[mirror_ubuntu-zesty-kernel.git] / net / bridge / br_mdb.c

#include <linux/err.h>
#include <linux/igmp.h>
#include <linux/kernel.h>
#include <linux/netdevice.h>
#include <linux/rculist.h>
#include <linux/skbuff.h>
#include <linux/if_ether.h>
#include <net/ip.h>
#include <net/netlink.h>
#if IS_ENABLED(CONFIG_IPV6)
#include <net/ipv6.h>
#include <net/addrconf.h>
#endif

#include "br_private.h"

static int br_rports_fill_info(struct sk_buff *skb, struct netlink_callback *cb,
			       struct net_device *dev)
{
	struct net_bridge *br = netdev_priv(dev);
	struct net_bridge_port *p;
	struct nlattr *nest;

	if (!br->multicast_router || hlist_empty(&br->router_list))
		return 0;

	nest = nla_nest_start(skb, MDBA_ROUTER);
	if (nest == NULL)
		return -EMSGSIZE;

	hlist_for_each_entry_rcu(p, &br->router_list, rlist) {
		if (p && nla_put_u32(skb, MDBA_ROUTER_PORT, p->dev->ifindex))
			goto fail;
	}

	nla_nest_end(skb, nest);
	return 0;
fail:
	nla_nest_cancel(skb, nest);
	return -EMSGSIZE;
}

static int br_mdb_fill_info(struct sk_buff *skb, struct netlink_callback *cb,
			    struct net_device *dev)
{
	struct net_bridge *br = netdev_priv(dev);
	struct net_bridge_mdb_htable *mdb;
	struct nlattr *nest, *nest2;
	int i, err = 0;
	int idx = 0, s_idx = cb->args[1];

	if (br->multicast_disabled)
		return 0;

	mdb = rcu_dereference(br->mdb);
	if (!mdb)
		return 0;

	nest = nla_nest_start(skb, MDBA_MDB);
	if (nest == NULL)
		return -EMSGSIZE;

	for (i = 0; i < mdb->max; i++) {
		struct net_bridge_mdb_entry *mp;
		struct net_bridge_port_group *p;
		struct net_bridge_port_group __rcu **pp;
		struct net_bridge_port *port;

		hlist_for_each_entry_rcu(mp, &mdb->mhash[i], hlist[mdb->ver]) {
			if (idx < s_idx)
				goto skip;

			nest2 = nla_nest_start(skb, MDBA_MDB_ENTRY);
			if (nest2 == NULL) {
				err = -EMSGSIZE;
				goto out;
			}

			for (pp = &mp->ports;
			     (p = rcu_dereference(*pp)) != NULL;
			      pp = &p->next) {
				port = p->port;
				if (port) {
					struct br_mdb_entry e;
					memset(&e, 0, sizeof(e));
					e.ifindex = port->dev->ifindex;
					e.state = p->state;
					if (p->addr.proto == htons(ETH_P_IP))
						e.addr.u.ip4 = p->addr.u.ip4;
#if IS_ENABLED(CONFIG_IPV6)
					if (p->addr.proto == htons(ETH_P_IPV6))
						e.addr.u.ip6 = p->addr.u.ip6;
#endif
					e.addr.proto = p->addr.proto;
					if (nla_put(skb, MDBA_MDB_ENTRY_INFO, sizeof(e), &e)) {
						nla_nest_cancel(skb, nest2);
						err = -EMSGSIZE;
						goto out;
					}
				}
			}
			nla_nest_end(skb, nest2);
		skip:
			idx++;
		}
	}

out:
	cb->args[1] = idx;
	nla_nest_end(skb, nest);
	return err;
}

static int br_mdb_dump(struct sk_buff *skb, struct netlink_callback *cb)
{
	struct net_device *dev;
	struct net *net = sock_net(skb->sk);
	struct nlmsghdr *nlh = NULL;
	int idx = 0, s_idx;

	s_idx = cb->args[0];

	rcu_read_lock();

	/* In theory this could be wrapped to 0... */
	cb->seq = net->dev_base_seq + br_mdb_rehash_seq;

	for_each_netdev_rcu(net, dev) {
		if (dev->priv_flags & IFF_EBRIDGE) {
			struct br_port_msg *bpm;

			if (idx < s_idx)
				goto skip;

			nlh = nlmsg_put(skb, NETLINK_CB(cb->skb).portid,
					cb->nlh->nlmsg_seq, RTM_GETMDB,
					sizeof(*bpm), NLM_F_MULTI);
			if (nlh == NULL)
				break;

