Commit | Line | Data |
---|---|---|
2874c5fd | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
1da177e4 LT |
2 | /* |
3 | * INET An implementation of the TCP/IP protocol suite for the LINUX | |
4 | * operating system. INET is implemented using the BSD Socket | |
5 | * interface as the means of communication with the user level. | |
6 | * | |
7 | * IPv4 Forwarding Information Base: semantics. | |
8 | * | |
1da177e4 | 9 | * Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru> |
1da177e4 LT |
10 | */ |
11 | ||
7c0f6ba6 | 12 | #include <linux/uaccess.h> |
1da177e4 LT |
13 | #include <linux/bitops.h> |
14 | #include <linux/types.h> | |
15 | #include <linux/kernel.h> | |
16 | #include <linux/jiffies.h> | |
17 | #include <linux/mm.h> | |
18 | #include <linux/string.h> | |
19 | #include <linux/socket.h> | |
20 | #include <linux/sockios.h> | |
21 | #include <linux/errno.h> | |
22 | #include <linux/in.h> | |
23 | #include <linux/inet.h> | |
14c85021 | 24 | #include <linux/inetdevice.h> |
1da177e4 LT |
25 | #include <linux/netdevice.h> |
26 | #include <linux/if_arp.h> | |
27 | #include <linux/proc_fs.h> | |
28 | #include <linux/skbuff.h> | |
1da177e4 | 29 | #include <linux/init.h> |
5a0e3ad6 | 30 | #include <linux/slab.h> |
c3ab2b4e | 31 | #include <linux/netlink.h> |
d07418af | 32 | #include <linux/hash.h> |
5e9398a2 | 33 | #include <linux/nospec.h> |
1da177e4 | 34 | |
14c85021 | 35 | #include <net/arp.h> |
32ccf110 | 36 | #include <net/inet_dscp.h> |
1da177e4 LT |
37 | #include <net/ip.h> |
38 | #include <net/protocol.h> | |
39 | #include <net/route.h> | |
40 | #include <net/tcp.h> | |
41 | #include <net/sock.h> | |
42 | #include <net/ip_fib.h> | |
717a8f5b | 43 | #include <net/ip6_fib.h> |
5481d73f | 44 | #include <net/nexthop.h> |
f21c7bc5 | 45 | #include <net/netlink.h> |
3c618c1d | 46 | #include <net/rtnh.h> |
571e7226 | 47 | #include <net/lwtunnel.h> |
04b1d4e5 | 48 | #include <net/fib_notifier.h> |
c0a72077 | 49 | #include <net/addrconf.h> |
1da177e4 LT |
50 | |
51 | #include "fib_lookup.h" | |
52 | ||
832b4c5e | 53 | static DEFINE_SPINLOCK(fib_info_lock); |
1da177e4 LT |
54 | static struct hlist_head *fib_info_hash; |
55 | static struct hlist_head *fib_info_laddrhash; | |
123b9731 | 56 | static unsigned int fib_info_hash_size; |
79eb15da | 57 | static unsigned int fib_info_hash_bits; |
1da177e4 LT |
58 | static unsigned int fib_info_cnt; |
59 | ||
60 | #define DEVINDEX_HASHBITS 8 | |
61 | #define DEVINDEX_HASHSIZE (1U << DEVINDEX_HASHBITS) | |
62 | static struct hlist_head fib_info_devhash[DEVINDEX_HASHSIZE]; | |
63 | ||
dcb1ecb5 DA |
64 | /* for_nexthops and change_nexthops only used when nexthop object |
65 | * is not set in a fib_info. The logic within can reference fib_nh. | |
66 | */ | |
1da177e4 | 67 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
1da177e4 | 68 | |
6a31d2a9 ED |
69 | #define for_nexthops(fi) { \ |
70 | int nhsel; const struct fib_nh *nh; \ | |
71 | for (nhsel = 0, nh = (fi)->fib_nh; \ | |
5481d73f | 72 | nhsel < fib_info_num_path((fi)); \ |
6a31d2a9 ED |
73 | nh++, nhsel++) |
74 | ||
75 | #define change_nexthops(fi) { \ | |
76 | int nhsel; struct fib_nh *nexthop_nh; \ | |
77 | for (nhsel = 0, nexthop_nh = (struct fib_nh *)((fi)->fib_nh); \ | |
5481d73f | 78 | nhsel < fib_info_num_path((fi)); \ |
6a31d2a9 | 79 | nexthop_nh++, nhsel++) |
1da177e4 LT |
80 | |
81 | #else /* CONFIG_IP_ROUTE_MULTIPATH */ | |
82 | ||
83 | /* Hope, that gcc will optimize it to get rid of dummy loop */ | |
84 | ||
6a31d2a9 ED |
85 | #define for_nexthops(fi) { \ |
86 | int nhsel; const struct fib_nh *nh = (fi)->fib_nh; \ | |
87 | for (nhsel = 0; nhsel < 1; nhsel++) | |
1da177e4 | 88 | |
6a31d2a9 ED |
89 | #define change_nexthops(fi) { \ |
90 | int nhsel; \ | |
91 | struct fib_nh *nexthop_nh = (struct fib_nh *)((fi)->fib_nh); \ | |
92 | for (nhsel = 0; nhsel < 1; nhsel++) | |
1da177e4 LT |
93 | |
94 | #endif /* CONFIG_IP_ROUTE_MULTIPATH */ | |
95 | ||
96 | #define endfor_nexthops(fi) } | |
97 | ||
98 | ||
3be0686b | 99 | const struct fib_prop fib_props[RTN_MAX + 1] = { |
6a31d2a9 | 100 | [RTN_UNSPEC] = { |
1da177e4 LT |
101 | .error = 0, |
102 | .scope = RT_SCOPE_NOWHERE, | |
6a31d2a9 ED |
103 | }, |
104 | [RTN_UNICAST] = { | |
1da177e4 LT |
105 | .error = 0, |
106 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
107 | }, |
108 | [RTN_LOCAL] = { | |
1da177e4 LT |
109 | .error = 0, |
110 | .scope = RT_SCOPE_HOST, | |
6a31d2a9 ED |
111 | }, |
112 | [RTN_BROADCAST] = { | |
1da177e4 LT |
113 | .error = 0, |
114 | .scope = RT_SCOPE_LINK, | |
6a31d2a9 ED |
115 | }, |
116 | [RTN_ANYCAST] = { | |
1da177e4 LT |
117 | .error = 0, |
118 | .scope = RT_SCOPE_LINK, | |
6a31d2a9 ED |
119 | }, |
120 | [RTN_MULTICAST] = { | |
1da177e4 LT |
121 | .error = 0, |
122 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
123 | }, |
124 | [RTN_BLACKHOLE] = { | |
1da177e4 LT |
125 | .error = -EINVAL, |
126 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
127 | }, |
128 | [RTN_UNREACHABLE] = { | |
1da177e4 LT |
129 | .error = -EHOSTUNREACH, |
130 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
131 | }, |
132 | [RTN_PROHIBIT] = { | |
1da177e4 LT |
133 | .error = -EACCES, |
134 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
135 | }, |
136 | [RTN_THROW] = { | |
1da177e4 LT |
137 | .error = -EAGAIN, |
138 | .scope = RT_SCOPE_UNIVERSE, | |
6a31d2a9 ED |
139 | }, |
140 | [RTN_NAT] = { | |
1da177e4 LT |
141 | .error = -EINVAL, |
142 | .scope = RT_SCOPE_NOWHERE, | |
6a31d2a9 ED |
143 | }, |
144 | [RTN_XRESOLVE] = { | |
1da177e4 LT |
145 | .error = -EINVAL, |
146 | .scope = RT_SCOPE_NOWHERE, | |
6a31d2a9 | 147 | }, |
1da177e4 LT |
148 | }; |
149 | ||
c5038a83 DM |
150 | static void rt_fibinfo_free(struct rtable __rcu **rtp) |
151 | { | |
152 | struct rtable *rt = rcu_dereference_protected(*rtp, 1); | |
153 | ||
154 | if (!rt) | |
155 | return; | |
156 | ||
157 | /* Not even needed : RCU_INIT_POINTER(*rtp, NULL); | |
158 | * because we waited an RCU grace period before calling | |
159 | * free_fib_info_rcu() | |
160 | */ | |
161 | ||
95c47f9c | 162 | dst_dev_put(&rt->dst); |
b838d5e1 | 163 | dst_release_immediate(&rt->dst); |
c5038a83 DM |
164 | } |
165 | ||
a5995e71 | 166 | static void free_nh_exceptions(struct fib_nh_common *nhc) |
4895c771 | 167 | { |
caa41527 | 168 | struct fnhe_hash_bucket *hash; |
4895c771 DM |
169 | int i; |
170 | ||
a5995e71 | 171 | hash = rcu_dereference_protected(nhc->nhc_exceptions, 1); |
caa41527 ED |
172 | if (!hash) |
173 | return; | |
4895c771 DM |
174 | for (i = 0; i < FNHE_HASH_SIZE; i++) { |
175 | struct fib_nh_exception *fnhe; | |
176 | ||
5abf7f7e | 177 | fnhe = rcu_dereference_protected(hash[i].chain, 1); |
4895c771 DM |
178 | while (fnhe) { |
179 | struct fib_nh_exception *next; | |
82695b30 | 180 | |
5abf7f7e | 181 | next = rcu_dereference_protected(fnhe->fnhe_next, 1); |
c5038a83 | 182 | |
2ffae99d TT |
183 | rt_fibinfo_free(&fnhe->fnhe_rth_input); |
184 | rt_fibinfo_free(&fnhe->fnhe_rth_output); | |
c5038a83 | 185 | |
4895c771 DM |
186 | kfree(fnhe); |
187 | ||
188 | fnhe = next; | |
189 | } | |
190 | } | |
191 | kfree(hash); | |
192 | } | |
193 | ||
c5038a83 | 194 | static void rt_fibinfo_free_cpus(struct rtable __rcu * __percpu *rtp) |
d26b3a7c ED |
195 | { |
196 | int cpu; | |
197 | ||
198 | if (!rtp) | |
199 | return; | |
200 | ||
201 | for_each_possible_cpu(cpu) { | |
202 | struct rtable *rt; | |
203 | ||
204 | rt = rcu_dereference_protected(*per_cpu_ptr(rtp, cpu), 1); | |
0830106c | 205 | if (rt) { |
95c47f9c | 206 | dst_dev_put(&rt->dst); |
b838d5e1 | 207 | dst_release_immediate(&rt->dst); |
0830106c | 208 | } |
d26b3a7c ED |
209 | } |
210 | free_percpu(rtp); | |
211 | } | |
212 | ||
979e276e DA |
213 | void fib_nh_common_release(struct fib_nh_common *nhc) |
214 | { | |
d62607c3 | 215 | netdev_put(nhc->nhc_dev, &nhc->nhc_dev_tracker); |
979e276e | 216 | lwtstate_put(nhc->nhc_lwtstate); |
0f457a36 DA |
217 | rt_fibinfo_free_cpus(nhc->nhc_pcpu_rth_output); |
218 | rt_fibinfo_free(&nhc->nhc_rth_input); | |
a5995e71 | 219 | free_nh_exceptions(nhc); |
979e276e DA |
220 | } |
221 | EXPORT_SYMBOL_GPL(fib_nh_common_release); | |
222 | ||
faa041a4 DA |
223 | void fib_nh_release(struct net *net, struct fib_nh *fib_nh) |
224 | { | |
225 | #ifdef CONFIG_IP_ROUTE_CLASSID | |
226 | if (fib_nh->nh_tclassid) | |
213f5f8f | 227 | atomic_dec(&net->ipv4.fib_num_tclassid_users); |
faa041a4 | 228 | #endif |
979e276e | 229 | fib_nh_common_release(&fib_nh->nh_common); |
faa041a4 DA |
230 | } |
231 | ||
1da177e4 | 232 | /* Release a nexthop info record */ |
19c1ea14 YZ |
233 | static void free_fib_info_rcu(struct rcu_head *head) |
234 | { | |
235 | struct fib_info *fi = container_of(head, struct fib_info, rcu); | |
236 | ||
4c7e8084 DA |
237 | if (fi->nh) { |
238 | nexthop_put(fi->nh); | |
239 | } else { | |
240 | change_nexthops(fi) { | |
241 | fib_nh_release(fi->fib_net, nexthop_nh); | |
242 | } endfor_nexthops(fi); | |
243 | } | |
e49cc0da | 244 | |
cc5f0eb2 DA |
245 | ip_fib_metrics_put(fi->fib_metrics); |
246 | ||
19c1ea14 YZ |
247 | kfree(fi); |
248 | } | |
1da177e4 LT |
249 | |
250 | void free_fib_info(struct fib_info *fi) | |
251 | { | |
252 | if (fi->fib_dead == 0) { | |
058bd4d2 | 253 | pr_warn("Freeing alive fib_info %p\n", fi); |
1da177e4 LT |
254 | return; |
255 | } | |
faa041a4 | 256 | |
19c1ea14 | 257 | call_rcu(&fi->rcu, free_fib_info_rcu); |
1da177e4 | 258 | } |
b423cb10 | 259 | EXPORT_SYMBOL_GPL(free_fib_info); |
1da177e4 LT |
260 | |
261 | void fib_release_info(struct fib_info *fi) | |
262 | { | |
832b4c5e | 263 | spin_lock_bh(&fib_info_lock); |
79976892 | 264 | if (fi && refcount_dec_and_test(&fi->fib_treeref)) { |
1da177e4 | 265 | hlist_del(&fi->fib_hash); |
0a6e6b3c ED |
266 | |
267 | /* Paired with READ_ONCE() in fib_create_info(). */ | |
268 | WRITE_ONCE(fib_info_cnt, fib_info_cnt - 1); | |
269 | ||
1da177e4 LT |
270 | if (fi->fib_prefsrc) |
271 | hlist_del(&fi->fib_lhash); | |
4c7e8084 DA |
272 | if (fi->nh) { |
273 | list_del(&fi->nh_list); | |
274 | } else { | |
275 | change_nexthops(fi) { | |
276 | if (!nexthop_nh->fib_nh_dev) | |
277 | continue; | |
278 | hlist_del(&nexthop_nh->nh_hash); | |
279 | } endfor_nexthops(fi) | |
280 | } | |
1da177e4 LT |
281 | fi->fib_dead = 1; |
282 | fib_info_put(fi); | |
283 | } | |
832b4c5e | 284 | spin_unlock_bh(&fib_info_lock); |
1da177e4 LT |
285 | } |
286 | ||
5481d73f | 287 | static inline int nh_comp(struct fib_info *fi, struct fib_info *ofi) |
1da177e4 | 288 | { |
5481d73f | 289 | const struct fib_nh *onh; |
1da177e4 | 290 | |
4c7e8084 DA |
291 | if (fi->nh || ofi->nh) |
