net/bridge/br_netlink.c

   1 /*
   2  *      Bridge netlink control interface
   3  *
   4  *      Authors:
   5  *      Stephen Hemminger               <[email protected]>
   6  *
   7  *      This program is free software; you can redistribute it and/or
   8  *      modify it under the terms of the GNU General Public License
   9  *      as published by the Free Software Foundation; either version
  10  *      2 of the License, or (at your option) any later version.
  11  */
  12
  13 #include <linux/kernel.h>
  14 #include <linux/slab.h>
  15 #include <linux/etherdevice.h>
  16 #include <net/rtnetlink.h>
  17 #include <net/net_namespace.h>
  18 #include <net/sock.h>
  19 #include <uapi/linux/if_bridge.h>
  20
  21 #include "br_private.h"
  22 #include "br_private_stp.h"
  23
  24 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
  25                                 u32 filter_mask)
  26 {
  27         struct net_bridge_vlan *v;
  28         u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
  29         u16 flags, pvid;
  30         int num_vlans = 0;
  31
  32         if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
  33                 return 0;
  34
  35         pvid = br_get_pvid(vg);
  36         /* Count number of vlan infos */
  37         list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
  38                 flags = 0;
  39                 /* only a context, bridge vlan not activated */
  40                 if (!br_vlan_should_use(v))
  41                         continue;
  42                 if (v->vid == pvid)
  43                         flags |= BRIDGE_VLAN_INFO_PVID;
  44
  45                 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
  46                         flags |= BRIDGE_VLAN_INFO_UNTAGGED;
  47
  48                 if (vid_range_start == 0) {
  49                         goto initvars;
  50                 } else if ((v->vid - vid_range_end) == 1 &&
  51                         flags == vid_range_flags) {
  52                         vid_range_end = v->vid;
  53                         continue;
  54                 } else {
  55                         if ((vid_range_end - vid_range_start) > 0)
  56                                 num_vlans += 2;
  57                         else
  58                                 num_vlans += 1;
  59                 }
  60 initvars:
  61                 vid_range_start = v->vid;
  62                 vid_range_end = v->vid;
  63                 vid_range_flags = flags;
  64         }
  65
  66         if (vid_range_start != 0) {
  67                 if ((vid_range_end - vid_range_start) > 0)
  68                         num_vlans += 2;
  69                 else
  70                         num_vlans += 1;
  71         }
  72
  73         return num_vlans;
  74 }
  75
  76 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
  77                                  u32 filter_mask)
  78 {
  79         int num_vlans;
  80
  81         if (!vg)
  82                 return 0;
  83
  84         if (filter_mask & RTEXT_FILTER_BRVLAN)
  85                 return vg->num_vlans;
  86
  87         rcu_read_lock();
  88         num_vlans = __get_num_vlan_infos(vg, filter_mask);
  89         rcu_read_unlock();
  90
  91         return num_vlans;
  92 }
  93
  94 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
  95                                            u32 filter_mask)
  96 {
  97         struct net_bridge_vlan_group *vg = NULL;
  98         struct net_bridge_port *p;
  99         struct net_bridge *br;
 100         int num_vlan_infos;
 101
 102         rcu_read_lock();
 103         if (br_port_exists(dev)) {
 104                 p = br_port_get_rcu(dev);
 105                 vg = nbp_vlan_group_rcu(p);
 106         } else if (dev->priv_flags & IFF_EBRIDGE) {
 107                 br = netdev_priv(dev);
 108                 vg = br_vlan_group_rcu(br);
 109         }
 110         num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
 111         rcu_read_unlock();
 112
 113         /* Each VLAN is returned in bridge_vlan_info along with flags */
 114         return num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
 115 }
 116
 117 static inline size_t br_port_info_size(void)
 118 {
 119         return nla_total_size(1)        /* IFLA_BRPORT_STATE  */
 120                 + nla_total_size(2)     /* IFLA_BRPORT_PRIORITY */
 121                 + nla_total_size(4)     /* IFLA_BRPORT_COST */
 122                 + nla_total_size(1)     /* IFLA_BRPORT_MODE */
 123                 + nla_total_size(1)     /* IFLA_BRPORT_GUARD */
 124                 + nla_total_size(1)     /* IFLA_BRPORT_PROTECT */
 125                 + nla_total_size(1)     /* IFLA_BRPORT_FAST_LEAVE */
 126                 + nla_total_size(1)     /* IFLA_BRPORT_LEARNING */
 127                 + nla_total_size(1)     /* IFLA_BRPORT_UNICAST_FLOOD */
 128                 + nla_total_size(1)     /* IFLA_BRPORT_PROXYARP */
 129                 + nla_total_size(1)     /* IFLA_BRPORT_PROXYARP_WIFI */
 130                 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */
 131                 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */
 132                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_DESIGNATED_PORT */
 133                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_DESIGNATED_COST */
 134                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_ID */
 135                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_NO */
 136                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
 137                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_CONFIG_PENDING */
 138                 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
 139                 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
 140                 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
 141 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 142                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_MULTICAST_ROUTER */
 143 #endif
 144                 + 0;
 145 }
 146
 147 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
 148 {
 149         return NLMSG_ALIGN(sizeof(struct ifinfomsg))
 150                 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
 151                 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
 152                 + nla_total_size(4) /* IFLA_MASTER */
 153                 + nla_total_size(4) /* IFLA_MTU */
 154                 + nla_total_size(4) /* IFLA_LINK */
 155                 + nla_total_size(1) /* IFLA_OPERSTATE */
 156                 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
 157                 + nla_total_size(br_get_link_af_size_filtered(dev,
 158                                  filter_mask)); /* IFLA_AF_SPEC */
 159 }
 160
 161 static int br_port_fill_attrs(struct sk_buff *skb,
 162                               const struct net_bridge_port *p)
 163 {
 164         u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
 165         u64 timerval;
 166
 167         if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
 168             nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
 169             nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
 170             nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
