bridge: Properly check if local fdb entry can be deleted when deleting vlan
[linux-block.git] / net / bridge / br_fdb.c
CommitLineData
1da177e4
LT
1/*
2 * Forwarding database
3 * Linux ethernet bridge
4 *
5 * Authors:
6 * Lennert Buytenhek <buytenh@gnu.org>
7 *
1da177e4
LT
8 * This program is free software; you can redistribute it and/or
9 * modify it under the terms of the GNU General Public License
10 * as published by the Free Software Foundation; either version
11 * 2 of the License, or (at your option) any later version.
12 */
13
14#include <linux/kernel.h>
15#include <linux/init.h>
82524746 16#include <linux/rculist.h>
1da177e4
LT
17#include <linux/spinlock.h>
18#include <linux/times.h>
19#include <linux/netdevice.h>
20#include <linux/etherdevice.h>
21#include <linux/jhash.h>
3f890923 22#include <linux/random.h>
5a0e3ad6 23#include <linux/slab.h>
60063497 24#include <linux/atomic.h>
3f890923 25#include <asm/unaligned.h>
2ba071ec 26#include <linux/if_vlan.h>
1da177e4
LT
27#include "br_private.h"
28
e18b890b 29static struct kmem_cache *br_fdb_cache __read_mostly;
424bb9c9
TM
30static struct net_bridge_fdb_entry *fdb_find(struct hlist_head *head,
31 const unsigned char *addr,
32 __u16 vid);
1da177e4 33static int fdb_insert(struct net_bridge *br, struct net_bridge_port *source,
bc9a25d2 34 const unsigned char *addr, u16 vid);
31e8a49c 35static void fdb_notify(struct net_bridge *br,
36 const struct net_bridge_fdb_entry *, int);
1da177e4 37
3f890923
SH
38static u32 fdb_salt __read_mostly;
39
87a596e0 40int __init br_fdb_init(void)
1da177e4
LT
41{
42 br_fdb_cache = kmem_cache_create("bridge_fdb_cache",
43 sizeof(struct net_bridge_fdb_entry),
44 0,
20c2df83 45 SLAB_HWCACHE_ALIGN, NULL);
87a596e0
AM
46 if (!br_fdb_cache)
47 return -ENOMEM;
48
3f890923 49 get_random_bytes(&fdb_salt, sizeof(fdb_salt));
87a596e0 50 return 0;
1da177e4
LT
51}
52
73afc906 53void br_fdb_fini(void)
1da177e4
LT
54{
55 kmem_cache_destroy(br_fdb_cache);
56}
57
58
59/* if topology_changing then use forward_delay (default 15 sec)
60 * otherwise keep longer (default 5 minutes)
61 */
3f890923 62static inline unsigned long hold_time(const struct net_bridge *br)
1da177e4
LT
63{
64 return br->topology_change ? br->forward_delay : br->ageing_time;
65}
66
3f890923 67static inline int has_expired(const struct net_bridge *br,
1da177e4
LT
68 const struct net_bridge_fdb_entry *fdb)
69{
f64f9e71 70 return !fdb->is_static &&
7cd8861a 71 time_before_eq(fdb->updated + hold_time(br), jiffies);
1da177e4
LT
72}
73
2ba071ec 74static inline int br_mac_hash(const unsigned char *mac, __u16 vid)
1da177e4 75{
2ba071ec 76 /* use 1 byte of OUI and 3 bytes of NIC */
3f890923 77 u32 key = get_unaligned((u32 *)(mac + 2));
2ba071ec 78 return jhash_2words(key, vid, fdb_salt) & (BR_HASH_SIZE - 1);
1da177e4
LT
79}
80
da678292
MM
81static void fdb_rcu_free(struct rcu_head *head)
82{
83 struct net_bridge_fdb_entry *ent
84 = container_of(head, struct net_bridge_fdb_entry, rcu);
85 kmem_cache_free(br_fdb_cache, ent);
86}
87
31e8a49c 88static void fdb_delete(struct net_bridge *br, struct net_bridge_fdb_entry *f)
1da177e4
LT
89{
90 hlist_del_rcu(&f->hlist);
31e8a49c 91 fdb_notify(br, f, RTM_DELNEIGH);
da678292 92 call_rcu(&f->rcu, fdb_rcu_free);
1da177e4
LT
93}
94
960b589f
TM
95/* Delete a local entry if no other port had the same address. */
