include/net/addrconf.h

   1 /* SPDX-License-Identifier: GPL-2.0 */
   2 #ifndef _ADDRCONF_H
   3 #define _ADDRCONF_H
   4
   5 #define MAX_RTR_SOLICITATIONS           -1              /* unlimited */
   6 #define RTR_SOLICITATION_INTERVAL       (4*HZ)
   7 #define RTR_SOLICITATION_MAX_INTERVAL   (3600*HZ)       /* 1 hour */
   8
   9 #define MIN_VALID_LIFETIME              (2*3600)        /* 2 hours */
  10
  11 #define TEMP_VALID_LIFETIME             (7*86400)
  12 #define TEMP_PREFERRED_LIFETIME         (86400)
  13 #define REGEN_MAX_RETRY                 (3)
  14 #define MAX_DESYNC_FACTOR               (600)
  15
  16 #define ADDR_CHECK_FREQUENCY            (120*HZ)
  17
  18 #define IPV6_MAX_ADDRESSES              16
  19
  20 #define ADDRCONF_TIMER_FUZZ_MINUS       (HZ > 50 ? HZ / 50 : 1)
  21 #define ADDRCONF_TIMER_FUZZ             (HZ / 4)
  22 #define ADDRCONF_TIMER_FUZZ_MAX         (HZ)
  23
  24 #define ADDRCONF_NOTIFY_PRIORITY        0
  25
  26 #include <linux/in.h>
  27 #include <linux/in6.h>
  28
  29 struct prefix_info {
  30         __u8                    type;
  31         __u8                    length;
  32         __u8                    prefix_len;
  33
  34 #if defined(__BIG_ENDIAN_BITFIELD)
  35         __u8                    onlink : 1,
  36                                 autoconf : 1,
  37                                 reserved : 6;
  38 #elif defined(__LITTLE_ENDIAN_BITFIELD)
  39         __u8                    reserved : 6,
  40                                 autoconf : 1,
  41                                 onlink : 1;
  42 #else
  43 #error "Please fix <asm/byteorder.h>"
  44 #endif
  45         __be32                  valid;
  46         __be32                  prefered;
  47         __be32                  reserved2;
  48
  49         struct in6_addr         prefix;
  50 };
  51
  52 #include <linux/ipv6.h>
  53 #include <linux/netdevice.h>
  54 #include <net/if_inet6.h>
  55 #include <net/ipv6.h>
  56
  57 struct in6_validator_info {
  58         struct in6_addr         i6vi_addr;
  59         struct inet6_dev        *i6vi_dev;
  60         struct netlink_ext_ack  *extack;
  61 };
  62
  63 struct ifa6_config {
  64         const struct in6_addr   *pfx;
  65         unsigned int            plen;
  66
  67         const struct in6_addr   *peer_pfx;
  68
  69         u32                     rt_priority;
  70         u32                     ifa_flags;
  71         u32                     preferred_lft;
  72         u32                     valid_lft;
  73         u16                     scope;
  74 };
  75
  76 int addrconf_init(void);
  77 void addrconf_cleanup(void);
  78
  79 int addrconf_add_ifaddr(struct net *net, void __user *arg);
  80 int addrconf_del_ifaddr(struct net *net, void __user *arg);
  81 int addrconf_set_dstaddr(struct net *net, void __user *arg);
  82
  83 int ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
  84                   const struct net_device *dev, int strict);
  85 int ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr,
  86                             const struct net_device *dev, bool skip_dev_check,
  87                             int strict, u32 banned_flags);
  88
  89 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
  90 int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr);
  91 #endif
  92
  93 bool ipv6_chk_custom_prefix(const struct in6_addr *addr,
  94                                    const unsigned int prefix_len,
  95                                    struct net_device *dev);
  96
  97 int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev);
  98
  99 struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net,
 100                                      const struct in6_addr *addr,
 101                                      struct net_device *dev, int strict);
 102
 103 int ipv6_dev_get_saddr(struct net *net, const struct net_device *dev,
 104                        const struct in6_addr *daddr, unsigned int srcprefs,