 171             nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
 172             nla_put_u8(skb, IFLA_BRPORT_PROTECT,
 173                        !!(p->flags & BR_ROOT_BLOCK)) ||
 174             nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
 175                        !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
 176             nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
 177             nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
 178                        !!(p->flags & BR_FLOOD)) ||
 179             nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
 180                        !!(p->flags & BR_MCAST_FLOOD)) ||
 181             nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
 182             nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
 183                        !!(p->flags & BR_PROXYARP_WIFI)) ||
 184             nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
 185                     &p->designated_root) ||
 186             nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
 187                     &p->designated_bridge) ||
 188             nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
 189             nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
 190             nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
 191             nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
 192             nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
 193                        p->topology_change_ack) ||
 194             nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending))
 195                 return -EMSGSIZE;
 196
 197         timerval = br_timer_value(&p->message_age_timer);
 198         if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
 199                               IFLA_BRPORT_PAD))
 200                 return -EMSGSIZE;
 201         timerval = br_timer_value(&p->forward_delay_timer);
 202         if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
 203                               IFLA_BRPORT_PAD))
 204                 return -EMSGSIZE;
 205         timerval = br_timer_value(&p->hold_timer);
 206         if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
 207                               IFLA_BRPORT_PAD))
 208                 return -EMSGSIZE;
 209
 210 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 211         if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
 212                        p->multicast_router))
 213                 return -EMSGSIZE;
 214 #endif
 215
 216         return 0;
 217 }
 218
 219 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
 220                                     u16 vid_end, u16 flags)
 221 {
 222         struct  bridge_vlan_info vinfo;
 223
 224         if ((vid_end - vid_start) > 0) {
 225                 /* add range to skb */
 226                 vinfo.vid = vid_start;
 227                 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
 228                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 229                             sizeof(vinfo), &vinfo))
 230                         goto nla_put_failure;
 231
 232                 vinfo.vid = vid_end;
 233                 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
 234                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 235                             sizeof(vinfo), &vinfo))
 236                         goto nla_put_failure;
 237         } else {
 238                 vinfo.vid = vid_start;
 239                 vinfo.flags = flags;
 240                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 241                             sizeof(vinfo), &vinfo))
 242                         goto nla_put_failure;
 243         }
 244
 245         return 0;
 246
 247 nla_put_failure:
 248         return -EMSGSIZE;
 249 }
 250
 251 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
 252                                          struct net_bridge_vlan_group *vg)
 253 {
 254         struct net_bridge_vlan *v;
 255         u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
 256         u16 flags, pvid;
 257         int err = 0;
 258
 259         /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
 260          * and mark vlan info with begin and end flags
 261          * if vlaninfo represents a range
 262          */
 263         pvid = br_get_pvid(vg);
 264         list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
 265                 flags = 0;
 266                 if (!br_vlan_should_use(v))
 267                         continue;
 268                 if (v->vid == pvid)
 269                         flags |= BRIDGE_VLAN_INFO_PVID;
 270
 271                 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
 272                         flags |= BRIDGE_VLAN_INFO_UNTAGGED;
 273
 274                 if (vid_range_start == 0) {
 275                         goto initvars;
 276                 } else if ((v->vid - vid_range_end) == 1 &&
 277                         flags == vid_range_flags) {
 278                         vid_range_end = v->vid;
 279                         continue;
 280                 } else {
 281                         err = br_fill_ifvlaninfo_range(skb, vid_range_start,
 282                                                        vid_range_end,
 283                                                        vid_range_flags);
 284                         if (err)
 285                                 return err;
 286                 }
 287
 288 initvars:
 289                 vid_range_start = v->vid;
 290                 vid_range_end = v->vid;
 291                 vid_range_flags = flags;
 292         }
 293
 294         if (vid_range_start != 0) {
 295                 /* Call it once more to send any left over vlans */
 296                 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
 297                                                vid_range_end,
 298                                                vid_range_flags);
 299                 if (err)
 300                         return err;
 301         }
 302
 303         return 0;
 304 }
 305
 306 static int br_fill_ifvlaninfo(struct sk_buff *skb,
 307                               struct net_bridge_vlan_group *vg)
 308 {
 309         struct bridge_vlan_info vinfo;
 310         struct net_bridge_vlan *v;
 311         u16 pvid;
 312
 313         pvid = br_get_pvid(vg);
 314         list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
 315                 if (!br_vlan_should_use(v))
 316                         continue;
 317
 318                 vinfo.vid = v->vid;
 319                 vinfo.flags = 0;
 320                 if (v->vid == pvid)
 321                         vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
 322
 323                 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
 324                         vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
 325
 326                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 327                             sizeof(vinfo), &vinfo))
 328                         goto nla_put_failure;
 329         }
 330
 331         return 0;
 332
 333 nla_put_failure:
 334         return -EMSGSIZE;
 335 }
 336
 337 /*
 338  * Create one netlink message for one interface
 339  * Contains port and master info as well as carrier and bridge state.