96static void fdb_delete_local(struct net_bridge *br,
97 const struct net_bridge_port *p,
98 struct net_bridge_fdb_entry *f)
99{
100 const unsigned char *addr = f->addr.addr;
101 u16 vid = f->vlan_id;
102 struct net_bridge_port *op;
103
104 /* Maybe another port has same hw addr? */
105 list_for_each_entry(op, &br->port_list, list) {
106 if (op != p && ether_addr_equal(op->dev->dev_addr, addr) &&
107 (!vid || nbp_vlan_find(op, vid))) {
108 f->dst = op;
a778e6d1 109 f->added_by_user = 0;
960b589f
TM
110 return;
111 }
112 }
113
114 /* Maybe bridge device has same hw addr? */
115 if (p && ether_addr_equal(br->dev->dev_addr, addr) &&
116 (!vid || br_vlan_find(br, vid))) {
117 f->dst = NULL;
a778e6d1 118 f->added_by_user = 0;
960b589f
TM
119 return;
120 }
121
122 fdb_delete(br, f);
123}
124
424bb9c9
TM
125void br_fdb_find_delete_local(struct net_bridge *br,
126 const struct net_bridge_port *p,
127 const unsigned char *addr, u16 vid)
128{
129 struct hlist_head *head = &br->hash[br_mac_hash(addr, vid)];
130 struct net_bridge_fdb_entry *f;
131
132 spin_lock_bh(&br->hash_lock);
133 f = fdb_find(head, addr, vid);
134 if (f && f->is_local && !f->added_by_user && f->dst == p)
135 fdb_delete_local(br, p, f);
136 spin_unlock_bh(&br->hash_lock);
137}
138
1da177e4
LT
139void br_fdb_changeaddr(struct net_bridge_port *p, const unsigned char *newaddr)
140{
141 struct net_bridge *br = p->br;
2836882f
TM
142 struct net_port_vlans *pv = nbp_get_vlan_info(p);
143 bool no_vlan = !pv;
1da177e4 144 int i;
2836882f 145 u16 vid;
9d6f229f 146
1da177e4
LT
147 spin_lock_bh(&br->hash_lock);
148
149 /* Search all chains since old address/hash is unknown */
150 for (i = 0; i < BR_HASH_SIZE; i++) {
151 struct hlist_node *h;
152 hlist_for_each(h, &br->hash[i]) {
153 struct net_bridge_fdb_entry *f;
154
155 f = hlist_entry(h, struct net_bridge_fdb_entry, hlist);
a5642ab4 156 if (f->dst == p && f->is_local && !f->added_by_user) {
1da177e4 157 /* delete old one */
960b589f
TM
158 fdb_delete_local(br, p, f);
159
bc9a25d2
VY
160 /* if this port has no vlan information
161 * configured, we can safely be done at
162 * this point.
163 */
164 if (no_vlan)
2836882f 165 goto insert;
1da177e4
LT
166 }
167 }
168 }
1da177e4 169
2836882f
TM
170insert:
171 /* insert new address, may fail if invalid address or dup. */
172 fdb_insert(br, p, newaddr, 0);
173
174 if (no_vlan)
175 goto done;
176
177 /* Now add entries for every VLAN configured on the port.
178 * This function runs under RTNL so the bitmap will not change
179 * from under us.
180 */
181 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
182 fdb_insert(br, p, newaddr, vid);
183
bc9a25d2 184done:
1da177e4
LT
185 spin_unlock_bh(&br->hash_lock);
186}
187
43598813 188void br_fdb_change_mac_address(struct net_bridge *br, const u8 *newaddr)
189{
190 struct net_bridge_fdb_entry *f;
bc9a25d2
VY
191 struct net_port_vlans *pv;
192 u16 vid = 0;
43598813 193
194 /* If old entry was unassociated with any port, then delete it. */
2ba071ec 195 f = __br_fdb_get(br, br->dev->dev_addr, 0);
43598813 196 if (f && f->is_local && !f->dst)
960b589f 197 fdb_delete_local(br, NULL, f);
43598813 198
bc9a25d2
VY
199 fdb_insert(br, NULL, newaddr, 0);
200
201 /* Now remove and add entries for every VLAN configured on the
202 * bridge. This function runs under RTNL so the bitmap will not
203 * change from under us.
