]> git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blame - net/sched/act_police.c
[NET_SCHED]: Propagate nla_parse return value
[mirror_ubuntu-bionic-kernel.git] / net / sched / act_police.c
CommitLineData
1da177e4
LT
1/*
2 * net/sched/police.c Input police filter.
3 *
4 * This program is free software; you can redistribute it and/or
5 * modify it under the terms of the GNU General Public License
6 * as published by the Free Software Foundation; either version
7 * 2 of the License, or (at your option) any later version.
8 *
9 * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
10 * J Hadi Salim (action changes)
11 */
12
1da177e4
LT
13#include <linux/module.h>
14#include <linux/types.h>
15#include <linux/kernel.h>
1da177e4 16#include <linux/string.h>
1da177e4 17#include <linux/errno.h>
1da177e4 18#include <linux/skbuff.h>
1da177e4
LT
19#include <linux/rtnetlink.h>
20#include <linux/init.h>
1da177e4 21#include <net/act_api.h>
dc5fc579 22#include <net/netlink.h>
1da177e4 23
e9bef55d
JDB
24#define L2T(p,L) qdisc_l2t((p)->tcfp_R_tab, L)
25#define L2T_P(p,L) qdisc_l2t((p)->tcfp_P_tab, L)
1da177e4 26
e9ce1cd3
DM
27#define POL_TAB_MASK 15
28static struct tcf_common *tcf_police_ht[POL_TAB_MASK + 1];
29static u32 police_idx_gen;
30static DEFINE_RWLOCK(police_lock);
1da177e4 31
e9ce1cd3
DM
32static struct tcf_hashinfo police_hash_info = {
33 .htab = tcf_police_ht,
34 .hmask = POL_TAB_MASK,
35 .lock = &police_lock,
36};
1da177e4 37
1e9b3d53
PM
38/* old policer structure from before tc actions */
39struct tc_police_compat
40{
41 u32 index;
42 int action;
43 u32 limit;
44 u32 burst;
45 u32 mtu;
46 struct tc_ratespec rate;
47 struct tc_ratespec peakrate;
48};
49
e9ce1cd3 50/* Each policer is serialized by its individual spinlock */
1da177e4 51
83b950c8 52static int tcf_act_police_walker(struct sk_buff *skb, struct netlink_callback *cb,
10297b99 53 int type, struct tc_action *a)
1da177e4 54{
e9ce1cd3 55 struct tcf_common *p;
1da177e4 56 int err = 0, index = -1, i = 0, s_i = 0, n_i = 0;
7ba699c6 57 struct nlattr *r;
1da177e4 58
e1e992e5 59 read_lock_bh(&police_lock);
1da177e4
LT
60
61 s_i = cb->args[0];
62
e9ce1cd3
DM
63 for (i = 0; i < (POL_TAB_MASK + 1); i++) {
64 p = tcf_police_ht[tcf_hash(i, POL_TAB_MASK)];
1da177e4 65
e9ce1cd3 66 for (; p; p = p->tcfc_next) {
1da177e4
LT
67 index++;
68 if (index < s_i)
69 continue;
70 a->priv = p;
71 a->order = index;
7ba699c6
PM
72 r = (struct nlattr *)skb_tail_pointer(skb);
73 NLA_PUT(skb, a->order, 0, NULL);
1da177e4
LT
74 if (type == RTM_DELACTION)
75 err = tcf_action_dump_1(skb, a, 0, 1);
76 else
77 err = tcf_action_dump_1(skb, a, 0, 0);
78 if (err < 0) {
79 index--;
dc5fc579 80 nlmsg_trim(skb, r);
1da177e4
LT
81 goto done;
82 }
7ba699c6 83 r->nla_len = skb_tail_pointer(skb) - (u8 *)r;
1da177e4
LT
84 n_i++;
85 }
86 }
87done:
e1e992e5 88 read_unlock_bh(&police_lock);
1da177e4
LT
89 if (n_i)
90 cb->args[0] += n_i;
91 return n_i;
92
7ba699c6 93nla_put_failure:
dc5fc579 94 nlmsg_trim(skb, r);
1da177e4
LT
95 goto done;