 340  */
 341 static int br_fill_ifinfo(struct sk_buff *skb,
 342                           struct net_bridge_port *port,
 343                           u32 pid, u32 seq, int event, unsigned int flags,
 344                           u32 filter_mask, const struct net_device *dev)
 345 {
 346         struct net_bridge *br;
 347         struct ifinfomsg *hdr;
 348         struct nlmsghdr *nlh;
 349         u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
 350
 351         if (port)
 352                 br = port->br;
 353         else
 354                 br = netdev_priv(dev);
 355
 356         br_debug(br, "br_fill_info event %d port %s master %s\n",
 357                      event, dev->name, br->dev->name);
 358
 359         nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
 360         if (nlh == NULL)
 361                 return -EMSGSIZE;
 362
 363         hdr = nlmsg_data(nlh);
 364         hdr->ifi_family = AF_BRIDGE;
 365         hdr->__ifi_pad = 0;
 366         hdr->ifi_type = dev->type;
 367         hdr->ifi_index = dev->ifindex;
 368         hdr->ifi_flags = dev_get_flags(dev);
 369         hdr->ifi_change = 0;
 370
 371         if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
 372             nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
 373             nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
 374             nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
 375             (dev->addr_len &&
 376              nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
 377             (dev->ifindex != dev_get_iflink(dev) &&
 378              nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
 379                 goto nla_put_failure;
 380
 381         if (event == RTM_NEWLINK && port) {
 382                 struct nlattr *nest
 383                         = nla_nest_start(skb, IFLA_PROTINFO | NLA_F_NESTED);
 384
 385                 if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
 386                         goto nla_put_failure;
 387                 nla_nest_end(skb, nest);
 388         }
 389
 390         /* Check if  the VID information is requested */
 391         if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
 392             (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
 393                 struct net_bridge_vlan_group *vg;
 394                 struct nlattr *af;
 395                 int err;
 396
 397                 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
 398                 rcu_read_lock();
 399                 if (port)
 400                         vg = nbp_vlan_group_rcu(port);
 401                 else
 402                         vg = br_vlan_group_rcu(br);
 403
 404                 if (!vg || !vg->num_vlans) {
 405                         rcu_read_unlock();
 406                         goto done;
 407                 }
 408                 af = nla_nest_start(skb, IFLA_AF_SPEC);
 409                 if (!af) {
 410                         rcu_read_unlock();
 411                         goto nla_put_failure;
 412                 }
 413                 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
 414                         err = br_fill_ifvlaninfo_compressed(skb, vg);
 415                 else
 416                         err = br_fill_ifvlaninfo(skb, vg);
 417                 rcu_read_unlock();
 418                 if (err)
 419                         goto nla_put_failure;
 420                 nla_nest_end(skb, af);
 421         }
 422
 423 done:
 424         nlmsg_end(skb, nlh);
 425         return 0;
 426
 427 nla_put_failure:
 428         nlmsg_cancel(skb, nlh);
 429         return -EMSGSIZE;
 430 }
 431
 432 /*
 433  * Notify listeners of a change in port information
 434  */
 435 void br_ifinfo_notify(int event, struct net_bridge_port *port)
 436 {
 437         struct net *net;
 438         struct sk_buff *skb;
 439         int err = -ENOBUFS;
 440         u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
 441
 442         if (!port)
 443                 return;
 444
 445         net = dev_net(port->dev);
 446         br_debug(port->br, "port %u(%s) event %d\n",
 447                  (unsigned int)port->port_no, port->dev->name, event);
 448
 449         skb = nlmsg_new(br_nlmsg_size(port->dev, filter), GFP_ATOMIC);
 450         if (skb == NULL)
 451                 goto errout;
 452
 453         err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, port->dev);
 454         if (err < 0) {
 455                 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
 456                 WARN_ON(err == -EMSGSIZE);
 457                 kfree_skb(skb);
 458                 goto errout;
 459         }
 460         rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
 461         return;
 462 errout:
 463         rtnl_set_sk_err(net, RTNLGRP_LINK, err);
 464 }
 465
 466
 467 /*
 468  * Dump information about all ports, in response to GETLINK
 469  */
 470 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
 471                struct net_device *dev, u32 filter_mask, int nlflags)
 472 {
 473         struct net_bridge_port *port = br_port_get_rtnl(dev);
 474
 475         if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
 476             !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
 477                 return 0;
 478
 479         return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
 480                               filter_mask, dev);
 481 }
 482
 483 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
 484                         int cmd, struct bridge_vlan_info *vinfo)
 485 {
 486         int err = 0;
 487
 488         switch (cmd) {
 489         case RTM_SETLINK:
 490                 if (p) {
 491                         /* if the MASTER flag is set this will act on the global
 492                          * per-VLAN entry as well
 493                          */
 494                         err = nbp_vlan_add(p, vinfo->vid, vinfo->flags);
 495                         if (err)
 496                                 break;
 497                 } else {
 498                         vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
 499                         err = br_vlan_add(br, vinfo->vid, vinfo->flags);
 500                 }
 501                 break;
 502
 503         case RTM_DELLINK:
 504                 if (p) {
 505                         nbp_vlan_delete(p, vinfo->vid);
 506                         if (vinfo->flags & BRIDGE_VLAN_INFO_MASTER)
 507                                 br_vlan_delete(p->br, vinfo->vid);
 508                 } else {
 509                         br_vlan_delete(br, vinfo->vid);
 510                 }
 511                 break;
 512         }
 513
 514         return err;
 515 }
 516
 517 static int br_afspec(struct net_bridge *br,
 518                      struct net_bridge_port *p,
 519                      struct nlattr *af_spec,
 520                      int cmd)
 521 {
 522         struct bridge_vlan_info *vinfo_start = NULL;
 523         struct bridge_vlan_info *vinfo = NULL;
 524         struct nlattr *attr;
 525         int err = 0;
 526         int rem;
 527
 528         nla_for_each_nested(attr, af_spec, rem) {
 529                 if (nla_type(attr) != IFLA_BRIDGE_VLAN_INFO)
 530                         continue;
 531                 if (nla_len(attr) != sizeof(struct bridge_vlan_info))
 532                         return -EINVAL;
 533                 vinfo = nla_data(attr);
 534                 if (!vinfo->vid || vinfo->vid >= VLAN_VID_MASK)
 535                         return -EINVAL;
 536                 if (vinfo->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
 537                         if (vinfo_start)
 538                                 return -EINVAL;