292 | return nexthop_cmp(fi->nh, ofi->nh) ? 0 : -1; | |
293 | ||
294 | if (ofi->fib_nhs == 0) | |
295 | return 0; | |
296 | ||
1da177e4 | 297 | for_nexthops(fi) { |
5481d73f DA |
298 | onh = fib_info_nh(ofi, nhsel); |
299 | ||
b75ed8b1 | 300 | if (nh->fib_nh_oif != onh->fib_nh_oif || |
a4ea5d43 | 301 | nh->fib_nh_gw_family != onh->fib_nh_gw_family || |
b75ed8b1 | 302 | nh->fib_nh_scope != onh->fib_nh_scope || |
1da177e4 | 303 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
b75ed8b1 | 304 | nh->fib_nh_weight != onh->fib_nh_weight || |
1da177e4 | 305 | #endif |
c7066f70 | 306 | #ifdef CONFIG_IP_ROUTE_CLASSID |
1da177e4 LT |
307 | nh->nh_tclassid != onh->nh_tclassid || |
308 | #endif | |
b75ed8b1 DA |
309 | lwtunnel_cmp_encap(nh->fib_nh_lws, onh->fib_nh_lws) || |
310 | ((nh->fib_nh_flags ^ onh->fib_nh_flags) & ~RTNH_COMPARE_MASK)) | |
1da177e4 | 311 | return -1; |
a4ea5d43 DA |
312 | |
313 | if (nh->fib_nh_gw_family == AF_INET && | |
314 | nh->fib_nh_gw4 != onh->fib_nh_gw4) | |
315 | return -1; | |
316 | ||
317 | if (nh->fib_nh_gw_family == AF_INET6 && | |
318 | ipv6_addr_cmp(&nh->fib_nh_gw6, &onh->fib_nh_gw6)) | |
319 | return -1; | |
1da177e4 LT |
320 | } endfor_nexthops(fi); |
321 | return 0; | |
322 | } | |
323 | ||
88ebc72f DM |
324 | static inline unsigned int fib_devindex_hashfn(unsigned int val) |
325 | { | |
d07418af ED |
326 | return hash_32(val, DEVINDEX_HASHBITS); |
327 | } | |
328 | ||
329 | static struct hlist_head * | |
330 | fib_info_devhash_bucket(const struct net_device *dev) | |
331 | { | |
332 | u32 val = net_hash_mix(dev_net(dev)) ^ dev->ifindex; | |
88ebc72f | 333 | |
d07418af | 334 | return &fib_info_devhash[fib_devindex_hashfn(val)]; |
88ebc72f DM |
335 | } |
336 | ||
6c48ea5f DA |
337 | static unsigned int fib_info_hashfn_1(int init_val, u8 protocol, u8 scope, |
338 | u32 prefsrc, u32 priority) | |
339 | { | |
340 | unsigned int val = init_val; | |
341 | ||
342 | val ^= (protocol << 8) | scope; | |
343 | val ^= prefsrc; | |
344 | val ^= priority; | |
345 | ||
346 | return val; | |
347 | } | |
348 | ||
349 | static unsigned int fib_info_hashfn_result(unsigned int val) | |
1da177e4 | 350 | { |
123b9731 | 351 | unsigned int mask = (fib_info_hash_size - 1); |
1da177e4 | 352 | |
6c48ea5f DA |
353 | return (val ^ (val >> 7) ^ (val >> 12)) & mask; |
354 | } | |
355 | ||
356 | static inline unsigned int fib_info_hashfn(struct fib_info *fi) | |
357 | { | |
358 | unsigned int val; | |
359 | ||
360 | val = fib_info_hashfn_1(fi->fib_nhs, fi->fib_protocol, | |
361 | fi->fib_scope, (__force u32)fi->fib_prefsrc, | |
362 | fi->fib_priority); | |
4c7e8084 DA |
363 | |
364 | if (fi->nh) { | |
365 | val ^= fib_devindex_hashfn(fi->nh->id); | |
366 | } else { | |
367 | for_nexthops(fi) { | |
368 | val ^= fib_devindex_hashfn(nh->fib_nh_oif); | |
369 | } endfor_nexthops(fi) | |
370 | } | |
1da177e4 | 371 | |
6c48ea5f DA |
372 | return fib_info_hashfn_result(val); |
373 | } | |
374 | ||
375 | /* no metrics, only nexthop id */ | |
376 | static struct fib_info *fib_find_info_nh(struct net *net, | |
377 | const struct fib_config *cfg) | |
378 | { | |
379 | struct hlist_head *head; | |
380 | struct fib_info *fi; | |
381 | unsigned int hash; | |
382 | ||
383 | hash = fib_info_hashfn_1(fib_devindex_hashfn(cfg->fc_nh_id), | |
384 | cfg->fc_protocol, cfg->fc_scope, | |
385 | (__force u32)cfg->fc_prefsrc, | |
386 | cfg->fc_priority); | |
387 | hash = fib_info_hashfn_result(hash); | |
388 | head = &fib_info_hash[hash]; | |
389 | ||
390 | hlist_for_each_entry(fi, head, fib_hash) { | |
391 | if (!net_eq(fi->fib_net, net)) | |
392 | continue; | |
393 | if (!fi->nh || fi->nh->id != cfg->fc_nh_id) | |
394 | continue; | |
395 | if (cfg->fc_protocol == fi->fib_protocol && | |
396 | cfg->fc_scope == fi->fib_scope && | |
397 | cfg->fc_prefsrc == fi->fib_prefsrc && | |
398 | cfg->fc_priority == fi->fib_priority && | |
399 | cfg->fc_type == fi->fib_type && | |
400 | cfg->fc_table == fi->fib_tb_id && | |
401 | !((cfg->fc_flags ^ fi->fib_flags) & ~RTNH_COMPARE_MASK)) | |
402 | return fi; | |
403 | } | |
404 | ||
405 | return NULL; | |
1da177e4 LT |
406 | } |
407 | ||
5481d73f | 408 | static struct fib_info *fib_find_info(struct fib_info *nfi) |
1da177e4 LT |
409 | { |
410 | struct hlist_head *head; | |
1da177e4 LT |
411 | struct fib_info *fi; |
412 | unsigned int hash; | |
413 | ||
414 | hash = fib_info_hashfn(nfi); | |
415 | head = &fib_info_hash[hash]; | |
416 | ||
b67bfe0d | 417 | hlist_for_each_entry(fi, head, fib_hash) { |
09ad9bc7 | 418 | if (!net_eq(fi->fib_net, nfi->fib_net)) |
4814bdbd | 419 | continue; |
1da177e4 LT |
420 | if (fi->fib_nhs != nfi->fib_nhs) |
421 | continue; | |
422 | if (nfi->fib_protocol == fi->fib_protocol && | |
37e826c5 | 423 | nfi->fib_scope == fi->fib_scope && |
1da177e4 LT |
424 | nfi->fib_prefsrc == fi->fib_prefsrc && |
425 | nfi->fib_priority == fi->fib_priority && | |
f4ef85bb | 426 | nfi->fib_type == fi->fib_type && |
f96a3d74 | 427 | nfi->fib_tb_id == fi->fib_tb_id && |
1da177e4 | 428 | memcmp(nfi->fib_metrics, fi->fib_metrics, |
fcd13f42 | 429 | sizeof(u32) * RTAX_MAX) == 0 && |
8a3d0316 | 430 | !((nfi->fib_flags ^ fi->fib_flags) & ~RTNH_COMPARE_MASK) && |
4c7e8084 | 431 | nh_comp(fi, nfi) == 0) |
1da177e4 LT |
432 | return fi; |
433 | } | |
434 | ||
435 | return NULL; | |
436 | } | |
437 | ||
1da177e4 | 438 | /* Check, that the gateway is already configured. |
6a31d2a9 | 439 | * Used only by redirect accept routine. |
1da177e4 | 440 | */ |
d878e72e | 441 | int ip_fib_check_default(__be32 gw, struct net_device *dev) |
1da177e4 LT |
442 | { |
443 | struct hlist_head *head; | |
1da177e4 | 444 | struct fib_nh *nh; |
1da177e4 | 445 | |
832b4c5e | 446 | spin_lock(&fib_info_lock); |
1da177e4 | 447 | |
d07418af ED |
448 | head = fib_info_devhash_bucket(dev); |
449 | ||
b67bfe0d | 450 | hlist_for_each_entry(nh, head, nh_hash) { |
b75ed8b1 DA |
451 | if (nh->fib_nh_dev == dev && |
452 | nh->fib_nh_gw4 == gw && | |
453 | !(nh->fib_nh_flags & RTNH_F_DEAD)) { | |
832b4c5e | 454 | spin_unlock(&fib_info_lock); |
1da177e4 LT |
455 | return 0; |
456 | } | |
457 | } | |
458 | ||
832b4c5e | 459 | spin_unlock(&fib_info_lock); |
1da177e4 LT |
460 | |
461 | return -1; | |
462 | } | |
463 | ||
1e7bdec6 | 464 | size_t fib_nlmsg_size(struct fib_info *fi) |
339bf98f TG |
465 | { |
466 | size_t payload = NLMSG_ALIGN(sizeof(struct rtmsg)) | |
467 | + nla_total_size(4) /* RTA_TABLE */ | |
468 | + nla_total_size(4) /* RTA_DST */ | |
469 | + nla_total_size(4) /* RTA_PRIORITY */ | |
ea697639 DB |
470 | + nla_total_size(4) /* RTA_PREFSRC */ |
471 | + nla_total_size(TCP_CA_NAME_MAX); /* RTAX_CC_ALGO */ | |
5481d73f | 472 | unsigned int nhs = fib_info_num_path(fi); |
339bf98f TG |
473 | |
474 | /* space for nested metrics */ | |
475 | payload += nla_total_size((RTAX_MAX * nla_total_size(4))); | |
476 | ||
4c7e8084 DA |
477 | if (fi->nh) |
478 | payload += nla_total_size(4); /* RTA_NH_ID */ | |
479 | ||
5481d73f | 480 | if (nhs) { |
571e7226 | 481 | size_t nh_encapsize = 0; |
5481d73f | 482 | /* Also handles the special case nhs == 1 */ |
339bf98f TG |
483 | |
484 | /* each nexthop is packed in an attribute */ | |
485 | size_t nhsize = nla_total_size(sizeof(struct rtnexthop)); | |
dcb1ecb5 | 486 | unsigned int i; |
339bf98f TG |
487 | |
488 | /* may contain flow and gateway attribute */ | |
489 | nhsize += 2 * nla_total_size(4); | |
490 | ||
571e7226 | 491 | /* grab encap info */ |
dcb1ecb5 DA |
492 | for (i = 0; i < fib_info_num_path(fi); i++) { |
493 | struct fib_nh_common *nhc = fib_info_nhc(fi, i); | |
494 | ||
495 | if (nhc->nhc_lwtstate) { | |
571e7226 RP |
496 | /* RTA_ENCAP_TYPE */ |
497 | nh_encapsize += lwtunnel_get_encap_size( | |
dcb1ecb5 | 498 | nhc->nhc_lwtstate); |
571e7226 RP |
499 | /* RTA_ENCAP */ |
500 | nh_encapsize += nla_total_size(2); | |
501 | } | |
dcb1ecb5 | 502 | } |
571e7226 | 503 | |
339bf98f | 504 | /* all nexthops are packed in a nested attribute */ |
5481d73f | 505 | payload += nla_total_size((nhs * nhsize) + nh_encapsize); |
571e7226 | 506 | |
339bf98f TG |
507 | } |
508 | ||
509 | return payload; | |
510 | } | |
511 | ||
81f7bf6c | 512 | void rtmsg_fib(int event, __be32 key, struct fib_alias *fa, |
9877b253 | 513 | int dst_len, u32 tb_id, const struct nl_info *info, |
b8f55831 | 514 | unsigned int nlm_flags) |
1da177e4 | 515 | { |
1e301fd0 | 516 | struct fib_rt_info fri; |
1da177e4 | 517 | struct sk_buff *skb; |
4e902c57 | 518 | u32 seq = info->nlh ? info->nlh->nlmsg_seq : 0; |
f21c7bc5 | 519 | int err = -ENOBUFS; |
1da177e4 | 520 | |
339bf98f | 521 | skb = nlmsg_new(fib_nlmsg_size(fa->fa_info), GFP_KERNEL); |
51456b29 | 522 | if (!skb) |
f21c7bc5 | 523 | goto errout; |
1da177e4 | 524 | |
1e301fd0 IS |
525 | fri.fi = fa->fa_info; |
526 | fri.tb_id = tb_id; | |
527 | fri.dst = key; | |
528 | fri.dst_len = dst_len; | |
888ade8f | 529 | fri.dscp = fa->fa_dscp; |
1e301fd0 | 530 | fri.type = fa->fa_type; |
9fcf986c ED |
531 | fri.offload = READ_ONCE(fa->offload); |
532 | fri.trap = READ_ONCE(fa->trap); | |
533 | fri.offload_failed = READ_ONCE(fa->offload_failed); | |
1e301fd0 | 534 | err = fib_dump_info(skb, info->portid, seq, event, &fri, nlm_flags); |
26932566 PM |
535 | if (err < 0) { |
536 | /* -EMSGSIZE implies BUG in fib_nlmsg_size() */ | |
537 | WARN_ON(err == -EMSGSIZE); | |
538 | kfree_skb(skb); | |
539 | goto errout; | |
540 | } | |
15e47304 | 541 | rtnl_notify(skb, info->nl_net, info->portid, RTNLGRP_IPV4_ROUTE, |
1ce85fe4 PNA |
542 | info->nlh, GFP_KERNEL); |
543 | return; | |
f21c7bc5 TG |
544 | errout: |
545 | if (err < 0) | |
4d1169c1 | 546 | rtnl_set_sk_err(info->nl_net, RTNLGRP_IPV4_ROUTE, err); |
1da177e4 LT |
547 | } |
548 | ||
c9cb6b6e SH |
549 | static int fib_detect_death(struct fib_info *fi, int order, |
550 | struct fib_info **last_resort, int *last_idx, | |
551 | int dflt) | |
1da177e4 | 552 | { |
619d1826 | 553 | const struct fib_nh_common *nhc = fib_info_nhc(fi, 0); |
1da177e4 LT |
554 | struct neighbour *n; |
555 | int state = NUD_NONE; | |
556 | ||
619d1826 DA |
557 | if (likely(nhc->nhc_gw_family == AF_INET)) |
558 | n = neigh_lookup(&arp_tbl, &nhc->nhc_gw.ipv4, nhc->nhc_dev); | |
559 | else if (nhc->nhc_gw_family == AF_INET6) | |
560 | n = neigh_lookup(ipv6_stub->nd_tbl, &nhc->nhc_gw.ipv6, | |
561 | nhc->nhc_dev); | |
562 | else | |
563 | n = NULL; | |
564 | ||
1da177e4 LT |
565 | if (n) { |
566 | state = n->nud_state; | |
567 | neigh_release(n); | |
88f64320 JA |
568 | } else { |
569 | return 0; | |
1da177e4 | 570 | } |
d9319100 | 571 | if (state == NUD_REACHABLE) |
1da177e4 | 572 | return 0; |
6a31d2a9 | 573 | if ((state & NUD_VALID) && order != dflt) |
