Commit | Line | Data |
---|---|---|
2874c5fd | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
1da177e4 LT |
2 | /* |
3 | * Ioctl handler | |
4 | * Linux ethernet bridge | |
5 | * | |
6 | * Authors: | |
7 | * Lennert Buytenhek <buytenh@gnu.org> | |
1da177e4 LT |
8 | */ |
9 | ||
4fc268d2 | 10 | #include <linux/capability.h> |
1da177e4 LT |
11 | #include <linux/kernel.h> |
12 | #include <linux/if_bridge.h> | |
13 | #include <linux/netdevice.h> | |
5a0e3ad6 | 14 | #include <linux/slab.h> |
1da177e4 | 15 | #include <linux/times.h> |
881d966b | 16 | #include <net/net_namespace.h> |
7c0f6ba6 | 17 | #include <linux/uaccess.h> |
1da177e4 LT |
18 | #include "br_private.h" |
19 | ||
4aa678ba | 20 | static int get_bridge_ifindices(struct net *net, int *indices, int num) |
1da177e4 LT |
21 | { |
22 | struct net_device *dev; | |
23 | int i = 0; | |
24 | ||
31ca0458 NA |
25 | rcu_read_lock(); |
26 | for_each_netdev_rcu(net, dev) { | |
7562f876 PE |
27 | if (i >= num) |
28 | break; | |
9d6f229f | 29 | if (dev->priv_flags & IFF_EBRIDGE) |
1da177e4 LT |
30 | indices[i++] = dev->ifindex; |
31 | } | |
31ca0458 | 32 | rcu_read_unlock(); |
1da177e4 LT |
33 | |
34 | return i; | |
35 | } | |
36 | ||
37 | /* called with RTNL */ | |
38 | static void get_port_ifindices(struct net_bridge *br, int *ifindices, int num) | |
39 | { | |
40 | struct net_bridge_port *p; | |
41 | ||
42 | list_for_each_entry(p, &br->port_list, list) { | |
43 | if (p->port_no < num) | |
44 | ifindices[p->port_no] = p->dev->ifindex; | |
45 | } | |
46 | } | |
47 | ||
48 | /* | |
49 | * Format up to a page worth of forwarding table entries | |
50 | * userbuf -- where to copy result | |
51 | * maxnum -- maximum number of entries desired | |
52 | * (limited to a page for sanity) | |
53 | * offset -- number of records to skip | |
54 | */ | |
9d6f229f | 55 | static int get_fdb_entries(struct net_bridge *br, void __user *userbuf, |
1da177e4 LT |
56 | unsigned long maxnum, unsigned long offset) |
57 | { | |
58 | int num; | |
59 | void *buf; | |
ba8379b2 | 60 | size_t size; |
1da177e4 | 61 | |
ba8379b2 CW |
62 | /* Clamp size to PAGE_SIZE, test maxnum to avoid overflow */ |
63 | if (maxnum > PAGE_SIZE/sizeof(struct __fdb_entry)) | |
1da177e4 | 64 | maxnum = PAGE_SIZE/sizeof(struct __fdb_entry); |
ba8379b2 CW |
65 | |
66 | size = maxnum * sizeof(struct __fdb_entry); | |
1da177e4 LT |
67 | |
68 | buf = kmalloc(size, GFP_USER); | |
69 | if (!buf) | |
70 | return -ENOMEM; | |
9d6f229f | 71 | |
1da177e4 LT |
72 | num = br_fdb_fillbuf(br, buf, maxnum, offset); |
73 | if (num > 0) { | |
74 | if (copy_to_user(userbuf, buf, num*sizeof(struct __fdb_entry))) | |
75 | num = -EFAULT; | |
76 | } | |
77 | kfree(buf); | |
78 | ||
79 | return num; | |
80 | } | |
81 | ||
31ef30c7 | 82 | /* called with RTNL */ |
1da177e4 LT |
83 | static int add_del_if(struct net_bridge *br, int ifindex, int isadd) |
84 | { | |
cb990503 | 85 | struct net *net = dev_net(br->dev); |
1da177e4 LT |
86 | struct net_device *dev; |
87 | int ret; | |
88 | ||
cb990503 | 89 | if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
90 | return -EPERM; |
91 | ||
cb990503 | 92 | dev = __dev_get_by_index(net, ifindex); |
1da177e4 LT |
93 | if (dev == NULL) |
94 | return -EINVAL; | |
9d6f229f | 95 | |
1da177e4 | 96 | if (isadd) |
ca752be0 | 97 | ret = br_add_if(br, dev, NULL); |
eccaa9e5 | 98 | else |
1da177e4 LT |
99 | ret = br_del_if(br, dev); |
100 | ||
1da177e4 LT |
101 | return ret; |
102 | } | |
103 | ||
104 | /* | |
