1 // SPDX-License-Identifier: GPL-2.0-or-later
4 * Linux ethernet bridge
7 * Lennert Buytenhek <buytenh@gnu.org>
10 #include <linux/capability.h>
11 #include <linux/kernel.h>
12 #include <linux/if_bridge.h>
13 #include <linux/netdevice.h>
14 #include <linux/slab.h>
15 #include <linux/times.h>
16 #include <net/net_namespace.h>
17 #include <linux/uaccess.h>
18 #include "br_private.h"
20 static int get_bridge_ifindices(struct net
*net
, int *indices
, int num
)
22 struct net_device
*dev
;
26 for_each_netdev_rcu(net
, dev
) {
29 if (dev
->priv_flags
& IFF_EBRIDGE
)
30 indices
[i
++] = dev
->ifindex
;
37 /* called with RTNL */
38 static void get_port_ifindices(struct net_bridge
*br
, int *ifindices
, int num
)
40 struct net_bridge_port
*p
;
42 list_for_each_entry(p
, &br
->port_list
, list
) {
44 ifindices
[p
->port_no
] = p
->dev
->ifindex
;
49 * Format up to a page worth of forwarding table entries
50 * userbuf -- where to copy result
51 * maxnum -- maximum number of entries desired
52 * (limited to a page for sanity)
53 * offset -- number of records to skip
55 static int get_fdb_entries(struct net_bridge
*br
, void __user
*userbuf
,
56 unsigned long maxnum
, unsigned long offset
)
62 /* Clamp size to PAGE_SIZE, test maxnum to avoid overflow */
63 if (maxnum
> PAGE_SIZE
/sizeof(struct __fdb_entry
))
64 maxnum
= PAGE_SIZE
/sizeof(struct __fdb_entry
);
66 size
= maxnum
* sizeof(struct __fdb_entry
);
68 buf
= kmalloc(size
, GFP_USER
);
72 num
= br_fdb_fillbuf(br
, buf
, maxnum
, offset
);
74 if (copy_to_user(userbuf
, buf
,
75 array_size(num
, sizeof(struct __fdb_entry
))))
83 /* called with RTNL */
84 static int add_del_if(struct net_bridge
*br
, int ifindex
, int isadd
)
86 struct net
*net
= dev_net(br
->dev
);
87 struct net_device
*dev
;
90 if (!ns_capable(net
->user_ns
, CAP_NET_ADMIN
))
93 dev
= __dev_get_by_index(net
, ifindex
);
98 ret
= br_add_if(br
, dev
, NULL
);
100 ret
= br_del_if(br
, dev
);
106 * Legacy ioctl's through SIOCDEVPRIVATE
107 * This interface is deprecated because it was too difficult
108 * to do the translation for 32/64bit ioctl compatibility.
110 int br_dev_siocdevprivate(struct net_device
*dev
, struct ifreq
*rq
, void __user
*data
, int cmd
)
112 struct net_bridge
*br
= netdev_priv(dev
);
113 struct net_bridge_port
*p
= NULL
;
114 unsigned long args
[4];
116 int ret
= -EOPNOTSUPP
;
118 if (in_compat_syscall()) {
119 unsigned int cargs
[4];
121 if (copy_from_user(cargs
, data
, sizeof(cargs
)))
129 argp
= compat_ptr(args
[1]);
131 if (copy_from_user(args
, data
, sizeof(args
)))
134 argp
= (void __user
*)args
[1];
140 return add_del_if(br
, args
[1], args
[0] == BRCTL_ADD_IF
);
142 case BRCTL_GET_BRIDGE_INFO
:
144 struct __bridge_info b
;
146 memset(&b
, 0, sizeof(struct __bridge_info
));
148 memcpy(&b
.designated_root
, &br
->designated_root
, 8);
149 memcpy(&b
.bridge_id
, &br
->bridge_id
, 8);
150 b
.root_path_cost
= br
->root_path_cost
;
151 b
.max_age
= jiffies_to_clock_t(br
->max_age
);
152 b
.hello_time
= jiffies_to_clock_t(br
->hello_time
);
153 b
.forward_delay
= br
->forward_delay
;
154 b
.bridge_max_age
= br
->bridge_max_age
;
155 b
.bridge_hello_time
= br
->bridge_hello_time
;
156 b
.bridge_forward_delay
= jiffies_to_clock_t(br
->bridge_forward_delay
);
157 b
.topology_change
= br
->topology_change
;
158 b
.topology_change_detected
= br
->topology_change_detected
;
159 b
.root_port
= br
->root_port
;
161 b
.stp_enabled
= (br
->stp_enabled
!= BR_NO_STP
);
162 b
.ageing_time
= jiffies_to_clock_t(br
->ageing_time
);
163 b
.hello_timer_value
= br_timer_value(&br
->hello_timer
);
164 b
.tcn_timer_value
= br_timer_value(&br
->tcn_timer
);
165 b
.topology_change_timer_value
= br_timer_value(&br
->topology_change_timer
);
166 b
.gc_timer_value
= br_timer_value(&br
->gc_work
.timer
);
169 if (copy_to_user((void __user
*)args
[1], &b