204 */
205 pv = br_get_vlan_info(br);
206 if (!pv)
207 return;
208
ef40b7ef 209 for_each_set_bit_from(vid, pv->vlan_bitmap, VLAN_N_VID) {
bc9a25d2
VY
210 f = __br_fdb_get(br, br->dev->dev_addr, vid);
211 if (f && f->is_local && !f->dst)
960b589f 212 fdb_delete_local(br, NULL, f);
bc9a25d2
VY
213 fdb_insert(br, NULL, newaddr, vid);
214 }
43598813 215}
216
1da177e4
LT
217void br_fdb_cleanup(unsigned long _data)
218{
219 struct net_bridge *br = (struct net_bridge *)_data;
220 unsigned long delay = hold_time(br);
25442e06 221 unsigned long next_timer = jiffies + br->ageing_time;
1da177e4
LT
222 int i;
223
27a42938 224 spin_lock(&br->hash_lock);
1da177e4
LT
225 for (i = 0; i < BR_HASH_SIZE; i++) {
226 struct net_bridge_fdb_entry *f;
b67bfe0d 227 struct hlist_node *n;
1da177e4 228
b67bfe0d 229 hlist_for_each_entry_safe(f, n, &br->hash[i], hlist) {
071f7722
BE
230 unsigned long this_timer;
231 if (f->is_static)
232 continue;
7cd8861a 233 this_timer = f->updated + delay;
071f7722 234 if (time_before_eq(this_timer, jiffies))
31e8a49c 235 fdb_delete(br, f);
2bec008c 236 else if (time_before(this_timer, next_timer))
071f7722 237 next_timer = this_timer;
1da177e4
LT
238 }
239 }
27a42938 240 spin_unlock(&br->hash_lock);
1da177e4 241
25442e06 242 mod_timer(&br->gc_timer, round_jiffies_up(next_timer));
1da177e4
LT
243}
244
9cf63747
SH
245/* Completely flush all dynamic entries in forwarding database.*/
246void br_fdb_flush(struct net_bridge *br)
247{
248 int i;
249
250 spin_lock_bh(&br->hash_lock);
251 for (i = 0; i < BR_HASH_SIZE; i++) {
252 struct net_bridge_fdb_entry *f;
b67bfe0d
SL
253 struct hlist_node *n;
254 hlist_for_each_entry_safe(f, n, &br->hash[i], hlist) {
9cf63747 255 if (!f->is_static)
31e8a49c 256 fdb_delete(br, f);
9cf63747
SH
257 }
258 }
259 spin_unlock_bh(&br->hash_lock);
260}
1a620698 261
25985edc 262/* Flush all entries referring to a specific port.
9cf63747
SH
263 * if do_all is set also flush static entries
264 */
1a620698
SH
265void br_fdb_delete_by_port(struct net_bridge *br,
266 const struct net_bridge_port *p,
267 int do_all)
1da177e4
LT
268{
269 int i;
270
271 spin_lock_bh(&br->hash_lock);
272 for (i = 0; i < BR_HASH_SIZE; i++) {
273 struct hlist_node *h, *g;
9d6f229f 274
1da177e4
LT
275 hlist_for_each_safe(h, g, &br->hash[i]) {
276 struct net_bridge_fdb_entry *f
277 = hlist_entry(h, struct net_bridge_fdb_entry, hlist);
9d6f229f 278 if (f->dst != p)
1da177e4
LT
279 continue;
280
1a620698
SH
281 if (f->is_static && !do_all)
282 continue;
1da177e4 283
a778e6d1
TM
284 if (f->is_local)
285 fdb_delete_local(br, p, f);
286 else
287 fdb_delete(br, f);
1da177e4
LT
288 }
289 }
290 spin_unlock_bh(&br->hash_lock);
291}
292
eeaf61d8 293/* No locking or refcounting, assumes caller has rcu_read_lock */
1da177e4 294struct net_bridge_fdb_entry *__br_fdb_get(struct net_bridge *br,
2ba071ec
VY
295 const unsigned char *addr,
296 __u16 vid)
1da177e4 297{
1da177e4
LT
298 struct net_bridge_fdb_entry *fdb;
299
b67bfe0d 300 hlist_for_each_entry_rcu(fdb,
2ba071ec
VY
301 &br->hash[br_mac_hash(addr, vid)], hlist) {
302 if (ether_addr_equal(fdb->addr.addr, addr) &&
303 fdb->vlan_id == vid) {
1da177e4
LT
304 if (unlikely(has_expired(br, fdb)))
305 break;
306 return fdb;
307 }
308 }
309
310 return NULL;
311}
312
e6373c4c 313#if IS_ENABLED(CONFIG_ATM_LANE)
da678292
MM
314/* Interface used by ATM LANE hook to test
315 * if an addr is on some other bridge port */
316int br_fdb_test_addr(struct net_device *dev, unsigned char *addr)
1da177e4
LT
317{
318 struct net_bridge_fdb_entry *fdb;
b5ed54e9 319 struct net_bridge_port *port;
da678292
MM
320 int ret;
321
1da177e4 322 rcu_read_lock();
b5ed54e9 323 port = br_port_get_rcu(dev);
324 if (!port)
325 ret = 0;
326 else {
2ba071ec 327 fdb = __br_fdb_get(port->br, addr, 0);
43598813 328 ret = fdb && fdb->dst && fdb->dst->dev != dev &&
b5ed54e9 329 fdb->dst->state == BR_STATE_FORWARDING;
330 }
1da177e4 331 rcu_read_unlock();
1da177e4 332
da678292 333 return ret;
1da177e4 334}
da678292 335#endif /* CONFIG_ATM_LANE */
1da177e4
LT
336
337/*
9d6f229f 338 * Fill buffer with forwarding table records in
1da177e4
LT
339 * the API format.
