[linux-block.git] / net / bridge / br_vlan_options.c

// SPDX-License-Identifier: GPL-2.0-only
// Copyright (c) 2020, Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
#include <linux/kernel.h>
#include <linux/netdevice.h>
#include <linux/rtnetlink.h>
#include <linux/slab.h>
#include <net/ip_tunnels.h>

#include "br_private.h"
#include "br_private_tunnel.h"

static bool __vlan_tun_put(struct sk_buff *skb, const struct net_bridge_vlan *v)
{
	__be32 tid = tunnel_id_to_key32(v->tinfo.tunnel_id);
	struct nlattr *nest;

	if (!v->tinfo.tunnel_dst)
		return true;

	nest = nla_nest_start(skb, BRIDGE_VLANDB_ENTRY_TUNNEL_INFO);
	if (!nest)
		return false;
	if (nla_put_u32(skb, BRIDGE_VLANDB_TINFO_ID, be32_to_cpu(tid))) {
		nla_nest_cancel(skb, nest);
		return false;
	}
	nla_nest_end(skb, nest);

	return true;
}

static bool __vlan_tun_can_enter_range(const struct net_bridge_vlan *v_curr,
				       const struct net_bridge_vlan *range_end)
{
	return (!v_curr->tinfo.tunnel_dst && !range_end->tinfo.tunnel_dst) ||
	       vlan_tunid_inrange(v_curr, range_end);
}

/* check if the options' state of v_curr allow it to enter the range */
bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
			   const struct net_bridge_vlan *range_end)
{
	return v_curr->state == range_end->state &&
	       __vlan_tun_can_enter_range(v_curr, range_end);
}

bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v)
{
	return !nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_STATE,
			   br_vlan_get_state(v)) &&
	       __vlan_tun_put(skb, v);
}

size_t br_vlan_opts_nl_size(void)
{
	return nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_STATE */
	       + nla_total_size(0) /* BRIDGE_VLANDB_ENTRY_TUNNEL_INFO */
	       + nla_total_size(sizeof(u32)); /* BRIDGE_VLANDB_TINFO_ID */
}

static int br_vlan_modify_state(struct net_bridge_vlan_group *vg,
				struct net_bridge_vlan *v,
				u8 state,
				bool *changed,
				struct netlink_ext_ack *extack)
{
	struct net_bridge *br;

	ASSERT_RTNL();

	if (state > BR_STATE_BLOCKING) {
		NL_SET_ERR_MSG_MOD(extack, "Invalid vlan state");
		return -EINVAL;
	}

	if (br_vlan_is_brentry(v))
		br = v->br;
	else
		br = v->port->br;

	if (br->stp_enabled == BR_KERNEL_STP) {
		NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state when using kernel STP");
		return -EBUSY;
	}

	if (v->state == state)
		return 0;

	if (v->vid == br_get_pvid(vg))
		br_vlan_set_pvid_state(vg, state);

	br_vlan_set_state(v, state);
	*changed = true;

	return 0;
}

static const struct nla_policy br_vlandb_tinfo_pol[BRIDGE_VLANDB_TINFO_MAX + 1] = {
	[BRIDGE_VLANDB_TINFO_ID]	= { .type = NLA_U32 },
	[BRIDGE_VLANDB_TINFO_CMD]	= { .type = NLA_U32 },
};

static int br_vlan_modify_tunnel(const struct net_bridge_port *p,
				 struct net_bridge_vlan *v,
				 struct nlattr **tb,
				 bool *changed,
				 struct netlink_ext_ack *extack)
{
	struct nlattr *tun_tb[BRIDGE_VLANDB_TINFO_MAX + 1], *attr;
	struct bridge_vlan_info *vinfo;
	u32 tun_id = 0;
	int cmd, err;

	if (!p) {
		NL_SET_ERR_MSG_MOD(extack, "Can't modify tunnel mapping of non-port vlans");
		return -EINVAL;
	}
	if (!(p->flags & BR_VLAN_TUNNEL)) {
		NL_SET_ERR_MSG_MOD(extack, "Port doesn't have tunnel flag set");
		return -EINVAL;
	}

	attr = tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO];
	err = nla_parse_nested(tun_tb, BRIDGE_VLANDB_TINFO_MAX, attr,
			       br_vlandb_tinfo_pol, extack);
	if (err)
		return err;

	if (!tun_tb[BRIDGE_VLANDB_TINFO_CMD]) {
		NL_SET_ERR_MSG_MOD(extack, "Missing tunnel command attribute");
		return -ENOENT;
	}
	cmd = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_CMD]);
	switch (cmd) {
	case RTM_SETLINK:
		if (!tun_tb[BRIDGE_VLANDB_TINFO_ID]) {
			NL_SET_ERR_MSG_MOD(extack, "Missing tunnel id attribute");
			return -ENOENT;
		}
		/* when working on vlan ranges this is the starting tunnel id */
		tun_id = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_ID]);
		/* vlan info attr is guaranteed by br_vlan_rtm_process_one */
		vinfo = nla_data(tb[BRIDGE_VLANDB_ENTRY_INFO]);
		/* tunnel ids are mapped to each vlan in increasing order,
		 * the starting vlan is in BRIDGE_VLANDB_ENTRY_INFO and v is the
		 * current vlan, so we compute: tun_id + v - vinfo->vid
		 */
		tun_id += v->vid - vinfo->vid;
		break;
	case RTM_DELLINK:
		break;
	default:
		NL_SET_ERR_MSG_MOD(extack, "Unsupported tunnel command");
		return -EINVAL;
	}

	return br_vlan_tunnel_info(p, cmd, v->vid, tun_id, changed);
}

static int br_vlan_process_one_opts(const struct net_bridge *br,
				    const struct net_bridge_port *p,
				    struct net_bridge_vlan_group *vg,
				    struct net_bridge_vlan *v,
				    struct nlattr **tb,
				    bool *changed,
				    struct netlink_ext_ack *extack)
{
	int err;

