[linux-2.6-block.git] / net / bridge / br_vlan.c

#include <linux/kernel.h>
#include <linux/netdevice.h>
#include <linux/rtnetlink.h>
#include <linux/slab.h>

#include "br_private.h"

static void __vlan_add_pvid(struct net_port_vlans *v, u16 vid)
{
	if (v->pvid == vid)
		return;

	smp_wmb();
	v->pvid = vid;
}

static void __vlan_delete_pvid(struct net_port_vlans *v, u16 vid)
{
	if (v->pvid != vid)
		return;

	smp_wmb();
	v->pvid = 0;
}

static void __vlan_add_flags(struct net_port_vlans *v, u16 vid, u16 flags)
{
	if (flags & BRIDGE_VLAN_INFO_PVID)
		__vlan_add_pvid(v, vid);
	else
		__vlan_delete_pvid(v, vid);

	if (flags & BRIDGE_VLAN_INFO_UNTAGGED)
		set_bit(vid, v->untagged_bitmap);
	else
		clear_bit(vid, v->untagged_bitmap);
}

static int __vlan_add(struct net_port_vlans *v, u16 vid, u16 flags)
{
	struct net_bridge_port *p = NULL;
	struct net_bridge *br;
	struct net_device *dev;
	int err;

	if (test_bit(vid, v->vlan_bitmap)) {
		__vlan_add_flags(v, vid, flags);
		return 0;
	}

	if (v->port_idx) {
		p = v->parent.port;
		br = p->br;
		dev = p->dev;
	} else {
		br = v->parent.br;
		dev = br->dev;
	}

	if (p) {
		/* Add VLAN to the device filter if it is supported.
		 * This ensures tagged traffic enters the bridge when
		 * promiscuous mode is disabled by br_manage_promisc().
		 */
		err = vlan_vid_add(dev, br->vlan_proto, vid);
		if (err)
			return err;
	}

	err = br_fdb_insert(br, p, dev->dev_addr, vid);
	if (err) {
		br_err(br, "failed insert local address into bridge "
		       "forwarding table\n");
		goto out_filt;
	}

	set_bit(vid, v->vlan_bitmap);
	v->num_vlans++;
	__vlan_add_flags(v, vid, flags);

	return 0;

out_filt:
	if (p)
		vlan_vid_del(dev, br->vlan_proto, vid);
	return err;
}

static int __vlan_del(struct net_port_vlans *v, u16 vid)
{
	if (!test_bit(vid, v->vlan_bitmap))
		return -EINVAL;

	__vlan_delete_pvid(v, vid);
	clear_bit(vid, v->untagged_bitmap);

	if (v->port_idx) {
		struct net_bridge_port *p = v->parent.port;
		vlan_vid_del(p->dev, p->br->vlan_proto, vid);
	}

	clear_bit(vid, v->vlan_bitmap);
	v->num_vlans--;
	if (bitmap_empty(v->vlan_bitmap, VLAN_N_VID)) {
		if (v->port_idx)
			RCU_INIT_POINTER(v->parent.port->vlan_info, NULL);
		else
			RCU_INIT_POINTER(v->parent.br->vlan_info, NULL);
		kfree_rcu(v, rcu);
	}
	return 0;
}

static void __vlan_flush(struct net_port_vlans *v)
{
	smp_wmb();
	v->pvid = 0;
	bitmap_zero(v->vlan_bitmap, VLAN_N_VID);
	if (v->port_idx)
		RCU_INIT_POINTER(v->parent.port->vlan_info, NULL);
	else
		RCU_INIT_POINTER(v->parent.br->vlan_info, NULL);
	kfree_rcu(v, rcu);
}

struct sk_buff *br_handle_vlan(struct net_bridge *br,
			       const struct net_port_vlans *pv,
			       struct sk_buff *skb)
{
	u16 vid;

	/* If this packet was not filtered at input, let it pass */
	if (!BR_INPUT_SKB_CB(skb)->vlan_filtered)
		goto out;

	/* Vlan filter table must be configured at this point.  The
	 * only exception is the bridge is set in promisc mode and the
	 * packet is destined for the bridge device.  In this case
	 * pass the packet as is.
	 */
	if (!pv) {
		if ((br->dev->flags & IFF_PROMISC) && skb->dev == br->dev) {
			goto out;
		} else {
			kfree_skb(skb);
			return NULL;
		}
	}

	/* At this point, we know that the frame was filtered and contains
	 * a valid vlan id.  If the vlan id is set in the untagged bitmap,
	 * send untagged; otherwise, send tagged.
	 */
	br_vlan_get_tag(skb, &vid);
	if (test_bit(vid, pv->untagged_bitmap))
		skb->vlan_tci = 0;

out:
	return skb;
}

/* Called under RCU */
bool br_allowed_ingress(struct net_bridge *br, struct net_port_vlans *v,
			struct sk_buff *skb, u16 *vid)
{
	bool tagged;
	__be16 proto;