96}
1da177e4 97
c3bc7cff 98static void tcf_police_destroy(struct tcf_police *p)
1da177e4 99{
e9ce1cd3
DM
100 unsigned int h = tcf_hash(p->tcf_index, POL_TAB_MASK);
101 struct tcf_common **p1p;
10297b99 102
e9ce1cd3
DM
103 for (p1p = &tcf_police_ht[h]; *p1p; p1p = &(*p1p)->tcfc_next) {
104 if (*p1p == &p->common) {
1da177e4 105 write_lock_bh(&police_lock);
e9ce1cd3 106 *p1p = p->tcf_next;
1da177e4 107 write_unlock_bh(&police_lock);
e9ce1cd3
DM
108 gen_kill_estimator(&p->tcf_bstats,
109 &p->tcf_rate_est);
e9ce1cd3
DM
110 if (p->tcfp_R_tab)
111 qdisc_put_rtab(p->tcfp_R_tab);
112 if (p->tcfp_P_tab)
113 qdisc_put_rtab(p->tcfp_P_tab);
1da177e4
LT
114 kfree(p);
115 return;
116 }
117 }
118 BUG_TRAP(0);
119}
120
7ba699c6 121static int tcf_act_police_locate(struct nlattr *nla, struct nlattr *est,
10297b99 122 struct tc_action *a, int ovr, int bind)
1da177e4
LT
123{
124 unsigned h;
125 int ret = 0, err;
7ba699c6 126 struct nlattr *tb[TCA_POLICE_MAX + 1];
1da177e4 127 struct tc_police *parm;
e9ce1cd3 128 struct tcf_police *police;
1da177e4 129 struct qdisc_rate_table *R_tab = NULL, *P_tab = NULL;
1e9b3d53 130 int size;
1da177e4 131
cee63723 132 if (nla == NULL)
1da177e4
LT
133 return -EINVAL;
134
cee63723
PM
135 err = nla_parse_nested(tb, TCA_POLICE_MAX, nla, NULL);
136 if (err < 0)
137 return err;
138
7ba699c6 139 if (tb[TCA_POLICE_TBF] == NULL)
1e9b3d53 140 return -EINVAL;
7ba699c6 141 size = nla_len(tb[TCA_POLICE_TBF]);
1e9b3d53 142 if (size != sizeof(*parm) && size != sizeof(struct tc_police_compat))
1da177e4 143 return -EINVAL;
7ba699c6 144 parm = nla_data(tb[TCA_POLICE_TBF]);
1da177e4 145
7ba699c6
PM
146 if (tb[TCA_POLICE_RESULT] != NULL &&
147 nla_len(tb[TCA_POLICE_RESULT]) != sizeof(u32))
1da177e4 148 return -EINVAL;
7ba699c6
PM
149 if (tb[TCA_POLICE_RESULT] != NULL &&
150 nla_len(tb[TCA_POLICE_RESULT]) != sizeof(u32))
1da177e4
LT
151 return -EINVAL;
152
e9ce1cd3
DM
153 if (parm->index) {
154 struct tcf_common *pc;
155
156 pc = tcf_hash_lookup(parm->index, &police_hash_info);
157 if (pc != NULL) {
158 a->priv = pc;
159 police = to_police(pc);
160 if (bind) {
161 police->tcf_bindcnt += 1;
162 police->tcf_refcnt += 1;
163 }
164 if (ovr)
165 goto override;
166 return ret;
1da177e4 167 }
1da177e4
LT
168 }
169
e9ce1cd3
DM
170 police = kzalloc(sizeof(*police), GFP_KERNEL);
171 if (police == NULL)
1da177e4 172 return -ENOMEM;
1da177e4 173 ret = ACT_P_CREATED;
e9ce1cd3
DM
174 police->tcf_refcnt = 1;
175 spin_lock_init(&police->tcf_lock);
1da177e4 176 if (bind)
e9ce1cd3 177 police->tcf_bindcnt = 1;
1da177e4
LT
178override:
179 if (parm->rate.rate) {
180 err = -ENOMEM;
7ba699c6 181 R_tab = qdisc_get_rtab(&parm->rate, tb[TCA_POLICE_RATE]);
1da177e4
LT
182 if (R_tab == NULL)
183 goto failure;
184 if (parm->peakrate.rate) {
185 P_tab = qdisc_get_rtab(&parm->peakrate,
7ba699c6 186 tb[TCA_POLICE_PEAKRATE]);
e9ce1cd3 187 if (P_tab == NULL) {
1da177e4
LT
188 qdisc_put_rtab(R_tab);
189 goto failure;
190 }
191 }
192 }
193 /* No failure allowed after this point */
