Merge branches 'pm-cpuidle', 'pm-core' and 'pm-sleep'
[linux-block.git] / net / ipv6 / addrconf.c
CommitLineData
2874c5fd 1// SPDX-License-Identifier: GPL-2.0-or-later
1da177e4
LT
2/*
3 * IPv6 Address [auto]configuration
4 * Linux INET6 implementation
5 *
6 * Authors:
1ab1457c 7 * Pedro Roque <roque@di.fc.ul.pt>
1da177e4 8 * Alexey Kuznetsov <kuznet@ms2.inr.ac.ru>
1da177e4
LT
9 */
10
11/*
12 * Changes:
13 *
14 * Janos Farkas : delete timer on ifdown
15 * <chexum@bankinf.banki.hu>
16 * Andi Kleen : kill double kfree on module
17 * unload.
18 * Maciej W. Rozycki : FDDI support
19 * sekiya@USAGI : Don't send too many RS
20 * packets.
21 * yoshfuji@USAGI : Fixed interval between DAD
22 * packets.
23 * YOSHIFUJI Hideaki @USAGI : improved accuracy of
24 * address validation timer.
25 * YOSHIFUJI Hideaki @USAGI : Privacy Extensions (RFC3041)
26 * support.
27 * Yuji SEKIYA @USAGI : Don't assign a same IPv6
28 * address on a same interface.
29 * YOSHIFUJI Hideaki @USAGI : ARCnet support
30 * YOSHIFUJI Hideaki @USAGI : convert /proc/net/if_inet6 to
31 * seq_file.
b1cacb68
YH
32 * YOSHIFUJI Hideaki @USAGI : improved source address
33 * selection; consider scope,
34 * status etc.
1da177e4
LT
35 */
36
f3213831
JP
37#define pr_fmt(fmt) "IPv6: " fmt
38
1da177e4
LT
39#include <linux/errno.h>
40#include <linux/types.h>
a0bffffc 41#include <linux/kernel.h>
174cd4b1 42#include <linux/sched/signal.h>
1da177e4
LT
43#include <linux/socket.h>
44#include <linux/sockios.h>
1da177e4 45#include <linux/net.h>
3d1bec99 46#include <linux/inet.h>
1da177e4
LT
47#include <linux/in6.h>
48#include <linux/netdevice.h>
1823730f 49#include <linux/if_addr.h>
1da177e4
LT
50#include <linux/if_arp.h>
51#include <linux/if_arcnet.h>
52#include <linux/if_infiniband.h>
53#include <linux/route.h>
54#include <linux/inetdevice.h>
55#include <linux/init.h>
5a0e3ad6 56#include <linux/slab.h>
1da177e4
LT
57#ifdef CONFIG_SYSCTL
58#include <linux/sysctl.h>
59#endif
4fc268d2 60#include <linux/capability.h>
1da177e4
LT
61#include <linux/delay.h>
62#include <linux/notifier.h>
543537bd 63#include <linux/string.h>
ddbe5032 64#include <linux/hash.h>
1da177e4 65
457c4cbc 66#include <net/net_namespace.h>
1da177e4
LT
67#include <net/sock.h>
68#include <net/snmp.h>
69
5241c2d7 70#include <net/6lowpan.h>
cb6bf355 71#include <net/firewire.h>
1da177e4
LT
72#include <net/ipv6.h>
73#include <net/protocol.h>
74#include <net/ndisc.h>
75#include <net/ip6_route.h>
76#include <net/addrconf.h>
77#include <net/tcp.h>
78#include <net/ip.h>
5d620266 79#include <net/netlink.h>
f24e3d65 80#include <net/pkt_sched.h>
ca254490 81#include <net/l3mdev.h>
1da177e4
LT
82#include <linux/if_tunnel.h>
83#include <linux/rtnetlink.h>
f3a1bfb1 84#include <linux/netconf.h>
1da177e4 85#include <linux/random.h>
e21e8467 86#include <linux/uaccess.h>
7f7d9a6b 87#include <asm/unaligned.h>
1da177e4
LT
88
89#include <linux/proc_fs.h>
90#include <linux/seq_file.h>
bc3b2d7f 91#include <linux/export.h>
9ee11f0f 92#include <linux/ioam6.h>
1da177e4 93
1da177e4 94#define INFINITY_LIFE_TIME 0xFFFFFFFF
18a31e1e 95
3d1bec99
HFS
96#define IPV6_MAX_STRLEN \
97 sizeof("ffff:ffff:ffff:ffff:ffff:ffff:255.255.255.255")
98
18a31e1e
TG
99static inline u32 cstamp_delta(unsigned long cstamp)
100{
101 return (cstamp - INITIAL_JIFFIES) * 100UL / HZ;
102}
1da177e4 103
bd11f074
104static inline s32 rfc3315_s14_backoff_init(s32 irt)
105{
106 /* multiply 'initial retransmission time' by 0.9 .. 1.1 */
e8a533cb 107 u64 tmp = get_random_u32_inclusive(900000, 1100000) * (u64)irt;
bd11f074
108 do_div(tmp, 1000000);
109 return (s32)tmp;
110}
111
112static inline s32 rfc3315_s14_backoff_update(s32 rt, s32 mrt)
113{
114 /* multiply 'retransmission timeout' by 1.9 .. 2.1 */
e8a533cb 115 u64 tmp = get_random_u32_inclusive(1900000, 2100000) * (u64)rt;
bd11f074
116 do_div(tmp, 1000000);
117 if ((s32)tmp > mrt) {
118 /* multiply 'maximum retransmission time' by 0.9 .. 1.1 */
e8a533cb 119 tmp = get_random_u32_inclusive(900000, 1100000) * (u64)mrt;
bd11f074
120 do_div(tmp, 1000000);
121 }
122 return (s32)tmp;
123}
124
1da177e4 125#ifdef CONFIG_SYSCTL
a317a2f1 126static int addrconf_sysctl_register(struct inet6_dev *idev);
408c4768
PE
127static void addrconf_sysctl_unregister(struct inet6_dev *idev);
128#else
a317a2f1 129static inline int addrconf_sysctl_register(struct inet6_dev *idev)
408c4768 130{
a317a2f1 131 return 0;
408c4768
PE
132}
133
134static inline void addrconf_sysctl_unregister(struct inet6_dev *idev)
135{
136}
1da177e4
LT
137#endif
138
969c5464 139static void ipv6_gen_rnd_iid(struct in6_addr *addr);
1da177e4 140
1b34be74 141static int ipv6_generate_eui64(u8 *eui, struct net_device *dev);
d9bf82c2 142static int ipv6_count_addresses(const struct inet6_dev *idev);
622c81d5
HFS
143static int ipv6_generate_stable_address(struct in6_addr *addr,
144 u8 dad_count,
145 const struct inet6_dev *idev);
1da177e4 146
27c565ae
ED
147#define IN6_ADDR_HSIZE_SHIFT 8
148#define IN6_ADDR_HSIZE (1 << IN6_ADDR_HSIZE_SHIFT)
1da177e4 149
8805d13f
ED
150static void addrconf_verify(struct net *net);
151static void addrconf_verify_rtnl(struct net *net);
1da177e4 152
c15b1cca 153static struct workqueue_struct *addrconf_wq;
1da177e4
LT
154
155static void addrconf_join_anycast(struct inet6_ifaddr *ifp);
156static void addrconf_leave_anycast(struct inet6_ifaddr *ifp);
157
93d9b7d7
JP
158static void addrconf_type_change(struct net_device *dev,
159 unsigned long event);
ae79dbf6 160static int addrconf_ifdown(struct net_device *dev, bool unregister);
1da177e4 161
8d1c802b 162static struct fib6_info *addrconf_get_prefix_route(const struct in6_addr *pfx,
21caa662
RK
163 int plen,
164 const struct net_device *dev,
2b2450ca
DA
165 u32 flags, u32 noflags,
166 bool no_gw);
21caa662 167
cf22f9a2 168static void addrconf_dad_start(struct inet6_ifaddr *ifp);
c15b1cca 169static void addrconf_dad_work(struct work_struct *w);
c76fe2d9
DA
170static void addrconf_dad_completed(struct inet6_ifaddr *ifp, bool bump_id,
171 bool send_na);
896585d4 172static void addrconf_dad_run(struct inet6_dev *idev, bool restart);
e99e88a9 173static void addrconf_rs_timer(struct timer_list *t);
1da177e4
LT
174static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
175static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
176
1ab1457c 177static void inet6_prefix_notify(int event, struct inet6_dev *idev,
1da177e4 178 struct prefix_info *pinfo);
1da177e4 179
888c848e 180static struct ipv6_devconf ipv6_devconf __read_mostly = {
1da177e4
LT
181 .forwarding = 0,
182 .hop_limit = IPV6_DEFAULT_HOPLIMIT,
183 .mtu6 = IPV6_MIN_MTU,
184 .accept_ra = 1,
185 .accept_redirects = 1,
186 .autoconf = 1,
187 .force_mld_version = 0,
fc4eba58
HFS
188 .mldv1_unsolicited_report_interval = 10 * HZ,
189 .mldv2_unsolicited_report_interval = HZ,
1da177e4
LT
190 .dad_transmits = 1,
191 .rtr_solicits = MAX_RTR_SOLICITATIONS,
192 .rtr_solicit_interval = RTR_SOLICITATION_INTERVAL,
bd11f074 193 .rtr_solicit_max_interval = RTR_SOLICITATION_MAX_INTERVAL,
1da177e4 194 .rtr_solicit_delay = MAX_RTR_SOLICITATION_DELAY,
67ba4152 195 .use_tempaddr = 0,
1da177e4
LT
196 .temp_valid_lft = TEMP_VALID_LIFETIME,
197 .temp_prefered_lft = TEMP_PREFERRED_LIFETIME,
198 .regen_max_retry = REGEN_MAX_RETRY,
199 .max_desync_factor = MAX_DESYNC_FACTOR,
1da177e4 200 .max_addresses = IPV6_MAX_ADDRESSES,
65f5c7c1 201 .accept_ra_defrtr = 1,
6b2e04bc 202 .ra_defrtr_metric = IP6_RT_PRIO_USER,
d9333196 203 .accept_ra_from_local = 0,
8013d1d7 204 .accept_ra_min_hop_limit= 1,
c4fd30eb 205 .accept_ra_pinfo = 1,
930d6ff2
YH
206#ifdef CONFIG_IPV6_ROUTER_PREF
207 .accept_ra_rtr_pref = 1,
52e16356 208 .rtr_probe_interval = 60 * HZ,
09c884d4 209#ifdef CONFIG_IPV6_ROUTE_INFO
bbea124b 210 .accept_ra_rt_info_min_plen = 0,
09c884d4
YH
211 .accept_ra_rt_info_max_plen = 0,
212#endif
930d6ff2 213#endif
fbea49e1 214 .proxy_ndp = 0,
0bcbc926 215 .accept_source_route = 0, /* we do not accept RH0 by default. */
778d80be 216 .disable_ipv6 = 0,
09400953 217 .accept_dad = 0,
b800c3b9 218 .suppress_frag_ndisc = 1,
c2943f14 219 .accept_ra_mtu = 1,
3d1bec99
HFS
220 .stable_secret = {
221 .initialized = false,
3985e8a3
EK
222 },
223 .use_oif_addrs_only = 0,
35103d11 224 .ignore_routes_with_linkdown = 0,
f1705ec1 225 .keep_addr_on_down = 0,
1ababeba 226 .seg6_enabled = 0,
bf355b8d
DL
227#ifdef CONFIG_IPV6_SEG6_HMAC
228 .seg6_require_hmac = 0,
229#endif
adc176c5 230 .enhanced_dad = 1,
d35a00b8 231 .addr_gen_mode = IN6_ADDR_GEN_MODE_EUI64,
df789fe7 232 .disable_policy = 0,
8610c7c6 233 .rpl_seg_enabled = 0,
9ee11f0f
JI
234 .ioam6_enabled = 0,
235 .ioam6_id = IOAM6_DEFAULT_IF_ID,
236 .ioam6_id_wide = IOAM6_DEFAULT_IF_ID_WIDE,
18ac597a 237 .ndisc_evict_nocarrier = 1,
1da177e4
LT
238};
239
ab32ea5d 240static struct ipv6_devconf ipv6_devconf_dflt __read_mostly = {
1da177e4
LT
241 .forwarding = 0,
242 .hop_limit = IPV6_DEFAULT_HOPLIMIT,
243 .mtu6 = IPV6_MIN_MTU,
244 .accept_ra = 1,
245 .accept_redirects = 1,
246 .autoconf = 1,
fc4eba58
HFS
247 .force_mld_version = 0,
248 .mldv1_unsolicited_report_interval = 10 * HZ,
249 .mldv2_unsolicited_report_interval = HZ,
1da177e4
LT
250 .dad_transmits = 1,
251 .rtr_solicits = MAX_RTR_SOLICITATIONS,
252 .rtr_solicit_interval = RTR_SOLICITATION_INTERVAL,
bd11f074 253 .rtr_solicit_max_interval = RTR_SOLICITATION_MAX_INTERVAL,
1da177e4 254 .rtr_solicit_delay = MAX_RTR_SOLICITATION_DELAY,
1da177e4
LT
255 .use_tempaddr = 0,
256 .temp_valid_lft = TEMP_VALID_LIFETIME,
257 .temp_prefered_lft = TEMP_PREFERRED_LIFETIME,
258 .regen_max_retry = REGEN_MAX_RETRY,
259 .max_desync_factor = MAX_DESYNC_FACTOR,
1da177e4 260 .max_addresses = IPV6_MAX_ADDRESSES,
65f5c7c1 261 .accept_ra_defrtr = 1,
6b2e04bc 262 .ra_defrtr_metric = IP6_RT_PRIO_USER,
d9333196 263 .accept_ra_from_local = 0,
8013d1d7 264 .accept_ra_min_hop_limit= 1,
c4fd30eb 265 .accept_ra_pinfo = 1,
930d6ff2
YH
266#ifdef CONFIG_IPV6_ROUTER_PREF
267 .accept_ra_rtr_pref = 1,
52e16356 268 .rtr_probe_interval = 60 * HZ,
09c884d4 269#ifdef CONFIG_IPV6_ROUTE_INFO
bbea124b 270 .accept_ra_rt_info_min_plen = 0,
09c884d4
YH
271 .accept_ra_rt_info_max_plen = 0,
272#endif
930d6ff2 273#endif
fbea49e1 274 .proxy_ndp = 0,
0bcbc926 275 .accept_source_route = 0, /* we do not accept RH0 by default. */
778d80be 276 .disable_ipv6 = 0,
1b34be74 277 .accept_dad = 1,
b800c3b9 278 .suppress_frag_ndisc = 1,
c2943f14 279 .accept_ra_mtu = 1,
3d1bec99
HFS
280 .stable_secret = {
281 .initialized = false,
282 },
3985e8a3 283 .use_oif_addrs_only = 0,
35103d11 284 .ignore_routes_with_linkdown = 0,
f1705ec1 285 .keep_addr_on_down = 0,
1ababeba 286 .seg6_enabled = 0,
bf355b8d
DL
287#ifdef CONFIG_IPV6_SEG6_HMAC
288 .seg6_require_hmac = 0,
289#endif
adc176c5 290 .enhanced_dad = 1,
d35a00b8 291 .addr_gen_mode = IN6_ADDR_GEN_MODE_EUI64,
df789fe7 292 .disable_policy = 0,
8610c7c6 293 .rpl_seg_enabled = 0,
9ee11f0f
JI
294 .ioam6_enabled = 0,
295 .ioam6_id = IOAM6_DEFAULT_IF_ID,
296 .ioam6_id_wide = IOAM6_DEFAULT_IF_ID_WIDE,
18ac597a 297 .ndisc_evict_nocarrier = 1,
1da177e4
LT
298};
299
1f372c7b
MM
300/* Check if link is ready: is it up and is a valid qdisc available */
301static inline bool addrconf_link_ready(const struct net_device *dev)
f24e3d65 302{
1f372c7b 303 return netif_oper_up(dev) && !qdisc_tx_is_noop(dev);
f24e3d65
MC
304}
305
b7b1bfce 306static void addrconf_del_rs_timer(struct inet6_dev *idev)
1da177e4 307{
b7b1bfce
HFS
308 if (del_timer(&idev->rs_timer))
309 __in6_dev_put(idev);
310}
311
c15b1cca 312static void addrconf_del_dad_work(struct inet6_ifaddr *ifp)
b7b1bfce 313{
c15b1cca 314 if (cancel_delayed_work(&ifp->dad_work))
1da177e4
LT
315 __in6_ifa_put(ifp);
316}
317
b7b1bfce
HFS
318static void addrconf_mod_rs_timer(struct inet6_dev *idev,
319 unsigned long when)
320{
321 if (!timer_pending(&idev->rs_timer))
322 in6_dev_hold(idev);
323 mod_timer(&idev->rs_timer, jiffies + when);
324}
1da177e4 325
c15b1cca
HFS
326static void addrconf_mod_dad_work(struct inet6_ifaddr *ifp,
327 unsigned long delay)
1da177e4 328{
f8a894b2
XL
329 in6_ifa_hold(ifp);
330 if (mod_delayed_work(addrconf_wq, &ifp->dad_work, delay))
331 in6_ifa_put(ifp);
1da177e4
LT
332}
333
7f7d9a6b
HX
334static int snmp6_alloc_dev(struct inet6_dev *idev)
335{
827da44c
JS
336 int i;
337
425b9c7f 338 idev->stats.ipv6 = alloc_percpu_gfp(struct ipstats_mib, GFP_KERNEL_ACCOUNT);
698365fa 339 if (!idev->stats.ipv6)
7f7d9a6b 340 goto err_ip;
827da44c
JS
341
342 for_each_possible_cpu(i) {
343 struct ipstats_mib *addrconf_stats;
698365fa 344 addrconf_stats = per_cpu_ptr(idev->stats.ipv6, i);
827da44c 345 u64_stats_init(&addrconf_stats->syncp);
827da44c
JS
346 }
347
348
be281e55
ED
349 idev->stats.icmpv6dev = kzalloc(sizeof(struct icmpv6_mib_device),
350 GFP_KERNEL);
351 if (!idev->stats.icmpv6dev)
7f7d9a6b 352 goto err_icmp;
be281e55 353 idev->stats.icmpv6msgdev = kzalloc(sizeof(struct icmpv6msg_mib_device),
425b9c7f 354 GFP_KERNEL_ACCOUNT);
be281e55 355 if (!idev->stats.icmpv6msgdev)
14878f75 356 goto err_icmpmsg;
7f7d9a6b
HX
357
358 return 0;
359
14878f75 360err_icmpmsg:
be281e55 361 kfree(idev->stats.icmpv6dev);
7f7d9a6b 362err_icmp:
698365fa 363 free_percpu(idev->stats.ipv6);
7f7d9a6b 364err_ip:
aaf70ec7 365 return -ENOMEM;
7f7d9a6b
HX
366}
367
8e5e8f30 368static struct inet6_dev *ipv6_add_dev(struct net_device *dev)
1da177e4
LT
369{
370 struct inet6_dev *ndev;
a317a2f1 371 int err = -ENOMEM;
1da177e4
LT
372
373 ASSERT_RTNL();
374
e5f80fcf 375 if (dev->mtu < IPV6_MIN_MTU && dev != blackhole_netdev)
a317a2f1 376 return ERR_PTR(-EINVAL);
1da177e4 377
425b9c7f 378 ndev = kzalloc(sizeof(*ndev), GFP_KERNEL_ACCOUNT);
63159f29 379 if (!ndev)
a317a2f1 380 return ERR_PTR(err);
322f74a4
IO
381
382 rwlock_init(&ndev->lock);
383 ndev->dev = dev;
502a2ffd 384 INIT_LIST_HEAD(&ndev->addr_list);
e99e88a9 385 timer_setup(&ndev->rs_timer, addrconf_rs_timer, 0);
c346dca1 386 memcpy(&ndev->cnf, dev_net(dev)->ipv6.devconf_dflt, sizeof(ndev->cnf));
9b29c696
HFS
387
388 if (ndev->cnf.stable_secret.initialized)
d35a00b8 389 ndev->cnf.addr_gen_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
9b29c696 390
322f74a4 391 ndev->cnf.mtu6 = dev->mtu;
49b99da2 392 ndev->ra_mtu = 0;
322f74a4 393 ndev->nd_parms = neigh_parms_alloc(dev, &nd_tbl);
63159f29 394 if (!ndev->nd_parms) {
322f74a4 395 kfree(ndev);
a317a2f1 396 return ERR_PTR(err);
322f74a4 397 }
0187bdfb
BH
398 if (ndev->cnf.forwarding)
399 dev_disable_lro(dev);
322f74a4 400 /* We refer to the device */
d62607c3 401 netdev_hold(dev, &ndev->dev_tracker, GFP_KERNEL);
1da177e4 402
dd263a8c
IS
403 if (snmp6_alloc_dev(ndev) < 0) {
404 netdev_dbg(dev, "%s: cannot allocate memory for statistics\n",
405 __func__);
406 neigh_parms_release(&nd_tbl, ndev->nd_parms);
d62607c3 407 netdev_put(dev, &ndev->dev_tracker);
dd263a8c
IS
408 kfree(ndev);
409 return ERR_PTR(err);
410 }
1da177e4 411
dd263a8c 412 if (dev != blackhole_netdev) {
e5f80fcf
ED
413 if (snmp6_register_dev(ndev) < 0) {
414 netdev_dbg(dev, "%s: cannot create /proc/net/dev_snmp6/%s\n",
415 __func__, dev->name);
416 goto err_release;
417 }
322f74a4 418 }
9d6280da 419 /* One reference from device. */
1be92460 420 refcount_set(&ndev->refcnt, 1);
1da177e4 421
1b34be74
YH
422 if (dev->flags & (IFF_NOARP | IFF_LOOPBACK))
423 ndev->cnf.accept_dad = -1;
424
07a93626 425#if IS_ENABLED(CONFIG_IPV6_SIT)
b077d7ab 426 if (dev->type == ARPHRD_SIT && (dev->priv_flags & IFF_ISATAP)) {
f3213831 427 pr_info("%s: Disabled Multicast RS\n", dev->name);
b077d7ab
YH
428 ndev->cnf.rtr_solicits = 0;
429 }
430#endif
431
372e6c8f 432 INIT_LIST_HEAD(&ndev->tempaddr_list);
76506a98 433 ndev->desync_factor = U32_MAX;
322f74a4
IO
434 if ((dev->flags&IFF_LOOPBACK) ||
435 dev->type == ARPHRD_TUNNEL ||
9625ed72 436 dev->type == ARPHRD_TUNNEL6 ||
0be669bb 437 dev->type == ARPHRD_SIT ||
0be669bb 438 dev->type == ARPHRD_NONE) {
322f74a4 439 ndev->cnf.use_tempaddr = -1;
969c5464 440 }
5d9efa7e 441
914faa14 442 ndev->token = in6addr_any;
1da177e4 443
1f372c7b 444 if (netif_running(dev) && addrconf_link_ready(dev))
53aadcc9
HX
445 ndev->if_flags |= IF_READY;
446
322f74a4
IO
447 ipv6_mc_init_dev(ndev);
448 ndev->tstamp = jiffies;
e5f80fcf
ED
449 if (dev != blackhole_netdev) {
450 err = addrconf_sysctl_register(ndev);
451 if (err) {
452 ipv6_mc_destroy_dev(ndev);
453 snmp6_unregister_dev(ndev);
454 goto err_release;
455 }
a317a2f1 456 }
30c4cf57 457 /* protected by rtnl_lock */
cf778b00 458 rcu_assign_pointer(dev->ip6_ptr, ndev);
d88ae4cc 459
e5f80fcf
ED
460 if (dev != blackhole_netdev) {
461 /* Join interface-local all-node multicast group */
462 ipv6_dev_mc_inc(dev, &in6addr_interfacelocal_allnodes);
2c5e8933 463
e5f80fcf
ED
464 /* Join all-node multicast group */
465 ipv6_dev_mc_inc(dev, &in6addr_linklocal_allnodes);
d6ddef9e 466
e5f80fcf
ED
467 /* Join all-router multicast group if forwarding is set */
468 if (ndev->cnf.forwarding && (dev->flags & IFF_MULTICAST))
469 ipv6_dev_mc_inc(dev, &in6addr_linklocal_allrouters);
470 }
1da177e4 471 return ndev;
a317a2f1
WC
472
473err_release:
474 neigh_parms_release(&nd_tbl, ndev->nd_parms);
475 ndev->dead = 1;
476 in6_dev_finish_destroy(ndev);
477 return ERR_PTR(err);
1da177e4
LT
478}
479
8e5e8f30 480static struct inet6_dev *ipv6_find_idev(struct net_device *dev)
1da177e4
LT
481{
482 struct inet6_dev *idev;
483
484 ASSERT_RTNL();
485
e21e8467
SH
486 idev = __in6_dev_get(dev);
487 if (!idev) {
488 idev = ipv6_add_dev(dev);
a317a2f1 489 if (IS_ERR(idev))
db0b99f5 490 return idev;
1da177e4 491 }
c5e33bdd 492
1da177e4
LT
493 if (dev->flags&IFF_UP)
494 ipv6_mc_up(idev);
495 return idev;
496}
497
f3a1bfb1
ND
498static int inet6_netconf_msgsize_devconf(int type)
499{
500 int size = NLMSG_ALIGN(sizeof(struct netconfmsg))
501 + nla_total_size(4); /* NETCONFA_IFINDEX */
136ba622 502 bool all = false;
f3a1bfb1 503
136ba622
ZS
504 if (type == NETCONFA_ALL)
505 all = true;
506
507 if (all || type == NETCONFA_FORWARDING)
f3a1bfb1 508 size += nla_total_size(4);
b1afce95 509#ifdef CONFIG_IPV6_MROUTE
136ba622 510 if (all || type == NETCONFA_MC_FORWARDING)
d67b8c61 511 size += nla_total_size(4);
b1afce95 512#endif
136ba622 513 if (all || type == NETCONFA_PROXY_NEIGH)
c92d5491 514 size += nla_total_size(4);
f3a1bfb1 515
136ba622 516 if (all || type == NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN)
35103d11
AG
517 size += nla_total_size(4);
518
f3a1bfb1
ND
519 return size;
520}
521
522static int inet6_netconf_fill_devconf(struct sk_buff *skb, int ifindex,
523 struct ipv6_devconf *devconf, u32 portid,
524 u32 seq, int event, unsigned int flags,
525 int type)
526{
527 struct nlmsghdr *nlh;
528 struct netconfmsg *ncm;
136ba622 529 bool all = false;
f3a1bfb1
ND
530
531 nlh = nlmsg_put(skb, portid, seq, event, sizeof(struct netconfmsg),
532 flags);
63159f29 533 if (!nlh)
f3a1bfb1
ND
534 return -EMSGSIZE;
535
136ba622
ZS
536 if (type == NETCONFA_ALL)
537 all = true;
538
f3a1bfb1
ND
539 ncm = nlmsg_data(nlh);
540 ncm->ncm_family = AF_INET6;
541
542 if (nla_put_s32(skb, NETCONFA_IFINDEX, ifindex) < 0)
543 goto nla_put_failure;
544
23452170
DA
545 if (!devconf)
546 goto out;
547
136ba622 548 if ((all || type == NETCONFA_FORWARDING) &&
f3a1bfb1
ND
549 nla_put_s32(skb, NETCONFA_FORWARDING, devconf->forwarding) < 0)
550 goto nla_put_failure;
b1afce95 551#ifdef CONFIG_IPV6_MROUTE
136ba622 552 if ((all || type == NETCONFA_MC_FORWARDING) &&
d67b8c61 553 nla_put_s32(skb, NETCONFA_MC_FORWARDING,
145c7a79 554 atomic_read(&devconf->mc_forwarding)) < 0)
d67b8c61 555 goto nla_put_failure;
b1afce95 556#endif
136ba622 557 if ((all || type == NETCONFA_PROXY_NEIGH) &&
c92d5491 558 nla_put_s32(skb, NETCONFA_PROXY_NEIGH, devconf->proxy_ndp) < 0)
559 goto nla_put_failure;
560
136ba622 561 if ((all || type == NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN) &&
35103d11
AG
562 nla_put_s32(skb, NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
563 devconf->ignore_routes_with_linkdown) < 0)
564 goto nla_put_failure;
565
23452170 566out:
053c095a
JB
567 nlmsg_end(skb, nlh);
568 return 0;
f3a1bfb1
ND
569
570nla_put_failure:
571 nlmsg_cancel(skb, nlh);
572 return -EMSGSIZE;
573}
574
85b3daad
DA
575void inet6_netconf_notify_devconf(struct net *net, int event, int type,
576 int ifindex, struct ipv6_devconf *devconf)
f3a1bfb1
ND
577{
578 struct sk_buff *skb;
579 int err = -ENOBUFS;
580
927265bc 581 skb = nlmsg_new(inet6_netconf_msgsize_devconf(type), GFP_KERNEL);
63159f29 582 if (!skb)
f3a1bfb1
ND
583 goto errout;
584
585 err = inet6_netconf_fill_devconf(skb, ifindex, devconf, 0, 0,
85b3daad 586 event, 0, type);
f3a1bfb1
ND
587 if (err < 0) {
588 /* -EMSGSIZE implies BUG in inet6_netconf_msgsize_devconf() */
589 WARN_ON(err == -EMSGSIZE);
590 kfree_skb(skb);
591 goto errout;
592 }
927265bc 593 rtnl_notify(skb, net, 0, RTNLGRP_IPV6_NETCONF, NULL, GFP_KERNEL);
f3a1bfb1
ND
594 return;
595errout:
bd779028 596 rtnl_set_sk_err(net, RTNLGRP_IPV6_NETCONF, err);
f3a1bfb1
ND
597}
598
76f8f6cb
ND
599static const struct nla_policy devconf_ipv6_policy[NETCONFA_MAX+1] = {
600 [NETCONFA_IFINDEX] = { .len = sizeof(int) },
601 [NETCONFA_FORWARDING] = { .len = sizeof(int) },
c92d5491 602 [NETCONFA_PROXY_NEIGH] = { .len = sizeof(int) },
35103d11 603 [NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN] = { .len = sizeof(int) },
76f8f6cb
ND
604};
605
38d51810
JK
606static int inet6_netconf_valid_get_req(struct sk_buff *skb,
607 const struct nlmsghdr *nlh,
608 struct nlattr **tb,
609 struct netlink_ext_ack *extack)
610{
611 int i, err;
612
613 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(struct netconfmsg))) {
614 NL_SET_ERR_MSG_MOD(extack, "Invalid header for netconf get request");
615 return -EINVAL;
616 }
617
618 if (!netlink_strict_get_check(skb))
8cb08174
JB
619 return nlmsg_parse_deprecated(nlh, sizeof(struct netconfmsg),
620 tb, NETCONFA_MAX,
621 devconf_ipv6_policy, extack);
38d51810 622
8cb08174
JB
623 err = nlmsg_parse_deprecated_strict(nlh, sizeof(struct netconfmsg),
624 tb, NETCONFA_MAX,
625 devconf_ipv6_policy, extack);
38d51810
JK
626 if (err)
627 return err;
628
629 for (i = 0; i <= NETCONFA_MAX; i++) {
630 if (!tb[i])
631 continue;
632
633 switch (i) {
634 case NETCONFA_IFINDEX:
635 break;
636 default:
637 NL_SET_ERR_MSG_MOD(extack, "Unsupported attribute in netconf get request");
638 return -EINVAL;
639 }
640 }
641
642 return 0;
643}
644
76f8f6cb 645static int inet6_netconf_get_devconf(struct sk_buff *in_skb,
c21ef3e3
DA
646 struct nlmsghdr *nlh,
647 struct netlink_ext_ack *extack)
76f8f6cb
ND
648{
649 struct net *net = sock_net(in_skb->sk);
650 struct nlattr *tb[NETCONFA_MAX+1];
4ea2607f
FW
651 struct inet6_dev *in6_dev = NULL;
652 struct net_device *dev = NULL;
76f8f6cb
ND
653 struct sk_buff *skb;
654 struct ipv6_devconf *devconf;
76f8f6cb
ND
655 int ifindex;
656 int err;
657
38d51810 658 err = inet6_netconf_valid_get_req(in_skb, nlh, tb, extack);
76f8f6cb 659 if (err < 0)
4ea2607f 660 return err;
76f8f6cb 661
76f8f6cb 662 if (!tb[NETCONFA_IFINDEX])
4ea2607f 663 return -EINVAL;
76f8f6cb 664
4ea2607f 665 err = -EINVAL;
76f8f6cb
ND
666 ifindex = nla_get_s32(tb[NETCONFA_IFINDEX]);
667 switch (ifindex) {
668 case NETCONFA_IFINDEX_ALL:
669 devconf = net->ipv6.devconf_all;
670 break;
671 case NETCONFA_IFINDEX_DEFAULT:
672 devconf = net->ipv6.devconf_dflt;
673 break;
674 default:
4ea2607f 675 dev = dev_get_by_index(net, ifindex);
63159f29 676 if (!dev)
4ea2607f
FW
677 return -EINVAL;
678 in6_dev = in6_dev_get(dev);
63159f29 679 if (!in6_dev)
76f8f6cb
ND
680 goto errout;
681 devconf = &in6_dev->cnf;
682 break;
683 }
684
685 err = -ENOBUFS;
4ea2607f 686 skb = nlmsg_new(inet6_netconf_msgsize_devconf(NETCONFA_ALL), GFP_KERNEL);
63159f29 687 if (!skb)
76f8f6cb
ND
688 goto errout;
689
690 err = inet6_netconf_fill_devconf(skb, ifindex, devconf,
691 NETLINK_CB(in_skb).portid,
692 nlh->nlmsg_seq, RTM_NEWNETCONF, 0,
136ba622 693 NETCONFA_ALL);
76f8f6cb
ND
694 if (err < 0) {
695 /* -EMSGSIZE implies BUG in inet6_netconf_msgsize_devconf() */
696 WARN_ON(err == -EMSGSIZE);
697 kfree_skb(skb);
698 goto errout;
699 }
700 err = rtnl_unicast(skb, net, NETLINK_CB(in_skb).portid);
701errout:
4ea2607f
FW
702 if (in6_dev)
703 in6_dev_put(in6_dev);
1160dfa1 704 dev_put(dev);
76f8f6cb
ND
705 return err;
706}
707
7a674200
ND
708static int inet6_netconf_dump_devconf(struct sk_buff *skb,
709 struct netlink_callback *cb)
710{
addd383f 711 const struct nlmsghdr *nlh = cb->nlh;
7a674200
ND
712 struct net *net = sock_net(skb->sk);
713 int h, s_h;
714 int idx, s_idx;
715 struct net_device *dev;
716 struct inet6_dev *idev;
717 struct hlist_head *head;
718
addd383f
DA
719 if (cb->strict_check) {
720 struct netlink_ext_ack *extack = cb->extack;
721 struct netconfmsg *ncm;
722
723 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ncm))) {
724 NL_SET_ERR_MSG_MOD(extack, "Invalid header for netconf dump request");
725 return -EINVAL;
726 }
727
728 if (nlmsg_attrlen(nlh, sizeof(*ncm))) {
729 NL_SET_ERR_MSG_MOD(extack, "Invalid data after header in netconf dump request");
730 return -EINVAL;
731 }
732 }
733
7a674200
ND
734 s_h = cb->args[0];
735 s_idx = idx = cb->args[1];
736
737 for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
738 idx = 0;
739 head = &net->dev_index_head[h];
740 rcu_read_lock();
63998ac2
ND
741 cb->seq = atomic_read(&net->ipv6.dev_addr_genid) ^
742 net->dev_base_seq;
7a674200
ND
743 hlist_for_each_entry_rcu(dev, head, index_hlist) {
744 if (idx < s_idx)
745 goto cont;
746 idev = __in6_dev_get(dev);
747 if (!idev)
748 goto cont;
749
750 if (inet6_netconf_fill_devconf(skb, dev->ifindex,
751 &idev->cnf,
752 NETLINK_CB(cb->skb).portid,
addd383f 753 nlh->nlmsg_seq,
7a674200
ND
754 RTM_NEWNETCONF,
755 NLM_F_MULTI,
136ba622 756 NETCONFA_ALL) < 0) {
7a674200
ND
757 rcu_read_unlock();
758 goto done;
759 }
63998ac2 760 nl_dump_check_consistent(cb, nlmsg_hdr(skb));
7a674200
ND
761cont:
762 idx++;
763 }
764 rcu_read_unlock();
765 }
766 if (h == NETDEV_HASHENTRIES) {
767 if (inet6_netconf_fill_devconf(skb, NETCONFA_IFINDEX_ALL,
768 net->ipv6.devconf_all,
769 NETLINK_CB(cb->skb).portid,
addd383f 770 nlh->nlmsg_seq,
7a674200 771 RTM_NEWNETCONF, NLM_F_MULTI,
136ba622 772 NETCONFA_ALL) < 0)
7a674200
ND
773 goto done;
774 else
775 h++;
776 }
777 if (h == NETDEV_HASHENTRIES + 1) {
778 if (inet6_netconf_fill_devconf(skb, NETCONFA_IFINDEX_DEFAULT,
779 net->ipv6.devconf_dflt,
780 NETLINK_CB(cb->skb).portid,
addd383f 781 nlh->nlmsg_seq,
7a674200 782 RTM_NEWNETCONF, NLM_F_MULTI,
136ba622 783 NETCONFA_ALL) < 0)
7a674200
ND
784 goto done;
785 else
786 h++;
787 }
788done:
789 cb->args[0] = h;
790 cb->args[1] = idx;
791
792 return skb->len;
793}
794
1da177e4
LT
795#ifdef CONFIG_SYSCTL
796static void dev_forward_change(struct inet6_dev *idev)
797{
798 struct net_device *dev;
799 struct inet6_ifaddr *ifa;
51454ea4 800 LIST_HEAD(tmp_addr_list);
1da177e4
LT
801
802 if (!idev)
803 return;
804 dev = idev->dev;
0187bdfb
BH
805 if (idev->cnf.forwarding)
806 dev_disable_lro(dev);
1a940835 807 if (dev->flags & IFF_MULTICAST) {
2c5e8933 808 if (idev->cnf.forwarding) {
f3ee4010 809 ipv6_dev_mc_inc(dev, &in6addr_linklocal_allrouters);
2c5e8933
HFS
810 ipv6_dev_mc_inc(dev, &in6addr_interfacelocal_allrouters);
811 ipv6_dev_mc_inc(dev, &in6addr_sitelocal_allrouters);
812 } else {
f3ee4010 813 ipv6_dev_mc_dec(dev, &in6addr_linklocal_allrouters);
2c5e8933
HFS
814 ipv6_dev_mc_dec(dev, &in6addr_interfacelocal_allrouters);
815 ipv6_dev_mc_dec(dev, &in6addr_sitelocal_allrouters);
816 }
1da177e4 817 }
502a2ffd 818
51454ea4 819 read_lock_bh(&idev->lock);
502a2ffd 820 list_for_each_entry(ifa, &idev->addr_list, if_list) {
2c12a74c
MW
821 if (ifa->flags&IFA_F_TENTATIVE)
822 continue;
51454ea4
ND
823 list_add_tail(&ifa->if_list_aux, &tmp_addr_list);
824 }
825 read_unlock_bh(&idev->lock);
826
827 while (!list_empty(&tmp_addr_list)) {
828 ifa = list_first_entry(&tmp_addr_list,
829 struct inet6_ifaddr, if_list_aux);
830 list_del(&ifa->if_list_aux);
1da177e4
LT
831 if (idev->cnf.forwarding)
832 addrconf_join_anycast(ifa);
833 else
834 addrconf_leave_anycast(ifa);
835 }
51454ea4 836
85b3daad
DA
837 inet6_netconf_notify_devconf(dev_net(dev), RTM_NEWNETCONF,
838 NETCONFA_FORWARDING,
f3a1bfb1 839 dev->ifindex, &idev->cnf);
1da177e4
LT
840}
841
842
e186932b 843static void addrconf_forward_change(struct net *net, __s32 newf)
1da177e4
LT
844{
845 struct net_device *dev;
846 struct inet6_dev *idev;
847
4acd4945 848 for_each_netdev(net, dev) {
1da177e4
LT
849 idev = __in6_dev_get(dev);
850 if (idev) {
e186932b
PE
851 int changed = (!idev->cnf.forwarding) ^ (!newf);
852 idev->cnf.forwarding = newf;
1da177e4
LT
853 if (changed)
854 dev_forward_change(idev);
855 }
1da177e4 856 }
1da177e4 857}
c8fecf22 858
013d97e9 859static int addrconf_fixup_forwarding(struct ctl_table *table, int *p, int newf)
c8fecf22 860{
bff16c2f 861 struct net *net;
013d97e9
FR
862 int old;
863
864 if (!rtnl_trylock())
865 return restart_syscall();
bff16c2f
PE
866
867 net = (struct net *)table->extra2;
013d97e9
FR
868 old = *p;
869 *p = newf;
b325fddb 870
013d97e9 871 if (p == &net->ipv6.devconf_dflt->forwarding) {
f3a1bfb1 872 if ((!newf) ^ (!old))
85b3daad
DA
873 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF,
874 NETCONFA_FORWARDING,
f3a1bfb1
ND
875 NETCONFA_IFINDEX_DEFAULT,
876 net->ipv6.devconf_dflt);
013d97e9
FR
877 rtnl_unlock();
878 return 0;
88af182e 879 }
c8fecf22 880
e186932b 881 if (p == &net->ipv6.devconf_all->forwarding) {
d26c638c
ND
882 int old_dflt = net->ipv6.devconf_dflt->forwarding;
883
e186932b 884 net->ipv6.devconf_dflt->forwarding = newf;
d26c638c 885 if ((!newf) ^ (!old_dflt))
85b3daad
DA
886 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF,
887 NETCONFA_FORWARDING,
d26c638c
ND
888 NETCONFA_IFINDEX_DEFAULT,
889 net->ipv6.devconf_dflt);
890
e186932b 891 addrconf_forward_change(net, newf);
f3a1bfb1 892 if ((!newf) ^ (!old))
85b3daad
DA
893 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF,
894 NETCONFA_FORWARDING,
f3a1bfb1
ND
895 NETCONFA_IFINDEX_ALL,
896 net->ipv6.devconf_all);
013d97e9 897 } else if ((!newf) ^ (!old))
c8fecf22 898 dev_forward_change((struct inet6_dev *)table->extra1);
0187bdfb 899 rtnl_unlock();
c8fecf22 900
013d97e9 901 if (newf)
7b4da532 902 rt6_purge_dflt_routers(net);
b325fddb 903 return 1;
c8fecf22 904}
35103d11
AG
905
906static void addrconf_linkdown_change(struct net *net, __s32 newf)
907{
908 struct net_device *dev;
909 struct inet6_dev *idev;
910
911 for_each_netdev(net, dev) {
912 idev = __in6_dev_get(dev);
913 if (idev) {
914 int changed = (!idev->cnf.ignore_routes_with_linkdown) ^ (!newf);
915
916 idev->cnf.ignore_routes_with_linkdown = newf;
917 if (changed)
918 inet6_netconf_notify_devconf(dev_net(dev),
85b3daad 919 RTM_NEWNETCONF,
35103d11
AG
920 NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
921 dev->ifindex,
922 &idev->cnf);
923 }
924 }
925}
926
927static int addrconf_fixup_linkdown(struct ctl_table *table, int *p, int newf)
928{
929 struct net *net;
930 int old;
931
932 if (!rtnl_trylock())
933 return restart_syscall();
934
935 net = (struct net *)table->extra2;
936 old = *p;
937 *p = newf;
938
939 if (p == &net->ipv6.devconf_dflt->ignore_routes_with_linkdown) {
940 if ((!newf) ^ (!old))
941 inet6_netconf_notify_devconf(net,
85b3daad 942 RTM_NEWNETCONF,
35103d11
AG
943 NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
944 NETCONFA_IFINDEX_DEFAULT,
945 net->ipv6.devconf_dflt);
946 rtnl_unlock();
947 return 0;
948 }
949
950 if (p == &net->ipv6.devconf_all->ignore_routes_with_linkdown) {
951 net->ipv6.devconf_dflt->ignore_routes_with_linkdown = newf;
952 addrconf_linkdown_change(net, newf);
953 if ((!newf) ^ (!old))
954 inet6_netconf_notify_devconf(net,
85b3daad 955 RTM_NEWNETCONF,
35103d11
AG
956 NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
957 NETCONFA_IFINDEX_ALL,
958 net->ipv6.devconf_all);
959 }
960 rtnl_unlock();
961
962 return 1;
963}
964
1da177e4
LT
965#endif
966
5c578aed 967/* Nobody refers to this ifaddr, destroy it */
1da177e4
LT
968void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp)
969{
c2e21293 970 WARN_ON(!hlist_unhashed(&ifp->addr_lst));
547b792c 971
1da177e4 972#ifdef NET_REFCNT_DEBUG
91df42be 973 pr_debug("%s\n", __func__);
1da177e4
LT
974#endif
975
976 in6_dev_put(ifp->idev);
977
c15b1cca
HFS
978 if (cancel_delayed_work(&ifp->dad_work))
979 pr_notice("delayed DAD work was pending while freeing ifa=%p\n",
980 ifp);
1da177e4 981
e9d3e084 982 if (ifp->state != INET6_IFADDR_STATE_DEAD) {
f3213831 983 pr_warn("Freeing alive inet6 address %p\n", ifp);
1da177e4
LT
984 return;
985 }
1da177e4 986
e5785985 987 kfree_rcu(ifp, rcu);
1da177e4
LT
988}
989
e55ffac6
BH
990static void
991ipv6_link_dev_addr(struct inet6_dev *idev, struct inet6_ifaddr *ifp)
992{
502a2ffd 993 struct list_head *p;
8a6ce0c0 994 int ifp_scope = ipv6_addr_src_scope(&ifp->addr);
e55ffac6
BH
995
996 /*
997 * Each device address list is sorted in order of scope -
998 * global before linklocal.