 105                        struct in6_addr *saddr);
 106 int __ipv6_get_lladdr(struct inet6_dev *idev, struct in6_addr *addr,
 107                       u32 banned_flags);
 108 int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr,
 109                     u32 banned_flags);
 110 bool inet_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2,
 111                           bool match_wildcard);
 112 bool inet_rcv_saddr_any(const struct sock *sk);
 113 void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr);
 114 void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr);
 115
 116 void addrconf_add_linklocal(struct inet6_dev *idev,
 117                             const struct in6_addr *addr, u32 flags);
 118
 119 int addrconf_prefix_rcv_add_addr(struct net *net, struct net_device *dev,
 120                                  const struct prefix_info *pinfo,
 121                                  struct inet6_dev *in6_dev,
 122                                  const struct in6_addr *addr, int addr_type,
 123                                  u32 addr_flags, bool sllao, bool tokenized,
 124                                  __u32 valid_lft, u32 prefered_lft);
 125
 126 static inline void addrconf_addr_eui48_base(u8 *eui, const char *const addr)
 127 {
 128         memcpy(eui, addr, 3);
 129         eui[3] = 0xFF;
 130         eui[4] = 0xFE;
 131         memcpy(eui + 5, addr + 3, 3);
 132 }
 133
 134 static inline void addrconf_addr_eui48(u8 *eui, const char *const addr)
 135 {
 136         addrconf_addr_eui48_base(eui, addr);
 137         eui[0] ^= 2;
 138 }
 139
 140 static inline int addrconf_ifid_eui48(u8 *eui, struct net_device *dev)
 141 {
 142         if (dev->addr_len != ETH_ALEN)
 143                 return -1;
 144
 145         /*
 146          * The zSeries OSA network cards can be shared among various
 147          * OS instances, but the OSA cards have only one MAC address.
 148          * This leads to duplicate address conflicts in conjunction
 149          * with IPv6 if more than one instance uses the same card.
 150          *
 151          * The driver for these cards can deliver a unique 16-bit
 152          * identifier for each instance sharing the same card.  It is
 153          * placed instead of 0xFFFE in the interface identifier.  The
 154          * "u" bit of the interface identifier is not inverted in this
 155          * case.  Hence the resulting interface identifier has local
 156          * scope according to RFC2373.
 157          */
 158
 159         addrconf_addr_eui48_base(eui, dev->dev_addr);
 160
 161         if (dev->dev_id) {
 162                 eui[3] = (dev->dev_id >> 8) & 0xFF;
 163                 eui[4] = dev->dev_id & 0xFF;
 164         } else {
 165                 eui[0] ^= 2;
 166         }
 167
 168         return 0;
 169 }
 170
 171 static inline unsigned long addrconf_timeout_fixup(u32 timeout,
 172                                                    unsigned int unit)
 173 {
 174         if (timeout == 0xffffffff)
 175                 return ~0UL;
 176
 177         /*
 178          * Avoid arithmetic overflow.
 179          * Assuming unit is constant and non-zero, this "if" statement
 180          * will go away on 64bit archs.
 181          */
 182         if (0xfffffffe > LONG_MAX / unit && timeout > LONG_MAX / unit)
 183                 return LONG_MAX / unit;
 184
 185         return timeout;
 186 }
 187
 188 static inline int addrconf_finite_timeout(unsigned long timeout)
 189 {
 190         return ~timeout;
 191 }
 192
 193 /*
 194  *      IPv6 Address Label subsystem (addrlabel.c)
 195  */
 196 int ipv6_addr_label_init(void);
 197 void ipv6_addr_label_cleanup(void);
 198 int ipv6_addr_label_rtnl_register(void);
 199 u32 ipv6_addr_label(struct net *net, const struct in6_addr *addr,
 200                     int type, int ifindex);
 201
 202 /*
 203  *      multicast prototypes (mcast.c)
 204  */
 205 static inline int ipv6_mc_may_pull(struct sk_buff *skb,