	*changed = false;
	if (tb[BRIDGE_VLANDB_ENTRY_STATE]) {
		u8 state = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_STATE]);

		err = br_vlan_modify_state(vg, v, state, changed, extack);
		if (err)
			return err;
	}
	if (tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO]) {
		err = br_vlan_modify_tunnel(p, v, tb, changed, extack);
		if (err)
			return err;
	}

	return 0;
}

int br_vlan_process_options(const struct net_bridge *br,
			    const struct net_bridge_port *p,
			    struct net_bridge_vlan *range_start,
			    struct net_bridge_vlan *range_end,
			    struct nlattr **tb,
			    struct netlink_ext_ack *extack)
{
	struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL;
	struct net_bridge_vlan_group *vg;
	int vid, err = 0;
	u16 pvid;

	if (p)
		vg = nbp_vlan_group(p);
	else
		vg = br_vlan_group(br);

	if (!range_start || !br_vlan_should_use(range_start)) {
		NL_SET_ERR_MSG_MOD(extack, "Vlan range start doesn't exist, can't process options");
		return -ENOENT;
	}
	if (!range_end || !br_vlan_should_use(range_end)) {
		NL_SET_ERR_MSG_MOD(extack, "Vlan range end doesn't exist, can't process options");
		return -ENOENT;
	}

	pvid = br_get_pvid(vg);
	for (vid = range_start->vid; vid <= range_end->vid; vid++) {
		bool changed = false;

		v = br_vlan_find(vg, vid);
		if (!v || !br_vlan_should_use(v)) {
			NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process options");
			err = -ENOENT;
			break;
		}

		err = br_vlan_process_one_opts(br, p, vg, v, tb, &changed,
					       extack);
		if (err)
			break;

		if (changed) {
			/* vlan options changed, check for range */
			if (!curr_start) {
				curr_start = v;
				curr_end = v;
				continue;
			}

			if (v->vid == pvid ||
			    !br_vlan_can_enter_range(v, curr_end)) {
				br_vlan_notify(br, p, curr_start->vid,
					       curr_end->vid, RTM_NEWVLAN);
				curr_start = v;
			}
			curr_end = v;
		} else {
			/* nothing changed and nothing to notify yet */
			if (!curr_start)
				continue;

			br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
				       RTM_NEWVLAN);
			curr_start = NULL;
			curr_end = NULL;
		}
	}
	if (curr_start)
		br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
			       RTM_NEWVLAN);

	return err;
}

bool br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan *v_curr,
					 const struct net_bridge_vlan *r_end)
{
	return v_curr->vid - r_end->vid == 1 &&
	       ((v_curr->priv_flags ^ r_end->priv_flags) &
		BR_VLFLAG_GLOBAL_MCAST_ENABLED) == 0 &&
		br_multicast_ctx_options_equal(&v_curr->br_mcast_ctx,
					       &r_end->br_mcast_ctx);
}

bool br_vlan_global_opts_fill(struct sk_buff *skb, u16 vid, u16 vid_range,
			      const struct net_bridge_vlan *v_opts)
{
	u64 clockval __maybe_unused;
	struct nlattr *nest;

	nest = nla_nest_start(skb, BRIDGE_VLANDB_GLOBAL_OPTIONS);
	if (!nest)
		return false;

	if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_ID, vid))
		goto out_err;

	if (vid_range && vid < vid_range &&
	    nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_RANGE, vid_range))
		goto out_err;

#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
	if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING,
		       !!(v_opts->priv_flags & BR_VLFLAG_GLOBAL_MCAST_ENABLED)) ||
	    nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION,
		       v_opts->br_mcast_ctx.multicast_igmp_version) ||
	    nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT,
			v_opts->br_mcast_ctx.multicast_last_member_count) ||
	    nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT,
			v_opts->br_mcast_ctx.multicast_startup_query_count))
		goto out_err;

	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_last_member_interval);
	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL,
			      clockval, BRIDGE_VLANDB_GOPTS_PAD))
		goto out_err;
	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_membership_interval);
	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL,
			      clockval, BRIDGE_VLANDB_GOPTS_PAD))
		goto out_err;
	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_querier_interval);
	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL,
			      clockval, BRIDGE_VLANDB_GOPTS_PAD))
		goto out_err;
	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_interval);
	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL,
			      clockval, BRIDGE_VLANDB_GOPTS_PAD))
		goto out_err;