999 */
502a2ffd 1000 list_for_each(p, &idev->addr_list) {
1001 struct inet6_ifaddr *ifa
1002 = list_entry(p, struct inet6_ifaddr, if_list);
8a6ce0c0 1003 if (ifp_scope >= ipv6_addr_src_scope(&ifa->addr))
e55ffac6
BH
1004 break;
1005 }
1006
8ef802aa 1007 list_add_tail_rcu(&ifp->if_list, p);
e55ffac6
BH
1008}
1009
3f27fb23 1010static u32 inet6_addr_hash(const struct net *net, const struct in6_addr *addr)
3eb84f49 1011{
3f27fb23
ED
1012 u32 val = ipv6_addr_hash(addr) ^ net_hash_mix(net);
1013
1014 return hash_32(val, IN6_ADDR_HSIZE_SHIFT);
3eb84f49
YH
1015}
1016
56fc709b 1017static bool ipv6_chk_same_addr(struct net *net, const struct in6_addr *addr,
752a9292 1018 struct net_device *dev, unsigned int hash)
56fc709b 1019{
56fc709b
ED
1020 struct inet6_ifaddr *ifp;
1021
e66d1172 1022 hlist_for_each_entry(ifp, &net->ipv6.inet6_addr_lst[hash], addr_lst) {
56fc709b
ED
1023 if (ipv6_addr_equal(&ifp->addr, addr)) {
1024 if (!dev || ifp->idev->dev == dev)
1025 return true;
1026 }
1027 }
1028 return false;
1029}
1030
f3d9832e
DA
1031static int ipv6_add_addr_hash(struct net_device *dev, struct inet6_ifaddr *ifa)
1032{
e66d1172
ED
1033 struct net *net = dev_net(dev);
1034 unsigned int hash = inet6_addr_hash(net, &ifa->addr);
f3d9832e
DA
1035 int err = 0;
1036
e66d1172 1037 spin_lock(&net->ipv6.addrconf_hash_lock);
f3d9832e
DA
1038
1039 /* Ignore adding duplicate addresses on an interface */
e66d1172 1040 if (ipv6_chk_same_addr(net, &ifa->addr, dev, hash)) {
e32ac250 1041 netdev_dbg(dev, "ipv6_add_addr: already assigned\n");
f3d9832e 1042 err = -EEXIST;
752a9292 1043 } else {
e66d1172 1044 hlist_add_head_rcu(&ifa->addr_lst, &net->ipv6.inet6_addr_lst[hash]);
f3d9832e
DA
1045 }
1046
e66d1172 1047 spin_unlock(&net->ipv6.addrconf_hash_lock);
f3d9832e
DA
1048
1049 return err;
1050}
1051
1da177e4
LT
1052/* On success it returns ifp with increased reference count */
1053
1054static struct inet6_ifaddr *
e6464b8c 1055ipv6_add_addr(struct inet6_dev *idev, struct ifa6_config *cfg,
de95e047 1056 bool can_block, struct netlink_ext_ack *extack)
1da177e4 1057{
f3d9832e 1058 gfp_t gfp_flags = can_block ? GFP_KERNEL : GFP_ATOMIC;
e6464b8c 1059 int addr_type = ipv6_addr_type(cfg->pfx);
df789fe7 1060 struct net *net = dev_net(idev->dev);
1da177e4 1061 struct inet6_ifaddr *ifa = NULL;
360a9887 1062 struct fib6_info *f6i = NULL;
1da177e4 1063 int err = 0;
d68b8270
YH
1064
1065 if (addr_type == IPV6_ADDR_ANY ||
f17f7648
HL
1066 (addr_type & IPV6_ADDR_MULTICAST &&
1067 !(cfg->ifa_flags & IFA_F_MCAUTOJOIN)) ||
d68b8270 1068 (!(idev->dev->flags & IFF_LOOPBACK) &&
3ede0bbc 1069 !netif_is_l3_master(idev->dev) &&
d68b8270
YH
1070 addr_type & IPV6_ADDR_LOOPBACK))
1071 return ERR_PTR(-EADDRNOTAVAIL);
1da177e4 1072
1da177e4
LT
1073 if (idev->dead) {
1074 err = -ENODEV; /*XXX*/
f3d9832e 1075 goto out;
1da177e4
LT
1076 }
1077
56d417b1 1078 if (idev->cnf.disable_ipv6) {
9bdd8d40 1079 err = -EACCES;
f3d9832e 1080 goto out;
9bdd8d40
BH
1081 }
1082
ff7883ea
DA
1083 /* validator notifier needs to be blocking;
1084 * do not call in atomic context
1085 */
1086 if (can_block) {
1087 struct in6_validator_info i6vi = {
e6464b8c 1088 .i6vi_addr = *cfg->pfx,
ff7883ea 1089 .i6vi_dev = idev,
de95e047 1090 .extack = extack,
ff7883ea
DA
1091 };
1092
1093 err = inet6addr_validator_notifier_call_chain(NETDEV_UP, &i6vi);
1094 err = notifier_to_errno(err);
1095 if (err < 0)
1096 goto out;
1097 }
1da177e4 1098
6126891c 1099 ifa = kzalloc(sizeof(*ifa), gfp_flags | __GFP_ACCOUNT);
63159f29 1100 if (!ifa) {
1da177e4
LT
1101 err = -ENOBUFS;
1102 goto out;
1103 }
1104
e6464b8c 1105 f6i = addrconf_f6i_alloc(net, idev, cfg->pfx, false, gfp_flags);
360a9887
DA
1106 if (IS_ERR(f6i)) {
1107 err = PTR_ERR(f6i);
1108 f6i = NULL;
1da177e4
LT
1109 goto out;
1110 }
1111
bba24896
JP
1112 neigh_parms_data_state_setall(idev->nd_parms);
1113
e6464b8c
DA
1114 ifa->addr = *cfg->pfx;
1115 if (cfg->peer_pfx)
1116 ifa->peer_addr = *cfg->peer_pfx;
1da177e4
LT
1117
1118 spin_lock_init(&ifa->lock);
c15b1cca 1119 INIT_DELAYED_WORK(&ifa->dad_work, addrconf_dad_work);
c2e21293 1120 INIT_HLIST_NODE(&ifa->addr_lst);
e6464b8c
DA
1121 ifa->scope = cfg->scope;
1122 ifa->prefix_len = cfg->plen;
8308f3ff 1123 ifa->rt_priority = cfg->rt_priority;
e6464b8c 1124 ifa->flags = cfg->ifa_flags;
47f0bd50 1125 ifa->ifa_proto = cfg->ifa_proto;
66eb9f86 1126 /* No need to add the TENTATIVE flag for addresses with NODAD */
e6464b8c 1127 if (!(cfg->ifa_flags & IFA_F_NODAD))
66eb9f86 1128 ifa->flags |= IFA_F_TENTATIVE;
e6464b8c
DA
1129 ifa->valid_lft = cfg->valid_lft;
1130 ifa->prefered_lft = cfg->preferred_lft;
1da177e4 1131 ifa->cstamp = ifa->tstamp = jiffies;
617fe29d 1132 ifa->tokenized = false;
1da177e4 1133
360a9887 1134 ifa->rt = f6i;
57f5f544 1135
1da177e4 1136 ifa->idev = idev;
f3d9832e
DA
1137 in6_dev_hold(idev);
1138
1da177e4 1139 /* For caller */
271201c0 1140 refcount_set(&ifa->refcnt, 1);
1da177e4 1141
f3d9832e 1142 rcu_read_lock_bh();
1da177e4 1143
f3d9832e
DA
1144 err = ipv6_add_addr_hash(idev->dev, ifa);
1145 if (err < 0) {
1146 rcu_read_unlock_bh();
1147 goto out;
1148 }
1da177e4
LT
1149
1150 write_lock(&idev->lock);
f3d9832e 1151
1da177e4 1152 /* Add to inet6_dev unicast addr list. */
e55ffac6 1153 ipv6_link_dev_addr(idev, ifa);
1da177e4 1154
1da177e4 1155 if (ifa->flags&IFA_F_TEMPORARY) {
372e6c8f 1156 list_add(&ifa->tmp_list, &idev->tempaddr_list);
1da177e4
LT
1157 in6_ifa_hold(ifa);
1158 }
1da177e4 1159
1da177e4
LT
1160 in6_ifa_hold(ifa);
1161 write_unlock(&idev->lock);
f3d9832e 1162
8814c4b5 1163 rcu_read_unlock_bh();
1da177e4 1164
f3d9832e
DA
1165 inet6addr_notifier_call_chain(NETDEV_UP, ifa);
1166out:
1167 if (unlikely(err < 0)) {
360a9887 1168 fib6_info_release(f6i);
93531c67 1169
f3d9832e
DA
1170 if (ifa) {
1171 if (ifa->idev)
1172 in6_dev_put(ifa->idev);
1173 kfree(ifa);
1174 }
1da177e4
LT
1175 ifa = ERR_PTR(err);
1176 }
1177
1178 return ifa;
1da177e4
LT
1179}
1180
5b84efec
TH
1181enum cleanup_prefix_rt_t {
1182 CLEANUP_PREFIX_RT_NOP, /* no cleanup action for prefix route */
1183 CLEANUP_PREFIX_RT_DEL, /* delete the prefix route */
1184 CLEANUP_PREFIX_RT_EXPIRE, /* update the lifetime of the prefix route */
1185};
1186
1187/*
1188 * Check, whether the prefix for ifp would still need a prefix route
1189 * after deleting ifp. The function returns one of the CLEANUP_PREFIX_RT_*
1190 * constants.
1191 *
1192 * 1) we don't purge prefix if address was not permanent.
1193 * prefix is managed by its own lifetime.
1194 * 2) we also don't purge, if the address was IFA_F_NOPREFIXROUTE.
1195 * 3) if there are no addresses, delete prefix.
1196 * 4) if there are still other permanent address(es),
1197 * corresponding prefix is still permanent.
1198 * 5) if there are still other addresses with IFA_F_NOPREFIXROUTE,
1199 * don't purge the prefix, assume user space is managing it.
1200 * 6) otherwise, update prefix lifetime to the
1201 * longest valid lifetime among the corresponding
1202 * addresses on the device.
1203 * Note: subsequent RA will update lifetime.
1204 **/
1205static enum cleanup_prefix_rt_t
1206check_cleanup_prefix_route(struct inet6_ifaddr *ifp, unsigned long *expires)
1207{
1208 struct inet6_ifaddr *ifa;
1209 struct inet6_dev *idev = ifp->idev;
1210 unsigned long lifetime;
1211 enum cleanup_prefix_rt_t action = CLEANUP_PREFIX_RT_DEL;
1212
1213 *expires = jiffies;
1214
1215 list_for_each_entry(ifa, &idev->addr_list, if_list) {
1216 if (ifa == ifp)
1217 continue;
e75913c9
ZL
1218 if (ifa->prefix_len != ifp->prefix_len ||
1219 !ipv6_prefix_equal(&ifa->addr, &ifp->addr,
5b84efec
TH
1220 ifp->prefix_len))
1221 continue;
1222 if (ifa->flags & (IFA_F_PERMANENT | IFA_F_NOPREFIXROUTE))
1223 return CLEANUP_PREFIX_RT_NOP;
1224
1225 action = CLEANUP_PREFIX_RT_EXPIRE;
1226
1227 spin_lock(&ifa->lock);
1228
1229 lifetime = addrconf_timeout_fixup(ifa->valid_lft, HZ);
1230 /*
1231 * Note: Because this address is
1232 * not permanent, lifetime <
1233 * LONG_MAX / HZ here.
1234 */
1235 if (time_before(*expires, ifa->tstamp + lifetime * HZ))
1236 *expires = ifa->tstamp + lifetime * HZ;
1237 spin_unlock(&ifa->lock);
1238 }
1239
1240 return action;
1241}
1242
1243static void
d0098e4c
HL
1244cleanup_prefix_route(struct inet6_ifaddr *ifp, unsigned long expires,
1245 bool del_rt, bool del_peer)
5b84efec 1246{
93c2fb25 1247 struct fib6_info *f6i;
5b84efec 1248
d0098e4c
HL
1249 f6i = addrconf_get_prefix_route(del_peer ? &ifp->peer_addr : &ifp->addr,
1250 ifp->prefix_len,
2b2450ca 1251 ifp->idev->dev, 0, RTF_DEFAULT, true);
93c2fb25 1252 if (f6i) {
5b84efec 1253 if (del_rt)
11dd74b3 1254 ip6_del_rt(dev_net(ifp->idev->dev), f6i, false);
5b84efec 1255 else {
93c2fb25
DA
1256 if (!(f6i->fib6_flags & RTF_EXPIRES))
1257 fib6_set_expires(f6i, expires);
1258 fib6_info_release(f6i);
5b84efec
TH
1259 }
1260 }
1261}
1262
1263
1da177e4
LT
1264/* This function wants to get referenced ifp and releases it before return */
1265
1266static void ipv6_del_addr(struct inet6_ifaddr *ifp)
1267{
5b84efec 1268 enum cleanup_prefix_rt_t action = CLEANUP_PREFIX_RT_NOP;
e66d1172 1269 struct net *net = dev_net(ifp->idev->dev);
5b84efec 1270 unsigned long expires;
e66d1172 1271 int state;
1da177e4 1272
c15b1cca
HFS
1273 ASSERT_RTNL();
1274
8e8e676d 1275 spin_lock_bh(&ifp->lock);
4c5ff6a6 1276 state = ifp->state;
e9d3e084 1277 ifp->state = INET6_IFADDR_STATE_DEAD;
8e8e676d 1278 spin_unlock_bh(&ifp->lock);
4c5ff6a6
HX
1279
1280 if (state == INET6_IFADDR_STATE_DEAD)
1281 goto out;
1da177e4 1282
e66d1172 1283 spin_lock_bh(&net->ipv6.addrconf_hash_lock);
5c578aed 1284 hlist_del_init_rcu(&ifp->addr_lst);
e66d1172 1285 spin_unlock_bh(&net->ipv6.addrconf_hash_lock);
1da177e4 1286
5b84efec 1287 write_lock_bh(&ifp->idev->lock);
5d9efa7e 1288
1da177e4 1289 if (ifp->flags&IFA_F_TEMPORARY) {
372e6c8f 1290 list_del(&ifp->tmp_list);
1291 if (ifp->ifpub) {
1292 in6_ifa_put(ifp->ifpub);
1293 ifp->ifpub = NULL;
1da177e4 1294 }
372e6c8f 1295 __in6_ifa_put(ifp);
1da177e4 1296 }
1da177e4 1297
5b84efec
TH
1298 if (ifp->flags & IFA_F_PERMANENT && !(ifp->flags & IFA_F_NOPREFIXROUTE))
1299 action = check_cleanup_prefix_route(ifp, &expires);
502a2ffd 1300
8ef802aa 1301 list_del_rcu(&ifp->if_list);
5b84efec
TH
1302 __in6_ifa_put(ifp);
1303
1304 write_unlock_bh(&ifp->idev->lock);
1da177e4 1305
c15b1cca 1306 addrconf_del_dad_work(ifp);
b2238566 1307
1da177e4
LT
1308 ipv6_ifa_notify(RTM_DELADDR, ifp);
1309
f88c91dd 1310 inet6addr_notifier_call_chain(NETDEV_DOWN, ifp);
1da177e4 1311
5b84efec
TH
1312 if (action != CLEANUP_PREFIX_RT_NOP) {
1313 cleanup_prefix_route(ifp, expires,
d0098e4c 1314 action == CLEANUP_PREFIX_RT_DEL, false);
1da177e4
LT
1315 }
1316
c3968a85
DW
1317 /* clean up prefsrc entries */
1318 rt6_remove_prefsrc(ifp);
4c5ff6a6 1319out:
1da177e4
LT
1320 in6_ifa_put(ifp);
1321}
1322
969c5464 1323static int ipv6_create_tempaddr(struct inet6_ifaddr *ifp, bool block)
1da177e4
LT
1324{
1325 struct inet6_dev *idev = ifp->idev;
e6464b8c 1326 unsigned long tmp_tstamp, age;
eac55bf9 1327 unsigned long regen_advance;
76f793e3 1328 unsigned long now = jiffies;
7aa8e63f 1329 s32 cnf_temp_preferred_lft;
969c5464
FG
1330 struct inet6_ifaddr *ift;
1331 struct ifa6_config cfg;
1332 long max_desync_factor;
1333 struct in6_addr addr;
1334 int ret = 0;
1da177e4 1335
53bd6749 1336 write_lock_bh(&idev->lock);
969c5464 1337
1da177e4
LT
1338retry:
1339 in6_dev_hold(idev);
1340 if (idev->cnf.use_tempaddr <= 0) {
53bd6749 1341 write_unlock_bh(&idev->lock);
f3213831 1342 pr_info("%s: use_tempaddr is disabled\n", __func__);
1da177e4
LT
1343 in6_dev_put(idev);
1344 ret = -1;
1345 goto out;
1346 }
1347 spin_lock_bh(&ifp->lock);
1348 if (ifp->regen_count++ >= idev->cnf.regen_max_retry) {
1349 idev->cnf.use_tempaddr = -1; /*XXX*/
1350 spin_unlock_bh(&ifp->lock);
53bd6749 1351 write_unlock_bh(&idev->lock);
f3213831
JP
1352 pr_warn("%s: regeneration time exceeded - disabled temporary address support\n",
1353 __func__);
1da177e4
LT
1354 in6_dev_put(idev);
1355 ret = -1;
1356 goto out;
1357 }
1358 in6_ifa_hold(ifp);
1359 memcpy(addr.s6_addr, ifp->addr.s6_addr, 8);
969c5464
FG
1360 ipv6_gen_rnd_iid(&addr);
1361
76f793e3 1362 age = (now - ifp->tstamp) / HZ;
76506a98
JB
1363
1364 regen_advance = idev->cnf.regen_max_retry *
1365 idev->cnf.dad_transmits *
19e16d22 1366 max(NEIGH_VAR(idev->nd_parms, RETRANS_TIME), HZ/100) / HZ;
76506a98
JB
1367
1368 /* recalculate max_desync_factor each time and update
1369 * idev->desync_factor if it's larger
1370 */
7aa8e63f 1371 cnf_temp_preferred_lft = READ_ONCE(idev->cnf.temp_prefered_lft);
76506a98
JB
1372 max_desync_factor = min_t(__u32,
1373 idev->cnf.max_desync_factor,
7aa8e63f 1374 cnf_temp_preferred_lft - regen_advance);
76506a98
JB
1375
1376 if (unlikely(idev->desync_factor > max_desync_factor)) {
1377 if (max_desync_factor > 0) {
1378 get_random_bytes(&idev->desync_factor,
1379 sizeof(idev->desync_factor));
1380 idev->desync_factor %= max_desync_factor;
1381 } else {
1382 idev->desync_factor = 0;
1383 }
1384 }
1385
3f2d67b6 1386 memset(&cfg, 0, sizeof(cfg));
e6464b8c 1387 cfg.valid_lft = min_t(__u32, ifp->valid_lft,
7a876b0e 1388 idev->cnf.temp_valid_lft + age);
e6464b8c
DA
1389 cfg.preferred_lft = cnf_temp_preferred_lft + age - idev->desync_factor;
1390 cfg.preferred_lft = min_t(__u32, ifp->prefered_lft, cfg.preferred_lft);
1391
1392 cfg.plen = ifp->prefix_len;
1da177e4
LT
1393 tmp_tstamp = ifp->tstamp;
1394 spin_unlock_bh(&ifp->lock);
1395
53bd6749 1396 write_unlock_bh(&idev->lock);
95c385b4 1397
eac55bf9
BB
1398 /* A temporary address is created only if this calculated Preferred
1399 * Lifetime is greater than REGEN_ADVANCE time units. In particular,
1400 * an implementation must not create a temporary address with a zero
1401 * Preferred Lifetime.
ecab6701
HK
1402 * Use age calculation as in addrconf_verify to avoid unnecessary
1403 * temporary addresses being generated.
eac55bf9 1404 */
ecab6701 1405 age = (now - tmp_tstamp + ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
e6464b8c 1406 if (cfg.preferred_lft <= regen_advance + age) {
eac55bf9
BB
1407 in6_ifa_put(ifp);
1408 in6_dev_put(idev);
1409 ret = -1;
1410 goto out;
1411 }
1412
e6464b8c 1413 cfg.ifa_flags = IFA_F_TEMPORARY;
95c385b4
NH
1414 /* set in addrconf_prefix_rcv() */
1415 if (ifp->flags & IFA_F_OPTIMISTIC)
e6464b8c 1416 cfg.ifa_flags |= IFA_F_OPTIMISTIC;
95c385b4 1417
e6464b8c
DA
1418 cfg.pfx = &addr;
1419 cfg.scope = ipv6_addr_scope(cfg.pfx);
95c385b4 1420
e6464b8c 1421 ift = ipv6_add_addr(idev, &cfg, block, NULL);
4b08a8f1 1422 if (IS_ERR(ift)) {
1da177e4
LT
1423 in6_ifa_put(ifp);
1424 in6_dev_put(idev);
f3213831 1425 pr_info("%s: retry temporary address regeneration\n", __func__);
53bd6749 1426 write_lock_bh(&idev->lock);
1da177e4
LT
1427 goto retry;
1428 }
1429
1430 spin_lock_bh(&ift->lock);
1431 ift->ifpub = ifp;
76f793e3 1432 ift->cstamp = now;
1da177e4
LT
1433 ift->tstamp = tmp_tstamp;
1434 spin_unlock_bh(&ift->lock);
1435
cf22f9a2 1436 addrconf_dad_start(ift);
1da177e4
LT
1437 in6_ifa_put(ift);
1438 in6_dev_put(idev);
1439out:
1440 return ret;
1441}
1da177e4
LT
1442
1443/*
072047e4 1444 * Choose an appropriate source address (RFC3484)
1da177e4 1445 */
a9b05723
YH
1446enum {
1447 IPV6_SADDR_RULE_INIT = 0,
1448 IPV6_SADDR_RULE_LOCAL,
1449 IPV6_SADDR_RULE_SCOPE,
1450 IPV6_SADDR_RULE_PREFERRED,
1451#ifdef CONFIG_IPV6_MIP6
1452 IPV6_SADDR_RULE_HOA,
1453#endif
1454 IPV6_SADDR_RULE_OIF,
1455 IPV6_SADDR_RULE_LABEL,
a9b05723 1456 IPV6_SADDR_RULE_PRIVACY,
a9b05723
YH
1457 IPV6_SADDR_RULE_ORCHID,
1458 IPV6_SADDR_RULE_PREFIX,
7fd2561e
EK
1459#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
1460 IPV6_SADDR_RULE_NOT_OPTIMISTIC,
1461#endif
a9b05723
YH
1462 IPV6_SADDR_RULE_MAX
1463};
1464
072047e4 1465struct ipv6_saddr_score {
a9b05723
YH
1466 int rule;
1467 int addr_type;
1468 struct inet6_ifaddr *ifa;
1469 DECLARE_BITMAP(scorebits, IPV6_SADDR_RULE_MAX);
1470 int scopedist;
1471 int matchlen;
072047e4
YH
1472};
1473
a9b05723 1474struct ipv6_saddr_dst {
9acd9f3a 1475 const struct in6_addr *addr;
a9b05723
YH
1476 int ifindex;
1477 int scope;
1478 int label;
7cbca67c 1479 unsigned int prefs;
a9b05723 1480};
072047e4 1481
b6f99a21 1482static inline int ipv6_saddr_preferred(int type)
1da177e4 1483{
45bb0060 1484 if (type & (IPV6_ADDR_MAPPED|IPV6_ADDR_COMPATv4|IPV6_ADDR_LOOPBACK))
072047e4
YH
1485 return 1;
1486 return 0;
1da177e4
LT
1487}
1488
35e015e1
MC
1489static bool ipv6_use_optimistic_addr(struct net *net,
1490 struct inet6_dev *idev)
7fd2561e
EK
1491{
1492#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
35e015e1
MC
1493 if (!idev)
1494 return false;
1495 if (!net->ipv6.devconf_all->optimistic_dad && !idev->cnf.optimistic_dad)
1496 return false;
1497 if (!net->ipv6.devconf_all->use_optimistic && !idev->cnf.use_optimistic)
1498 return false;
1499
1500 return true;
7fd2561e
EK
1501#else
1502 return false;
1503#endif
1504}
1505
f1c02cfb
SD
1506static bool ipv6_allow_optimistic_dad(struct net *net,
1507 struct inet6_dev *idev)
1508{
1509#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
1510 if (!idev)
1511 return false;
1512 if (!net->ipv6.devconf_all->optimistic_dad && !idev->cnf.optimistic_dad)
1513 return false;
1514
1515 return true;
1516#else
1517 return false;
1518#endif
1519}
1520
3de23255
BT
1521static int ipv6_get_saddr_eval(struct net *net,
1522 struct ipv6_saddr_score *score,
a9b05723
YH
1523 struct ipv6_saddr_dst *dst,
1524 int i)
1525{
1526 int ret;
1527
1528 if (i <= score->rule) {
1529 switch (i) {
1530 case IPV6_SADDR_RULE_SCOPE:
1531 ret = score->scopedist;
1532 break;
1533 case IPV6_SADDR_RULE_PREFIX:
1534 ret = score->matchlen;
1535 break;
1536 default:
1537 ret = !!test_bit(i, score->scorebits);
1538 }
1539 goto out;
1540 }
1541
1542 switch (i) {
1543 case IPV6_SADDR_RULE_INIT:
1544 /* Rule 0: remember if hiscore is not ready yet */
1545 ret = !!score->ifa;
1546 break;
1547 case IPV6_SADDR_RULE_LOCAL:
1548 /* Rule 1: Prefer same address */
1549 ret = ipv6_addr_equal(&score->ifa->addr, dst->addr);
1550 break;
1551 case IPV6_SADDR_RULE_SCOPE:
1552 /* Rule 2: Prefer appropriate scope
1553 *
1554 * ret
1555 * ^
1556 * -1 | d 15
1557 * ---+--+-+---> scope
1558 * |
1559 * | d is scope of the destination.
1560 * B-d | \
1561 * | \ <- smaller scope is better if
db9c7c39 1562 * B-15 | \ if scope is enough for destination.
a9b05723
YH
1563 * | ret = B - scope (-1 <= scope >= d <= 15).
1564 * d-C-1 | /
1565 * |/ <- greater is better
1566 * -C / if scope is not enough for destination.
1567 * /| ret = scope - C (-1 <= d < scope <= 15).
1568 *
1569 * d - C - 1 < B -15 (for all -1 <= d <= 15).
1570 * C > d + 14 - B >= 15 + 14 - B = 29 - B.
1571 * Assume B = 0 and we get C > 29.