340 */
341int br_fdb_fillbuf(struct net_bridge *br, void *buf,
342 unsigned long maxnum, unsigned long skip)
343{
344 struct __fdb_entry *fe = buf;
345 int i, num = 0;
1da177e4
LT
346 struct net_bridge_fdb_entry *f;
347
348 memset(buf, 0, maxnum*sizeof(struct __fdb_entry));
349
350 rcu_read_lock();
351 for (i = 0; i < BR_HASH_SIZE; i++) {
b67bfe0d 352 hlist_for_each_entry_rcu(f, &br->hash[i], hlist) {
1da177e4
LT
353 if (num >= maxnum)
354 goto out;
355
9d6f229f 356 if (has_expired(br, f))
1da177e4
LT
357 continue;
358
43598813 359 /* ignore pseudo entry for local MAC address */
360 if (!f->dst)
361 continue;
362
1da177e4
LT
363 if (skip) {
364 --skip;
365 continue;
366 }
367
368 /* convert from internal format to API */
369 memcpy(fe->mac_addr, f->addr.addr, ETH_ALEN);
ae4f8fca
SH
370
371 /* due to ABI compat need to split into hi/lo */
1da177e4 372 fe->port_no = f->dst->port_no;
ae4f8fca
SH
373 fe->port_hi = f->dst->port_no >> 8;
374
1da177e4
LT
375 fe->is_local = f->is_local;
376 if (!f->is_static)
a399a805 377 fe->ageing_timer_value = jiffies_delta_to_clock_t(jiffies - f->updated);
1da177e4
LT
378 ++fe;
379 ++num;
380 }
381 }
382
383 out:
384 rcu_read_unlock();
385
386 return num;
387}
388
664de48b 389static struct net_bridge_fdb_entry *fdb_find(struct hlist_head *head,
2ba071ec
VY
390 const unsigned char *addr,
391 __u16 vid)
664de48b 392{
664de48b 393 struct net_bridge_fdb_entry *fdb;
394
b67bfe0d 395 hlist_for_each_entry(fdb, head, hlist) {
2ba071ec
VY
396 if (ether_addr_equal(fdb->addr.addr, addr) &&
397 fdb->vlan_id == vid)
664de48b 398 return fdb;
399 }
400 return NULL;
401}
402
403static struct net_bridge_fdb_entry *fdb_find_rcu(struct hlist_head *head,
2ba071ec
VY
404 const unsigned char *addr,
405 __u16 vid)
1da177e4 406{
1da177e4
LT
407 struct net_bridge_fdb_entry *fdb;
408
b67bfe0d 409 hlist_for_each_entry_rcu(fdb, head, hlist) {
2ba071ec
VY
410 if (ether_addr_equal(fdb->addr.addr, addr) &&
411 fdb->vlan_id == vid)
1da177e4
LT
412 return fdb;
413 }
414 return NULL;
415}
416
417static struct net_bridge_fdb_entry *fdb_create(struct hlist_head *head,
418 struct net_bridge_port *source,
2ba071ec
VY
419 const unsigned char *addr,
420 __u16 vid)
1da177e4
LT
421{
422 struct net_bridge_fdb_entry *fdb;
423
424 fdb = kmem_cache_alloc(br_fdb_cache, GFP_ATOMIC);
425 if (fdb) {
426 memcpy(fdb->addr.addr, addr, ETH_ALEN);
1da177e4 427 fdb->dst = source;
2ba071ec 428 fdb->vlan_id = vid;
03e9b64b 429 fdb->is_local = 0;
430 fdb->is_static = 0;
a5642ab4 431 fdb->added_by_user = 0;
7cd8861a 432 fdb->updated = fdb->used = jiffies;
1158f762 433 hlist_add_head_rcu(&fdb->hlist, head);
1da177e4
LT
434 }
435 return fdb;
436}
437
438static int fdb_insert(struct net_bridge *br, struct net_bridge_port *source,
bc9a25d2 439 const unsigned char *addr, u16 vid)
1da177e4 440{
bc9a25d2 441 struct hlist_head *head = &br->hash[br_mac_hash(addr, vid)];
1da177e4
LT
442 struct net_bridge_fdb_entry *fdb;
443
444 if (!is_valid_ether_addr(addr))
445 return -EINVAL;
446
bc9a25d2 447 fdb = fdb_find(head, addr, vid);
1da177e4 448 if (fdb) {
9d6f229f 449 /* it is okay to have multiple ports with same
1da177e4
LT
450 * address, just use the first one.