#if IS_ENABLED(CONFIG_IPV6)
	if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION,
		       v_opts->br_mcast_ctx.multicast_mld_version))
		goto out_err;
#endif
#endif

	nla_nest_end(skb, nest);

	return true;

out_err:
	nla_nest_cancel(skb, nest);
	return false;
}

static size_t rtnl_vlan_global_opts_nlmsg_size(void)
{
	return NLMSG_ALIGN(sizeof(struct br_vlan_msg))
		+ nla_total_size(0) /* BRIDGE_VLANDB_GLOBAL_OPTIONS */
		+ nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_ID */
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
		+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING */
		+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION */
		+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION */
		+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT */
		+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT */
		+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL */
		+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL */
		+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL */
		+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL */
#endif
		+ nla_total_size(sizeof(u16)); /* BRIDGE_VLANDB_GOPTS_RANGE */
}

static void br_vlan_global_opts_notify(const struct net_bridge *br,
				       u16 vid, u16 vid_range)
{
	struct net_bridge_vlan *v;
	struct br_vlan_msg *bvm;
	struct nlmsghdr *nlh;
	struct sk_buff *skb;
	int err = -ENOBUFS;

	/* right now notifications are done only with rtnl held */
	ASSERT_RTNL();

	skb = nlmsg_new(rtnl_vlan_global_opts_nlmsg_size(), GFP_KERNEL);
	if (!skb)
		goto out_err;

	err = -EMSGSIZE;
	nlh = nlmsg_put(skb, 0, 0, RTM_NEWVLAN, sizeof(*bvm), 0);
	if (!nlh)
		goto out_err;
	bvm = nlmsg_data(nlh);
	memset(bvm, 0, sizeof(*bvm));
	bvm->family = AF_BRIDGE;
	bvm->ifindex = br->dev->ifindex;

	/* need to find the vlan due to flags/options */
	v = br_vlan_find(br_vlan_group(br), vid);
	if (!v)
		goto out_kfree;

	if (!br_vlan_global_opts_fill(skb, vid, vid_range, v))
		goto out_err;

	nlmsg_end(skb, nlh);
	rtnl_notify(skb, dev_net(br->dev), 0, RTNLGRP_BRVLAN, NULL, GFP_KERNEL);
	return;

out_err:
	rtnl_set_sk_err(dev_net(br->dev), RTNLGRP_BRVLAN, err);
out_kfree:
	kfree_skb(skb);
}

static int br_vlan_process_global_one_opts(const struct net_bridge *br,
					   struct net_bridge_vlan_group *vg,
					   struct net_bridge_vlan *v,
					   struct nlattr **tb,
					   bool *changed,
					   struct netlink_ext_ack *extack)
{
	int err __maybe_unused;

	*changed = false;
#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]) {
		u8 mc_snooping;

		mc_snooping = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]);
		if (br_multicast_toggle_global_vlan(v, !!mc_snooping))
			*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]) {
		u8 ver;

		ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]);
		err = br_multicast_set_igmp_version(&v->br_mcast_ctx, ver);
		if (err)
			return err;
		*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]) {
		u32 cnt;

		cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]);
		v->br_mcast_ctx.multicast_last_member_count = cnt;
		*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]) {
		u32 cnt;

		cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]);
		v->br_mcast_ctx.multicast_startup_query_count = cnt;
		*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]) {
		u64 val;

		val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]);
		v->br_mcast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
		*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]) {
		u64 val;

		val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]);
		v->br_mcast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
		*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]) {
		u64 val;

		val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]);
		v->br_mcast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
		*changed = true;
	}
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]) {
		u64 val;

		val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]);
		v->br_mcast_ctx.multicast_query_interval = clock_t_to_jiffies(val);
		*changed = true;
	}
#if IS_ENABLED(CONFIG_IPV6)
	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]) {
		u8 ver;

		ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]);
		err = br_multicast_set_mld_version(&v->br_mcast_ctx, ver);
		if (err)
			return err;
		*changed = true;
	}
#endif
#endif

	return 0;
}

static const struct nla_policy br_vlan_db_gpol[BRIDGE_VLANDB_GOPTS_MAX + 1] = {
	[BRIDGE_VLANDB_GOPTS_ID]	= { .type = NLA_U16 },
	[BRIDGE_VLANDB_GOPTS_RANGE]	= { .type = NLA_U16 },
	[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]	= { .type = NLA_U8 },
	[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]	= { .type = NLA_U8 },
	[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]	= { .type = NLA_U64 },
	[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]	= { .type = NLA_U8 },
	[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]	= { .type = NLA_U32 },
	[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]	= { .type = NLA_U32 },
	[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]	= { .type = NLA_U64 },
	[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]	= { .type = NLA_U64 },
	[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]	= { .type = NLA_U64 },
};

int br_vlan_rtm_process_global_options(struct net_device *dev,
				       const struct nlattr *attr,
				       int cmd,
				       struct netlink_ext_ack *extack)
{
	struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL;
	struct nlattr *tb[BRIDGE_VLANDB_GOPTS_MAX + 1];
	struct net_bridge_vlan_group *vg;
	u16 vid, vid_range = 0;
	struct net_bridge *br;
	int err = 0;