	/* If VLAN filtering is disabled on the bridge, all packets are
	 * permitted.
	 */
	if (!br->vlan_enabled) {
		BR_INPUT_SKB_CB(skb)->vlan_filtered = false;
		return true;
	}

	/* If there are no vlan in the permitted list, all packets are
	 * rejected.
	 */
	if (!v)
		goto drop;

	BR_INPUT_SKB_CB(skb)->vlan_filtered = true;
	proto = br->vlan_proto;

	/* If vlan tx offload is disabled on bridge device and frame was
	 * sent from vlan device on the bridge device, it does not have
	 * HW accelerated vlan tag.
	 */
	if (unlikely(!vlan_tx_tag_present(skb) &&
		     skb->protocol == proto)) {
		skb = skb_vlan_untag(skb);
		if (unlikely(!skb))
			return false;
	}

	if (!br_vlan_get_tag(skb, vid)) {
		/* Tagged frame */
		if (skb->vlan_proto != proto) {
			/* Protocol-mismatch, empty out vlan_tci for new tag */
			skb_push(skb, ETH_HLEN);
			skb = __vlan_put_tag(skb, skb->vlan_proto,
					     vlan_tx_tag_get(skb));
			if (unlikely(!skb))
				return false;

			skb_pull(skb, ETH_HLEN);
			skb_reset_mac_len(skb);
			*vid = 0;
			tagged = false;
		} else {
			tagged = true;
		}
	} else {
		/* Untagged frame */
		tagged = false;
	}

	if (!*vid) {
		u16 pvid = br_get_pvid(v);

		/* Frame had a tag with VID 0 or did not have a tag.
		 * See if pvid is set on this port.  That tells us which
		 * vlan untagged or priority-tagged traffic belongs to.
		 */
		if (pvid == VLAN_N_VID)
			goto drop;

		/* PVID is set on this port.  Any untagged or priority-tagged
		 * ingress frame is considered to belong to this vlan.
		 */
		*vid = pvid;
		if (likely(!tagged))
			/* Untagged Frame. */
			__vlan_hwaccel_put_tag(skb, proto, pvid);
		else
			/* Priority-tagged Frame.
			 * At this point, We know that skb->vlan_tci had
			 * VLAN_TAG_PRESENT bit and its VID field was 0x000.
			 * We update only VID field and preserve PCP field.
			 */
			skb->vlan_tci |= pvid;

		return true;
	}

	/* Frame had a valid vlan tag.  See if vlan is allowed */
	if (test_bit(*vid, v->vlan_bitmap))
		return true;
drop:
	kfree_skb(skb);
	return false;
}

/* Called under RCU. */
bool br_allowed_egress(struct net_bridge *br,
		       const struct net_port_vlans *v,
		       const struct sk_buff *skb)
{
	u16 vid;

	/* If this packet was not filtered at input, let it pass */
	if (!BR_INPUT_SKB_CB(skb)->vlan_filtered)
		return true;

	if (!v)
		return false;

	br_vlan_get_tag(skb, &vid);
	if (test_bit(vid, v->vlan_bitmap))
		return true;

	return false;
}

/* Called under RCU */
bool br_should_learn(struct net_bridge_port *p, struct sk_buff *skb, u16 *vid)
{
	struct net_bridge *br = p->br;
	struct net_port_vlans *v;

	/* If filtering was disabled at input, let it pass. */
	if (!br->vlan_enabled)
		return true;

	v = rcu_dereference(p->vlan_info);
	if (!v)
		return false;

	if (!br_vlan_get_tag(skb, vid) && skb->vlan_proto != br->vlan_proto)
		*vid = 0;

	if (!*vid) {
		*vid = br_get_pvid(v);
		if (*vid == VLAN_N_VID)
			return false;

		return true;
	}

	if (test_bit(*vid, v->vlan_bitmap))
		return true;

	return false;
}

/* Must be protected by RTNL.
 * Must be called with vid in range from 1 to 4094 inclusive.
 */
int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags)
{
	struct net_port_vlans *pv = NULL;
	int err;

	ASSERT_RTNL();

	pv = rtnl_dereference(br->vlan_info);
	if (pv)
		return __vlan_add(pv, vid, flags);

	/* Create port vlan infomration
	 */
	pv = kzalloc(sizeof(*pv), GFP_KERNEL);
	if (!pv)
		return -ENOMEM;

	pv->parent.br = br;
	err = __vlan_add(pv, vid, flags);
	if (err)
		goto out;

	rcu_assign_pointer(br->vlan_info, pv);
	return 0;
out:
	kfree(pv);
	return err;
}