			bpm = nlmsg_data(nlh);
			memset(bpm, 0, sizeof(*bpm));
			bpm->ifindex = dev->ifindex;
			if (br_mdb_fill_info(skb, cb, dev) < 0)
				goto out;
			if (br_rports_fill_info(skb, cb, dev) < 0)
				goto out;

			cb->args[1] = 0;
			nlmsg_end(skb, nlh);
		skip:
			idx++;
		}
	}

out:
	if (nlh)
		nlmsg_end(skb, nlh);
	rcu_read_unlock();
	cb->args[0] = idx;
	return skb->len;
}

static int nlmsg_populate_mdb_fill(struct sk_buff *skb,
				   struct net_device *dev,
				   struct br_mdb_entry *entry, u32 pid,
				   u32 seq, int type, unsigned int flags)
{
	struct nlmsghdr *nlh;
	struct br_port_msg *bpm;
	struct nlattr *nest, *nest2;

	nlh = nlmsg_put(skb, pid, seq, type, sizeof(*bpm), 0);
	if (!nlh)
		return -EMSGSIZE;

	bpm = nlmsg_data(nlh);
	memset(bpm, 0, sizeof(*bpm));
	bpm->family  = AF_BRIDGE;
	bpm->ifindex = dev->ifindex;
	nest = nla_nest_start(skb, MDBA_MDB);
	if (nest == NULL)
		goto cancel;
	nest2 = nla_nest_start(skb, MDBA_MDB_ENTRY);
	if (nest2 == NULL)
		goto end;

	if (nla_put(skb, MDBA_MDB_ENTRY_INFO, sizeof(*entry), entry))
		goto end;

	nla_nest_end(skb, nest2);
	nla_nest_end(skb, nest);
	nlmsg_end(skb, nlh);
	return 0;

end:
	nla_nest_end(skb, nest);
cancel:
	nlmsg_cancel(skb, nlh);
	return -EMSGSIZE;
}

static inline size_t rtnl_mdb_nlmsg_size(void)
{
	return NLMSG_ALIGN(sizeof(struct br_port_msg))
		+ nla_total_size(sizeof(struct br_mdb_entry));
}

static void __br_mdb_notify(struct net_device *dev, struct br_mdb_entry *entry,
			    int type)
{
	struct net *net = dev_net(dev);
	struct sk_buff *skb;
	int err = -ENOBUFS;

	skb = nlmsg_new(rtnl_mdb_nlmsg_size(), GFP_ATOMIC);
	if (!skb)
		goto errout;

	err = nlmsg_populate_mdb_fill(skb, dev, entry, 0, 0, type, NTF_SELF);
	if (err < 0) {
		kfree_skb(skb);
		goto errout;
	}

	rtnl_notify(skb, net, 0, RTNLGRP_MDB, NULL, GFP_ATOMIC);
	return;
errout:
	rtnl_set_sk_err(net, RTNLGRP_MDB, err);
}

void br_mdb_notify(struct net_device *dev, struct net_bridge_port *port,
		   struct br_ip *group, int type, u8 state)
{
	struct br_mdb_entry entry;

	memset(&entry, 0, sizeof(entry));
	entry.ifindex = port->dev->ifindex;
	entry.addr.proto = group->proto;
	entry.addr.u.ip4 = group->u.ip4;
#if IS_ENABLED(CONFIG_IPV6)
	entry.addr.u.ip6 = group->u.ip6;
#endif
	entry.state = state;
	__br_mdb_notify(dev, &entry, type);
}

static bool is_valid_mdb_entry(struct br_mdb_entry *entry)
{
	if (entry->ifindex == 0)
		return false;

	if (entry->addr.proto == htons(ETH_P_IP)) {
		if (!ipv4_is_multicast(entry->addr.u.ip4))
			return false;
		if (ipv4_is_local_multicast(entry->addr.u.ip4))
			return false;
#if IS_ENABLED(CONFIG_IPV6)
	} else if (entry->addr.proto == htons(ETH_P_IPV6)) {
		if (ipv6_addr_is_ll_all_nodes(&entry->addr.u.ip6))
			return false;
#endif
	} else
		return false;
	if (entry->state != MDB_PERMANENT && entry->state != MDB_TEMPORARY)
		return false;

	return true;
}

static int br_mdb_parse(struct sk_buff *skb, struct nlmsghdr *nlh,
			struct net_device **pdev, struct br_mdb_entry **pentry)
{
	struct net *net = sock_net(skb->sk);
	struct br_mdb_entry *entry;
	struct br_port_msg *bpm;
	struct nlattr *tb[MDBA_SET_ENTRY_MAX+1];
	struct net_device *dev;
	int err;

	err = nlmsg_parse(nlh, sizeof(*bpm), tb, MDBA_SET_ENTRY_MAX, NULL);
	if (err < 0)
		return err;