	if (cmd != RTM_NEWVLAN) {
		NL_SET_ERR_MSG_MOD(extack, "Global vlan options support only set operation");
		return -EINVAL;
	}
	if (!netif_is_bridge_master(dev)) {
		NL_SET_ERR_MSG_MOD(extack, "Global vlan options can only be set on bridge device");
		return -EINVAL;
	}
	br = netdev_priv(dev);
	vg = br_vlan_group(br);
	if (WARN_ON(!vg))
		return -ENODEV;

	err = nla_parse_nested(tb, BRIDGE_VLANDB_GOPTS_MAX, attr,
			       br_vlan_db_gpol, extack);
	if (err)
		return err;

	if (!tb[BRIDGE_VLANDB_GOPTS_ID]) {
		NL_SET_ERR_MSG_MOD(extack, "Missing vlan entry id");
		return -EINVAL;
	}
	vid = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_ID]);
	if (!br_vlan_valid_id(vid, extack))
		return -EINVAL;

	if (tb[BRIDGE_VLANDB_GOPTS_RANGE]) {
		vid_range = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_RANGE]);
		if (!br_vlan_valid_id(vid_range, extack))
			return -EINVAL;
		if (vid >= vid_range) {
			NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
			return -EINVAL;
		}
	} else {
		vid_range = vid;
	}

	for (; vid <= vid_range; vid++) {
		bool changed = false;

		v = br_vlan_find(vg, vid);
		if (!v) {
			NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process global options");
			err = -ENOENT;
			break;
		}

		err = br_vlan_process_global_one_opts(br, vg, v, tb, &changed,
						      extack);
		if (err)
			break;

		if (changed) {
			/* vlan options changed, check for range */
			if (!curr_start) {
				curr_start = v;
				curr_end = v;
				continue;
			}

			if (!br_vlan_global_opts_can_enter_range(v, curr_end)) {
				br_vlan_global_opts_notify(br, curr_start->vid,
							   curr_end->vid);
				curr_start = v;
			}
			curr_end = v;
		} else {
			/* nothing changed and nothing to notify yet */
			if (!curr_start)
				continue;

			br_vlan_global_opts_notify(br, curr_start->vid,
						   curr_end->vid);
			curr_start = NULL;
			curr_end = NULL;
		}
	}
	if (curr_start)
		br_vlan_global_opts_notify(br, curr_start->vid, curr_end->vid);