 539                         vinfo_start = vinfo;
 540                         /* don't allow range of pvids */
 541                         if (vinfo_start->flags & BRIDGE_VLAN_INFO_PVID)
 542                                 return -EINVAL;
 543                         continue;
 544                 }
 545
 546                 if (vinfo_start) {
 547                         struct bridge_vlan_info tmp_vinfo;
 548                         int v;
 549
 550                         if (!(vinfo->flags & BRIDGE_VLAN_INFO_RANGE_END))
 551                                 return -EINVAL;
 552
 553                         if (vinfo->vid <= vinfo_start->vid)
 554                                 return -EINVAL;
 555
 556                         memcpy(&tmp_vinfo, vinfo_start,
 557                                sizeof(struct bridge_vlan_info));
 558
 559                         for (v = vinfo_start->vid; v <= vinfo->vid; v++) {
 560                                 tmp_vinfo.vid = v;
 561                                 err = br_vlan_info(br, p, cmd, &tmp_vinfo);
 562                                 if (err)
 563                                         break;
 564                         }
 565                         vinfo_start = NULL;
 566                 } else {
 567                         err = br_vlan_info(br, p, cmd, vinfo);
 568                 }
 569                 if (err)
 570                         break;
 571         }
 572
 573         return err;
 574 }
 575
 576 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
 577         [IFLA_BRPORT_STATE]     = { .type = NLA_U8 },
 578         [IFLA_BRPORT_COST]      = { .type = NLA_U32 },
 579         [IFLA_BRPORT_PRIORITY]  = { .type = NLA_U16 },
 580         [IFLA_BRPORT_MODE]      = { .type = NLA_U8 },
 581         [IFLA_BRPORT_GUARD]     = { .type = NLA_U8 },
 582         [IFLA_BRPORT_PROTECT]   = { .type = NLA_U8 },
 583         [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
 584         [IFLA_BRPORT_LEARNING]  = { .type = NLA_U8 },
 585         [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
 586         [IFLA_BRPORT_PROXYARP]  = { .type = NLA_U8 },
 587         [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
 588         [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
 589 };
 590
 591 /* Change the state of the port and notify spanning tree */
 592 static int br_set_port_state(struct net_bridge_port *p, u8 state)
 593 {
 594         if (state > BR_STATE_BLOCKING)
 595                 return -EINVAL;
 596
 597         /* if kernel STP is running, don't allow changes */
 598         if (p->br->stp_enabled == BR_KERNEL_STP)
 599                 return -EBUSY;
 600
 601         /* if device is not up, change is not allowed
 602          * if link is not present, only allowable state is disabled
 603          */
 604         if (!netif_running(p->dev) ||
 605             (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
 606                 return -ENETDOWN;
 607
 608         br_set_state(p, state);
 609         br_port_state_selection(p->br);
 610         return 0;
 611 }
 612
 613 /* Set/clear or port flags based on attribute */
 614 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
 615                            int attrtype, unsigned long mask)
 616 {
 617         if (tb[attrtype]) {
 618                 u8 flag = nla_get_u8(tb[attrtype]);
 619                 if (flag)
 620                         p->flags |= mask;
 621                 else
 622                         p->flags &= ~mask;
 623         }
 624 }
 625
 626 /* Process bridge protocol info on port */
 627 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[])
 628 {
 629         int err;
 630         unsigned long old_flags = p->flags;
 631
 632         br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
 633         br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
 634         br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE, BR_MULTICAST_FAST_LEAVE);
 635         br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
 636         br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
 637         br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
 638         br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
 639         br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
 640         br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
 641
 642         if (tb[IFLA_BRPORT_COST]) {
 643                 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
 644                 if (err)
 645                         return err;
 646         }
 647
 648         if (tb[IFLA_BRPORT_PRIORITY]) {
 649                 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
 650                 if (err)
 651                         return err;
 652         }
 653
 654         if (tb[IFLA_BRPORT_STATE]) {
 655                 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
 656                 if (err)
 657                         return err;
 658         }
 659
 660         if (tb[IFLA_BRPORT_FLUSH])
 661                 br_fdb_delete_by_port(p->br, p, 0, 0);
 662
 663 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 664         if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
 665                 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
 666
 667                 err = br_multicast_set_port_router(p, mcast_router);
 668                 if (err)
 669                         return err;
 670         }
 671 #endif
 672         br_port_flags_change(p, old_flags ^ p->flags);
 673         return 0;
 674 }
 675
 676 /* Change state and parameters on port. */
 677 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
 678 {
 679         struct nlattr *protinfo;
 680         struct nlattr *afspec;
 681         struct net_bridge_port *p;
 682         struct nlattr *tb[IFLA_BRPORT_MAX + 1];
 683         int err = 0;
 684
 685         protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
 686         afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
 687         if (!protinfo && !afspec)
 688                 return 0;
 689
 690         p = br_port_get_rtnl(dev);
 691         /* We want to accept dev as bridge itself if the AF_SPEC
 692          * is set to see if someone is setting vlan info on the bridge
 693          */
 694         if (!p && !afspec)
 695                 return -EINVAL;
 696
 697         if (p && protinfo) {
 698                 if (protinfo->nla_type & NLA_F_NESTED) {
 699                         err = nla_parse_nested(tb, IFLA_BRPORT_MAX,
 700                                                protinfo, br_port_policy);
 701                         if (err)
 702                                 return err;
 703
 704                         spin_lock_bh(&p->br->lock);
 705                         err = br_setport(p, tb);
 706                         spin_unlock_bh(&p->br->lock);
 707                 } else {
 708                         /* Binary compatibility with old RSTP */
 709                         if (nla_len(protinfo) < sizeof(u8))
 710                                 return -EINVAL;
 711
 712                         spin_lock_bh(&p->br->lock);
 713                         err = br_set_port_state(p, nla_get_u8(protinfo));
 714                         spin_unlock_bh(&p->br->lock);
 715                 }
 716                 if (err)
 717                         goto out;
 718         }
 719
 720         if (afspec) {
 721                 err = br_afspec((struct net_bridge *)netdev_priv(dev), p,
 722                                 afspec, RTM_SETLINK);
 723         }
 724
 725         if (err == 0)
 726                 br_ifinfo_notify(RTM_NEWLINK, p);
 727 out:
 728         return err;
 729 }
 730
 731 /* Delete port information */