1da177e4 | 574 | return 0; |
6a31d2a9 | 575 | if ((state & NUD_VALID) || |
88f64320 | 576 | (*last_idx < 0 && order > dflt && state != NUD_INCOMPLETE)) { |
1da177e4 LT |
577 | *last_resort = fi; |
578 | *last_idx = order; | |
579 | } | |
580 | return 1; | |
581 | } | |
582 | ||
faee6769 AA |
583 | int fib_nh_common_init(struct net *net, struct fib_nh_common *nhc, |
584 | struct nlattr *encap, u16 encap_type, | |
585 | void *cfg, gfp_t gfp_flags, | |
979e276e DA |
586 | struct netlink_ext_ack *extack) |
587 | { | |
0f457a36 DA |
588 | int err; |
589 | ||
590 | nhc->nhc_pcpu_rth_output = alloc_percpu_gfp(struct rtable __rcu *, | |
591 | gfp_flags); | |
592 | if (!nhc->nhc_pcpu_rth_output) | |
593 | return -ENOMEM; | |
594 | ||
979e276e DA |
595 | if (encap) { |
596 | struct lwtunnel_state *lwtstate; | |
979e276e DA |
597 | |
598 | if (encap_type == LWTUNNEL_ENCAP_NONE) { | |
599 | NL_SET_ERR_MSG(extack, "LWT encap type not specified"); | |
0f457a36 DA |
600 | err = -EINVAL; |
601 | goto lwt_failure; | |
979e276e | 602 | } |
faee6769 AA |
603 | err = lwtunnel_build_state(net, encap_type, encap, |
604 | nhc->nhc_family, cfg, &lwtstate, | |
605 | extack); | |
979e276e | 606 | if (err) |
0f457a36 | 607 | goto lwt_failure; |
979e276e DA |
608 | |
609 | nhc->nhc_lwtstate = lwtstate_get(lwtstate); | |
610 | } | |
611 | ||
612 | return 0; | |
0f457a36 DA |
613 | |
614 | lwt_failure: | |
615 | rt_fibinfo_free_cpus(nhc->nhc_pcpu_rth_output); | |
616 | nhc->nhc_pcpu_rth_output = NULL; | |
617 | return err; | |
979e276e DA |
618 | } |
619 | EXPORT_SYMBOL_GPL(fib_nh_common_init); | |
620 | ||
e4516ef6 DA |
621 | int fib_nh_init(struct net *net, struct fib_nh *nh, |
622 | struct fib_config *cfg, int nh_weight, | |
623 | struct netlink_ext_ack *extack) | |
624 | { | |
0f457a36 | 625 | int err; |
e4516ef6 | 626 | |
f1741730 DA |
627 | nh->fib_nh_family = AF_INET; |
628 | ||
faee6769 | 629 | err = fib_nh_common_init(net, &nh->nh_common, cfg->fc_encap, |
979e276e DA |
630 | cfg->fc_encap_type, cfg, GFP_KERNEL, extack); |
631 | if (err) | |
0f457a36 | 632 | return err; |
e4516ef6 | 633 | |
b75ed8b1 | 634 | nh->fib_nh_oif = cfg->fc_oif; |
a4ea5d43 DA |
635 | nh->fib_nh_gw_family = cfg->fc_gw_family; |
636 | if (cfg->fc_gw_family == AF_INET) | |
f35b794b | 637 | nh->fib_nh_gw4 = cfg->fc_gw4; |
a4ea5d43 DA |
638 | else if (cfg->fc_gw_family == AF_INET6) |
639 | nh->fib_nh_gw6 = cfg->fc_gw6; | |
640 | ||
b75ed8b1 | 641 | nh->fib_nh_flags = cfg->fc_flags; |
e4516ef6 DA |
642 | |
643 | #ifdef CONFIG_IP_ROUTE_CLASSID | |
644 | nh->nh_tclassid = cfg->fc_flow; | |
645 | if (nh->nh_tclassid) | |
213f5f8f | 646 | atomic_inc(&net->ipv4.fib_num_tclassid_users); |
e4516ef6 DA |
647 | #endif |
648 | #ifdef CONFIG_IP_ROUTE_MULTIPATH | |
b75ed8b1 | 649 | nh->fib_nh_weight = nh_weight; |
e4516ef6 DA |
650 | #endif |
651 | return 0; | |
e4516ef6 DA |
652 | } |
653 | ||
1da177e4 LT |
654 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
655 | ||
6d8422a1 DA |
656 | static int fib_count_nexthops(struct rtnexthop *rtnh, int remaining, |
657 | struct netlink_ext_ack *extack) | |
1da177e4 LT |
658 | { |
659 | int nhs = 0; | |
1da177e4 | 660 | |
4e902c57 | 661 | while (rtnh_ok(rtnh, remaining)) { |
1da177e4 | 662 | nhs++; |
4e902c57 TG |
663 | rtnh = rtnh_next(rtnh, &remaining); |
664 | } | |
665 | ||
666 | /* leftover implies invalid nexthop configuration, discard it */ | |
c3ab2b4e DA |
667 | if (remaining > 0) { |
668 | NL_SET_ERR_MSG(extack, | |
669 | "Invalid nexthop configuration - extra data after nexthops"); | |
670 | nhs = 0; | |
671 | } | |
672 | ||
673 | return nhs; | |
1da177e4 LT |
674 | } |
675 | ||
7a3429ba DA |
676 | static int fib_gw_from_attr(__be32 *gw, struct nlattr *nla, |
677 | struct netlink_ext_ack *extack) | |
678 | { | |
679 | if (nla_len(nla) < sizeof(*gw)) { | |
680 | NL_SET_ERR_MSG(extack, "Invalid IPv4 address in RTA_GATEWAY"); | |
681 | return -EINVAL; | |
682 | } | |
683 | ||
684 | *gw = nla_get_in_addr(nla); | |
685 | ||
686 | return 0; | |
687 | } | |
688 | ||
4c7e8084 | 689 | /* only called when fib_nh is integrated into fib_info */ |
4e902c57 | 690 | static int fib_get_nhs(struct fib_info *fi, struct rtnexthop *rtnh, |
6d8422a1 DA |
691 | int remaining, struct fib_config *cfg, |
692 | struct netlink_ext_ack *extack) | |
1da177e4 | 693 | { |
e4516ef6 DA |
694 | struct net *net = fi->fib_net; |
695 | struct fib_config fib_cfg; | |
5481d73f | 696 | struct fib_nh *nh; |
571e7226 RP |
697 | int ret; |
698 | ||
1da177e4 | 699 | change_nexthops(fi) { |
4e902c57 TG |
700 | int attrlen; |
701 | ||
e4516ef6 DA |
702 | memset(&fib_cfg, 0, sizeof(fib_cfg)); |
703 | ||
c3ab2b4e DA |
704 | if (!rtnh_ok(rtnh, remaining)) { |
705 | NL_SET_ERR_MSG(extack, | |
706 | "Invalid nexthop configuration - extra data after nexthop"); | |
1da177e4 | 707 | return -EINVAL; |
c3ab2b4e | 708 | } |
4e902c57 | 709 | |
c3ab2b4e DA |
710 | if (rtnh->rtnh_flags & (RTNH_F_DEAD | RTNH_F_LINKDOWN)) { |
711 | NL_SET_ERR_MSG(extack, | |
712 | "Invalid flags for nexthop - can not contain DEAD or LINKDOWN"); | |
80610229 | 713 | return -EINVAL; |
c3ab2b4e | 714 | } |
80610229 | 715 | |
e4516ef6 DA |
716 | fib_cfg.fc_flags = (cfg->fc_flags & ~0xFF) | rtnh->rtnh_flags; |
717 | fib_cfg.fc_oif = rtnh->rtnh_ifindex; | |
4e902c57 TG |
718 | |
719 | attrlen = rtnh_attrlen(rtnh); | |
720 | if (attrlen > 0) { | |
d1566268 | 721 | struct nlattr *nla, *nlav, *attrs = rtnh_attrs(rtnh); |
4e902c57 TG |
722 | |
723 | nla = nla_find(attrs, attrlen, RTA_GATEWAY); | |
d1566268 DA |
724 | nlav = nla_find(attrs, attrlen, RTA_VIA); |
725 | if (nla && nlav) { | |
726 | NL_SET_ERR_MSG(extack, | |
727 | "Nexthop configuration can not contain both GATEWAY and VIA"); | |
728 | return -EINVAL; | |
729 | } | |
f35b794b | 730 | if (nla) { |
7a3429ba DA |
731 | ret = fib_gw_from_attr(&fib_cfg.fc_gw4, nla, |
732 | extack); | |
733 | if (ret) | |
734 | goto errout; | |
735 | ||
d73f80f9 DA |
736 | if (fib_cfg.fc_gw4) |
737 | fib_cfg.fc_gw_family = AF_INET; | |
d1566268 DA |
738 | } else if (nlav) { |
739 | ret = fib_gw_from_via(&fib_cfg, nlav, extack); | |
740 | if (ret) | |
741 | goto errout; | |
f35b794b | 742 | } |
e4516ef6 | 743 | |
4e902c57 | 744 | nla = nla_find(attrs, attrlen, RTA_FLOW); |
664b9c4b DA |
745 | if (nla) { |
746 | if (nla_len(nla) < sizeof(u32)) { | |
747 | NL_SET_ERR_MSG(extack, "Invalid RTA_FLOW"); | |
748 | return -EINVAL; | |
749 | } | |
e4516ef6 | 750 | fib_cfg.fc_flow = nla_get_u32(nla); |
664b9c4b | 751 | } |
e4516ef6 DA |
752 | |
753 | fib_cfg.fc_encap = nla_find(attrs, attrlen, RTA_ENCAP); | |
8bda81a4 DA |
754 | /* RTA_ENCAP_TYPE length checked in |
755 | * lwtunnel_valid_encap_type_attr | |
756 | */ | |
e4516ef6 DA |
757 | nla = nla_find(attrs, attrlen, RTA_ENCAP_TYPE); |
758 | if (nla) | |
759 | fib_cfg.fc_encap_type = nla_get_u16(nla); | |
1da177e4 | 760 | } |
4e902c57 | 761 | |
e4516ef6 DA |
762 | ret = fib_nh_init(net, nexthop_nh, &fib_cfg, |
763 | rtnh->rtnh_hops + 1, extack); | |
764 | if (ret) | |
765 | goto errout; | |
766 | ||
4e902c57 | 767 | rtnh = rtnh_next(rtnh, &remaining); |
1da177e4 | 768 | } endfor_nexthops(fi); |
4e902c57 | 769 | |
571e7226 | 770 | ret = -EINVAL; |
5481d73f DA |
771 | nh = fib_info_nh(fi, 0); |
772 | if (cfg->fc_oif && nh->fib_nh_oif != cfg->fc_oif) { | |
e4516ef6 DA |
773 | NL_SET_ERR_MSG(extack, |
774 | "Nexthop device index does not match RTA_OIF"); | |
775 | goto errout; | |
776 | } | |
f35b794b | 777 | if (cfg->fc_gw_family) { |
5481d73f | 778 | if (cfg->fc_gw_family != nh->fib_nh_gw_family || |
f35b794b | 779 | (cfg->fc_gw_family == AF_INET && |
5481d73f | 780 | nh->fib_nh_gw4 != cfg->fc_gw4) || |
a4ea5d43 | 781 | (cfg->fc_gw_family == AF_INET6 && |
5481d73f | 782 | ipv6_addr_cmp(&nh->fib_nh_gw6, &cfg->fc_gw6))) { |
f35b794b | 783 | NL_SET_ERR_MSG(extack, |
a4ea5d43 | 784 | "Nexthop gateway does not match RTA_GATEWAY or RTA_VIA"); |
f35b794b DA |
785 | goto errout; |
786 | } | |
e4516ef6 DA |
787 | } |
788 | #ifdef CONFIG_IP_ROUTE_CLASSID | |
5481d73f | 789 | if (cfg->fc_flow && nh->nh_tclassid != cfg->fc_flow) { |
e4516ef6 DA |
790 | NL_SET_ERR_MSG(extack, |
791 | "Nexthop class id does not match RTA_FLOW"); | |
792 | goto errout; | |
793 | } | |
794 | #endif | |
795 | ret = 0; | |
571e7226 RP |
796 | errout: |
797 | return ret; | |
1da177e4 LT |
798 | } |
799 | ||
4c7e8084 | 800 | /* only called when fib_nh is integrated into fib_info */ |
0e884c78 PN |
801 | static void fib_rebalance(struct fib_info *fi) |
802 | { | |
803 | int total; | |
804 | int w; | |
0e884c78 | 805 | |
5481d73f | 806 | if (fib_info_num_path(fi) < 2) |
0e884c78 PN |
807 | return; |
808 | ||
809 | total = 0; | |
810 | for_nexthops(fi) { | |
b75ed8b1 | 811 | if (nh->fib_nh_flags & RTNH_F_DEAD) |
0e884c78 PN |
812 | continue; |
813 | ||
b75ed8b1 DA |
814 | if (ip_ignore_linkdown(nh->fib_nh_dev) && |
815 | nh->fib_nh_flags & RTNH_F_LINKDOWN) | |
0e884c78 PN |
816 | continue; |
817 | ||
b75ed8b1 | 818 | total += nh->fib_nh_weight; |
0e884c78 PN |
819 | } endfor_nexthops(fi); |
820 | ||
821 | w = 0; | |
822 | change_nexthops(fi) { | |
823 | int upper_bound; | |
824 | ||
b75ed8b1 | 825 | if (nexthop_nh->fib_nh_flags & RTNH_F_DEAD) { |
0e884c78 | 826 | upper_bound = -1; |
b75ed8b1 DA |
827 | } else if (ip_ignore_linkdown(nexthop_nh->fib_nh_dev) && |
828 | nexthop_nh->fib_nh_flags & RTNH_F_LINKDOWN) { | |
0e884c78 PN |
829 | upper_bound = -1; |
830 | } else { | |
b75ed8b1 | 831 | w += nexthop_nh->fib_nh_weight; |
0a837fe4 PN |
832 | upper_bound = DIV_ROUND_CLOSEST_ULL((u64)w << 31, |
833 | total) - 1; | |
0e884c78 PN |
834 | } |
835 | ||
b75ed8b1 | 836 | atomic_set(&nexthop_nh->fib_nh_upper_bound, upper_bound); |
0e884c78 | 837 | } endfor_nexthops(fi); |
0e884c78 | 838 | } |
0e884c78 PN |
839 | #else /* CONFIG_IP_ROUTE_MULTIPATH */ |
840 | ||
8373c6c8 DA |
841 | static int fib_get_nhs(struct fib_info *fi, struct rtnexthop *rtnh, |
842 | int remaining, struct fib_config *cfg, | |
843 | struct netlink_ext_ack *extack) | |
844 | { | |
845 | NL_SET_ERR_MSG(extack, "Multipath support not enabled in kernel"); | |
846 | ||
847 | return -EINVAL; | |
848 | } | |
849 | ||
0e884c78 | 850 | #define fib_rebalance(fi) do { } while (0) |
0e884c78 PN |
851 | |
852 | #endif /* CONFIG_IP_ROUTE_MULTIPATH */ | |
1da177e4 | 853 | |
faee6769 | 854 | static int fib_encap_match(struct net *net, u16 encap_type, |
e01286ef | 855 | struct nlattr *encap, |
30357d7d | 856 | const struct fib_nh *nh, |
9ae28727 DA |
857 | const struct fib_config *cfg, |
858 | struct netlink_ext_ack *extack) | |
571e7226 RP |
859 | { |
