
1771	switch (attr) {
1772	case IFLA_STATS_LINK_XSTATS:
1773		br = netdev_priv(dev);
1774		vg = br_vlan_group(br);
1775		break;
1776	case IFLA_STATS_LINK_XSTATS_SLAVE:
1777		p = br_port_get_rtnl(dev);
1778		if (!p)
1779			return 0;
1780		vg = nbp_vlan_group(p);
1781		break;
1782	default:
1783		return 0;
1784	}
1785
1786	if (vg) {
1787		/* we need to count all, even placeholder entries */
1788		list_for_each_entry(v, &vg->vlan_list, vlist)
1789			numvls++;
1790	}
1791
1792	return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1793	       nla_total_size_64bit(sizeof(struct br_mcast_stats)) +
1794	       (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) +
1795	       nla_total_size(0);
1796}
1797
1798static int br_fill_linkxstats(struct sk_buff *skb,
1799			      const struct net_device *dev,
1800			      int *prividx, int attr)
1801{
1802	struct nlattr *nla __maybe_unused;
1803	struct net_bridge_port *p = NULL;
1804	struct net_bridge_vlan_group *vg;
1805	struct net_bridge_vlan *v;
1806	struct net_bridge *br;
1807	struct nlattr *nest;
1808	int vl_idx = 0;
1809
1810	switch (attr) {
1811	case IFLA_STATS_LINK_XSTATS:
1812		br = netdev_priv(dev);
1813		vg = br_vlan_group(br);
1814		break;
1815	case IFLA_STATS_LINK_XSTATS_SLAVE:
1816		p = br_port_get_rtnl(dev);
1817		if (!p)
1818			return 0;
1819		br = p->br;
1820		vg = nbp_vlan_group(p);
1821		break;
1822	default:
1823		return -EINVAL;
1824	}
1825
1826	nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1827	if (!nest)
1828		return -EMSGSIZE;
1829
1830	if (vg) {
1831		u16 pvid;
1832
1833		pvid = br_get_pvid(vg);
1834		list_for_each_entry(v, &vg->vlan_list, vlist) {
1835			struct bridge_vlan_xstats vxi;
1836			struct pcpu_sw_netstats stats;
1837
1838			if (++vl_idx < *prividx)
1839				continue;
1840			memset(&vxi, 0, sizeof(vxi));
1841			vxi.vid = v->vid;
1842			vxi.flags = v->flags;
1843			if (v->vid == pvid)
1844				vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1845			br_vlan_get_stats(v, &stats);
1846			vxi.rx_bytes = u64_stats_read(&stats.rx_bytes);
1847			vxi.rx_packets = u64_stats_read(&stats.rx_packets);
1848			vxi.tx_bytes = u64_stats_read(&stats.tx_bytes);
1849			vxi.tx_packets = u64_stats_read(&stats.tx_packets);
1850
1851			if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1852				goto nla_put_failure;
1853		}
1854	}
1855
1856#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1857	if (++vl_idx >= *prividx) {
1858		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1859					sizeof(struct br_mcast_stats),
1860					BRIDGE_XSTATS_PAD);
1861		if (!nla)
1862			goto nla_put_failure;
1863		br_multicast_get_stats(br, p, nla_data(nla));
1864	}
1865#endif
1866
1867	if (p) {
1868		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1869					sizeof(p->stp_xstats),
1870					BRIDGE_XSTATS_PAD);
1871		if (!nla)
1872			goto nla_put_failure;
1873
1874		spin_lock_bh(&br->lock);
1875		memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1876		spin_unlock_bh(&br->lock);
1877	}
1878
1879	nla_nest_end(skb, nest);
1880	*prividx = 0;
1881
1882	return 0;
1883
1884nla_put_failure:
1885	nla_nest_end(skb, nest);
1886	*prividx = vl_idx;
1887
1888	return -EMSGSIZE;
1889}
1890
1891static struct rtnl_af_ops br_af_ops __read_mostly = {
1892	.family			= AF_BRIDGE,
1893	.get_link_af_size	= br_get_link_af_size_filtered,
1894};
1895
1896struct rtnl_link_ops br_link_ops __read_mostly = {
1897	.kind			= "bridge",
1898	.priv_size		= sizeof(struct net_bridge),
1899	.setup			= br_dev_setup,
1900	.maxtype		= IFLA_BR_MAX,
1901	.policy			= br_policy,
1902	.validate		= br_validate,
1903	.newlink		= br_dev_newlink,
1904	.changelink		= br_changelink,
1905	.dellink		= br_dev_delete,
1906	.get_size		= br_get_size,
1907	.fill_info		= br_fill_info,
1908	.fill_linkxstats	= br_fill_linkxstats,
1909	.get_linkxstats_size	= br_get_linkxstats_size,
1910
1911	.slave_maxtype		= IFLA_BRPORT_MAX,
1912	.slave_policy		= br_port_policy,
1913	.slave_changelink	= br_port_slave_changelink,
1914	.get_slave_size		= br_port_get_slave_size,
1915	.fill_slave_info	= br_port_fill_slave_info,
1916};
1917
1918int __init br_netlink_init(void)
1919{
1920	int err;
1921
1922	br_vlan_rtnl_init();
1923	rtnl_af_register(&br_af_ops);
 
 
 
 
 
1924
1925	err = rtnl_link_register(&br_link_ops);
1926	if (err)
1927		goto out_af;
1928
1929	return 0;
1930
1931out_af:
1932	rtnl_af_unregister(&br_af_ops);
 
 
 
1933	return err;
1934}
1935
1936void br_netlink_fini(void)
1937{
1938	br_vlan_rtnl_uninit();
1939	rtnl_af_unregister(&br_af_ops);
1940	rtnl_link_unregister(&br_link_ops);
1941}