 732 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
 733 {
 734         struct nlattr *afspec;
 735         struct net_bridge_port *p;
 736         int err = 0;
 737
 738         afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
 739         if (!afspec)
 740                 return 0;
 741
 742         p = br_port_get_rtnl(dev);
 743         /* We want to accept dev as bridge itself as well */
 744         if (!p && !(dev->priv_flags & IFF_EBRIDGE))
 745                 return -EINVAL;
 746
 747         err = br_afspec((struct net_bridge *)netdev_priv(dev), p,
 748                         afspec, RTM_DELLINK);
 749         if (err == 0)
 750                 /* Send RTM_NEWLINK because userspace
 751                  * expects RTM_NEWLINK for vlan dels
 752                  */
 753                 br_ifinfo_notify(RTM_NEWLINK, p);
 754
 755         return err;
 756 }
 757 static int br_validate(struct nlattr *tb[], struct nlattr *data[])
 758 {
 759         if (tb[IFLA_ADDRESS]) {
 760                 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
 761                         return -EINVAL;
 762                 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
 763                         return -EADDRNOTAVAIL;
 764         }
 765
 766         if (!data)
 767                 return 0;
 768
 769 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
 770         if (data[IFLA_BR_VLAN_PROTOCOL]) {
 771                 switch (nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])) {
 772                 case htons(ETH_P_8021Q):
 773                 case htons(ETH_P_8021AD):
 774                         break;
 775                 default:
 776                         return -EPROTONOSUPPORT;
 777                 }
 778         }
 779 #endif
 780
 781         return 0;
 782 }
 783
 784 static int br_port_slave_changelink(struct net_device *brdev,
 785                                     struct net_device *dev,
 786                                     struct nlattr *tb[],
 787                                     struct nlattr *data[])
 788 {
 789         struct net_bridge *br = netdev_priv(brdev);
 790         int ret;
 791
 792         if (!data)
 793                 return 0;
 794
 795         spin_lock_bh(&br->lock);
 796         ret = br_setport(br_port_get_rtnl(dev), data);
 797         spin_unlock_bh(&br->lock);
 798
 799         return ret;
 800 }
 801
 802 static int br_port_fill_slave_info(struct sk_buff *skb,
 803                                    const struct net_device *brdev,
 804                                    const struct net_device *dev)
 805 {
 806         return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
 807 }
 808
 809 static size_t br_port_get_slave_size(const struct net_device *brdev,
 810                                      const struct net_device *dev)
 811 {
 812         return br_port_info_size();
 813 }
 814
 815 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
 816         [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 },
 817         [IFLA_BR_HELLO_TIME]    = { .type = NLA_U32 },
 818         [IFLA_BR_MAX_AGE]       = { .type = NLA_U32 },
 819         [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
 820         [IFLA_BR_STP_STATE] = { .type = NLA_U32 },
 821         [IFLA_BR_PRIORITY] = { .type = NLA_U16 },
 822         [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
 823         [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
 824         [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
 825         [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
 826                                  .len  = ETH_ALEN },
 827         [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
 828         [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
 829         [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
 830         [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
 831         [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
 832         [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
 833         [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
 834         [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
 835         [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
 836         [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
 837         [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
 838         [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
 839         [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
 840         [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
 841         [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
 842         [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
 843         [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
 844         [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
 845         [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
 846         [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
 847         [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
 848         [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
 849 };
 850
 851 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
 852                          struct nlattr *data[])
 853 {
 854         struct net_bridge *br = netdev_priv(brdev);
 855         int err;
 856
 857         if (!data)
 858                 return 0;
 859
 860         if (data[IFLA_BR_FORWARD_DELAY]) {
 861                 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
 862                 if (err)
 863                         return err;
 864         }
 865
 866         if (data[IFLA_BR_HELLO_TIME]) {
 867                 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
 868                 if (err)
 869                         return err;
 870         }
 871
 872         if (data[IFLA_BR_MAX_AGE]) {
 873                 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
 874                 if (err)
 875                         return err;
 876         }
 877
 878         if (data[IFLA_BR_AGEING_TIME]) {
 879                 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
 880                 if (err)
 881                         return err;
 882         }
 883
 884         if (data[IFLA_BR_STP_STATE]) {
 885                 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
 886
 887                 br_stp_set_enabled(br, stp_enabled);
 888         }
 889
 890         if (data[IFLA_BR_PRIORITY]) {
 891                 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
 892
 893                 br_stp_set_bridge_priority(br, priority);
 894         }
 895
 896         if (data[IFLA_BR_VLAN_FILTERING]) {
 897                 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
 898
 899                 err = __br_vlan_filter_toggle(br, vlan_filter);
 900                 if (err)
 901                         return err;
 902         }
 903
 904 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
 905         if (data[IFLA_BR_VLAN_PROTOCOL]) {
 906                 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
 907
 908                 err = __br_vlan_set_proto(br, vlan_proto);
 909                 if (err)
 910                         return err;
 911         }
 912
 913         if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
 914                 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
 915
 916                 err = __br_vlan_set_default_pvid(br, defpvid);
 917                 if (err)
 918                         return err;
 919         }
 920
 921         if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
 922                 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
 923
 924                 err = br_vlan_set_stats(br, vlan_stats);