/* Must be protected by RTNL.
 * Must be called with vid in range from 1 to 4094 inclusive.
 */
int br_vlan_delete(struct net_bridge *br, u16 vid)
{
	struct net_port_vlans *pv;

	ASSERT_RTNL();

	pv = rtnl_dereference(br->vlan_info);
	if (!pv)
		return -EINVAL;

	br_fdb_find_delete_local(br, NULL, br->dev->dev_addr, vid);

	__vlan_del(pv, vid);
	return 0;
}

void br_vlan_flush(struct net_bridge *br)
{
	struct net_port_vlans *pv;

	ASSERT_RTNL();
	pv = rtnl_dereference(br->vlan_info);
	if (!pv)
		return;

	__vlan_flush(pv);
}

bool br_vlan_find(struct net_bridge *br, u16 vid)
{
	struct net_port_vlans *pv;
	bool found = false;

	rcu_read_lock();
	pv = rcu_dereference(br->vlan_info);

	if (!pv)
		goto out;

	if (test_bit(vid, pv->vlan_bitmap))
		found = true;

out:
	rcu_read_unlock();
	return found;
}

/* Must be protected by RTNL. */
static void recalculate_group_addr(struct net_bridge *br)
{
	if (br->group_addr_set)
		return;

	spin_lock_bh(&br->lock);
	if (!br->vlan_enabled || br->vlan_proto == htons(ETH_P_8021Q)) {
		/* Bridge Group Address */
		br->group_addr[5] = 0x00;
	} else { /* vlan_enabled && ETH_P_8021AD */
		/* Provider Bridge Group Address */
		br->group_addr[5] = 0x08;
	}
	spin_unlock_bh(&br->lock);
}

/* Must be protected by RTNL. */
void br_recalculate_fwd_mask(struct net_bridge *br)
{
	if (!br->vlan_enabled || br->vlan_proto == htons(ETH_P_8021Q))
		br->group_fwd_mask_required = BR_GROUPFWD_DEFAULT;
	else /* vlan_enabled && ETH_P_8021AD */
		br->group_fwd_mask_required = BR_GROUPFWD_8021AD &
					      ~(1u << br->group_addr[5]);
}

int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val)
{
	if (!rtnl_trylock())
		return restart_syscall();

	if (br->vlan_enabled == val)
		goto unlock;

	br->vlan_enabled = val;
	br_manage_promisc(br);
	recalculate_group_addr(br);
	br_recalculate_fwd_mask(br);

unlock:
	rtnl_unlock();
	return 0;
}

int br_vlan_set_proto(struct net_bridge *br, unsigned long val)
{
	int err = 0;
	struct net_bridge_port *p;
	struct net_port_vlans *pv;
	__be16 proto, oldproto;
	u16 vid, errvid;

	if (val != ETH_P_8021Q && val != ETH_P_8021AD)
		return -EPROTONOSUPPORT;

	if (!rtnl_trylock())
		return restart_syscall();

	proto = htons(val);
	if (br->vlan_proto == proto)
		goto unlock;

	/* Add VLANs for the new proto to the device filter. */
	list_for_each_entry(p, &br->port_list, list) {
		pv = rtnl_dereference(p->vlan_info);
		if (!pv)
			continue;

		for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
			err = vlan_vid_add(p->dev, proto, vid);
			if (err)
				goto err_filt;
		}
	}

	oldproto = br->vlan_proto;
	br->vlan_proto = proto;

	recalculate_group_addr(br);
	br_recalculate_fwd_mask(br);

	/* Delete VLANs for the old proto from the device filter. */
	list_for_each_entry(p, &br->port_list, list) {
		pv = rtnl_dereference(p->vlan_info);
		if (!pv)
			continue;

		for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
			vlan_vid_del(p->dev, oldproto, vid);
	}

unlock:
	rtnl_unlock();
	return err;

err_filt:
	errvid = vid;
	for_each_set_bit(vid, pv->vlan_bitmap, errvid)
		vlan_vid_del(p->dev, proto, vid);

	list_for_each_entry_continue_reverse(p, &br->port_list, list) {
		pv = rtnl_dereference(p->vlan_info);
		if (!pv)
			continue;

		for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
			vlan_vid_del(p->dev, proto, vid);
	}

	goto unlock;
}

void br_vlan_init(struct net_bridge *br)
{
	br->vlan_proto = htons(ETH_P_8021Q);
}

/* Must be protected by RTNL.
 * Must be called with vid in range from 1 to 4094 inclusive.
 */
int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags)
{
	struct net_port_vlans *pv = NULL;
	int err;

	ASSERT_RTNL();

	pv = rtnl_dereference(port->vlan_info);
	if (pv)
		return __vlan_add(pv, vid, flags);