451 */
9d6f229f 452 if (fdb->is_local)
1da177e4 453 return 0;
28a16c97 454 br_warn(br, "adding interface %s with same address "
1da177e4 455 "as a received packet\n",
9b46922e 456 source ? source->dev->name : br->dev->name);
31e8a49c 457 fdb_delete(br, fdb);
9d6f229f 458 }
1da177e4 459
bc9a25d2 460 fdb = fdb_create(head, source, addr, vid);
03e9b64b 461 if (!fdb)
1da177e4
LT
462 return -ENOMEM;
463
03e9b64b 464 fdb->is_local = fdb->is_static = 1;
31e8a49c 465 fdb_notify(br, fdb, RTM_NEWNEIGH);
1da177e4
LT
466 return 0;
467}
468
03e9b64b 469/* Add entry for local address of interface */
1da177e4 470int br_fdb_insert(struct net_bridge *br, struct net_bridge_port *source,
bc9a25d2 471 const unsigned char *addr, u16 vid)
1da177e4
LT
472{
473 int ret;
474
475 spin_lock_bh(&br->hash_lock);
bc9a25d2 476 ret = fdb_insert(br, source, addr, vid);
1da177e4
LT
477 spin_unlock_bh(&br->hash_lock);
478 return ret;
479}
480
481void br_fdb_update(struct net_bridge *br, struct net_bridge_port *source,
a5642ab4 482 const unsigned char *addr, u16 vid, bool added_by_user)
1da177e4 483{
2ba071ec 484 struct hlist_head *head = &br->hash[br_mac_hash(addr, vid)];
1da177e4
LT
485 struct net_bridge_fdb_entry *fdb;
486
487 /* some users want to always flood. */
488 if (hold_time(br) == 0)
489 return;
490
df1c0b84
SH
491 /* ignore packets unless we are using this port */
492 if (!(source->state == BR_STATE_LEARNING ||
493 source->state == BR_STATE_FORWARDING))
494 return;
495
2ba071ec 496 fdb = fdb_find_rcu(head, addr, vid);
1da177e4
LT
497 if (likely(fdb)) {
498 /* attempt to update an entry for a local interface */
499 if (unlikely(fdb->is_local)) {
9d6f229f 500 if (net_ratelimit())
28a16c97 501 br_warn(br, "received packet on %s with "
502 "own address as source address\n",
503 source->dev->name);
1da177e4
LT
504 } else {
505 /* fastpath: update of existing entry */
506 fdb->dst = source;
7cd8861a 507 fdb->updated = jiffies;
a5642ab4
TM
508 if (unlikely(added_by_user))
509 fdb->added_by_user = 1;
1da177e4
LT
510 }
511 } else {
f8ae737d 512 spin_lock(&br->hash_lock);
2ba071ec
VY
513 if (likely(!fdb_find(head, addr, vid))) {
514 fdb = fdb_create(head, source, addr, vid);
a5642ab4
TM
515 if (fdb) {
516 if (unlikely(added_by_user))
517 fdb->added_by_user = 1;
31e8a49c 518 fdb_notify(br, fdb, RTM_NEWNEIGH);
a5642ab4 519 }
f58ee4e1 520 }
1da177e4
LT
521 /* else we lose race and someone else inserts
522 * it first, don't bother updating
523 */
f8ae737d 524 spin_unlock(&br->hash_lock);
1da177e4 525 }
1da177e4 526}
b078f0df 527
528static int fdb_to_nud(const struct net_bridge_fdb_entry *fdb)
529{
530 if (fdb->is_local)
531 return NUD_PERMANENT;
532 else if (fdb->is_static)
533 return NUD_NOARP;
534 else if (has_expired(fdb->dst->br, fdb))
535 return NUD_STALE;
536 else
537 return NUD_REACHABLE;
538}
539
31e8a49c 540static int fdb_fill_info(struct sk_buff *skb, const struct net_bridge *br,
b078f0df 541 const struct net_bridge_fdb_entry *fdb,
15e47304 542 u32 portid, u32 seq, int type, unsigned int flags)
b078f0df 543{
544 unsigned long now = jiffies;
545 struct nda_cacheinfo ci;
546 struct nlmsghdr *nlh;
547 struct ndmsg *ndm;
548
15e47304 549 nlh = nlmsg_put(skb, portid, seq, type, sizeof(*ndm), flags);
b078f0df 550 if (nlh == NULL)
551 return -EMSGSIZE;
552
b078f0df 553 ndm = nlmsg_data(nlh);