e9ce1cd3 194 spin_lock_bh(&police->tcf_lock);
1da177e4 195 if (R_tab != NULL) {
e9ce1cd3
DM
196 qdisc_put_rtab(police->tcfp_R_tab);
197 police->tcfp_R_tab = R_tab;
1da177e4
LT
198 }
199 if (P_tab != NULL) {
e9ce1cd3
DM
200 qdisc_put_rtab(police->tcfp_P_tab);
201 police->tcfp_P_tab = P_tab;
1da177e4
LT
202 }
203
7ba699c6
PM
204 if (tb[TCA_POLICE_RESULT])
205 police->tcfp_result = *(u32*)nla_data(tb[TCA_POLICE_RESULT]);
e9ce1cd3
DM
206 police->tcfp_toks = police->tcfp_burst = parm->burst;
207 police->tcfp_mtu = parm->mtu;
208 if (police->tcfp_mtu == 0) {
209 police->tcfp_mtu = ~0;
210 if (police->tcfp_R_tab)
211 police->tcfp_mtu = 255<<police->tcfp_R_tab->rate.cell_log;
1da177e4 212 }
e9ce1cd3
DM
213 if (police->tcfp_P_tab)
214 police->tcfp_ptoks = L2T_P(police, police->tcfp_mtu);
215 police->tcf_action = parm->action;
1da177e4 216
7ba699c6 217 if (tb[TCA_POLICE_AVRATE])
e9ce1cd3 218 police->tcfp_ewma_rate =
7ba699c6 219 *(u32*)nla_data(tb[TCA_POLICE_AVRATE]);
1da177e4 220 if (est)
e9ce1cd3
DM
221 gen_replace_estimator(&police->tcf_bstats,
222 &police->tcf_rate_est,
7ba699c6 223 &police->tcf_lock, est);
1da177e4 224
e9ce1cd3 225 spin_unlock_bh(&police->tcf_lock);
1da177e4
LT
226 if (ret != ACT_P_CREATED)
227 return ret;
228
3bebcda2 229 police->tcfp_t_c = psched_get_time();
e9ce1cd3
DM
230 police->tcf_index = parm->index ? parm->index :
231 tcf_hash_new_index(&police_idx_gen, &police_hash_info);
232 h = tcf_hash(police->tcf_index, POL_TAB_MASK);
1da177e4 233 write_lock_bh(&police_lock);
e9ce1cd3
DM
234 police->tcf_next = tcf_police_ht[h];
235 tcf_police_ht[h] = &police->common;
1da177e4
LT
236 write_unlock_bh(&police_lock);
237
e9ce1cd3 238 a->priv = police;
1da177e4
LT
239 return ret;
240
241failure:
242 if (ret == ACT_P_CREATED)
e9ce1cd3 243 kfree(police);
1da177e4
LT
244 return err;
245}
246
247static int tcf_act_police_cleanup(struct tc_action *a, int bind)
248{
e9ce1cd3 249 struct tcf_police *p = a->priv;
c3bc7cff 250 int ret = 0;
1da177e4 251
c3bc7cff
PM
252 if (p != NULL) {
253 if (bind)
254 p->tcf_bindcnt--;
255
256 p->tcf_refcnt--;
257 if (p->tcf_refcnt <= 0 && !p->tcf_bindcnt) {
258 tcf_police_destroy(p);
259 ret = 1;
260 }
261 }
262 return ret;
1da177e4
LT
263}
264
f43c5a0d 265static int tcf_act_police(struct sk_buff *skb, struct tc_action *a,
10297b99 266 struct tcf_result *res)
1da177e4 267{
e9ce1cd3 268 struct tcf_police *police = a->priv;
1da177e4 269 psched_time_t now;
1da177e4
LT
270 long toks;
271 long ptoks = 0;
272
e9ce1cd3 273 spin_lock(&police->tcf_lock);
1da177e4 274
e9ce1cd3
DM
275 police->tcf_bstats.bytes += skb->len;
276 police->tcf_bstats.packets++;
1da177e4 277
e9ce1cd3
DM
278 if (police->tcfp_ewma_rate &&
279 police->tcf_rate_est.bps >= police->tcfp_ewma_rate) {
280 police->tcf_qstats.overlimits++;
281 spin_unlock(&police->tcf_lock);
282 return police->tcf_action;
1da177e4 283 }
1da177e4 284
e9ce1cd3
DM
285 if (skb->len <= police->tcfp_mtu) {
286 if (police->tcfp_R_tab == NULL) {
287 spin_unlock(&police->tcf_lock);
288 return police->tcfp_result;