860 | struct lwtunnel_state *lwtstate; | |
df383e62 | 861 | int ret, result = 0; |
571e7226 RP |
862 | |
863 | if (encap_type == LWTUNNEL_ENCAP_NONE) | |
864 | return 0; | |
865 | ||
faee6769 | 866 | ret = lwtunnel_build_state(net, encap_type, encap, AF_INET, |
9ae28727 | 867 | cfg, &lwtstate, extack); |
df383e62 | 868 | if (!ret) { |
b75ed8b1 | 869 | result = lwtunnel_cmp_encap(lwtstate, nh->fib_nh_lws); |
df383e62 JB |
870 | lwtstate_free(lwtstate); |
871 | } | |
571e7226 | 872 | |
df383e62 | 873 | return result; |
571e7226 RP |
874 | } |
875 | ||
faee6769 | 876 | int fib_nh_match(struct net *net, struct fib_config *cfg, struct fib_info *fi, |
9ae28727 | 877 | struct netlink_ext_ack *extack) |
1da177e4 LT |
878 | { |
879 | #ifdef CONFIG_IP_ROUTE_MULTIPATH | |
4e902c57 TG |
880 | struct rtnexthop *rtnh; |
881 | int remaining; | |
1da177e4 LT |
882 | #endif |
883 | ||
4e902c57 | 884 | if (cfg->fc_priority && cfg->fc_priority != fi->fib_priority) |
1da177e4 LT |
885 | return 1; |
886 | ||
493ced1a DA |
887 | if (cfg->fc_nh_id) { |
888 | if (fi->nh && cfg->fc_nh_id == fi->nh->id) | |
889 | return 0; | |
890 | return 1; | |
891 | } | |
892 | ||
d5082d38 IS |
893 | if (fi->nh) { |
894 | if (cfg->fc_oif || cfg->fc_gw_family || cfg->fc_mp) | |
895 | return 1; | |
896 | return 0; | |
897 | } | |
61b91eb3 | 898 | |
f35b794b | 899 | if (cfg->fc_oif || cfg->fc_gw_family) { |
6bf92d70 | 900 | struct fib_nh *nh; |
5481d73f | 901 | |
6bf92d70 | 902 | nh = fib_info_nh(fi, 0); |
571e7226 | 903 | if (cfg->fc_encap) { |
faee6769 AA |
904 | if (fib_encap_match(net, cfg->fc_encap_type, |
905 | cfg->fc_encap, nh, cfg, extack)) | |
9ae28727 | 906 | return 1; |
571e7226 | 907 | } |
a8c6db1d SB |
908 | #ifdef CONFIG_IP_ROUTE_CLASSID |
909 | if (cfg->fc_flow && | |
5481d73f | 910 | cfg->fc_flow != nh->nh_tclassid) |
a8c6db1d SB |
911 | return 1; |
912 | #endif | |
5481d73f | 913 | if ((cfg->fc_oif && cfg->fc_oif != nh->fib_nh_oif) || |
f35b794b | 914 | (cfg->fc_gw_family && |
5481d73f | 915 | cfg->fc_gw_family != nh->fib_nh_gw_family)) |
f35b794b DA |
916 | return 1; |
917 | ||
918 | if (cfg->fc_gw_family == AF_INET && | |
5481d73f | 919 | cfg->fc_gw4 != nh->fib_nh_gw4) |
f35b794b DA |
920 | return 1; |
921 | ||
a4ea5d43 | 922 | if (cfg->fc_gw_family == AF_INET6 && |
5481d73f | 923 | ipv6_addr_cmp(&cfg->fc_gw6, &nh->fib_nh_gw6)) |
a4ea5d43 DA |
924 | return 1; |
925 | ||
f35b794b | 926 | return 0; |
1da177e4 LT |
927 | } |
928 | ||
929 | #ifdef CONFIG_IP_ROUTE_MULTIPATH | |
51456b29 | 930 | if (!cfg->fc_mp) |
1da177e4 | 931 | return 0; |
4e902c57 TG |
932 | |
933 | rtnh = cfg->fc_mp; | |
934 | remaining = cfg->fc_mp_len; | |
e905a9ed | 935 | |
1da177e4 | 936 | for_nexthops(fi) { |
4e902c57 | 937 | int attrlen; |
1da177e4 | 938 | |
4e902c57 | 939 | if (!rtnh_ok(rtnh, remaining)) |
1da177e4 | 940 | return -EINVAL; |
4e902c57 | 941 | |
b75ed8b1 | 942 | if (rtnh->rtnh_ifindex && rtnh->rtnh_ifindex != nh->fib_nh_oif) |
1da177e4 | 943 | return 1; |
4e902c57 TG |
944 | |
945 | attrlen = rtnh_attrlen(rtnh); | |
f76936d0 | 946 | if (attrlen > 0) { |
d1566268 | 947 | struct nlattr *nla, *nlav, *attrs = rtnh_attrs(rtnh); |
7a3429ba | 948 | int err; |
4e902c57 TG |
949 | |
950 | nla = nla_find(attrs, attrlen, RTA_GATEWAY); | |
d1566268 DA |
951 | nlav = nla_find(attrs, attrlen, RTA_VIA); |
952 | if (nla && nlav) { | |
953 | NL_SET_ERR_MSG(extack, | |
954 | "Nexthop configuration can not contain both GATEWAY and VIA"); | |
955 | return -EINVAL; | |
956 | } | |
957 | ||
958 | if (nla) { | |
7a3429ba DA |
959 | __be32 gw; |
960 | ||
961 | err = fib_gw_from_attr(&gw, nla, extack); | |
962 | if (err) | |
963 | return err; | |
964 | ||
d1566268 | 965 | if (nh->fib_nh_gw_family != AF_INET || |
7a3429ba | 966 | gw != nh->fib_nh_gw4) |
d1566268 DA |
967 | return 1; |
968 | } else if (nlav) { | |
969 | struct fib_config cfg2; | |
d1566268 DA |
970 | |
971 | err = fib_gw_from_via(&cfg2, nlav, extack); | |
972 | if (err) | |
973 | return err; | |
974 | ||
975 | switch (nh->fib_nh_gw_family) { | |
976 | case AF_INET: | |
977 | if (cfg2.fc_gw_family != AF_INET || | |
978 | cfg2.fc_gw4 != nh->fib_nh_gw4) | |
979 | return 1; | |
980 | break; | |
981 | case AF_INET6: | |
982 | if (cfg2.fc_gw_family != AF_INET6 || | |
983 | ipv6_addr_cmp(&cfg2.fc_gw6, | |
984 | &nh->fib_nh_gw6)) | |
985 | return 1; | |
986 | break; | |
987 | } | |
988 | } | |
989 | ||
c7066f70 | 990 | #ifdef CONFIG_IP_ROUTE_CLASSID |
4e902c57 | 991 | nla = nla_find(attrs, attrlen, RTA_FLOW); |
664b9c4b DA |
992 | if (nla) { |
993 | if (nla_len(nla) < sizeof(u32)) { | |
994 | NL_SET_ERR_MSG(extack, "Invalid RTA_FLOW"); | |
995 | return -EINVAL; | |
996 | } | |
997 | if (nla_get_u32(nla) != nh->nh_tclassid) | |
998 | return 1; | |
999 | } | |
1da177e4 LT |
1000 | #endif |
1001 | } | |
4e902c57 TG |
1002 | |
1003 | rtnh = rtnh_next(rtnh, &remaining); | |
1da177e4 LT |
1004 | } endfor_nexthops(fi); |
1005 | #endif | |
1006 | return 0; | |
1007 | } | |
1008 | ||
5f9ae3d9 XL |
1009 | bool fib_metrics_match(struct fib_config *cfg, struct fib_info *fi) |
1010 | { | |
1011 | struct nlattr *nla; | |
1012 | int remaining; | |
1013 | ||
1014 | if (!cfg->fc_mx) | |
1015 | return true; | |
1016 | ||
1017 | nla_for_each_attr(nla, cfg->fc_mx, cfg->fc_mx_len, remaining) { | |
1018 | int type = nla_type(nla); | |
d03a4557 | 1019 | u32 fi_val, val; |
5f9ae3d9 XL |
1020 | |
1021 | if (!type) | |
1022 | continue; | |
1023 | if (type > RTAX_MAX) | |
1024 | return false; | |
1025 | ||
5e9398a2 | 1026 | type = array_index_nospec(type, RTAX_MAX + 1); |
5f9ae3d9 XL |
1027 | if (type == RTAX_CC_ALGO) { |
1028 | char tmp[TCP_CA_NAME_MAX]; | |
1029 | bool ecn_ca = false; | |
1030 | ||
872f6903 | 1031 | nla_strscpy(tmp, nla, sizeof(tmp)); |
6670e152 | 1032 | val = tcp_ca_get_key_by_name(fi->fib_net, tmp, &ecn_ca); |
5f9ae3d9 | 1033 | } else { |
5b5e7a0d ED |
1034 | if (nla_len(nla) != sizeof(u32)) |
1035 | return false; | |
5f9ae3d9 XL |
1036 | val = nla_get_u32(nla); |
1037 | } | |
1038 | ||
d03a4557 PS |
1039 | fi_val = fi->fib_metrics->metrics[type - 1]; |
1040 | if (type == RTAX_FEATURES) | |
1041 | fi_val &= ~DST_FEATURE_ECN_CA; | |
1042 | ||
1043 | if (fi_val != val) | |
5f9ae3d9 XL |
1044 | return false; |
1045 | } | |
1046 | ||
1047 | return true; | |
1048 | } | |
1049 | ||
717a8f5b DA |
1050 | static int fib_check_nh_v6_gw(struct net *net, struct fib_nh *nh, |
1051 | u32 table, struct netlink_ext_ack *extack) | |
1052 | { | |
1053 | struct fib6_config cfg = { | |
1054 | .fc_table = table, | |
1055 | .fc_flags = nh->fib_nh_flags | RTF_GATEWAY, | |
1056 | .fc_ifindex = nh->fib_nh_oif, | |
1057 | .fc_gateway = nh->fib_nh_gw6, | |
1058 | }; | |
1059 | struct fib6_nh fib6_nh = {}; | |
1060 | int err; | |
1061 | ||
1062 | err = ipv6_stub->fib6_nh_init(net, &fib6_nh, &cfg, GFP_KERNEL, extack); | |
1063 | if (!err) { | |
1064 | nh->fib_nh_dev = fib6_nh.fib_nh_dev; | |
d62607c3 JK |
1065 | netdev_hold(nh->fib_nh_dev, &nh->fib_nh_dev_tracker, |
1066 | GFP_KERNEL); | |
717a8f5b DA |
1067 | nh->fib_nh_oif = nh->fib_nh_dev->ifindex; |
1068 | nh->fib_nh_scope = RT_SCOPE_LINK; | |
1069 | ||
1070 | ipv6_stub->fib6_nh_release(&fib6_nh); | |
1071 | } | |
1072 | ||
1073 | return err; | |
1074 | } | |
1da177e4 LT |
1075 | |
1076 | /* | |
6a31d2a9 ED |
1077 | * Picture |
1078 | * ------- | |
1079 | * | |
1080 | * Semantics of nexthop is very messy by historical reasons. | |
1081 | * We have to take into account, that: | |
1082 | * a) gateway can be actually local interface address, | |
1083 | * so that gatewayed route is direct. | |
1084 | * b) gateway must be on-link address, possibly | |
1085 | * described not by an ifaddr, but also by a direct route. | |
1086 | * c) If both gateway and interface are specified, they should not | |
1087 | * contradict. | |
1088 | * d) If we use tunnel routes, gateway could be not on-link. | |
1089 | * | |
1090 | * Attempt to reconcile all of these (alas, self-contradictory) conditions | |
1091 | * results in pretty ugly and hairy code with obscure logic. | |
1092 | * | |
1093 | * I chose to generalized it instead, so that the size | |
1094 | * of code does not increase practically, but it becomes | |
1095 | * much more general. | |
1096 | * Every prefix is assigned a "scope" value: "host" is local address, | |
1097 | * "link" is direct route, | |
1098 | * [ ... "site" ... "interior" ... ] | |
1099 | * and "universe" is true gateway route with global meaning. | |
1100 | * | |
1101 | * Every prefix refers to a set of "nexthop"s (gw, oif), | |
1102 | * where gw must have narrower scope. This recursion stops | |
1103 | * when gw has LOCAL scope or if "nexthop" is declared ONLINK, | |
1104 | * which means that gw is forced to be on link. | |
1105 | * | |
1106 | * Code is still hairy, but now it is apparently logically | |
1107 | * consistent and very flexible. F.e. as by-product it allows | |
1108 | * to co-exists in peace independent exterior and interior | |
1109 | * routing processes. | |
1110 | * | |
1111 | * Normally it looks as following. | |
1112 | * | |
1113 | * {universe prefix} -> (gw, oif) [scope link] | |
1114 | * | | |
1115 | * |-> {link prefix} -> (gw, oif) [scope local] | |
1116 | * | | |
1117 | * |-> {local prefix} (terminal node) | |
1da177e4 | 1118 | */ |
448d7248 DA |
1119 | static int fib_check_nh_v4_gw(struct net *net, struct fib_nh *nh, u32 table, |
1120 | u8 scope, struct netlink_ext_ack *extack) | |
1da177e4 | 1121 | { |
6a31d2a9 | 1122 | struct net_device *dev; |
448d7248 | 1123 | struct fib_result res; |
c3fee640 | 1124 | int err = 0; |
1da177e4 | 1125 | |
448d7248 DA |
1126 | if (nh->fib_nh_flags & RTNH_F_ONLINK) { |
1127 | unsigned int addr_type; | |
1da177e4 | 1128 | |
448d7248 DA |
1129 | if (scope >= RT_SCOPE_LINK) { |
1130 | NL_SET_ERR_MSG(extack, "Nexthop has invalid scope"); | |
1131 | return -EINVAL; | |
1da177e4 | 1132 | } |
448d7248 DA |
1133 | dev = __dev_get_by_index(net, nh->fib_nh_oif); |
1134 | if (!dev) { | |
1135 | NL_SET_ERR_MSG(extack, "Nexthop device required for onlink"); | |
1136 | return -ENODEV; | |
1da177e4 | 1137 | } |
448d7248 DA |
1138 | if (!(dev->flags & IFF_UP)) { |
1139 | NL_SET_ERR_MSG(extack, "Nexthop device is not up"); | |
1140 | return -ENETDOWN; | |
c3ab2b4e | 1141 | } |
448d7248 DA |
1142 | addr_type = inet_addr_type_dev_table(net, dev, nh->fib_nh_gw4); |
1143 | if (addr_type != RTN_UNICAST) { | |
1144 | NL_SET_ERR_MSG(extack, "Nexthop has invalid gateway"); | |
1145 | return -EINVAL; | |
c3ab2b4e | 1146 | } |
8a3d0316 | 1147 | if (!netif_carrier_ok(dev)) |
b75ed8b1 | 1148 | nh->fib_nh_flags |= RTNH_F_LINKDOWN; |