	bpm = nlmsg_data(nlh);
	if (bpm->ifindex == 0) {
		pr_info("PF_BRIDGE: br_mdb_parse() with invalid ifindex\n");
		return -EINVAL;
	}

	dev = __dev_get_by_index(net, bpm->ifindex);
	if (dev == NULL) {
		pr_info("PF_BRIDGE: br_mdb_parse() with unknown ifindex\n");
		return -ENODEV;
	}

	if (!(dev->priv_flags & IFF_EBRIDGE)) {
		pr_info("PF_BRIDGE: br_mdb_parse() with non-bridge\n");
		return -EOPNOTSUPP;
	}

	*pdev = dev;

	if (!tb[MDBA_SET_ENTRY] ||
	    nla_len(tb[MDBA_SET_ENTRY]) != sizeof(struct br_mdb_entry)) {
		pr_info("PF_BRIDGE: br_mdb_parse() with invalid attr\n");
		return -EINVAL;
	}

	entry = nla_data(tb[MDBA_SET_ENTRY]);
	if (!is_valid_mdb_entry(entry)) {
		pr_info("PF_BRIDGE: br_mdb_parse() with invalid entry\n");
		return -EINVAL;
	}

	*pentry = entry;
	return 0;
}

static int br_mdb_add_group(struct net_bridge *br, struct net_bridge_port *port,
			    struct br_ip *group, unsigned char state)
{
	struct net_bridge_mdb_entry *mp;
	struct net_bridge_port_group *p;
	struct net_bridge_port_group __rcu **pp;
	struct net_bridge_mdb_htable *mdb;
	int err;

	mdb = mlock_dereference(br->mdb, br);
	mp = br_mdb_ip_get(mdb, group);
	if (!mp) {
		mp = br_multicast_new_group(br, port, group);
		err = PTR_ERR(mp);
		if (IS_ERR(mp))
			return err;
	}

	for (pp = &mp->ports;
	     (p = mlock_dereference(*pp, br)) != NULL;
	     pp = &p->next) {
		if (p->port == port)
			return -EEXIST;
		if ((unsigned long)p->port < (unsigned long)port)
			break;
	}

	p = br_multicast_new_port_group(port, group, *pp, state);
	if (unlikely(!p))
		return -ENOMEM;
	rcu_assign_pointer(*pp, p);

	br_mdb_notify(br->dev, port, group, RTM_NEWMDB, state);
	return 0;
}

static int __br_mdb_add(struct net *net, struct net_bridge *br,
			struct br_mdb_entry *entry)
{
	struct br_ip ip;
	struct net_device *dev;
	struct net_bridge_port *p;
	int ret;

	if (!netif_running(br->dev) || br->multicast_disabled)
		return -EINVAL;

	dev = __dev_get_by_index(net, entry->ifindex);
	if (!dev)
		return -ENODEV;

	p = br_port_get_rtnl(dev);
	if (!p || p->br != br || p->state == BR_STATE_DISABLED)
		return -EINVAL;

	ip.proto = entry->addr.proto;
	if (ip.proto == htons(ETH_P_IP))
		ip.u.ip4 = entry->addr.u.ip4;
#if IS_ENABLED(CONFIG_IPV6)
	else
		ip.u.ip6 = entry->addr.u.ip6;
#endif

	spin_lock_bh(&br->multicast_lock);
	ret = br_mdb_add_group(br, p, &ip, entry->state);
	spin_unlock_bh(&br->multicast_lock);
	return ret;
}

static int br_mdb_add(struct sk_buff *skb, struct nlmsghdr *nlh)
{
	struct net *net = sock_net(skb->sk);
	struct br_mdb_entry *entry;
	struct net_device *dev;
	struct net_bridge *br;
	int err;

	err = br_mdb_parse(skb, nlh, &dev, &entry);
	if (err < 0)
		return err;

	br = netdev_priv(dev);

	err = __br_mdb_add(net, br, entry);
	if (!err)
		__br_mdb_notify(dev, entry, RTM_NEWMDB);
	return err;
}

static int __br_mdb_del(struct net_bridge *br, struct br_mdb_entry *entry)
{
	struct net_bridge_mdb_htable *mdb;
	struct net_bridge_mdb_entry *mp;
	struct net_bridge_port_group *p;
	struct net_bridge_port_group __rcu **pp;
	struct br_ip ip;
	int err = -EINVAL;

	if (!netif_running(br->dev) || br->multicast_disabled)
		return -EINVAL;

	ip.proto = entry->addr.proto;
	if (ip.proto == htons(ETH_P_IP)) {
		if (timer_pending(&br->ip4_other_query.timer))
			return -EBUSY;