	/* Create port vlan infomration
	 */
	pv = kzalloc(sizeof(*pv), GFP_KERNEL);
	if (!pv) {
		err = -ENOMEM;
		goto clean_up;
	}

	pv->port_idx = port->port_no;
	pv->parent.port = port;
	err = __vlan_add(pv, vid, flags);
	if (err)
		goto clean_up;

	rcu_assign_pointer(port->vlan_info, pv);
	return 0;

clean_up:
	kfree(pv);
	return err;
}

/* Must be protected by RTNL.
 * Must be called with vid in range from 1 to 4094 inclusive.
 */
int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
{
	struct net_port_vlans *pv;

	ASSERT_RTNL();

	pv = rtnl_dereference(port->vlan_info);
	if (!pv)
		return -EINVAL;

	br_fdb_find_delete_local(port->br, port, port->dev->dev_addr, vid);

	return __vlan_del(pv, vid);
}

void nbp_vlan_flush(struct net_bridge_port *port)
{
	struct net_port_vlans *pv;
	u16 vid;

	ASSERT_RTNL();

	pv = rtnl_dereference(port->vlan_info);
	if (!pv)
		return;

	for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
		vlan_vid_del(port->dev, port->br->vlan_proto, vid);

	__vlan_flush(pv);
}

bool nbp_vlan_find(struct net_bridge_port *port, u16 vid)
{
	struct net_port_vlans *pv;
	bool found = false;

	rcu_read_lock();
	pv = rcu_dereference(port->vlan_info);

	if (!pv)
		goto out;

	if (test_bit(vid, pv->vlan_bitmap))
		found = true;