448d7248 | 1149 | nh->fib_nh_dev = dev; |
d62607c3 | 1150 | netdev_hold(dev, &nh->fib_nh_dev_tracker, GFP_ATOMIC); |
448d7248 DA |
1151 | nh->fib_nh_scope = RT_SCOPE_LINK; |
1152 | return 0; | |
1153 | } | |
1154 | rcu_read_lock(); | |
1155 | { | |
1156 | struct fib_table *tbl = NULL; | |
1157 | struct flowi4 fl4 = { | |
1158 | .daddr = nh->fib_nh_gw4, | |
1159 | .flowi4_scope = scope + 1, | |
1160 | .flowi4_oif = nh->fib_nh_oif, | |
1161 | .flowi4_iif = LOOPBACK_IFINDEX, | |
1162 | }; | |
1163 | ||
1164 | /* It is not necessary, but requires a bit of thinking */ | |
1165 | if (fl4.flowi4_scope < RT_SCOPE_LINK) | |
1166 | fl4.flowi4_scope = RT_SCOPE_LINK; | |
1167 | ||
5eea3a63 | 1168 | if (table && table != RT_TABLE_MAIN) |
448d7248 DA |
1169 | tbl = fib_get_table(net, table); |
1170 | ||
1171 | if (tbl) | |
1172 | err = fib_table_lookup(tbl, &fl4, &res, | |
1173 | FIB_LOOKUP_IGNORE_LINKSTATE | | |
1174 | FIB_LOOKUP_NOREF); | |
1175 | ||
1176 | /* on error or if no table given do full lookup. This | |
1177 | * is needed for example when nexthops are in the local | |
1178 | * table rather than the given table | |
1179 | */ | |
1180 | if (!tbl || err) { | |
1181 | err = fib_lookup(net, &fl4, &res, | |
1182 | FIB_LOOKUP_IGNORE_LINKSTATE); | |
c3ab2b4e | 1183 | } |
448d7248 DA |
1184 | |
1185 | if (err) { | |
1186 | NL_SET_ERR_MSG(extack, "Nexthop has invalid gateway"); | |
8723e1b4 | 1187 | goto out; |
c3ab2b4e | 1188 | } |
1da177e4 | 1189 | } |
448d7248 DA |
1190 | |
1191 | err = -EINVAL; | |
1192 | if (res.type != RTN_UNICAST && res.type != RTN_LOCAL) { | |
1193 | NL_SET_ERR_MSG(extack, "Nexthop has invalid gateway"); | |
1194 | goto out; | |
1195 | } | |
1196 | nh->fib_nh_scope = res.scope; | |
1197 | nh->fib_nh_oif = FIB_RES_OIF(res); | |
1198 | nh->fib_nh_dev = dev = FIB_RES_DEV(res); | |
1199 | if (!dev) { | |
1200 | NL_SET_ERR_MSG(extack, | |
1201 | "No egress device for nexthop gateway"); | |
1202 | goto out; | |
1203 | } | |
d62607c3 | 1204 | netdev_hold(dev, &nh->fib_nh_dev_tracker, GFP_ATOMIC); |
448d7248 DA |
1205 | if (!netif_carrier_ok(dev)) |
1206 | nh->fib_nh_flags |= RTNH_F_LINKDOWN; | |
1207 | err = (dev->flags & IFF_UP) ? 0 : -ENETDOWN; | |
8723e1b4 ED |
1208 | out: |
1209 | rcu_read_unlock(); | |
1210 | return err; | |
1da177e4 | 1211 | } |
448d7248 DA |
1212 | |
1213 | static int fib_check_nh_nongw(struct net *net, struct fib_nh *nh, | |
1214 | struct netlink_ext_ack *extack) | |
1215 | { | |
1216 | struct in_device *in_dev; | |
1217 | int err; | |
1218 | ||
1219 | if (nh->fib_nh_flags & (RTNH_F_PERVASIVE | RTNH_F_ONLINK)) { | |
1220 | NL_SET_ERR_MSG(extack, | |
1221 | "Invalid flags for nexthop - PERVASIVE and ONLINK can not be set"); | |
1222 | return -EINVAL; | |
1223 | } | |
1224 | ||
1225 | rcu_read_lock(); | |
1226 | ||
1227 | err = -ENODEV; | |
1228 | in_dev = inetdev_by_index(net, nh->fib_nh_oif); | |
1229 | if (!in_dev) | |
1230 | goto out; | |
1231 | err = -ENETDOWN; | |
1232 | if (!(in_dev->dev->flags & IFF_UP)) { | |
1233 | NL_SET_ERR_MSG(extack, "Device for nexthop is not up"); | |
1234 | goto out; | |
1235 | } | |
1236 | ||
1237 | nh->fib_nh_dev = in_dev->dev; | |
d62607c3 | 1238 | netdev_hold(nh->fib_nh_dev, &nh->fib_nh_dev_tracker, GFP_ATOMIC); |
e021c329 | 1239 | nh->fib_nh_scope = RT_SCOPE_HOST; |
448d7248 DA |
1240 | if (!netif_carrier_ok(nh->fib_nh_dev)) |
1241 | nh->fib_nh_flags |= RTNH_F_LINKDOWN; | |
1242 | err = 0; | |
1243 | out: | |
1244 | rcu_read_unlock(); | |
1245 | return err; | |
1246 | } | |
1247 | ||
ac1fab2d DA |
1248 | int fib_check_nh(struct net *net, struct fib_nh *nh, u32 table, u8 scope, |
1249 | struct netlink_ext_ack *extack) | |
448d7248 | 1250 | { |
448d7248 DA |
1251 | int err; |
1252 | ||
1253 | if (nh->fib_nh_gw_family == AF_INET) | |
ac1fab2d | 1254 | err = fib_check_nh_v4_gw(net, nh, table, scope, extack); |
717a8f5b DA |
1255 | else if (nh->fib_nh_gw_family == AF_INET6) |
1256 | err = fib_check_nh_v6_gw(net, nh, table, extack); | |
448d7248 DA |
1257 | else |
1258 | err = fib_check_nh_nongw(net, nh, extack); | |
1259 | ||
1260 | return err; | |
1261 | } | |
1da177e4 | 1262 | |
79eb15da ED |
1263 | static struct hlist_head * |
1264 | fib_info_laddrhash_bucket(const struct net *net, __be32 val) | |
1da177e4 | 1265 | { |
79eb15da ED |
1266 | u32 slot = hash_32(net_hash_mix(net) ^ (__force u32)val, |
1267 | fib_info_hash_bits); | |
1da177e4 | 1268 | |
79eb15da | 1269 | return &fib_info_laddrhash[slot]; |
1da177e4 LT |
1270 | } |
1271 | ||
123b9731 DM |
1272 | static void fib_info_hash_move(struct hlist_head *new_info_hash, |
1273 | struct hlist_head *new_laddrhash, | |
1274 | unsigned int new_size) | |
1da177e4 | 1275 | { |
b7656e7f | 1276 | struct hlist_head *old_info_hash, *old_laddrhash; |
123b9731 | 1277 | unsigned int old_size = fib_info_hash_size; |
ca73b68a | 1278 | unsigned int i; |
1da177e4 | 1279 | |
832b4c5e | 1280 | spin_lock_bh(&fib_info_lock); |
b7656e7f DM |
1281 | old_info_hash = fib_info_hash; |
1282 | old_laddrhash = fib_info_laddrhash; | |
123b9731 | 1283 | fib_info_hash_size = new_size; |
79eb15da | 1284 | fib_info_hash_bits = ilog2(new_size); |
1da177e4 LT |
1285 | |
1286 | for (i = 0; i < old_size; i++) { | |
1287 | struct hlist_head *head = &fib_info_hash[i]; | |
b67bfe0d | 1288 | struct hlist_node *n; |
1da177e4 LT |
1289 | struct fib_info *fi; |
1290 | ||
b67bfe0d | 1291 | hlist_for_each_entry_safe(fi, n, head, fib_hash) { |
1da177e4 LT |
1292 | struct hlist_head *dest; |
1293 | unsigned int new_hash; | |
1294 | ||
1da177e4 LT |
1295 | new_hash = fib_info_hashfn(fi); |
1296 | dest = &new_info_hash[new_hash]; | |
1297 | hlist_add_head(&fi->fib_hash, dest); | |
1298 | } | |
1299 | } | |
1300 | fib_info_hash = new_info_hash; | |
1301 | ||
79eb15da | 1302 | fib_info_laddrhash = new_laddrhash; |
1da177e4 | 1303 | for (i = 0; i < old_size; i++) { |
79eb15da | 1304 | struct hlist_head *lhead = &old_laddrhash[i]; |
b67bfe0d | 1305 | struct hlist_node *n; |
1da177e4 LT |
1306 | struct fib_info *fi; |
1307 | ||
b67bfe0d | 1308 | hlist_for_each_entry_safe(fi, n, lhead, fib_lhash) { |
1da177e4 | 1309 | struct hlist_head *ldest; |
1da177e4 | 1310 | |
79eb15da ED |
1311 | ldest = fib_info_laddrhash_bucket(fi->fib_net, |
1312 | fi->fib_prefsrc); | |
1da177e4 LT |
1313 | hlist_add_head(&fi->fib_lhash, ldest); |
1314 | } | |
1315 | } | |
1da177e4 | 1316 | |
832b4c5e | 1317 | spin_unlock_bh(&fib_info_lock); |
b7656e7f | 1318 | |
ca73b68a ED |
1319 | kvfree(old_info_hash); |
1320 | kvfree(old_laddrhash); | |
1da177e4 LT |
1321 | } |
1322 | ||
dcb1ecb5 DA |
1323 | __be32 fib_info_update_nhc_saddr(struct net *net, struct fib_nh_common *nhc, |
1324 | unsigned char scope) | |
436c3b66 | 1325 | { |
dcb1ecb5 DA |
1326 | struct fib_nh *nh; |
1327 | ||
1328 | if (nhc->nhc_family != AF_INET) | |
1329 | return inet_select_addr(nhc->nhc_dev, 0, scope); | |
1330 | ||
1331 | nh = container_of(nhc, struct fib_nh, nh_common); | |
c3669486 | 1332 | nh->nh_saddr = inet_select_addr(nh->fib_nh_dev, nh->fib_nh_gw4, scope); |
436c3b66 DM |
1333 | nh->nh_saddr_genid = atomic_read(&net->ipv4.dev_addr_genid); |
1334 | ||
1335 | return nh->nh_saddr; | |
1336 | } | |
1337 | ||
eba618ab DA |
1338 | __be32 fib_result_prefsrc(struct net *net, struct fib_result *res) |
1339 | { | |
1340 | struct fib_nh_common *nhc = res->nhc; | |
eba618ab DA |
1341 | |
1342 | if (res->fi->fib_prefsrc) | |
1343 | return res->fi->fib_prefsrc; | |
1344 | ||
dcb1ecb5 DA |
1345 | if (nhc->nhc_family == AF_INET) { |
1346 | struct fib_nh *nh; | |
eba618ab | 1347 | |
dcb1ecb5 DA |
1348 | nh = container_of(nhc, struct fib_nh, nh_common); |
1349 | if (nh->nh_saddr_genid == atomic_read(&net->ipv4.dev_addr_genid)) | |
1350 | return nh->nh_saddr; | |
1351 | } | |
1352 | ||
1353 | return fib_info_update_nhc_saddr(net, nhc, res->fi->fib_scope); | |
eba618ab DA |
1354 | } |
1355 | ||
021dd3b8 DA |
1356 | static bool fib_valid_prefsrc(struct fib_config *cfg, __be32 fib_prefsrc) |
1357 | { | |
1358 | if (cfg->fc_type != RTN_LOCAL || !cfg->fc_dst || | |
1359 | fib_prefsrc != cfg->fc_dst) { | |
9b8ff518 | 1360 | u32 tb_id = cfg->fc_table; |
e1b8d903 | 1361 | int rc; |
021dd3b8 DA |
1362 | |
1363 | if (tb_id == RT_TABLE_MAIN) | |
1364 | tb_id = RT_TABLE_LOCAL; | |
1365 | ||
e1b8d903 DA |
1366 | rc = inet_addr_type_table(cfg->fc_nlinfo.nl_net, |
1367 | fib_prefsrc, tb_id); | |
1368 | ||
1369 | if (rc != RTN_LOCAL && tb_id != RT_TABLE_LOCAL) { | |
1370 | rc = inet_addr_type_table(cfg->fc_nlinfo.nl_net, | |
1371 | fib_prefsrc, RT_TABLE_LOCAL); | |
021dd3b8 | 1372 | } |
e1b8d903 DA |
1373 | |
1374 | if (rc != RTN_LOCAL) | |
1375 | return false; | |
021dd3b8 DA |
1376 | } |
1377 | return true; | |
1378 | } | |
1379 | ||
6d8422a1 DA |
1380 | struct fib_info *fib_create_info(struct fib_config *cfg, |
1381 | struct netlink_ext_ack *extack) | |
1da177e4 LT |
1382 | { |
1383 | int err; | |
1384 | struct fib_info *fi = NULL; | |
4c7e8084 | 1385 | struct nexthop *nh = NULL; |
1da177e4 | 1386 | struct fib_info *ofi; |
1da177e4 | 1387 | int nhs = 1; |
7462bd74 | 1388 | struct net *net = cfg->fc_nlinfo.nl_net; |
1da177e4 | 1389 | |
4c8237cd DM |
1390 | if (cfg->fc_type > RTN_MAX) |
1391 | goto err_inval; | |
1392 | ||
1da177e4 | 1393 | /* Fast check to catch the most weird cases */ |
c3ab2b4e DA |
1394 | if (fib_props[cfg->fc_type].scope > cfg->fc_scope) { |
1395 | NL_SET_ERR_MSG(extack, "Invalid scope"); | |
1da177e4 | 1396 | goto err_inval; |
c3ab2b4e | 1397 | } |
1da177e4 | 1398 | |
c3ab2b4e DA |
1399 | if (cfg->fc_flags & (RTNH_F_DEAD | RTNH_F_LINKDOWN)) { |
1400 | NL_SET_ERR_MSG(extack, | |
1401 | "Invalid rtm_flags - can not contain DEAD or LINKDOWN"); | |
80610229 | 1402 | goto err_inval; |
c3ab2b4e | 1403 | } |
80610229 | 1404 | |
493ced1a | 1405 | if (cfg->fc_nh_id) { |
6c48ea5f DA |
1406 | if (!cfg->fc_mx) { |
1407 | fi = fib_find_info_nh(net, cfg); | |
1408 | if (fi) { | |
79976892 | 1409 | refcount_inc(&fi->fib_treeref); |
6c48ea5f DA |
1410 | return fi; |
1411 | } | |
1412 | } | |
1413 | ||
493ced1a DA |
1414 | nh = nexthop_find_by_id(net, cfg->fc_nh_id); |
1415 | if (!nh) { | |
1416 | NL_SET_ERR_MSG(extack, "Nexthop id does not exist"); | |
1417 | goto err_inval; | |
1418 | } | |
1419 | nhs = 0; | |
1420 | } | |
1421 | ||
1da177e4 | 1422 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
4e902c57 | 1423 | if (cfg->fc_mp) { |
6d8422a1 | 1424 | nhs = fib_count_nexthops(cfg->fc_mp, cfg->fc_mp_len, extack); |
1da177e4 LT |
1425 | if (nhs == 0) |
1426 | goto err_inval; | |
1427 | } | |
1428 | #endif | |
1da177e4 LT |
1429 | |
1430 | err = -ENOBUFS; | |