 925                 if (err)
 926                         return err;
 927         }
 928 #endif
 929
 930         if (data[IFLA_BR_GROUP_FWD_MASK]) {
 931                 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
 932
 933                 if (fwd_mask & BR_GROUPFWD_RESTRICTED)
 934                         return -EINVAL;
 935                 br->group_fwd_mask = fwd_mask;
 936         }
 937
 938         if (data[IFLA_BR_GROUP_ADDR]) {
 939                 u8 new_addr[ETH_ALEN];
 940
 941                 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
 942                         return -EINVAL;
 943                 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
 944                 if (!is_link_local_ether_addr(new_addr))
 945                         return -EINVAL;
 946                 if (new_addr[5] == 1 ||         /* 802.3x Pause address */
 947                     new_addr[5] == 2 ||         /* 802.3ad Slow protocols */
 948                     new_addr[5] == 3)           /* 802.1X PAE address */
 949                         return -EINVAL;
 950                 spin_lock_bh(&br->lock);
 951                 memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
 952                 spin_unlock_bh(&br->lock);
 953                 br->group_addr_set = true;
 954                 br_recalculate_fwd_mask(br);
 955         }
 956
 957         if (data[IFLA_BR_FDB_FLUSH])
 958                 br_fdb_flush(br);
 959
 960 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 961         if (data[IFLA_BR_MCAST_ROUTER]) {
 962                 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
 963
 964                 err = br_multicast_set_router(br, multicast_router);
 965                 if (err)
 966                         return err;
 967         }
 968
 969         if (data[IFLA_BR_MCAST_SNOOPING]) {
 970                 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
 971
 972                 err = br_multicast_toggle(br, mcast_snooping);
 973                 if (err)
 974                         return err;
 975         }
 976
 977         if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
 978                 u8 val;
 979
 980                 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
 981                 br->multicast_query_use_ifaddr = !!val;
 982         }
 983
 984         if (data[IFLA_BR_MCAST_QUERIER]) {
 985                 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
 986
 987                 err = br_multicast_set_querier(br, mcast_querier);
 988                 if (err)
 989                         return err;
 990         }
 991
 992         if (data[IFLA_BR_MCAST_HASH_ELASTICITY]) {
 993                 u32 val = nla_get_u32(data[IFLA_BR_MCAST_HASH_ELASTICITY]);
 994
 995                 br->hash_elasticity = val;
 996         }
 997
 998         if (data[IFLA_BR_MCAST_HASH_MAX]) {
 999                 u32 hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1000
1001                 err = br_multicast_set_hash_max(br, hash_max);
1002                 if (err)
1003                         return err;
1004         }
1005
1006         if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1007                 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1008
1009                 br->multicast_last_member_count = val;
1010         }
1011
1012         if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1013                 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1014
1015                 br->multicast_startup_query_count = val;
1016         }
1017
1018         if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1019                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1020
1021                 br->multicast_last_member_interval = clock_t_to_jiffies(val);
1022         }
1023
1024         if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1025                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1026
1027                 br->multicast_membership_interval = clock_t_to_jiffies(val);
1028         }
1029
1030         if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1031                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1032
1033                 br->multicast_querier_interval = clock_t_to_jiffies(val);
1034         }
1035
1036         if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1037                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1038
1039                 br->multicast_query_interval = clock_t_to_jiffies(val);
1040         }
1041
1042         if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1043                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1044
1045                 br->multicast_query_response_interval = clock_t_to_jiffies(val);
1046         }
1047
1048         if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1049                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1050
1051                 br->multicast_startup_query_interval = clock_t_to_jiffies(val);
1052         }
1053
1054         if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1055                 __u8 mcast_stats;
1056
1057                 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1058                 br->multicast_stats_enabled = !!mcast_stats;
1059         }
1060
1061         if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1062                 __u8 igmp_version;
1063
1064                 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1065                 err = br_multicast_set_igmp_version(br, igmp_version);
1066                 if (err)
1067                         return err;
1068         }
1069
1070 #if IS_ENABLED(CONFIG_IPV6)
1071         if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1072                 __u8 mld_version;
1073
1074                 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1075                 err = br_multicast_set_mld_version(br, mld_version);
1076                 if (err)
1077                         return err;
1078         }
1079 #endif
1080 #endif
1081 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1082         if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1083                 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1084
1085                 br->nf_call_iptables = val ? true : false;
1086         }
1087
1088         if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1089                 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1090
1091                 br->nf_call_ip6tables = val ? true : false;
1092         }
1093
1094         if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1095                 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1096
1097                 br->nf_call_arptables = val ? true : false;
1098         }
1099 #endif
1100
1101         return 0;
1102 }
1103
1104 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1105                           struct nlattr *tb[], struct nlattr *data[])
1106 {
1107         struct net_bridge *br = netdev_priv(dev);
1108         int err;
1109
1110         if (tb[IFLA_ADDRESS]) {
1111                 spin_lock_bh(&br->lock);
1112                 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1113                 spin_unlock_bh(&br->lock);
1114         }
1115
1116         err = br_changelink(dev, tb, data);
1117         if (err)
1118                 return err;
1119
1120         return register_netdevice(dev);
1121 }
1122
1123 static size_t br_get_size(const struct net_device *brdev)
1124 {
1125         return nla_total_size(sizeof(u32)) +    /* IFLA_BR_FORWARD_DELAY  */
1126                nla_total_size(sizeof(u32)) +    /* IFLA_BR_HELLO_TIME */