	return err;
}
Commit	Line	Data
7a53e718 NA	1	// SPDX-License-Identifier: GPL-2.0-only
	2	// Copyright (c) 2020, Nikolay Aleksandrov <nikolay@cumulusnetworks.com>
	3	#include <linux/kernel.h>
	4	#include <linux/netdevice.h>
	5	#include <linux/rtnetlink.h>
	6	#include <linux/slab.h>
188c67dd	7	#include <net/ip_tunnels.h>
7a53e718 NA	8
7a53e718 NA	9	#include "br_private.h"
188c67dd NA	10	#include "br_private_tunnel.h"
	11
	12	static bool __vlan_tun_put(struct sk_buff skb, const struct net_bridge_vlan v)
	13	{
	14	__be32 tid = tunnel_id_to_key32(v->tinfo.tunnel_id);
fa388f29	15	struct nlattr *nest;
188c67dd NA	16
	17	if (!v->tinfo.tunnel_dst)
	18	return true;
	19
fa388f29 NA	20	nest = nla_nest_start(skb, BRIDGE_VLANDB_ENTRY_TUNNEL_INFO);
	21	if (!nest)
	22	return false;
	23	if (nla_put_u32(skb, BRIDGE_VLANDB_TINFO_ID, be32_to_cpu(tid))) {
	24	nla_nest_cancel(skb, nest);
	25	return false;
	26	}
	27	nla_nest_end(skb, nest);
	28
	29	return true;
188c67dd NA	30	}
	31
	32	static bool __vlan_tun_can_enter_range(const struct net_bridge_vlan *v_curr,
	33	const struct net_bridge_vlan *range_end)
	34	{
	35	return (!v_curr->tinfo.tunnel_dst && !range_end->tinfo.tunnel_dst) \|\|
	36	vlan_tunid_inrange(v_curr, range_end);
	37	}
7a53e718	38
99f7c5e0 NA	39	/* check if the options' state of v_curr allow it to enter the range */
	40	bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr,
	41	const struct net_bridge_vlan *range_end)
7a53e718	42	{
188c67dd NA	43	return v_curr->state == range_end->state &&
188c67dd NA	44	__vlan_tun_can_enter_range(v_curr, range_end);
7a53e718 NA	45	}
	46
	47	bool br_vlan_opts_fill(struct sk_buff skb, const struct net_bridge_vlan v)
	48	{
a580c76d	49	return !nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_STATE,
188c67dd NA	50	br_vlan_get_state(v)) &&
188c67dd NA	51	__vlan_tun_put(skb, v);
7a53e718 NA	52	}
	53
	54	size_t br_vlan_opts_nl_size(void)
	55	{
188c67dd	56	return nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_STATE */
fa388f29 NA	57	+ nla_total_size(0) /* BRIDGE_VLANDB_ENTRY_TUNNEL_INFO */
fa388f29 NA	58	+ nla_total_size(sizeof(u32)); /* BRIDGE_VLANDB_TINFO_ID */
a580c76d NA	59	}
	60
	61	static int br_vlan_modify_state(struct net_bridge_vlan_group *vg,
	62	struct net_bridge_vlan *v,
	63	u8 state,
	64	bool *changed,
	65	struct netlink_ext_ack *extack)
	66	{
	67	struct net_bridge *br;
	68
	69	ASSERT_RTNL();
	70
	71	if (state > BR_STATE_BLOCKING) {
	72	NL_SET_ERR_MSG_MOD(extack, "Invalid vlan state");
	73	return -EINVAL;
	74	}
	75
	76	if (br_vlan_is_brentry(v))
	77	br = v->br;
	78	else
	79	br = v->port->br;
	80
	81	if (br->stp_enabled == BR_KERNEL_STP) {
	82	NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state when using kernel STP");
	83	return -EBUSY;
	84	}
	85
	86	if (v->state == state)
	87	return 0;
	88
	89	if (v->vid == br_get_pvid(vg))
	90	br_vlan_set_pvid_state(vg, state);
	91
	92	br_vlan_set_state(v, state);
	93	*changed = true;
	94
7a53e718 NA	95	return 0;
7a53e718 NA	96	}
a5d29ae2	97
fa388f29 NA	98	static const struct nla_policy br_vlandb_tinfo_pol[BRIDGE_VLANDB_TINFO_MAX + 1] = {
fa388f29 NA	99	[BRIDGE_VLANDB_TINFO_ID] = { .type = NLA_U32 },
c443758b	100	[BRIDGE_VLANDB_TINFO_CMD] = { .type = NLA_U32 },
fa388f29 NA	101	};
fa388f29 NA	102
569da082 NA	103	static int br_vlan_modify_tunnel(const struct net_bridge_port *p,
	104	struct net_bridge_vlan *v,
	105	struct nlattr **tb,
	106	bool *changed,
	107	struct netlink_ext_ack *extack)
	108	{
fa388f29	109	struct nlattr tun_tb[BRIDGE_VLANDB_TINFO_MAX + 1], attr;
569da082	110	struct bridge_vlan_info *vinfo;
c443758b NA	111	u32 tun_id = 0;
c443758b NA	112	int cmd, err;
569da082 NA	113
	114	if (!p) {
	115	NL_SET_ERR_MSG_MOD(extack, "Can't modify tunnel mapping of non-port vlans");
	116	return -EINVAL;
	117	}
	118	if (!(p->flags & BR_VLAN_TUNNEL)) {
	119	NL_SET_ERR_MSG_MOD(extack, "Port doesn't have tunnel flag set");
	120	return -EINVAL;
	121	}
	122
fa388f29 NA	123	attr = tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO];
	124	err = nla_parse_nested(tun_tb, BRIDGE_VLANDB_TINFO_MAX, attr,
	125	br_vlandb_tinfo_pol, extack);
	126	if (err)
	127	return err;
	128
c443758b NA	129	if (!tun_tb[BRIDGE_VLANDB_TINFO_CMD]) {
c443758b NA	130	NL_SET_ERR_MSG_MOD(extack, "Missing tunnel command attribute");
fa388f29 NA	131	return -ENOENT;
fa388f29 NA	132	}
c443758b NA	133	cmd = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_CMD]);
	134	switch (cmd) {
	135	case RTM_SETLINK:
	136	if (!tun_tb[BRIDGE_VLANDB_TINFO_ID]) {
	137	NL_SET_ERR_MSG_MOD(extack, "Missing tunnel id attribute");
	138	return -ENOENT;
	139	}
	140	/* when working on vlan ranges this is the starting tunnel id */
	141	tun_id = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_ID]);
	142	/* vlan info attr is guaranteed by br_vlan_rtm_process_one */
	143	vinfo = nla_data(tb[BRIDGE_VLANDB_ENTRY_INFO]);
	144	/* tunnel ids are mapped to each vlan in increasing order,
	145	* the starting vlan is in BRIDGE_VLANDB_ENTRY_INFO and v is the