 206                                    unsigned int len)
 207 {
 208         if (skb_transport_offset(skb) + ipv6_transport_len(skb) < len)
 209                 return -EINVAL;
 210
 211         return pskb_may_pull(skb, len);
 212 }
 213
 214 int ipv6_sock_mc_join(struct sock *sk, int ifindex,
 215                       const struct in6_addr *addr);
 216 int ipv6_sock_mc_drop(struct sock *sk, int ifindex,
 217                       const struct in6_addr *addr);
 218 void __ipv6_sock_mc_close(struct sock *sk);
 219 void ipv6_sock_mc_close(struct sock *sk);
 220 bool inet6_mc_check(struct sock *sk, const struct in6_addr *mc_addr,
 221                     const struct in6_addr *src_addr);
 222
 223 int ipv6_dev_mc_inc(struct net_device *dev, const struct in6_addr *addr);
 224 int __ipv6_dev_mc_dec(struct inet6_dev *idev, const struct in6_addr *addr);
 225 int ipv6_dev_mc_dec(struct net_device *dev, const struct in6_addr *addr);
 226 void ipv6_mc_up(struct inet6_dev *idev);
 227 void ipv6_mc_down(struct inet6_dev *idev);
 228 void ipv6_mc_unmap(struct inet6_dev *idev);
 229 void ipv6_mc_remap(struct inet6_dev *idev);
 230 void ipv6_mc_init_dev(struct inet6_dev *idev);
 231 void ipv6_mc_destroy_dev(struct inet6_dev *idev);
 232 int ipv6_mc_check_icmpv6(struct sk_buff *skb);
 233 int ipv6_mc_check_mld(struct sk_buff *skb);
 234 void addrconf_dad_failure(struct sk_buff *skb, struct inet6_ifaddr *ifp);
 235
 236 bool ipv6_chk_mcast_addr(struct net_device *dev, const struct in6_addr *group,
 237                          const struct in6_addr *src_addr);
 238
 239 void ipv6_mc_dad_complete(struct inet6_dev *idev);
 240
 241 /* A stub used by vxlan module. This is ugly, ideally these
 242  * symbols should be built into the core kernel.
 243  */
 244 struct ipv6_stub {
 245         int (*ipv6_sock_mc_join)(struct sock *sk, int ifindex,
 246                                  const struct in6_addr *addr);
 247         int (*ipv6_sock_mc_drop)(struct sock *sk, int ifindex,
 248                                  const struct in6_addr *addr);
 249         int (*ipv6_dst_lookup)(struct net *net, struct sock *sk,
 250                                struct dst_entry **dst, struct flowi6 *fl6);
 251         int (*ipv6_route_input)(struct sk_buff *skb);
 252
 253         struct fib6_table *(*fib6_get_table)(struct net *net, u32 id);
 254         struct fib6_info *(*fib6_lookup)(struct net *net, int oif,
 255                                          struct flowi6 *fl6, int flags);
 256         struct fib6_info *(*fib6_table_lookup)(struct net *net,
 257                                               struct fib6_table *table,
 258                                               int oif, struct flowi6 *fl6,
 259                                               int flags);
 260         struct fib6_info *(*fib6_multipath_select)(const struct net *net,
 261                                                    struct fib6_info *f6i,
 262                                                    struct flowi6 *fl6, int oif,
 263                                                    const struct sk_buff *skb,
 264                                                    int strict);
 265         u32 (*ip6_mtu_from_fib6)(struct fib6_info *f6i, struct in6_addr *daddr,
 266                                  struct in6_addr *saddr);
 267
 268         void (*udpv6_encap_enable)(void);
 269         void (*ndisc_send_na)(struct net_device *dev, const struct in6_addr *daddr,
 270                               const struct in6_addr *solicited_addr,
 271                               bool router, bool solicited, bool override, bool inc_opt);
 272         struct neigh_table *nd_tbl;
 273 };
 274 extern const struct ipv6_stub *ipv6_stub __read_mostly;
 275
 276 /* A stub used by bpf helpers. Similarly ugly as ipv6_stub */
 277 struct ipv6_bpf_stub {
 278         int (*inet6_bind)(struct sock *sk, struct sockaddr *uaddr, int addr_len,
 279                           bool force_bind_address_no_port, bool with_lock);
