[linux.git] / net / sched / cls_api.c

/*
 * net/sched/cls_api.c	Packet classifier API.
 *
 *		This program is free software; you can redistribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Authors:	Alexey Kuznetsov, <[email protected]>
 *
 * Changes:
 *
 * Eduardo J. Blanco <[email protected]> :990222: kmod support
 *
 */

#include <linux/module.h>
#include <linux/types.h>
#include <linux/kernel.h>
#include <linux/string.h>
#include <linux/errno.h>
#include <linux/skbuff.h>
#include <linux/init.h>
#include <linux/kmod.h>
#include <linux/netlink.h>
#include <linux/err.h>
#include <linux/slab.h>
#include <net/net_namespace.h>
#include <net/sock.h>
#include <net/netlink.h>
#include <net/pkt_sched.h>
#include <net/pkt_cls.h>

/* The list of all installed classifier types */

static struct tcf_proto_ops *tcf_proto_base __read_mostly;

/* Protects list of registered TC modules. It is pure SMP lock. */
static DEFINE_RWLOCK(cls_mod_lock);

/* Find classifier type by string name */

static struct tcf_proto_ops *tcf_proto_lookup_ops(struct nlattr *kind)
{
	struct tcf_proto_ops *t = NULL;

	if (kind) {
		read_lock(&cls_mod_lock);
		for (t = tcf_proto_base; t; t = t->next) {
			if (nla_strcmp(kind, t->kind) == 0) {
				if (!try_module_get(t->owner))
					t = NULL;
				break;
			}
		}
		read_unlock(&cls_mod_lock);
	}
	return t;
}

/* Register(unregister) new classifier type */

int register_tcf_proto_ops(struct tcf_proto_ops *ops)
{
	struct tcf_proto_ops *t, **tp;
	int rc = -EEXIST;

	write_lock(&cls_mod_lock);
	for (tp = &tcf_proto_base; (t = *tp) != NULL; tp = &t->next)
		if (!strcmp(ops->kind, t->kind))
			goto out;

	ops->next = NULL;
	*tp = ops;
	rc = 0;
out:
	write_unlock(&cls_mod_lock);
	return rc;
}
EXPORT_SYMBOL(register_tcf_proto_ops);

int unregister_tcf_proto_ops(struct tcf_proto_ops *ops)
{
	struct tcf_proto_ops *t, **tp;
	int rc = -ENOENT;

	write_lock(&cls_mod_lock);
	for (tp = &tcf_proto_base; (t=*tp) != NULL; tp = &t->next)
		if (t == ops)
			break;

	if (!t)
		goto out;
	*tp = t->next;
	rc = 0;
out:
	write_unlock(&cls_mod_lock);
	return rc;
}
EXPORT_SYMBOL(unregister_tcf_proto_ops);

static int tfilter_notify(struct net *net, struct sk_buff *oskb,
			  struct nlmsghdr *n, struct tcf_proto *tp,
			  unsigned long fh, int event);


/* Select new prio value from the range, managed by kernel. */

static inline u32 tcf_auto_prio(struct tcf_proto *tp)
{
	u32 first = TC_H_MAKE(0xC0000000U, 0U);

	if (tp)
		first = tp->prio-1;

	return first;
}

/* Add/change/delete/get a filter node */

static int tc_ctl_tfilter(struct sk_buff *skb, struct nlmsghdr *n, void *arg)
{
	struct net *net = sock_net(skb->sk);
	struct nlattr *tca[TCA_MAX + 1];
	spinlock_t *root_lock;
	struct tcmsg *t;
	u32 protocol;
	u32 prio;
	u32 nprio;
	u32 parent;
	struct net_device *dev;
	struct Qdisc  *q;
	struct tcf_proto **back, **chain;
	struct tcf_proto *tp;
	struct tcf_proto_ops *tp_ops;
	const struct Qdisc_class_ops *cops;
	unsigned long cl;
	unsigned long fh;
	int err;
	int tp_created = 0;

replay:
	t = NLMSG_DATA(n);
	protocol = TC_H_MIN(t->tcm_info);
	prio = TC_H_MAJ(t->tcm_info);
	nprio = prio;
	parent = t->tcm_parent;
	cl = 0;

	if (prio == 0) {
		/* If no priority is given, user wants we allocated it. */
		if (n->nlmsg_type != RTM_NEWTFILTER || !(n->nlmsg_flags&NLM_F_CREATE))
			return -ENOENT;
		prio = TC_H_MAKE(0x80000000U, 0U);
	}

	/* Find head of filter chain. */

	/* Find link */
	dev = __dev_get_by_index(net, t->tcm_ifindex);
	if (dev == NULL)
		return -ENODEV;

	err = nlmsg_parse(n, sizeof(*t), tca, TCA_MAX, NULL);
	if (err < 0)
		return err;

	/* Find qdisc */
	if (!parent) {
		q = dev->qdisc;
		parent = q->handle;
	} else {
		q = qdisc_lookup(dev, TC_H_MAJ(t->tcm_parent));
		if (q == NULL)
			return -EINVAL;
	}

	/* Is it classful? */
	if ((cops = q->ops->cl_ops) == NULL)
		return -EINVAL;

	if (cops->tcf_chain == NULL)
		return -EOPNOTSUPP;

	/* Do we search for filter, attached to class? */
	if (TC_H_MIN(parent)) {
		cl = cops->get(q, parent);
		if (cl == 0)
			return -ENOENT;
	}

	/* And the last stroke */
	chain = cops->tcf_chain(q, cl);
	err = -EINVAL;
	if (chain == NULL)
		goto errout;