		ip.u.ip4 = entry->addr.u.ip4;
#if IS_ENABLED(CONFIG_IPV6)
	} else {
		if (timer_pending(&br->ip6_other_query.timer))
			return -EBUSY;

		ip.u.ip6 = entry->addr.u.ip6;
#endif
	}

	spin_lock_bh(&br->multicast_lock);
	mdb = mlock_dereference(br->mdb, br);

	mp = br_mdb_ip_get(mdb, &ip);
	if (!mp)
		goto unlock;

	for (pp = &mp->ports;
	     (p = mlock_dereference(*pp, br)) != NULL;
	     pp = &p->next) {
		if (!p->port || p->port->dev->ifindex != entry->ifindex)
			continue;

		if (p->port->state == BR_STATE_DISABLED)
			goto unlock;

		rcu_assign_pointer(*pp, p->next);
		hlist_del_init(&p->mglist);
		del_timer(&p->timer);
		call_rcu_bh(&p->rcu, br_multicast_free_pg);
		err = 0;

		if (!mp->ports && !mp->mglist &&
		    netif_running(br->dev))
			mod_timer(&mp->timer, jiffies);
		break;
	}

unlock:
	spin_unlock_bh(&br->multicast_lock);
	return err;
}

static int br_mdb_del(struct sk_buff *skb, struct nlmsghdr *nlh)
{
	struct net_device *dev;
	struct br_mdb_entry *entry;
	struct net_bridge *br;
	int err;

	err = br_mdb_parse(skb, nlh, &dev, &entry);
	if (err < 0)
		return err;

	br = netdev_priv(dev);

	err = __br_mdb_del(br, entry);
	if (!err)
		__br_mdb_notify(dev, entry, RTM_DELMDB);
	return err;
}

void br_mdb_init(void)
{
	rtnl_register(PF_BRIDGE, RTM_GETMDB, NULL, br_mdb_dump, NULL);
	rtnl_register(PF_BRIDGE, RTM_NEWMDB, br_mdb_add, NULL, NULL);
	rtnl_register(PF_BRIDGE, RTM_DELMDB, br_mdb_del, NULL, NULL);
}