1da177e4
LT
289 }
290
3bebcda2 291 now = psched_get_time();
03cc45c0
PM
292 toks = psched_tdiff_bounded(now, police->tcfp_t_c,
293 police->tcfp_burst);
e9ce1cd3
DM
294 if (police->tcfp_P_tab) {
295 ptoks = toks + police->tcfp_ptoks;
296 if (ptoks > (long)L2T_P(police, police->tcfp_mtu))
297 ptoks = (long)L2T_P(police, police->tcfp_mtu);
298 ptoks -= L2T_P(police, skb->len);
1da177e4 299 }
e9ce1cd3
DM
300 toks += police->tcfp_toks;
301 if (toks > (long)police->tcfp_burst)
302 toks = police->tcfp_burst;
303 toks -= L2T(police, skb->len);
1da177e4 304 if ((toks|ptoks) >= 0) {
e9ce1cd3
DM
305 police->tcfp_t_c = now;
306 police->tcfp_toks = toks;
307 police->tcfp_ptoks = ptoks;
308 spin_unlock(&police->tcf_lock);
309 return police->tcfp_result;
1da177e4
LT
310 }
311 }
312
e9ce1cd3
DM
313 police->tcf_qstats.overlimits++;
314 spin_unlock(&police->tcf_lock);
315 return police->tcf_action;
1da177e4
LT
316}
317
318static int
319tcf_act_police_dump(struct sk_buff *skb, struct tc_action *a, int bind, int ref)
320{
27a884dc 321 unsigned char *b = skb_tail_pointer(skb);
e9ce1cd3 322 struct tcf_police *police = a->priv;
1da177e4 323 struct tc_police opt;
e9ce1cd3
DM
324
325 opt.index = police->tcf_index;
326 opt.action = police->tcf_action;
327 opt.mtu = police->tcfp_mtu;
328 opt.burst = police->tcfp_burst;
329 opt.refcnt = police->tcf_refcnt - ref;
330 opt.bindcnt = police->tcf_bindcnt - bind;
331 if (police->tcfp_R_tab)
332 opt.rate = police->tcfp_R_tab->rate;
1da177e4
LT
333 else
334 memset(&opt.rate, 0, sizeof(opt.rate));
e9ce1cd3
DM
335 if (police->tcfp_P_tab)
336 opt.peakrate = police->tcfp_P_tab->rate;
1da177e4
LT
337 else
338 memset(&opt.peakrate, 0, sizeof(opt.peakrate));
7ba699c6 339 NLA_PUT(skb, TCA_POLICE_TBF, sizeof(opt), &opt);
e9ce1cd3 340 if (police->tcfp_result)
7ba699c6 341 NLA_PUT(skb, TCA_POLICE_RESULT, sizeof(int),
e9ce1cd3 342 &police->tcfp_result);
e9ce1cd3 343 if (police->tcfp_ewma_rate)
7ba699c6 344 NLA_PUT(skb, TCA_POLICE_AVRATE, 4, &police->tcfp_ewma_rate);
1da177e4
LT
345 return skb->len;
346
7ba699c6 347nla_put_failure:
dc5fc579 348 nlmsg_trim(skb, b);
1da177e4
LT
349 return -1;
350}
351
352MODULE_AUTHOR("Alexey Kuznetsov");
353MODULE_DESCRIPTION("Policing actions");
354MODULE_LICENSE("GPL");
355
356static struct tc_action_ops act_police_ops = {
357 .kind = "police",
e9ce1cd3 358 .hinfo = &police_hash_info,
1da177e4
LT
359 .type = TCA_ID_POLICE,
360 .capab = TCA_CAP_NONE,
361 .owner = THIS_MODULE,
362 .act = tcf_act_police,
363 .dump = tcf_act_police_dump,
364 .cleanup = tcf_act_police_cleanup,
e9ce1cd3 365 .lookup = tcf_hash_search,
1da177e4 366 .init = tcf_act_police_locate,
83b950c8 367 .walk = tcf_act_police_walker
1da177e4
LT
368};
369
370static int __init
371police_init_module(void)
372{
373 return tcf_register_action(&act_police_ops);
374}
375
376static void __exit
377police_cleanup_module(void)
378{
379 tcf_unregister_action(&act_police_ops);
380}
381
382module_init(police_init_module);
383module_exit(police_cleanup_module);