554 ndm->ndm_family = AF_BRIDGE;
555 ndm->ndm_pad1 = 0;
556 ndm->ndm_pad2 = 0;
557 ndm->ndm_flags = 0;
558 ndm->ndm_type = 0;
43598813 559 ndm->ndm_ifindex = fdb->dst ? fdb->dst->dev->ifindex : br->dev->ifindex;
b078f0df 560 ndm->ndm_state = fdb_to_nud(fdb);
561
2eb812e6
DM
562 if (nla_put(skb, NDA_LLADDR, ETH_ALEN, &fdb->addr))
563 goto nla_put_failure;
b078f0df 564 ci.ndm_used = jiffies_to_clock_t(now - fdb->used);
565 ci.ndm_confirmed = 0;
566 ci.ndm_updated = jiffies_to_clock_t(now - fdb->updated);
567 ci.ndm_refcnt = 0;
2eb812e6
DM
568 if (nla_put(skb, NDA_CACHEINFO, sizeof(ci), &ci))
569 goto nla_put_failure;
1690be63
VY
570
571 if (nla_put(skb, NDA_VLAN, sizeof(u16), &fdb->vlan_id))
572 goto nla_put_failure;
573
b078f0df 574 return nlmsg_end(skb, nlh);
575
576nla_put_failure:
577 nlmsg_cancel(skb, nlh);
578 return -EMSGSIZE;
579}
580
581static inline size_t fdb_nlmsg_size(void)
582{
583 return NLMSG_ALIGN(sizeof(struct ndmsg))
584 + nla_total_size(ETH_ALEN) /* NDA_LLADDR */
1690be63 585 + nla_total_size(sizeof(u16)) /* NDA_VLAN */
b078f0df 586 + nla_total_size(sizeof(struct nda_cacheinfo));
587}
588
31e8a49c 589static void fdb_notify(struct net_bridge *br,
590 const struct net_bridge_fdb_entry *fdb, int type)
b078f0df 591{
31e8a49c 592 struct net *net = dev_net(br->dev);
b078f0df 593 struct sk_buff *skb;
594 int err = -ENOBUFS;
595
596 skb = nlmsg_new(fdb_nlmsg_size(), GFP_ATOMIC);
597 if (skb == NULL)
598 goto errout;
599
31e8a49c 600 err = fdb_fill_info(skb, br, fdb, 0, 0, type, 0);
b078f0df 601 if (err < 0) {
602 /* -EMSGSIZE implies BUG in fdb_nlmsg_size() */
603 WARN_ON(err == -EMSGSIZE);
604 kfree_skb(skb);
605 goto errout;
606 }
607 rtnl_notify(skb, net, 0, RTNLGRP_NEIGH, NULL, GFP_ATOMIC);
608 return;
609errout:
87e823b3 610 rtnl_set_sk_err(net, RTNLGRP_NEIGH, err);
b078f0df 611}
612
613/* Dump information about entries, in response to GETNEIGH */
77162022
JF
614int br_fdb_dump(struct sk_buff *skb,
615 struct netlink_callback *cb,
616 struct net_device *dev,
617 int idx)
b078f0df 618{
77162022
JF
619 struct net_bridge *br = netdev_priv(dev);
620 int i;
b078f0df 621
77162022
JF
622 if (!(dev->priv_flags & IFF_EBRIDGE))
623 goto out;
b078f0df 624
77162022 625 for (i = 0; i < BR_HASH_SIZE; i++) {
77162022 626 struct net_bridge_fdb_entry *f;
b078f0df 627
b67bfe0d 628 hlist_for_each_entry_rcu(f, &br->hash[i], hlist) {
77162022
JF
629 if (idx < cb->args[0])
630 goto skip;
631
632 if (fdb_fill_info(skb, br, f,
15e47304 633 NETLINK_CB(cb->skb).portid,
77162022
JF
634 cb->nlh->nlmsg_seq,
635 RTM_NEWNEIGH,
636 NLM_F_MULTI) < 0)
637 break;
b078f0df 638skip:
77162022 639 ++idx;
b078f0df 640 }
641 }
b078f0df 642
77162022
JF
643out:
644 return idx;
b078f0df 645}
36fd2b63 646
292d1398 647/* Update (create or replace) forwarding database entry */
36fd2b63 648static int fdb_add_entry(struct net_bridge_port *source, const __u8 *addr,
2ba071ec 649 __u16 state, __u16 flags, __u16 vid)
36fd2b63 650{
651 struct net_bridge *br = source->br;
2ba071ec 652 struct hlist_head *head = &br->hash[br_mac_hash(addr, vid)];
36fd2b63 653 struct net_bridge_fdb_entry *fdb;
b0a397fb 654 bool modified = false;
36fd2b63 655
2ba071ec 656 fdb = fdb_find(head, addr, vid);
64af1bac 657 if (fdb == NULL) {
658 if (!(flags & NLM_F_CREATE))
659 return -ENOENT;