0a6e6b3c ED |
1431 | |
1432 | /* Paired with WRITE_ONCE() in fib_release_info() */ | |
1433 | if (READ_ONCE(fib_info_cnt) >= fib_info_hash_size) { | |
123b9731 | 1434 | unsigned int new_size = fib_info_hash_size << 1; |
1da177e4 LT |
1435 | struct hlist_head *new_info_hash; |
1436 | struct hlist_head *new_laddrhash; | |
ca73b68a | 1437 | size_t bytes; |
1da177e4 LT |
1438 | |
1439 | if (!new_size) | |
d94ce9b2 | 1440 | new_size = 16; |
ca73b68a ED |
1441 | bytes = (size_t)new_size * sizeof(struct hlist_head *); |
1442 | new_info_hash = kvzalloc(bytes, GFP_KERNEL); | |
1443 | new_laddrhash = kvzalloc(bytes, GFP_KERNEL); | |
1da177e4 | 1444 | if (!new_info_hash || !new_laddrhash) { |
ca73b68a ED |
1445 | kvfree(new_info_hash); |
1446 | kvfree(new_laddrhash); | |
1447 | } else { | |
123b9731 | 1448 | fib_info_hash_move(new_info_hash, new_laddrhash, new_size); |
ca73b68a | 1449 | } |
123b9731 | 1450 | if (!fib_info_hash_size) |
1da177e4 LT |
1451 | goto failure; |
1452 | } | |
1453 | ||
1f533ba6 | 1454 | fi = kzalloc(struct_size(fi, fib_nh, nhs), GFP_KERNEL); |
51456b29 | 1455 | if (!fi) |
1da177e4 | 1456 | goto failure; |
767a2217 | 1457 | fi->fib_metrics = ip_fib_metrics_init(fi->fib_net, cfg->fc_mx, |
d7e774f3 | 1458 | cfg->fc_mx_len, extack); |
88e235b8 | 1459 | if (IS_ERR(fi->fib_metrics)) { |
767a2217 DA |
1460 | err = PTR_ERR(fi->fib_metrics); |
1461 | kfree(fi); | |
1462 | return ERR_PTR(err); | |
187e5b3a | 1463 | } |
767a2217 | 1464 | |
efd7ef1c | 1465 | fi->fib_net = net; |
4e902c57 | 1466 | fi->fib_protocol = cfg->fc_protocol; |
37e826c5 | 1467 | fi->fib_scope = cfg->fc_scope; |
4e902c57 TG |
1468 | fi->fib_flags = cfg->fc_flags; |
1469 | fi->fib_priority = cfg->fc_priority; | |
1470 | fi->fib_prefsrc = cfg->fc_prefsrc; | |
f4ef85bb | 1471 | fi->fib_type = cfg->fc_type; |
5a56a0b3 | 1472 | fi->fib_tb_id = cfg->fc_table; |
1da177e4 LT |
1473 | |
1474 | fi->fib_nhs = nhs; | |
4c7e8084 DA |
1475 | if (nh) { |
1476 | if (!nexthop_get(nh)) { | |
1477 | NL_SET_ERR_MSG(extack, "Nexthop has been deleted"); | |
1478 | err = -EINVAL; | |
1479 | } else { | |
1480 | err = 0; | |
1481 | fi->nh = nh; | |
1482 | } | |
1483 | } else { | |
1484 | change_nexthops(fi) { | |
1485 | nexthop_nh->nh_parent = fi; | |
1486 | } endfor_nexthops(fi) | |
1da177e4 | 1487 | |
4c7e8084 DA |
1488 | if (cfg->fc_mp) |
1489 | err = fib_get_nhs(fi, cfg->fc_mp, cfg->fc_mp_len, cfg, | |
1490 | extack); | |
1491 | else | |
1492 | err = fib_nh_init(net, fi->fib_nh, cfg, 1, extack); | |
1493 | } | |
571e7226 | 1494 | |
e4516ef6 DA |
1495 | if (err != 0) |
1496 | goto failure; | |
1da177e4 | 1497 | |
4e902c57 | 1498 | if (fib_props[cfg->fc_type].error) { |
f35b794b | 1499 | if (cfg->fc_gw_family || cfg->fc_oif || cfg->fc_mp) { |
c3ab2b4e DA |
1500 | NL_SET_ERR_MSG(extack, |
1501 | "Gateway, device and multipath can not be specified for this route type"); | |
1da177e4 | 1502 | goto err_inval; |
c3ab2b4e | 1503 | } |
1da177e4 | 1504 | goto link_it; |
4c8237cd DM |
1505 | } else { |
1506 | switch (cfg->fc_type) { | |
1507 | case RTN_UNICAST: | |
1508 | case RTN_LOCAL: | |
1509 | case RTN_BROADCAST: | |
1510 | case RTN_ANYCAST: | |
1511 | case RTN_MULTICAST: | |
1512 | break; | |
1513 | default: | |
c3ab2b4e | 1514 | NL_SET_ERR_MSG(extack, "Invalid route type"); |
4c8237cd DM |
1515 | goto err_inval; |
1516 | } | |
1da177e4 LT |
1517 | } |
1518 | ||
c3ab2b4e DA |
1519 | if (cfg->fc_scope > RT_SCOPE_HOST) { |
1520 | NL_SET_ERR_MSG(extack, "Invalid scope"); | |
1da177e4 | 1521 | goto err_inval; |
c3ab2b4e | 1522 | } |
1da177e4 | 1523 | |
4c7e8084 DA |
1524 | if (fi->nh) { |
1525 | err = fib_check_nexthop(fi->nh, cfg->fc_scope, extack); | |
1526 | if (err) | |
1527 | goto failure; | |
1528 | } else if (cfg->fc_scope == RT_SCOPE_HOST) { | |
1da177e4 LT |
1529 | struct fib_nh *nh = fi->fib_nh; |
1530 | ||
1531 | /* Local address is added. */ | |
c3ab2b4e DA |
1532 | if (nhs != 1) { |
1533 | NL_SET_ERR_MSG(extack, | |
1534 | "Route with host scope can not have multiple nexthops"); | |
6d8422a1 | 1535 | goto err_inval; |
c3ab2b4e | 1536 | } |
bdf00467 | 1537 | if (nh->fib_nh_gw_family) { |
c3ab2b4e DA |
1538 | NL_SET_ERR_MSG(extack, |
1539 | "Route with host scope can not have a gateway"); | |
1da177e4 | 1540 | goto err_inval; |
c3ab2b4e | 1541 | } |
b75ed8b1 | 1542 | nh->fib_nh_scope = RT_SCOPE_NOWHERE; |
5481d73f | 1543 | nh->fib_nh_dev = dev_get_by_index(net, nh->fib_nh_oif); |
1da177e4 | 1544 | err = -ENODEV; |
b75ed8b1 | 1545 | if (!nh->fib_nh_dev) |
1da177e4 | 1546 | goto failure; |
e44b14eb ED |
1547 | netdev_tracker_alloc(nh->fib_nh_dev, &nh->fib_nh_dev_tracker, |
1548 | GFP_KERNEL); | |
1da177e4 | 1549 | } else { |
8a3d0316 AG |
1550 | int linkdown = 0; |
1551 | ||
1da177e4 | 1552 | change_nexthops(fi) { |
ac1fab2d DA |
1553 | err = fib_check_nh(cfg->fc_nlinfo.nl_net, nexthop_nh, |
1554 | cfg->fc_table, cfg->fc_scope, | |
1555 | extack); | |
6a31d2a9 | 1556 | if (err != 0) |
1da177e4 | 1557 | goto failure; |
b75ed8b1 | 1558 | if (nexthop_nh->fib_nh_flags & RTNH_F_LINKDOWN) |
8a3d0316 | 1559 | linkdown++; |
1da177e4 | 1560 | } endfor_nexthops(fi) |
8a3d0316 AG |
1561 | if (linkdown == fi->fib_nhs) |
1562 | fi->fib_flags |= RTNH_F_LINKDOWN; | |
1da177e4 LT |
1563 | } |
1564 | ||
c3ab2b4e DA |
1565 | if (fi->fib_prefsrc && !fib_valid_prefsrc(cfg, fi->fib_prefsrc)) { |
1566 | NL_SET_ERR_MSG(extack, "Invalid prefsrc address"); | |
021dd3b8 | 1567 | goto err_inval; |
c3ab2b4e | 1568 | } |
1da177e4 | 1569 | |
4c7e8084 DA |
1570 | if (!fi->nh) { |
1571 | change_nexthops(fi) { | |
1572 | fib_info_update_nhc_saddr(net, &nexthop_nh->nh_common, | |
1573 | fi->fib_scope); | |
1574 | if (nexthop_nh->fib_nh_gw_family == AF_INET6) | |
1575 | fi->fib_nh_is_v6 = true; | |
1576 | } endfor_nexthops(fi) | |
1fc050a1 | 1577 | |
4c7e8084 DA |
1578 | fib_rebalance(fi); |
1579 | } | |
0e884c78 | 1580 | |
1da177e4 | 1581 | link_it: |
6a31d2a9 ED |
1582 | ofi = fib_find_info(fi); |
1583 | if (ofi) { | |
1da177e4 LT |
1584 | fi->fib_dead = 1; |
1585 | free_fib_info(fi); | |
79976892 | 1586 | refcount_inc(&ofi->fib_treeref); |
1da177e4 LT |
1587 | return ofi; |
1588 | } | |
1589 | ||
28814cd1 | 1590 | refcount_set(&fi->fib_treeref, 1); |
0029c0de | 1591 | refcount_set(&fi->fib_clntref, 1); |
832b4c5e | 1592 | spin_lock_bh(&fib_info_lock); |
0a6e6b3c | 1593 | fib_info_cnt++; |
1da177e4 LT |
1594 | hlist_add_head(&fi->fib_hash, |
1595 | &fib_info_hash[fib_info_hashfn(fi)]); | |
1596 | if (fi->fib_prefsrc) { | |
1597 | struct hlist_head *head; | |
1598 | ||
79eb15da | 1599 | head = fib_info_laddrhash_bucket(net, fi->fib_prefsrc); |
1da177e4 LT |
1600 | hlist_add_head(&fi->fib_lhash, head); |
1601 | } | |
4c7e8084 DA |
1602 | if (fi->nh) { |
1603 | list_add(&fi->nh_list, &nh->fi_list); | |
1604 | } else { | |
1605 | change_nexthops(fi) { | |
1606 | struct hlist_head *head; | |
1da177e4 | 1607 | |
4c7e8084 DA |
1608 | if (!nexthop_nh->fib_nh_dev) |
1609 | continue; | |
d07418af | 1610 | head = fib_info_devhash_bucket(nexthop_nh->fib_nh_dev); |
4c7e8084 DA |
1611 | hlist_add_head(&nexthop_nh->nh_hash, head); |
1612 | } endfor_nexthops(fi) | |
1613 | } | |
832b4c5e | 1614 | spin_unlock_bh(&fib_info_lock); |
1da177e4 LT |
1615 | return fi; |
1616 | ||
1617 | err_inval: | |
1618 | err = -EINVAL; | |
1619 | ||
1620 | failure: | |
e905a9ed | 1621 | if (fi) { |
1da177e4 LT |
1622 | fi->fib_dead = 1; |
1623 | free_fib_info(fi); | |
1624 | } | |
4e902c57 TG |
1625 | |
1626 | return ERR_PTR(err); | |
1da177e4 LT |
1627 | } |
1628 | ||
c0a72077 | 1629 | int fib_nexthop_info(struct sk_buff *skb, const struct fib_nh_common *nhc, |
7bdf4de1 | 1630 | u8 rt_family, unsigned char *flags, bool skip_oif) |
b0f60193 | 1631 | { |
c2364199 | 1632 | if (nhc->nhc_flags & RTNH_F_DEAD) |
b0f60193 DA |
1633 | *flags |= RTNH_F_DEAD; |
1634 | ||
c2364199 | 1635 | if (nhc->nhc_flags & RTNH_F_LINKDOWN) { |
b0f60193 DA |
1636 | *flags |= RTNH_F_LINKDOWN; |
1637 | ||
1638 | rcu_read_lock(); | |
c2364199 DA |
1639 | switch (nhc->nhc_family) { |
1640 | case AF_INET: | |
1641 | if (ip_ignore_linkdown(nhc->nhc_dev)) | |
1642 | *flags |= RTNH_F_DEAD; | |
1643 | break; | |
c0a72077 DA |
1644 | case AF_INET6: |
1645 | if (ip6_ignore_linkdown(nhc->nhc_dev)) | |
1646 | *flags |= RTNH_F_DEAD; | |
1647 | break; | |
c2364199 | 1648 | } |
b0f60193 DA |
1649 | rcu_read_unlock(); |
1650 | } | |
1651 | ||
bdf00467 DA |
1652 | switch (nhc->nhc_gw_family) { |
1653 | case AF_INET: | |
1654 | if (nla_put_in_addr(skb, RTA_GATEWAY, nhc->nhc_gw.ipv4)) | |
1655 | goto nla_put_failure; | |
1656 | break; | |
1657 | case AF_INET6: | |
d1566268 DA |
1658 | /* if gateway family does not match nexthop family |
1659 | * gateway is encoded as RTA_VIA | |
1660 | */ | |
7bdf4de1 | 1661 | if (rt_family != nhc->nhc_gw_family) { |
d1566268 DA |
1662 | int alen = sizeof(struct in6_addr); |
1663 | struct nlattr *nla; | |
1664 | struct rtvia *via; | |
1665 | ||
1666 | nla = nla_reserve(skb, RTA_VIA, alen + 2); | |
1667 | if (!nla) | |
1668 | goto nla_put_failure; | |
1669 | ||
1670 | via = nla_data(nla); | |
1671 | via->rtvia_family = AF_INET6; | |
1672 | memcpy(via->rtvia_addr, &nhc->nhc_gw.ipv6, alen); | |
1673 | } else if (nla_put_in6_addr(skb, RTA_GATEWAY, | |
1674 | &nhc->nhc_gw.ipv6) < 0) { | |
bdf00467 | 1675 | goto nla_put_failure; |
d1566268 | 1676 | } |
bdf00467 | 1677 | break; |
c2364199 | 1678 | } |
b0f60193 | 1679 | |
ca787e0b IS |
1680 | *flags |= (nhc->nhc_flags & |
1681 | (RTNH_F_ONLINK | RTNH_F_OFFLOAD | RTNH_F_TRAP)); | |
b0f60193 | 1682 | |
c2364199 DA |
1683 | if (!skip_oif && nhc->nhc_dev && |
1684 | nla_put_u32(skb, RTA_OIF, nhc->nhc_dev->ifindex)) | |
b0f60193 DA |
1685 | goto nla_put_failure; |
1686 | ||
c2364199 | 1687 | if (nhc->nhc_lwtstate && |
ffa8ce54 DA |
1688 | lwtunnel_fill_encap(skb, nhc->nhc_lwtstate, |
1689 | RTA_ENCAP, RTA_ENCAP_TYPE) < 0) | |
b0f60193 DA |
1690 | goto nla_put_failure; |
1691 | ||
1692 | return 0; | |
1693 | ||
1694 | nla_put_failure: | |
1695 | return -EMSGSIZE; | |
1696 | } | |
c0a72077 | 1697 | EXPORT_SYMBOL_GPL(fib_nexthop_info); |
b0f60193 | 1698 | |
c0a72077 DA |
1699 | #if IS_ENABLED(CONFIG_IP_ROUTE_MULTIPATH) || IS_ENABLED(CONFIG_IPV6) |
1700 | int fib_add_nexthop(struct sk_buff *skb, const struct fib_nh_common *nhc, | |
597aa16c | 1701 | int nh_weight, u8 rt_family, u32 nh_tclassid) |
b0f60193 | 1702 | { |
c2364199 | 1703 | const struct net_device *dev = nhc->nhc_dev; |
b0f60193 | 1704 | struct rtnexthop *rtnh; |
ecc5663c | 1705 | unsigned char flags = 0; |
b0f60193 DA |
1706 | |
1707 | rtnh = nla_reserve_nohdr(skb, sizeof(*rtnh)); | |
1708 | if (!rtnh) | |