1572 */
1573 ret = __ipv6_addr_src_scope(score->addr_type);
1574 if (ret >= dst->scope)
1575 ret = -ret;
1576 else
1577 ret -= 128; /* 30 is enough */
1578 score->scopedist = ret;
1579 break;
1580 case IPV6_SADDR_RULE_PREFERRED:
7fd2561e 1581 {
a9b05723 1582 /* Rule 3: Avoid deprecated and optimistic addresses */
7fd2561e
EK
1583 u8 avoid = IFA_F_DEPRECATED;
1584
35e015e1 1585 if (!ipv6_use_optimistic_addr(net, score->ifa->idev))
7fd2561e 1586 avoid |= IFA_F_OPTIMISTIC;
a9b05723 1587 ret = ipv6_saddr_preferred(score->addr_type) ||
7fd2561e 1588 !(score->ifa->flags & avoid);
a9b05723 1589 break;
7fd2561e 1590 }
a9b05723
YH
1591#ifdef CONFIG_IPV6_MIP6
1592 case IPV6_SADDR_RULE_HOA:
7cbca67c 1593 {
a9b05723 1594 /* Rule 4: Prefer home address */
7cbca67c
YH
1595 int prefhome = !(dst->prefs & IPV6_PREFER_SRC_COA);
1596 ret = !(score->ifa->flags & IFA_F_HOMEADDRESS) ^ prefhome;
a9b05723 1597 break;
7cbca67c 1598 }
a9b05723
YH
1599#endif
1600 case IPV6_SADDR_RULE_OIF:
1601 /* Rule 5: Prefer outgoing interface */
1602 ret = (!dst->ifindex ||
1603 dst->ifindex == score->ifa->idev->dev->ifindex);
1604 break;
1605 case IPV6_SADDR_RULE_LABEL:
1606 /* Rule 6: Prefer matching label */
3de23255
BT
1607 ret = ipv6_addr_label(net,
1608 &score->ifa->addr, score->addr_type,
a9b05723
YH
1609 score->ifa->idev->dev->ifindex) == dst->label;
1610 break;
a9b05723 1611 case IPV6_SADDR_RULE_PRIVACY:
7cbca67c 1612 {
a9b05723 1613 /* Rule 7: Prefer public address
25985edc 1614 * Note: prefer temporary address if use_tempaddr >= 2
a9b05723 1615 */
7cbca67c
YH
1616 int preftmp = dst->prefs & (IPV6_PREFER_SRC_PUBLIC|IPV6_PREFER_SRC_TMP) ?
1617 !!(dst->prefs & IPV6_PREFER_SRC_TMP) :
1618 score->ifa->idev->cnf.use_tempaddr >= 2;
1619 ret = (!(score->ifa->flags & IFA_F_TEMPORARY)) ^ preftmp;
a9b05723 1620 break;
7cbca67c 1621 }
a9b05723
YH
1622 case IPV6_SADDR_RULE_ORCHID:
1623 /* Rule 8-: Prefer ORCHID vs ORCHID or
1624 * non-ORCHID vs non-ORCHID
1625 */
1626 ret = !(ipv6_addr_orchid(&score->ifa->addr) ^
1627 ipv6_addr_orchid(dst->addr));
1628 break;
1629 case IPV6_SADDR_RULE_PREFIX:
1630 /* Rule 8: Use longest matching prefix */
91b4b04f
YH
1631 ret = ipv6_addr_diff(&score->ifa->addr, dst->addr);
1632 if (ret > score->ifa->prefix_len)
1633 ret = score->ifa->prefix_len;
1634 score->matchlen = ret;
a9b05723 1635 break;
7fd2561e
EK
1636#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
1637 case IPV6_SADDR_RULE_NOT_OPTIMISTIC:
1638 /* Optimistic addresses still have lower precedence than other
1639 * preferred addresses.
1640 */
1641 ret = !(score->ifa->flags & IFA_F_OPTIMISTIC);
1642 break;
1643#endif
a9b05723
YH
1644 default:
1645 ret = 0;
1646 }
1647
1648 if (ret)
1649 __set_bit(i, score->scorebits);
1650 score->rule = i;
1651out:
1652 return ret;
1653}
1654
c0b8da1e
YH
1655static int __ipv6_dev_get_saddr(struct net *net,
1656 struct ipv6_saddr_dst *dst,
c0b8da1e
YH
1657 struct inet6_dev *idev,
1658 struct ipv6_saddr_score *scores,
1659 int hiscore_idx)
9131f3de 1660{
c0b8da1e 1661 struct ipv6_saddr_score *score = &scores[1 - hiscore_idx], *hiscore = &scores[hiscore_idx];
9131f3de 1662
f59c031e 1663 list_for_each_entry_rcu(score->ifa, &idev->addr_list, if_list) {
9131f3de
YH
1664 int i;
1665
1666 /*
1667 * - Tentative Address (RFC2462 section 5.4)
1668 * - A tentative address is not considered
1669 * "assigned to an interface" in the traditional
1670 * sense, unless it is also flagged as optimistic.
1671 * - Candidate Source Address (section 4)
1672 * - In any case, anycast addresses, multicast
1673 * addresses, and the unspecified address MUST
1674 * NOT be included in a candidate set.
1675 */
1676 if ((score->ifa->flags & IFA_F_TENTATIVE) &&
1677 (!(score->ifa->flags & IFA_F_OPTIMISTIC)))
1678 continue;
1679
1680 score->addr_type = __ipv6_addr_type(&score->ifa->addr);
1681
1682 if (unlikely(score->addr_type == IPV6_ADDR_ANY ||
1683 score->addr_type & IPV6_ADDR_MULTICAST)) {
1684 net_dbg_ratelimited("ADDRCONF: unspecified / multicast address assigned as unicast address on %s",
1685 idev->dev->name);
1686 continue;
1687 }
1688
1689 score->rule = -1;
1690 bitmap_zero(score->scorebits, IPV6_SADDR_RULE_MAX);
1691
1692 for (i = 0; i < IPV6_SADDR_RULE_MAX; i++) {
1693 int minihiscore, miniscore;
1694
1695 minihiscore = ipv6_get_saddr_eval(net, hiscore, dst, i);
1696 miniscore = ipv6_get_saddr_eval(net, score, dst, i);
1697
1698 if (minihiscore > miniscore) {
1699 if (i == IPV6_SADDR_RULE_SCOPE &&
1700 score->scopedist > 0) {
1701 /*
1702 * special case:
1703 * each remaining entry
1704 * has too small (not enough)
1705 * scope, because ifa entries
1706 * are sorted by their scope
1707 * values.
1708 */
1709 goto out;
1710 }
1711 break;
1712 } else if (minihiscore < miniscore) {
9131f3de 1713 swap(hiscore, score);
c0b8da1e 1714 hiscore_idx = 1 - hiscore_idx;
9131f3de
YH
1715
1716 /* restore our iterator */
1717 score->ifa = hiscore->ifa;
1718
1719 break;
1720 }
1721 }
1722 }
1723out:
c0b8da1e 1724 return hiscore_idx;
9131f3de
YH
1725}
1726
afbac601
DA
1727static int ipv6_get_saddr_master(struct net *net,
1728 const struct net_device *dst_dev,
1729 const struct net_device *master,
1730 struct ipv6_saddr_dst *dst,
1731 struct ipv6_saddr_score *scores,
1732 int hiscore_idx)
1733{
1734 struct inet6_dev *idev;
1735
1736 idev = __in6_dev_get(dst_dev);
1737 if (idev)
1738 hiscore_idx = __ipv6_dev_get_saddr(net, dst, idev,
1739 scores, hiscore_idx);
1740
1741 idev = __in6_dev_get(master);
1742 if (idev)
1743 hiscore_idx = __ipv6_dev_get_saddr(net, dst, idev,
1744 scores, hiscore_idx);
1745
1746 return hiscore_idx;
1747}
1748
b3f644fc 1749int ipv6_dev_get_saddr(struct net *net, const struct net_device *dst_dev,
9acd9f3a 1750 const struct in6_addr *daddr, unsigned int prefs,
7cbca67c 1751 struct in6_addr *saddr)
1da177e4 1752{
c0b8da1e 1753 struct ipv6_saddr_score scores[2], *hiscore;
a9b05723 1754 struct ipv6_saddr_dst dst;
9131f3de 1755 struct inet6_dev *idev;
072047e4 1756 struct net_device *dev;
a9b05723 1757 int dst_type;
9131f3de 1758 bool use_oif_addr = false;
c0b8da1e 1759 int hiscore_idx = 0;
cc429c8f 1760 int ret = 0;
1da177e4 1761
a9b05723
YH
1762 dst_type = __ipv6_addr_type(daddr);
1763 dst.addr = daddr;
1764 dst.ifindex = dst_dev ? dst_dev->ifindex : 0;
1765 dst.scope = __ipv6_addr_src_scope(dst_type);
3de23255 1766 dst.label = ipv6_addr_label(net, daddr, dst_type, dst.ifindex);
7cbca67c 1767 dst.prefs = prefs;
a9b05723 1768
c0b8da1e
YH
1769 scores[hiscore_idx].rule = -1;
1770 scores[hiscore_idx].ifa = NULL;
1da177e4 1771
8814c4b5 1772 rcu_read_lock();
1da177e4 1773
9131f3de
YH
1774 /* Candidate Source Address (section 4)
1775 * - multicast and link-local destination address,
1776 * the set of candidate source address MUST only
1777 * include addresses assigned to interfaces
1778 * belonging to the same link as the outgoing
1779 * interface.
1780 * (- For site-local destination addresses, the
1781 * set of candidate source addresses MUST only
1782 * include addresses assigned to interfaces
1783 * belonging to the same site as the outgoing
1784 * interface.)
3985e8a3
EK
1785 * - "It is RECOMMENDED that the candidate source addresses
1786 * be the set of unicast addresses assigned to the
1787 * interface that will be used to send to the destination
1788 * (the 'outgoing' interface)." (RFC 6724)
9131f3de
YH
1789 */
1790 if (dst_dev) {
3985e8a3 1791 idev = __in6_dev_get(dst_dev);
9131f3de 1792 if ((dst_type & IPV6_ADDR_MULTICAST) ||
3985e8a3
EK
1793 dst.scope <= IPV6_ADDR_SCOPE_LINKLOCAL ||
1794 (idev && idev->cnf.use_oif_addrs_only)) {
9131f3de
YH
1795 use_oif_addr = true;
1796 }
1797 }
a9b05723 1798
9131f3de 1799 if (use_oif_addr) {
c0b8da1e 1800 if (idev)
c15df306 1801 hiscore_idx = __ipv6_dev_get_saddr(net, &dst, idev, scores, hiscore_idx);
9131f3de 1802 } else {
afbac601
DA
1803 const struct net_device *master;
1804 int master_idx = 0;
1805
1806 /* if dst_dev exists and is enslaved to an L3 device, then
1807 * prefer addresses from dst_dev and then the master over
1808 * any other enslaved devices in the L3 domain.
1809 */
1810 master = l3mdev_master_dev_rcu(dst_dev);
1811 if (master) {
1812 master_idx = master->ifindex;
1813
1814 hiscore_idx = ipv6_get_saddr_master(net, dst_dev,
1815 master, &dst,
1816 scores, hiscore_idx);
1817
1818 if (scores[hiscore_idx].ifa)
1819 goto out;
1820 }
1821
9131f3de 1822 for_each_netdev_rcu(net, dev) {
afbac601
DA
1823 /* only consider addresses on devices in the
1824 * same L3 domain
1825 */
1826 if (l3mdev_master_ifindex_rcu(dev) != master_idx)
1827 continue;
9131f3de
YH
1828 idev = __in6_dev_get(dev);
1829 if (!idev)
072047e4 1830 continue;
c15df306 1831 hiscore_idx = __ipv6_dev_get_saddr(net, &dst, idev, scores, hiscore_idx);
1da177e4
LT
1832 }
1833 }
afbac601
DA
1834
1835out:
c0b8da1e 1836 hiscore = &scores[hiscore_idx];
a9b05723 1837 if (!hiscore->ifa)
cc429c8f
ED
1838 ret = -EADDRNOTAVAIL;
1839 else
1840 *saddr = hiscore->ifa->addr;
1ab1457c 1841
cc429c8f
ED
1842 rcu_read_unlock();
1843 return ret;
1da177e4 1844}
5e5f3f0f 1845EXPORT_SYMBOL(ipv6_dev_get_saddr);
1da177e4 1846
26394fc1
IK
1847static int __ipv6_get_lladdr(struct inet6_dev *idev, struct in6_addr *addr,
1848 u32 banned_flags)
b7b1bfce
HFS
1849{
1850 struct inet6_ifaddr *ifp;
1851 int err = -EADDRNOTAVAIL;
1852
602582ca
HFS
1853 list_for_each_entry_reverse(ifp, &idev->addr_list, if_list) {
1854 if (ifp->scope > IFA_LINK)
1855 break;
b7b1bfce
HFS
1856 if (ifp->scope == IFA_LINK &&
1857 !(ifp->flags & banned_flags)) {
1858 *addr = ifp->addr;
1859 err = 0;
1860 break;
1861 }
1862 }
1863 return err;
1864}
1865
95c385b4 1866int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr,
479840ff 1867 u32 banned_flags)
1da177e4
LT
1868{
1869 struct inet6_dev *idev;
1870 int err = -EADDRNOTAVAIL;
1871
8814c4b5 1872 rcu_read_lock();
e21e8467
SH
1873 idev = __in6_dev_get(dev);
1874 if (idev) {
1da177e4 1875 read_lock_bh(&idev->lock);
b7b1bfce 1876 err = __ipv6_get_lladdr(idev, addr, banned_flags);
1da177e4
LT
1877 read_unlock_bh(&idev->lock);
1878 }
8814c4b5 1879 rcu_read_unlock();
1da177e4
LT
1880 return err;
1881}
1882
d9bf82c2 1883static int ipv6_count_addresses(const struct inet6_dev *idev)
1da177e4 1884{
d9bf82c2 1885 const struct inet6_ifaddr *ifp;
1da177e4 1886 int cnt = 0;
1da177e4 1887
d9bf82c2
ED
1888 rcu_read_lock();
1889 list_for_each_entry_rcu(ifp, &idev->addr_list, if_list)
1da177e4 1890 cnt++;
d9bf82c2 1891 rcu_read_unlock();
1da177e4
LT
1892 return cnt;
1893}
1894
b71d1d42 1895int ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
2a7851bf 1896 const struct net_device *dev, int strict)
c58da4c6 1897{
232378e8
DA
1898 return ipv6_chk_addr_and_flags(net, addr, dev, !dev,
1899 strict, IFA_F_TENTATIVE);
c58da4c6
EK
1900}
1901EXPORT_SYMBOL(ipv6_chk_addr);
1902
1893ff20
DA
1903/* device argument is used to find the L3 domain of interest. If
1904 * skip_dev_check is set, then the ifp device is not checked against
1905 * the passed in dev argument. So the 2 cases for addresses checks are:
1906 * 1. does the address exist in the L3 domain that dev is part of
1907 * (skip_dev_check = true), or
1908 *
1909 * 2. does the address exist on the specific device
1910 * (skip_dev_check = false)
1911 */
4ef1a7cb
XL
1912static struct net_device *
1913__ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr,
1914 const struct net_device *dev, bool skip_dev_check,
1915 int strict, u32 banned_flags)
1da177e4 1916{
3f27fb23 1917 unsigned int hash = inet6_addr_hash(net, addr);
4ef1a7cb 1918 struct net_device *l3mdev, *ndev;
eedf042a 1919 struct inet6_ifaddr *ifp;
c58da4c6 1920 u32 ifp_flags;
1da177e4 1921
480318a0 1922 rcu_read_lock();
232378e8 1923
1893ff20 1924 l3mdev = l3mdev_master_dev_rcu(dev);
232378e8
DA
1925 if (skip_dev_check)
1926 dev = NULL;
1927
e66d1172 1928 hlist_for_each_entry_rcu(ifp, &net->ipv6.inet6_addr_lst[hash], addr_lst) {
4ef1a7cb 1929 ndev = ifp->idev->dev;
1893ff20 1930
4ef1a7cb 1931 if (l3mdev_master_dev_rcu(ndev) != l3mdev)
1893ff20
DA
1932 continue;
1933
c58da4c6
EK
1934 /* Decouple optimistic from tentative for evaluation here.
1935 * Ban optimistic addresses explicitly, when required.
1936 */
1937 ifp_flags = (ifp->flags&IFA_F_OPTIMISTIC)
1938 ? (ifp->flags&~IFA_F_TENTATIVE)
1939 : ifp->flags;
1da177e4 1940 if (ipv6_addr_equal(&ifp->addr, addr) &&
c58da4c6 1941 !(ifp_flags&banned_flags) &&
4ef1a7cb 1942 (!dev || ndev == dev ||
eedf042a 1943 !(ifp->scope&(IFA_LINK|IFA_HOST) || strict))) {
480318a0 1944 rcu_read_unlock();
4ef1a7cb 1945 return ndev;
1da177e4
LT
1946 }
1947 }
5c578aed 1948
480318a0 1949 rcu_read_unlock();
4ef1a7cb
XL
1950 return NULL;
1951}
1952
1953int ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr,
1954 const struct net_device *dev, bool skip_dev_check,
1955 int strict, u32 banned_flags)
1956{
1957 return __ipv6_chk_addr_and_flags(net, addr, dev, skip_dev_check,
1958 strict, banned_flags) ? 1 : 0;
1da177e4 1959}
c58da4c6 1960EXPORT_SYMBOL(ipv6_chk_addr_and_flags);
7159039a 1961
1da177e4 1962
7df37ff3
CB
1963/* Compares an address/prefix_len with addresses on device @dev.
1964 * If one is found it returns true.
1965 */
1966bool ipv6_chk_custom_prefix(const struct in6_addr *addr,
1967 const unsigned int prefix_len, struct net_device *dev)
1968{
47e26941
ED
1969 const struct inet6_ifaddr *ifa;
1970 const struct inet6_dev *idev;
7df37ff3
CB
1971 bool ret = false;
1972
1973 rcu_read_lock();
1974 idev = __in6_dev_get(dev);
1975 if (idev) {
47e26941 1976 list_for_each_entry_rcu(ifa, &idev->addr_list, if_list) {
7df37ff3
CB
1977 ret = ipv6_prefix_equal(addr, &ifa->addr, prefix_len);
1978 if (ret)
1979 break;
1980 }
7df37ff3
CB
1981 }
1982 rcu_read_unlock();
1983
1984 return ret;
1985}
1986EXPORT_SYMBOL(ipv6_chk_custom_prefix);
1987
b71d1d42 1988int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev)
52eeeb84 1989{
24ba333b
ED
1990 const struct inet6_ifaddr *ifa;
1991 const struct inet6_dev *idev;
52eeeb84
YH
1992 int onlink;
1993
1994 onlink = 0;
1995 rcu_read_lock();
1996 idev = __in6_dev_get(dev);
1997 if (idev) {
24ba333b 1998 list_for_each_entry_rcu(ifa, &idev->addr_list, if_list) {
52eeeb84
YH
1999 onlink = ipv6_prefix_equal(addr, &ifa->addr,
2000 ifa->prefix_len);
2001 if (onlink)
2002 break;
2003 }
52eeeb84
YH
2004 }
2005 rcu_read_unlock();
2006 return onlink;
2007}
52eeeb84
YH
2008EXPORT_SYMBOL(ipv6_chk_prefix);
2009
81f6cb31
XL
2010/**
2011 * ipv6_dev_find - find the first device with a given source address.
2012 * @net: the net namespace
2013 * @addr: the source address
2c4de211 2014 * @dev: used to find the L3 domain of interest
81f6cb31
XL
2015 *
2016 * The caller should be protected by RCU, or RTNL.
2017 */
4ef1a7cb
XL
2018struct net_device *ipv6_dev_find(struct net *net, const struct in6_addr *addr,
2019 struct net_device *dev)
81f6cb31 2020{
4ef1a7cb
XL
2021 return __ipv6_chk_addr_and_flags(net, addr, dev, !dev, 1,
2022 IFA_F_TENTATIVE);
81f6cb31
XL
2023}
2024EXPORT_SYMBOL(ipv6_dev_find);
2025
9acd9f3a 2026struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net, const struct in6_addr *addr,
1cab3da6 2027 struct net_device *dev, int strict)
1da177e4 2028{
3f27fb23 2029 unsigned int hash = inet6_addr_hash(net, addr);
b79d1d54 2030 struct inet6_ifaddr *ifp, *result = NULL;
1da177e4 2031
24f226da 2032 rcu_read_lock();
e66d1172 2033 hlist_for_each_entry_rcu(ifp, &net->ipv6.inet6_addr_lst[hash], addr_lst) {
1da177e4 2034 if (ipv6_addr_equal(&ifp->addr, addr)) {
63159f29 2035 if (!dev || ifp->idev->dev == dev ||
1da177e4 2036 !(ifp->scope&(IFA_LINK|IFA_HOST) || strict)) {
b79d1d54 2037 result = ifp;
1da177e4
LT
2038 in6_ifa_hold(ifp);
2039 break;
2040 }
2041 }
2042 }
24f226da 2043 rcu_read_unlock();
1da177e4 2044
b79d1d54 2045 return result;
1da177e4
LT
2046}
2047
1da177e4
LT
2048/* Gets referenced address, destroys ifaddr */
2049
cc411d0b 2050static void addrconf_dad_stop(struct inet6_ifaddr *ifp, int dad_failed)
1da177e4 2051{
3d171f39
LR
2052 if (dad_failed)
2053 ifp->flags |= IFA_F_DADFAILED;
2054
ec8add2a 2055 if (ifp->flags&IFA_F_TEMPORARY) {
1da177e4
LT
2056 struct inet6_ifaddr *ifpub;
2057 spin_lock_bh(&ifp->lock);
2058 ifpub = ifp->ifpub;
2059 if (ifpub) {
2060 in6_ifa_hold(ifpub);
2061 spin_unlock_bh(&ifp->lock);
969c5464 2062 ipv6_create_tempaddr(ifpub, true);
1da177e4
LT
2063 in6_ifa_put(ifpub);
2064 } else {
2065 spin_unlock_bh(&ifp->lock);
2066 }
2067 ipv6_del_addr(ifp);
ec8add2a
SD
2068 } else if (ifp->flags&IFA_F_PERMANENT || !dad_failed) {
2069 spin_lock_bh(&ifp->lock);
2070 addrconf_del_dad_work(ifp);
2071 ifp->flags |= IFA_F_TENTATIVE;
f1c02cfb
SD
2072 if (dad_failed)
2073 ifp->flags &= ~IFA_F_OPTIMISTIC;
ec8add2a
SD
2074 spin_unlock_bh(&ifp->lock);
2075 if (dad_failed)
2076 ipv6_ifa_notify(0, ifp);
2077 in6_ifa_put(ifp);
c15b1cca 2078 } else {
1da177e4 2079 ipv6_del_addr(ifp);
c15b1cca 2080 }
1da177e4
LT
2081}
2082
f2344a13
HX
2083static int addrconf_dad_end(struct inet6_ifaddr *ifp)
2084{
2085 int err = -ENOENT;
2086
8e8e676d 2087 spin_lock_bh(&ifp->lock);
f2344a13
HX
2088 if (ifp->state == INET6_IFADDR_STATE_DAD) {
2089 ifp->state = INET6_IFADDR_STATE_POSTDAD;
2090 err = 0;
2091 }
8e8e676d 2092 spin_unlock_bh(&ifp->lock);
f2344a13
HX
2093
2094 return err;
2095}
2096
da13c59b 2097void addrconf_dad_failure(struct sk_buff *skb, struct inet6_ifaddr *ifp)
3c21edbd 2098{
1b34be74 2099 struct inet6_dev *idev = ifp->idev;
e66d1172 2100 struct net *net = dev_net(idev->dev);
9bdd8d40 2101
853dc2e0
UB
2102 if (addrconf_dad_end(ifp)) {
2103 in6_ifa_put(ifp);
f2344a13 2104 return;
853dc2e0 2105 }
f2344a13 2106
da13c59b
VP
2107 net_info_ratelimited("%s: IPv6 duplicate address %pI6c used by %pM detected!\n",
2108 ifp->idev->dev->name, &ifp->addr, eth_hdr(skb)->h_source);
9bdd8d40 2109
5f40ef77
HFS
2110 spin_lock_bh(&ifp->lock);
2111
2112 if (ifp->flags & IFA_F_STABLE_PRIVACY) {
5f40ef77
HFS
2113 struct in6_addr new_addr;
2114 struct inet6_ifaddr *ifp2;
5f40ef77 2115 int retries = ifp->stable_privacy_retry + 1;
e6464b8c
DA
2116 struct ifa6_config cfg = {
2117 .pfx = &new_addr,
2118 .plen = ifp->prefix_len,
2119 .ifa_flags = ifp->flags,
2120 .valid_lft = ifp->valid_lft,
2121 .preferred_lft = ifp->prefered_lft,
2122 .scope = ifp->scope,
2123 };
5f40ef77 2124
1855b7c3 2125 if (retries > net->ipv6.sysctl.idgen_retries) {
5f40ef77
HFS
2126 net_info_ratelimited("%s: privacy stable address generation failed because of DAD conflicts!\n",
2127 ifp->idev->dev->name);
2128 goto errdad;
2129 }
2130
2131 new_addr = ifp->addr;
2132 if (ipv6_generate_stable_address(&new_addr, retries,
2133 idev))
2134 goto errdad;
2135
5f40ef77 2136 spin_unlock_bh(&ifp->lock);
1b34be74 2137
5f40ef77
HFS
2138 if (idev->cnf.max_addresses &&
2139 ipv6_count_addresses(idev) >=
2140 idev->cnf.max_addresses)
2141 goto lock_errdad;
2142
2143 net_info_ratelimited("%s: generating new stable privacy address because of DAD conflict\n",
2144 ifp->idev->dev->name);
2145
e6464b8c 2146 ifp2 = ipv6_add_addr(idev, &cfg, false, NULL);
5f40ef77
HFS
2147 if (IS_ERR(ifp2))
2148 goto lock_errdad;
2149
2150 spin_lock_bh(&ifp2->lock);
2151 ifp2->stable_privacy_retry = retries;
2152 ifp2->state = INET6_IFADDR_STATE_PREDAD;
2153 spin_unlock_bh(&ifp2->lock);
2154
1855b7c3 2155 addrconf_mod_dad_work(ifp2, net->ipv6.sysctl.idgen_delay);
5f40ef77
HFS
2156 in6_ifa_put(ifp2);
2157lock_errdad:
2158 spin_lock_bh(&ifp->lock);
1b34be74
YH
2159 }
2160
5f40ef77 2161errdad:
c15b1cca
HFS
2162 /* transition from _POSTDAD to _ERRDAD */
2163 ifp->state = INET6_IFADDR_STATE_ERRDAD;
8e8e676d 2164 spin_unlock_bh(&ifp->lock);
c15b1cca
HFS
2165
2166 addrconf_mod_dad_work(ifp, 0);
751eb6b6 2167 in6_ifa_put(ifp);
3c21edbd 2168}
1da177e4 2169
a9ed4a29
SD
2170/* Join to solicited addr multicast group.
2171 * caller must hold RTNL */
b71d1d42 2172void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr)
1da177e4
LT
2173{
2174 struct in6_addr maddr;
2175
2176 if (dev->flags&(IFF_LOOPBACK|IFF_NOARP))
2177 return;
2178
2179 addrconf_addr_solict_mult(addr, &maddr);
2180 ipv6_dev_mc_inc(dev, &maddr);
2181}
2182
a9ed4a29 2183/* caller must hold RTNL */
b71d1d42 2184void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr)
1da177e4
LT
2185{
2186 struct in6_addr maddr;
2187
2188 if (idev->dev->flags&(IFF_LOOPBACK|IFF_NOARP))
2189 return;
2190
2191 addrconf_addr_solict_mult(addr, &maddr);
2192 __ipv6_dev_mc_dec(idev, &maddr);
2193}
2194
a9ed4a29 2195/* caller must hold RTNL */
20380731 2196static void addrconf_join_anycast(struct inet6_ifaddr *ifp)
1da177e4
LT
2197{
2198 struct in6_addr addr;
c15b1cca 2199
88ad3149 2200 if (ifp->prefix_len >= 127) /* RFC 6164 */
2bda8a0c 2201 return;
1da177e4
LT
2202 ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
2203 if (ipv6_addr_any(&addr))
2204 return;
013b4d90 2205 __ipv6_dev_ac_inc(ifp->idev, &addr);
1da177e4
LT
2206}
2207
a9ed4a29 2208/* caller must hold RTNL */
20380731 2209static void addrconf_leave_anycast(struct inet6_ifaddr *ifp)
1da177e4
LT
2210{
2211 struct in6_addr addr;
c15b1cca 2212
88ad3149 2213 if (ifp->prefix_len >= 127) /* RFC 6164 */
32019e65 2214 return;
1da177e4
LT
2215 ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
2216 if (ipv6_addr_any(&addr))
2217 return;
2218 __ipv6_dev_ac_dec(ifp->idev, &addr);
2219}
2220
8a7a4b47 2221static int addrconf_ifid_6lowpan(u8 *eui, struct net_device *dev)
06a4c1c5 2222{
8a7a4b47
AA
2223 switch (dev->addr_len) {
2224 case ETH_ALEN:
9dae2e03
LAD
2225 memcpy(eui, dev->dev_addr, 3);
2226 eui[3] = 0xFF;
2227 eui[4] = 0xFE;
2228 memcpy(eui + 5, dev->dev_addr + 3, 3);
2229 break;
8a7a4b47
AA
2230 case EUI64_ADDR_LEN:
2231 memcpy(eui, dev->dev_addr, EUI64_ADDR_LEN);
2232 eui[0] ^= 2;
2233 break;
2234 default:
06a4c1c5 2235 return -1;
8a7a4b47
AA
2236 }
2237
06a4c1c5 2238 return 0;
2239}
2240
cb6bf355
YH
2241static int addrconf_ifid_ieee1394(u8 *eui, struct net_device *dev)
2242{
1a8a23d2 2243 const union fwnet_hwaddr *ha;
cb6bf355
YH
2244
2245 if (dev->addr_len != FWNET_ALEN)
2246 return -1;
2247
1a8a23d2 2248 ha = (const union fwnet_hwaddr *)dev->dev_addr;
cb6bf355
YH
2249
2250 memcpy(eui, &ha->uc.uniq_id, sizeof(ha->uc.uniq_id));
2251 eui[0] ^= 2;
2252 return 0;
2253}
2254
073a8e0e
YH
2255static int addrconf_ifid_arcnet(u8 *eui, struct net_device *dev)
2256{
2257 /* XXX: inherit EUI-64 from other interface -- yoshfuji */
2258 if (dev->addr_len != ARCNET_ALEN)
2259 return -1;
2260 memset(eui, 0, 7);
8e5e8f30 2261 eui[7] = *(u8 *)dev->dev_addr;
073a8e0e
YH
2262 return 0;
2263}
2264
2265static int addrconf_ifid_infiniband(u8 *eui, struct net_device *dev)
2266{
2267 if (dev->addr_len != INFINIBAND_ALEN)
2268 return -1;
2269 memcpy(eui, dev->dev_addr + 12, 8);
2270 eui[0] |= 2;
2271 return 0;
2272}
2273
c61393ea 2274static int __ipv6_isatap_ifid(u8 *eui, __be32 addr)
dfd982ba 2275{
9af28511
SH
2276 if (addr == 0)
2277 return -1;
dfd982ba
YH
2278 eui[0] = (ipv4_is_zeronet(addr) || ipv4_is_private_10(addr) ||
2279 ipv4_is_loopback(addr) || ipv4_is_linklocal_169(addr) ||
2280 ipv4_is_private_172(addr) || ipv4_is_test_192(addr) ||
2281 ipv4_is_anycast_6to4(addr) || ipv4_is_private_192(addr) ||
2282 ipv4_is_test_198(addr) || ipv4_is_multicast(addr) ||
2283 ipv4_is_lbcast(addr)) ? 0x00 : 0x02;
2284 eui[1] = 0;
2285 eui[2] = 0x5E;
2286 eui[3] = 0xFE;
2287 memcpy(eui + 4, &addr, 4);
2288 return 0;
2289}
dfd982ba
YH
2290
2291static int addrconf_ifid_sit(u8 *eui, struct net_device *dev)
2292{
2293 if (dev->priv_flags & IFF_ISATAP)
2294 return __ipv6_isatap_ifid(eui, *(__be32 *)dev->dev_addr);
2295 return -1;
2296}
2297
aee80b54 2298static int addrconf_ifid_gre(u8 *eui, struct net_device *dev)
2299{
2300 return __ipv6_isatap_ifid(eui, *(__be32 *)dev->dev_addr);
2301}
2302
e837735e
ND
2303static int addrconf_ifid_ip6tnl(u8 *eui, struct net_device *dev)
2304{
2305 memcpy(eui, dev->perm_addr, 3);
2306 memcpy(eui + 5, dev->perm_addr + 3, 3);
2307 eui[3] = 0xFF;
2308 eui[4] = 0xFE;
2309 eui[0] ^= 2;
2310 return 0;
2311}
2312
1da177e4
LT
2313static int ipv6_generate_eui64(u8 *eui, struct net_device *dev)
2314{
2315 switch (dev->type) {
2316 case ARPHRD_ETHER:
2317 case ARPHRD_FDDI:
073a8e0e 2318 return addrconf_ifid_eui48(eui, dev);
1da177e4 2319 case ARPHRD_ARCNET:
073a8e0e 2320 return addrconf_ifid_arcnet(eui, dev);
1da177e4 2321 case ARPHRD_INFINIBAND:
073a8e0e 2322 return addrconf_ifid_infiniband(eui, dev);
c7dc89c0 2323 case ARPHRD_SIT:
dfd982ba 2324 return addrconf_ifid_sit(eui, dev);
aee80b54 2325 case ARPHRD_IPGRE:
45ce0fd1 2326 case ARPHRD_TUNNEL:
aee80b54 2327 return addrconf_ifid_gre(eui, dev);
e74bccb8 2328 case ARPHRD_6LOWPAN:
8a7a4b47 2329 return addrconf_ifid_6lowpan(eui, dev);
cb6bf355
YH
2330 case ARPHRD_IEEE1394:
2331 return addrconf_ifid_ieee1394(eui, dev);
e837735e 2332 case ARPHRD_TUNNEL6:
45ce0fd1 2333 case ARPHRD_IP6GRE:
9deb441c 2334 case ARPHRD_RAWIP:
e837735e 2335 return addrconf_ifid_ip6tnl(eui, dev);
1da177e4
LT
2336 }
2337 return -1;
2338}
2339
2340static int ipv6_inherit_eui64(u8 *eui, struct inet6_dev *idev)
2341{
2342 int err = -1;
2343 struct inet6_ifaddr *ifp;
2344
2345 read_lock_bh(&idev->lock);
602582ca
HFS
2346 list_for_each_entry_reverse(ifp, &idev->addr_list, if_list) {
2347 if (ifp->scope > IFA_LINK)
2348 break;
1da177e4
LT
2349 if (ifp->scope == IFA_LINK && !(ifp->flags&IFA_F_TENTATIVE)) {
2350 memcpy(eui, ifp->addr.s6_addr+8, 8);
2351 err = 0;
2352 break;
2353 }
2354 }
2355 read_unlock_bh(&idev->lock);
2356 return err;
2357}
2358
969c5464
FG
2359/* Generation of a randomized Interface Identifier
2360 * draft-ietf-6man-rfc4941bis, Section 3.3.1
2361 */
2362
2363static void ipv6_gen_rnd_iid(struct in6_addr *addr)
1da177e4 2364{
1da177e4 2365regen:
969c5464 2366 get_random_bytes(&addr->s6_addr[8], 8);
1da177e4 2367
969c5464
FG
2368 /* <draft-ietf-6man-rfc4941bis-08.txt>, Section 3.3.1:
2369 * check if generated address is not inappropriate:
1da177e4 2370 *
912b519a 2371 * - Reserved IPv6 Interface Identifiers
969c5464 2372 * - XXX: already assigned to an address on the device
1da177e4 2373 */
969c5464
FG
2374
2375 /* Subnet-router anycast: 0000:0000:0000:0000 */
2376 if (!(addr->s6_addr32[2] | addr->s6_addr32[3]))
1da177e4 2377 goto regen;
1da177e4 2378
969c5464
FG
2379 /* IANA Ethernet block: 0200:5EFF:FE00:0000-0200:5EFF:FE00:5212
2380 * Proxy Mobile IPv6: 0200:5EFF:FE00:5213
2381 * IANA Ethernet block: 0200:5EFF:FE00:5214-0200:5EFF:FEFF:FFFF
2382 */
2383 if (ntohl(addr->s6_addr32[2]) == 0x02005eff &&
2384 (ntohl(addr->s6_addr32[3]) & 0Xff000000) == 0xfe000000)
2385 goto regen;
2386
2387 /* Reserved subnet anycast addresses */
2388 if (ntohl(addr->s6_addr32[2]) == 0xfdffffff &&
2389 ntohl(addr->s6_addr32[3]) >= 0Xffffff80)
2390 goto regen;
1da177e4 2391}
1da177e4
LT
2392
2393/*
2394 * Add prefix route.