36fd2b63 660
2ba071ec 661 fdb = fdb_create(head, source, addr, vid);
64af1bac 662 if (!fdb)
663 return -ENOMEM;
b0a397fb 664
665 modified = true;
64af1bac 666 } else {
667 if (flags & NLM_F_EXCL)
668 return -EEXIST;
b0a397fb 669
670 if (fdb->dst != source) {
671 fdb->dst = source;
672 modified = true;
673 }
292d1398 674 }
675
676 if (fdb_to_nud(fdb) != state) {
677 if (state & NUD_PERMANENT)
678 fdb->is_local = fdb->is_static = 1;
679 else if (state & NUD_NOARP) {
680 fdb->is_local = 0;
681 fdb->is_static = 1;
682 } else
683 fdb->is_local = fdb->is_static = 0;
64af1bac 684
b0a397fb 685 modified = true;
686 }
a5642ab4 687 fdb->added_by_user = 1;
b0a397fb 688
689 fdb->used = jiffies;
690 if (modified) {
691 fdb->updated = jiffies;
31e8a49c 692 fdb_notify(br, fdb, RTM_NEWNEIGH);
64af1bac 693 }
36fd2b63 694
36fd2b63 695 return 0;
696}
697
1690be63
VY
698static int __br_fdb_add(struct ndmsg *ndm, struct net_bridge_port *p,
699 const unsigned char *addr, u16 nlh_flags, u16 vid)
700{
701 int err = 0;
702
703 if (ndm->ndm_flags & NTF_USE) {
704 rcu_read_lock();
a5642ab4 705 br_fdb_update(p->br, p, addr, vid, true);
1690be63
VY
706 rcu_read_unlock();
707 } else {
708 spin_lock_bh(&p->br->hash_lock);
709 err = fdb_add_entry(p, addr, ndm->ndm_state,
710 nlh_flags, vid);
711 spin_unlock_bh(&p->br->hash_lock);
712 }
713
714 return err;
715}
716
36fd2b63 717/* Add new permanent fdb entry with RTM_NEWNEIGH */
edc7d573 718int br_fdb_add(struct ndmsg *ndm, struct nlattr *tb[],
719 struct net_device *dev,
6b6e2725 720 const unsigned char *addr, u16 nlh_flags)
36fd2b63 721{
36fd2b63 722 struct net_bridge_port *p;
77162022 723 int err = 0;
1690be63
VY
724 struct net_port_vlans *pv;
725 unsigned short vid = VLAN_N_VID;
36fd2b63 726
292d1398 727 if (!(ndm->ndm_state & (NUD_PERMANENT|NUD_NOARP|NUD_REACHABLE))) {
728 pr_info("bridge: RTM_NEWNEIGH with invalid state %#x\n", ndm->ndm_state);
729 return -EINVAL;
730 }
731
1690be63
VY
732 if (tb[NDA_VLAN]) {
733 if (nla_len(tb[NDA_VLAN]) != sizeof(unsigned short)) {
734 pr_info("bridge: RTM_NEWNEIGH with invalid vlan\n");
735 return -EINVAL;
736 }
737
738 vid = nla_get_u16(tb[NDA_VLAN]);
739
8adff41c 740 if (!vid || vid >= VLAN_VID_MASK) {
1690be63
VY
741 pr_info("bridge: RTM_NEWNEIGH with invalid vlan id %d\n",
742 vid);
743 return -EINVAL;
744 }
745 }
746
537f7f84
SH
747 if (is_zero_ether_addr(addr)) {
748 pr_info("bridge: RTM_NEWNEIGH with invalid ether address\n");
749 return -EINVAL;
750 }
751
36fd2b63 752 p = br_port_get_rtnl(dev);
753 if (p == NULL) {
754 pr_info("bridge: RTM_NEWNEIGH %s not a bridge port\n",
755 dev->name);
756 return -EINVAL;
757 }
758
1690be63
VY
759 pv = nbp_get_vlan_info(p);
760 if (vid != VLAN_N_VID) {
761 if (!pv || !test_bit(vid, pv->vlan_bitmap)) {
762 pr_info("bridge: RTM_NEWNEIGH with unconfigured "
763 "vlan %d on port %s\n", vid, dev->name);
764 return -EINVAL;
765 }
766
767 /* VID was specified, so use it. */
768 err = __br_fdb_add(ndm, p, addr, nlh_flags, vid);
292d1398 769 } else {
ef40b7ef 770 if (!pv || bitmap_empty(pv->vlan_bitmap, VLAN_N_VID)) {
1690be63
VY
771 err = __br_fdb_add(ndm, p, addr, nlh_flags, 0);
772 goto out;
773 }
774
775 /* We have vlans configured on this port and user didn't
776 * specify a VLAN. To be nice, add/update entry for every
777 * vlan on this port.