	146	* current vlan, so we compute: tun_id + v - vinfo->vid
	147	*/
	148	tun_id += v->vid - vinfo->vid;
	149	break;
	150	case RTM_DELLINK:
	151	break;
	152	default:
	153	NL_SET_ERR_MSG_MOD(extack, "Unsupported tunnel command");
	154	return -EINVAL;
	155	}
	156
	157	return br_vlan_tunnel_info(p, cmd, v->vid, tun_id, changed);
569da082 NA	158	}
569da082 NA	159
a5d29ae2 NA	160	static int br_vlan_process_one_opts(const struct net_bridge *br,
	161	const struct net_bridge_port *p,
	162	struct net_bridge_vlan_group *vg,
	163	struct net_bridge_vlan *v,
	164	struct nlattr **tb,
	165	bool *changed,
	166	struct netlink_ext_ack *extack)
	167	{
a580c76d NA	168	int err;
a580c76d NA	169
a5d29ae2	170	*changed = false;
a580c76d NA	171	if (tb[BRIDGE_VLANDB_ENTRY_STATE]) {
	172	u8 state = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_STATE]);
	173
	174	err = br_vlan_modify_state(vg, v, state, changed, extack);
	175	if (err)
	176	return err;
	177	}
fa388f29	178	if (tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO]) {
569da082 NA	179	err = br_vlan_modify_tunnel(p, v, tb, changed, extack);
	180	if (err)
	181	return err;
	182	}
a580c76d	183
a5d29ae2 NA	184	return 0;
	185	}
	186
	187	int br_vlan_process_options(const struct net_bridge *br,
	188	const struct net_bridge_port *p,
	189	struct net_bridge_vlan *range_start,
	190	struct net_bridge_vlan *range_end,
	191	struct nlattr **tb,
	192	struct netlink_ext_ack *extack)
	193	{
	194	struct net_bridge_vlan v, curr_start = NULL, *curr_end = NULL;
	195	struct net_bridge_vlan_group *vg;
	196	int vid, err = 0;
	197	u16 pvid;
	198
	199	if (p)
	200	vg = nbp_vlan_group(p);
	201	else
	202	vg = br_vlan_group(br);
	203
	204	if (!range_start \|\| !br_vlan_should_use(range_start)) {
	205	NL_SET_ERR_MSG_MOD(extack, "Vlan range start doesn't exist, can't process options");
	206	return -ENOENT;
	207	}
	208	if (!range_end \|\| !br_vlan_should_use(range_end)) {
	209	NL_SET_ERR_MSG_MOD(extack, "Vlan range end doesn't exist, can't process options");
	210	return -ENOENT;
	211	}
	212
	213	pvid = br_get_pvid(vg);
	214	for (vid = range_start->vid; vid <= range_end->vid; vid++) {
	215	bool changed = false;
	216
	217	v = br_vlan_find(vg, vid);
	218	if (!v \|\| !br_vlan_should_use(v)) {
	219	NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process options");
	220	err = -ENOENT;
	221	break;
	222	}
	223
	224	err = br_vlan_process_one_opts(br, p, vg, v, tb, &changed,
	225	extack);
	226	if (err)
	227	break;
	228
	229	if (changed) {
	230	/* vlan options changed, check for range */
	231	if (!curr_start) {
	232	curr_start = v;
	233	curr_end = v;
	234	continue;
	235	}
	236
	237	if (v->vid == pvid \|\|
	238	!br_vlan_can_enter_range(v, curr_end)) {
	239	br_vlan_notify(br, p, curr_start->vid,
	240	curr_end->vid, RTM_NEWVLAN);
	241	curr_start = v;
	242	}
	243	curr_end = v;
	244	} else {
	245	/* nothing changed and nothing to notify yet */
	246	if (!curr_start)
	247	continue;
248
249	br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
250	RTM_NEWVLAN);
251	curr_start = NULL;
252	curr_end = NULL;
253	}
254	}
255	if (curr_start)
256	br_vlan_notify(br, p, curr_start->vid, curr_end->vid,
257	RTM_NEWVLAN);
258
259	return err;
260	}
47ecd2db	261
743a53d9 NA	262	bool br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan *v_curr,
	263	const struct net_bridge_vlan *r_end)
	264	{
9dee572c NA	265	return v_curr->vid - r_end->vid == 1 &&
9dee572c NA	266	((v_curr->priv_flags ^ r_end->priv_flags) &
df271cd6 NA	267	BR_VLFLAG_GLOBAL_MCAST_ENABLED) == 0 &&
	268	br_multicast_ctx_options_equal(&v_curr->br_mcast_ctx,
	269	&r_end->br_mcast_ctx);
743a53d9 NA	270	}
	271
	272	bool br_vlan_global_opts_fill(struct sk_buff *skb, u16 vid, u16 vid_range,
	273	const struct net_bridge_vlan *v_opts)
	274	{
77f6abab	275	u64 clockval __maybe_unused;
743a53d9 NA	276	struct nlattr *nest;
	277
	278	nest = nla_nest_start(skb, BRIDGE_VLANDB_GLOBAL_OPTIONS);
	279	if (!nest)
	280	return false;
	281
	282	if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_ID, vid))
	283	goto out_err;
	284
	285	if (vid_range && vid < vid_range &&
	286	nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_RANGE, vid_range))
	287	goto out_err;
	288
9dee572c NA	289	#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
9dee572c NA	290	if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING,
df271cd6 NA	291	!!(v_opts->priv_flags & BR_VLFLAG_GLOBAL_MCAST_ENABLED)) \|\|
df271cd6 NA	292	nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION,
931ba87d NA	293	v_opts->br_mcast_ctx.multicast_igmp_version) \|\|
931ba87d NA	294	nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT,
50725f6e NA	295	v_opts->br_mcast_ctx.multicast_last_member_count) \|\|
	296	nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT,
	297	v_opts->br_mcast_ctx.multicast_startup_query_count))
df271cd6 NA	298	goto out_err;
df271cd6 NA	299
77f6abab NA	300	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_last_member_interval);