	/* Check the chain for existence of proto-tcf with this priority */
	for (back = chain; (tp=*back) != NULL; back = &tp->next) {
		if (tp->prio >= prio) {
			if (tp->prio == prio) {
				if (!nprio || (tp->protocol != protocol && protocol))
					goto errout;
			} else
				tp = NULL;
			break;
		}
	}

	root_lock = qdisc_root_sleeping_lock(q);

	if (tp == NULL) {
		/* Proto-tcf does not exist, create new one */

		if (tca[TCA_KIND] == NULL || !protocol)
			goto errout;

		err = -ENOENT;
		if (n->nlmsg_type != RTM_NEWTFILTER || !(n->nlmsg_flags&NLM_F_CREATE))
			goto errout;


		/* Create new proto tcf */

		err = -ENOBUFS;
		tp = kzalloc(sizeof(*tp), GFP_KERNEL);
		if (tp == NULL)
			goto errout;
		err = -ENOENT;
		tp_ops = tcf_proto_lookup_ops(tca[TCA_KIND]);
		if (tp_ops == NULL) {
#ifdef CONFIG_MODULES
			struct nlattr *kind = tca[TCA_KIND];
			char name[IFNAMSIZ];

			if (kind != NULL &&
			    nla_strlcpy(name, kind, IFNAMSIZ) < IFNAMSIZ) {
				rtnl_unlock();
				request_module("cls_%s", name);
				rtnl_lock();
				tp_ops = tcf_proto_lookup_ops(kind);
				/* We dropped the RTNL semaphore in order to
				 * perform the module load.  So, even if we
				 * succeeded in loading the module we have to
				 * replay the request.  We indicate this using
				 * -EAGAIN.
				 */
				if (tp_ops != NULL) {
					module_put(tp_ops->owner);
					err = -EAGAIN;
				}
			}
#endif
			kfree(tp);
			goto errout;
		}
		tp->ops = tp_ops;
		tp->protocol = protocol;
		tp->prio = nprio ? : TC_H_MAJ(tcf_auto_prio(*back));
		tp->q = q;
		tp->classify = tp_ops->classify;
		tp->classid = parent;

		err = tp_ops->init(tp);
		if (err != 0) {
			module_put(tp_ops->owner);
			kfree(tp);
			goto errout;
		}

		tp_created = 1;

	} else if (tca[TCA_KIND] && nla_strcmp(tca[TCA_KIND], tp->ops->kind))
		goto errout;

	fh = tp->ops->get(tp, t->tcm_handle);

	if (fh == 0) {
		if (n->nlmsg_type == RTM_DELTFILTER && t->tcm_handle == 0) {
			spin_lock_bh(root_lock);
			*back = tp->next;
			spin_unlock_bh(root_lock);

			tfilter_notify(net, skb, n, tp, fh, RTM_DELTFILTER);
			tcf_destroy(tp);
			err = 0;
			goto errout;
		}

		err = -ENOENT;
		if (n->nlmsg_type != RTM_NEWTFILTER ||
		    !(n->nlmsg_flags & NLM_F_CREATE))
			goto errout;
	} else {
		switch (n->nlmsg_type) {
		case RTM_NEWTFILTER:
			err = -EEXIST;
			if (n->nlmsg_flags & NLM_F_EXCL) {
				if (tp_created)
					tcf_destroy(tp);
				goto errout;
			}
			break;
		case RTM_DELTFILTER:
			err = tp->ops->delete(tp, fh);
			if (err == 0)
				tfilter_notify(net, skb, n, tp, fh, RTM_DELTFILTER);
			goto errout;
		case RTM_GETTFILTER:
			err = tfilter_notify(net, skb, n, tp, fh, RTM_NEWTFILTER);
			goto errout;
		default:
			err = -EINVAL;
			goto errout;
		}
	}

	err = tp->ops->change(tp, cl, t->tcm_handle, tca, &fh);
	if (err == 0) {
		if (tp_created) {
			spin_lock_bh(root_lock);
			tp->next = *back;
			*back = tp;
			spin_unlock_bh(root_lock);
		}
		tfilter_notify(net, skb, n, tp, fh, RTM_NEWTFILTER);
	} else {
		if (tp_created)
			tcf_destroy(tp);
	}

errout:
	if (cl)
		cops->put(q, cl);
	if (err == -EAGAIN)
		/* Replay the request. */
		goto replay;
	return err;
}

static int tcf_fill_node(struct sk_buff *skb, struct tcf_proto *tp,
			 unsigned long fh, u32 pid, u32 seq, u16 flags, int event)
{
	struct tcmsg *tcm;
	struct nlmsghdr  *nlh;
	unsigned char *b = skb_tail_pointer(skb);

	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*tcm), flags);
	tcm = NLMSG_DATA(nlh);
	tcm->tcm_family = AF_UNSPEC;
	tcm->tcm__pad1 = 0;
	tcm->tcm__pad2 = 0;
	tcm->tcm_ifindex = qdisc_dev(tp->q)->ifindex;
	tcm->tcm_parent = tp->classid;
	tcm->tcm_info = TC_H_MAKE(tp->prio, tp->protocol);
	NLA_PUT_STRING(skb, TCA_KIND, tp->ops->kind);
	tcm->tcm_handle = fh;
	if (RTM_DELTFILTER != event) {
		tcm->tcm_handle = 0;
		if (tp->ops->dump && tp->ops->dump(tp, fh, skb, tcm) < 0)
			goto nla_put_failure;
	}
	nlh->nlmsg_len = skb_tail_pointer(skb) - b;
	return skb->len;

nlmsg_failure:
nla_put_failure:
	nlmsg_trim(skb, b);
	return -1;
}

static int tfilter_notify(struct net *net, struct sk_buff *oskb,
			  struct nlmsghdr *n, struct tcf_proto *tp,
			  unsigned long fh, int event)
{
	struct sk_buff *skb;
	u32 pid = oskb ? NETLINK_CB(oskb).pid : 0;

	skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL);
	if (!skb)
		return -ENOBUFS;

	if (tcf_fill_node(skb, tp, fh, pid, n->nlmsg_seq, 0, event) <= 0) {
		kfree_skb(skb);
		return -EINVAL;
	}

	return rtnetlink_send(skb, net, pid, RTNLGRP_TC,
			      n->nlmsg_flags & NLM_F_ECHO);
}

struct tcf_dump_args {
	struct tcf_walker w;
	struct sk_buff *skb;
	struct netlink_callback *cb;
};

static int tcf_node_dump(struct tcf_proto *tp, unsigned long n,
			 struct tcf_walker *arg)
{
	struct tcf_dump_args *a = (void *)arg;

	return tcf_fill_node(a->skb, tp, n, NETLINK_CB(a->cb->skb).pid,
			     a->cb->nlh->nlmsg_seq, NLM_F_MULTI, RTM_NEWTFILTER);
}