out:
	rcu_read_unlock();
	return found;
}
Commit	Line	Data
243a2e63 VY	1	#include <linux/kernel.h>
	2	#include <linux/netdevice.h>
	3	#include <linux/rtnetlink.h>
	4	#include <linux/slab.h>
	5
	6	#include "br_private.h"
	7
552406c4 VY	8	static void __vlan_add_pvid(struct net_port_vlans *v, u16 vid)
	9	{
	10	if (v->pvid == vid)
	11	return;
	12
	13	smp_wmb();
	14	v->pvid = vid;
	15	}
	16
	17	static void __vlan_delete_pvid(struct net_port_vlans *v, u16 vid)
	18	{
	19	if (v->pvid != vid)
	20	return;
	21
	22	smp_wmb();
	23	v->pvid = 0;
	24	}
	25
35e03f3a VY	26	static void __vlan_add_flags(struct net_port_vlans *v, u16 vid, u16 flags)
	27	{
	28	if (flags & BRIDGE_VLAN_INFO_PVID)
	29	__vlan_add_pvid(v, vid);
635126b7 VY	30	else
635126b7 VY	31	__vlan_delete_pvid(v, vid);
35e03f3a VY	32
	33	if (flags & BRIDGE_VLAN_INFO_UNTAGGED)
	34	set_bit(vid, v->untagged_bitmap);
635126b7 VY	35	else
635126b7 VY	36	clear_bit(vid, v->untagged_bitmap);
35e03f3a VY	37	}
35e03f3a VY	38
552406c4	39	static int __vlan_add(struct net_port_vlans *v, u16 vid, u16 flags)
243a2e63	40	{
bc9a25d2 VY	41	struct net_bridge_port *p = NULL;
	42	struct net_bridge *br;
	43	struct net_device *dev;
243a2e63 VY	44	int err;
243a2e63 VY	45
552406c4	46	if (test_bit(vid, v->vlan_bitmap)) {
35e03f3a	47	__vlan_add_flags(v, vid, flags);
552406c4 VY	48	return 0;
552406c4 VY	49	}
243a2e63	50
8adff41c TM	51	if (v->port_idx) {
	52	p = v->parent.port;
	53	br = p->br;
	54	dev = p->dev;
	55	} else {
	56	br = v->parent.br;
	57	dev = br->dev;
	58	}
8adff41c	59
19236837	60	if (p) {
8adff41c	61	/* Add VLAN to the device filter if it is supported.
fdb0a662 TM	62	* This ensures tagged traffic enters the bridge when
fdb0a662 TM	63	* promiscuous mode is disabled by br_manage_promisc().
8adff41c	64	*/
8580e211	65	err = vlan_vid_add(dev, br->vlan_proto, vid);
8adff41c TM	66	if (err)
	67	return err;
	68	}
bc9a25d2	69
8adff41c TM	70	err = br_fdb_insert(br, p, dev->dev_addr, vid);
	71	if (err) {
	72	br_err(br, "failed insert local address into bridge "
	73	"forwarding table\n");
	74	goto out_filt;
243a2e63 VY	75	}
	76
	77	set_bit(vid, v->vlan_bitmap);
6cbdceeb	78	v->num_vlans++;
35e03f3a	79	__vlan_add_flags(v, vid, flags);
552406c4	80
243a2e63	81	return 0;
bc9a25d2 VY	82
bc9a25d2 VY	83	out_filt:
19236837	84	if (p)
8580e211	85	vlan_vid_del(dev, br->vlan_proto, vid);
bc9a25d2	86	return err;
243a2e63 VY	87	}
	88
	89	static int __vlan_del(struct net_port_vlans *v, u16 vid)
	90	{
	91	if (!test_bit(vid, v->vlan_bitmap))
	92	return -EINVAL;
	93
552406c4	94	__vlan_delete_pvid(v, vid);
35e03f3a	95	clear_bit(vid, v->untagged_bitmap);
552406c4	96
8580e211 TM	97	if (v->port_idx) {
	98	struct net_bridge_port *p = v->parent.port;
	99	vlan_vid_del(p->dev, p->br->vlan_proto, vid);
	100	}
243a2e63 VY	101
243a2e63 VY	102	clear_bit(vid, v->vlan_bitmap);
6cbdceeb	103	v->num_vlans--;
ef40b7ef	104	if (bitmap_empty(v->vlan_bitmap, VLAN_N_VID)) {
243a2e63	105	if (v->port_idx)
cd18721e	106	RCU_INIT_POINTER(v->parent.port->vlan_info, NULL);
243a2e63	107	else
cd18721e	108	RCU_INIT_POINTER(v->parent.br->vlan_info, NULL);
243a2e63 VY	109	kfree_rcu(v, rcu);
	110	}
	111	return 0;
	112	}
	113
	114	static void __vlan_flush(struct net_port_vlans *v)
	115	{
552406c4 VY	116	smp_wmb();
552406c4 VY	117	v->pvid = 0;
ef40b7ef	118	bitmap_zero(v->vlan_bitmap, VLAN_N_VID);
243a2e63	119	if (v->port_idx)
cd18721e	120	RCU_INIT_POINTER(v->parent.port->vlan_info, NULL);
243a2e63	121	else
cd18721e	122	RCU_INIT_POINTER(v->parent.br->vlan_info, NULL);
243a2e63 VY	123	kfree_rcu(v, rcu);
	124	}
	125
78851988 VY	126	struct sk_buff br_handle_vlan(struct net_bridge br,
	127	const struct net_port_vlans *pv,
	128	struct sk_buff *skb)
a37b85c9 VY	129	{
	130	u16 vid;
	131
20adfa1a VY	132	/* If this packet was not filtered at input, let it pass */
20adfa1a VY	133	if (!BR_INPUT_SKB_CB(skb)->vlan_filtered)
78851988 VY	134	goto out;
78851988 VY	135
fc92f745 VY	136	/* Vlan filter table must be configured at this point. The
	137	* only exception is the bridge is set in promisc mode and the