	301	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL,
	302	clockval, BRIDGE_VLANDB_GOPTS_PAD))
	303	goto out_err;
2da0aea2 NA	304	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_membership_interval);
	305	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL,
	306	clockval, BRIDGE_VLANDB_GOPTS_PAD))
	307	goto out_err;
cd9269d4 NA	308	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_querier_interval);
	309	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL,
	310	clockval, BRIDGE_VLANDB_GOPTS_PAD))
	311	goto out_err;
d6c08aba NA	312	clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_interval);
	313	if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL,
	314	clockval, BRIDGE_VLANDB_GOPTS_PAD))
	315	goto out_err;
77f6abab	316
df271cd6 NA	317	#if IS_ENABLED(CONFIG_IPV6)
	318	if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION,
	319	v_opts->br_mcast_ctx.multicast_mld_version))
9dee572c	320	goto out_err;
df271cd6	321	#endif
9dee572c NA	322	#endif
9dee572c NA	323
743a53d9 NA	324	nla_nest_end(skb, nest);
	325
	326	return true;
	327
	328	out_err:
	329	nla_nest_cancel(skb, nest);
	330	return false;
	331	}
	332
9aba624d NA	333	static size_t rtnl_vlan_global_opts_nlmsg_size(void)
	334	{
	335	return NLMSG_ALIGN(sizeof(struct br_vlan_msg))
	336	+ nla_total_size(0) /* BRIDGE_VLANDB_GLOBAL_OPTIONS */
	337	+ nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_ID */
9dee572c NA	338	#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
9dee572c NA	339	+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING */
df271cd6 NA	340	+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION */
df271cd6 NA	341	+ nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION */
931ba87d	342	+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT */
50725f6e	343	+ nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT */
77f6abab	344	+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL */
2da0aea2	345	+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL */
cd9269d4	346	+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL */
d6c08aba	347	+ nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL */
9dee572c	348	#endif
9aba624d NA	349	+ nla_total_size(sizeof(u16)); /* BRIDGE_VLANDB_GOPTS_RANGE */
	350	}
	351
	352	static void br_vlan_global_opts_notify(const struct net_bridge *br,
	353	u16 vid, u16 vid_range)
	354	{
	355	struct net_bridge_vlan *v;
	356	struct br_vlan_msg *bvm;
	357	struct nlmsghdr *nlh;
	358	struct sk_buff *skb;
	359	int err = -ENOBUFS;
	360
	361	/* right now notifications are done only with rtnl held */
	362	ASSERT_RTNL();
	363
	364	skb = nlmsg_new(rtnl_vlan_global_opts_nlmsg_size(), GFP_KERNEL);
	365	if (!skb)
	366	goto out_err;
	367
	368	err = -EMSGSIZE;
	369	nlh = nlmsg_put(skb, 0, 0, RTM_NEWVLAN, sizeof(*bvm), 0);
	370	if (!nlh)
	371	goto out_err;
	372	bvm = nlmsg_data(nlh);
	373	memset(bvm, 0, sizeof(*bvm));
	374	bvm->family = AF_BRIDGE;
	375	bvm->ifindex = br->dev->ifindex;
	376
	377	/* need to find the vlan due to flags/options */
	378	v = br_vlan_find(br_vlan_group(br), vid);
	379	if (!v)
	380	goto out_kfree;
	381
	382	if (!br_vlan_global_opts_fill(skb, vid, vid_range, v))
	383	goto out_err;
	384
	385	nlmsg_end(skb, nlh);
	386	rtnl_notify(skb, dev_net(br->dev), 0, RTNLGRP_BRVLAN, NULL, GFP_KERNEL);
	387	return;
	388
	389	out_err:
	390	rtnl_set_sk_err(dev_net(br->dev), RTNLGRP_BRVLAN, err);
	391	out_kfree:
	392	kfree_skb(skb);
	393	}
	394
47ecd2db NA	395	static int br_vlan_process_global_one_opts(const struct net_bridge *br,
	396	struct net_bridge_vlan_group *vg,
	397	struct net_bridge_vlan *v,
	398	struct nlattr **tb,
	399	bool *changed,
	400	struct netlink_ext_ack *extack)
	401	{
df271cd6 NA	402	int err __maybe_unused;
df271cd6 NA	403
47ecd2db	404	*changed = false;
9dee572c NA	405	#ifdef CONFIG_BRIDGE_IGMP_SNOOPING
	406	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]) {
	407	u8 mc_snooping;
	408
	409	mc_snooping = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]);
	410	if (br_multicast_toggle_global_vlan(v, !!mc_snooping))
	411	*changed = true;
	412	}
df271cd6 NA	413	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]) {
	414	u8 ver;
	415
	416	ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]);
	417	err = br_multicast_set_igmp_version(&v->br_mcast_ctx, ver);
	418	if (err)
	419	return err;
	420	*changed = true;
	421	}
931ba87d NA	422	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]) {
	423	u32 cnt;
	424
	425	cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]);
	426	v->br_mcast_ctx.multicast_last_member_count = cnt;
	427	*changed = true;
	428	}
50725f6e NA	429	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]) {
	430	u32 cnt;
	431
	432	cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]);
	433	v->br_mcast_ctx.multicast_startup_query_count = cnt;
	434	*changed = true;
	435	}
77f6abab NA	436	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]) {