/* called with RTNL */
static int tc_dump_tfilter(struct sk_buff *skb, struct netlink_callback *cb)
{
	struct net *net = sock_net(skb->sk);
	int t;
	int s_t;
	struct net_device *dev;
	struct Qdisc *q;
	struct tcf_proto *tp, **chain;
	struct tcmsg *tcm = (struct tcmsg *)NLMSG_DATA(cb->nlh);
	unsigned long cl = 0;
	const struct Qdisc_class_ops *cops;
	struct tcf_dump_args arg;

	if (cb->nlh->nlmsg_len < NLMSG_LENGTH(sizeof(*tcm)))
		return skb->len;
	if ((dev = __dev_get_by_index(net, tcm->tcm_ifindex)) == NULL)
		return skb->len;

	if (!tcm->tcm_parent)
		q = dev->qdisc;
	else
		q = qdisc_lookup(dev, TC_H_MAJ(tcm->tcm_parent));
	if (!q)
		goto out;
	if ((cops = q->ops->cl_ops) == NULL)
		goto errout;
	if (cops->tcf_chain == NULL)
		goto errout;
	if (TC_H_MIN(tcm->tcm_parent)) {
		cl = cops->get(q, tcm->tcm_parent);
		if (cl == 0)
			goto errout;
	}
	chain = cops->tcf_chain(q, cl);
	if (chain == NULL)
		goto errout;

	s_t = cb->args[0];

	for (tp=*chain, t=0; tp; tp = tp->next, t++) {
		if (t < s_t) continue;
		if (TC_H_MAJ(tcm->tcm_info) &&
		    TC_H_MAJ(tcm->tcm_info) != tp->prio)
			continue;
		if (TC_H_MIN(tcm->tcm_info) &&
		    TC_H_MIN(tcm->tcm_info) != tp->protocol)
			continue;
		if (t > s_t)
			memset(&cb->args[1], 0, sizeof(cb->args)-sizeof(cb->args[0]));
		if (cb->args[1] == 0) {
			if (tcf_fill_node(skb, tp, 0, NETLINK_CB(cb->skb).pid,
					  cb->nlh->nlmsg_seq, NLM_F_MULTI,
					  RTM_NEWTFILTER) <= 0)
				break;

			cb->args[1] = 1;
		}
		if (tp->ops->walk == NULL)
			continue;
		arg.w.fn = tcf_node_dump;
		arg.skb = skb;
		arg.cb = cb;
		arg.w.stop = 0;
		arg.w.skip = cb->args[1]-1;
		arg.w.count = 0;
		tp->ops->walk(tp, &arg.w);
		cb->args[1] = arg.w.count+1;
		if (arg.w.stop)
			break;
	}

	cb->args[0] = t;

errout:
	if (cl)
		cops->put(q, cl);
out:
	return skb->len;
}

void tcf_exts_destroy(struct tcf_proto *tp, struct tcf_exts *exts)
{
#ifdef CONFIG_NET_CLS_ACT
	if (exts->action) {
		tcf_action_destroy(exts->action, TCA_ACT_UNBIND);
		exts->action = NULL;
	}
#endif
}
EXPORT_SYMBOL(tcf_exts_destroy);

int tcf_exts_validate(struct tcf_proto *tp, struct nlattr **tb,
		  struct nlattr *rate_tlv, struct tcf_exts *exts,
		  const struct tcf_ext_map *map)
{
	memset(exts, 0, sizeof(*exts));

#ifdef CONFIG_NET_CLS_ACT
	{
		struct tc_action *act;

		if (map->police && tb[map->police]) {
			act = tcf_action_init_1(tb[map->police], rate_tlv,
						"police", TCA_ACT_NOREPLACE,
						TCA_ACT_BIND);
			if (IS_ERR(act))
				return PTR_ERR(act);

			act->type = TCA_OLD_COMPAT;
			exts->action = act;
		} else if (map->action && tb[map->action]) {
			act = tcf_action_init(tb[map->action], rate_tlv, NULL,
					      TCA_ACT_NOREPLACE, TCA_ACT_BIND);
			if (IS_ERR(act))
				return PTR_ERR(act);

			exts->action = act;
		}
	}
#else
	if ((map->action && tb[map->action]) ||
	    (map->police && tb[map->police]))
		return -EOPNOTSUPP;
#endif

	return 0;
}
EXPORT_SYMBOL(tcf_exts_validate);

void tcf_exts_change(struct tcf_proto *tp, struct tcf_exts *dst,
		     struct tcf_exts *src)
{
#ifdef CONFIG_NET_CLS_ACT
	if (src->action) {
		struct tc_action *act;
		tcf_tree_lock(tp);
		act = dst->action;
		dst->action = src->action;
		tcf_tree_unlock(tp);
		if (act)
			tcf_action_destroy(act, TCA_ACT_UNBIND);
	}
#endif
}
EXPORT_SYMBOL(tcf_exts_change);