1127                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MAX_AGE */
1128                nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1129                nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1130                nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1131                nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1132 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1133                nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */
1134                nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1135                nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1136 #endif
1137                nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1138                nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1139                nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1140                nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1141                nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1142                nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1143                nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1144                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1145                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1146                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1147                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1148                nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1149 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1150                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1151                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1152                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1153                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1154                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1155                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1156                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1157                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1158                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1159                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1160                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1161                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1162                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1163                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1164                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1165                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_IGMP_VERSION */
1166                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_MLD_VERSION */
1167 #endif
1168 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1169                nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1170                nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1171                nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1172 #endif
1173                0;
1174 }
1175
1176 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1177 {
1178         struct net_bridge *br = netdev_priv(brdev);
1179         u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1180         u32 hello_time = jiffies_to_clock_t(br->hello_time);
1181         u32 age_time = jiffies_to_clock_t(br->max_age);
1182         u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1183         u32 stp_enabled = br->stp_enabled;
1184         u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1185         u8 vlan_enabled = br_vlan_enabled(br);
1186         u64 clockval;
1187
1188         clockval = br_timer_value(&br->hello_timer);
1189         if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1190                 return -EMSGSIZE;
1191         clockval = br_timer_value(&br->tcn_timer);
1192         if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1193                 return -EMSGSIZE;
1194         clockval = br_timer_value(&br->topology_change_timer);
1195         if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1196                               IFLA_BR_PAD))
1197                 return -EMSGSIZE;
1198         clockval = br_timer_value(&br->gc_timer);
1199         if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1200                 return -EMSGSIZE;
1201
1202         if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1203             nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1204             nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1205             nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1206             nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1207             nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1208             nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1209             nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1210             nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1211                     &br->bridge_id) ||
1212             nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1213                     &br->designated_root) ||
1214             nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1215             nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1216             nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1217             nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1218                        br->topology_change_detected) ||
1219             nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr))
1220                 return -EMSGSIZE;
1221
1222 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1223         if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1224             nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1225             nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED, br->vlan_stats_enabled))
1226                 return -EMSGSIZE;
1227 #endif
1228 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1229         if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, br->multicast_router) ||
1230             nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING, !br->multicast_disabled) ||
1231             nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1232                        br->multicast_query_use_ifaddr) ||
1233             nla_put_u8(skb, IFLA_BR_MCAST_QUERIER, br->multicast_querier) ||
1234             nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1235                        br->multicast_stats_enabled) ||
1236             nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY,
1237                         br->hash_elasticity) ||
1238             nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1239             nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1240                         br->multicast_last_member_count) ||
1241             nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1242                         br->multicast_startup_query_count) ||
1243             nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1244                        br->multicast_igmp_version))
1245                 return -EMSGSIZE;
1246 #if IS_ENABLED(CONFIG_IPV6)
1247         if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1248                        br->multicast_mld_version))
1249                 return -EMSGSIZE;
1250 #endif
1251         clockval = jiffies_to_clock_t(br->multicast_last_member_interval);
1252         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1253                               IFLA_BR_PAD))
1254                 return -EMSGSIZE;