	138	* packet is destined for the bridge device. In this case
	139	* pass the packet as is.
	140	*/
	141	if (!pv) {
	142	if ((br->dev->flags & IFF_PROMISC) && skb->dev == br->dev) {
	143	goto out;
	144	} else {
	145	kfree_skb(skb);
	146	return NULL;
	147	}
	148	}
	149
78851988	150	/* At this point, we know that the frame was filtered and contains
35e03f3a	151	* a valid vlan id. If the vlan id is set in the untagged bitmap,
1a81a2e0	152	* send untagged; otherwise, send tagged.
78851988 VY	153	*/
78851988 VY	154	br_vlan_get_tag(skb, &vid);
35e03f3a	155	if (test_bit(vid, pv->untagged_bitmap))
99b192da	156	skb->vlan_tci = 0;
78851988 VY	157
	158	out:
	159	return skb;
	160	}
	161
	162	/* Called under RCU */
	163	bool br_allowed_ingress(struct net_bridge br, struct net_port_vlans v,
	164	struct sk_buff skb, u16 vid)
	165	{
8580e211 TM	166	bool tagged;
8580e211 TM	167	__be16 proto;
b90356ce	168
a37b85c9 VY	169	/* If VLAN filtering is disabled on the bridge, all packets are
	170	* permitted.
	171	*/
20adfa1a VY	172	if (!br->vlan_enabled) {
20adfa1a VY	173	BR_INPUT_SKB_CB(skb)->vlan_filtered = false;
a37b85c9	174	return true;
20adfa1a	175	}
a37b85c9 VY	176
	177	/* If there are no vlan in the permitted list, all packets are
	178	* rejected.
	179	*/
	180	if (!v)
eb707618	181	goto drop;
a37b85c9	182
20adfa1a	183	BR_INPUT_SKB_CB(skb)->vlan_filtered = true;
8580e211 TM	184	proto = br->vlan_proto;
8580e211 TM	185
12464bb8 TM	186	/* If vlan tx offload is disabled on bridge device and frame was
	187	* sent from vlan device on the bridge device, it does not have
	188	* HW accelerated vlan tag.
	189	*/
	190	if (unlikely(!vlan_tx_tag_present(skb) &&
8580e211	191	skb->protocol == proto)) {
0d5501c1	192	skb = skb_vlan_untag(skb);
12464bb8 TM	193	if (unlikely(!skb))
	194	return false;
	195	}
	196
8580e211 TM	197	if (!br_vlan_get_tag(skb, vid)) {
	198	/* Tagged frame */
	199	if (skb->vlan_proto != proto) {
	200	/* Protocol-mismatch, empty out vlan_tci for new tag */
	201	skb_push(skb, ETH_HLEN);
	202	skb = __vlan_put_tag(skb, skb->vlan_proto,
	203	vlan_tx_tag_get(skb));
	204	if (unlikely(!skb))
	205	return false;
	206
	207	skb_pull(skb, ETH_HLEN);
	208	skb_reset_mac_len(skb);
	209	*vid = 0;
	210	tagged = false;
	211	} else {
	212	tagged = true;
	213	}
	214	} else {
	215	/* Untagged frame */
	216	tagged = false;
	217	}
	218
b90356ce	219	if (!*vid) {
78851988 VY	220	u16 pvid = br_get_pvid(v);
78851988 VY	221
b90356ce TM	222	/* Frame had a tag with VID 0 or did not have a tag.
	223	* See if pvid is set on this port. That tells us which
	224	* vlan untagged or priority-tagged traffic belongs to.
78851988 VY	225	*/
78851988 VY	226	if (pvid == VLAN_N_VID)
eb707618	227	goto drop;
78851988	228
b90356ce TM	229	/* PVID is set on this port. Any untagged or priority-tagged
b90356ce TM	230	* ingress frame is considered to belong to this vlan.
78851988	231	*/
dfb5fa32	232	*vid = pvid;
8580e211	233	if (likely(!tagged))
b90356ce	234	/* Untagged Frame. */
8580e211	235	__vlan_hwaccel_put_tag(skb, proto, pvid);
b90356ce TM	236	else
	237	/* Priority-tagged Frame.
	238	* At this point, We know that skb->vlan_tci had
	239	* VLAN_TAG_PRESENT bit and its VID field was 0x000.
	240	* We update only VID field and preserve PCP field.
	241	*/
	242	skb->vlan_tci \|= pvid;
	243
78851988 VY	244	return true;
	245	}
	246
	247	/* Frame had a valid vlan tag. See if vlan is allowed */
	248	if (test_bit(*vid, v->vlan_bitmap))
a37b85c9	249	return true;
eb707618 TM	250	drop:
eb707618 TM	251	kfree_skb(skb);
a37b85c9 VY	252	return false;
	253	}
	254
85f46c6b VY	255	/* Called under RCU. */
	256	bool br_allowed_egress(struct net_bridge *br,
	257	const struct net_port_vlans *v,
	258	const struct sk_buff *skb)
	259	{
	260	u16 vid;
	261
20adfa1a VY	262	/* If this packet was not filtered at input, let it pass */
20adfa1a VY	263	if (!BR_INPUT_SKB_CB(skb)->vlan_filtered)
85f46c6b VY	264	return true;
	265
	266	if (!v)
	267	return false;
	268
	269	br_vlan_get_tag(skb, &vid);
	270	if (test_bit(vid, v->vlan_bitmap))