int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts,
		  const struct tcf_ext_map *map)
{
#ifdef CONFIG_NET_CLS_ACT
	if (map->action && exts->action) {
		/*
		 * again for backward compatible mode - we want
		 * to work with both old and new modes of entering
		 * tc data even if iproute2  was newer - jhs
		 */
		struct nlattr *nest;

		if (exts->action->type != TCA_OLD_COMPAT) {
			nest = nla_nest_start(skb, map->action);
			if (nest == NULL)
				goto nla_put_failure;
			if (tcf_action_dump(skb, exts->action, 0, 0) < 0)
				goto nla_put_failure;
			nla_nest_end(skb, nest);
		} else if (map->police) {
			nest = nla_nest_start(skb, map->police);
			if (nest == NULL)
				goto nla_put_failure;
			if (tcf_action_dump_old(skb, exts->action, 0, 0) < 0)
				goto nla_put_failure;
			nla_nest_end(skb, nest);
		}
	}
#endif
	return 0;
nla_put_failure: __attribute__ ((unused))
	return -1;
}
EXPORT_SYMBOL(tcf_exts_dump);


int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts,
			const struct tcf_ext_map *map)
{
#ifdef CONFIG_NET_CLS_ACT
	if (exts->action)
		if (tcf_action_copy_stats(skb, exts->action, 1) < 0)
			goto nla_put_failure;
#endif
	return 0;
nla_put_failure: __attribute__ ((unused))
	return -1;
}
EXPORT_SYMBOL(tcf_exts_dump_stats);

static int __init tc_filter_init(void)
{
	rtnl_register(PF_UNSPEC, RTM_NEWTFILTER, tc_ctl_tfilter, NULL);
	rtnl_register(PF_UNSPEC, RTM_DELTFILTER, tc_ctl_tfilter, NULL);
	rtnl_register(PF_UNSPEC, RTM_GETTFILTER, tc_ctl_tfilter,
						 tc_dump_tfilter);