105 | * Legacy ioctl's through SIOCDEVPRIVATE | |
4bbd026c | 106 | * This interface is deprecated because it was too difficult |
25985edc | 107 | * to do the translation for 32/64bit ioctl compatibility. |
1da177e4 | 108 | */ |
561d8352 | 109 | int br_dev_siocdevprivate(struct net_device *dev, struct ifreq *rq, void __user *data, int cmd) |
1da177e4 LT |
110 | { |
111 | struct net_bridge *br = netdev_priv(dev); | |
bf871ad7 | 112 | struct net_bridge_port *p = NULL; |
1da177e4 | 113 | unsigned long args[4]; |
561d8352 | 114 | void __user *argp; |
bf871ad7 | 115 | int ret = -EOPNOTSUPP; |
9d6f229f | 116 | |
561d8352 AB |
117 | if (in_compat_syscall()) { |
118 | unsigned int cargs[4]; | |
119 | ||
120 | if (copy_from_user(cargs, data, sizeof(cargs))) | |
121 | return -EFAULT; | |
122 | ||
123 | args[0] = cargs[0]; | |
124 | args[1] = cargs[1]; | |
125 | args[2] = cargs[2]; | |
126 | args[3] = cargs[3]; | |
127 | ||
128 | argp = compat_ptr(args[1]); | |
129 | } else { | |
130 | if (copy_from_user(args, data, sizeof(args))) | |
131 | return -EFAULT; | |
132 | ||
133 | argp = (void __user *)args[1]; | |
134 | } | |
1da177e4 LT |
135 | |
136 | switch (args[0]) { | |
137 | case BRCTL_ADD_IF: | |
138 | case BRCTL_DEL_IF: | |
139 | return add_del_if(br, args[1], args[0] == BRCTL_ADD_IF); | |
140 | ||
141 | case BRCTL_GET_BRIDGE_INFO: | |
142 | { | |
143 | struct __bridge_info b; | |
144 | ||
145 | memset(&b, 0, sizeof(struct __bridge_info)); | |
146 | rcu_read_lock(); | |
147 | memcpy(&b.designated_root, &br->designated_root, 8); | |
148 | memcpy(&b.bridge_id, &br->bridge_id, 8); | |
149 | b.root_path_cost = br->root_path_cost; | |
150 | b.max_age = jiffies_to_clock_t(br->max_age); | |
151 | b.hello_time = jiffies_to_clock_t(br->hello_time); | |
152 | b.forward_delay = br->forward_delay; | |
153 | b.bridge_max_age = br->bridge_max_age; | |
154 | b.bridge_hello_time = br->bridge_hello_time; | |
155 | b.bridge_forward_delay = jiffies_to_clock_t(br->bridge_forward_delay); | |
156 | b.topology_change = br->topology_change; | |
157 | b.topology_change_detected = br->topology_change_detected; | |
158 | b.root_port = br->root_port; | |
9cde0708 SH |
159 | |
160 | b.stp_enabled = (br->stp_enabled != BR_NO_STP); | |
1da177e4 LT |
161 | b.ageing_time = jiffies_to_clock_t(br->ageing_time); |
162 | b.hello_timer_value = br_timer_value(&br->hello_timer); | |
163 | b.tcn_timer_value = br_timer_value(&br->tcn_timer); | |
164 | b.topology_change_timer_value = br_timer_value(&br->topology_change_timer); | |
f7cdee8a | 165 | b.gc_timer_value = br_timer_value(&br->gc_work.timer); |
9d6f229f | 166 | rcu_read_unlock(); |
1da177e4 LT |
167 | |
168 | if (copy_to_user((void __user *)args[1], &b, sizeof(b))) | |
169 | return -EFAULT; | |
170 | ||
171 | return 0; | |
172 | } | |
173 | ||
174 | case BRCTL_GET_PORT_LIST: | |
175 | { | |
176 | int num, *indices; | |
177 | ||
178 | num = args[2]; | |
179 | if (num < 0) | |
180 | return -EINVAL; | |
181 | if (num == 0) | |
182 | num = 256; | |
183 | if (num > BR_MAX_PORTS) | |
184 | num = BR_MAX_PORTS; | |
185 | ||
0da974f4 | 186 | indices = kcalloc(num, sizeof(int), GFP_KERNEL); |
1da177e4 LT |
187 | if (indices == NULL) |
188 | return -ENOMEM; | |
189 | ||
1da177e4 | 190 | get_port_ifindices(br, indices, num); |
561d8352 | 191 | if (copy_to_user(argp, indices, num * sizeof(int))) |
1da177e4 LT |
192 | num = -EFAULT; |
193 | kfree(indices); | |
194 | return num; | |
195 | } | |
196 | ||