void br_mdb_uninit(void)
{
	rtnl_unregister(PF_BRIDGE, RTM_GETMDB);
	rtnl_unregister(PF_BRIDGE, RTM_NEWMDB);
	rtnl_unregister(PF_BRIDGE, RTM_DELMDB);
}
Commit	Line	Data
ee07c6e7 CW	1	#include <linux/err.h>
	2	#include <linux/igmp.h>
	3	#include <linux/kernel.h>
	4	#include <linux/netdevice.h>
	5	#include <linux/rculist.h>
	6	#include <linux/skbuff.h>
cfd56754	7	#include <linux/if_ether.h>
ee07c6e7 CW	8	#include <net/ip.h>
	9	#include <net/netlink.h>
	10	#if IS_ENABLED(CONFIG_IPV6)
	11	#include <net/ipv6.h>
3c3769e6	12	#include <net/addrconf.h>
ee07c6e7 CW	13	#endif
	14
	15	#include "br_private.h"
	16
	17	static int br_rports_fill_info(struct sk_buff skb, struct netlink_callback cb,
	18	struct net_device *dev)
	19	{
	20	struct net_bridge *br = netdev_priv(dev);
	21	struct net_bridge_port *p;
ee07c6e7 CW	22	struct nlattr *nest;
	23
	24	if (!br->multicast_router \|\| hlist_empty(&br->router_list))
	25	return 0;
	26
	27	nest = nla_nest_start(skb, MDBA_ROUTER);
	28	if (nest == NULL)
	29	return -EMSGSIZE;
	30
b67bfe0d	31	hlist_for_each_entry_rcu(p, &br->router_list, rlist) {
ee07c6e7 CW	32	if (p && nla_put_u32(skb, MDBA_ROUTER_PORT, p->dev->ifindex))
	33	goto fail;
	34	}
	35
	36	nla_nest_end(skb, nest);
	37	return 0;
	38	fail:
	39	nla_nest_cancel(skb, nest);
	40	return -EMSGSIZE;
	41	}
	42
	43	static int br_mdb_fill_info(struct sk_buff skb, struct netlink_callback cb,
	44	struct net_device *dev)
	45	{
	46	struct net_bridge *br = netdev_priv(dev);
	47	struct net_bridge_mdb_htable *mdb;
	48	struct nlattr nest, nest2;
	49	int i, err = 0;
	50	int idx = 0, s_idx = cb->args[1];
	51
	52	if (br->multicast_disabled)
	53	return 0;
	54
	55	mdb = rcu_dereference(br->mdb);
	56	if (!mdb)
	57	return 0;
	58
	59	nest = nla_nest_start(skb, MDBA_MDB);
	60	if (nest == NULL)
	61	return -EMSGSIZE;
	62
	63	for (i = 0; i < mdb->max; i++) {
ee07c6e7	64	struct net_bridge_mdb_entry *mp;
762a3d89	65	struct net_bridge_port_group *p;
762a3d89	66	struct net_bridge_port_group __rcu **pp;
ee07c6e7 CW	67	struct net_bridge_port *port;
ee07c6e7 CW	68
b67bfe0d	69	hlist_for_each_entry_rcu(mp, &mdb->mhash[i], hlist[mdb->ver]) {
ee07c6e7 CW	70	if (idx < s_idx)
	71	goto skip;
	72
	73	nest2 = nla_nest_start(skb, MDBA_MDB_ENTRY);
	74	if (nest2 == NULL) {
	75	err = -EMSGSIZE;
	76	goto out;
	77	}
	78
	79	for (pp = &mp->ports;
	80	(p = rcu_dereference(*pp)) != NULL;
	81	pp = &p->next) {
	82	port = p->port;
	83	if (port) {
	84	struct br_mdb_entry e;
c085c499	85	memset(&e, 0, sizeof(e));
ee07c6e7	86	e.ifindex = port->dev->ifindex;
ccb1c31a	87	e.state = p->state;
09d7cf7d VY	88	if (p->addr.proto == htons(ETH_P_IP))
09d7cf7d VY	89	e.addr.u.ip4 = p->addr.u.ip4;
ee07c6e7	90	#if IS_ENABLED(CONFIG_IPV6)
09d7cf7d VY	91	if (p->addr.proto == htons(ETH_P_IPV6))
09d7cf7d VY	92	e.addr.u.ip6 = p->addr.u.ip6;
ee07c6e7 CW	93	#endif
	94	e.addr.proto = p->addr.proto;
	95	if (nla_put(skb, MDBA_MDB_ENTRY_INFO, sizeof(e), &e)) {
	96	nla_nest_cancel(skb, nest2);
	97	err = -EMSGSIZE;
	98	goto out;
	99	}
	100	}
	101	}
	102	nla_nest_end(skb, nest2);
	103	skip:
	104	idx++;
	105	}
	106	}
	107
	108	out:
	109	cb->args[1] = idx;
	110	nla_nest_end(skb, nest);
	111	return err;
	112	}
	113
	114	static int br_mdb_dump(struct sk_buff skb, struct netlink_callback cb)
	115	{
	116	struct net_device *dev;
	117	struct net *net = sock_net(skb->sk);
	118	struct nlmsghdr *nlh = NULL;
	119	int idx = 0, s_idx;
	120
	121	s_idx = cb->args[0];
	122
	123	rcu_read_lock();
	124
2ce297fc CW	125	/* In theory this could be wrapped to 0... */