 280         struct sock *(*udp6_lib_lookup)(struct net *net,
 281                                         const struct in6_addr *saddr, __be16 sport,
 282                                         const struct in6_addr *daddr, __be16 dport,
 283                                         int dif, int sdif, struct udp_table *tbl,
 284                                         struct sk_buff *skb);
 285 };
 286 extern const struct ipv6_bpf_stub *ipv6_bpf_stub __read_mostly;
 287
 288 /*
 289  * identify MLD packets for MLD filter exceptions
 290  */
 291 static inline bool ipv6_is_mld(struct sk_buff *skb, int nexthdr, int offset)
 292 {
 293         struct icmp6hdr *hdr;
 294
 295         if (nexthdr != IPPROTO_ICMPV6 ||
 296             !pskb_network_may_pull(skb, offset + sizeof(struct icmp6hdr)))
 297                 return false;
 298
 299         hdr = (struct icmp6hdr *)(skb_network_header(skb) + offset);
 300
 301         switch (hdr->icmp6_type) {
 302         case ICMPV6_MGM_QUERY:
 303         case ICMPV6_MGM_REPORT:
 304         case ICMPV6_MGM_REDUCTION:
 305         case ICMPV6_MLD2_REPORT:
 306                 return true;
 307         default:
 308                 break;
 309         }
 310         return false;
 311 }
 312
 313 void addrconf_prefix_rcv(struct net_device *dev,
 314                          u8 *opt, int len, bool sllao);
 315
 316 /*
 317  *      anycast prototypes (anycast.c)
 318  */
 319 int ipv6_sock_ac_join(struct sock *sk, int ifindex,
 320                       const struct in6_addr *addr);
 321 int ipv6_sock_ac_drop(struct sock *sk, int ifindex,
 322                       const struct in6_addr *addr);
 323 void ipv6_sock_ac_close(struct sock *sk);
 324
 325 int __ipv6_dev_ac_inc(struct inet6_dev *idev, const struct in6_addr *addr);
 326 int __ipv6_dev_ac_dec(struct inet6_dev *idev, const struct in6_addr *addr);
 327 void ipv6_ac_destroy_dev(struct inet6_dev *idev);
 328 bool ipv6_chk_acast_addr(struct net *net, struct net_device *dev,
 329                          const struct in6_addr *addr);
 330 bool ipv6_chk_acast_addr_src(struct net *net, struct net_device *dev,
 331                              const struct in6_addr *addr);
 332 int ipv6_anycast_init(void);
 333 void ipv6_anycast_cleanup(void);
 334
 335 /* Device notifier */
 336 int register_inet6addr_notifier(struct notifier_block *nb);
 337 int unregister_inet6addr_notifier(struct notifier_block *nb);
 338 int inet6addr_notifier_call_chain(unsigned long val, void *v);
 339
 340 int register_inet6addr_validator_notifier(struct notifier_block *nb);
 341 int unregister_inet6addr_validator_notifier(struct notifier_block *nb);
 342 int inet6addr_validator_notifier_call_chain(unsigned long val, void *v);
 343
 344 void inet6_netconf_notify_devconf(struct net *net, int event, int type,
 345                                   int ifindex, struct ipv6_devconf *devconf);
 346
 347 /**
 348  * __in6_dev_get - get inet6_dev pointer from netdevice
 349  * @dev: network device
 350  *
 351  * Caller must hold rcu_read_lock or RTNL, because this function
 352  * does not take a reference on the inet6_dev.
 353  */
 354 static inline struct inet6_dev *__in6_dev_get(const struct net_device *dev)
 355 {
 356         return rcu_dereference_rtnl(dev->ip6_ptr);
 357 }
 358
 359 /**
 360  * __in6_dev_get_safely - get inet6_dev pointer from netdevice
 361  * @dev: network device
 362  *
 363  * This is a safer version of __in6_dev_get
 364  */
 365 static inline struct inet6_dev *__in6_dev_get_safely(const struct net_device *dev)
 366 {
 367         if (likely(dev))
 368                 return rcu_dereference_rtnl(dev->ip6_ptr);
 369         else
 370                 return NULL;
 371 }
 372
 373 /**
 374  * in6_dev_get - get inet6_dev pointer from netdevice
 375  * @dev: network device
 376  *
 377  * This version can be used in any context, and takes a reference
 378  * on the inet6_dev. Callers must use in6_dev_put() later to
 379  * release this reference.