, sizeof(b
)))
175 case BRCTL_GET_PORT_LIST
:
184 if (num
> BR_MAX_PORTS
)
187 indices
= kcalloc(num
, sizeof(int), GFP_KERNEL
);
191 get_port_ifindices(br
, indices
, num
);
192 if (copy_to_user(argp
, indices
, array_size(num
, sizeof(int))))
198 case BRCTL_SET_BRIDGE_FORWARD_DELAY
:
199 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
202 ret
= br_set_forward_delay(br
, args
[1]);
205 case BRCTL_SET_BRIDGE_HELLO_TIME
:
206 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
209 ret
= br_set_hello_time(br
, args
[1]);
212 case BRCTL_SET_BRIDGE_MAX_AGE
:
213 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
216 ret
= br_set_max_age(br
, args
[1]);
219 case BRCTL_SET_AGEING_TIME
:
220 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
223 ret
= br_set_ageing_time(br
, args
[1]);
226 case BRCTL_GET_PORT_INFO
:
228 struct __port_info p
;
229 struct net_bridge_port
*pt
;
232 if ((pt
= br_get_port(br
, args
[2])) == NULL
) {
237 memset(&p
, 0, sizeof(struct __port_info
));
238 memcpy(&p
.designated_root
, &pt
->designated_root
, 8);
239 memcpy(&p
.designated_bridge
, &pt
->designated_bridge
, 8);
240 p
.port_id
= pt
->port_id
;
241 p
.designated_port
= pt
->designated_port
;
242 p
.path_cost
= pt
->path_cost
;
243 p
.designated_cost
= pt
->designated_cost
;
245 p
.top_change_ack
= pt
->topology_change_ack
;
246 p
.config_pending
= pt
->config_pending
;
247 p
.message_age_timer_value
= br_timer_value(&pt
->message_age_timer
);
248 p
.forward_delay_timer_value
= br_timer_value(&pt
->forward_delay_timer
);
249 p
.hold_timer_value
= br_timer_value(&pt
->hold_timer
);
253 if (copy_to_user(argp
, &p
, sizeof(p
)))
259 case BRCTL_SET_BRIDGE_STP_STATE
:
260 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
263 ret
= br_stp_set_enabled(br
, args
[1], NULL
);
266 case BRCTL_SET_BRIDGE_PRIORITY
:
267 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
270 br_stp_set_bridge_priority(br
, args
[1]);
274 case BRCTL_SET_PORT_PRIORITY
:
276 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
279 spin_lock_bh(&br
->lock
);
280 if ((p
= br_get_port(br
, args
[1])) == NULL
)
283 ret
= br_stp_set_port_priority(p
, args
[2]);
284 spin_unlock_bh(&br
->lock
);
288 case BRCTL_SET_PATH_COST
:
290 if (!ns_capable(dev_net(dev
)->user_ns
, CAP_NET_ADMIN
))
293 spin_lock_bh(&br
->lock
);
294 if ((p
= br_get_port(br
, args
[1])) == NULL
)
297 ret
= br_stp_set_path_cost(p
, args
[2]);
298 spin_unlock_bh(&br
->lock
);
302 case BRCTL_GET_FDB_ENTRIES
:
303 return get_fdb_entries(br
, argp
, args
[2], args
[3]);
308 br_ifinfo_notify(RTM_NEWLINK
, NULL
, p
);
310 netdev_state_change(br
->dev
);
316 static int old_deviceless(struct net
*net
, void __user
*uarg
)
318 unsigned long args
[3];
320 if (copy_from_user(args
, uarg
, sizeof(args
)))
324 case BRCTL_GET_VERSION
:
325 return BRCTL_VERSION
;
327 case BRCTL_GET_BRIDGES
:
334 indices
= kcalloc(args
[2], sizeof(int), GFP_KERNEL
);
338 args
[2] = get_bridge_ifindices(net
, indices
, args
[2]);
340 ret
= copy_to_user((void __user
*)args
[1], indices
,
341 array_size(args
[2], sizeof(int)))
348 case BRCTL_ADD_BRIDGE
:
349 case BRCTL_DEL_BRIDGE
:
353 if (!ns_capable(net
->user_ns
, CAP_NET_ADMIN
))
356 if (copy_from_user(buf
, (void __user
*)args
[1], IFNAMSIZ
))
361 if (args
[0] == BRCTL_ADD_BRIDGE
)
362 return br_add_bridge(net
, buf
);
364 return br_del_bridge(net
, buf
);
371 int br_ioctl_stub(struct net
*net
, struct net_bridge
*br
, unsigned int cmd
,
372 struct ifreq
*ifr
, void __user
*uarg
)
374 int ret
= -EOPNOTSUPP
;
381 ret
= old_deviceless(net
, uarg
);
388 if (!ns_capable(net
->user_ns
, CAP_NET_ADMIN
)) {
393 if (copy_from_user(buf
, uarg
, IFNAMSIZ
)) {
399 if (cmd
== SIOCBRADDBR
)
400 ret
= br_add_bridge(net
, buf
);
402 ret
= br_del_bridge(net
, buf
);
407 ret
= add_del_if(br
, ifr
->ifr_ifindex
, cmd
== SIOCBRADDIF
);