	return 0;
}

subsys_initcall(tc_filter_init);
Commit	Line	Data
1da177e4 LT	1	/*
	2	* net/sched/cls_api.c Packet classifier API.
	3	*
	4	* This program is free software; you can redistribute it and/or
	5	* modify it under the terms of the GNU General Public License
	6	* as published by the Free Software Foundation; either version
	7	* 2 of the License, or (at your option) any later version.
	8	*
	9	* Authors: Alexey Kuznetsov, <[email protected]>
	10	*
	11	* Changes:
	12	*
	13	* Eduardo J. Blanco <[email protected]> :990222: kmod support
	14	*
	15	*/
	16
1da177e4 LT	17	#include <linux/module.h>
	18	#include <linux/types.h>
	19	#include <linux/kernel.h>
1da177e4	20	#include <linux/string.h>
1da177e4	21	#include <linux/errno.h>
1da177e4	22	#include <linux/skbuff.h>
1da177e4 LT	23	#include <linux/init.h>
1da177e4 LT	24	#include <linux/kmod.h>
dc5fc579	25	#include <linux/netlink.h>
ab27cfb8	26	#include <linux/err.h>
5a0e3ad6	27	#include <linux/slab.h>
b854272b DL	28	#include <net/net_namespace.h>
b854272b DL	29	#include <net/sock.h>
dc5fc579	30	#include <net/netlink.h>
1da177e4 LT	31	#include <net/pkt_sched.h>
	32	#include <net/pkt_cls.h>
	33
1da177e4 LT	34	/* The list of all installed classifier types */
1da177e4 LT	35
2eb9d75c	36	static struct tcf_proto_ops *tcf_proto_base __read_mostly;
1da177e4 LT	37
	38	/* Protects list of registered TC modules. It is pure SMP lock. */
	39	static DEFINE_RWLOCK(cls_mod_lock);
	40
	41	/* Find classifier type by string name */
	42
add93b61	43	static struct tcf_proto_ops tcf_proto_lookup_ops(struct nlattr kind)
1da177e4 LT	44	{
	45	struct tcf_proto_ops *t = NULL;
	46
	47	if (kind) {
	48	read_lock(&cls_mod_lock);
	49	for (t = tcf_proto_base; t; t = t->next) {
add93b61	50	if (nla_strcmp(kind, t->kind) == 0) {
1da177e4 LT	51	if (!try_module_get(t->owner))
	52	t = NULL;
	53	break;
	54	}
	55	}
	56	read_unlock(&cls_mod_lock);
	57	}
	58	return t;
	59	}
	60
	61	/* Register(unregister) new classifier type */
	62
	63	int register_tcf_proto_ops(struct tcf_proto_ops *ops)
	64	{
	65	struct tcf_proto_ops t, *tp;
	66	int rc = -EEXIST;
	67
	68	write_lock(&cls_mod_lock);
	69	for (tp = &tcf_proto_base; (t = *tp) != NULL; tp = &t->next)
	70	if (!strcmp(ops->kind, t->kind))
	71	goto out;
	72
	73	ops->next = NULL;
	74	*tp = ops;
	75	rc = 0;
	76	out:
	77	write_unlock(&cls_mod_lock);
	78	return rc;
	79	}
aa767bfe	80	EXPORT_SYMBOL(register_tcf_proto_ops);
1da177e4 LT	81
	82	int unregister_tcf_proto_ops(struct tcf_proto_ops *ops)
	83	{
	84	struct tcf_proto_ops t, *tp;
	85	int rc = -ENOENT;
	86
	87	write_lock(&cls_mod_lock);
	88	for (tp = &tcf_proto_base; (t=*tp) != NULL; tp = &t->next)
	89	if (t == ops)
	90	break;
	91
	92	if (!t)
	93	goto out;
	94	*tp = t->next;
	95	rc = 0;
	96	out:
	97	write_unlock(&cls_mod_lock);
	98	return rc;
	99	}
aa767bfe	100	EXPORT_SYMBOL(unregister_tcf_proto_ops);
1da177e4	101
7316ae88 TG	102	static int tfilter_notify(struct net net, struct sk_buff oskb,
	103	struct nlmsghdr n, struct tcf_proto tp,
	104	unsigned long fh, int event);
1da177e4 LT	105
	106
	107	/* Select new prio value from the range, managed by kernel. */
	108
aa767bfe	109	static inline u32 tcf_auto_prio(struct tcf_proto *tp)
1da177e4	110	{
aa767bfe	111	u32 first = TC_H_MAKE(0xC0000000U, 0U);
1da177e4 LT	112
	113	if (tp)
	114	first = tp->prio-1;
	115
	116	return first;
	117	}
	118
	119	/* Add/change/delete/get a filter node */
	120
	121	static int tc_ctl_tfilter(struct sk_buff skb, struct nlmsghdr n, void *arg)
	122	{
3b1e0a65	123	struct net *net = sock_net(skb->sk);
add93b61	124	struct nlattr *tca[TCA_MAX + 1];
55dbc640	125	spinlock_t *root_lock;
1da177e4 LT	126	struct tcmsg *t;
	127	u32 protocol;
	128	u32 prio;
	129	u32 nprio;
	130	u32 parent;
	131	struct net_device *dev;
	132	struct Qdisc *q;
	133	struct tcf_proto back, chain;
	134	struct tcf_proto *tp;
	135	struct tcf_proto_ops *tp_ops;
20fea08b	136	const struct Qdisc_class_ops *cops;
1da177e4 LT	137	unsigned long cl;
	138	unsigned long fh;
	139	int err;
12186be7	140	int tp_created = 0;
1da177e4 LT	141
1da177e4 LT	142	replay:
1da177e4 LT	143	t = NLMSG_DATA(n);
	144	protocol = TC_H_MIN(t->tcm_info);
	145	prio = TC_H_MAJ(t->tcm_info);
	146	nprio = prio;
	147	parent = t->tcm_parent;
	148	cl = 0;
	149
	150	if (prio == 0) {
	151	/* If no priority is given, user wants we allocated it. */
	152	if (n->nlmsg_type != RTM_NEWTFILTER \|\| !(n->nlmsg_flags&NLM_F_CREATE))
	153	return -ENOENT;
aa767bfe	154	prio = TC_H_MAKE(0x80000000U, 0U);
1da177e4 LT	155	}
	156
	157	/* Find head of filter chain. */
	158
	159	/* Find link */
7316ae88	160	dev = __dev_get_by_index(net, t->tcm_ifindex);