	271	return true;
	272
	273	return false;
	274	}
	275
e0d7968a TM	276	/* Called under RCU */
	277	bool br_should_learn(struct net_bridge_port p, struct sk_buff skb, u16 *vid)
	278	{
	279	struct net_bridge *br = p->br;
	280	struct net_port_vlans *v;
	281
20adfa1a	282	/* If filtering was disabled at input, let it pass. */
c095f248	283	if (!br->vlan_enabled)
e0d7968a TM	284	return true;
	285
	286	v = rcu_dereference(p->vlan_info);
	287	if (!v)
	288	return false;
	289
8580e211 TM	290	if (!br_vlan_get_tag(skb, vid) && skb->vlan_proto != br->vlan_proto)
	291	*vid = 0;
	292
e0d7968a TM	293	if (!*vid) {
	294	*vid = br_get_pvid(v);
	295	if (*vid == VLAN_N_VID)
	296	return false;
	297
	298	return true;
	299	}
	300
	301	if (test_bit(*vid, v->vlan_bitmap))
	302	return true;
	303
	304	return false;
	305	}
	306
8adff41c TM	307	/* Must be protected by RTNL.
	308	* Must be called with vid in range from 1 to 4094 inclusive.
	309	*/
552406c4	310	int br_vlan_add(struct net_bridge *br, u16 vid, u16 flags)
243a2e63 VY	311	{
	312	struct net_port_vlans *pv = NULL;
	313	int err;
	314
	315	ASSERT_RTNL();
	316
	317	pv = rtnl_dereference(br->vlan_info);
	318	if (pv)
552406c4	319	return __vlan_add(pv, vid, flags);
243a2e63 VY	320
	321	/* Create port vlan infomration
	322	*/
	323	pv = kzalloc(sizeof(*pv), GFP_KERNEL);
	324	if (!pv)
	325	return -ENOMEM;
	326
	327	pv->parent.br = br;
552406c4	328	err = __vlan_add(pv, vid, flags);
243a2e63 VY	329	if (err)
	330	goto out;
	331
	332	rcu_assign_pointer(br->vlan_info, pv);
	333	return 0;
	334	out:
	335	kfree(pv);
	336	return err;
	337	}
	338
8adff41c TM	339	/* Must be protected by RTNL.
	340	* Must be called with vid in range from 1 to 4094 inclusive.
	341	*/
243a2e63 VY	342	int br_vlan_delete(struct net_bridge *br, u16 vid)
	343	{
	344	struct net_port_vlans *pv;
	345
	346	ASSERT_RTNL();
	347
	348	pv = rtnl_dereference(br->vlan_info);
	349	if (!pv)
	350	return -EINVAL;
	351
424bb9c9	352	br_fdb_find_delete_local(br, NULL, br->dev->dev_addr, vid);
bc9a25d2	353
243a2e63 VY	354	__vlan_del(pv, vid);
	355	return 0;
	356	}
	357
	358	void br_vlan_flush(struct net_bridge *br)
	359	{
	360	struct net_port_vlans *pv;
	361
	362	ASSERT_RTNL();
243a2e63 VY	363	pv = rtnl_dereference(br->vlan_info);
	364	if (!pv)
	365	return;
	366
	367	__vlan_flush(pv);
	368	}
	369
2b292fb4 TM	370	bool br_vlan_find(struct net_bridge *br, u16 vid)
	371	{
	372	struct net_port_vlans *pv;
	373	bool found = false;
	374
	375	rcu_read_lock();
	376	pv = rcu_dereference(br->vlan_info);
	377
	378	if (!pv)
	379	goto out;
	380
	381	if (test_bit(vid, pv->vlan_bitmap))
	382	found = true;
	383
	384	out:
	385	rcu_read_unlock();
	386	return found;
	387	}
	388
204177f3 TM	389	/* Must be protected by RTNL. */
	390	static void recalculate_group_addr(struct net_bridge *br)
	391	{
	392	if (br->group_addr_set)
	393	return;
	394
	395	spin_lock_bh(&br->lock);
	396	if (!br->vlan_enabled \|\| br->vlan_proto == htons(ETH_P_8021Q)) {
	397	/* Bridge Group Address */
	398	br->group_addr[5] = 0x00;
	399	} else { /* vlan_enabled && ETH_P_8021AD */
	400	/* Provider Bridge Group Address */
	401	br->group_addr[5] = 0x08;
	402	}
	403	spin_unlock_bh(&br->lock);
	404	}
	405
	406	/* Must be protected by RTNL. */
	407	void br_recalculate_fwd_mask(struct net_bridge *br)
	408	{
	409	if (!br->vlan_enabled \|\| br->vlan_proto == htons(ETH_P_8021Q))
	410	br->group_fwd_mask_required = BR_GROUPFWD_DEFAULT;
	411	else /* vlan_enabled && ETH_P_8021AD */
	412	br->group_fwd_mask_required = BR_GROUPFWD_8021AD &
	413	~(1u << br->group_addr[5]);
	414	}
	415
243a2e63 VY	416	int br_vlan_filter_toggle(struct net_bridge *br, unsigned long val)
	417	{
	418	if (!rtnl_trylock())
	419	return restart_syscall();
	420
	421	if (br->vlan_enabled == val)
	422	goto unlock;
	423
	424	br->vlan_enabled = val;
2796d0c6	425	br_manage_promisc(br);
204177f3 TM	426	recalculate_group_addr(br);
204177f3 TM	427	br_recalculate_fwd_mask(br);
243a2e63 VY	428
	429	unlock:
	430	rtnl_unlock();
	431	return 0;
	432	}
	433