2395 */
2396
2397static void
8308f3ff
DA
2398addrconf_prefix_route(struct in6_addr *pfx, int plen, u32 metric,
2399 struct net_device *dev, unsigned long expires,
2400 u32 flags, gfp_t gfp_flags)
1da177e4 2401{
86872cb5 2402 struct fib6_config cfg = {
ca254490 2403 .fc_table = l3mdev_fib_table(dev) ? : RT6_TABLE_PREFIX,
8308f3ff 2404 .fc_metric = metric ? : IP6_RT_PRIO_ADDRCONF,
86872cb5
TG
2405 .fc_ifindex = dev->ifindex,
2406 .fc_expires = expires,
2407 .fc_dst_len = plen,
2408 .fc_flags = RTF_UP | flags,
c346dca1 2409 .fc_nlinfo.nl_net = dev_net(dev),
f410a1fb 2410 .fc_protocol = RTPROT_KERNEL,
e8478e80 2411 .fc_type = RTN_UNICAST,
86872cb5 2412 };
1da177e4 2413
4e3fd7a0 2414 cfg.fc_dst = *pfx;
1da177e4
LT
2415
2416 /* Prevent useless cloning on PtP SIT.
2417 This thing is done here expecting that the whole
2418 class of non-broadcast devices need not cloning.
2419 */
07a93626 2420#if IS_ENABLED(CONFIG_IPV6_SIT)
86872cb5
TG
2421 if (dev->type == ARPHRD_SIT && (dev->flags & IFF_POINTOPOINT))
2422 cfg.fc_flags |= RTF_NONEXTHOP;
0be669bb 2423#endif
1da177e4 2424
acb54e3c 2425 ip6_route_add(&cfg, gfp_flags, NULL);
1da177e4
LT
2426}
2427
14ef37b6 2428
8d1c802b 2429static struct fib6_info *addrconf_get_prefix_route(const struct in6_addr *pfx,
14ef37b6
AH
2430 int plen,
2431 const struct net_device *dev,
2b2450ca
DA
2432 u32 flags, u32 noflags,
2433 bool no_gw)
14ef37b6
AH
2434{
2435 struct fib6_node *fn;
8d1c802b 2436 struct fib6_info *rt = NULL;
14ef37b6 2437 struct fib6_table *table;
ca254490 2438 u32 tb_id = l3mdev_fib_table(dev) ? : RT6_TABLE_PREFIX;
14ef37b6 2439
ca254490 2440 table = fib6_get_table(dev_net(dev), tb_id);
63159f29 2441 if (!table)
14ef37b6
AH
2442 return NULL;
2443
66f5d6ce 2444 rcu_read_lock();
38fbeeee 2445 fn = fib6_locate(&table->tb6_root, pfx, plen, NULL, 0, true);
14ef37b6
AH
2446 if (!fn)
2447 goto out;
1f56a01f 2448
66f5d6ce 2449 for_each_fib6_node_rt_rcu(fn) {
f88d8ea6
DA
2450 /* prefix routes only use builtin fib6_nh */
2451 if (rt->nh)
2452 continue;
2453
1cf844c7 2454 if (rt->fib6_nh->fib_nh_dev->ifindex != dev->ifindex)
14ef37b6 2455 continue;
1cf844c7 2456 if (no_gw && rt->fib6_nh->fib_nh_gw_family)
2b2450ca 2457 continue;
93c2fb25 2458 if ((rt->fib6_flags & flags) != flags)
14ef37b6 2459 continue;
93c2fb25 2460 if ((rt->fib6_flags & noflags) != 0)
14ef37b6 2461 continue;
e873e4b9
WW
2462 if (!fib6_info_hold_safe(rt))
2463 continue;
14ef37b6
AH
2464 break;
2465 }
2466out:
66f5d6ce 2467 rcu_read_unlock();
14ef37b6
AH
2468 return rt;
2469}
2470
2471
1da177e4
LT
2472/* Create "default" multicast route to the interface */
2473
2474static void addrconf_add_mroute(struct net_device *dev)
2475{
86872cb5 2476 struct fib6_config cfg = {
ca254490 2477 .fc_table = l3mdev_fib_table(dev) ? : RT6_TABLE_LOCAL,
86872cb5
TG
2478 .fc_metric = IP6_RT_PRIO_ADDRCONF,
2479 .fc_ifindex = dev->ifindex,
2480 .fc_dst_len = 8,
2481 .fc_flags = RTF_UP,
ceed9038 2482 .fc_type = RTN_MULTICAST,
c346dca1 2483 .fc_nlinfo.nl_net = dev_net(dev),
a826b043 2484 .fc_protocol = RTPROT_KERNEL,
86872cb5
TG
2485 };
2486
2487 ipv6_addr_set(&cfg.fc_dst, htonl(0xFF000000), 0, 0, 0);
2488
e500c6d3 2489 ip6_route_add(&cfg, GFP_KERNEL, NULL);
1da177e4
LT
2490}
2491
1da177e4
LT
2492static struct inet6_dev *addrconf_add_dev(struct net_device *dev)
2493{
2494 struct inet6_dev *idev;
2495
2496 ASSERT_RTNL();
2497
e21e8467 2498 idev = ipv6_find_idev(dev);
db0b99f5
SD
2499 if (IS_ERR(idev))
2500 return idev;
64e724f6
BH
2501
2502 if (idev->cnf.disable_ipv6)
2503 return ERR_PTR(-EACCES);
1da177e4
LT
2504
2505 /* Add default multicast route */
ba46ee4c 2506 if (!(dev->flags & IFF_LOOPBACK) && !netif_is_l3_master(dev))
4af04aba 2507 addrconf_add_mroute(dev);
1da177e4 2508
1da177e4
LT
2509 return idev;
2510}
2511
53bd6749
JP
2512static void manage_tempaddrs(struct inet6_dev *idev,
2513 struct inet6_ifaddr *ifp,
2514 __u32 valid_lft, __u32 prefered_lft,
2515 bool create, unsigned long now)
2516{
2517 u32 flags;
2518 struct inet6_ifaddr *ift;
2519
2520 read_lock_bh(&idev->lock);
2521 /* update all temporary addresses in the list */
2522 list_for_each_entry(ift, &idev->tempaddr_list, tmp_list) {
2523 int age, max_valid, max_prefered;
2524
2525 if (ifp != ift->ifpub)
2526 continue;
2527
2528 /* RFC 4941 section 3.3:
2529 * If a received option will extend the lifetime of a public
2530 * address, the lifetimes of temporary addresses should
2531 * be extended, subject to the overall constraint that no
2532 * temporary addresses should ever remain "valid" or "preferred"
2533 * for a time longer than (TEMP_VALID_LIFETIME) or
2534 * (TEMP_PREFERRED_LIFETIME - DESYNC_FACTOR), respectively.
2535 */
2536 age = (now - ift->cstamp) / HZ;
2537 max_valid = idev->cnf.temp_valid_lft - age;
2538 if (max_valid < 0)
2539 max_valid = 0;
2540
2541 max_prefered = idev->cnf.temp_prefered_lft -
76506a98 2542 idev->desync_factor - age;
53bd6749
JP
2543 if (max_prefered < 0)
2544 max_prefered = 0;
2545
2546 if (valid_lft > max_valid)
2547 valid_lft = max_valid;
2548
2549 if (prefered_lft > max_prefered)
2550 prefered_lft = max_prefered;
2551
2552 spin_lock(&ift->lock);
2553 flags = ift->flags;
2554 ift->valid_lft = valid_lft;
2555 ift->prefered_lft = prefered_lft;
2556 ift->tstamp = now;
2557 if (prefered_lft > 0)
2558 ift->flags &= ~IFA_F_DEPRECATED;
2559
2560 spin_unlock(&ift->lock);
2561 if (!(flags&IFA_F_TENTATIVE))
2562 ipv6_ifa_notify(0, ift);
2563 }
2564
2565 if ((create || list_empty(&idev->tempaddr_list)) &&
2566 idev->cnf.use_tempaddr > 0) {
2567 /* When a new public address is created as described
2568 * in [ADDRCONF], also create a new temporary address.
2569 * Also create a temporary address if it's enabled but
2570 * no temporary address currently exists.
2571 */
2572 read_unlock_bh(&idev->lock);
969c5464 2573 ipv6_create_tempaddr(ifp, false);
53bd6749
JP
2574 } else {
2575 read_unlock_bh(&idev->lock);
2576 }
2577}
2578
cc9da6cc
BM
2579static bool is_addr_mode_generate_stable(struct inet6_dev *idev)
2580{
d35a00b8
FJ
2581 return idev->cnf.addr_gen_mode == IN6_ADDR_GEN_MODE_STABLE_PRIVACY ||
2582 idev->cnf.addr_gen_mode == IN6_ADDR_GEN_MODE_RANDOM;
cc9da6cc
BM
2583}
2584
cc84b3c6
AA
2585int addrconf_prefix_rcv_add_addr(struct net *net, struct net_device *dev,
2586 const struct prefix_info *pinfo,
2587 struct inet6_dev *in6_dev,
2588 const struct in6_addr *addr, int addr_type,
2589 u32 addr_flags, bool sllao, bool tokenized,
2590 __u32 valid_lft, u32 prefered_lft)
4f672235
AA
2591{
2592 struct inet6_ifaddr *ifp = ipv6_get_ifaddr(net, addr, dev, 1);
36268983 2593 int create = 0, update_lft = 0;
4f672235
AA
2594
2595 if (!ifp && valid_lft) {
2596 int max_addresses = in6_dev->cnf.max_addresses;
e6464b8c
DA
2597 struct ifa6_config cfg = {
2598 .pfx = addr,
2599 .plen = pinfo->prefix_len,
2600 .ifa_flags = addr_flags,
2601 .valid_lft = valid_lft,
2602 .preferred_lft = prefered_lft,
2603 .scope = addr_type & IPV6_ADDR_SCOPE_MASK,
47f0bd50 2604 .ifa_proto = IFAPROT_KERNEL_RA
e6464b8c 2605 };
4f672235
AA
2606
2607#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
35e015e1
MC
2608 if ((net->ipv6.devconf_all->optimistic_dad ||
2609 in6_dev->cnf.optimistic_dad) &&
4f672235 2610 !net->ipv6.devconf_all->forwarding && sllao)
e6464b8c 2611 cfg.ifa_flags |= IFA_F_OPTIMISTIC;
4f672235
AA
2612#endif
2613
2614 /* Do not allow to create too much of autoconfigured
2615 * addresses; this would be too easy way to crash kernel.
2616 */
2617 if (!max_addresses ||
2618 ipv6_count_addresses(in6_dev) < max_addresses)
e6464b8c 2619 ifp = ipv6_add_addr(in6_dev, &cfg, false, NULL);
4f672235
AA
2620
2621 if (IS_ERR_OR_NULL(ifp))
2622 return -1;
2623
4f672235
AA
2624 create = 1;
2625 spin_lock_bh(&ifp->lock);
2626 ifp->flags |= IFA_F_MANAGETEMPADDR;
2627 ifp->cstamp = jiffies;
2628 ifp->tokenized = tokenized;
2629 spin_unlock_bh(&ifp->lock);
2630 addrconf_dad_start(ifp);
2631 }
2632
2633 if (ifp) {
2634 u32 flags;
2635 unsigned long now;
2636 u32 stored_lft;
2637
36268983 2638 /* update lifetime (RFC2462 5.5.3 e) */
4f672235
AA
2639 spin_lock_bh(&ifp->lock);
2640 now = jiffies;
2641 if (ifp->valid_lft > (now - ifp->tstamp) / HZ)
2642 stored_lft = ifp->valid_lft - (now - ifp->tstamp) / HZ;
2643 else
2644 stored_lft = 0;
b75326c2 2645 if (!create && stored_lft) {
36268983
GN
2646 const u32 minimum_lft = min_t(u32,
2647 stored_lft, MIN_VALID_LIFETIME);
2648 valid_lft = max(valid_lft, minimum_lft);
2649
2650 /* RFC4862 Section 5.5.3e:
2651 * "Note that the preferred lifetime of the
2652 * corresponding address is always reset to
2653 * the Preferred Lifetime in the received
2654 * Prefix Information option, regardless of
2655 * whether the valid lifetime is also reset or
2656 * ignored."
2657 *
2658 * So we should always update prefered_lft here.
2659 */
2660 update_lft = 1;
2661 }
2662
2663 if (update_lft) {
4f672235
AA
2664 ifp->valid_lft = valid_lft;
2665 ifp->prefered_lft = prefered_lft;
2666 ifp->tstamp = now;
2667 flags = ifp->flags;
2668 ifp->flags &= ~IFA_F_DEPRECATED;
2669 spin_unlock_bh(&ifp->lock);
2670
2671 if (!(flags&IFA_F_TENTATIVE))
2672 ipv6_ifa_notify(0, ifp);
2673 } else
2674 spin_unlock_bh(&ifp->lock);
2675
2676 manage_tempaddrs(in6_dev, ifp, valid_lft, prefered_lft,
2677 create, now);
2678
2679 in6_ifa_put(ifp);
8805d13f 2680 addrconf_verify(net);
4f672235
AA
2681 }
2682
2683 return 0;
2684}
cc84b3c6 2685EXPORT_SYMBOL_GPL(addrconf_prefix_rcv_add_addr);
4f672235 2686
e6bff995 2687void addrconf_prefix_rcv(struct net_device *dev, u8 *opt, int len, bool sllao)
1da177e4
LT
2688{
2689 struct prefix_info *pinfo;
2690 __u32 valid_lft;
2691 __u32 prefered_lft;
4f672235 2692 int addr_type, err;
64236f3f 2693 u32 addr_flags = 0;
1da177e4 2694 struct inet6_dev *in6_dev;
56d417b1 2695 struct net *net = dev_net(dev);
1da177e4
LT
2696
2697 pinfo = (struct prefix_info *) opt;
1ab1457c 2698
1da177e4 2699 if (len < sizeof(struct prefix_info)) {
e32ac250 2700 netdev_dbg(dev, "addrconf: prefix option too short\n");
1da177e4
LT
2701 return;
2702 }
1ab1457c 2703
1da177e4
LT
2704 /*
2705 * Validation checks ([ADDRCONF], page 19)
2706 */
2707
2708 addr_type = ipv6_addr_type(&pinfo->prefix);
2709
2710 if (addr_type & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LINKLOCAL))
2711 return;
2712
2713 valid_lft = ntohl(pinfo->valid);
2714 prefered_lft = ntohl(pinfo->prefered);
2715
2716 if (prefered_lft > valid_lft) {
e87cc472 2717 net_warn_ratelimited("addrconf: prefix option has invalid lifetime\n");
1da177e4
LT
2718 return;
2719 }
2720
2721 in6_dev = in6_dev_get(dev);
2722
63159f29 2723 if (!in6_dev) {
e87cc472
JP
2724 net_dbg_ratelimited("addrconf: device %s not configured\n",
2725 dev->name);
1da177e4
LT
2726 return;
2727 }
2728
2729 /*
2730 * Two things going on here:
2731 * 1) Add routes for on-link prefixes
2732 * 2) Configure prefixes with the auto flag set
2733 */
2734
4bed72e4 2735 if (pinfo->onlink) {
8d1c802b 2736 struct fib6_info *rt;
4bed72e4
YH
2737 unsigned long rt_expires;
2738
6f704992
YH
2739 /* Avoid arithmetic overflow. Really, we could
2740 * save rt_expires in seconds, likely valid_lft,
2741 * but it would require division in fib gc, that it
2742 * not good.
2743 */
4bed72e4
YH
2744 if (HZ > USER_HZ)
2745 rt_expires = addrconf_timeout_fixup(valid_lft, HZ);
2746 else
2747 rt_expires = addrconf_timeout_fixup(valid_lft, USER_HZ);
3dd4bc68 2748
4bed72e4
YH
2749 if (addrconf_finite_timeout(rt_expires))
2750 rt_expires *= HZ;
1da177e4 2751
14ef37b6
AH
2752 rt = addrconf_get_prefix_route(&pinfo->prefix,
2753 pinfo->prefix_len,
2754 dev,
2755 RTF_ADDRCONF | RTF_PREFIX_RT,
2b2450ca 2756 RTF_DEFAULT, true);
1da177e4 2757
14ef37b6 2758 if (rt) {
6f704992
YH
2759 /* Autoconf prefix route */
2760 if (valid_lft == 0) {
11dd74b3 2761 ip6_del_rt(net, rt, false);
6f704992 2762 rt = NULL;
4bed72e4 2763 } else if (addrconf_finite_timeout(rt_expires)) {
6f704992 2764 /* not infinity */
14895687 2765 fib6_set_expires(rt, jiffies + rt_expires);
6f704992 2766 } else {
14895687 2767 fib6_clean_expires(rt);
1da177e4
LT
2768 }
2769 } else if (valid_lft) {
6f704992 2770 clock_t expires = 0;
4bed72e4
YH
2771 int flags = RTF_ADDRCONF | RTF_PREFIX_RT;
2772 if (addrconf_finite_timeout(rt_expires)) {
6f704992
YH
2773 /* not infinity */
2774 flags |= RTF_EXPIRES;
2775 expires = jiffies_to_clock_t(rt_expires);
2776 }
1da177e4 2777 addrconf_prefix_route(&pinfo->prefix, pinfo->prefix_len,
8308f3ff
DA
2778 0, dev, expires, flags,
2779 GFP_ATOMIC);
1da177e4 2780 }
93531c67 2781 fib6_info_release(rt);
1da177e4
LT
2782 }
2783
2784 /* Try to figure out our local address for this prefix */
2785
2786 if (pinfo->autoconf && in6_dev->cnf.autoconf) {
1da177e4 2787 struct in6_addr addr;
f997c55c 2788 bool tokenized = false, dev_addr_generated = false;
1da177e4
LT
2789
2790 if (pinfo->prefix_len == 64) {
2791 memcpy(&addr, &pinfo->prefix, 8);
f53adae4
DB
2792
2793 if (!ipv6_addr_any(&in6_dev->token)) {
2794 read_lock_bh(&in6_dev->lock);
2795 memcpy(addr.s6_addr + 8,
2796 in6_dev->token.s6_addr + 8, 8);
2797 read_unlock_bh(&in6_dev->lock);
617fe29d 2798 tokenized = true;
cc9da6cc 2799 } else if (is_addr_mode_generate_stable(in6_dev) &&
622c81d5
HFS
2800 !ipv6_generate_stable_address(&addr, 0,
2801 in6_dev)) {
64236f3f 2802 addr_flags |= IFA_F_STABLE_PRIVACY;
622c81d5 2803 goto ok;
f53adae4
DB
2804 } else if (ipv6_generate_eui64(addr.s6_addr + 8, dev) &&
2805 ipv6_inherit_eui64(addr.s6_addr + 8, in6_dev)) {
4f672235 2806 goto put;
f997c55c
AA
2807 } else {
2808 dev_addr_generated = true;
1da177e4
LT
2809 }
2810 goto ok;
2811 }
e87cc472
JP
2812 net_dbg_ratelimited("IPv6 addrconf: prefix with wrong length %d\n",
2813 pinfo->prefix_len);
4f672235 2814 goto put;
1da177e4
LT
2815
2816ok:
4f672235
AA
2817 err = addrconf_prefix_rcv_add_addr(net, dev, pinfo, in6_dev,
2818 &addr, addr_type,
2819 addr_flags, sllao,
2820 tokenized, valid_lft,
2821 prefered_lft);
2822 if (err)
2823 goto put;
f997c55c
AA
2824
2825 /* Ignore error case here because previous prefix add addr was
2826 * successful which will be notified.
2827 */
2828 ndisc_ops_prefix_rcv_add_addr(net, dev, pinfo, in6_dev, &addr,
2829 addr_type, addr_flags, sllao,
2830 tokenized, valid_lft,
2831 prefered_lft,
2832 dev_addr_generated);
1da177e4
LT
2833 }
2834 inet6_prefix_notify(RTM_NEWPREFIX, in6_dev, pinfo);
4f672235 2835put:
1da177e4
LT
2836 in6_dev_put(in6_dev);
2837}
2838
68ad6886
CH
2839static int addrconf_set_sit_dstaddr(struct net *net, struct net_device *dev,
2840 struct in6_ifreq *ireq)
2841{
2842 struct ip_tunnel_parm p = { };
68ad6886
CH
2843 int err;
2844
2845 if (!(ipv6_addr_type(&ireq->ifr6_addr) & IPV6_ADDR_COMPATv4))
2846 return -EADDRNOTAVAIL;
2847
2848 p.iph.daddr = ireq->ifr6_addr.s6_addr32[3];
2849 p.iph.version = 4;
2850 p.iph.ihl = 5;
2851 p.iph.protocol = IPPROTO_IPV6;
2852 p.iph.ttl = 64;
68ad6886 2853
8e3db0bb 2854 if (!dev->netdev_ops->ndo_tunnel_ctl)
68ad6886 2855 return -EOPNOTSUPP;
8e3db0bb 2856 err = dev->netdev_ops->ndo_tunnel_ctl(dev, &p, SIOCADDTUNNEL);
68ad6886
CH
2857 if (err)
2858 return err;
2859
2860 dev = __dev_get_by_name(net, p.name);
2861 if (!dev)
2862 return -ENOBUFS;
2863 return dev_open(dev, NULL);
2864}
2865
1da177e4
LT
2866/*
2867 * Set destination address.
2868 * Special case for SIT interfaces where we create a new "virtual"
2869 * device.
2870 */
af284937 2871int addrconf_set_dstaddr(struct net *net, void __user *arg)
1da177e4 2872{
1da177e4 2873 struct net_device *dev;
68ad6886
CH
2874 struct in6_ifreq ireq;
2875 int err = -ENODEV;
1da177e4 2876
f0988460
CH
2877 if (!IS_ENABLED(CONFIG_IPV6_SIT))
2878 return -ENODEV;
1da177e4 2879 if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
68ad6886 2880 return -EFAULT;
1da177e4 2881
68ad6886 2882 rtnl_lock();
af284937 2883 dev = __dev_get_by_index(net, ireq.ifr6_ifindex);
68ad6886
CH
2884 if (dev && dev->type == ARPHRD_SIT)
2885 err = addrconf_set_sit_dstaddr(net, dev, &ireq);
1da177e4
LT
2886 rtnl_unlock();
2887 return err;
2888}
2889
93a714d6
MC
2890static int ipv6_mc_config(struct sock *sk, bool join,
2891 const struct in6_addr *addr, int ifindex)
2892{
2893 int ret;
2894
2895 ASSERT_RTNL();
2896
2897 lock_sock(sk);
2898 if (join)
54ff9ef3 2899 ret = ipv6_sock_mc_join(sk, ifindex, addr);
93a714d6 2900 else
54ff9ef3 2901 ret = ipv6_sock_mc_drop(sk, ifindex, addr);
93a714d6
MC
2902 release_sock(sk);
2903
2904 return ret;
2905}
2906
1da177e4
LT
2907/*
2908 * Manual configuration of address on an interface
2909 */
479840ff 2910static int inet6_addr_add(struct net *net, int ifindex,
19b1518c 2911 struct ifa6_config *cfg,
de95e047 2912 struct netlink_ext_ack *extack)
1da177e4
LT
2913{
2914 struct inet6_ifaddr *ifp;
2915 struct inet6_dev *idev;
2916 struct net_device *dev;
93a714d6
MC
2917 unsigned long timeout;
2918 clock_t expires;
6f704992 2919 u32 flags;
1da177e4
LT
2920
2921 ASSERT_RTNL();
1ab1457c 2922
19b1518c 2923 if (cfg->plen > 128)
24ef0da7
TG
2924 return -EINVAL;
2925
0778769d 2926 /* check the lifetime */
19b1518c 2927 if (!cfg->valid_lft || cfg->preferred_lft > cfg->valid_lft)
0778769d
NT
2928 return -EINVAL;
2929
19b1518c 2930 if (cfg->ifa_flags & IFA_F_MANAGETEMPADDR && cfg->plen != 64)
53bd6749
JP
2931 return -EINVAL;
2932
af284937
DL
2933 dev = __dev_get_by_index(net, ifindex);
2934 if (!dev)
1da177e4 2935 return -ENODEV;
1ab1457c 2936
64e724f6
BH
2937 idev = addrconf_add_dev(dev);
2938 if (IS_ERR(idev))
2939 return PTR_ERR(idev);
1da177e4 2940
19b1518c 2941 if (cfg->ifa_flags & IFA_F_MCAUTOJOIN) {
93a714d6 2942 int ret = ipv6_mc_config(net->ipv6.mc_autojoin_sk,
19b1518c 2943 true, cfg->pfx, ifindex);
93a714d6
MC
2944
2945 if (ret < 0)
2946 return ret;
2947 }
2948
19b1518c 2949 cfg->scope = ipv6_addr_scope(cfg->pfx);
1da177e4 2950
19b1518c 2951 timeout = addrconf_timeout_fixup(cfg->valid_lft, HZ);
4bed72e4
YH
2952 if (addrconf_finite_timeout(timeout)) {
2953 expires = jiffies_to_clock_t(timeout * HZ);
19b1518c 2954 cfg->valid_lft = timeout;
6f704992 2955 flags = RTF_EXPIRES;
4bed72e4
YH
2956 } else {
2957 expires = 0;
2958 flags = 0;
19b1518c 2959 cfg->ifa_flags |= IFA_F_PERMANENT;
6f704992 2960 }
0778769d 2961
19b1518c 2962 timeout = addrconf_timeout_fixup(cfg->preferred_lft, HZ);
4bed72e4
YH
2963 if (addrconf_finite_timeout(timeout)) {
2964 if (timeout == 0)
19b1518c
DA
2965 cfg->ifa_flags |= IFA_F_DEPRECATED;
2966 cfg->preferred_lft = timeout;
4bed72e4 2967 }
0778769d 2968
19b1518c 2969 ifp = ipv6_add_addr(idev, cfg, true, extack);
1da177e4 2970 if (!IS_ERR(ifp)) {
19b1518c 2971 if (!(cfg->ifa_flags & IFA_F_NOPREFIXROUTE)) {
8308f3ff
DA
2972 addrconf_prefix_route(&ifp->addr, ifp->prefix_len,
2973 ifp->rt_priority, dev, expires,
2974 flags, GFP_KERNEL);
761aac73
TH
2975 }
2976
a2d481b3
LB
2977 /* Send a netlink notification if DAD is enabled and
2978 * optimistic flag is not set
2979 */
2980 if (!(ifp->flags & (IFA_F_OPTIMISTIC | IFA_F_NODAD)))
2981 ipv6_ifa_notify(0, ifp);
95c385b4
NH
2982 /*
2983 * Note that section 3.1 of RFC 4429 indicates
2984 * that the Optimistic flag should not be set for
2985 * manually configured addresses
2986 */
cf22f9a2 2987 addrconf_dad_start(ifp);
19b1518c
DA
2988 if (cfg->ifa_flags & IFA_F_MANAGETEMPADDR)
2989 manage_tempaddrs(idev, ifp, cfg->valid_lft,
2990 cfg->preferred_lft, true, jiffies);
1da177e4 2991 in6_ifa_put(ifp);
8805d13f 2992 addrconf_verify_rtnl(net);
1da177e4 2993 return 0;
19b1518c
DA
2994 } else if (cfg->ifa_flags & IFA_F_MCAUTOJOIN) {
2995 ipv6_mc_config(net->ipv6.mc_autojoin_sk, false,
2996 cfg->pfx, ifindex);
1da177e4
LT
2997 }
2998
2999 return PTR_ERR(ifp);
3000}
3001
6046d5b4
HK
3002static int inet6_addr_del(struct net *net, int ifindex, u32 ifa_flags,
3003 const struct in6_addr *pfx, unsigned int plen)
1da177e4
LT
3004{
3005 struct inet6_ifaddr *ifp;
3006 struct inet6_dev *idev;
3007 struct net_device *dev;
1ab1457c 3008
24ef0da7
TG
3009 if (plen > 128)
3010 return -EINVAL;
3011
af284937
DL
3012 dev = __dev_get_by_index(net, ifindex);
3013 if (!dev)
1da177e4
LT
3014 return -ENODEV;
3015
e5d08d71 3016 idev = __in6_dev_get(dev);
63159f29 3017 if (!idev)
1da177e4
LT
3018 return -ENXIO;
3019
3020 read_lock_bh(&idev->lock);
502a2ffd 3021 list_for_each_entry(ifp, &idev->addr_list, if_list) {
1da177e4
LT
3022 if (ifp->prefix_len == plen &&
3023 ipv6_addr_equal(pfx, &ifp->addr)) {
3024 in6_ifa_hold(ifp);
3025 read_unlock_bh(&idev->lock);
1ab1457c 3026
6046d5b4
HK
3027 if (!(ifp->flags & IFA_F_TEMPORARY) &&
3028 (ifa_flags & IFA_F_MANAGETEMPADDR))
3029 manage_tempaddrs(idev, ifp, 0, 0, false,
3030 jiffies);
1da177e4 3031 ipv6_del_addr(ifp);
8805d13f 3032 addrconf_verify_rtnl(net);
93a714d6
MC
3033 if (ipv6_addr_is_multicast(pfx)) {
3034 ipv6_mc_config(net->ipv6.mc_autojoin_sk,
3035 false, pfx, dev->ifindex);
3036 }
1da177e4
LT
3037 return 0;
3038 }
3039 }
3040 read_unlock_bh(&idev->lock);
3041 return -EADDRNOTAVAIL;
3042}
3043
3044
af284937 3045int addrconf_add_ifaddr(struct net *net, void __user *arg)
1da177e4 3046{
19b1518c
DA
3047 struct ifa6_config cfg = {
3048 .ifa_flags = IFA_F_PERMANENT,
3049 .preferred_lft = INFINITY_LIFE_TIME,
3050 .valid_lft = INFINITY_LIFE_TIME,
3051 };
1da177e4
LT
3052 struct in6_ifreq ireq;
3053 int err;
1ab1457c 3054
af31f412 3055 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
1da177e4 3056 return -EPERM;
1ab1457c 3057
1da177e4
LT
3058 if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
3059 return -EFAULT;
3060
19b1518c
DA
3061 cfg.pfx = &ireq.ifr6_addr;
3062 cfg.plen = ireq.ifr6_prefixlen;
3063
1da177e4 3064 rtnl_lock();
19b1518c 3065 err = inet6_addr_add(net, ireq.ifr6_ifindex, &cfg, NULL);
1da177e4
LT
3066 rtnl_unlock();
3067 return err;
3068}
3069
af284937 3070int addrconf_del_ifaddr(struct net *net, void __user *arg)
1da177e4
LT
3071{
3072 struct in6_ifreq ireq;
3073 int err;
1ab1457c 3074
af31f412 3075 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
1da177e4
LT
3076 return -EPERM;
3077
3078 if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
3079 return -EFAULT;
3080
3081 rtnl_lock();
6046d5b4 3082 err = inet6_addr_del(net, ireq.ifr6_ifindex, 0, &ireq.ifr6_addr,
af284937 3083 ireq.ifr6_prefixlen);
1da177e4
LT
3084 rtnl_unlock();
3085 return err;
3086}
3087
b5f348e5 3088static void add_addr(struct inet6_dev *idev, const struct in6_addr *addr,
47f0bd50 3089 int plen, int scope, u8 proto)
b5f348e5
IJ
3090{
3091 struct inet6_ifaddr *ifp;
e6464b8c
DA
3092 struct ifa6_config cfg = {
3093 .pfx = addr,
3094 .plen = plen,
3095 .ifa_flags = IFA_F_PERMANENT,
3096 .valid_lft = INFINITY_LIFE_TIME,
3097 .preferred_lft = INFINITY_LIFE_TIME,
47f0bd50
JL
3098 .scope = scope,
3099 .ifa_proto = proto
e6464b8c 3100 };
b5f348e5 3101
e6464b8c 3102 ifp = ipv6_add_addr(idev, &cfg, true, NULL);
b5f348e5
IJ
3103 if (!IS_ERR(ifp)) {
3104 spin_lock_bh(&ifp->lock);
3105 ifp->flags &= ~IFA_F_TENTATIVE;
3106 spin_unlock_bh(&ifp->lock);
764d3be6 3107 rt_genid_bump_ipv6(dev_net(idev->dev));
b5f348e5
IJ
3108 ipv6_ifa_notify(RTM_NEWADDR, ifp);
3109 in6_ifa_put(ifp);
3110 }
3111}
3112
e5dd7294
AQ
3113#if IS_ENABLED(CONFIG_IPV6_SIT) || IS_ENABLED(CONFIG_NET_IPGRE) || IS_ENABLED(CONFIG_IPV6_GRE)
3114static void add_v4_addrs(struct inet6_dev *idev)
1da177e4 3115{
1da177e4
LT
3116 struct in6_addr addr;
3117 struct net_device *dev;
c346dca1 3118 struct net *net = dev_net(idev->dev);
e5dd7294 3119 int scope, plen, offset = 0;
f0e2acfa 3120 u32 pflags = 0;
1da177e4
LT
3121
3122 ASSERT_RTNL();
3123
3124 memset(&addr, 0, sizeof(struct in6_addr));
e5dd7294
AQ
3125 /* in case of IP6GRE the dev_addr is an IPv6 and therefore we use only the last 4 bytes */
3126 if (idev->dev->addr_len == sizeof(struct in6_addr))
3127 offset = sizeof(struct in6_addr) - 4;
3128 memcpy(&addr.s6_addr32[3], idev->dev->dev_addr + offset, 4);
1da177e4 3129
30e2291f
TW
3130 if (!(idev->dev->flags & IFF_POINTOPOINT) && idev->dev->type == ARPHRD_SIT) {
3131 scope = IPV6_ADDR_COMPATv4;
3132 plen = 96;
3133 pflags |= RTF_NONEXTHOP;
3134 } else {
61e18ce7
SS
3135 if (idev->cnf.addr_gen_mode == IN6_ADDR_GEN_MODE_NONE)
3136 return;
3137
1da177e4
LT
3138 addr.s6_addr32[0] = htonl(0xfe800000);
3139 scope = IFA_LINK;
929c9cf3 3140 plen = 64;
1da177e4
LT
3141 }
3142
3143 if (addr.s6_addr32[3]) {
47f0bd50 3144 add_addr(idev, &addr, plen, scope, IFAPROT_UNSPEC);
8308f3ff 3145 addrconf_prefix_route(&addr, plen, 0, idev->dev, 0, pflags,
e500c6d3 3146 GFP_KERNEL);
1da177e4
LT
3147 return;
3148 }
3149
6fda7350 3150 for_each_netdev(net, dev) {
8e5e8f30 3151 struct in_device *in_dev = __in_dev_get_rtnl(dev);
1da177e4 3152 if (in_dev && (dev->flags & IFF_UP)) {
8e5e8f30 3153 struct in_ifaddr *ifa;
1da177e4
LT
3154 int flag = scope;
3155
cd5a411d 3156 in_dev_for_each_ifa_rtnl(ifa, in_dev) {
1da177e4
LT
3157 addr.s6_addr32[3] = ifa->ifa_local;
3158
3159 if (ifa->ifa_scope == RT_SCOPE_LINK)
3160 continue;
3161 if (ifa->ifa_scope >= RT_SCOPE_HOST) {
3162 if (idev->dev->flags&IFF_POINTOPOINT)
3163 continue;
3164 flag |= IFA_HOST;
3165 }
1da177e4 3166
47f0bd50
JL
3167 add_addr(idev, &addr, plen, flag,
3168 IFAPROT_UNSPEC);
8308f3ff 3169 addrconf_prefix_route(&addr, plen, 0, idev->dev,
e500c6d3 3170 0, pflags, GFP_KERNEL);
1da177e4
LT
3171 }
3172 }
1ab1457c 3173 }
1da177e4 3174}
0be669bb 3175#endif
1da177e4
LT
3176
3177static void init_loopback(struct net_device *dev)
3178{
3179 struct inet6_dev *idev;
1da177e4
LT
3180
3181 /* ::1 */
3182
3183 ASSERT_RTNL();
3184
e5d08d71 3185 idev = ipv6_find_idev(dev);
db0b99f5 3186 if (IS_ERR(idev)) {
91df42be 3187 pr_debug("%s: add_dev failed\n", __func__);
1da177e4
LT
3188 return;
3189 }
3190
47f0bd50 3191 add_addr(idev, &in6addr_loopback, 128, IFA_HOST, IFAPROT_KERNEL_LO);
1da177e4
LT
3192}
3193
2ad3ed59
AA
3194void addrconf_add_linklocal(struct inet6_dev *idev,
3195 const struct in6_addr *addr, u32 flags)
1da177e4 3196{
e6464b8c
DA
3197 struct ifa6_config cfg = {
3198 .pfx = addr,
3199 .plen = 64,
3200 .ifa_flags = flags | IFA_F_PERMANENT,
3201 .valid_lft = INFINITY_LIFE_TIME,
3202 .preferred_lft = INFINITY_LIFE_TIME,
47f0bd50
JL
3203 .scope = IFA_LINK,
3204 .ifa_proto = IFAPROT_KERNEL_LL
e6464b8c 3205 };
8e5e8f30 3206 struct inet6_ifaddr *ifp;
95c385b4
NH
3207
3208#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
35e015e1
MC
3209 if ((dev_net(idev->dev)->ipv6.devconf_all->optimistic_dad ||
3210 idev->cnf.optimistic_dad) &&
702beb87 3211 !dev_net(idev->dev)->ipv6.devconf_all->forwarding)
e6464b8c 3212 cfg.ifa_flags |= IFA_F_OPTIMISTIC;
95c385b4 3213#endif
1da177e4 3214
e6464b8c 3215 ifp = ipv6_add_addr(idev, &cfg, true, NULL);
1da177e4 3216 if (!IS_ERR(ifp)) {
8308f3ff 3217 addrconf_prefix_route(&ifp->addr, ifp->prefix_len, 0, idev->dev,
acb54e3c 3218 0, 0, GFP_ATOMIC);
cf22f9a2 3219 addrconf_dad_start(ifp);
1da177e4
LT
3220 in6_ifa_put(ifp);
3221 }
3222}
2ad3ed59 3223EXPORT_SYMBOL_GPL(addrconf_add_linklocal);
1da177e4 3224
622c81d5
HFS
3225static bool ipv6_reserved_interfaceid(struct in6_addr address)
3226{
3227 if ((address.s6_addr32[2] | address.s6_addr32[3]) == 0)
3228 return true;
3229
3230 if (address.s6_addr32[2] == htonl(0x02005eff) &&
3231 ((address.s6_addr32[3] & htonl(0xfe000000)) == htonl(0xfe000000)))
3232 return true;
3233
3234 if (address.s6_addr32[2] == htonl(0xfdffffff) &&
3235 ((address.s6_addr32[3] & htonl(0xffffff80)) == htonl(0xffffff80)))
3236 return true;
3237
3238 return false;
3239}
3240
3241static int ipv6_generate_stable_address(struct in6_addr *address,
3242 u8 dad_count,
3243 const struct inet6_dev *idev)
3244{
622c81d5 3245 static DEFINE_SPINLOCK(lock);
6b0b0fa2
EB
3246 static __u32 digest[SHA1_DIGEST_WORDS];
3247 static __u32 workspace[SHA1_WORKSPACE_WORDS];
622c81d5
HFS
3248
3249 static union {
6b0b0fa2 3250 char __data[SHA1_BLOCK_SIZE];
622c81d5
HFS
3251 struct {
3252 struct in6_addr secret;
ff40217e 3253 __be32 prefix[2];
622c81d5
HFS
3254 unsigned char hwaddr[MAX_ADDR_LEN];
3255 u8 dad_count;
3256 } __packed;
3257 } data;
3258
3259 struct in6_addr secret;
3260 struct in6_addr temp;
3261 struct net *net = dev_net(idev->dev);
3262
3263 BUILD_BUG_ON(sizeof(data.__data) != sizeof(data));
3264
3265 if (idev->cnf.stable_secret.initialized)
3266 secret = idev->cnf.stable_secret.secret;
3267 else if (net->ipv6.devconf_dflt->stable_secret.initialized)
3268 secret = net->ipv6.devconf_dflt->stable_secret.secret;
3269 else
3270 return -1;
3271
3272retry:
3273 spin_lock_bh(&lock);
3274
6b0b0fa2 3275 sha1_init(digest);
622c81d5
HFS
3276 memset(&data, 0, sizeof(data));
3277 memset(workspace, 0, sizeof(workspace));
3278 memcpy(data.hwaddr, idev->dev->perm_addr, idev->dev->addr_len);
ff40217e
HFS
3279 data.prefix[0] = address->s6_addr32[0];
3280 data.prefix[1] = address->s6_addr32[1];
622c81d5
HFS
3281 data.secret = secret;
3282 data.dad_count = dad_count;
3283
6b0b0fa2 3284 sha1_transform(digest, data.__data, workspace);
622c81d5
HFS
3285
3286 temp = *address;
ff40217e
HFS
3287 temp.s6_addr32[2] = (__force __be32)digest[0];
3288 temp.s6_addr32[3] = (__force __be32)digest[1];
622c81d5
HFS
3289
3290 spin_unlock_bh(&lock);
3291
3292 if (ipv6_reserved_interfaceid(temp)) {
3293 dad_count++;
1855b7c3 3294 if (dad_count > dev_net(idev->dev)->ipv6.sysctl.idgen_retries)
622c81d5
HFS
3295 return -1;
3296 goto retry;
3297 }
3298
3299 *address = temp;
3300 return 0;
3301}
3302
cc9da6cc
BM
3303static void ipv6_gen_mode_random_init(struct inet6_dev *idev)
3304{
3305 struct ipv6_stable_secret *s = &idev->cnf.stable_secret;
3306
3307 if (s->initialized)
3308 return;
3309 s = &idev->cnf.stable_secret;
3310 get_random_bytes(&s->secret, sizeof(s->secret));
3311 s->initialized = true;
3312}
3313
bc91b0f0
JP
3314static void addrconf_addr_gen(struct inet6_dev *idev, bool prefix_route)
3315{
622c81d5
HFS
3316 struct in6_addr addr;
3317
ca254490
DA
3318 /* no link local addresses on L3 master devices */
3319 if (netif_is_l3_master(idev->dev))
3320 return;
3321
744fdc82 3322 /* no link local addresses on devices flagged as slaves */
8a321cf7 3323 if (idev->dev->priv_flags & IFF_NO_ADDRCONF)
744fdc82
JW
3324 return;
3325
622c81d5 3326 ipv6_addr_set(&addr, htonl(0xFE800000), 0, 0, 0);
bc91b0f0 3327
d35a00b8 3328 switch (idev->cnf.addr_gen_mode) {
cc9da6cc
BM
3329 case IN6_ADDR_GEN_MODE_RANDOM:
3330 ipv6_gen_mode_random_init(idev);
a8eceea8 3331 fallthrough;
cc9da6cc 3332 case IN6_ADDR_GEN_MODE_STABLE_PRIVACY:
622c81d5 3333 if (!ipv6_generate_stable_address(&addr, 0, idev))
64236f3f
HFS
3334 addrconf_add_linklocal(idev, &addr,
3335 IFA_F_STABLE_PRIVACY);
622c81d5 3336 else if (prefix_route)
8308f3ff 3337 addrconf_prefix_route(&addr, 64, 0, idev->dev,
acb54e3c 3338 0, 0, GFP_KERNEL);
cc9da6cc
BM
3339 break;
3340 case IN6_ADDR_GEN_MODE_EUI64:
bc91b0f0
JP
3341 /* addrconf_add_linklocal also adds a prefix_route and we
3342 * only need to care about prefix routes if ipv6_generate_eui64
3343 * couldn't generate one.