2ce297fc CW	126	cb->seq = net->dev_base_seq + br_mdb_rehash_seq;
ee07c6e7 CW	127
	128	for_each_netdev_rcu(net, dev) {
	129	if (dev->priv_flags & IFF_EBRIDGE) {
	130	struct br_port_msg *bpm;
	131
	132	if (idx < s_idx)
	133	goto skip;
	134
	135	nlh = nlmsg_put(skb, NETLINK_CB(cb->skb).portid,
	136	cb->nlh->nlmsg_seq, RTM_GETMDB,
	137	sizeof(*bpm), NLM_F_MULTI);
	138	if (nlh == NULL)
	139	break;
	140
	141	bpm = nlmsg_data(nlh);
c085c499	142	memset(bpm, 0, sizeof(*bpm));
ee07c6e7 CW	143	bpm->ifindex = dev->ifindex;
	144	if (br_mdb_fill_info(skb, cb, dev) < 0)
	145	goto out;
	146	if (br_rports_fill_info(skb, cb, dev) < 0)
	147	goto out;
	148
	149	cb->args[1] = 0;
	150	nlmsg_end(skb, nlh);
	151	skip:
	152	idx++;
	153	}
	154	}
	155
	156	out:
	157	if (nlh)
	158	nlmsg_end(skb, nlh);
	159	rcu_read_unlock();
	160	cb->args[0] = idx;
	161	return skb->len;
	162	}
	163
37a393bc CW	164	static int nlmsg_populate_mdb_fill(struct sk_buff *skb,
	165	struct net_device *dev,
	166	struct br_mdb_entry *entry, u32 pid,
	167	u32 seq, int type, unsigned int flags)
	168	{
	169	struct nlmsghdr *nlh;
	170	struct br_port_msg *bpm;
	171	struct nlattr nest, nest2;
	172
82199679	173	nlh = nlmsg_put(skb, pid, seq, type, sizeof(*bpm), 0);
37a393bc CW	174	if (!nlh)
	175	return -EMSGSIZE;
	176
	177	bpm = nlmsg_data(nlh);
c085c499	178	memset(bpm, 0, sizeof(*bpm));
37a393bc CW	179	bpm->family = AF_BRIDGE;
	180	bpm->ifindex = dev->ifindex;
	181	nest = nla_nest_start(skb, MDBA_MDB);
	182	if (nest == NULL)
	183	goto cancel;
	184	nest2 = nla_nest_start(skb, MDBA_MDB_ENTRY);
	185	if (nest2 == NULL)
	186	goto end;
	187
	188	if (nla_put(skb, MDBA_MDB_ENTRY_INFO, sizeof(*entry), entry))
	189	goto end;
	190
	191	nla_nest_end(skb, nest2);
	192	nla_nest_end(skb, nest);
053c095a JB	193	nlmsg_end(skb, nlh);
053c095a JB	194	return 0;
37a393bc CW	195
	196	end:
	197	nla_nest_end(skb, nest);
	198	cancel:
	199	nlmsg_cancel(skb, nlh);
	200	return -EMSGSIZE;
	201	}
	202
	203	static inline size_t rtnl_mdb_nlmsg_size(void)
	204	{
	205	return NLMSG_ALIGN(sizeof(struct br_port_msg))
	206	+ nla_total_size(sizeof(struct br_mdb_entry));
	207	}
	208
	209	static void __br_mdb_notify(struct net_device dev, struct br_mdb_entry entry,
	210	int type)
	211	{
	212	struct net *net = dev_net(dev);
	213	struct sk_buff *skb;
	214	int err = -ENOBUFS;
	215
	216	skb = nlmsg_new(rtnl_mdb_nlmsg_size(), GFP_ATOMIC);
	217	if (!skb)
	218	goto errout;
	219
	220	err = nlmsg_populate_mdb_fill(skb, dev, entry, 0, 0, type, NTF_SELF);
	221	if (err < 0) {
	222	kfree_skb(skb);
	223	goto errout;
	224	}
	225
	226	rtnl_notify(skb, net, 0, RTNLGRP_MDB, NULL, GFP_ATOMIC);
	227	return;
	228	errout:
	229	rtnl_set_sk_err(net, RTNLGRP_MDB, err);
	230	}
	231
	232	void br_mdb_notify(struct net_device dev, struct net_bridge_port port,
09cf0211	233	struct br_ip *group, int type, u8 state)
37a393bc CW	234	{
	235	struct br_mdb_entry entry;
	236
c085c499	237	memset(&entry, 0, sizeof(entry));
37a393bc CW	238	entry.ifindex = port->dev->ifindex;
	239	entry.addr.proto = group->proto;
	240	entry.addr.u.ip4 = group->u.ip4;
	241	#if IS_ENABLED(CONFIG_IPV6)
	242	entry.addr.u.ip6 = group->u.ip6;
	243	#endif
09cf0211	244	entry.state = state;
37a393bc CW	245	__br_mdb_notify(dev, &entry, type);
	246	}
	247
cfd56754 CW	248	static bool is_valid_mdb_entry(struct br_mdb_entry *entry)
	249	{
	250	if (entry->ifindex == 0)
	251	return false;
	252
	253	if (entry->addr.proto == htons(ETH_P_IP)) {
	254	if (!ipv4_is_multicast(entry->addr.u.ip4))