aa767bfe	161	if (dev == NULL)
1da177e4 LT	162	return -ENODEV;
1da177e4 LT	163
add93b61 PM	164	err = nlmsg_parse(n, sizeof(*t), tca, TCA_MAX, NULL);
	165	if (err < 0)
	166	return err;
	167
1da177e4 LT	168	/* Find qdisc */
1da177e4 LT	169	if (!parent) {
af356afa	170	q = dev->qdisc;
1da177e4	171	parent = q->handle;
aa767bfe SH	172	} else {
	173	q = qdisc_lookup(dev, TC_H_MAJ(t->tcm_parent));
	174	if (q == NULL)
	175	return -EINVAL;
	176	}
1da177e4 LT	177
	178	/* Is it classful? */
	179	if ((cops = q->ops->cl_ops) == NULL)
	180	return -EINVAL;
	181
71ebe5e9 PM	182	if (cops->tcf_chain == NULL)
	183	return -EOPNOTSUPP;
	184
1da177e4 LT	185	/* Do we search for filter, attached to class? */
	186	if (TC_H_MIN(parent)) {
	187	cl = cops->get(q, parent);
	188	if (cl == 0)
	189	return -ENOENT;
	190	}
	191
	192	/* And the last stroke */
	193	chain = cops->tcf_chain(q, cl);
	194	err = -EINVAL;
	195	if (chain == NULL)
	196	goto errout;
	197
	198	/* Check the chain for existence of proto-tcf with this priority */
	199	for (back = chain; (tp=*back) != NULL; back = &tp->next) {
	200	if (tp->prio >= prio) {
	201	if (tp->prio == prio) {
	202	if (!nprio \|\| (tp->protocol != protocol && protocol))
	203	goto errout;
	204	} else
	205	tp = NULL;
	206	break;
	207	}
	208	}
	209
102396ae	210	root_lock = qdisc_root_sleeping_lock(q);
55dbc640	211
1da177e4 LT	212	if (tp == NULL) {
	213	/* Proto-tcf does not exist, create new one */
	214
add93b61	215	if (tca[TCA_KIND] == NULL \|\| !protocol)
1da177e4 LT	216	goto errout;
	217
	218	err = -ENOENT;
	219	if (n->nlmsg_type != RTM_NEWTFILTER \|\| !(n->nlmsg_flags&NLM_F_CREATE))
	220	goto errout;
	221
	222
	223	/* Create new proto tcf */
	224
	225	err = -ENOBUFS;
aa767bfe SH	226	tp = kzalloc(sizeof(*tp), GFP_KERNEL);
aa767bfe SH	227	if (tp == NULL)
1da177e4	228	goto errout;
f2df8249	229	err = -ENOENT;
add93b61	230	tp_ops = tcf_proto_lookup_ops(tca[TCA_KIND]);
1da177e4	231	if (tp_ops == NULL) {
95a5afca	232	#ifdef CONFIG_MODULES
add93b61	233	struct nlattr *kind = tca[TCA_KIND];
1da177e4 LT	234	char name[IFNAMSIZ];
	235
	236	if (kind != NULL &&
add93b61	237	nla_strlcpy(name, kind, IFNAMSIZ) < IFNAMSIZ) {
1da177e4 LT	238	rtnl_unlock();
	239	request_module("cls_%s", name);
	240	rtnl_lock();
	241	tp_ops = tcf_proto_lookup_ops(kind);
	242	/* We dropped the RTNL semaphore in order to
	243	* perform the module load. So, even if we
	244	* succeeded in loading the module we have to
	245	* replay the request. We indicate this using
	246	* -EAGAIN.
	247	*/
	248	if (tp_ops != NULL) {
	249	module_put(tp_ops->owner);
	250	err = -EAGAIN;
	251	}
	252	}
	253	#endif
	254	kfree(tp);
	255	goto errout;
	256	}
1da177e4 LT	257	tp->ops = tp_ops;
1da177e4 LT	258	tp->protocol = protocol;
d0ab8ff8	259	tp->prio = nprio ? : TC_H_MAJ(tcf_auto_prio(*back));
1da177e4 LT	260	tp->q = q;
	261	tp->classify = tp_ops->classify;
	262	tp->classid = parent;
aa767bfe SH	263
	264	err = tp_ops->init(tp);
	265	if (err != 0) {
1da177e4 LT	266	module_put(tp_ops->owner);
	267	kfree(tp);
	268	goto errout;
	269	}
	270
12186be7	271	tp_created = 1;
1da177e4	272
add93b61	273	} else if (tca[TCA_KIND] && nla_strcmp(tca[TCA_KIND], tp->ops->kind))
1da177e4 LT	274	goto errout;
	275
	276	fh = tp->ops->get(tp, t->tcm_handle);
	277
	278	if (fh == 0) {
	279	if (n->nlmsg_type == RTM_DELTFILTER && t->tcm_handle == 0) {
55dbc640	280	spin_lock_bh(root_lock);
1da177e4	281	*back = tp->next;
323c0488	282	spin_unlock_bh(root_lock);
1da177e4	283
7316ae88	284	tfilter_notify(net, skb, n, tp, fh, RTM_DELTFILTER);
1da177e4 LT	285	tcf_destroy(tp);
	286	err = 0;
	287	goto errout;
	288	}
	289
	290	err = -ENOENT;
aa767bfe SH	291	if (n->nlmsg_type != RTM_NEWTFILTER \|\|
aa767bfe SH	292	!(n->nlmsg_flags & NLM_F_CREATE))
1da177e4 LT	293	goto errout;
	294	} else {
	295	switch (n->nlmsg_type) {
10297b99	296	case RTM_NEWTFILTER:
1da177e4	297	err = -EEXIST;
12186be7 MU	298	if (n->nlmsg_flags & NLM_F_EXCL) {
	299	if (tp_created)
	300	tcf_destroy(tp);
1da177e4	301	goto errout;
12186be7	302	}
1da177e4 LT	303	break;
	304	case RTM_DELTFILTER:
	305	err = tp->ops->delete(tp, fh);
	306	if (err == 0)
7316ae88	307	tfilter_notify(net, skb, n, tp, fh, RTM_DELTFILTER);
1da177e4 LT	308	goto errout;
1da177e4 LT	309	case RTM_GETTFILTER:
7316ae88	310	err = tfilter_notify(net, skb, n, tp, fh, RTM_NEWTFILTER);
1da177e4 LT	311	goto errout;
	312	default:
	313	err = -EINVAL;
	314	goto errout;
	315	}
	316	}
	317
	318	err = tp->ops->change(tp, cl, t->tcm_handle, tca, &fh);
12186be7 MU	319	if (err == 0) {
	320	if (tp_created) {
	321	spin_lock_bh(root_lock);
	322	tp->next = *back;
	323	*back = tp;