1709 | goto nla_put_failure; | |
1710 | ||
c2364199 | 1711 | rtnh->rtnh_hops = nh_weight - 1; |
b0f60193 DA |
1712 | rtnh->rtnh_ifindex = dev ? dev->ifindex : 0; |
1713 | ||
7bdf4de1 | 1714 | if (fib_nexthop_info(skb, nhc, rt_family, &flags, true) < 0) |
b0f60193 DA |
1715 | goto nla_put_failure; |
1716 | ||
1717 | rtnh->rtnh_flags = flags; | |
1718 | ||
597aa16c XL |
1719 | if (nh_tclassid && nla_put_u32(skb, RTA_FLOW, nh_tclassid)) |
1720 | goto nla_put_failure; | |
1721 | ||
b0f60193 DA |
1722 | /* length of rtnetlink header + attributes */ |
1723 | rtnh->rtnh_len = nlmsg_get_pos(skb) - (void *)rtnh; | |
1724 | ||
1725 | return 0; | |
1726 | ||
1727 | nla_put_failure: | |
1728 | return -EMSGSIZE; | |
1729 | } | |
c0a72077 | 1730 | EXPORT_SYMBOL_GPL(fib_add_nexthop); |
c2364199 | 1731 | #endif |
b0f60193 | 1732 | |
c2364199 | 1733 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
b0f60193 DA |
1734 | static int fib_add_multipath(struct sk_buff *skb, struct fib_info *fi) |
1735 | { | |
1736 | struct nlattr *mp; | |
1737 | ||
ae0be8de | 1738 | mp = nla_nest_start_noflag(skb, RTA_MULTIPATH); |
b0f60193 DA |
1739 | if (!mp) |
1740 | goto nla_put_failure; | |
1741 | ||
4c7e8084 | 1742 | if (unlikely(fi->nh)) { |
7bdf4de1 | 1743 | if (nexthop_mpath_fill_node(skb, fi->nh, AF_INET) < 0) |
4c7e8084 DA |
1744 | goto nla_put_failure; |
1745 | goto mp_end; | |
1746 | } | |
1747 | ||
b0f60193 | 1748 | for_nexthops(fi) { |
597aa16c | 1749 | u32 nh_tclassid = 0; |
b0f60193 | 1750 | #ifdef CONFIG_IP_ROUTE_CLASSID |
597aa16c | 1751 | nh_tclassid = nh->nh_tclassid; |
b0f60193 | 1752 | #endif |
597aa16c XL |
1753 | if (fib_add_nexthop(skb, &nh->nh_common, nh->fib_nh_weight, |
1754 | AF_INET, nh_tclassid) < 0) | |
1755 | goto nla_put_failure; | |
b0f60193 DA |
1756 | } endfor_nexthops(fi); |
1757 | ||
4c7e8084 | 1758 | mp_end: |
b0f60193 DA |
1759 | nla_nest_end(skb, mp); |
1760 | ||
1761 | return 0; | |
1762 | ||
1763 | nla_put_failure: | |
1764 | return -EMSGSIZE; | |
1765 | } | |
1766 | #else | |
1767 | static int fib_add_multipath(struct sk_buff *skb, struct fib_info *fi) | |
1768 | { | |
1769 | return 0; | |
1770 | } | |
1771 | #endif | |
1772 | ||
15e47304 | 1773 | int fib_dump_info(struct sk_buff *skb, u32 portid, u32 seq, int event, |
08554789 | 1774 | const struct fib_rt_info *fri, unsigned int flags) |
1da177e4 | 1775 | { |
1e301fd0 IS |
1776 | unsigned int nhs = fib_info_num_path(fri->fi); |
1777 | struct fib_info *fi = fri->fi; | |
1778 | u32 tb_id = fri->tb_id; | |
be403ea1 | 1779 | struct nlmsghdr *nlh; |
1da177e4 | 1780 | struct rtmsg *rtm; |
1da177e4 | 1781 | |
15e47304 | 1782 | nlh = nlmsg_put(skb, portid, seq, event, sizeof(*rtm), flags); |
51456b29 | 1783 | if (!nlh) |
26932566 | 1784 | return -EMSGSIZE; |
be403ea1 TG |
1785 | |
1786 | rtm = nlmsg_data(nlh); | |
1da177e4 | 1787 | rtm->rtm_family = AF_INET; |
1e301fd0 | 1788 | rtm->rtm_dst_len = fri->dst_len; |
1da177e4 | 1789 | rtm->rtm_src_len = 0; |
888ade8f | 1790 | rtm->rtm_tos = inet_dscp_to_dsfield(fri->dscp); |
709772e6 KPO |
1791 | if (tb_id < 256) |
1792 | rtm->rtm_table = tb_id; | |
1793 | else | |
1794 | rtm->rtm_table = RT_TABLE_COMPAT; | |
f3756b79 DM |
1795 | if (nla_put_u32(skb, RTA_TABLE, tb_id)) |
1796 | goto nla_put_failure; | |
1e301fd0 | 1797 | rtm->rtm_type = fri->type; |
1da177e4 | 1798 | rtm->rtm_flags = fi->fib_flags; |
37e826c5 | 1799 | rtm->rtm_scope = fi->fib_scope; |
1da177e4 | 1800 | rtm->rtm_protocol = fi->fib_protocol; |
be403ea1 | 1801 | |
f3756b79 | 1802 | if (rtm->rtm_dst_len && |
1e301fd0 | 1803 | nla_put_in_addr(skb, RTA_DST, fri->dst)) |
f3756b79 DM |
1804 | goto nla_put_failure; |
1805 | if (fi->fib_priority && | |
1806 | nla_put_u32(skb, RTA_PRIORITY, fi->fib_priority)) | |
1807 | goto nla_put_failure; | |
3fb07daf | 1808 | if (rtnetlink_put_metrics(skb, fi->fib_metrics->metrics) < 0) |
be403ea1 TG |
1809 | goto nla_put_failure; |
1810 | ||
f3756b79 | 1811 | if (fi->fib_prefsrc && |
930345ea | 1812 | nla_put_in_addr(skb, RTA_PREFSRC, fi->fib_prefsrc)) |
f3756b79 | 1813 | goto nla_put_failure; |
4c7e8084 DA |
1814 | |
1815 | if (fi->nh) { | |
1816 | if (nla_put_u32(skb, RTA_NH_ID, fi->nh->id)) | |
1817 | goto nla_put_failure; | |
1818 | if (nexthop_is_blackhole(fi->nh)) | |
1819 | rtm->rtm_type = RTN_BLACKHOLE; | |
bdf00bf2 | 1820 | if (!READ_ONCE(fi->fib_net->ipv4.sysctl_nexthop_compat_mode)) |
4f80116d | 1821 | goto offload; |
4c7e8084 DA |
1822 | } |
1823 | ||
5481d73f | 1824 | if (nhs == 1) { |
dcb1ecb5 | 1825 | const struct fib_nh_common *nhc = fib_info_nhc(fi, 0); |
ecc5663c | 1826 | unsigned char flags = 0; |
b0f60193 | 1827 | |
7bdf4de1 | 1828 | if (fib_nexthop_info(skb, nhc, AF_INET, &flags, false) < 0) |
f3756b79 | 1829 | goto nla_put_failure; |
b0f60193 DA |
1830 | |
1831 | rtm->rtm_flags = flags; | |
c7066f70 | 1832 | #ifdef CONFIG_IP_ROUTE_CLASSID |
dcb1ecb5 DA |
1833 | if (nhc->nhc_family == AF_INET) { |
1834 | struct fib_nh *nh; | |
1835 | ||
1836 | nh = container_of(nhc, struct fib_nh, nh_common); | |
1837 | if (nh->nh_tclassid && | |
1838 | nla_put_u32(skb, RTA_FLOW, nh->nh_tclassid)) | |
1839 | goto nla_put_failure; | |
1840 | } | |
8265abc0 | 1841 | #endif |
b0f60193 DA |
1842 | } else { |
1843 | if (fib_add_multipath(skb, fi) < 0) | |
ea7a8085 | 1844 | goto nla_put_failure; |
1da177e4 | 1845 | } |
1da177e4 | 1846 | |
4f80116d | 1847 | offload: |
90b93f1b IS |
1848 | if (fri->offload) |
1849 | rtm->rtm_flags |= RTM_F_OFFLOAD; | |
1850 | if (fri->trap) | |
1851 | rtm->rtm_flags |= RTM_F_TRAP; | |
36c5100e AC |
1852 | if (fri->offload_failed) |
1853 | rtm->rtm_flags |= RTM_F_OFFLOAD_FAILED; | |
90b93f1b | 1854 | |
053c095a JB |
1855 | nlmsg_end(skb, nlh); |
1856 | return 0; | |
1da177e4 | 1857 | |
be403ea1 | 1858 | nla_put_failure: |
26932566 PM |
1859 | nlmsg_cancel(skb, nlh); |
1860 | return -EMSGSIZE; | |
1da177e4 LT |
1861 | } |
1862 | ||
1da177e4 | 1863 | /* |
6a31d2a9 ED |
1864 | * Update FIB if: |
1865 | * - local address disappeared -> we must delete all the entries | |
1866 | * referring to it. | |
1867 | * - device went down -> we must shutdown all nexthops going via it. | |
1da177e4 | 1868 | */ |
5a56a0b3 | 1869 | int fib_sync_down_addr(struct net_device *dev, __be32 local) |
1da177e4 | 1870 | { |
e0a31262 | 1871 | int tb_id = l3mdev_fib_table(dev) ? : RT_TABLE_MAIN; |
5a56a0b3 | 1872 | struct net *net = dev_net(dev); |
79eb15da | 1873 | struct hlist_head *head; |
85326fa5 | 1874 | struct fib_info *fi; |
79eb15da | 1875 | int ret = 0; |
1da177e4 | 1876 | |
51456b29 | 1877 | if (!fib_info_laddrhash || local == 0) |
85326fa5 | 1878 | return 0; |
1da177e4 | 1879 | |
79eb15da | 1880 | head = fib_info_laddrhash_bucket(net, local); |
b67bfe0d | 1881 | hlist_for_each_entry(fi, head, fib_lhash) { |
5a56a0b3 MT |
1882 | if (!net_eq(fi->fib_net, net) || |
1883 | fi->fib_tb_id != tb_id) | |
4814bdbd | 1884 | continue; |
85326fa5 DL |
1885 | if (fi->fib_prefsrc == local) { |
1886 | fi->fib_flags |= RTNH_F_DEAD; | |
1887 | ret++; | |
1da177e4 LT |
1888 | } |
1889 | } | |
85326fa5 DL |
1890 | return ret; |
1891 | } | |
1892 | ||
b75ed8b1 | 1893 | static int call_fib_nh_notifiers(struct fib_nh *nh, |
982acb97 IS |
1894 | enum fib_event_type event_type) |
1895 | { | |
b75ed8b1 | 1896 | bool ignore_link_down = ip_ignore_linkdown(nh->fib_nh_dev); |
982acb97 | 1897 | struct fib_nh_notifier_info info = { |
b75ed8b1 | 1898 | .fib_nh = nh, |
982acb97 IS |
1899 | }; |
1900 | ||
1901 | switch (event_type) { | |
1902 | case FIB_EVENT_NH_ADD: | |
b75ed8b1 | 1903 | if (nh->fib_nh_flags & RTNH_F_DEAD) |
982acb97 | 1904 | break; |
b75ed8b1 | 1905 | if (ignore_link_down && nh->fib_nh_flags & RTNH_F_LINKDOWN) |
982acb97 | 1906 | break; |
b75ed8b1 | 1907 | return call_fib4_notifiers(dev_net(nh->fib_nh_dev), event_type, |
04b1d4e5 | 1908 | &info.info); |
982acb97 | 1909 | case FIB_EVENT_NH_DEL: |
b75ed8b1 DA |
1910 | if ((ignore_link_down && nh->fib_nh_flags & RTNH_F_LINKDOWN) || |
1911 | (nh->fib_nh_flags & RTNH_F_DEAD)) | |
1912 | return call_fib4_notifiers(dev_net(nh->fib_nh_dev), | |
04b1d4e5 | 1913 | event_type, &info.info); |
79121184 | 1914 | break; |
982acb97 IS |
1915 | default: |
1916 | break; | |
1917 | } | |
1918 | ||
1919 | return NOTIFY_DONE; | |
1920 | } | |
1921 | ||
af7d6cce SD |
1922 | /* Update the PMTU of exceptions when: |
1923 | * - the new MTU of the first hop becomes smaller than the PMTU | |
1924 | * - the old MTU was the same as the PMTU, and it limited discovery of | |
1925 | * larger MTUs on the path. With that limit raised, we can now | |
1926 | * discover larger MTUs | |
1927 | * A special case is locked exceptions, for which the PMTU is smaller | |
1928 | * than the minimal accepted PMTU: | |
1929 | * - if the new MTU is greater than the PMTU, don't make any change | |
1930 | * - otherwise, unlock and set PMTU | |
1931 | */ | |
06c77c3e | 1932 | void fib_nhc_update_mtu(struct fib_nh_common *nhc, u32 new, u32 orig) |
af7d6cce SD |
1933 | { |
1934 | struct fnhe_hash_bucket *bucket; | |
1935 | int i; | |
1936 | ||
a5995e71 | 1937 | bucket = rcu_dereference_protected(nhc->nhc_exceptions, 1); |
af7d6cce SD |
1938 | if (!bucket) |
1939 | return; | |
1940 | ||
1941 | for (i = 0; i < FNHE_HASH_SIZE; i++) { | |
1942 | struct fib_nh_exception *fnhe; | |
1943 | ||
1944 | for (fnhe = rcu_dereference_protected(bucket[i].chain, 1); | |
1945 | fnhe; | |
1946 | fnhe = rcu_dereference_protected(fnhe->fnhe_next, 1)) { | |
1947 | if (fnhe->fnhe_mtu_locked) { | |
1948 | if (new <= fnhe->fnhe_pmtu) { | |
1949 | fnhe->fnhe_pmtu = new; | |
1950 | fnhe->fnhe_mtu_locked = false; | |
1951 | } | |
1952 | } else if (new < fnhe->fnhe_pmtu || | |
1953 | orig == fnhe->fnhe_pmtu) { | |
1954 | fnhe->fnhe_pmtu = new; | |
1955 | } | |
1956 | } | |
1957 | } | |
1958 | } | |
1959 | ||
1960 | void fib_sync_mtu(struct net_device *dev, u32 orig_mtu) | |
1961 | { | |
d07418af | 1962 | struct hlist_head *head = fib_info_devhash_bucket(dev); |
af7d6cce SD |
1963 | struct fib_nh *nh; |
1964 | ||
1965 | hlist_for_each_entry(nh, head, nh_hash) { | |
b75ed8b1 | 1966 | if (nh->fib_nh_dev == dev) |
06c77c3e | 1967 | fib_nhc_update_mtu(&nh->nh_common, dev->mtu, orig_mtu); |
af7d6cce SD |
1968 | } |
1969 | } | |
1970 | ||
4f823def JA |
1971 | /* Event force Flags Description |
1972 | * NETDEV_CHANGE 0 LINKDOWN Carrier OFF, not for scope host | |
1973 | * NETDEV_DOWN 0 LINKDOWN|DEAD Link down, not for scope host | |
1974 | * NETDEV_DOWN 1 LINKDOWN|DEAD Last address removed | |
1975 | * NETDEV_UNREGISTER 1 LINKDOWN|DEAD Device removed | |
4c7e8084 DA |
1976 | * |
1977 | * only used when fib_nh is built into fib_info | |