	255	return false;
	256	if (ipv4_is_local_multicast(entry->addr.u.ip4))
	257	return false;
	258	#if IS_ENABLED(CONFIG_IPV6)
	259	} else if (entry->addr.proto == htons(ETH_P_IPV6)) {
3c3769e6	260	if (ipv6_addr_is_ll_all_nodes(&entry->addr.u.ip6))
cfd56754 CW	261	return false;
	262	#endif
	263	} else
	264	return false;
ccb1c31a AW	265	if (entry->state != MDB_PERMANENT && entry->state != MDB_TEMPORARY)
ccb1c31a AW	266	return false;
cfd56754 CW	267
	268	return true;
	269	}
	270
	271	static int br_mdb_parse(struct sk_buff skb, struct nlmsghdr nlh,
	272	struct net_device pdev, struct br_mdb_entry pentry)
	273	{
	274	struct net *net = sock_net(skb->sk);
	275	struct br_mdb_entry *entry;
	276	struct br_port_msg *bpm;
	277	struct nlattr *tb[MDBA_SET_ENTRY_MAX+1];
	278	struct net_device *dev;
	279	int err;
	280
12d87251	281	err = nlmsg_parse(nlh, sizeof(*bpm), tb, MDBA_SET_ENTRY_MAX, NULL);
cfd56754 CW	282	if (err < 0)
	283	return err;
	284
	285	bpm = nlmsg_data(nlh);
	286	if (bpm->ifindex == 0) {
	287	pr_info("PF_BRIDGE: br_mdb_parse() with invalid ifindex\n");
	288	return -EINVAL;
	289	}
	290
	291	dev = __dev_get_by_index(net, bpm->ifindex);
	292	if (dev == NULL) {
	293	pr_info("PF_BRIDGE: br_mdb_parse() with unknown ifindex\n");
	294	return -ENODEV;
	295	}
	296
	297	if (!(dev->priv_flags & IFF_EBRIDGE)) {
	298	pr_info("PF_BRIDGE: br_mdb_parse() with non-bridge\n");
	299	return -EOPNOTSUPP;
	300	}
	301
	302	*pdev = dev;
	303
	304	if (!tb[MDBA_SET_ENTRY] \|\|
	305	nla_len(tb[MDBA_SET_ENTRY]) != sizeof(struct br_mdb_entry)) {
	306	pr_info("PF_BRIDGE: br_mdb_parse() with invalid attr\n");
	307	return -EINVAL;
	308	}
	309
	310	entry = nla_data(tb[MDBA_SET_ENTRY]);
	311	if (!is_valid_mdb_entry(entry)) {
	312	pr_info("PF_BRIDGE: br_mdb_parse() with invalid entry\n");
	313	return -EINVAL;
	314	}
	315
	316	*pentry = entry;
	317	return 0;
	318	}
	319
	320	static int br_mdb_add_group(struct net_bridge br, struct net_bridge_port port,
ccb1c31a	321	struct br_ip *group, unsigned char state)
cfd56754 CW	322	{
	323	struct net_bridge_mdb_entry *mp;
	324	struct net_bridge_port_group *p;
	325	struct net_bridge_port_group __rcu **pp;
	326	struct net_bridge_mdb_htable *mdb;
	327	int err;
	328
	329	mdb = mlock_dereference(br->mdb, br);
	330	mp = br_mdb_ip_get(mdb, group);
	331	if (!mp) {
	332	mp = br_multicast_new_group(br, port, group);
	333	err = PTR_ERR(mp);
	334	if (IS_ERR(mp))
	335	return err;
	336	}
	337
	338	for (pp = &mp->ports;
	339	(p = mlock_dereference(*pp, br)) != NULL;
	340	pp = &p->next) {
	341	if (p->port == port)
	342	return -EEXIST;
	343	if ((unsigned long)p->port < (unsigned long)port)
	344	break;
	345	}
	346
ccb1c31a	347	p = br_multicast_new_port_group(port, group, *pp, state);
cfd56754 CW	348	if (unlikely(!p))
	349	return -ENOMEM;
	350	rcu_assign_pointer(*pp, p);
	351
09cf0211	352	br_mdb_notify(br->dev, port, group, RTM_NEWMDB, state);
cfd56754 CW	353	return 0;
	354	}
	355
	356	static int __br_mdb_add(struct net net, struct net_bridge br,
	357	struct br_mdb_entry *entry)
	358	{
	359	struct br_ip ip;
	360	struct net_device *dev;
	361	struct net_bridge_port *p;
	362	int ret;
	363
	364	if (!netif_running(br->dev) \|\| br->multicast_disabled)
	365	return -EINVAL;
	366
	367	dev = __dev_get_by_index(net, entry->ifindex);
	368	if (!dev)
	369	return -ENODEV;
	370
	371	p = br_port_get_rtnl(dev);
	372	if (!p \|\| p->br != br \|\| p->state == BR_STATE_DISABLED)
	373	return -EINVAL;
	374
	375	ip.proto = entry->addr.proto;