1255         clockval = jiffies_to_clock_t(br->multicast_membership_interval);
1256         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1257                               IFLA_BR_PAD))
1258                 return -EMSGSIZE;
1259         clockval = jiffies_to_clock_t(br->multicast_querier_interval);
1260         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1261                               IFLA_BR_PAD))
1262                 return -EMSGSIZE;
1263         clockval = jiffies_to_clock_t(br->multicast_query_interval);
1264         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1265                               IFLA_BR_PAD))
1266                 return -EMSGSIZE;
1267         clockval = jiffies_to_clock_t(br->multicast_query_response_interval);
1268         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1269                               IFLA_BR_PAD))
1270                 return -EMSGSIZE;
1271         clockval = jiffies_to_clock_t(br->multicast_startup_query_interval);
1272         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1273                               IFLA_BR_PAD))
1274                 return -EMSGSIZE;
1275 #endif
1276 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1277         if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1278                        br->nf_call_iptables ? 1 : 0) ||
1279             nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1280                        br->nf_call_ip6tables ? 1 : 0) ||
1281             nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1282                        br->nf_call_arptables ? 1 : 0))
1283                 return -EMSGSIZE;
1284 #endif
1285
1286         return 0;
1287 }
1288
1289 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1290 {
1291         struct net_bridge_port *p = NULL;
1292         struct net_bridge_vlan_group *vg;
1293         struct net_bridge_vlan *v;
1294         struct net_bridge *br;
1295         int numvls = 0;
1296
1297         switch (attr) {
1298         case IFLA_STATS_LINK_XSTATS:
1299                 br = netdev_priv(dev);
1300                 vg = br_vlan_group(br);
1301                 break;
1302         case IFLA_STATS_LINK_XSTATS_SLAVE:
1303                 p = br_port_get_rtnl(dev);
1304                 if (!p)
1305                         return 0;
1306                 br = p->br;
1307                 vg = nbp_vlan_group(p);
1308                 break;
1309         default:
1310                 return 0;
1311         }
1312
1313         if (vg) {
1314                 /* we need to count all, even placeholder entries */
1315                 list_for_each_entry(v, &vg->vlan_list, vlist)
1316                         numvls++;
1317         }
1318
1319         return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1320                nla_total_size(sizeof(struct br_mcast_stats)) +
1321                nla_total_size(0);
1322 }
1323
1324 static int br_fill_linkxstats(struct sk_buff *skb,
1325                               const struct net_device *dev,
1326                               int *prividx, int attr)
1327 {
1328         struct nlattr *nla __maybe_unused;
1329         struct net_bridge_port *p = NULL;
1330         struct net_bridge_vlan_group *vg;
1331         struct net_bridge_vlan *v;
1332         struct net_bridge *br;
1333         struct nlattr *nest;
1334         int vl_idx = 0;
1335
1336         switch (attr) {
1337         case IFLA_STATS_LINK_XSTATS:
1338                 br = netdev_priv(dev);
1339                 vg = br_vlan_group(br);
1340                 break;
1341         case IFLA_STATS_LINK_XSTATS_SLAVE:
1342                 p = br_port_get_rtnl(dev);
1343                 if (!p)
1344                         return 0;
1345                 br = p->br;
1346                 vg = nbp_vlan_group(p);
1347                 break;
1348         default:
1349                 return -EINVAL;
1350         }
1351
1352         nest = nla_nest_start(skb, LINK_XSTATS_TYPE_BRIDGE);
1353         if (!nest)
1354                 return -EMSGSIZE;
1355
1356         if (vg) {
1357                 u16 pvid;
1358
1359                 pvid = br_get_pvid(vg);
1360                 list_for_each_entry(v, &vg->vlan_list, vlist) {
1361                         struct bridge_vlan_xstats vxi;
1362                         struct br_vlan_stats stats;
1363
1364                         if (++vl_idx < *prividx)
1365                                 continue;
1366                         memset(&vxi, 0, sizeof(vxi));
1367                         vxi.vid = v->vid;
1368                         vxi.flags = v->flags;
1369                         if (v->vid == pvid)
1370                                 vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1371                         br_vlan_get_stats(v, &stats);
1372                         vxi.rx_bytes = stats.rx_bytes;
1373                         vxi.rx_packets = stats.rx_packets;
1374                         vxi.tx_bytes = stats.tx_bytes;
1375                         vxi.tx_packets = stats.tx_packets;
1376
1377                         if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1378                                 goto nla_put_failure;
1379                 }
1380         }
1381
1382 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1383         if (++vl_idx >= *prividx) {
1384                 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1385                                         sizeof(struct br_mcast_stats),
1386                                         BRIDGE_XSTATS_PAD);
1387                 if (!nla)
1388                         goto nla_put_failure;
1389                 br_multicast_get_stats(br, p, nla_data(nla));
1390         }
1391 #endif
1392         nla_nest_end(skb, nest);
1393         *prividx = 0;
1394
1395         return 0;
1396
1397 nla_put_failure:
1398         nla_nest_end(skb, nest);
1399         *prividx = vl_idx;
1400
1401         return -EMSGSIZE;
1402 }
1403
1404 static struct rtnl_af_ops br_af_ops __read_mostly = {
1405         .family                 = AF_BRIDGE,
1406         .get_link_af_size       = br_get_link_af_size_filtered,
1407 };
1408
1409 struct rtnl_link_ops br_link_ops __read_mostly = {
1410         .kind                   = "bridge",
1411         .priv_size              = sizeof(struct net_bridge),
1412         .setup                  = br_dev_setup,
1413         .maxtype                = IFLA_BR_MAX,
1414         .policy                 = br_policy,
1415         .validate               = br_validate,
1416         .newlink                = br_dev_newlink,
1417         .changelink             = br_changelink,
1418         .dellink                = br_dev_delete,
1419         .get_size               = br_get_size,
1420         .fill_info              = br_fill_info,
1421         .fill_linkxstats        = br_fill_linkxstats,
1422         .get_linkxstats_size    = br_get_linkxstats_size,
1423
1424         .slave_maxtype          = IFLA_BRPORT_MAX,
1425         .slave_policy           = br_port_policy,
1426         .slave_changelink       = br_port_slave_changelink,
1427         .get_slave_size         = br_port_get_slave_size,
1428         .fill_slave_info        = br_port_fill_slave_info,
1429 };
1430
1431 int __init br_netlink_init(void)
1432 {
1433         int err;
1434
1435         br_mdb_init();
1436         rtnl_af_register(&br_af_ops);
1437
1438         err = rtnl_link_register(&br_link_ops);
1439         if (err)
1440                 goto out_af;
1441
1442         return 0;
1443
1444 out_af:
1445         rtnl_af_unregister(&br_af_ops);
1446         br_mdb_uninit();
1447         return err;
1448 }
1449
1450 void br_netlink_fini(void)
1451 {
1452         br_mdb_uninit();
1453         rtnl_af_unregister(&br_af_ops);
1454         rtnl_link_unregister(&br_link_ops);
1455 }