197 | case BRCTL_SET_BRIDGE_FORWARD_DELAY: | |
cb990503 | 198 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
199 | return -EPERM; |
200 | ||
bf871ad7 XL |
201 | ret = br_set_forward_delay(br, args[1]); |
202 | break; | |
1da177e4 LT |
203 | |
204 | case BRCTL_SET_BRIDGE_HELLO_TIME: | |
cb990503 | 205 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
206 | return -EPERM; |
207 | ||
bf871ad7 XL |
208 | ret = br_set_hello_time(br, args[1]); |
209 | break; | |
1da177e4 LT |
210 | |
211 | case BRCTL_SET_BRIDGE_MAX_AGE: | |
cb990503 | 212 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
213 | return -EPERM; |
214 | ||
bf871ad7 XL |
215 | ret = br_set_max_age(br, args[1]); |
216 | break; | |
1da177e4 LT |
217 | |
218 | case BRCTL_SET_AGEING_TIME: | |
cb990503 | 219 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
220 | return -EPERM; |
221 | ||
bf871ad7 XL |
222 | ret = br_set_ageing_time(br, args[1]); |
223 | break; | |
1da177e4 LT |
224 | |
225 | case BRCTL_GET_PORT_INFO: | |
226 | { | |
227 | struct __port_info p; | |
228 | struct net_bridge_port *pt; | |
229 | ||
230 | rcu_read_lock(); | |
231 | if ((pt = br_get_port(br, args[2])) == NULL) { | |
232 | rcu_read_unlock(); | |
233 | return -EINVAL; | |
234 | } | |
235 | ||
236 | memset(&p, 0, sizeof(struct __port_info)); | |
237 | memcpy(&p.designated_root, &pt->designated_root, 8); | |
238 | memcpy(&p.designated_bridge, &pt->designated_bridge, 8); | |
239 | p.port_id = pt->port_id; | |
240 | p.designated_port = pt->designated_port; | |
241 | p.path_cost = pt->path_cost; | |
242 | p.designated_cost = pt->designated_cost; | |
243 | p.state = pt->state; | |
244 | p.top_change_ack = pt->topology_change_ack; | |
245 | p.config_pending = pt->config_pending; | |
246 | p.message_age_timer_value = br_timer_value(&pt->message_age_timer); | |
247 | p.forward_delay_timer_value = br_timer_value(&pt->forward_delay_timer); | |
248 | p.hold_timer_value = br_timer_value(&pt->hold_timer); | |
249 | ||
250 | rcu_read_unlock(); | |
251 | ||
561d8352 | 252 | if (copy_to_user(argp, &p, sizeof(p))) |
1da177e4 LT |
253 | return -EFAULT; |
254 | ||
255 | return 0; | |
256 | } | |
257 | ||
258 | case BRCTL_SET_BRIDGE_STP_STATE: | |
cb990503 | 259 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
260 | return -EPERM; |
261 | ||
419dba8a | 262 | ret = br_stp_set_enabled(br, args[1], NULL); |
bf871ad7 | 263 | break; |
1da177e4 LT |
264 | |
265 | case BRCTL_SET_BRIDGE_PRIORITY: | |
cb990503 | 266 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
267 | return -EPERM; |
268 | ||
1da177e4 | 269 | br_stp_set_bridge_priority(br, args[1]); |
bf871ad7 XL |
270 | ret = 0; |
271 | break; | |
1da177e4 LT |
272 | |
273 | case BRCTL_SET_PORT_PRIORITY: | |
274 | { | |
cb990503 | 275 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
276 | return -EPERM; |
277 | ||
1da177e4 | 278 | spin_lock_bh(&br->lock); |
9d6f229f | 279 | if ((p = br_get_port(br, args[1])) == NULL) |
1da177e4 LT |
280 | ret = -EINVAL; |
281 | else | |
14f98f25 | 282 | ret = br_stp_set_port_priority(p, args[2]); |
1da177e4 | 283 | spin_unlock_bh(&br->lock); |
bf871ad7 | 284 | break; |
1da177e4 LT |
285 | } |
286 | ||
287 | case BRCTL_SET_PATH_COST: | |
288 | { | |
cb990503 | 289 | if (!ns_capable(dev_net(dev)->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
290 | return -EPERM; |
291 | ||
14f98f25 | 292 | spin_lock_bh(&br->lock); |
1da177e4 LT |
293 | if ((p = br_get_port(br, args[1])) == NULL) |
294 | ret = -EINVAL; | |