204177f3 TM	434	int br_vlan_set_proto(struct net_bridge *br, unsigned long val)
	435	{
	436	int err = 0;
	437	struct net_bridge_port *p;
	438	struct net_port_vlans *pv;
	439	__be16 proto, oldproto;
	440	u16 vid, errvid;
	441
	442	if (val != ETH_P_8021Q && val != ETH_P_8021AD)
	443	return -EPROTONOSUPPORT;
	444
	445	if (!rtnl_trylock())
	446	return restart_syscall();
	447
	448	proto = htons(val);
	449	if (br->vlan_proto == proto)
	450	goto unlock;
	451
	452	/* Add VLANs for the new proto to the device filter. */
	453	list_for_each_entry(p, &br->port_list, list) {
	454	pv = rtnl_dereference(p->vlan_info);
	455	if (!pv)
	456	continue;
	457
	458	for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID) {
	459	err = vlan_vid_add(p->dev, proto, vid);
	460	if (err)
	461	goto err_filt;
	462	}
	463	}
	464
	465	oldproto = br->vlan_proto;
	466	br->vlan_proto = proto;
	467
	468	recalculate_group_addr(br);
	469	br_recalculate_fwd_mask(br);
	470
	471	/* Delete VLANs for the old proto from the device filter. */
	472	list_for_each_entry(p, &br->port_list, list) {
	473	pv = rtnl_dereference(p->vlan_info);
	474	if (!pv)
	475	continue;
	476
	477	for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
	478	vlan_vid_del(p->dev, oldproto, vid);
	479	}
	480
	481	unlock:
	482	rtnl_unlock();
	483	return err;
	484
	485	err_filt:
	486	errvid = vid;
	487	for_each_set_bit(vid, pv->vlan_bitmap, errvid)
	488	vlan_vid_del(p->dev, proto, vid);
	489
	490	list_for_each_entry_continue_reverse(p, &br->port_list, list) {
	491	pv = rtnl_dereference(p->vlan_info);
	492	if (!pv)
	493	continue;
	494
	495	for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
	496	vlan_vid_del(p->dev, proto, vid);
	497	}
498
499	goto unlock;
500	}
501
8580e211 TM	502	void br_vlan_init(struct net_bridge *br)
	503	{
	504	br->vlan_proto = htons(ETH_P_8021Q);
	505	}
	506
8adff41c TM	507	/* Must be protected by RTNL.
	508	* Must be called with vid in range from 1 to 4094 inclusive.
	509	*/
552406c4	510	int nbp_vlan_add(struct net_bridge_port *port, u16 vid, u16 flags)
243a2e63 VY	511	{
	512	struct net_port_vlans *pv = NULL;
	513	int err;
	514
	515	ASSERT_RTNL();
	516
	517	pv = rtnl_dereference(port->vlan_info);
	518	if (pv)
552406c4	519	return __vlan_add(pv, vid, flags);
243a2e63 VY	520
	521	/* Create port vlan infomration
	522	*/
	523	pv = kzalloc(sizeof(*pv), GFP_KERNEL);
	524	if (!pv) {
	525	err = -ENOMEM;
	526	goto clean_up;
	527	}
	528
	529	pv->port_idx = port->port_no;
	530	pv->parent.port = port;
552406c4	531	err = __vlan_add(pv, vid, flags);
243a2e63 VY	532	if (err)
	533	goto clean_up;
	534
	535	rcu_assign_pointer(port->vlan_info, pv);
	536	return 0;
	537
	538	clean_up:
	539	kfree(pv);
	540	return err;
	541	}
	542
8adff41c TM	543	/* Must be protected by RTNL.
	544	* Must be called with vid in range from 1 to 4094 inclusive.
	545	*/
243a2e63 VY	546	int nbp_vlan_delete(struct net_bridge_port *port, u16 vid)
	547	{
	548	struct net_port_vlans *pv;
	549
	550	ASSERT_RTNL();
	551
	552	pv = rtnl_dereference(port->vlan_info);
	553	if (!pv)
	554	return -EINVAL;
	555
424bb9c9	556	br_fdb_find_delete_local(port->br, port, port->dev->dev_addr, vid);
bc9a25d2	557
243a2e63 VY	558	return __vlan_del(pv, vid);
	559	}
	560
	561	void nbp_vlan_flush(struct net_bridge_port *port)
	562	{
	563	struct net_port_vlans *pv;
dbbaf949	564	u16 vid;
243a2e63 VY	565
	566	ASSERT_RTNL();
	567
	568	pv = rtnl_dereference(port->vlan_info);
	569	if (!pv)
	570	return;
	571
dbbaf949	572	for_each_set_bit(vid, pv->vlan_bitmap, VLAN_N_VID)
8580e211	573	vlan_vid_del(port->dev, port->br->vlan_proto, vid);
dbbaf949	574
243a2e63 VY	575	__vlan_flush(pv);
243a2e63 VY	576	}
bc9a25d2 VY	577
	578	bool nbp_vlan_find(struct net_bridge_port *port, u16 vid)
	579	{
	580	struct net_port_vlans *pv;
	581	bool found = false;
	582
	583	rcu_read_lock();
	584	pv = rcu_dereference(port->vlan_info);
	585
	586	if (!pv)
	587	goto out;
	588
	589	if (test_bit(vid, pv->vlan_bitmap))
	590	found = true;
	591
	592	out:
	593	rcu_read_unlock();
	594	return found;
	595	}