3344 */
3345 if (ipv6_generate_eui64(addr.s6_addr + 8, idev->dev) == 0)
64236f3f 3346 addrconf_add_linklocal(idev, &addr, 0);
bc91b0f0 3347 else if (prefix_route)
8308f3ff 3348 addrconf_prefix_route(&addr, 64, 0, idev->dev,
27b10608 3349 0, 0, GFP_KERNEL);
cc9da6cc
BM
3350 break;
3351 case IN6_ADDR_GEN_MODE_NONE:
3352 default:
3353 /* will not add any link local address */
3354 break;
bc91b0f0
JP
3355 }
3356}
3357
1da177e4
LT
3358static void addrconf_dev_config(struct net_device *dev)
3359{
8e5e8f30 3360 struct inet6_dev *idev;
1da177e4
LT
3361
3362 ASSERT_RTNL();
3363
74235a25
HX
3364 if ((dev->type != ARPHRD_ETHER) &&
3365 (dev->type != ARPHRD_FDDI) &&
74235a25 3366 (dev->type != ARPHRD_ARCNET) &&
06a4c1c5 3367 (dev->type != ARPHRD_INFINIBAND) &&
e837735e 3368 (dev->type != ARPHRD_IEEE1394) &&
e74bccb8 3369 (dev->type != ARPHRD_TUNNEL6) &&
cc9da6cc 3370 (dev->type != ARPHRD_6LOWPAN) &&
45ce0fd1 3371 (dev->type != ARPHRD_TUNNEL) &&
9deb441c
SAK
3372 (dev->type != ARPHRD_NONE) &&
3373 (dev->type != ARPHRD_RAWIP)) {
74235a25 3374 /* Alas, we support only Ethernet autoconfiguration. */
60380488
HL
3375 idev = __in6_dev_get(dev);
3376 if (!IS_ERR_OR_NULL(idev) && dev->flags & IFF_UP &&
3377 dev->flags & IFF_MULTICAST)
3378 ipv6_mc_up(idev);
74235a25
HX
3379 return;
3380 }
3381
1da177e4 3382 idev = addrconf_add_dev(dev);
64e724f6 3383 if (IS_ERR(idev))
1da177e4
LT
3384 return;
3385
cc9da6cc
BM
3386 /* this device type has no EUI support */
3387 if (dev->type == ARPHRD_NONE &&
d35a00b8
FJ
3388 idev->cnf.addr_gen_mode == IN6_ADDR_GEN_MODE_EUI64)
3389 idev->cnf.addr_gen_mode = IN6_ADDR_GEN_MODE_RANDOM;
cc9da6cc 3390
bc91b0f0 3391 addrconf_addr_gen(idev, false);
1da177e4
LT
3392}
3393
07a93626 3394#if IS_ENABLED(CONFIG_IPV6_SIT)
1da177e4
LT
3395static void addrconf_sit_config(struct net_device *dev)
3396{
3397 struct inet6_dev *idev;
3398
3399 ASSERT_RTNL();
3400
1ab1457c
YH
3401 /*
3402 * Configure the tunnel with one of our IPv4
3403 * addresses... we should configure all of
1da177e4
LT
3404 * our v4 addrs in the tunnel
3405 */
3406
e5d08d71 3407 idev = ipv6_find_idev(dev);
db0b99f5 3408 if (IS_ERR(idev)) {
91df42be 3409 pr_debug("%s: add_dev failed\n", __func__);
1da177e4
LT
3410 return;
3411 }
3412
c7dc89c0 3413 if (dev->priv_flags & IFF_ISATAP) {
bc91b0f0 3414 addrconf_addr_gen(idev, false);
c7dc89c0
FT
3415 return;
3416 }
3417
e5dd7294 3418 add_v4_addrs(idev);
1da177e4 3419
62b54dd9 3420 if (dev->flags&IFF_POINTOPOINT)
1da177e4 3421 addrconf_add_mroute(dev);
1da177e4 3422}
0be669bb 3423#endif
1da177e4 3424
e5dd7294 3425#if IS_ENABLED(CONFIG_NET_IPGRE) || IS_ENABLED(CONFIG_IPV6_GRE)
aee80b54 3426static void addrconf_gre_config(struct net_device *dev)
3427{
3428 struct inet6_dev *idev;
aee80b54 3429
aee80b54 3430 ASSERT_RTNL();
3431
e5d08d71 3432 idev = ipv6_find_idev(dev);
db0b99f5 3433 if (IS_ERR(idev)) {
91df42be 3434 pr_debug("%s: add_dev failed\n", __func__);
aee80b54 3435 return;
3436 }
3437
e5dd7294
AQ
3438 if (dev->type == ARPHRD_ETHER) {
3439 addrconf_addr_gen(idev, true);
3440 return;
3441 }
3442
3443 add_v4_addrs(idev);
3444
d9e4ce65
HFS
3445 if (dev->flags & IFF_POINTOPOINT)
3446 addrconf_add_mroute(dev);
aee80b54 3447}
3448#endif
3449
23ca0c2c
TW
3450static void addrconf_init_auto_addrs(struct net_device *dev)
3451{
3452 switch (dev->type) {
3453#if IS_ENABLED(CONFIG_IPV6_SIT)
3454 case ARPHRD_SIT:
3455 addrconf_sit_config(dev);
3456 break;
3457#endif
3458#if IS_ENABLED(CONFIG_NET_IPGRE) || IS_ENABLED(CONFIG_IPV6_GRE)
3459 case ARPHRD_IP6GRE:
3460 case ARPHRD_IPGRE:
3461 addrconf_gre_config(dev);
3462 break;
3463#endif
3464 case ARPHRD_LOOPBACK:
3465 init_loopback(dev);
3466 break;
3467
3468 default:
3469 addrconf_dev_config(dev);
3470 break;
3471 }
3472}
3473
afb1d4b5
DA
3474static int fixup_permanent_addr(struct net *net,
3475 struct inet6_dev *idev,
f1705ec1
DA
3476 struct inet6_ifaddr *ifp)
3477{
93c2fb25 3478 /* !fib6_node means the host route was removed from the
8048ced9
DA
3479 * FIB, for example, if 'lo' device is taken down. In that
3480 * case regenerate the host route.
3481 */
93c2fb25 3482 if (!ifp->rt || !ifp->rt->fib6_node) {
360a9887 3483 struct fib6_info *f6i, *prev;
f1705ec1 3484
360a9887
DA
3485 f6i = addrconf_f6i_alloc(net, idev, &ifp->addr, false,
3486 GFP_ATOMIC);
3487 if (IS_ERR(f6i))
3488 return PTR_ERR(f6i);
f1705ec1 3489
8048ced9
DA
3490 /* ifp->rt can be accessed outside of rtnl */
3491 spin_lock(&ifp->lock);
3492 prev = ifp->rt;
360a9887 3493 ifp->rt = f6i;
8048ced9
DA
3494 spin_unlock(&ifp->lock);
3495
93531c67 3496 fib6_info_release(prev);
f1705ec1
DA
3497 }
3498
3499 if (!(ifp->flags & IFA_F_NOPREFIXROUTE)) {
3500 addrconf_prefix_route(&ifp->addr, ifp->prefix_len,
8308f3ff
DA
3501 ifp->rt_priority, idev->dev, 0, 0,
3502 GFP_ATOMIC);
f1705ec1
DA
3503 }
3504
6d717134
DA
3505 if (ifp->state == INET6_IFADDR_STATE_PREDAD)
3506 addrconf_dad_start(ifp);
f1705ec1
DA
3507
3508 return 0;
3509}
3510
afb1d4b5 3511static void addrconf_permanent_addr(struct net *net, struct net_device *dev)
f1705ec1
DA
3512{
3513 struct inet6_ifaddr *ifp, *tmp;
3514 struct inet6_dev *idev;
3515
3516 idev = __in6_dev_get(dev);
3517 if (!idev)
3518 return;
3519
3520 write_lock_bh(&idev->lock);
3521
3522 list_for_each_entry_safe(ifp, tmp, &idev->addr_list, if_list) {
3523 if ((ifp->flags & IFA_F_PERMANENT) &&
afb1d4b5 3524 fixup_permanent_addr(net, idev, ifp) < 0) {
f1705ec1 3525 write_unlock_bh(&idev->lock);
e669b869 3526 in6_ifa_hold(ifp);
f1705ec1
DA
3527 ipv6_del_addr(ifp);
3528 write_lock_bh(&idev->lock);
3529
3530 net_info_ratelimited("%s: Failed to add prefix route for address %pI6c; dropping\n",
3531 idev->dev->name, &ifp->addr);
3532 }
3533 }
3534
3535 write_unlock_bh(&idev->lock);
3536}
3537
1ab1457c 3538static int addrconf_notify(struct notifier_block *this, unsigned long event,
351638e7 3539 void *ptr)
1da177e4 3540{
351638e7 3541 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
896585d4 3542 struct netdev_notifier_change_info *change_info;
4f7f34ea 3543 struct netdev_notifier_changeupper_info *info;
748e2d93 3544 struct inet6_dev *idev = __in6_dev_get(dev);
60abc0be 3545 struct net *net = dev_net(dev);
c5e33bdd 3546 int run_pending = 0;
b217d616 3547 int err;
1da177e4 3548
e21e8467 3549 switch (event) {
45ba9dd2 3550 case NETDEV_REGISTER:
74235a25 3551 if (!idev && dev->mtu >= IPV6_MIN_MTU) {
45ba9dd2 3552 idev = ipv6_add_dev(dev);
a317a2f1
WC
3553 if (IS_ERR(idev))
3554 return notifier_from_errno(PTR_ERR(idev));
45ba9dd2
YH
3555 }
3556 break;
bcdd553f 3557
b7b0b1d2
AD
3558 case NETDEV_CHANGEMTU:
3559 /* if MTU under IPV6_MIN_MTU stop IPv6 on this interface. */
3560 if (dev->mtu < IPV6_MIN_MTU) {
60abc0be 3561 addrconf_ifdown(dev, dev != net->loopback_dev);
b7b0b1d2
AD
3562 break;
3563 }
3564
3565 if (idev) {
3566 rt6_mtu_change(dev, dev->mtu);
3567 idev->cnf.mtu6 = dev->mtu;
3568 break;
3569 }
3570
3571 /* allocate new idev */
3572 idev = ipv6_add_dev(dev);
3573 if (IS_ERR(idev))
3574 break;
3575
3576 /* device is still not ready */
3577 if (!(idev->if_flags & IF_READY))
3578 break;
3579
3580 run_pending = 1;
a8eceea8 3581 fallthrough;
1da177e4 3582 case NETDEV_UP:
3c21edbd 3583 case NETDEV_CHANGE:
fd16eb94 3584 if (idev && idev->cnf.disable_ipv6)
c2edacf8
JV
3585 break;
3586
8a321cf7 3587 if (dev->priv_flags & IFF_NO_ADDRCONF) {
fd16eb94
HL
3588 if (event == NETDEV_UP && !IS_ERR_OR_NULL(idev) &&
3589 dev->flags & IFF_UP && dev->flags & IFF_MULTICAST)
3590 ipv6_mc_up(idev);
3ce62a84 3591 break;
fd16eb94 3592 }
3ce62a84 3593
3c21edbd 3594 if (event == NETDEV_UP) {
38bd10c4 3595 /* restore routes for permanent addresses */
afb1d4b5 3596 addrconf_permanent_addr(net, dev);
38bd10c4 3597
1f372c7b 3598 if (!addrconf_link_ready(dev)) {
3c21edbd 3599 /* device is not ready yet. */
7c62b8dd
LR
3600 pr_debug("ADDRCONF(NETDEV_UP): %s: link is not ready\n",
3601 dev->name);
3c21edbd
YH
3602 break;
3603 }
99081049 3604
d31c7b8f
EP
3605 if (!idev && dev->mtu >= IPV6_MIN_MTU)
3606 idev = ipv6_add_dev(dev);
3607
a317a2f1 3608 if (!IS_ERR_OR_NULL(idev)) {
99081049 3609 idev->if_flags |= IF_READY;
e3ec6cfc
BT
3610 run_pending = 1;
3611 }
b7b0b1d2 3612 } else if (event == NETDEV_CHANGE) {
1f372c7b 3613 if (!addrconf_link_ready(dev)) {
3c21edbd 3614 /* device is still not ready. */
27c6fa73 3615 rt6_sync_down_dev(dev, event);
3c21edbd
YH
3616 break;
3617 }
3618
896585d4 3619 if (!IS_ERR_OR_NULL(idev)) {
a088d1d7
LL
3620 if (idev->if_flags & IF_READY) {
3621 /* device is already configured -
3622 * but resend MLD reports, we might
3623 * have roamed and need to update
3624 * multicast snooping switches
3625 */
3626 ipv6_mc_up(idev);
896585d4
HL
3627 change_info = ptr;
3628 if (change_info->flags_changed & IFF_NOARP)
3629 addrconf_dad_run(idev, true);
27c6fa73 3630 rt6_sync_up(dev, RTNH_F_LINKDOWN);
3c21edbd 3631 break;
a088d1d7 3632 }
3c21edbd
YH
3633 idev->if_flags |= IF_READY;
3634 }
3635
f3213831
JP
3636 pr_info("ADDRCONF(NETDEV_CHANGE): %s: link becomes ready\n",
3637 dev->name);
3c21edbd 3638
c5e33bdd 3639 run_pending = 1;
3c21edbd
YH
3640 }
3641
23ca0c2c 3642 addrconf_init_auto_addrs(dev);
bcdd553f 3643
a317a2f1 3644 if (!IS_ERR_OR_NULL(idev)) {
c5e33bdd 3645 if (run_pending)
896585d4 3646 addrconf_dad_run(idev, false);
c5e33bdd 3647
2127d95a
IS
3648 /* Device has an address by now */
3649 rt6_sync_up(dev, RTNH_F_DEAD);
3650
bcdd553f
SH
3651 /*
3652 * If the MTU changed during the interface down,
3653 * when the interface up, the changed MTU must be
3654 * reflected in the idev as well as routers.
1da177e4 3655 */
bcdd553f
SH
3656 if (idev->cnf.mtu6 != dev->mtu &&
3657 dev->mtu >= IPV6_MIN_MTU) {
1da177e4
LT
3658 rt6_mtu_change(dev, dev->mtu);
3659 idev->cnf.mtu6 = dev->mtu;
3660 }
3661 idev->tstamp = jiffies;
3662 inet6_ifinfo_notify(RTM_NEWLINK, idev);
bcdd553f
SH
3663
3664 /*
3665 * If the changed mtu during down is lower than
3666 * IPV6_MIN_MTU stop IPv6 on this interface.
1da177e4
LT
3667 */
3668 if (dev->mtu < IPV6_MIN_MTU)
60abc0be 3669 addrconf_ifdown(dev, dev != net->loopback_dev);
1da177e4
LT
3670 }
3671 break;
3672
1da177e4
LT
3673 case NETDEV_DOWN:
3674 case NETDEV_UNREGISTER:
3675 /*
3676 * Remove all addresses from this interface.
3677 */
3678 addrconf_ifdown(dev, event != NETDEV_DOWN);
3679 break;
3c21edbd 3680
1da177e4 3681 case NETDEV_CHANGENAME:
1da177e4 3682 if (idev) {
5632c515 3683 snmp6_unregister_dev(idev);
408c4768 3684 addrconf_sysctl_unregister(idev);
a317a2f1 3685 err = addrconf_sysctl_register(idev);
b217d616
HX
3686 if (err)
3687 return notifier_from_errno(err);
a317a2f1
WC
3688 err = snmp6_register_dev(idev);
3689 if (err) {
3690 addrconf_sysctl_unregister(idev);
3691 return notifier_from_errno(err);
3692 }
5632c515 3693 }
1da177e4 3694 break;
bcdd553f 3695
93d9b7d7
JP
3696 case NETDEV_PRE_TYPE_CHANGE:
3697 case NETDEV_POST_TYPE_CHANGE:
3ef0952c
AL
3698 if (idev)
3699 addrconf_type_change(dev, event);
75c78500 3700 break;
4f7f34ea
DA
3701
3702 case NETDEV_CHANGEUPPER:
3703 info = ptr;
3704
3705 /* flush all routes if dev is linked to or unlinked from
3706 * an L3 master device (e.g., VRF)
3707 */
3708 if (info->upper_dev && netif_is_l3_master(info->upper_dev))
ae79dbf6 3709 addrconf_ifdown(dev, false);
3ff50b79 3710 }
1da177e4
LT
3711
3712 return NOTIFY_OK;
3713}
3714
3715/*
3716 * addrconf module should be notified of a device going up
3717 */
3718static struct notifier_block ipv6_dev_notf = {
3719 .notifier_call = addrconf_notify,
242d3a49 3720 .priority = ADDRCONF_NOTIFY_PRIORITY,
1da177e4
LT
3721};
3722
93d9b7d7 3723static void addrconf_type_change(struct net_device *dev, unsigned long event)
75c78500
MS
3724{
3725 struct inet6_dev *idev;
3726 ASSERT_RTNL();
3727
3728 idev = __in6_dev_get(dev);
3729
93d9b7d7 3730 if (event == NETDEV_POST_TYPE_CHANGE)
75c78500 3731 ipv6_mc_remap(idev);
93d9b7d7 3732 else if (event == NETDEV_PRE_TYPE_CHANGE)
75c78500
MS
3733 ipv6_mc_unmap(idev);
3734}
3735
70af921d
DA
3736static bool addr_is_local(const struct in6_addr *addr)
3737{
3738 return ipv6_addr_type(addr) &
3739 (IPV6_ADDR_LINKLOCAL | IPV6_ADDR_LOOPBACK);
3740}
3741
ae79dbf6 3742static int addrconf_ifdown(struct net_device *dev, bool unregister)
1da177e4 3743{
ae79dbf6 3744 unsigned long event = unregister ? NETDEV_UNREGISTER : NETDEV_DOWN;
c346dca1 3745 struct net *net = dev_net(dev);
502a2ffd 3746 struct inet6_dev *idev;
51454ea4
ND
3747 struct inet6_ifaddr *ifa;
3748 LIST_HEAD(tmp_addr_list);
0aef78aa 3749 bool keep_addr = false;
9995b408 3750 bool was_ready;
73a8bd74 3751 int state, i;
1da177e4
LT
3752
3753 ASSERT_RTNL();
3754
4c981e28 3755 rt6_disable_ip(dev, event);
1da177e4
LT
3756
3757 idev = __in6_dev_get(dev);
63159f29 3758 if (!idev)
1da177e4
LT
3759 return -ENODEV;
3760
bcdd553f
SH
3761 /*
3762 * Step 1: remove reference to ipv6 device from parent device.
3763 * Do not dev_put!
1da177e4 3764 */
ae79dbf6 3765 if (unregister) {
1da177e4 3766 idev->dead = 1;
8814c4b5
YH
3767
3768 /* protected by rtnl_lock */
a9b3cd7f 3769 RCU_INIT_POINTER(dev->ip6_ptr, NULL);
1da177e4
LT
3770
3771 /* Step 1.5: remove snmp6 entry */
3772 snmp6_unregister_dev(idev);
3773
3774 }
3775
f1705ec1
DA
3776 /* combine the user config with event to determine if permanent
3777 * addresses are to be removed from address hash table
3778 */
ae79dbf6 3779 if (!unregister && !idev->cnf.disable_ipv6) {
0aef78aa
IV
3780 /* aggregate the system setting and interface setting */
3781 int _keep_addr = net->ipv6.devconf_all->keep_addr_on_down;
3782
3783 if (!_keep_addr)
3784 _keep_addr = idev->cnf.keep_addr_on_down;
3785
3786 keep_addr = (_keep_addr > 0);
3787 }
f1705ec1 3788
73a8bd74
DM
3789 /* Step 2: clear hash table */
3790 for (i = 0; i < IN6_ADDR_HSIZE; i++) {
e66d1172 3791 struct hlist_head *h = &net->ipv6.inet6_addr_lst[i];
73a8bd74 3792
e66d1172 3793 spin_lock_bh(&net->ipv6.addrconf_hash_lock);
67ba4152 3794restart:
b67bfe0d 3795 hlist_for_each_entry_rcu(ifa, h, addr_lst) {
73a8bd74 3796 if (ifa->idev == idev) {
c15b1cca 3797 addrconf_del_dad_work(ifa);
f1705ec1
DA
3798 /* combined flag + permanent flag decide if
3799 * address is retained on a down event
3800 */
3801 if (!keep_addr ||
70af921d
DA
3802 !(ifa->flags & IFA_F_PERMANENT) ||
3803 addr_is_local(&ifa->addr)) {
f1705ec1
DA
3804 hlist_del_init_rcu(&ifa->addr_lst);
3805 goto restart;
3806 }
73a8bd74
DM
3807 }
3808 }
e66d1172 3809 spin_unlock_bh(&net->ipv6.addrconf_hash_lock);
73a8bd74
DM
3810 }
3811
1da177e4
LT
3812 write_lock_bh(&idev->lock);
3813
b7b1bfce
HFS
3814 addrconf_del_rs_timer(idev);
3815
9995b408 3816 /* Step 2: clear flags for stateless addrconf, repeated down
3817 * detection
3818 */
3819 was_ready = idev->if_flags & IF_READY;
ae79dbf6 3820 if (!unregister)
3c21edbd 3821 idev->if_flags &= ~(IF_RS_SENT|IF_RA_RCVD|IF_READY);
1da177e4 3822
bcdd553f 3823 /* Step 3: clear tempaddr list */
372e6c8f 3824 while (!list_empty(&idev->tempaddr_list)) {
3825 ifa = list_first_entry(&idev->tempaddr_list,
3826 struct inet6_ifaddr, tmp_list);
3827 list_del(&ifa->tmp_list);
1da177e4
LT
3828 write_unlock_bh(&idev->lock);
3829 spin_lock_bh(&ifa->lock);
3830
3831 if (ifa->ifpub) {
3832 in6_ifa_put(ifa->ifpub);
3833 ifa->ifpub = NULL;
3834 }
3835 spin_unlock_bh(&ifa->lock);
3836 in6_ifa_put(ifa);
3837 write_lock_bh(&idev->lock);
3838 }
8f37ada5 3839
51454ea4
ND
3840 list_for_each_entry(ifa, &idev->addr_list, if_list)
3841 list_add_tail(&ifa->if_list_aux, &tmp_addr_list);
3842 write_unlock_bh(&idev->lock);
3843
3844 while (!list_empty(&tmp_addr_list)) {
8d1c802b 3845 struct fib6_info *rt = NULL;
a2d6cbb0 3846 bool keep;
38bd10c4 3847
51454ea4
ND
3848 ifa = list_first_entry(&tmp_addr_list,
3849 struct inet6_ifaddr, if_list_aux);
3850 list_del(&ifa->if_list_aux);
3851
f1705ec1 3852 addrconf_del_dad_work(ifa);
84e8b803 3853
a2d6cbb0
RV
3854 keep = keep_addr && (ifa->flags & IFA_F_PERMANENT) &&
3855 !addr_is_local(&ifa->addr);
a2d6cbb0 3856
8e8e676d 3857 spin_lock_bh(&ifa->lock);
f1705ec1 3858
a2d6cbb0 3859 if (keep) {
f1705ec1
DA
3860 /* set state to skip the notifier below */
3861 state = INET6_IFADDR_STATE_DEAD;
6d717134 3862 ifa->state = INET6_IFADDR_STATE_PREDAD;
f1705ec1
DA
3863 if (!(ifa->flags & IFA_F_NODAD))
3864 ifa->flags |= IFA_F_TENTATIVE;
38bd10c4
DA
3865
3866 rt = ifa->rt;
3867 ifa->rt = NULL;
f1705ec1
DA
3868 } else {
3869 state = ifa->state;
3870 ifa->state = INET6_IFADDR_STATE_DEAD;
f1705ec1
DA
3871 }
3872
8e8e676d 3873 spin_unlock_bh(&ifa->lock);
9d82ca98 3874
38bd10c4 3875 if (rt)
11dd74b3 3876 ip6_del_rt(net, rt, false);
38bd10c4 3877
73a8bd74
DM
3878 if (state != INET6_IFADDR_STATE_DEAD) {
3879 __ipv6_ifa_notify(RTM_DELADDR, ifa);
f88c91dd 3880 inet6addr_notifier_call_chain(NETDEV_DOWN, ifa);
ea06f717
MM
3881 } else {
3882 if (idev->cnf.forwarding)
3883 addrconf_leave_anycast(ifa);
3884 addrconf_leave_solict(ifa->idev, &ifa->addr);
27bdb2ab 3885 }
8f37ada5 3886
8ef802aa 3887 if (!keep) {
51454ea4 3888 write_lock_bh(&idev->lock);
8ef802aa 3889 list_del_rcu(&ifa->if_list);
51454ea4 3890 write_unlock_bh(&idev->lock);
8ef802aa
ED
3891 in6_ifa_put(ifa);
3892 }
73a8bd74 3893 }
8f37ada5 3894
381f4dca 3895 /* Step 5: Discard anycast and multicast list */
ae79dbf6 3896 if (unregister) {
381f4dca 3897 ipv6_ac_destroy_dev(idev);
1da177e4 3898 ipv6_mc_destroy_dev(idev);
9995b408 3899 } else if (was_ready) {
1da177e4 3900 ipv6_mc_down(idev);
381f4dca 3901 }
1da177e4 3902
1da177e4 3903 idev->tstamp = jiffies;
49b99da2 3904 idev->ra_mtu = 0;
1ab1457c 3905
bcdd553f 3906 /* Last: Shot the device (if unregistered) */
ae79dbf6 3907 if (unregister) {
408c4768 3908 addrconf_sysctl_unregister(idev);
1da177e4
LT
3909 neigh_parms_release(&nd_tbl, idev->nd_parms);
3910 neigh_ifdown(&nd_tbl, dev);
3911 in6_dev_put(idev);
3912 }
3913 return 0;
3914}
3915
e99e88a9 3916static void addrconf_rs_timer(struct timer_list *t)
1da177e4 3917{
e99e88a9 3918 struct inet6_dev *idev = from_timer(idev, t, rs_timer);
caf92bc4 3919 struct net_device *dev = idev->dev;
b7b1bfce 3920 struct in6_addr lladdr;
1da177e4 3921
b7b1bfce 3922 write_lock(&idev->lock);
5b2a1953 3923 if (idev->dead || !(idev->if_flags & IF_READY))
1da177e4
LT
3924 goto out;
3925
9ba2add3 3926 if (!ipv6_accept_ra(idev))
5b2a1953 3927 goto out;
3928
3929 /* Announcement received after solicitation was sent */
3930 if (idev->if_flags & IF_RA_RCVD)
1da177e4 3931 goto out;
1da177e4 3932
bd11f074 3933 if (idev->rs_probes++ < idev->cnf.rtr_solicits || idev->cnf.rtr_solicits < 0) {
caf92bc4
CW
3934 write_unlock(&idev->lock);
3935 if (!ipv6_get_lladdr(dev, &lladdr, IFA_F_TENTATIVE))
3936 ndisc_send_rs(dev, &lladdr,
b7b1bfce
HFS
3937 &in6addr_linklocal_allrouters);
3938 else
caf92bc4 3939 goto put;
1da177e4 3940
caf92bc4 3941 write_lock(&idev->lock);
bd11f074
3942 idev->rs_interval = rfc3315_s14_backoff_update(
3943 idev->rs_interval, idev->cnf.rtr_solicit_max_interval);
b7b1bfce
HFS
3944 /* The wait after the last probe can be shorter */
3945 addrconf_mod_rs_timer(idev, (idev->rs_probes ==
3946 idev->cnf.rtr_solicits) ?
3947 idev->cnf.rtr_solicit_delay :
bd11f074 3948 idev->rs_interval);
1da177e4 3949 } else {
1da177e4
LT
3950 /*
3951 * Note: we do not support deprecated "all on-link"
3952 * assumption any longer.