295 | else | |
14f98f25 | 296 | ret = br_stp_set_path_cost(p, args[2]); |
297 | spin_unlock_bh(&br->lock); | |
bf871ad7 | 298 | break; |
1da177e4 LT |
299 | } |
300 | ||
301 | case BRCTL_GET_FDB_ENTRIES: | |
561d8352 | 302 | return get_fdb_entries(br, argp, args[2], args[3]); |
1da177e4 LT |
303 | } |
304 | ||
bf871ad7 XL |
305 | if (!ret) { |
306 | if (p) | |
92899063 | 307 | br_ifinfo_notify(RTM_NEWLINK, NULL, p); |
bf871ad7 XL |
308 | else |
309 | netdev_state_change(br->dev); | |
310 | } | |
311 | ||
312 | return ret; | |
1da177e4 LT |
313 | } |
314 | ||
4aa678ba | 315 | static int old_deviceless(struct net *net, void __user *uarg) |
1da177e4 LT |
316 | { |
317 | unsigned long args[3]; | |
318 | ||
319 | if (copy_from_user(args, uarg, sizeof(args))) | |
320 | return -EFAULT; | |
321 | ||
322 | switch (args[0]) { | |
323 | case BRCTL_GET_VERSION: | |
324 | return BRCTL_VERSION; | |
325 | ||
326 | case BRCTL_GET_BRIDGES: | |
327 | { | |
328 | int *indices; | |
329 | int ret = 0; | |
330 | ||
331 | if (args[2] >= 2048) | |
332 | return -ENOMEM; | |
0da974f4 | 333 | indices = kcalloc(args[2], sizeof(int), GFP_KERNEL); |
1da177e4 LT |
334 | if (indices == NULL) |
335 | return -ENOMEM; | |
336 | ||
4aa678ba | 337 | args[2] = get_bridge_ifindices(net, indices, args[2]); |
1da177e4 | 338 | |
561d8352 | 339 | ret = copy_to_user(uarg, indices, args[2]*sizeof(int)) |
1da177e4 LT |
340 | ? -EFAULT : args[2]; |
341 | ||
342 | kfree(indices); | |
343 | return ret; | |
344 | } | |
345 | ||
346 | case BRCTL_ADD_BRIDGE: | |
347 | case BRCTL_DEL_BRIDGE: | |
348 | { | |
349 | char buf[IFNAMSIZ]; | |
350 | ||
cb990503 | 351 | if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
352 | return -EPERM; |
353 | ||
561d8352 | 354 | if (copy_from_user(buf, uarg, IFNAMSIZ)) |
1da177e4 LT |
355 | return -EFAULT; |
356 | ||
357 | buf[IFNAMSIZ-1] = 0; | |
358 | ||
359 | if (args[0] == BRCTL_ADD_BRIDGE) | |
4aa678ba | 360 | return br_add_bridge(net, buf); |
1da177e4 | 361 | |
4aa678ba | 362 | return br_del_bridge(net, buf); |
1da177e4 LT |
363 | } |
364 | } | |
365 | ||
366 | return -EOPNOTSUPP; | |
367 | } | |
368 | ||
881d966b | 369 | int br_ioctl_deviceless_stub(struct net *net, unsigned int cmd, void __user *uarg) |
1da177e4 LT |
370 | { |
371 | switch (cmd) { | |
372 | case SIOCGIFBR: | |
373 | case SIOCSIFBR: | |
4aa678ba | 374 | return old_deviceless(net, uarg); |
9d6f229f | 375 | |
1da177e4 LT |
376 | case SIOCBRADDBR: |
377 | case SIOCBRDELBR: | |
378 | { | |
379 | char buf[IFNAMSIZ]; | |
380 | ||
cb990503 | 381 | if (!ns_capable(net->user_ns, CAP_NET_ADMIN)) |
1da177e4 LT |
382 | return -EPERM; |
383 | ||
384 | if (copy_from_user(buf, uarg, IFNAMSIZ)) | |
385 | return -EFAULT; | |
386 | ||
387 | buf[IFNAMSIZ-1] = 0; | |
388 | if (cmd == SIOCBRADDBR) | |
4aa678ba | 389 | return br_add_bridge(net, buf); |
1da177e4 | 390 | |
4aa678ba | 391 | return br_del_bridge(net, buf); |
1da177e4 LT |
392 | } |
393 | } | |
394 | return -EOPNOTSUPP; | |
395 | } | |
396 | ||
397 | int br_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd) | |
398 | { | |
399 | struct net_bridge *br = netdev_priv(dev); | |
400 | ||
31a5b837 | 401 | switch (cmd) { |
1da177e4 LT |
402 | case SIOCBRADDIF: |
403 | case SIOCBRDELIF: | |
404 | return add_del_if(br, rq->ifr_ifindex, cmd == SIOCBRADDIF); | |
405 | ||
406 | } | |
407 | ||
28a16c97 | 408 | br_debug(br, "Bridge does not support ioctl 0x%x\n", cmd); |
1da177e4 LT |
409 | return -EOPNOTSUPP; |
410 | } |