	437	u64 val;
	438
	439	val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]);
	440	v->br_mcast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
	441	*changed = true;
	442	}
2da0aea2 NA	443	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]) {
	444	u64 val;
	445
	446	val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]);
	447	v->br_mcast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
	448	*changed = true;
	449	}
cd9269d4 NA	450	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]) {
	451	u64 val;
	452
	453	val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]);
	454	v->br_mcast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
	455	*changed = true;
	456	}
d6c08aba NA	457	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]) {
	458	u64 val;
	459
	460	val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]);
	461	v->br_mcast_ctx.multicast_query_interval = clock_t_to_jiffies(val);
	462	*changed = true;
	463	}
df271cd6 NA	464	#if IS_ENABLED(CONFIG_IPV6)
	465	if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]) {
	466	u8 ver;
	467
	468	ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]);
	469	err = br_multicast_set_mld_version(&v->br_mcast_ctx, ver);
	470	if (err)
	471	return err;
	472	*changed = true;
	473	}
	474	#endif
9dee572c NA	475	#endif
9dee572c NA	476
47ecd2db NA	477	return 0;
	478	}
	479
	480	static const struct nla_policy br_vlan_db_gpol[BRIDGE_VLANDB_GOPTS_MAX + 1] = {
	481	[BRIDGE_VLANDB_GOPTS_ID] = { .type = NLA_U16 },
	482	[BRIDGE_VLANDB_GOPTS_RANGE] = { .type = NLA_U16 },
9dee572c	483	[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING] = { .type = NLA_U8 },
df271cd6	484	[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION] = { .type = NLA_U8 },
d6c08aba	485	[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
df271cd6	486	[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
931ba87d	487	[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
50725f6e	488	[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
77f6abab	489	[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
2da0aea2	490	[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
cd9269d4	491	[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
47ecd2db NA	492	};
	493
	494	int br_vlan_rtm_process_global_options(struct net_device *dev,
	495	const struct nlattr *attr,
	496	int cmd,
	497	struct netlink_ext_ack *extack)
	498	{
9aba624d	499	struct net_bridge_vlan v, curr_start = NULL, *curr_end = NULL;
47ecd2db NA	500	struct nlattr *tb[BRIDGE_VLANDB_GOPTS_MAX + 1];
47ecd2db NA	501	struct net_bridge_vlan_group *vg;
47ecd2db NA	502	u16 vid, vid_range = 0;
	503	struct net_bridge *br;
	504	int err = 0;
	505
	506	if (cmd != RTM_NEWVLAN) {
	507	NL_SET_ERR_MSG_MOD(extack, "Global vlan options support only set operation");
	508	return -EINVAL;
	509	}
	510	if (!netif_is_bridge_master(dev)) {
	511	NL_SET_ERR_MSG_MOD(extack, "Global vlan options can only be set on bridge device");
	512	return -EINVAL;
	513	}
	514	br = netdev_priv(dev);
	515	vg = br_vlan_group(br);
	516	if (WARN_ON(!vg))
	517	return -ENODEV;
	518
	519	err = nla_parse_nested(tb, BRIDGE_VLANDB_GOPTS_MAX, attr,
	520	br_vlan_db_gpol, extack);
	521	if (err)
	522	return err;
	523
	524	if (!tb[BRIDGE_VLANDB_GOPTS_ID]) {
	525	NL_SET_ERR_MSG_MOD(extack, "Missing vlan entry id");
	526	return -EINVAL;
	527	}
	528	vid = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_ID]);
	529	if (!br_vlan_valid_id(vid, extack))
	530	return -EINVAL;
	531
	532	if (tb[BRIDGE_VLANDB_GOPTS_RANGE]) {
	533	vid_range = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_RANGE]);
	534	if (!br_vlan_valid_id(vid_range, extack))
	535	return -EINVAL;
	536	if (vid >= vid_range) {
	537	NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id");
	538	return -EINVAL;
	539	}
	540	} else {
	541	vid_range = vid;
	542	}
	543
	544	for (; vid <= vid_range; vid++) {
	545	bool changed = false;
	546
	547	v = br_vlan_find(vg, vid);
	548	if (!v) {
	549	NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process global options");
	550	err = -ENOENT;
	551	break;
	552	}
	553
	554	err = br_vlan_process_global_one_opts(br, vg, v, tb, &changed,
	555	extack);
	556	if (err)
	557	break;
9aba624d NA	558
	559	if (changed) {
	560	/* vlan options changed, check for range */
	561	if (!curr_start) {
	562	curr_start = v;
	563	curr_end = v;
	564	continue;
	565	}
	566
	567	if (!br_vlan_global_opts_can_enter_range(v, curr_end)) {
	568	br_vlan_global_opts_notify(br, curr_start->vid,
	569	curr_end->vid);
	570	curr_start = v;
	571	}
	572	curr_end = v;
	573	} else {
	574	/* nothing changed and nothing to notify yet */
	575	if (!curr_start)
	576	continue;
	577
	578	br_vlan_global_opts_notify(br, curr_start->vid,
	579	curr_end->vid);
	580	curr_start = NULL;
	581	curr_end = NULL;
	582	}
47ecd2db	583	}
9aba624d NA	584	if (curr_start)
9aba624d NA	585	br_vlan_global_opts_notify(br, curr_start->vid, curr_end->vid);
47ecd2db NA	586
	587	return err;
	588	}