3953 */
91df42be 3954 pr_debug("%s: no IPv6 routers present\n", idev->dev->name);
1da177e4
LT
3955 }
3956
3957out:
b7b1bfce 3958 write_unlock(&idev->lock);
caf92bc4 3959put:
b7b1bfce 3960 in6_dev_put(idev);
1da177e4
LT
3961}
3962
3963/*
3964 * Duplicate Address Detection
3965 */
3c21edbd
YH
3966static void addrconf_dad_kick(struct inet6_ifaddr *ifp)
3967{
3968 unsigned long rand_num;
3969 struct inet6_dev *idev = ifp->idev;
adc176c5 3970 u64 nonce;
3c21edbd 3971
95c385b4
NH
3972 if (ifp->flags & IFA_F_OPTIMISTIC)
3973 rand_num = 0;
3974 else
8032bf12 3975 rand_num = get_random_u32_below(idev->cnf.rtr_solicit_delay ? : 1);
95c385b4 3976
adc176c5
EN
3977 nonce = 0;
3978 if (idev->cnf.enhanced_dad ||
3979 dev_net(idev->dev)->ipv6.devconf_all->enhanced_dad) {
3980 do
3981 get_random_bytes(&nonce, 6);
3982 while (nonce == 0);
3983 }
3984 ifp->dad_nonce = nonce;
b7b1bfce 3985 ifp->dad_probes = idev->cnf.dad_transmits;
c15b1cca 3986 addrconf_mod_dad_work(ifp, rand_num);
3c21edbd
YH
3987}
3988
c15b1cca 3989static void addrconf_dad_begin(struct inet6_ifaddr *ifp)
1da177e4
LT
3990{
3991 struct inet6_dev *idev = ifp->idev;
3992 struct net_device *dev = idev->dev;
764d3be6 3993 bool bump_id, notify = false;
afb1d4b5 3994 struct net *net;
1da177e4
LT
3995
3996 addrconf_join_solict(dev, &ifp->addr);
3997
1da177e4 3998 read_lock_bh(&idev->lock);
622ccdf1 3999 spin_lock(&ifp->lock);
e9d3e084 4000 if (ifp->state == INET6_IFADDR_STATE_DEAD)
1da177e4 4001 goto out;
1da177e4 4002
afb1d4b5 4003 net = dev_net(dev);
1da177e4 4004 if (dev->flags&(IFF_NOARP|IFF_LOOPBACK) ||
afb1d4b5 4005 (net->ipv6.devconf_all->accept_dad < 1 &&
a2d3f3e3 4006 idev->cnf.accept_dad < 1) ||
55ebaef1
NT
4007 !(ifp->flags&IFA_F_TENTATIVE) ||
4008 ifp->flags & IFA_F_NODAD) {
c76fe2d9
DA
4009 bool send_na = false;
4010
4011 if (ifp->flags & IFA_F_TENTATIVE &&
4012 !(ifp->flags & IFA_F_OPTIMISTIC))
4013 send_na = true;
764d3be6 4014 bump_id = ifp->flags & IFA_F_TENTATIVE;
cc411d0b 4015 ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
21809faf 4016 spin_unlock(&ifp->lock);
1da177e4
LT
4017 read_unlock_bh(&idev->lock);
4018
c76fe2d9 4019 addrconf_dad_completed(ifp, bump_id, send_na);
1da177e4
LT
4020 return;
4021 }
4022
6732bade 4023 if (!(idev->if_flags & IF_READY)) {
21809faf 4024 spin_unlock(&ifp->lock);
6732bade 4025 read_unlock_bh(&idev->lock);
3c21edbd 4026 /*
590a9887 4027 * If the device is not ready:
3c21edbd
YH
4028 * - keep it tentative if it is a permanent address.
4029 * - otherwise, kill it.
4030 */
4031 in6_ifa_hold(ifp);
cc411d0b 4032 addrconf_dad_stop(ifp, 0);
6732bade 4033 return;
3c21edbd 4034 }
95c385b4
NH
4035
4036 /*
4037 * Optimistic nodes can start receiving
4038 * Frames right away
4039 */
7fd2561e 4040 if (ifp->flags & IFA_F_OPTIMISTIC) {
afb1d4b5
DA
4041 ip6_ins_rt(net, ifp->rt);
4042 if (ipv6_use_optimistic_addr(net, idev)) {
7fd2561e
EK
4043 /* Because optimistic nodes can use this address,
4044 * notify listeners. If DAD fails, RTM_DELADDR is sent.
4045 */
16186a82 4046 notify = true;
7fd2561e
EK
4047 }
4048 }
95c385b4 4049
6732bade 4050 addrconf_dad_kick(ifp);
1da177e4 4051out:
622ccdf1 4052 spin_unlock(&ifp->lock);
1da177e4 4053 read_unlock_bh(&idev->lock);
16186a82 4054 if (notify)
4055 ipv6_ifa_notify(RTM_NEWADDR, ifp);
1da177e4
LT
4056}
4057
c15b1cca 4058static void addrconf_dad_start(struct inet6_ifaddr *ifp)
1da177e4 4059{
c15b1cca
HFS
4060 bool begin_dad = false;
4061
8e8e676d 4062 spin_lock_bh(&ifp->lock);
c15b1cca
HFS
4063 if (ifp->state != INET6_IFADDR_STATE_DEAD) {
4064 ifp->state = INET6_IFADDR_STATE_PREDAD;
4065 begin_dad = true;
4066 }
8e8e676d 4067 spin_unlock_bh(&ifp->lock);
c15b1cca
HFS
4068
4069 if (begin_dad)
4070 addrconf_mod_dad_work(ifp, 0);
4071}
4072
4073static void addrconf_dad_work(struct work_struct *w)
4074{
4075 struct inet6_ifaddr *ifp = container_of(to_delayed_work(w),
4076 struct inet6_ifaddr,
4077 dad_work);
1da177e4 4078 struct inet6_dev *idev = ifp->idev;
764d3be6 4079 bool bump_id, disable_ipv6 = false;
1da177e4
LT
4080 struct in6_addr mcaddr;
4081
c15b1cca
HFS
4082 enum {
4083 DAD_PROCESS,
4084 DAD_BEGIN,
4085 DAD_ABORT,
4086 } action = DAD_PROCESS;
4087
4088 rtnl_lock();
4089
8e8e676d 4090 spin_lock_bh(&ifp->lock);
c15b1cca
HFS
4091 if (ifp->state == INET6_IFADDR_STATE_PREDAD) {
4092 action = DAD_BEGIN;
4093 ifp->state = INET6_IFADDR_STATE_DAD;
4094 } else if (ifp->state == INET6_IFADDR_STATE_ERRDAD) {
4095 action = DAD_ABORT;
4096 ifp->state = INET6_IFADDR_STATE_POSTDAD;
85b51b12 4097
35e015e1
MC
4098 if ((dev_net(idev->dev)->ipv6.devconf_all->accept_dad > 1 ||
4099 idev->cnf.accept_dad > 1) &&
4100 !idev->cnf.disable_ipv6 &&
85b51b12
MM
4101 !(ifp->flags & IFA_F_STABLE_PRIVACY)) {
4102 struct in6_addr addr;
4103
4104 addr.s6_addr32[0] = htonl(0xfe800000);
4105 addr.s6_addr32[1] = 0;
4106
4107 if (!ipv6_generate_eui64(addr.s6_addr + 8, idev->dev) &&
4108 ipv6_addr_equal(&ifp->addr, &addr)) {
4109 /* DAD failed for link-local based on MAC */
4110 idev->cnf.disable_ipv6 = 1;
4111
4112 pr_info("%s: IPv6 being disabled!\n",
4113 ifp->idev->dev->name);
4114 disable_ipv6 = true;
4115 }
4116 }
c15b1cca 4117 }
8e8e676d 4118 spin_unlock_bh(&ifp->lock);
c15b1cca
HFS
4119
4120 if (action == DAD_BEGIN) {
4121 addrconf_dad_begin(ifp);
4122 goto out;
4123 } else if (action == DAD_ABORT) {
751eb6b6 4124 in6_ifa_hold(ifp);
c15b1cca 4125 addrconf_dad_stop(ifp, 1);
85b51b12 4126 if (disable_ipv6)
ae79dbf6 4127 addrconf_ifdown(idev->dev, false);
c15b1cca
HFS
4128 goto out;
4129 }
4130
b7b1bfce 4131 if (!ifp->dad_probes && addrconf_dad_end(ifp))
f2344a13
HX
4132 goto out;
4133
c15b1cca 4134 write_lock_bh(&idev->lock);
122e4519 4135 if (idev->dead || !(idev->if_flags & IF_READY)) {
c15b1cca 4136 write_unlock_bh(&idev->lock);
1da177e4
LT
4137 goto out;
4138 }
21809faf 4139
4140 spin_lock(&ifp->lock);
622ccdf1
HX
4141 if (ifp->state == INET6_IFADDR_STATE_DEAD) {
4142 spin_unlock(&ifp->lock);
c15b1cca 4143 write_unlock_bh(&idev->lock);
622ccdf1
HX
4144 goto out;
4145 }
4146
b7b1bfce 4147 if (ifp->dad_probes == 0) {
c76fe2d9
DA
4148 bool send_na = false;
4149
1da177e4
LT
4150 /*
4151 * DAD was successful
4152 */
4153
c76fe2d9
DA
4154 if (ifp->flags & IFA_F_TENTATIVE &&
4155 !(ifp->flags & IFA_F_OPTIMISTIC))
4156 send_na = true;
764d3be6 4157 bump_id = ifp->flags & IFA_F_TENTATIVE;
cc411d0b 4158 ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC|IFA_F_DADFAILED);
21809faf 4159 spin_unlock(&ifp->lock);
c15b1cca 4160 write_unlock_bh(&idev->lock);
1da177e4 4161
c76fe2d9 4162 addrconf_dad_completed(ifp, bump_id, send_na);
1da177e4
LT
4163
4164 goto out;
4165 }
4166
b7b1bfce 4167 ifp->dad_probes--;
c15b1cca 4168 addrconf_mod_dad_work(ifp,
19e16d22
HL
4169 max(NEIGH_VAR(ifp->idev->nd_parms, RETRANS_TIME),
4170 HZ/100));
21809faf 4171 spin_unlock(&ifp->lock);
c15b1cca 4172 write_unlock_bh(&idev->lock);
1da177e4
LT
4173
4174 /* send a neighbour solicitation for our addr */
1da177e4 4175 addrconf_addr_solict_mult(&ifp->addr, &mcaddr);
adc176c5
EN
4176 ndisc_send_ns(ifp->idev->dev, &ifp->addr, &mcaddr, &in6addr_any,
4177 ifp->dad_nonce);
1da177e4
LT
4178out:
4179 in6_ifa_put(ifp);
c15b1cca 4180 rtnl_unlock();
1da177e4
LT
4181}
4182
11ffff75
HFS
4183/* ifp->idev must be at least read locked */
4184static bool ipv6_lonely_lladdr(struct inet6_ifaddr *ifp)
4185{
4186 struct inet6_ifaddr *ifpiter;
4187 struct inet6_dev *idev = ifp->idev;
4188
602582ca
HFS
4189 list_for_each_entry_reverse(ifpiter, &idev->addr_list, if_list) {
4190 if (ifpiter->scope > IFA_LINK)
4191 break;
11ffff75
HFS
4192 if (ifp != ifpiter && ifpiter->scope == IFA_LINK &&
4193 (ifpiter->flags & (IFA_F_PERMANENT|IFA_F_TENTATIVE|
4194 IFA_F_OPTIMISTIC|IFA_F_DADFAILED)) ==
4195 IFA_F_PERMANENT)
4196 return false;
4197 }
4198 return true;
4199}
4200
c76fe2d9
DA
4201static void addrconf_dad_completed(struct inet6_ifaddr *ifp, bool bump_id,
4202 bool send_na)
1da177e4 4203{
e21e8467 4204 struct net_device *dev = ifp->idev->dev;
b7b1bfce 4205 struct in6_addr lladdr;
b173ee48 4206 bool send_rs, send_mld;
b7b1bfce 4207
c15b1cca 4208 addrconf_del_dad_work(ifp);
1da177e4
LT
4209
4210 /*
4211 * Configure the address for reception. Now it is valid.
4212 */
4213
4214 ipv6_ifa_notify(RTM_NEWADDR, ifp);
4215
026359bc
TA
4216 /* If added prefix is link local and we are prepared to process
4217 router advertisements, start sending router solicitations.
1da177e4
LT
4218 */
4219
1ec047eb 4220 read_lock_bh(&ifp->idev->lock);
11ffff75 4221 send_mld = ifp->scope == IFA_LINK && ipv6_lonely_lladdr(ifp);
b173ee48
HFS
4222 send_rs = send_mld &&
4223 ipv6_accept_ra(ifp->idev) &&
bd11f074 4224 ifp->idev->cnf.rtr_solicits != 0 &&
b52e1cce 4225 (dev->flags & IFF_LOOPBACK) == 0 &&
4226 (dev->type != ARPHRD_TUNNEL);
1ec047eb
HFS
4227 read_unlock_bh(&ifp->idev->lock);
4228
b173ee48
HFS
4229 /* While dad is in progress mld report's source address is in6_addrany.
4230 * Resend with proper ll now.
4231 */
4232 if (send_mld)
4233 ipv6_mc_dad_complete(ifp->idev);
4234
c76fe2d9
DA
4235 /* send unsolicited NA if enabled */
4236 if (send_na &&
4237 (ifp->idev->cnf.ndisc_notify ||
4238 dev_net(dev)->ipv6.devconf_all->ndisc_notify)) {
4239 ndisc_send_na(dev, &in6addr_linklocal_allnodes, &ifp->addr,
4240 /*router=*/ !!ifp->idev->cnf.forwarding,
4241 /*solicited=*/ false, /*override=*/ true,
4242 /*inc_opt=*/ true);
4243 }
4244
1ec047eb 4245 if (send_rs) {
1da177e4
LT
4246 /*
4247 * If a host as already performed a random delay
4248 * [...] as part of DAD [...] there is no need
4249 * to delay again before sending the first RS
4250 */
1ec047eb 4251 if (ipv6_get_lladdr(dev, &lladdr, IFA_F_TENTATIVE))
b7b1bfce 4252 return;
1ec047eb 4253 ndisc_send_rs(dev, &lladdr, &in6addr_linklocal_allrouters);
1da177e4 4254
b7b1bfce
HFS
4255 write_lock_bh(&ifp->idev->lock);
4256 spin_lock(&ifp->lock);
bd11f074
4257 ifp->idev->rs_interval = rfc3315_s14_backoff_init(
4258 ifp->idev->cnf.rtr_solicit_interval);
b7b1bfce 4259 ifp->idev->rs_probes = 1;
1da177e4 4260 ifp->idev->if_flags |= IF_RS_SENT;
bd11f074 4261 addrconf_mod_rs_timer(ifp->idev, ifp->idev->rs_interval);
b7b1bfce
HFS
4262 spin_unlock(&ifp->lock);
4263 write_unlock_bh(&ifp->idev->lock);
1da177e4 4264 }
764d3be6
PA
4265
4266 if (bump_id)
4267 rt_genid_bump_ipv6(dev_net(dev));
a11a7f71
MH
4268
4269 /* Make sure that a new temporary address will be created
4270 * before this temporary address becomes deprecated.
4271 */
4272 if (ifp->flags & IFA_F_TEMPORARY)
8805d13f 4273 addrconf_verify_rtnl(dev_net(dev));
1da177e4
LT
4274}
4275
896585d4 4276static void addrconf_dad_run(struct inet6_dev *idev, bool restart)
e21e8467 4277{
c5e33bdd
YH
4278 struct inet6_ifaddr *ifp;
4279
4280 read_lock_bh(&idev->lock);
502a2ffd 4281 list_for_each_entry(ifp, &idev->addr_list, if_list) {
21809faf 4282 spin_lock(&ifp->lock);
896585d4
HL
4283 if ((ifp->flags & IFA_F_TENTATIVE &&
4284 ifp->state == INET6_IFADDR_STATE_DAD) || restart) {
4285 if (restart)
4286 ifp->state = INET6_IFADDR_STATE_PREDAD;
f2344a13 4287 addrconf_dad_kick(ifp);
896585d4 4288 }
21809faf 4289 spin_unlock(&ifp->lock);
c5e33bdd
YH
4290 }
4291 read_unlock_bh(&idev->lock);
4292}
4293
1da177e4
LT
4294#ifdef CONFIG_PROC_FS
4295struct if6_iter_state {
3c40090a 4296 struct seq_net_private p;
1da177e4 4297 int bucket;
1d578303 4298 int offset;
1da177e4
LT
4299};
4300
1d578303 4301static struct inet6_ifaddr *if6_get_first(struct seq_file *seq, loff_t pos)
1da177e4 4302{
1da177e4 4303 struct if6_iter_state *state = seq->private;
1218854a 4304 struct net *net = seq_file_net(seq);
a5c1d98f 4305 struct inet6_ifaddr *ifa = NULL;
1d578303 4306 int p = 0;
1da177e4 4307
1d578303
MM
4308 /* initial bucket if pos is 0 */
4309 if (pos == 0) {
4310 state->bucket = 0;
4311 state->offset = 0;
4312 }
4313
4314 for (; state->bucket < IN6_ADDR_HSIZE; ++state->bucket) {
e66d1172 4315 hlist_for_each_entry_rcu(ifa, &net->ipv6.inet6_addr_lst[state->bucket],
1d578303
MM
4316 addr_lst) {
4317 /* sync with offset */
4318 if (p < state->offset) {
4319 p++;
4320 continue;
4321 }
9f0d3c27 4322 return ifa;
1d578303
MM
4323 }
4324
4325 /* prepare for next bucket */
4326 state->offset = 0;
4327 p = 0;
1da177e4 4328 }
c2e21293 4329 return NULL;
1da177e4
LT
4330}
4331
c2e21293 4332static struct inet6_ifaddr *if6_get_next(struct seq_file *seq,
4333 struct inet6_ifaddr *ifa)
1da177e4
LT
4334{
4335 struct if6_iter_state *state = seq->private;
1218854a 4336 struct net *net = seq_file_net(seq);
1da177e4 4337
a5c1d98f 4338 hlist_for_each_entry_continue_rcu(ifa, addr_lst) {
1d578303 4339 state->offset++;
9f0d3c27 4340 return ifa;
1d578303 4341 }
3c40090a 4342
86f9bd1f 4343 state->offset = 0;
c2e21293 4344 while (++state->bucket < IN6_ADDR_HSIZE) {
a5c1d98f 4345 hlist_for_each_entry_rcu(ifa,
e66d1172 4346 &net->ipv6.inet6_addr_lst[state->bucket], addr_lst) {
9f0d3c27 4347 return ifa;
c2e21293 4348 }
1da177e4 4349 }
3c40090a 4350
c2e21293 4351 return NULL;
1da177e4
LT
4352}
4353
1da177e4 4354static void *if6_seq_start(struct seq_file *seq, loff_t *pos)
a5c1d98f 4355 __acquires(rcu)
1da177e4 4356{
a5c1d98f 4357 rcu_read_lock();
1d578303 4358 return if6_get_first(seq, *pos);
1da177e4
LT
4359}
4360
4361static void *if6_seq_next(struct seq_file *seq, void *v, loff_t *pos)
4362{
4363 struct inet6_ifaddr *ifa;
4364
4365 ifa = if6_get_next(seq, v);
4366 ++*pos;
4367 return ifa;
4368}
4369
4370static void if6_seq_stop(struct seq_file *seq, void *v)
a5c1d98f 4371 __releases(rcu)
1da177e4 4372{
a5c1d98f 4373 rcu_read_unlock();
1da177e4
LT
4374}
4375
4376static int if6_seq_show(struct seq_file *seq, void *v)
4377{
4378 struct inet6_ifaddr *ifp = (struct inet6_ifaddr *)v;
971a351c 4379 seq_printf(seq, "%pi6 %02x %02x %02x %02x %8s\n",
b071195d 4380 &ifp->addr,
1da177e4
LT
4381 ifp->idev->dev->ifindex,
4382 ifp->prefix_len,
4383 ifp->scope,
971a351c 4384 (u8) ifp->flags,
1da177e4
LT
4385 ifp->idev->dev->name);
4386 return 0;
4387}
4388
56b3d975 4389static const struct seq_operations if6_seq_ops = {
1da177e4
LT
4390 .start = if6_seq_start,
4391 .next = if6_seq_next,
4392 .show = if6_seq_show,
4393 .stop = if6_seq_stop,
4394};
4395
2c8c1e72 4396static int __net_init if6_proc_net_init(struct net *net)
1da177e4 4397{
c3506372
CH
4398 if (!proc_create_net("if_inet6", 0444, net->proc_net, &if6_seq_ops,
4399 sizeof(struct if6_iter_state)))
1da177e4
LT
4400 return -ENOMEM;
4401 return 0;
4402}
4403
2c8c1e72 4404static void __net_exit if6_proc_net_exit(struct net *net)
3c40090a 4405{
ece31ffd 4406 remove_proc_entry("if_inet6", net->proc_net);
3c40090a
DL
4407}
4408
4409static struct pernet_operations if6_proc_net_ops = {
67ba4152
IM
4410 .init = if6_proc_net_init,
4411 .exit = if6_proc_net_exit,
3c40090a
DL
4412};
4413
4414int __init if6_proc_init(void)
4415{
4416 return register_pernet_subsys(&if6_proc_net_ops);
4417}
4418
1da177e4
LT
4419void if6_proc_exit(void)
4420{
3c40090a 4421 unregister_pernet_subsys(&if6_proc_net_ops);
1da177e4
LT
4422}
4423#endif /* CONFIG_PROC_FS */
4424
07a93626 4425#if IS_ENABLED(CONFIG_IPV6_MIP6)
3b9f9a1c 4426/* Check if address is a home address configured on any interface. */
b71d1d42 4427int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr)
3b9f9a1c 4428{
3f27fb23 4429 unsigned int hash = inet6_addr_hash(net, addr);
c2e21293 4430 struct inet6_ifaddr *ifp = NULL;
3f27fb23 4431 int ret = 0;
c2e21293 4432
4e5f47ab 4433 rcu_read_lock();
e66d1172 4434 hlist_for_each_entry_rcu(ifp, &net->ipv6.inet6_addr_lst[hash], addr_lst) {
caad295f 4435 if (ipv6_addr_equal(&ifp->addr, addr) &&
3b9f9a1c
NT
4436 (ifp->flags & IFA_F_HOMEADDRESS)) {
4437 ret = 1;
4438 break;
4439 }
4440 }
4e5f47ab 4441 rcu_read_unlock();
3b9f9a1c
NT
4442 return ret;
4443}
4444#endif
4445
f37c6059
AA
4446/* RFC6554 has some algorithm to avoid loops in segment routing by
4447 * checking if the segments contains any of a local interface address.
4448 *
4449 * Quote:
4450 *
4451 * To detect loops in the SRH, a router MUST determine if the SRH
4452 * includes multiple addresses assigned to any interface on that router.
4453 * If such addresses appear more than once and are separated by at least
4454 * one address not assigned to that router.
4455 */
4456int ipv6_chk_rpl_srh_loop(struct net *net, const struct in6_addr *segs,
4457 unsigned char nsegs)
4458{
4459 const struct in6_addr *addr;
4460 int i, ret = 0, found = 0;
4461 struct inet6_ifaddr *ifp;
4462 bool separated = false;
4463 unsigned int hash;
4464 bool hash_found;
4465
4466 rcu_read_lock();
4467 for (i = 0; i < nsegs; i++) {
4468 addr = &segs[i];
4469 hash = inet6_addr_hash(net, addr);
4470
4471 hash_found = false;
e66d1172 4472 hlist_for_each_entry_rcu(ifp, &net->ipv6.inet6_addr_lst[hash], addr_lst) {
f37c6059
AA
4473
4474 if (ipv6_addr_equal(&ifp->addr, addr)) {
4475 hash_found = true;
4476 break;
4477 }
4478 }
4479
4480 if (hash_found) {
4481 if (found > 1 && separated) {
4482 ret = 1;
4483 break;
4484 }
4485
4486 separated = false;
4487 found++;
4488 } else {
4489 separated = true;
4490 }
4491 }
4492 rcu_read_unlock();
4493
4494 return ret;
4495}
4496
1da177e4
LT
4497/*
4498 * Periodic address status verification
4499 */
4500
8805d13f 4501static void addrconf_verify_rtnl(struct net *net)
1da177e4 4502{
b2db7564 4503 unsigned long now, next, next_sec, next_sched;
1da177e4 4504 struct inet6_ifaddr *ifp;
1da177e4
LT
4505 int i;
4506
c15b1cca
HFS
4507 ASSERT_RTNL();
4508
5c578aed 4509 rcu_read_lock_bh();
1da177e4 4510 now = jiffies;
b2db7564 4511 next = round_jiffies_up(now + ADDR_CHECK_FREQUENCY);
1da177e4 4512
8805d13f 4513 cancel_delayed_work(&net->ipv6.addr_chk_work);
1da177e4 4514
bcdd553f 4515 for (i = 0; i < IN6_ADDR_HSIZE; i++) {
1da177e4 4516restart:
e66d1172 4517 hlist_for_each_entry_rcu_bh(ifp, &net->ipv6.inet6_addr_lst[i], addr_lst) {
1da177e4 4518 unsigned long age;
1da177e4 4519
fad8da3e
YA
4520 /* When setting preferred_lft to a value not zero or
4521 * infinity, while valid_lft is infinity
4522 * IFA_F_PERMANENT has a non-infinity life time.
4523 */
4524 if ((ifp->flags & IFA_F_PERMANENT) &&
4525 (ifp->prefered_lft == INFINITY_LIFE_TIME))
1da177e4
LT
4526 continue;
4527
4528 spin_lock(&ifp->lock);
b2db7564
YH
4529 /* We try to batch several events at once. */
4530 age = (now - ifp->tstamp + ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
1da177e4 4531
778964f2
SE
4532 if ((ifp->flags&IFA_F_TEMPORARY) &&
4533 !(ifp->flags&IFA_F_TENTATIVE) &&
4534 ifp->prefered_lft != INFINITY_LIFE_TIME &&
4535 !ifp->regen_count && ifp->ifpub) {
4536 /* This is a non-regenerated temporary addr. */
4537
4538 unsigned long regen_advance = ifp->idev->cnf.regen_max_retry *
4539 ifp->idev->cnf.dad_transmits *
4540 max(NEIGH_VAR(ifp->idev->nd_parms, RETRANS_TIME), HZ/100) / HZ;
4541
4542 if (age + regen_advance >= ifp->prefered_lft) {
4543 struct inet6_ifaddr *ifpub = ifp->ifpub;
4544 if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
4545 next = ifp->tstamp + ifp->prefered_lft * HZ;
4546
4547 ifp->regen_count++;
4548 in6_ifa_hold(ifp);
4549 in6_ifa_hold(ifpub);
4550 spin_unlock(&ifp->lock);
4551
4552 spin_lock(&ifpub->lock);
4553 ifpub->regen_count = 0;
4554 spin_unlock(&ifpub->lock);
4555 rcu_read_unlock_bh();
4556 ipv6_create_tempaddr(ifpub, true);
4557 in6_ifa_put(ifpub);
4558 in6_ifa_put(ifp);
4559 rcu_read_lock_bh();
4560 goto restart;
4561 } else if (time_before(ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ, next))
4562 next = ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ;
4563 }
4564
8f27ebb9
YH
4565 if (ifp->valid_lft != INFINITY_LIFE_TIME &&
4566 age >= ifp->valid_lft) {
1da177e4
LT
4567 spin_unlock(&ifp->lock);
4568 in6_ifa_hold(ifp);
aa8caa76 4569 rcu_read_unlock_bh();
1da177e4 4570 ipv6_del_addr(ifp);
aa8caa76 4571 rcu_read_lock_bh();
1da177e4 4572 goto restart;
8f27ebb9
YH
4573 } else if (ifp->prefered_lft == INFINITY_LIFE_TIME) {
4574 spin_unlock(&ifp->lock);
4575 continue;
1da177e4 4576 } else if (age >= ifp->prefered_lft) {
a1ed0526 4577 /* jiffies - ifp->tstamp > age >= ifp->prefered_lft */
1da177e4
LT
4578 int deprecate = 0;
4579
4580 if (!(ifp->flags&IFA_F_DEPRECATED)) {
4581 deprecate = 1;
4582 ifp->flags |= IFA_F_DEPRECATED;
4583 }
4584
fad8da3e
YA
4585 if ((ifp->valid_lft != INFINITY_LIFE_TIME) &&
4586 (time_before(ifp->tstamp + ifp->valid_lft * HZ, next)))
1da177e4
LT
4587 next = ifp->tstamp + ifp->valid_lft * HZ;
4588
4589 spin_unlock(&ifp->lock);
4590
4591 if (deprecate) {
4592 in6_ifa_hold(ifp);
1da177e4
LT
4593
4594 ipv6_ifa_notify(0, ifp);
4595 in6_ifa_put(ifp);
4596 goto restart;
4597 }
1da177e4
LT
4598 } else {
4599 /* ifp->prefered_lft <= ifp->valid_lft */
4600 if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
4601 next = ifp->tstamp + ifp->prefered_lft * HZ;
4602 spin_unlock(&ifp->lock);
4603 }
4604 }
1da177e4
LT
4605 }
4606
b2db7564
YH
4607 next_sec = round_jiffies_up(next);
4608 next_sched = next;
4609
4610 /* If rounded timeout is accurate enough, accept it. */
4611 if (time_before(next_sec, next + ADDRCONF_TIMER_FUZZ))
4612 next_sched = next_sec;
4613
4614 /* And minimum interval is ADDRCONF_TIMER_FUZZ_MAX. */
4615 if (time_before(next_sched, jiffies + ADDRCONF_TIMER_FUZZ_MAX))
4616 next_sched = jiffies + ADDRCONF_TIMER_FUZZ_MAX;
4617
e32ac250
JP
4618 pr_debug("now = %lu, schedule = %lu, rounded schedule = %lu => %lu\n",
4619 now, next, next_sec, next_sched);
8805d13f 4620 mod_delayed_work(addrconf_wq, &net->ipv6.addr_chk_work, next_sched - now);
5c578aed 4621 rcu_read_unlock_bh();
1da177e4
LT
4622}
4623
c15b1cca
HFS
4624static void addrconf_verify_work(struct work_struct *w)
4625{
8805d13f
ED
4626 struct net *net = container_of(to_delayed_work(w), struct net,
4627 ipv6.addr_chk_work);
4628
c15b1cca 4629 rtnl_lock();
8805d13f 4630 addrconf_verify_rtnl(net);
c15b1cca
HFS
4631 rtnl_unlock();
4632}
4633
8805d13f 4634static void addrconf_verify(struct net *net)
c15b1cca 4635{
8805d13f 4636 mod_delayed_work(addrconf_wq, &net->ipv6.addr_chk_work, 0);
c15b1cca
HFS
4637}
4638
caeaba79
ND
4639static struct in6_addr *extract_addr(struct nlattr *addr, struct nlattr *local,
4640 struct in6_addr **peer_pfx)
461d8837
TG
4641{
4642 struct in6_addr *pfx = NULL;
4643
caeaba79
ND
4644 *peer_pfx = NULL;
4645
461d8837
TG
4646 if (addr)
4647 pfx = nla_data(addr);
4648
4649 if (local) {
4650 if (pfx && nla_memcmp(local, pfx, sizeof(*pfx)))
caeaba79
ND
4651 *peer_pfx = pfx;
4652 pfx = nla_data(local);
461d8837
TG
4653 }
4654
4655 return pfx;
4656}
4657
ef7c79ed 4658static const struct nla_policy ifa_ipv6_policy[IFA_MAX+1] = {
461d8837
TG
4659 [IFA_ADDRESS] = { .len = sizeof(struct in6_addr) },
4660 [IFA_LOCAL] = { .len = sizeof(struct in6_addr) },
4661 [IFA_CACHEINFO] = { .len = sizeof(struct ifa_cacheinfo) },
479840ff 4662 [IFA_FLAGS] = { .len = sizeof(u32) },
8308f3ff 4663 [IFA_RT_PRIORITY] = { .len = sizeof(u32) },
6ecf4c37 4664 [IFA_TARGET_NETNSID] = { .type = NLA_S32 },
47f0bd50 4665 [IFA_PROTO] = { .type = NLA_U8 },
461d8837
TG
4666};
4667
1da177e4 4668static int
c21ef3e3
DA
4669inet6_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh,
4670 struct netlink_ext_ack *extack)
1da177e4 4671{
3b1e0a65 4672 struct net *net = sock_net(skb->sk);
b933f716
TG
4673 struct ifaddrmsg *ifm;
4674 struct nlattr *tb[IFA_MAX+1];
caeaba79 4675 struct in6_addr *pfx, *peer_pfx;
6046d5b4 4676 u32 ifa_flags;
b933f716 4677 int err;
1da177e4 4678
8cb08174
JB
4679 err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
4680 ifa_ipv6_policy, extack);
b933f716
TG
4681 if (err < 0)
4682 return err;
4683
4684 ifm = nlmsg_data(nlh);
caeaba79 4685 pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL], &peer_pfx);
63159f29 4686 if (!pfx)
1da177e4
LT
4687 return -EINVAL;
4688
6046d5b4
HK
4689 ifa_flags = tb[IFA_FLAGS] ? nla_get_u32(tb[IFA_FLAGS]) : ifm->ifa_flags;
4690
4691 /* We ignore other flags so far. */
4692 ifa_flags &= IFA_F_MANAGETEMPADDR;
4693
4694 return inet6_addr_del(net, ifm->ifa_index, ifa_flags, pfx,
4695 ifm->ifa_prefixlen);
1da177e4
LT
4696}
4697
8308f3ff 4698static int modify_prefix_route(struct inet6_ifaddr *ifp,
61794012
HL
4699 unsigned long expires, u32 flags,
4700 bool modify_peer)
8308f3ff
DA
4701{
4702 struct fib6_info *f6i;
e7c7faa9 4703 u32 prio;
8308f3ff 4704
61794012
HL
4705 f6i = addrconf_get_prefix_route(modify_peer ? &ifp->peer_addr : &ifp->addr,
4706 ifp->prefix_len,
2b2450ca 4707 ifp->idev->dev, 0, RTF_DEFAULT, true);
8308f3ff
DA
4708 if (!f6i)
4709 return -ENOENT;
4710
e7c7faa9
DA
4711 prio = ifp->rt_priority ? : IP6_RT_PRIO_ADDRCONF;
4712 if (f6i->fib6_metric != prio) {
4713 /* delete old one */
11dd74b3 4714 ip6_del_rt(dev_net(ifp->idev->dev), f6i, false);
e7c7faa9 4715
8308f3ff 4716 /* add new one */
61794012
HL
4717 addrconf_prefix_route(modify_peer ? &ifp->peer_addr : &ifp->addr,
4718 ifp->prefix_len,
8308f3ff
DA
4719 ifp->rt_priority, ifp->idev->dev,
4720 expires, flags, GFP_KERNEL);
8308f3ff
DA
4721 } else {
4722 if (!expires)
4723 fib6_clean_expires(f6i);
4724 else
4725 fib6_set_expires(f6i, expires);
4726
4727 fib6_info_release(f6i);
4728 }
4729
4730 return 0;
4731}
4732
8805d13f
ED
4733static int inet6_addr_modify(struct net *net, struct inet6_ifaddr *ifp,
4734 struct ifa6_config *cfg)
081bba5b 4735{
6f704992
YH
4736 u32 flags;
4737 clock_t expires;
4bed72e4 4738 unsigned long timeout;
53bd6749 4739 bool was_managetempaddr;
5b84efec 4740 bool had_prefixroute;
d0098e4c 4741 bool new_peer = false;
46d48046 4742
c15b1cca
HFS
4743 ASSERT_RTNL();
4744
d169a1f8 4745 if (!cfg->valid_lft || cfg->preferred_lft > cfg->valid_lft)
081bba5b
NT
4746 return -EINVAL;
4747
d169a1f8 4748 if (cfg->ifa_flags & IFA_F_MANAGETEMPADDR &&
53bd6749
JP
4749 (ifp->flags & IFA_F_TEMPORARY || ifp->prefix_len != 64))
4750 return -EINVAL;
4751
f1c02cfb 4752 if (!(ifp->flags & IFA_F_TENTATIVE) || ifp->flags & IFA_F_DADFAILED)
d169a1f8 4753 cfg->ifa_flags &= ~IFA_F_OPTIMISTIC;
f1c02cfb 4754
d169a1f8 4755 timeout = addrconf_timeout_fixup(cfg->valid_lft, HZ);
4bed72e4
YH
4756 if (addrconf_finite_timeout(timeout)) {
4757 expires = jiffies_to_clock_t(timeout * HZ);
d169a1f8 4758 cfg->valid_lft = timeout;
6f704992 4759 flags = RTF_EXPIRES;
4bed72e4
YH
4760 } else {
4761 expires = 0;
4762 flags = 0;
d169a1f8 4763 cfg->ifa_flags |= IFA_F_PERMANENT;
6f704992 4764 }
081bba5b 4765
d169a1f8 4766 timeout = addrconf_timeout_fixup(cfg->preferred_lft, HZ);
4bed72e4
YH
4767 if (addrconf_finite_timeout(timeout)) {
4768 if (timeout == 0)
d169a1f8
DA
4769 cfg->ifa_flags |= IFA_F_DEPRECATED;
4770 cfg->preferred_lft = timeout;
4bed72e4 4771 }
081bba5b 4772
d0098e4c
HL
4773 if (cfg->peer_pfx &&
4774 memcmp(&ifp->peer_addr, cfg->peer_pfx, sizeof(struct in6_addr))) {
4775 if (!ipv6_addr_any(&ifp->peer_addr))
4776 cleanup_prefix_route(ifp, expires, true, true);
4777 new_peer = true;
4778 }
4779
081bba5b 4780 spin_lock_bh(&ifp->lock);
53bd6749 4781 was_managetempaddr = ifp->flags & IFA_F_MANAGETEMPADDR;
5b84efec
TH
4782 had_prefixroute = ifp->flags & IFA_F_PERMANENT &&
4783 !(ifp->flags & IFA_F_NOPREFIXROUTE);
53bd6749 4784 ifp->flags &= ~(IFA_F_DEPRECATED | IFA_F_PERMANENT | IFA_F_NODAD |
761aac73
TH
4785 IFA_F_HOMEADDRESS | IFA_F_MANAGETEMPADDR |
4786 IFA_F_NOPREFIXROUTE);
d169a1f8 4787 ifp->flags |= cfg->ifa_flags;
081bba5b 4788 ifp->tstamp = jiffies;
d169a1f8
DA
4789 ifp->valid_lft = cfg->valid_lft;
4790 ifp->prefered_lft = cfg->preferred_lft;
47f0bd50 4791 ifp->ifa_proto = cfg->ifa_proto;
081bba5b 4792
8308f3ff
DA
4793 if (cfg->rt_priority && cfg->rt_priority != ifp->rt_priority)
4794 ifp->rt_priority = cfg->rt_priority;
081bba5b 4795
d0098e4c
HL
4796 if (new_peer)
4797 ifp->peer_addr = *cfg->peer_pfx;
4798
081bba5b
NT
4799 spin_unlock_bh(&ifp->lock);
4800 if (!(ifp->flags&IFA_F_TENTATIVE))
4801 ipv6_ifa_notify(0, ifp);
081bba5b 4802
d169a1f8 4803 if (!(cfg->ifa_flags & IFA_F_NOPREFIXROUTE)) {
8308f3ff
DA
4804 int rc = -ENOENT;
4805
4806 if (had_prefixroute)
61794012 4807 rc = modify_prefix_route(ifp, expires, flags, false);
8308f3ff
DA
4808
4809 /* prefix route could have been deleted; if so restore it */
4810 if (rc == -ENOENT) {
4811 addrconf_prefix_route(&ifp->addr, ifp->prefix_len,
4812 ifp->rt_priority, ifp->idev->dev,
4813 expires, flags, GFP_KERNEL);
4814 }
61794012
HL
4815
4816 if (had_prefixroute && !ipv6_addr_any(&ifp->peer_addr))
4817 rc = modify_prefix_route(ifp, expires, flags, true);
4818
4819 if (rc == -ENOENT && !ipv6_addr_any(&ifp->peer_addr)) {
4820 addrconf_prefix_route(&ifp->peer_addr, ifp->prefix_len,
4821 ifp->rt_priority, ifp->idev->dev,
4822 expires, flags, GFP_KERNEL);
4823 }
5b84efec
TH
4824 } else if (had_prefixroute) {
4825 enum cleanup_prefix_rt_t action;
4826 unsigned long rt_expires;
4827
4828 write_lock_bh(&ifp->idev->lock);
4829 action = check_cleanup_prefix_route(ifp, &rt_expires);
4830 write_unlock_bh(&ifp->idev->lock);
4831
4832 if (action != CLEANUP_PREFIX_RT_NOP) {
4833 cleanup_prefix_route(ifp, rt_expires,
d0098e4c 4834 action == CLEANUP_PREFIX_RT_DEL, false);
5b84efec 4835 }
761aac73 4836 }
53bd6749
JP
4837
4838 if (was_managetempaddr || ifp->flags & IFA_F_MANAGETEMPADDR) {
d169a1f8
DA
4839 if (was_managetempaddr &&
4840 !(ifp->flags & IFA_F_MANAGETEMPADDR)) {
4841 cfg->valid_lft = 0;
4842 cfg->preferred_lft = 0;
4843 }
4844 manage_tempaddrs(ifp->idev, ifp, cfg->valid_lft,
4845 cfg->preferred_lft, !was_managetempaddr,
4846 jiffies);
53bd6749
JP
4847 }
4848
8805d13f 4849 addrconf_verify_rtnl(net);
081bba5b
NT
4850
4851 return 0;
4852}
4853
1da177e4 4854static int
c21ef3e3
DA
4855inet6_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh,
4856 struct netlink_ext_ack *extack)
1da177e4 4857{
3b1e0a65 4858 struct net *net = sock_net(skb->sk);
461d8837
TG
4859 struct ifaddrmsg *ifm;
4860 struct nlattr *tb[IFA_MAX+1];
19b1518c 4861 struct in6_addr *peer_pfx;
7198f8ce
TG
4862 struct inet6_ifaddr *ifa;
4863 struct net_device *dev;
f1c02cfb 4864 struct inet6_dev *idev;
19b1518c 4865 struct ifa6_config cfg;
461d8837 4866 int err;
1da177e4 4867
8cb08174
JB
4868 err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
4869 ifa_ipv6_policy, extack);
461d8837
TG
4870 if (err < 0)
4871 return err;
4872
19b1518c
DA
4873 memset(&cfg, 0, sizeof(cfg));
4874
461d8837 4875 ifm = nlmsg_data(nlh);
19b1518c
DA
4876 cfg.pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL], &peer_pfx);
4877 if (!cfg.pfx)
1da177e4
LT
4878 return -EINVAL;
4879
19b1518c
DA
4880 cfg.peer_pfx = peer_pfx;
4881 cfg.plen = ifm->ifa_prefixlen;
8308f3ff
DA
4882 if (tb[IFA_RT_PRIORITY])
4883 cfg.rt_priority = nla_get_u32(tb[IFA_RT_PRIORITY]);
4884
47f0bd50
JL
4885 if (tb[IFA_PROTO])
4886 cfg.ifa_proto = nla_get_u8(tb[IFA_PROTO]);
4887
19b1518c
DA
4888 cfg.valid_lft = INFINITY_LIFE_TIME;
4889 cfg.preferred_lft = INFINITY_LIFE_TIME;
4890
461d8837 4891 if (tb[IFA_CACHEINFO]) {
0778769d 4892 struct ifa_cacheinfo *ci;
461d8837
TG
4893
4894 ci = nla_data(tb[IFA_CACHEINFO]);
19b1518c
DA
4895 cfg.valid_lft = ci->ifa_valid;
4896 cfg.preferred_lft = ci->ifa_prefered;
0778769d
NT
4897 }
4898
af284937 4899 dev = __dev_get_by_index(net, ifm->ifa_index);
63159f29 4900 if (!dev)
7198f8ce
TG
4901 return -ENODEV;
4902
19b1518c
DA
4903 if (tb[IFA_FLAGS])
4904 cfg.ifa_flags = nla_get_u32(tb[IFA_FLAGS]);
4905 else
4906 cfg.ifa_flags = ifm->ifa_flags;
479840ff 4907
55ebaef1 4908 /* We ignore other flags so far. */
19b1518c
DA
4909 cfg.ifa_flags &= IFA_F_NODAD | IFA_F_HOMEADDRESS |
4910 IFA_F_MANAGETEMPADDR | IFA_F_NOPREFIXROUTE |
4911 IFA_F_MCAUTOJOIN | IFA_F_OPTIMISTIC;
f1c02cfb
SD
4912
4913 idev = ipv6_find_idev(dev);
db0b99f5
SD
4914 if (IS_ERR(idev))
4915 return PTR_ERR(idev);
f1c02cfb
SD
4916
4917 if (!ipv6_allow_optimistic_dad(net, idev))
19b1518c 4918 cfg.ifa_flags &= ~IFA_F_OPTIMISTIC;
f1c02cfb 4919
19b1518c
DA
4920 if (cfg.ifa_flags & IFA_F_NODAD &&
4921 cfg.ifa_flags & IFA_F_OPTIMISTIC) {
f1c02cfb
SD
4922 NL_SET_ERR_MSG(extack, "IFA_F_NODAD and IFA_F_OPTIMISTIC are mutually exclusive");
4923 return -EINVAL;
4924 }
55ebaef1 4925
19b1518c 4926 ifa = ipv6_get_ifaddr(net, cfg.pfx, dev, 1);
63159f29 4927 if (!ifa) {
7198f8ce
TG
4928 /*
4929 * It would be best to check for !NLM_F_CREATE here but
db9c7c39 4930 * userspace already relies on not having to provide this.