4f823def JA |
1978 | */ |
1979 | int fib_sync_down_dev(struct net_device *dev, unsigned long event, bool force) | |
85326fa5 | 1980 | { |
d07418af | 1981 | struct hlist_head *head = fib_info_devhash_bucket(dev); |
85326fa5 | 1982 | struct fib_info *prev_fi = NULL; |
d07418af | 1983 | int scope = RT_SCOPE_NOWHERE; |
85326fa5 | 1984 | struct fib_nh *nh; |
d07418af | 1985 | int ret = 0; |
1da177e4 | 1986 | |
4f823def | 1987 | if (force) |
85326fa5 | 1988 | scope = -1; |
1da177e4 | 1989 | |
b67bfe0d | 1990 | hlist_for_each_entry(nh, head, nh_hash) { |
85326fa5 DL |
1991 | struct fib_info *fi = nh->nh_parent; |
1992 | int dead; | |
1da177e4 | 1993 | |
85326fa5 | 1994 | BUG_ON(!fi->fib_nhs); |
b75ed8b1 | 1995 | if (nh->fib_nh_dev != dev || fi == prev_fi) |
85326fa5 DL |
1996 | continue; |
1997 | prev_fi = fi; | |
1998 | dead = 0; | |
1999 | change_nexthops(fi) { | |
b75ed8b1 | 2000 | if (nexthop_nh->fib_nh_flags & RTNH_F_DEAD) |
85326fa5 | 2001 | dead++; |
b75ed8b1 DA |
2002 | else if (nexthop_nh->fib_nh_dev == dev && |
2003 | nexthop_nh->fib_nh_scope != scope) { | |
8a3d0316 AG |
2004 | switch (event) { |
2005 | case NETDEV_DOWN: | |
2006 | case NETDEV_UNREGISTER: | |
b75ed8b1 | 2007 | nexthop_nh->fib_nh_flags |= RTNH_F_DEAD; |
a8eceea8 | 2008 | fallthrough; |
8a3d0316 | 2009 | case NETDEV_CHANGE: |
b75ed8b1 | 2010 | nexthop_nh->fib_nh_flags |= RTNH_F_LINKDOWN; |
8a3d0316 AG |
2011 | break; |
2012 | } | |
982acb97 IS |
2013 | call_fib_nh_notifiers(nexthop_nh, |
2014 | FIB_EVENT_NH_DEL); | |
85326fa5 DL |
2015 | dead++; |
2016 | } | |
1da177e4 | 2017 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
8a3d0316 | 2018 | if (event == NETDEV_UNREGISTER && |
b75ed8b1 | 2019 | nexthop_nh->fib_nh_dev == dev) { |
85326fa5 DL |
2020 | dead = fi->fib_nhs; |
2021 | break; | |
1da177e4 | 2022 | } |
85326fa5 DL |
2023 | #endif |
2024 | } endfor_nexthops(fi) | |
2025 | if (dead == fi->fib_nhs) { | |
8a3d0316 AG |
2026 | switch (event) { |
2027 | case NETDEV_DOWN: | |
2028 | case NETDEV_UNREGISTER: | |
2029 | fi->fib_flags |= RTNH_F_DEAD; | |
a8eceea8 | 2030 | fallthrough; |
8a3d0316 AG |
2031 | case NETDEV_CHANGE: |
2032 | fi->fib_flags |= RTNH_F_LINKDOWN; | |
2033 | break; | |
2034 | } | |
85326fa5 | 2035 | ret++; |
1da177e4 | 2036 | } |
0e884c78 PN |
2037 | |
2038 | fib_rebalance(fi); | |
1da177e4 LT |
2039 | } |
2040 | ||
2041 | return ret; | |
2042 | } | |
2043 | ||
0c838ff1 | 2044 | /* Must be invoked inside of an RCU protected region. */ |
c7b371e3 | 2045 | static void fib_select_default(const struct flowi4 *flp, struct fib_result *res) |
0c838ff1 DM |
2046 | { |
2047 | struct fib_info *fi = NULL, *last_resort = NULL; | |
56315f9e | 2048 | struct hlist_head *fa_head = res->fa_head; |
0c838ff1 | 2049 | struct fib_table *tb = res->table; |
18a912e9 | 2050 | u8 slen = 32 - res->prefixlen; |
0c838ff1 | 2051 | int order = -1, last_idx = -1; |
2392debc JA |
2052 | struct fib_alias *fa, *fa1 = NULL; |
2053 | u32 last_prio = res->fi->fib_priority; | |
32ccf110 | 2054 | dscp_t last_dscp = 0; |
0c838ff1 | 2055 | |
56315f9e | 2056 | hlist_for_each_entry_rcu(fa, fa_head, fa_list) { |
0c838ff1 | 2057 | struct fib_info *next_fi = fa->fa_info; |
7c74b0be | 2058 | struct fib_nh_common *nhc; |
0c838ff1 | 2059 | |
18a912e9 JA |
2060 | if (fa->fa_slen != slen) |
2061 | continue; | |
32ccf110 GN |
2062 | if (fa->fa_dscp && |
2063 | fa->fa_dscp != inet_dsfield_to_dscp(flp->flowi4_tos)) | |
2392debc | 2064 | continue; |
18a912e9 JA |
2065 | if (fa->tb_id != tb->tb_id) |
2066 | continue; | |
2392debc | 2067 | if (next_fi->fib_priority > last_prio && |
32ccf110 GN |
2068 | fa->fa_dscp == last_dscp) { |
2069 | if (last_dscp) | |
2392debc JA |
2070 | continue; |
2071 | break; | |
2072 | } | |
2073 | if (next_fi->fib_flags & RTNH_F_DEAD) | |
2074 | continue; | |
32ccf110 | 2075 | last_dscp = fa->fa_dscp; |
2392debc JA |
2076 | last_prio = next_fi->fib_priority; |
2077 | ||
37e826c5 | 2078 | if (next_fi->fib_scope != res->scope || |
0c838ff1 DM |
2079 | fa->fa_type != RTN_UNICAST) |
2080 | continue; | |
5481d73f | 2081 | |
7c74b0be DA |
2082 | nhc = fib_info_nhc(next_fi, 0); |
2083 | if (!nhc->nhc_gw_family || nhc->nhc_scope != RT_SCOPE_LINK) | |
0c838ff1 DM |
2084 | continue; |
2085 | ||
2086 | fib_alias_accessed(fa); | |
2087 | ||
51456b29 | 2088 | if (!fi) { |
0c838ff1 DM |
2089 | if (next_fi != res->fi) |
2090 | break; | |
2392debc | 2091 | fa1 = fa; |
0c838ff1 | 2092 | } else if (!fib_detect_death(fi, order, &last_resort, |
2392debc | 2093 | &last_idx, fa1->fa_default)) { |
0c838ff1 | 2094 | fib_result_assign(res, fi); |
2392debc | 2095 | fa1->fa_default = order; |
0c838ff1 DM |
2096 | goto out; |
2097 | } | |
2098 | fi = next_fi; | |
2099 | order++; | |
2100 | } | |
2101 | ||
51456b29 | 2102 | if (order <= 0 || !fi) { |
2392debc JA |
2103 | if (fa1) |
2104 | fa1->fa_default = -1; | |
0c838ff1 DM |
2105 | goto out; |
2106 | } | |
2107 | ||
2108 | if (!fib_detect_death(fi, order, &last_resort, &last_idx, | |
2392debc | 2109 | fa1->fa_default)) { |
0c838ff1 | 2110 | fib_result_assign(res, fi); |
2392debc | 2111 | fa1->fa_default = order; |
0c838ff1 DM |
2112 | goto out; |
2113 | } | |
2114 | ||
2115 | if (last_idx >= 0) | |
2116 | fib_result_assign(res, last_resort); | |
2392debc | 2117 | fa1->fa_default = last_idx; |
0c838ff1 | 2118 | out: |
31d40937 | 2119 | return; |
0c838ff1 DM |
2120 | } |
2121 | ||
1da177e4 | 2122 | /* |
6a31d2a9 ED |
2123 | * Dead device goes up. We wake up dead nexthops. |
2124 | * It takes sense only on multipath routes. | |
4c7e8084 DA |
2125 | * |
2126 | * only used when fib_nh is built into fib_info | |
1da177e4 | 2127 | */ |
ecc5663c | 2128 | int fib_sync_up(struct net_device *dev, unsigned char nh_flags) |
1da177e4 LT |
2129 | { |
2130 | struct fib_info *prev_fi; | |
1da177e4 | 2131 | struct hlist_head *head; |
1da177e4 LT |
2132 | struct fib_nh *nh; |
2133 | int ret; | |
2134 | ||
6a31d2a9 | 2135 | if (!(dev->flags & IFF_UP)) |
1da177e4 LT |
2136 | return 0; |
2137 | ||
c9b3292e JA |
2138 | if (nh_flags & RTNH_F_DEAD) { |
2139 | unsigned int flags = dev_get_flags(dev); | |
2140 | ||
2141 | if (flags & (IFF_RUNNING | IFF_LOWER_UP)) | |
2142 | nh_flags |= RTNH_F_LINKDOWN; | |
2143 | } | |
2144 | ||
1da177e4 | 2145 | prev_fi = NULL; |
d07418af | 2146 | head = fib_info_devhash_bucket(dev); |
1da177e4 LT |
2147 | ret = 0; |
2148 | ||
b67bfe0d | 2149 | hlist_for_each_entry(nh, head, nh_hash) { |
1da177e4 LT |
2150 | struct fib_info *fi = nh->nh_parent; |
2151 | int alive; | |
2152 | ||
2153 | BUG_ON(!fi->fib_nhs); | |
b75ed8b1 | 2154 | if (nh->fib_nh_dev != dev || fi == prev_fi) |
1da177e4 LT |
2155 | continue; |
2156 | ||
2157 | prev_fi = fi; | |
2158 | alive = 0; | |
2159 | change_nexthops(fi) { | |
b75ed8b1 | 2160 | if (!(nexthop_nh->fib_nh_flags & nh_flags)) { |
1da177e4 LT |
2161 | alive++; |
2162 | continue; | |
2163 | } | |
b75ed8b1 DA |
2164 | if (!nexthop_nh->fib_nh_dev || |
2165 | !(nexthop_nh->fib_nh_dev->flags & IFF_UP)) | |
1da177e4 | 2166 | continue; |
b75ed8b1 | 2167 | if (nexthop_nh->fib_nh_dev != dev || |
71fceff0 | 2168 | !__in_dev_get_rtnl(dev)) |
1da177e4 LT |
2169 | continue; |
2170 | alive++; | |
b75ed8b1 | 2171 | nexthop_nh->fib_nh_flags &= ~nh_flags; |
982acb97 | 2172 | call_fib_nh_notifiers(nexthop_nh, FIB_EVENT_NH_ADD); |
1da177e4 LT |
2173 | } endfor_nexthops(fi) |
2174 | ||
2175 | if (alive > 0) { | |
8a3d0316 | 2176 | fi->fib_flags &= ~nh_flags; |
1da177e4 LT |
2177 | ret++; |
2178 | } | |
0e884c78 PN |
2179 | |
2180 | fib_rebalance(fi); | |
1da177e4 LT |
2181 | } |
2182 | ||
2183 | return ret; | |
2184 | } | |
2185 | ||
8a3d0316 | 2186 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
a6db4494 DA |
2187 | static bool fib_good_nh(const struct fib_nh *nh) |
2188 | { | |
2189 | int state = NUD_REACHABLE; | |
2190 | ||
b75ed8b1 | 2191 | if (nh->fib_nh_scope == RT_SCOPE_LINK) { |
a6db4494 DA |
2192 | struct neighbour *n; |
2193 | ||
2194 | rcu_read_lock_bh(); | |
2195 | ||
1a38c43d DA |
2196 | if (likely(nh->fib_nh_gw_family == AF_INET)) |
2197 | n = __ipv4_neigh_lookup_noref(nh->fib_nh_dev, | |
2198 | (__force u32)nh->fib_nh_gw4); | |
2199 | else if (nh->fib_nh_gw_family == AF_INET6) | |
2200 | n = __ipv6_neigh_lookup_noref_stub(nh->fib_nh_dev, | |
2201 | &nh->fib_nh_gw6); | |
2202 | else | |
2203 | n = NULL; | |
a6db4494 DA |
2204 | if (n) |
2205 | state = n->nud_state; | |
2206 | ||
2207 | rcu_read_unlock_bh(); | |
2208 | } | |
2209 | ||
2210 | return !!(state & NUD_VALID); | |
2211 | } | |
8a3d0316 | 2212 | |
0e884c78 | 2213 | void fib_select_multipath(struct fib_result *res, int hash) |
1da177e4 LT |
2214 | { |
2215 | struct fib_info *fi = res->fi; | |
a6db4494 DA |
2216 | struct net *net = fi->fib_net; |
2217 | bool first = false; | |
1da177e4 | 2218 | |
4c7e8084 DA |
2219 | if (unlikely(res->fi->nh)) { |
2220 | nexthop_path_fib_result(res, hash); | |
2221 | return; | |
2222 | } | |
2223 | ||
eba618ab | 2224 | change_nexthops(fi) { |
87507bcb | 2225 | if (READ_ONCE(net->ipv4.sysctl_fib_multipath_use_neigh)) { |
eba618ab | 2226 | if (!fib_good_nh(nexthop_nh)) |
6174a30d XL |
2227 | continue; |
2228 | if (!first) { | |
2229 | res->nh_sel = nhsel; | |
eba618ab | 2230 | res->nhc = &nexthop_nh->nh_common; |
6174a30d XL |
2231 | first = true; |
2232 | } | |
2233 | } | |
2234 | ||
eba618ab | 2235 | if (hash > atomic_read(&nexthop_nh->fib_nh_upper_bound)) |
0e884c78 | 2236 | continue; |
1da177e4 | 2237 | |
6174a30d | 2238 | res->nh_sel = nhsel; |
eba618ab | 2239 | res->nhc = &nexthop_nh->nh_common; |
6174a30d | 2240 | return; |
1da177e4 | 2241 | } endfor_nexthops(fi); |
1da177e4 LT |
2242 | } |
2243 | #endif | |
3ce58d84 DA |
2244 | |
2245 | void fib_select_path(struct net *net, struct fib_result *res, | |
bf4e0a3d | 2246 | struct flowi4 *fl4, const struct sk_buff *skb) |
3ce58d84 | 2247 | { |
40867d74 | 2248 | if (fl4->flowi4_oif) |
0d876f2c | 2249 | goto check_saddr; |
7a18c5b9 | 2250 | |
3ce58d84 | 2251 | #ifdef CONFIG_IP_ROUTE_MULTIPATH |
5481d73f | 2252 | if (fib_info_num_path(res->fi) > 1) { |
7efc0b6b | 2253 | int h = fib_multipath_hash(net, fl4, skb, NULL); |
9920e48b | 2254 | |
bf4e0a3d | 2255 | fib_select_multipath(res, h); |
3ce58d84 DA |
2256 | } |
2257 | else | |
2258 | #endif | |
2259 | if (!res->prefixlen && | |
2260 | res->table->tb_num_default > 1 && | |
0d876f2c | 2261 | res->type == RTN_UNICAST) |
3ce58d84 DA |
2262 | fib_select_default(fl4, res); |
2263 | ||
0d876f2c | 2264 | check_saddr: |
3ce58d84 | 2265 | if (!fl4->saddr) |
eba618ab | 2266 | fl4->saddr = fib_result_prefsrc(net, res); |
3ce58d84 | 2267 | } |