 380  */
 381 static inline struct inet6_dev *in6_dev_get(const struct net_device *dev)
 382 {
 383         struct inet6_dev *idev;
 384
 385         rcu_read_lock();
 386         idev = rcu_dereference(dev->ip6_ptr);
 387         if (idev)
 388                 refcount_inc(&idev->refcnt);
 389         rcu_read_unlock();
 390         return idev;
 391 }
 392
 393 static inline struct neigh_parms *__in6_dev_nd_parms_get_rcu(const struct net_device *dev)
 394 {
 395         struct inet6_dev *idev = __in6_dev_get(dev);
 396
 397         return idev ? idev->nd_parms : NULL;
 398 }
 399
 400 void in6_dev_finish_destroy(struct inet6_dev *idev);
 401
 402 static inline void in6_dev_put(struct inet6_dev *idev)
 403 {
 404         if (refcount_dec_and_test(&idev->refcnt))
 405                 in6_dev_finish_destroy(idev);
 406 }
 407
 408 static inline void in6_dev_put_clear(struct inet6_dev **pidev)
 409 {
 410         struct inet6_dev *idev = *pidev;
 411
 412         if (idev) {
 413                 in6_dev_put(idev);
 414                 *pidev = NULL;
 415         }
 416 }
 417
 418 static inline void __in6_dev_put(struct inet6_dev *idev)
 419 {
 420         refcount_dec(&idev->refcnt);
 421 }
 422
 423 static inline void in6_dev_hold(struct inet6_dev *idev)
 424 {
 425         refcount_inc(&idev->refcnt);
 426 }
 427
 428 void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp);
 429
 430 static inline void in6_ifa_put(struct inet6_ifaddr *ifp)
 431 {
 432         if (refcount_dec_and_test(&ifp->refcnt))
 433                 inet6_ifa_finish_destroy(ifp);
 434 }
 435
 436 static inline void __in6_ifa_put(struct inet6_ifaddr *ifp)
 437 {
 438         refcount_dec(&ifp->refcnt);
 439 }
 440
 441 static inline void in6_ifa_hold(struct inet6_ifaddr *ifp)
 442 {
 443         refcount_inc(&ifp->refcnt);
 444 }
 445
 446
 447 /*
 448  *      compute link-local solicited-node multicast address
 449  */
 450
 451 static inline void addrconf_addr_solict_mult(const struct in6_addr *addr,
 452                                              struct in6_addr *solicited)
 453 {
 454         ipv6_addr_set(solicited,
 455                       htonl(0xFF020000), 0,
 456                       htonl(0x1),
 457                       htonl(0xFF000000) | addr->s6_addr32[3]);
 458 }
 459
 460 static inline bool ipv6_addr_is_ll_all_nodes(const struct in6_addr *addr)
 461 {
 462 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
 463         __be64 *p = (__be64 *)addr;
 464         return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(1))) == 0UL;
 465 #else
 466         return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
 467                 addr->s6_addr32[1] | addr->s6_addr32[2] |
 468                 (addr->s6_addr32[3] ^ htonl(0x00000001))) == 0;
 469 #endif
 470 }
 471
 472 static inline bool ipv6_addr_is_ll_all_routers(const struct in6_addr *addr)
 473 {
 474 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
 475         __be64 *p = (__be64 *)addr;
 476         return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(2))) == 0UL;
 477 #else
 478         return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
 479                 addr->s6_addr32[1] | addr->s6_addr32[2] |
 480                 (addr->s6_addr32[3] ^ htonl(0x00000002))) == 0;
 481 #endif
 482 }
 483
 484 static inline bool ipv6_addr_is_isatap(const struct in6_addr *addr)
 485 {
 486         return (addr->s6_addr32[2] | htonl(0x02000000)) == htonl(0x02005EFE);
 487 }
 488
 489 static inline bool ipv6_addr_is_solict_mult(const struct in6_addr *addr)
 490 {
 491 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
 492         __be64 *p = (__be64 *)addr;
 493         return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) |
 494                 ((p[1] ^ cpu_to_be64(0x00000001ff000000UL)) &
 495                  cpu_to_be64(0xffffffffff000000UL))) == 0UL;
 496 #else
 497         return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
 498                 addr->s6_addr32[1] |
 499                 (addr->s6_addr32[2] ^ htonl(0x00000001)) |
 500                 (addr->s6_addr[12] ^ 0xff)) == 0;
 501 #endif
 502 }
 503
 504 static inline bool ipv6_addr_is_all_snoopers(const struct in6_addr *addr)
 505 {
 506 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
 507         __be64 *p = (__be64 *)addr;
 508
 509         return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) |
 510                 (p[1] ^ cpu_to_be64(0x6a))) == 0UL;
 511 #else
 512         return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
 513                 addr->s6_addr32[1] | addr->s6_addr32[2] |
 514                 (addr->s6_addr32[3] ^ htonl(0x0000006a))) == 0;
 515 #endif
 516 }
 517
 518 #ifdef CONFIG_PROC_FS
 519 int if6_proc_init(void);
 520 void if6_proc_exit(void);
 521 #endif
 522
 523 #endif