7198f8ce 4931 */
19b1518c 4932 return inet6_addr_add(net, ifm->ifa_index, &cfg, extack);
081bba5b
NT
4933 }
4934
7198f8ce
TG
4935 if (nlh->nlmsg_flags & NLM_F_EXCL ||
4936 !(nlh->nlmsg_flags & NLM_F_REPLACE))
4937 err = -EEXIST;
4938 else
8805d13f 4939 err = inet6_addr_modify(net, ifa, &cfg);
7198f8ce
TG
4940
4941 in6_ifa_put(ifa);
4942
4943 return err;
1da177e4
LT
4944}
4945
479840ff 4946static void put_ifaddrmsg(struct nlmsghdr *nlh, u8 prefixlen, u32 flags,
101bb229
TG
4947 u8 scope, int ifindex)
4948{
4949 struct ifaddrmsg *ifm;
4950
4951 ifm = nlmsg_data(nlh);
4952 ifm->ifa_family = AF_INET6;
4953 ifm->ifa_prefixlen = prefixlen;
4954 ifm->ifa_flags = flags;
4955 ifm->ifa_scope = scope;
4956 ifm->ifa_index = ifindex;
4957}
4958
85486af0
TG
4959static int put_cacheinfo(struct sk_buff *skb, unsigned long cstamp,
4960 unsigned long tstamp, u32 preferred, u32 valid)
4961{
4962 struct ifa_cacheinfo ci;
4963
18a31e1e
TG
4964 ci.cstamp = cstamp_delta(cstamp);
4965 ci.tstamp = cstamp_delta(tstamp);
85486af0
TG
4966 ci.ifa_prefered = preferred;
4967 ci.ifa_valid = valid;
4968
4969 return nla_put(skb, IFA_CACHEINFO, sizeof(ci), &ci);
4970}
4971
101bb229
TG
4972static inline int rt_scope(int ifa_scope)
4973{
4974 if (ifa_scope & IFA_HOST)
4975 return RT_SCOPE_HOST;
4976 else if (ifa_scope & IFA_LINK)
4977 return RT_SCOPE_LINK;
4978 else if (ifa_scope & IFA_SITE)
4979 return RT_SCOPE_SITE;
4980 else
4981 return RT_SCOPE_UNIVERSE;
4982}
4983
0ab6803b
TG
4984static inline int inet6_ifaddr_msgsize(void)
4985{
339bf98f 4986 return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
caeaba79 4987 + nla_total_size(16) /* IFA_LOCAL */
339bf98f 4988 + nla_total_size(16) /* IFA_ADDRESS */
479840ff 4989 + nla_total_size(sizeof(struct ifa_cacheinfo))
8308f3ff 4990 + nla_total_size(4) /* IFA_FLAGS */
47f0bd50 4991 + nla_total_size(1) /* IFA_PROTO */
8308f3ff 4992 + nla_total_size(4) /* IFA_RT_PRIORITY */;
0ab6803b 4993}
c5396a31 4994
6ba1e6e8
DA
4995enum addr_type_t {
4996 UNICAST_ADDR,
4997 MULTICAST_ADDR,
4998 ANYCAST_ADDR,
4999};
5000
203651b6
CB
5001struct inet6_fill_args {
5002 u32 portid;
5003 u32 seq;
5004 int event;
5005 unsigned int flags;
5006 int netnsid;
6371a71f 5007 int ifindex;
6ba1e6e8 5008 enum addr_type_t type;
203651b6
CB
5009};
5010
1da177e4 5011static int inet6_fill_ifaddr(struct sk_buff *skb, struct inet6_ifaddr *ifa,
203651b6 5012 struct inet6_fill_args *args)
1da177e4 5013{
1da177e4 5014 struct nlmsghdr *nlh;
85486af0 5015 u32 preferred, valid;
1da177e4 5016
203651b6
CB
5017 nlh = nlmsg_put(skb, args->portid, args->seq, args->event,
5018 sizeof(struct ifaddrmsg), args->flags);
63159f29 5019 if (!nlh)
26932566 5020 return -EMSGSIZE;
0ab6803b 5021
101bb229
TG
5022 put_ifaddrmsg(nlh, ifa->prefix_len, ifa->flags, rt_scope(ifa->scope),
5023 ifa->idev->dev->ifindex);
5024
203651b6
CB
5025 if (args->netnsid >= 0 &&
5026 nla_put_s32(skb, IFA_TARGET_NETNSID, args->netnsid))
6ecf4c37
CB
5027 goto error;
5028
6c0d8833 5029 spin_lock_bh(&ifa->lock);
fad8da3e
YA
5030 if (!((ifa->flags&IFA_F_PERMANENT) &&
5031 (ifa->prefered_lft == INFINITY_LIFE_TIME))) {
85486af0
TG
5032 preferred = ifa->prefered_lft;
5033 valid = ifa->valid_lft;
5034 if (preferred != INFINITY_LIFE_TIME) {
1da177e4 5035 long tval = (jiffies - ifa->tstamp)/HZ;
a1faa698
JR
5036 if (preferred > tval)
5037 preferred -= tval;
5038 else
5039 preferred = 0;
f56619fc
BH
5040 if (valid != INFINITY_LIFE_TIME) {
5041 if (valid > tval)
5042 valid -= tval;
5043 else
5044 valid = 0;
5045 }
1da177e4
LT
5046 }
5047 } else {
85486af0
TG
5048 preferred = INFINITY_LIFE_TIME;
5049 valid = INFINITY_LIFE_TIME;
5050 }
6c0d8833 5051 spin_unlock_bh(&ifa->lock);
85486af0 5052
7996c799 5053 if (!ipv6_addr_any(&ifa->peer_addr)) {
930345ea
JB
5054 if (nla_put_in6_addr(skb, IFA_LOCAL, &ifa->addr) < 0 ||
5055 nla_put_in6_addr(skb, IFA_ADDRESS, &ifa->peer_addr) < 0)
caeaba79
ND
5056 goto error;
5057 } else
930345ea 5058 if (nla_put_in6_addr(skb, IFA_ADDRESS, &ifa->addr) < 0)
caeaba79
ND
5059 goto error;
5060
8308f3ff
DA
5061 if (ifa->rt_priority &&
5062 nla_put_u32(skb, IFA_RT_PRIORITY, ifa->rt_priority))
5063 goto error;
5064
caeaba79
ND
5065 if (put_cacheinfo(skb, ifa->cstamp, ifa->tstamp, preferred, valid) < 0)
5066 goto error;
1da177e4 5067
479840ff
JP
5068 if (nla_put_u32(skb, IFA_FLAGS, ifa->flags) < 0)
5069 goto error;
5070
47f0bd50
JL
5071 if (ifa->ifa_proto &&
5072 nla_put_u8(skb, IFA_PROTO, ifa->ifa_proto))
5073 goto error;
5074
053c095a
JB
5075 nlmsg_end(skb, nlh);
5076 return 0;
caeaba79
ND
5077
5078error:
5079 nlmsg_cancel(skb, nlh);
5080 return -EMSGSIZE;
1da177e4
LT
5081}
5082
5083static int inet6_fill_ifmcaddr(struct sk_buff *skb, struct ifmcaddr6 *ifmca,
203651b6 5084 struct inet6_fill_args *args)
1da177e4 5085{
1da177e4 5086 struct nlmsghdr *nlh;
101bb229
TG
5087 u8 scope = RT_SCOPE_UNIVERSE;
5088 int ifindex = ifmca->idev->dev->ifindex;
5089
5090 if (ipv6_addr_scope(&ifmca->mca_addr) & IFA_SITE)
5091 scope = RT_SCOPE_SITE;
1da177e4 5092
203651b6
CB
5093 nlh = nlmsg_put(skb, args->portid, args->seq, args->event,
5094 sizeof(struct ifaddrmsg), args->flags);
63159f29 5095 if (!nlh)
26932566 5096 return -EMSGSIZE;
85486af0 5097
203651b6 5098 if (args->netnsid >= 0 &&
ceb736e1
ZQ
5099 nla_put_s32(skb, IFA_TARGET_NETNSID, args->netnsid)) {
5100 nlmsg_cancel(skb, nlh);
6ecf4c37 5101 return -EMSGSIZE;
ceb736e1 5102 }
6ecf4c37 5103
0ab6803b 5104 put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
930345ea 5105 if (nla_put_in6_addr(skb, IFA_MULTICAST, &ifmca->mca_addr) < 0 ||
0ab6803b 5106 put_cacheinfo(skb, ifmca->mca_cstamp, ifmca->mca_tstamp,
26932566
PM
5107 INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
5108 nlmsg_cancel(skb, nlh);
5109 return -EMSGSIZE;
5110 }
85486af0 5111
053c095a
JB
5112 nlmsg_end(skb, nlh);
5113 return 0;
1da177e4
LT
5114}
5115
5116static int inet6_fill_ifacaddr(struct sk_buff *skb, struct ifacaddr6 *ifaca,
203651b6 5117 struct inet6_fill_args *args)
1da177e4 5118{
9ee8cbb2
DA
5119 struct net_device *dev = fib6_info_nh_dev(ifaca->aca_rt);
5120 int ifindex = dev ? dev->ifindex : 1;
1da177e4 5121 struct nlmsghdr *nlh;
101bb229 5122 u8 scope = RT_SCOPE_UNIVERSE;
101bb229
TG
5123
5124 if (ipv6_addr_scope(&ifaca->aca_addr) & IFA_SITE)
5125 scope = RT_SCOPE_SITE;
1da177e4 5126
203651b6
CB
5127 nlh = nlmsg_put(skb, args->portid, args->seq, args->event,
5128 sizeof(struct ifaddrmsg), args->flags);
63159f29 5129 if (!nlh)
26932566 5130 return -EMSGSIZE;
85486af0 5131
203651b6 5132 if (args->netnsid >= 0 &&
ceb736e1
ZQ
5133 nla_put_s32(skb, IFA_TARGET_NETNSID, args->netnsid)) {
5134 nlmsg_cancel(skb, nlh);
6ecf4c37 5135 return -EMSGSIZE;
ceb736e1 5136 }
6ecf4c37 5137
0ab6803b 5138 put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
930345ea 5139 if (nla_put_in6_addr(skb, IFA_ANYCAST, &ifaca->aca_addr) < 0 ||
0ab6803b 5140 put_cacheinfo(skb, ifaca->aca_cstamp, ifaca->aca_tstamp,
26932566
PM
5141 INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
5142 nlmsg_cancel(skb, nlh);
5143 return -EMSGSIZE;
5144 }
1da177e4 5145
053c095a
JB
5146 nlmsg_end(skb, nlh);
5147 return 0;
1da177e4
LT
5148}
5149
234b27c3
ED
5150/* called with rcu_read_lock() */
5151static int in6_dump_addrs(struct inet6_dev *idev, struct sk_buff *skb,
fe884c2b 5152 struct netlink_callback *cb, int s_ip_idx,
6ba1e6e8 5153 struct inet6_fill_args *fillargs)
234b27c3 5154{
234b27c3
ED
5155 struct ifmcaddr6 *ifmca;
5156 struct ifacaddr6 *ifaca;
fe884c2b 5157 int ip_idx = 0;
234b27c3 5158 int err = 1;
234b27c3
ED
5159
5160 read_lock_bh(&idev->lock);
6ba1e6e8 5161 switch (fillargs->type) {
502a2ffd 5162 case UNICAST_ADDR: {
5163 struct inet6_ifaddr *ifa;
6ba1e6e8 5164 fillargs->event = RTM_NEWADDR;
502a2ffd 5165
234b27c3 5166 /* unicast address incl. temp addr */
502a2ffd 5167 list_for_each_entry(ifa, &idev->addr_list, if_list) {
4ba4c566
DA
5168 if (ip_idx < s_ip_idx)
5169 goto next;
6ba1e6e8 5170 err = inet6_fill_ifaddr(skb, ifa, fillargs);
053c095a 5171 if (err < 0)
234b27c3 5172 break;
63998ac2 5173 nl_dump_check_consistent(cb, nlmsg_hdr(skb));
4ba4c566
DA
5174next:
5175 ip_idx++;
234b27c3
ED
5176 }
5177 break;
502a2ffd 5178 }
234b27c3 5179 case MULTICAST_ADDR:
88e2ca30 5180 read_unlock_bh(&idev->lock);
6ba1e6e8 5181 fillargs->event = RTM_GETMULTICAST;
203651b6 5182
234b27c3 5183 /* multicast address */
4e43e64d 5184 for (ifmca = rtnl_dereference(idev->mc_list);
88e2ca30 5185 ifmca;
4e43e64d 5186 ifmca = rtnl_dereference(ifmca->next), ip_idx++) {
234b27c3
ED
5187 if (ip_idx < s_ip_idx)
5188 continue;
6ba1e6e8 5189 err = inet6_fill_ifmcaddr(skb, ifmca, fillargs);
053c095a 5190 if (err < 0)
234b27c3
ED
5191 break;
5192 }
88e2ca30 5193 read_lock_bh(&idev->lock);
234b27c3
ED
5194 break;
5195 case ANYCAST_ADDR:
6ba1e6e8 5196 fillargs->event = RTM_GETANYCAST;
234b27c3
ED
5197 /* anycast address */
5198 for (ifaca = idev->ac_list; ifaca;
5199 ifaca = ifaca->aca_next, ip_idx++) {
5200 if (ip_idx < s_ip_idx)
5201 continue;
6ba1e6e8 5202 err = inet6_fill_ifacaddr(skb, ifaca, fillargs);
053c095a 5203 if (err < 0)
234b27c3
ED
5204 break;
5205 }
5206 break;
5207 default:
5208 break;
5209 }
5210 read_unlock_bh(&idev->lock);
fe884c2b 5211 cb->args[2] = ip_idx;
234b27c3
ED
5212 return err;
5213}
5214
ed6eff11
DA
5215static int inet6_valid_dump_ifaddr_req(const struct nlmsghdr *nlh,
5216 struct inet6_fill_args *fillargs,
5217 struct net **tgt_net, struct sock *sk,
6371a71f 5218 struct netlink_callback *cb)
ed6eff11 5219{
6371a71f 5220 struct netlink_ext_ack *extack = cb->extack;
ed6eff11
DA
5221 struct nlattr *tb[IFA_MAX+1];
5222 struct ifaddrmsg *ifm;
5223 int err, i;
5224
5225 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
5226 NL_SET_ERR_MSG_MOD(extack, "Invalid header for address dump request");
5227 return -EINVAL;
5228 }
5229
5230 ifm = nlmsg_data(nlh);
5231 if (ifm->ifa_prefixlen || ifm->ifa_flags || ifm->ifa_scope) {
5232 NL_SET_ERR_MSG_MOD(extack, "Invalid values in header for address dump request");
5233 return -EINVAL;
5234 }
6371a71f
DA
5235
5236 fillargs->ifindex = ifm->ifa_index;
5237 if (fillargs->ifindex) {
5238 cb->answer_flags |= NLM_F_DUMP_FILTERED;
5239 fillargs->flags |= NLM_F_DUMP_FILTERED;
ed6eff11
DA
5240 }
5241
8cb08174
JB
5242 err = nlmsg_parse_deprecated_strict(nlh, sizeof(*ifm), tb, IFA_MAX,
5243 ifa_ipv6_policy, extack);
ed6eff11
DA
5244 if (err < 0)
5245 return err;
5246
5247 for (i = 0; i <= IFA_MAX; ++i) {
5248 if (!tb[i])
5249 continue;
5250
5251 if (i == IFA_TARGET_NETNSID) {
5252 struct net *net;
5253
5254 fillargs->netnsid = nla_get_s32(tb[i]);
5255 net = rtnl_get_net_ns_capable(sk, fillargs->netnsid);
5256 if (IS_ERR(net)) {
bf4cc40e 5257 fillargs->netnsid = -1;
ed6eff11
DA
5258 NL_SET_ERR_MSG_MOD(extack, "Invalid target network namespace id");
5259 return PTR_ERR(net);
5260 }
5261 *tgt_net = net;
5262 } else {
5263 NL_SET_ERR_MSG_MOD(extack, "Unsupported attribute in dump request");
5264 return -EINVAL;
5265 }
5266 }
5267
5268 return 0;
5269}
5270
1da177e4
LT
5271static int inet6_dump_addr(struct sk_buff *skb, struct netlink_callback *cb,
5272 enum addr_type_t type)
5273{
ed6eff11 5274 const struct nlmsghdr *nlh = cb->nlh;
6ba1e6e8
DA
5275 struct inet6_fill_args fillargs = {
5276 .portid = NETLINK_CB(cb->skb).portid,
5277 .seq = cb->nlh->nlmsg_seq,
5278 .flags = NLM_F_MULTI,
5279 .netnsid = -1,
5280 .type = type,
5281 };
87117baf 5282 struct net *tgt_net = sock_net(skb->sk);
fe884c2b 5283 int idx, s_idx, s_ip_idx;
234b27c3 5284 int h, s_h;
1da177e4 5285 struct net_device *dev;
234b27c3
ED
5286 struct inet6_dev *idev;
5287 struct hlist_head *head;
242afaa6 5288 int err = 0;
1ab1457c 5289
234b27c3
ED
5290 s_h = cb->args[0];
5291 s_idx = idx = cb->args[1];
fe884c2b 5292 s_ip_idx = cb->args[2];
5d5619b4 5293
ed6eff11 5294 if (cb->strict_check) {
ed6eff11 5295 err = inet6_valid_dump_ifaddr_req(nlh, &fillargs, &tgt_net,
6371a71f 5296 skb->sk, cb);
ed6eff11 5297 if (err < 0)
242afaa6 5298 goto put_tgt_net;
6371a71f 5299
242afaa6 5300 err = 0;
6371a71f
DA
5301 if (fillargs.ifindex) {
5302 dev = __dev_get_by_index(tgt_net, fillargs.ifindex);
242afaa6
DA
5303 if (!dev) {
5304 err = -ENODEV;
5305 goto put_tgt_net;
5306 }
6371a71f
DA
5307 idev = __in6_dev_get(dev);
5308 if (idev) {
5309 err = in6_dump_addrs(idev, skb, cb, s_ip_idx,
5310 &fillargs);
1518039f
JK
5311 if (err > 0)
5312 err = 0;
6371a71f
DA
5313 }
5314 goto put_tgt_net;
5315 }
6ecf4c37
CB
5316 }
5317
234b27c3 5318 rcu_read_lock();
6ecf4c37 5319 cb->seq = atomic_read(&tgt_net->ipv6.dev_addr_genid) ^ tgt_net->dev_base_seq;
234b27c3
ED
5320 for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
5321 idx = 0;
6ecf4c37 5322 head = &tgt_net->dev_index_head[h];
b67bfe0d 5323 hlist_for_each_entry_rcu(dev, head, index_hlist) {
234b27c3
ED
5324 if (idx < s_idx)
5325 goto cont;
4b97efdf 5326 if (h > s_h || idx > s_idx)
234b27c3 5327 s_ip_idx = 0;
e21e8467
SH
5328 idev = __in6_dev_get(dev);
5329 if (!idev)
234b27c3
ED
5330 goto cont;
5331
fe884c2b 5332 if (in6_dump_addrs(idev, skb, cb, s_ip_idx,
6ba1e6e8 5333 &fillargs) < 0)
234b27c3 5334 goto done;
7562f876 5335cont:
234b27c3
ED
5336 idx++;
5337 }
1da177e4 5338 }
234b27c3
ED
5339done:
5340 rcu_read_unlock();
5341 cb->args[0] = h;
5342 cb->args[1] = idx;
6371a71f 5343put_tgt_net:
6ba1e6e8 5344 if (fillargs.netnsid >= 0)
6ecf4c37 5345 put_net(tgt_net);
234b27c3 5346
7c1e8a38 5347 return skb->len ? : err;
1da177e4
LT
5348}
5349
5350static int inet6_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
5351{
5352 enum addr_type_t type = UNICAST_ADDR;
b854272b 5353
1da177e4
LT
5354 return inet6_dump_addr(skb, cb, type);
5355}
5356
5357static int inet6_dump_ifmcaddr(struct sk_buff *skb, struct netlink_callback *cb)
5358{
5359 enum addr_type_t type = MULTICAST_ADDR;
b854272b 5360
1da177e4
LT
5361 return inet6_dump_addr(skb, cb, type);
5362}
5363
5364
5365static int inet6_dump_ifacaddr(struct sk_buff *skb, struct netlink_callback *cb)
5366{
5367 enum addr_type_t type = ANYCAST_ADDR;
b854272b 5368
1da177e4
LT
5369 return inet6_dump_addr(skb, cb, type);
5370}
5371
4b1373de
JK
5372static int inet6_rtm_valid_getaddr_req(struct sk_buff *skb,
5373 const struct nlmsghdr *nlh,
5374 struct nlattr **tb,
5375 struct netlink_ext_ack *extack)
5376{
5377 struct ifaddrmsg *ifm;
5378 int i, err;
5379
5380 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
5381 NL_SET_ERR_MSG_MOD(extack, "Invalid header for get address request");
5382 return -EINVAL;
5383 }
5384
2beb6d29
HL
5385 if (!netlink_strict_get_check(skb))
5386 return nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
5387 ifa_ipv6_policy, extack);
5388
4b1373de
JK
5389 ifm = nlmsg_data(nlh);
5390 if (ifm->ifa_prefixlen || ifm->ifa_flags || ifm->ifa_scope) {
5391 NL_SET_ERR_MSG_MOD(extack, "Invalid values in header for get address request");
5392 return -EINVAL;
5393 }
5394
8cb08174
JB
5395 err = nlmsg_parse_deprecated_strict(nlh, sizeof(*ifm), tb, IFA_MAX,
5396 ifa_ipv6_policy, extack);
4b1373de
JK
5397 if (err)
5398 return err;
5399
5400 for (i = 0; i <= IFA_MAX; i++) {
5401 if (!tb[i])
5402 continue;
5403
5404 switch (i) {
5405 case IFA_TARGET_NETNSID:
5406 case IFA_ADDRESS:
5407 case IFA_LOCAL:
5408 break;
5409 default:
5410 NL_SET_ERR_MSG_MOD(extack, "Unsupported attribute in get address request");
5411 return -EINVAL;
5412 }
5413 }
5414
5415 return 0;
5416}
5417
c21ef3e3
DA
5418static int inet6_rtm_getaddr(struct sk_buff *in_skb, struct nlmsghdr *nlh,
5419 struct netlink_ext_ack *extack)
6c223828 5420{
87117baf 5421 struct net *tgt_net = sock_net(in_skb->sk);
203651b6
CB
5422 struct inet6_fill_args fillargs = {
5423 .portid = NETLINK_CB(in_skb).portid,
5424 .seq = nlh->nlmsg_seq,
5425 .event = RTM_NEWADDR,
5426 .flags = 0,
5427 .netnsid = -1,
5428 };
1b29fc2c
TG
5429 struct ifaddrmsg *ifm;
5430 struct nlattr *tb[IFA_MAX+1];
caeaba79 5431 struct in6_addr *addr = NULL, *peer;
6c223828
NT
5432 struct net_device *dev = NULL;
5433 struct inet6_ifaddr *ifa;
5434 struct sk_buff *skb;
6c223828
NT
5435 int err;
5436
4b1373de 5437 err = inet6_rtm_valid_getaddr_req(in_skb, nlh, tb, extack);
1b29fc2c 5438 if (err < 0)
c24675f8 5439 return err;
1b29fc2c 5440
6ecf4c37 5441 if (tb[IFA_TARGET_NETNSID]) {
203651b6 5442 fillargs.netnsid = nla_get_s32(tb[IFA_TARGET_NETNSID]);
6ecf4c37
CB
5443
5444 tgt_net = rtnl_get_net_ns_capable(NETLINK_CB(in_skb).sk,
203651b6 5445 fillargs.netnsid);
6ecf4c37
CB
5446 if (IS_ERR(tgt_net))
5447 return PTR_ERR(tgt_net);
5448 }
5449
caeaba79 5450 addr = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL], &peer);
c24675f8
FW
5451 if (!addr)
5452 return -EINVAL;
6c223828 5453
1b29fc2c 5454 ifm = nlmsg_data(nlh);
6c223828 5455 if (ifm->ifa_index)
6ecf4c37 5456 dev = dev_get_by_index(tgt_net, ifm->ifa_index);
6c223828 5457
6ecf4c37 5458 ifa = ipv6_get_ifaddr(tgt_net, addr, dev, 1);
e21e8467 5459 if (!ifa) {
1b29fc2c
TG
5460 err = -EADDRNOTAVAIL;
5461 goto errout;
5462 }
6c223828 5463
e21e8467
SH
5464 skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_KERNEL);
5465 if (!skb) {
6c223828 5466 err = -ENOBUFS;
1b29fc2c 5467 goto errout_ifa;
6c223828
NT
5468 }
5469
203651b6 5470 err = inet6_fill_ifaddr(skb, ifa, &fillargs);
26932566
PM
5471 if (err < 0) {
5472 /* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
5473 WARN_ON(err == -EMSGSIZE);
5474 kfree_skb(skb);
5475 goto errout_ifa;
5476 }
6ecf4c37 5477 err = rtnl_unicast(skb, tgt_net, NETLINK_CB(in_skb).portid);
1b29fc2c 5478errout_ifa:
6c223828 5479 in6_ifa_put(ifa);
1b29fc2c 5480errout:
1160dfa1 5481 dev_put(dev);
203651b6 5482 if (fillargs.netnsid >= 0)
6ecf4c37
CB
5483 put_net(tgt_net);
5484
6c223828 5485 return err;
6c223828
NT
5486}
5487
1da177e4
LT
5488static void inet6_ifa_notify(int event, struct inet6_ifaddr *ifa)
5489{
5490 struct sk_buff *skb;
c346dca1 5491 struct net *net = dev_net(ifa->idev->dev);
203651b6
CB
5492 struct inet6_fill_args fillargs = {
5493 .portid = 0,
5494 .seq = 0,
5495 .event = event,
5496 .flags = 0,
5497 .netnsid = -1,
5498 };
5d620266 5499 int err = -ENOBUFS;
1da177e4 5500
0ab6803b 5501 skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_ATOMIC);
63159f29 5502 if (!skb)
5d620266
TG
5503 goto errout;
5504
203651b6 5505 err = inet6_fill_ifaddr(skb, ifa, &fillargs);
26932566
PM
5506 if (err < 0) {
5507 /* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
5508 WARN_ON(err == -EMSGSIZE);
5509 kfree_skb(skb);
5510 goto errout;
5511 }
1ce85fe4
PNA
5512 rtnl_notify(skb, net, 0, RTNLGRP_IPV6_IFADDR, NULL, GFP_ATOMIC);
5513 return;
5d620266
TG
5514errout:
5515 if (err < 0)
6fda7350 5516 rtnl_set_sk_err(net, RTNLGRP_IPV6_IFADDR, err);
1da177e4
LT
5517}
5518
b6f99a21 5519static inline void ipv6_store_devconf(struct ipv6_devconf *cnf,
1da177e4
LT
5520 __s32 *array, int bytes)
5521{
04561c1f
TG
5522 BUG_ON(bytes < (DEVCONF_MAX * 4));
5523
1da177e4
LT
5524 memset(array, 0, bytes);
5525 array[DEVCONF_FORWARDING] = cnf->forwarding;
5526 array[DEVCONF_HOPLIMIT] = cnf->hop_limit;
5527 array[DEVCONF_MTU6] = cnf->mtu6;
5528 array[DEVCONF_ACCEPT_RA] = cnf->accept_ra;
5529 array[DEVCONF_ACCEPT_REDIRECTS] = cnf->accept_redirects;
5530 array[DEVCONF_AUTOCONF] = cnf->autoconf;
5531 array[DEVCONF_DAD_TRANSMITS] = cnf->dad_transmits;
5532 array[DEVCONF_RTR_SOLICITS] = cnf->rtr_solicits;
93908d19
TG
5533 array[DEVCONF_RTR_SOLICIT_INTERVAL] =
5534 jiffies_to_msecs(cnf->rtr_solicit_interval);
bd11f074
5535 array[DEVCONF_RTR_SOLICIT_MAX_INTERVAL] =
5536 jiffies_to_msecs(cnf->rtr_solicit_max_interval);
93908d19
TG
5537 array[DEVCONF_RTR_SOLICIT_DELAY] =
5538 jiffies_to_msecs(cnf->rtr_solicit_delay);
1da177e4 5539 array[DEVCONF_FORCE_MLD_VERSION] = cnf->force_mld_version;
fc4eba58
HFS
5540 array[DEVCONF_MLDV1_UNSOLICITED_REPORT_INTERVAL] =
5541 jiffies_to_msecs(cnf->mldv1_unsolicited_report_interval);
5542 array[DEVCONF_MLDV2_UNSOLICITED_REPORT_INTERVAL] =
5543 jiffies_to_msecs(cnf->mldv2_unsolicited_report_interval);
1da177e4
LT
5544 array[DEVCONF_USE_TEMPADDR] = cnf->use_tempaddr;
5545 array[DEVCONF_TEMP_VALID_LFT] = cnf->temp_valid_lft;
5546 array[DEVCONF_TEMP_PREFERED_LFT] = cnf->temp_prefered_lft;
5547 array[DEVCONF_REGEN_MAX_RETRY] = cnf->regen_max_retry;
5548 array[DEVCONF_MAX_DESYNC_FACTOR] = cnf->max_desync_factor;
1da177e4 5549 array[DEVCONF_MAX_ADDRESSES] = cnf->max_addresses;
65f5c7c1 5550 array[DEVCONF_ACCEPT_RA_DEFRTR] = cnf->accept_ra_defrtr;
6b2e04bc 5551 array[DEVCONF_RA_DEFRTR_METRIC] = cnf->ra_defrtr_metric;
8013d1d7 5552 array[DEVCONF_ACCEPT_RA_MIN_HOP_LIMIT] = cnf->accept_ra_min_hop_limit;
c4fd30eb 5553 array[DEVCONF_ACCEPT_RA_PINFO] = cnf->accept_ra_pinfo;
930d6ff2
YH
5554#ifdef CONFIG_IPV6_ROUTER_PREF
5555 array[DEVCONF_ACCEPT_RA_RTR_PREF] = cnf->accept_ra_rtr_pref;
93908d19
TG
5556 array[DEVCONF_RTR_PROBE_INTERVAL] =
5557 jiffies_to_msecs(cnf->rtr_probe_interval);
fa03ef38 5558#ifdef CONFIG_IPV6_ROUTE_INFO
bbea124b 5559 array[DEVCONF_ACCEPT_RA_RT_INFO_MIN_PLEN] = cnf->accept_ra_rt_info_min_plen;
09c884d4
YH
5560 array[DEVCONF_ACCEPT_RA_RT_INFO_MAX_PLEN] = cnf->accept_ra_rt_info_max_plen;
5561#endif
930d6ff2 5562#endif
fbea49e1 5563 array[DEVCONF_PROXY_NDP] = cnf->proxy_ndp;
0bcbc926 5564 array[DEVCONF_ACCEPT_SOURCE_ROUTE] = cnf->accept_source_route;
95c385b4
NH
5565#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
5566 array[DEVCONF_OPTIMISTIC_DAD] = cnf->optimistic_dad;
7fd2561e 5567 array[DEVCONF_USE_OPTIMISTIC] = cnf->use_optimistic;
95c385b4 5568#endif
7bc570c8 5569#ifdef CONFIG_IPV6_MROUTE
145c7a79 5570 array[DEVCONF_MC_FORWARDING] = atomic_read(&cnf->mc_forwarding);
7bc570c8 5571#endif
778d80be 5572 array[DEVCONF_DISABLE_IPV6] = cnf->disable_ipv6;
1b34be74 5573 array[DEVCONF_ACCEPT_DAD] = cnf->accept_dad;
c3faca05 5574 array[DEVCONF_FORCE_TLLAO] = cnf->force_tllao;
5cb04436 5575 array[DEVCONF_NDISC_NOTIFY] = cnf->ndisc_notify;
b800c3b9 5576 array[DEVCONF_SUPPRESS_FRAG_NDISC] = cnf->suppress_frag_ndisc;
d9333196 5577 array[DEVCONF_ACCEPT_RA_FROM_LOCAL] = cnf->accept_ra_from_local;
c2943f14 5578 array[DEVCONF_ACCEPT_RA_MTU] = cnf->accept_ra_mtu;
35103d11 5579 array[DEVCONF_IGNORE_ROUTES_WITH_LINKDOWN] = cnf->ignore_routes_with_linkdown;
3d1bec99 5580 /* we omit DEVCONF_STABLE_SECRET for now */