	324	spin_unlock_bh(root_lock);
	325	}
7316ae88	326	tfilter_notify(net, skb, n, tp, fh, RTM_NEWTFILTER);
12186be7 MU	327	} else {
	328	if (tp_created)
	329	tcf_destroy(tp);
	330	}
1da177e4 LT	331
	332	errout:
	333	if (cl)
	334	cops->put(q, cl);
	335	if (err == -EAGAIN)
	336	/* Replay the request. */
	337	goto replay;
	338	return err;
	339	}
	340
aa767bfe SH	341	static int tcf_fill_node(struct sk_buff skb, struct tcf_proto tp,
aa767bfe SH	342	unsigned long fh, u32 pid, u32 seq, u16 flags, int event)
1da177e4 LT	343	{
	344	struct tcmsg *tcm;
	345	struct nlmsghdr *nlh;
27a884dc	346	unsigned char *b = skb_tail_pointer(skb);
1da177e4	347
e431b8c0	348	nlh = NLMSG_NEW(skb, pid, seq, event, sizeof(*tcm), flags);
1da177e4 LT	349	tcm = NLMSG_DATA(nlh);
1da177e4 LT	350	tcm->tcm_family = AF_UNSPEC;
9ef1d4c7	351	tcm->tcm__pad1 = 0;
ad61df91	352	tcm->tcm__pad2 = 0;
5ce2d488	353	tcm->tcm_ifindex = qdisc_dev(tp->q)->ifindex;
1da177e4 LT	354	tcm->tcm_parent = tp->classid;
1da177e4 LT	355	tcm->tcm_info = TC_H_MAKE(tp->prio, tp->protocol);
57e1c487	356	NLA_PUT_STRING(skb, TCA_KIND, tp->ops->kind);
1da177e4 LT	357	tcm->tcm_handle = fh;
	358	if (RTM_DELTFILTER != event) {
	359	tcm->tcm_handle = 0;
	360	if (tp->ops->dump && tp->ops->dump(tp, fh, skb, tcm) < 0)
add93b61	361	goto nla_put_failure;
1da177e4	362	}
27a884dc	363	nlh->nlmsg_len = skb_tail_pointer(skb) - b;
1da177e4 LT	364	return skb->len;
	365
	366	nlmsg_failure:
add93b61	367	nla_put_failure:
dc5fc579	368	nlmsg_trim(skb, b);
1da177e4 LT	369	return -1;
	370	}
	371
7316ae88 TG	372	static int tfilter_notify(struct net net, struct sk_buff oskb,
	373	struct nlmsghdr n, struct tcf_proto tp,
	374	unsigned long fh, int event)
1da177e4 LT	375	{
	376	struct sk_buff *skb;
	377	u32 pid = oskb ? NETLINK_CB(oskb).pid : 0;
	378
	379	skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL);
	380	if (!skb)
	381	return -ENOBUFS;
	382
	383	if (tcf_fill_node(skb, tp, fh, pid, n->nlmsg_seq, 0, event) <= 0) {
	384	kfree_skb(skb);
	385	return -EINVAL;
	386	}
	387
7316ae88	388	return rtnetlink_send(skb, net, pid, RTNLGRP_TC,
aa767bfe	389	n->nlmsg_flags & NLM_F_ECHO);
1da177e4 LT	390	}
1da177e4 LT	391
aa767bfe	392	struct tcf_dump_args {
1da177e4 LT	393	struct tcf_walker w;
	394	struct sk_buff *skb;
	395	struct netlink_callback *cb;
	396	};
	397
aa767bfe SH	398	static int tcf_node_dump(struct tcf_proto *tp, unsigned long n,
aa767bfe SH	399	struct tcf_walker *arg)
1da177e4	400	{
aa767bfe	401	struct tcf_dump_args a = (void )arg;
1da177e4 LT	402
	403	return tcf_fill_node(a->skb, tp, n, NETLINK_CB(a->cb->skb).pid,
	404	a->cb->nlh->nlmsg_seq, NLM_F_MULTI, RTM_NEWTFILTER);
	405	}
	406
bd27a875	407	/* called with RTNL */
1da177e4 LT	408	static int tc_dump_tfilter(struct sk_buff skb, struct netlink_callback cb)
1da177e4 LT	409	{
3b1e0a65	410	struct net *net = sock_net(skb->sk);
1da177e4 LT	411	int t;
	412	int s_t;
	413	struct net_device *dev;
	414	struct Qdisc *q;
	415	struct tcf_proto tp, *chain;
aa767bfe	416	struct tcmsg tcm = (struct tcmsg )NLMSG_DATA(cb->nlh);
1da177e4	417	unsigned long cl = 0;
20fea08b	418	const struct Qdisc_class_ops *cops;
1da177e4 LT	419	struct tcf_dump_args arg;
	420
	421	if (cb->nlh->nlmsg_len < NLMSG_LENGTH(sizeof(*tcm)))
	422	return skb->len;
7316ae88	423	if ((dev = __dev_get_by_index(net, tcm->tcm_ifindex)) == NULL)
1da177e4 LT	424	return skb->len;
1da177e4 LT	425
1da177e4	426	if (!tcm->tcm_parent)
af356afa	427	q = dev->qdisc;
1da177e4 LT	428	else
	429	q = qdisc_lookup(dev, TC_H_MAJ(tcm->tcm_parent));
	430	if (!q)
	431	goto out;
	432	if ((cops = q->ops->cl_ops) == NULL)
	433	goto errout;
71ebe5e9 PM	434	if (cops->tcf_chain == NULL)
71ebe5e9 PM	435	goto errout;
1da177e4 LT	436	if (TC_H_MIN(tcm->tcm_parent)) {
	437	cl = cops->get(q, tcm->tcm_parent);
	438	if (cl == 0)
	439	goto errout;
	440	}
	441	chain = cops->tcf_chain(q, cl);
	442	if (chain == NULL)
	443	goto errout;
	444
	445	s_t = cb->args[0];
	446
	447	for (tp=*chain, t=0; tp; tp = tp->next, t++) {
	448	if (t < s_t) continue;
	449	if (TC_H_MAJ(tcm->tcm_info) &&
	450	TC_H_MAJ(tcm->tcm_info) != tp->prio)
	451	continue;
	452	if (TC_H_MIN(tcm->tcm_info) &&
	453	TC_H_MIN(tcm->tcm_info) != tp->protocol)
	454	continue;
	455	if (t > s_t)
	456	memset(&cb->args[1], 0, sizeof(cb->args)-sizeof(cb->args[0]));
	457	if (cb->args[1] == 0) {
	458	if (tcf_fill_node(skb, tp, 0, NETLINK_CB(cb->skb).pid,
aa767bfe SH	459	cb->nlh->nlmsg_seq, NLM_F_MULTI,
aa767bfe SH	460	RTM_NEWTFILTER) <= 0)
1da177e4	461	break;
aa767bfe	462
1da177e4 LT	463	cb->args[1] = 1;
	464	}
	465	if (tp->ops->walk == NULL)
	466	continue;
	467	arg.w.fn = tcf_node_dump;