	376	if (ip.proto == htons(ETH_P_IP))
	377	ip.u.ip4 = entry->addr.u.ip4;
	378	#if IS_ENABLED(CONFIG_IPV6)
	379	else
	380	ip.u.ip6 = entry->addr.u.ip6;
	381	#endif
	382
	383	spin_lock_bh(&br->multicast_lock);
ccb1c31a	384	ret = br_mdb_add_group(br, p, &ip, entry->state);
cfd56754 CW	385	spin_unlock_bh(&br->multicast_lock);
	386	return ret;
	387	}
	388
661d2967	389	static int br_mdb_add(struct sk_buff skb, struct nlmsghdr nlh)
cfd56754 CW	390	{
	391	struct net *net = sock_net(skb->sk);
	392	struct br_mdb_entry *entry;
	393	struct net_device *dev;
	394	struct net_bridge *br;
	395	int err;
	396
	397	err = br_mdb_parse(skb, nlh, &dev, &entry);
	398	if (err < 0)
	399	return err;
	400
	401	br = netdev_priv(dev);
	402
	403	err = __br_mdb_add(net, br, entry);
	404	if (!err)
	405	__br_mdb_notify(dev, entry, RTM_NEWMDB);
	406	return err;
	407	}
	408
	409	static int __br_mdb_del(struct net_bridge br, struct br_mdb_entry entry)
	410	{
	411	struct net_bridge_mdb_htable *mdb;
	412	struct net_bridge_mdb_entry *mp;
	413	struct net_bridge_port_group *p;
	414	struct net_bridge_port_group __rcu **pp;
	415	struct br_ip ip;
	416	int err = -EINVAL;
	417
	418	if (!netif_running(br->dev) \|\| br->multicast_disabled)
	419	return -EINVAL;
	420
cfd56754	421	ip.proto = entry->addr.proto;
cc0fdd80	422	if (ip.proto == htons(ETH_P_IP)) {
90010b36	423	if (timer_pending(&br->ip4_other_query.timer))
cc0fdd80 LL	424	return -EBUSY;
cc0fdd80 LL	425
cfd56754 CW	426	ip.u.ip4 = entry->addr.u.ip4;
cfd56754 CW	427	#if IS_ENABLED(CONFIG_IPV6)
cc0fdd80	428	} else {
90010b36	429	if (timer_pending(&br->ip6_other_query.timer))
cc0fdd80 LL	430	return -EBUSY;
cc0fdd80 LL	431
cfd56754 CW	432	ip.u.ip6 = entry->addr.u.ip6;
cfd56754 CW	433	#endif
cc0fdd80	434	}
cfd56754 CW	435
	436	spin_lock_bh(&br->multicast_lock);
	437	mdb = mlock_dereference(br->mdb, br);
	438
	439	mp = br_mdb_ip_get(mdb, &ip);
	440	if (!mp)
	441	goto unlock;
	442
	443	for (pp = &mp->ports;
	444	(p = mlock_dereference(*pp, br)) != NULL;
	445	pp = &p->next) {
	446	if (!p->port \|\| p->port->dev->ifindex != entry->ifindex)
	447	continue;
	448
	449	if (p->port->state == BR_STATE_DISABLED)
	450	goto unlock;
	451
	452	rcu_assign_pointer(*pp, p->next);
	453	hlist_del_init(&p->mglist);
	454	del_timer(&p->timer);
	455	call_rcu_bh(&p->rcu, br_multicast_free_pg);
	456	err = 0;
	457
454594f3	458	if (!mp->ports && !mp->mglist &&
cfd56754 CW	459	netif_running(br->dev))
	460	mod_timer(&mp->timer, jiffies);
	461	break;
	462	}
	463
	464	unlock:
	465	spin_unlock_bh(&br->multicast_lock);
	466	return err;
	467	}
	468
661d2967	469	static int br_mdb_del(struct sk_buff skb, struct nlmsghdr nlh)
cfd56754 CW	470	{
	471	struct net_device *dev;
	472	struct br_mdb_entry *entry;
	473	struct net_bridge *br;
	474	int err;
	475
	476	err = br_mdb_parse(skb, nlh, &dev, &entry);
	477	if (err < 0)
	478	return err;
	479
	480	br = netdev_priv(dev);
	481
	482	err = __br_mdb_del(br, entry);
	483	if (!err)
	484	__br_mdb_notify(dev, entry, RTM_DELMDB);
	485	return err;
	486	}
	487
ee07c6e7 CW	488	void br_mdb_init(void)
	489	{
	490	rtnl_register(PF_BRIDGE, RTM_GETMDB, NULL, br_mdb_dump, NULL);
cfd56754 CW	491	rtnl_register(PF_BRIDGE, RTM_NEWMDB, br_mdb_add, NULL, NULL);
cfd56754 CW	492	rtnl_register(PF_BRIDGE, RTM_DELMDB, br_mdb_del, NULL, NULL);
ee07c6e7	493	}
63233159 VY	494
	495	void br_mdb_uninit(void)
	496	{
	497	rtnl_unregister(PF_BRIDGE, RTM_GETMDB);
	498	rtnl_unregister(PF_BRIDGE, RTM_NEWMDB);
	499	rtnl_unregister(PF_BRIDGE, RTM_DELMDB);
	500	}