778 */
ef40b7ef 779 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
1690be63
VY
780 err = __br_fdb_add(ndm, p, addr, nlh_flags, vid);
781 if (err)
782 goto out;
1690be63 783 }
292d1398 784 }
36fd2b63 785
1690be63 786out:
36fd2b63 787 return err;
788}
789
424bb9c9 790static int fdb_delete_by_addr(struct net_bridge *br, const u8 *addr, u16 vlan)
36fd2b63 791{
1690be63 792 struct hlist_head *head = &br->hash[br_mac_hash(addr, vlan)];
36fd2b63 793 struct net_bridge_fdb_entry *fdb;
794
1690be63 795 fdb = fdb_find(head, addr, vlan);
36fd2b63 796 if (!fdb)
797 return -ENOENT;
798
1690be63 799 fdb_delete(br, fdb);
36fd2b63 800 return 0;
801}
802
1690be63
VY
803static int __br_fdb_delete(struct net_bridge_port *p,
804 const unsigned char *addr, u16 vid)
805{
806 int err;
807
808 spin_lock_bh(&p->br->hash_lock);
809 err = fdb_delete_by_addr(p->br, addr, vid);
810 spin_unlock_bh(&p->br->hash_lock);
811
812 return err;
813}
814
36fd2b63 815/* Remove neighbor entry with RTM_DELNEIGH */
1690be63
VY
816int br_fdb_delete(struct ndmsg *ndm, struct nlattr *tb[],
817 struct net_device *dev,
6b6e2725 818 const unsigned char *addr)
36fd2b63 819{
36fd2b63 820 struct net_bridge_port *p;
36fd2b63 821 int err;
1690be63
VY
822 struct net_port_vlans *pv;
823 unsigned short vid = VLAN_N_VID;
36fd2b63 824
1690be63
VY
825 if (tb[NDA_VLAN]) {
826 if (nla_len(tb[NDA_VLAN]) != sizeof(unsigned short)) {
827 pr_info("bridge: RTM_NEWNEIGH with invalid vlan\n");
828 return -EINVAL;
829 }
830
831 vid = nla_get_u16(tb[NDA_VLAN]);
832
8adff41c 833 if (!vid || vid >= VLAN_VID_MASK) {
1690be63
VY
834 pr_info("bridge: RTM_NEWNEIGH with invalid vlan id %d\n",
835 vid);
836 return -EINVAL;
837 }
838 }
36fd2b63 839 p = br_port_get_rtnl(dev);
840 if (p == NULL) {
841 pr_info("bridge: RTM_DELNEIGH %s not a bridge port\n",
842 dev->name);
843 return -EINVAL;
844 }
845
1690be63
VY
846 pv = nbp_get_vlan_info(p);
847 if (vid != VLAN_N_VID) {
848 if (!pv || !test_bit(vid, pv->vlan_bitmap)) {
849 pr_info("bridge: RTM_DELNEIGH with unconfigured "
850 "vlan %d on port %s\n", vid, dev->name);
851 return -EINVAL;
852 }
36fd2b63 853
1690be63
VY
854 err = __br_fdb_delete(p, addr, vid);
855 } else {
ef40b7ef 856 if (!pv || bitmap_empty(pv->vlan_bitmap, VLAN_N_VID)) {
1690be63
VY
857 err = __br_fdb_delete(p, addr, 0);
858 goto out;
859 }
860
861 /* We have vlans configured on this port and user didn't
862 * specify a VLAN. To be nice, add/update entry for every
863 * vlan on this port.
864 */
865 err = -ENOENT;
ef40b7ef 866 for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
1690be63 867 err &= __br_fdb_delete(p, addr, vid);
1690be63
VY
868 }
869 }
870out:
36fd2b63 871 return err;
872}