	468	arg.skb = skb;
	469	arg.cb = cb;
	470	arg.w.stop = 0;
	471	arg.w.skip = cb->args[1]-1;
	472	arg.w.count = 0;
	473	tp->ops->walk(tp, &arg.w);
	474	cb->args[1] = arg.w.count+1;
	475	if (arg.w.stop)
	476	break;
	477	}
	478
	479	cb->args[0] = t;
	480
	481	errout:
	482	if (cl)
	483	cops->put(q, cl);
	484	out:
1da177e4 LT	485	return skb->len;
	486	}
	487
aa767bfe	488	void tcf_exts_destroy(struct tcf_proto tp, struct tcf_exts exts)
1da177e4 LT	489	{
	490	#ifdef CONFIG_NET_CLS_ACT
	491	if (exts->action) {
	492	tcf_action_destroy(exts->action, TCA_ACT_UNBIND);
	493	exts->action = NULL;
	494	}
1da177e4 LT	495	#endif
1da177e4 LT	496	}
aa767bfe	497	EXPORT_SYMBOL(tcf_exts_destroy);
1da177e4	498
add93b61 PM	499	int tcf_exts_validate(struct tcf_proto tp, struct nlattr *tb,
add93b61 PM	500	struct nlattr rate_tlv, struct tcf_exts exts,
5239008b	501	const struct tcf_ext_map *map)
1da177e4 LT	502	{
1da177e4 LT	503	memset(exts, 0, sizeof(*exts));
10297b99	504
1da177e4 LT	505	#ifdef CONFIG_NET_CLS_ACT
1da177e4 LT	506	{
1da177e4 LT	507	struct tc_action *act;
1da177e4 LT	508
add93b61	509	if (map->police && tb[map->police]) {
7ba699c6	510	act = tcf_action_init_1(tb[map->police], rate_tlv,
aa767bfe	511	"police", TCA_ACT_NOREPLACE,
ab27cfb8 PM	512	TCA_ACT_BIND);
	513	if (IS_ERR(act))
	514	return PTR_ERR(act);
1da177e4 LT	515
	516	act->type = TCA_OLD_COMPAT;
	517	exts->action = act;
add93b61	518	} else if (map->action && tb[map->action]) {
7ba699c6	519	act = tcf_action_init(tb[map->action], rate_tlv, NULL,
ab27cfb8 PM	520	TCA_ACT_NOREPLACE, TCA_ACT_BIND);
	521	if (IS_ERR(act))
	522	return PTR_ERR(act);
1da177e4 LT	523
	524	exts->action = act;
	525	}
	526	}
1da177e4	527	#else
add93b61 PM	528	if ((map->action && tb[map->action]) \|\|
add93b61 PM	529	(map->police && tb[map->police]))
1da177e4 LT	530	return -EOPNOTSUPP;
	531	#endif
	532
	533	return 0;
	534	}
aa767bfe	535	EXPORT_SYMBOL(tcf_exts_validate);
1da177e4	536
aa767bfe SH	537	void tcf_exts_change(struct tcf_proto tp, struct tcf_exts dst,
aa767bfe SH	538	struct tcf_exts *src)
1da177e4 LT	539	{
	540	#ifdef CONFIG_NET_CLS_ACT
	541	if (src->action) {
	542	struct tc_action *act;
	543	tcf_tree_lock(tp);
47a1a1d4 PM	544	act = dst->action;
47a1a1d4 PM	545	dst->action = src->action;
1da177e4 LT	546	tcf_tree_unlock(tp);
	547	if (act)
	548	tcf_action_destroy(act, TCA_ACT_UNBIND);
	549	}
1da177e4 LT	550	#endif
1da177e4 LT	551	}
aa767bfe	552	EXPORT_SYMBOL(tcf_exts_change);
1da177e4	553
aa767bfe	554	int tcf_exts_dump(struct sk_buff skb, struct tcf_exts exts,
5239008b	555	const struct tcf_ext_map *map)
1da177e4 LT	556	{
	557	#ifdef CONFIG_NET_CLS_ACT
	558	if (map->action && exts->action) {
	559	/*
	560	* again for backward compatible mode - we want
	561	* to work with both old and new modes of entering
	562	* tc data even if iproute2 was newer - jhs
	563	*/
4b3550ef	564	struct nlattr *nest;
1da177e4 LT	565
1da177e4 LT	566	if (exts->action->type != TCA_OLD_COMPAT) {
4b3550ef PM	567	nest = nla_nest_start(skb, map->action);
	568	if (nest == NULL)
	569	goto nla_put_failure;
1da177e4	570	if (tcf_action_dump(skb, exts->action, 0, 0) < 0)
add93b61	571	goto nla_put_failure;
4b3550ef	572	nla_nest_end(skb, nest);
1da177e4	573	} else if (map->police) {
4b3550ef PM	574	nest = nla_nest_start(skb, map->police);
	575	if (nest == NULL)
	576	goto nla_put_failure;
1da177e4	577	if (tcf_action_dump_old(skb, exts->action, 0, 0) < 0)
add93b61	578	goto nla_put_failure;
4b3550ef	579	nla_nest_end(skb, nest);
1da177e4 LT	580	}
1da177e4 LT	581	}
1da177e4 LT	582	#endif
1da177e4 LT	583	return 0;
add93b61	584	nla_put_failure: __attribute__ ((unused))
1da177e4 LT	585	return -1;
1da177e4 LT	586	}
aa767bfe	587	EXPORT_SYMBOL(tcf_exts_dump);
1da177e4	588
aa767bfe SH	589
aa767bfe SH	590	int tcf_exts_dump_stats(struct sk_buff skb, struct tcf_exts exts,
5239008b	591	const struct tcf_ext_map *map)
1da177e4 LT	592	{
	593	#ifdef CONFIG_NET_CLS_ACT
	594	if (exts->action)
	595	if (tcf_action_copy_stats(skb, exts->action, 1) < 0)
add93b61	596	goto nla_put_failure;
1da177e4 LT	597	#endif
1da177e4 LT	598	return 0;
add93b61	599	nla_put_failure: __attribute__ ((unused))
1da177e4 LT	600	return -1;
1da177e4 LT	601	}
aa767bfe	602	EXPORT_SYMBOL(tcf_exts_dump_stats);
1da177e4 LT	603
	604	static int __init tc_filter_init(void)
	605	{
82623c0d TG	606	rtnl_register(PF_UNSPEC, RTM_NEWTFILTER, tc_ctl_tfilter, NULL);
	607	rtnl_register(PF_UNSPEC, RTM_DELTFILTER, tc_ctl_tfilter, NULL);
	608	rtnl_register(PF_UNSPEC, RTM_GETTFILTER, tc_ctl_tfilter,
	609	tc_dump_tfilter);
1da177e4	610
1da177e4 LT	611	return 0;
	612	}
	613
	614	subsys_initcall(tc_filter_init);