3985e8a3 5581 array[DEVCONF_USE_OIF_ADDRS_ONLY] = cnf->use_oif_addrs_only;
abbc3043 5582 array[DEVCONF_DROP_UNICAST_IN_L2_MULTICAST] = cnf->drop_unicast_in_l2_multicast;
7a02bf89 5583 array[DEVCONF_DROP_UNSOLICITED_NA] = cnf->drop_unsolicited_na;
f1705ec1 5584 array[DEVCONF_KEEP_ADDR_ON_DOWN] = cnf->keep_addr_on_down;
1ababeba 5585 array[DEVCONF_SEG6_ENABLED] = cnf->seg6_enabled;
bf355b8d
DL
5586#ifdef CONFIG_IPV6_SEG6_HMAC
5587 array[DEVCONF_SEG6_REQUIRE_HMAC] = cnf->seg6_require_hmac;
5588#endif
adc176c5 5589 array[DEVCONF_ENHANCED_DAD] = cnf->enhanced_dad;
d35a00b8 5590 array[DEVCONF_ADDR_GEN_MODE] = cnf->addr_gen_mode;
df789fe7 5591 array[DEVCONF_DISABLE_POLICY] = cnf->disable_policy;
2210d6b2 5592 array[DEVCONF_NDISC_TCLASS] = cnf->ndisc_tclass;
8610c7c6 5593 array[DEVCONF_RPL_SEG_ENABLED] = cnf->rpl_seg_enabled;
9ee11f0f
JI
5594 array[DEVCONF_IOAM6_ENABLED] = cnf->ioam6_enabled;
5595 array[DEVCONF_IOAM6_ID] = cnf->ioam6_id;
5596 array[DEVCONF_IOAM6_ID_WIDE] = cnf->ioam6_id_wide;
18ac597a 5597 array[DEVCONF_NDISC_EVICT_NOCARRIER] = cnf->ndisc_evict_nocarrier;
3e0b8f52 5598 array[DEVCONF_ACCEPT_UNTRACKED_NA] = cnf->accept_untracked_na;
1da177e4
LT
5599}
5600
b382b191
TG
5601static inline size_t inet6_ifla6_size(void)
5602{
5603 return nla_total_size(4) /* IFLA_INET6_FLAGS */
5604 + nla_total_size(sizeof(struct ifla_cacheinfo))
5605 + nla_total_size(DEVCONF_MAX * 4) /* IFLA_INET6_CONF */
5606 + nla_total_size(IPSTATS_MIB_MAX * 8) /* IFLA_INET6_STATS */
f53adae4 5607 + nla_total_size(ICMP6_MIB_MAX * 8) /* IFLA_INET6_ICMP6STATS */
bdd72f41
SD
5608 + nla_total_size(sizeof(struct in6_addr)) /* IFLA_INET6_TOKEN */
5609 + nla_total_size(1) /* IFLA_INET6_ADDR_GEN_MODE */
49b99da2 5610 + nla_total_size(4) /* IFLA_INET6_RA_MTU */
bdd72f41 5611 + 0;
b382b191
TG
5612}
5613
339bf98f
TG
5614static inline size_t inet6_if_nlmsg_size(void)
5615{
5616 return NLMSG_ALIGN(sizeof(struct ifinfomsg))
5617 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
5618 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
5619 + nla_total_size(4) /* IFLA_MTU */
5620 + nla_total_size(4) /* IFLA_LINK */
0344338b 5621 + nla_total_size(1) /* IFLA_OPERSTATE */
b382b191 5622 + nla_total_size(inet6_ifla6_size()); /* IFLA_PROTINFO */
339bf98f 5623}
c5396a31 5624
be281e55 5625static inline void __snmp6_fill_statsdev(u64 *stats, atomic_long_t *mib,
aca05671 5626 int bytes)
7f7d9a6b
HX
5627{
5628 int i;
aca05671 5629 int pad = bytes - sizeof(u64) * ICMP6_MIB_MAX;
7f7d9a6b
HX
5630 BUG_ON(pad < 0);
5631
5632 /* Use put_unaligned() because stats may not be aligned for u64. */
aca05671
JH
5633 put_unaligned(ICMP6_MIB_MAX, &stats[0]);
5634 for (i = 1; i < ICMP6_MIB_MAX; i++)
be281e55 5635 put_unaligned(atomic_long_read(&mib[i]), &stats[i]);
7f7d9a6b 5636
aca05671 5637 memset(&stats[ICMP6_MIB_MAX], 0, pad);
7f7d9a6b
HX
5638}
5639
698365fa 5640static inline void __snmp6_fill_stats64(u64 *stats, void __percpu *mib,
a3a77372 5641 int bytes, size_t syncpoff)
4ce3c183 5642{
a3a77372
R
5643 int i, c;
5644 u64 buff[IPSTATS_MIB_MAX];
5645 int pad = bytes - sizeof(u64) * IPSTATS_MIB_MAX;
5646
4ce3c183
ED
5647 BUG_ON(pad < 0);
5648
a3a77372
R
5649 memset(buff, 0, sizeof(buff));
5650 buff[0] = IPSTATS_MIB_MAX;
4ce3c183 5651
a3a77372
R
5652 for_each_possible_cpu(c) {
5653 for (i = 1; i < IPSTATS_MIB_MAX; i++)
5654 buff[i] += snmp_get_cpu_field64(mib, c, i, syncpoff);
5655 }
5656
5657 memcpy(stats, buff, IPSTATS_MIB_MAX * sizeof(u64));
5658 memset(&stats[IPSTATS_MIB_MAX], 0, pad);
4ce3c183
ED
5659}
5660
7f7d9a6b
HX
5661static void snmp6_fill_stats(u64 *stats, struct inet6_dev *idev, int attrtype,
5662 int bytes)
5663{
e21e8467 5664 switch (attrtype) {
7f7d9a6b 5665 case IFLA_INET6_STATS:
a3a77372
R
5666 __snmp6_fill_stats64(stats, idev->stats.ipv6, bytes,
5667 offsetof(struct ipstats_mib, syncp));
7f7d9a6b
HX
5668 break;
5669 case IFLA_INET6_ICMP6STATS:
aca05671 5670 __snmp6_fill_statsdev(stats, idev->stats.icmpv6dev->mibs, bytes);
7f7d9a6b
HX
5671 break;
5672 }
5673}
5674
d5566fd7
SV
5675static int inet6_fill_ifla6_attrs(struct sk_buff *skb, struct inet6_dev *idev,
5676 u32 ext_filter_mask)
b382b191
TG
5677{
5678 struct nlattr *nla;
5679 struct ifla_cacheinfo ci;
5680
c78679e8
DM
5681 if (nla_put_u32(skb, IFLA_INET6_FLAGS, idev->if_flags))
5682 goto nla_put_failure;
b382b191 5683 ci.max_reasm_len = IPV6_MAXPLEN;
24912420
DM
5684 ci.tstamp = cstamp_delta(idev->tstamp);
5685 ci.reachable_time = jiffies_to_msecs(idev->nd_parms->reachable_time);
1f9248e5 5686 ci.retrans_time = jiffies_to_msecs(NEIGH_VAR(idev->nd_parms, RETRANS_TIME));
c78679e8
DM
5687 if (nla_put(skb, IFLA_INET6_CACHEINFO, sizeof(ci), &ci))
5688 goto nla_put_failure;
b382b191 5689 nla = nla_reserve(skb, IFLA_INET6_CONF, DEVCONF_MAX * sizeof(s32));
63159f29 5690 if (!nla)
b382b191
TG
5691 goto nla_put_failure;
5692 ipv6_store_devconf(&idev->cnf, nla_data(nla), nla_len(nla));
5693
5694 /* XXX - MC not implemented */
5695
d5566fd7
SV
5696 if (ext_filter_mask & RTEXT_FILTER_SKIP_STATS)
5697 return 0;
5698
b382b191 5699 nla = nla_reserve(skb, IFLA_INET6_STATS, IPSTATS_MIB_MAX * sizeof(u64));
63159f29 5700 if (!nla)
b382b191
TG
5701 goto nla_put_failure;
5702 snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_STATS, nla_len(nla));
5703
5704 nla = nla_reserve(skb, IFLA_INET6_ICMP6STATS, ICMP6_MIB_MAX * sizeof(u64));
63159f29 5705 if (!nla)
b382b191
TG
5706 goto nla_put_failure;
5707 snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_ICMP6STATS, nla_len(nla));
5708
f53adae4 5709 nla = nla_reserve(skb, IFLA_INET6_TOKEN, sizeof(struct in6_addr));
63159f29 5710 if (!nla)
f53adae4
DB
5711 goto nla_put_failure;
5712 read_lock_bh(&idev->lock);
5713 memcpy(nla_data(nla), idev->token.s6_addr, nla_len(nla));
5714 read_unlock_bh(&idev->lock);
5715
0d7982ce
ND
5716 if (nla_put_u8(skb, IFLA_INET6_ADDR_GEN_MODE, idev->cnf.addr_gen_mode))
5717 goto nla_put_failure;
5718
49b99da2
RY
5719 if (idev->ra_mtu &&
5720 nla_put_u32(skb, IFLA_INET6_RA_MTU, idev->ra_mtu))
5721 goto nla_put_failure;
5722
b382b191
TG
5723 return 0;
5724
5725nla_put_failure:
5726 return -EMSGSIZE;
5727}
5728
b1974ed0
AR
5729static size_t inet6_get_link_af_size(const struct net_device *dev,
5730 u32 ext_filter_mask)
b382b191
TG
5731{
5732 if (!__in6_dev_get(dev))
5733 return 0;
5734
5735 return inet6_ifla6_size();
5736}
5737
d5566fd7
SV
5738static int inet6_fill_link_af(struct sk_buff *skb, const struct net_device *dev,
5739 u32 ext_filter_mask)
b382b191
TG
5740{
5741 struct inet6_dev *idev = __in6_dev_get(dev);
5742
5743 if (!idev)
5744 return -ENODATA;
5745
d5566fd7 5746 if (inet6_fill_ifla6_attrs(skb, idev, ext_filter_mask) < 0)
b382b191
TG
5747 return -EMSGSIZE;
5748
5749 return 0;
5750}
5751
3583a4e8
SH
5752static int inet6_set_iftoken(struct inet6_dev *idev, struct in6_addr *token,
5753 struct netlink_ext_ack *extack)
f53adae4 5754{
f53adae4
DB
5755 struct inet6_ifaddr *ifp;
5756 struct net_device *dev = idev->dev;
47e27d5e 5757 bool clear_token, update_rs = false;
dc848292 5758 struct in6_addr ll_addr;
f53adae4 5759
c15b1cca
HFS
5760 ASSERT_RTNL();
5761
63159f29 5762 if (!token)
f53adae4 5763 return -EINVAL;
3583a4e8
SH
5764
5765 if (dev->flags & IFF_LOOPBACK) {
5766 NL_SET_ERR_MSG_MOD(extack, "Device is loopback");
f53adae4 5767 return -EINVAL;
3583a4e8
SH
5768 }
5769
5770 if (dev->flags & IFF_NOARP) {
5771 NL_SET_ERR_MSG_MOD(extack,
5772 "Device does not do neighbour discovery");
5773 return -EINVAL;
5774 }
5775
5776 if (!ipv6_accept_ra(idev)) {
5777 NL_SET_ERR_MSG_MOD(extack,
5778 "Router advertisement is disabled on device");
f53adae4 5779 return -EINVAL;
3583a4e8
SH
5780 }
5781
5782 if (idev->cnf.rtr_solicits == 0) {
5783 NL_SET_ERR_MSG(extack,
5784 "Router solicitation is disabled on device");
f53adae4 5785 return -EINVAL;
3583a4e8 5786 }
f53adae4
DB
5787
5788 write_lock_bh(&idev->lock);
5789
5790 BUILD_BUG_ON(sizeof(token->s6_addr) != 16);
5791 memcpy(idev->token.s6_addr + 8, token->s6_addr + 8, 8);
5792
5793 write_unlock_bh(&idev->lock);
5794
47e27d5e
DB
5795 clear_token = ipv6_addr_any(token);
5796 if (clear_token)
5797 goto update_lft;
5798
dc848292
HFS
5799 if (!idev->dead && (idev->if_flags & IF_READY) &&
5800 !ipv6_get_lladdr(dev, &ll_addr, IFA_F_TENTATIVE |
5801 IFA_F_OPTIMISTIC)) {
fc403832
DB
5802 /* If we're not ready, then normal ifup will take care
5803 * of this. Otherwise, we need to request our rs here.
5804 */
5805 ndisc_send_rs(dev, &ll_addr, &in6addr_linklocal_allrouters);
5806 update_rs = true;
5807 }
f53adae4 5808
47e27d5e 5809update_lft:
f53adae4 5810 write_lock_bh(&idev->lock);
fc403832 5811
77ecaace 5812 if (update_rs) {
fc403832 5813 idev->if_flags |= IF_RS_SENT;
bd11f074
5814 idev->rs_interval = rfc3315_s14_backoff_init(
5815 idev->cnf.rtr_solicit_interval);
77ecaace 5816 idev->rs_probes = 1;
bd11f074 5817 addrconf_mod_rs_timer(idev, idev->rs_interval);
77ecaace 5818 }
f53adae4
DB
5819
5820 /* Well, that's kinda nasty ... */
5821 list_for_each_entry(ifp, &idev->addr_list, if_list) {
5822 spin_lock(&ifp->lock);
617fe29d 5823 if (ifp->tokenized) {
f53adae4
DB
5824 ifp->valid_lft = 0;
5825 ifp->prefered_lft = 0;
5826 }
5827 spin_unlock(&ifp->lock);
5828 }
5829
5830 write_unlock_bh(&idev->lock);
b2ed64a9 5831 inet6_ifinfo_notify(RTM_NEWLINK, idev);
8805d13f 5832 addrconf_verify_rtnl(dev_net(dev));
f53adae4
DB
5833 return 0;
5834}
5835
11b1f828
DB
5836static const struct nla_policy inet6_af_policy[IFLA_INET6_MAX + 1] = {
5837 [IFLA_INET6_ADDR_GEN_MODE] = { .type = NLA_U8 },
5838 [IFLA_INET6_TOKEN] = { .len = sizeof(struct in6_addr) },
49b99da2
RY
5839 [IFLA_INET6_RA_MTU] = { .type = NLA_REJECT,
5840 .reject_message =
5841 "IFLA_INET6_RA_MTU can not be set" },
11b1f828
DB
5842};
5843
d35a00b8
FJ
5844static int check_addr_gen_mode(int mode)
5845{
5846 if (mode != IN6_ADDR_GEN_MODE_EUI64 &&
5847 mode != IN6_ADDR_GEN_MODE_NONE &&
5848 mode != IN6_ADDR_GEN_MODE_STABLE_PRIVACY &&
5849 mode != IN6_ADDR_GEN_MODE_RANDOM)
5850 return -EINVAL;
5851 return 1;
5852}
5853
5854static int check_stable_privacy(struct inet6_dev *idev, struct net *net,
5855 int mode)
5856{
5857 if (mode == IN6_ADDR_GEN_MODE_STABLE_PRIVACY &&
5858 !idev->cnf.stable_secret.initialized &&
5859 !net->ipv6.devconf_dflt->stable_secret.initialized)
5860 return -EINVAL;
5861 return 1;
5862}
5863
7dc2bcca 5864static int inet6_validate_link_af(const struct net_device *dev,
8679c31e
RY
5865 const struct nlattr *nla,
5866 struct netlink_ext_ack *extack)
7dc2bcca
MM
5867{
5868 struct nlattr *tb[IFLA_INET6_MAX + 1];
5869 struct inet6_dev *idev = NULL;
5870 int err;
5871
5872 if (dev) {
5873 idev = __in6_dev_get(dev);
5874 if (!idev)
5875 return -EAFNOSUPPORT;
5876 }
5877
5878 err = nla_parse_nested_deprecated(tb, IFLA_INET6_MAX, nla,
8679c31e 5879 inet6_af_policy, extack);
7dc2bcca
MM
5880 if (err)
5881 return err;
5882
5883 if (!tb[IFLA_INET6_TOKEN] && !tb[IFLA_INET6_ADDR_GEN_MODE])
5884 return -EINVAL;
5885
5886 if (tb[IFLA_INET6_ADDR_GEN_MODE]) {
5887 u8 mode = nla_get_u8(tb[IFLA_INET6_ADDR_GEN_MODE]);
5888
5889 if (check_addr_gen_mode(mode) < 0)
5890 return -EINVAL;
5891 if (dev && check_stable_privacy(idev, dev_net(dev), mode) < 0)
5892 return -EINVAL;
5893 }
5894
5895 return 0;
5896}
5897
3583a4e8
SH
5898static int inet6_set_link_af(struct net_device *dev, const struct nlattr *nla,
5899 struct netlink_ext_ack *extack)
f53adae4 5900{
f53adae4
DB
5901 struct inet6_dev *idev = __in6_dev_get(dev);
5902 struct nlattr *tb[IFLA_INET6_MAX + 1];
7dc2bcca 5903 int err;
f53adae4 5904
db3fa271
ED
5905 if (!idev)
5906 return -EAFNOSUPPORT;
5907
8cb08174 5908 if (nla_parse_nested_deprecated(tb, IFLA_INET6_MAX, nla, NULL, NULL) < 0)
5ac6b198 5909 return -EINVAL;
f53adae4 5910
bc91b0f0 5911 if (tb[IFLA_INET6_TOKEN]) {
3583a4e8
SH
5912 err = inet6_set_iftoken(idev, nla_data(tb[IFLA_INET6_TOKEN]),
5913 extack);
bc91b0f0
JP
5914 if (err)
5915 return err;
5916 }
5917
5918 if (tb[IFLA_INET6_ADDR_GEN_MODE]) {
5919 u8 mode = nla_get_u8(tb[IFLA_INET6_ADDR_GEN_MODE]);
5920
d35a00b8 5921 idev->cnf.addr_gen_mode = mode;
bc91b0f0 5922 }
f53adae4 5923
7dc2bcca 5924 return 0;
f53adae4
DB
5925}
5926
1ab1457c 5927static int inet6_fill_ifinfo(struct sk_buff *skb, struct inet6_dev *idev,
15e47304 5928 u32 portid, u32 seq, int event, unsigned int flags)
1da177e4 5929{
04561c1f 5930 struct net_device *dev = idev->dev;
04561c1f
TG
5931 struct ifinfomsg *hdr;
5932 struct nlmsghdr *nlh;
5933 void *protoinfo;
04561c1f 5934
15e47304 5935 nlh = nlmsg_put(skb, portid, seq, event, sizeof(*hdr), flags);
63159f29 5936 if (!nlh)
26932566 5937 return -EMSGSIZE;
04561c1f
TG
5938
5939 hdr = nlmsg_data(nlh);
5940 hdr->ifi_family = AF_INET6;
5941 hdr->__ifi_pad = 0;
5942 hdr->ifi_type = dev->type;
5943 hdr->ifi_index = dev->ifindex;
5944 hdr->ifi_flags = dev_get_flags(dev);
5945 hdr->ifi_change = 0;
5946
c78679e8
DM
5947 if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
5948 (dev->addr_len &&
5949 nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
5950 nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
a54acb3a 5951 (dev->ifindex != dev_get_iflink(dev) &&
0344338b
AG
5952 nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))) ||
5953 nla_put_u8(skb, IFLA_OPERSTATE,
5954 netif_running(dev) ? dev->operstate : IF_OPER_DOWN))
c78679e8 5955 goto nla_put_failure;
ae0be8de 5956 protoinfo = nla_nest_start_noflag(skb, IFLA_PROTINFO);
63159f29 5957 if (!protoinfo)
04561c1f 5958 goto nla_put_failure;
1da177e4 5959
d5566fd7 5960 if (inet6_fill_ifla6_attrs(skb, idev, 0) < 0)
bf99f1bd 5961 goto nla_put_failure;
1da177e4 5962
04561c1f 5963 nla_nest_end(skb, protoinfo);
053c095a
JB
5964 nlmsg_end(skb, nlh);
5965 return 0;
1da177e4 5966
04561c1f 5967nla_put_failure:
26932566
PM
5968 nlmsg_cancel(skb, nlh);
5969 return -EMSGSIZE;
1da177e4
LT
5970}
5971
786e0007
DA
5972static int inet6_valid_dump_ifinfo(const struct nlmsghdr *nlh,
5973 struct netlink_ext_ack *extack)
5974{
5975 struct ifinfomsg *ifm;
5976
5977 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
5978 NL_SET_ERR_MSG_MOD(extack, "Invalid header for link dump request");
5979 return -EINVAL;
5980 }
5981
5982 if (nlmsg_attrlen(nlh, sizeof(*ifm))) {
5983 NL_SET_ERR_MSG_MOD(extack, "Invalid data after header");
5984 return -EINVAL;
5985 }
5986
5987 ifm = nlmsg_data(nlh);
5988 if (ifm->__ifi_pad || ifm->ifi_type || ifm->ifi_flags ||
5989 ifm->ifi_change || ifm->ifi_index) {
5990 NL_SET_ERR_MSG_MOD(extack, "Invalid values in header for dump request");
5991 return -EINVAL;
5992 }
5993
5994 return 0;
5995}
5996
1da177e4
LT
5997static int inet6_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
5998{
3b1e0a65 5999 struct net *net = sock_net(skb->sk);
84d2697d 6000 int h, s_h;
434a8a58 6001 int idx = 0, s_idx;
1da177e4
LT
6002 struct net_device *dev;
6003 struct inet6_dev *idev;
84d2697d 6004 struct hlist_head *head;
1da177e4 6005
786e0007
DA
6006 /* only requests using strict checking can pass data to
6007 * influence the dump
6008 */
6009 if (cb->strict_check) {
6010 int err = inet6_valid_dump_ifinfo(cb->nlh, cb->extack);
6011
6012 if (err < 0)
6013 return err;
6014 }
6015
84d2697d
ED
6016 s_h = cb->args[0];
6017 s_idx = cb->args[1];
6018
6019 rcu_read_lock();
6020 for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
6021 idx = 0;
6022 head = &net->dev_index_head[h];
b67bfe0d 6023 hlist_for_each_entry_rcu(dev, head, index_hlist) {
84d2697d
ED
6024 if (idx < s_idx)
6025 goto cont;
6026 idev = __in6_dev_get(dev);
6027 if (!idev)
6028 goto cont;
6029 if (inet6_fill_ifinfo(skb, idev,
15e47304 6030 NETLINK_CB(cb->skb).portid,
84d2697d 6031 cb->nlh->nlmsg_seq,
053c095a 6032 RTM_NEWLINK, NLM_F_MULTI) < 0)
84d2697d 6033 goto out;
7562f876 6034cont:
84d2697d
ED
6035 idx++;
6036 }
1da177e4 6037 }
84d2697d
ED
6038out:
6039 rcu_read_unlock();
6040 cb->args[1] = idx;
6041 cb->args[0] = h;
1da177e4
LT
6042
6043 return skb->len;
6044}
6045
6046void inet6_ifinfo_notify(int event, struct inet6_dev *idev)
6047{
6048 struct sk_buff *skb;
c346dca1 6049 struct net *net = dev_net(idev->dev);
8d7a76c9 6050 int err = -ENOBUFS;
1ab1457c 6051
339bf98f 6052 skb = nlmsg_new(inet6_if_nlmsg_size(), GFP_ATOMIC);
63159f29 6053 if (!skb)
8d7a76c9
TG
6054 goto errout;
6055
6056 err = inet6_fill_ifinfo(skb, idev, 0, 0, event, 0);
26932566
PM
6057 if (err < 0) {
6058 /* -EMSGSIZE implies BUG in inet6_if_nlmsg_size() */
6059 WARN_ON(err == -EMSGSIZE);
6060 kfree_skb(skb);
6061 goto errout;
6062 }
5f75a104 6063 rtnl_notify(skb, net, 0, RTNLGRP_IPV6_IFINFO, NULL, GFP_ATOMIC);
1ce85fe4 6064 return;
8d7a76c9
TG
6065errout:
6066 if (err < 0)
5f75a104 6067 rtnl_set_sk_err(net, RTNLGRP_IPV6_IFINFO, err);
1da177e4
LT
6068}
6069
339bf98f
TG
6070static inline size_t inet6_prefix_nlmsg_size(void)
6071{
6072 return NLMSG_ALIGN(sizeof(struct prefixmsg))
6073 + nla_total_size(sizeof(struct in6_addr))
6074 + nla_total_size(sizeof(struct prefix_cacheinfo));
6075}
c5396a31 6076
1da177e4 6077static int inet6_fill_prefix(struct sk_buff *skb, struct inet6_dev *idev,
15e47304 6078 struct prefix_info *pinfo, u32 portid, u32 seq,
6051e2f4 6079 int event, unsigned int flags)
1da177e4 6080{
6051e2f4
TG
6081 struct prefixmsg *pmsg;
6082 struct nlmsghdr *nlh;
1da177e4
LT
6083 struct prefix_cacheinfo ci;
6084
15e47304 6085 nlh = nlmsg_put(skb, portid, seq, event, sizeof(*pmsg), flags);
63159f29 6086 if (!nlh)
26932566 6087 return -EMSGSIZE;
6051e2f4
TG
6088
6089 pmsg = nlmsg_data(nlh);
1da177e4 6090 pmsg->prefix_family = AF_INET6;
8a47077a
PM
6091 pmsg->prefix_pad1 = 0;
6092 pmsg->prefix_pad2 = 0;
1da177e4
LT
6093 pmsg->prefix_ifindex = idev->dev->ifindex;
6094 pmsg->prefix_len = pinfo->prefix_len;
6095 pmsg->prefix_type = pinfo->type;
8a47077a 6096 pmsg->prefix_pad3 = 0;
1da177e4
LT
6097 pmsg->prefix_flags = 0;
6098 if (pinfo->onlink)
6099 pmsg->prefix_flags |= IF_PREFIX_ONLINK;
6100 if (pinfo->autoconf)
6101 pmsg->prefix_flags |= IF_PREFIX_AUTOCONF;
6102
c78679e8
DM
6103 if (nla_put(skb, PREFIX_ADDRESS, sizeof(pinfo->prefix), &pinfo->prefix))
6104 goto nla_put_failure;
1da177e4
LT
6105 ci.preferred_time = ntohl(pinfo->prefered);
6106 ci.valid_time = ntohl(pinfo->valid);
c78679e8
DM
6107 if (nla_put(skb, PREFIX_CACHEINFO, sizeof(ci), &ci))
6108 goto nla_put_failure;
053c095a
JB
6109 nlmsg_end(skb, nlh);
6110 return 0;
1da177e4 6111
6051e2f4 6112nla_put_failure:
26932566
PM
6113 nlmsg_cancel(skb, nlh);
6114 return -EMSGSIZE;
1da177e4
LT
6115}
6116
1ab1457c 6117static void inet6_prefix_notify(int event, struct inet6_dev *idev,
1da177e4
LT
6118 struct prefix_info *pinfo)
6119{
6120 struct sk_buff *skb;
c346dca1 6121 struct net *net = dev_net(idev->dev);
8c384bfa 6122 int err = -ENOBUFS;
1da177e4 6123
339bf98f 6124 skb = nlmsg_new(inet6_prefix_nlmsg_size(), GFP_ATOMIC);
63159f29 6125 if (!skb)
8c384bfa
TG
6126 goto errout;
6127
6128 err = inet6_fill_prefix(skb, idev, pinfo, 0, 0, event, 0);
26932566
PM
6129 if (err < 0) {
6130 /* -EMSGSIZE implies BUG in inet6_prefix_nlmsg_size() */
6131 WARN_ON(err == -EMSGSIZE);
6132 kfree_skb(skb);
6133 goto errout;
6134 }
1ce85fe4
PNA
6135 rtnl_notify(skb, net, 0, RTNLGRP_IPV6_PREFIX, NULL, GFP_ATOMIC);
6136 return;
8c384bfa
TG
6137errout:
6138 if (err < 0)
6fda7350 6139 rtnl_set_sk_err(net, RTNLGRP_IPV6_PREFIX, err);
1da177e4
LT
6140}
6141
1da177e4
LT
6142static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
6143{
63998ac2
ND
6144 struct net *net = dev_net(ifp->idev->dev);
6145
c15b1cca
HFS
6146 if (event)
6147 ASSERT_RTNL();
6148
1da177e4
LT
6149 inet6_ifa_notify(event ? : RTM_NEWADDR, ifp);
6150
6151 switch (event) {
6152 case RTM_NEWADDR:
95c385b4 6153 /*
2d819d25
DA
6154 * If the address was optimistic we inserted the route at the
6155 * start of our DAD process, so we don't need to do it again.
6156 * If the device was taken down in the middle of the DAD
6157 * cycle there is a race where we could get here without a
6158 * host route, so nothing to insert. That will be fixed when
6159 * the device is brought up.
95c385b4 6160 */
2d819d25 6161 if (ifp->rt && !rcu_access_pointer(ifp->rt->fib6_node)) {
afb1d4b5 6162 ip6_ins_rt(net, ifp->rt);
2d819d25
DA
6163 } else if (!ifp->rt && (ifp->idev->dev->flags & IFF_UP)) {
6164 pr_warn("BUG: Address %pI6c on device %s is missing its host route.\n",
6165 &ifp->addr, ifp->idev->dev->name);
6166 }
6167
1da177e4
LT
6168 if (ifp->idev->cnf.forwarding)
6169 addrconf_join_anycast(ifp);
7996c799 6170 if (!ipv6_addr_any(&ifp->peer_addr))
07758eb9
HL
6171 addrconf_prefix_route(&ifp->peer_addr, 128,
6172 ifp->rt_priority, ifp->idev->dev,
6173 0, 0, GFP_ATOMIC);
1da177e4
LT
6174 break;
6175 case RTM_DELADDR:
6176 if (ifp->idev->cnf.forwarding)
6177 addrconf_leave_anycast(ifp);
6178 addrconf_leave_solict(ifp->idev, &ifp->addr);
7996c799 6179 if (!ipv6_addr_any(&ifp->peer_addr)) {
8d1c802b 6180 struct fib6_info *rt;
caeaba79 6181
e7478dfc 6182 rt = addrconf_get_prefix_route(&ifp->peer_addr, 128,
2b2450ca
DA
6183 ifp->idev->dev, 0, 0,
6184 false);
8e3d5be7 6185 if (rt)
11dd74b3 6186 ip6_del_rt(net, rt, false);
caeaba79 6187 }
38bd10c4 6188 if (ifp->rt) {
11dd74b3 6189 ip6_del_rt(net, ifp->rt, false);
93531c67 6190 ifp->rt = NULL;
38bd10c4 6191 }
705f1c86 6192 rt_genid_bump_ipv6(net);
1da177e4
LT
6193 break;
6194 }
63998ac2 6195 atomic_inc(&net->ipv6.dev_addr_genid);
1da177e4
LT
6196}
6197
6198static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
6199{
1da177e4
LT
6200 if (likely(ifp->idev->dead == 0))
6201 __ipv6_ifa_notify(event, ifp);
1da177e4
LT
6202}
6203
6204#ifdef CONFIG_SYSCTL
6205
32927393
CH
6206static int addrconf_sysctl_forward(struct ctl_table *ctl, int write,
6207 void *buffer, size_t *lenp, loff_t *ppos)
1da177e4
LT
6208{
6209 int *valp = ctl->data;
6210 int val = *valp;
88af182e 6211 loff_t pos = *ppos;
fe2c6338 6212 struct ctl_table lctl;
1da177e4
LT
6213 int ret;
6214
013d97e9
FR
6215 /*
6216 * ctl->data points to idev->cnf.forwarding, we should
6217 * not modify it until we get the rtnl lock.
6218 */
6219 lctl = *ctl;
6220 lctl.data = &val;
6221
6222 ret = proc_dointvec(&lctl, write, buffer, lenp, ppos);
1da177e4 6223
c8fecf22 6224 if (write)
b325fddb 6225 ret = addrconf_fixup_forwarding(ctl, valp, val);
88af182e
EB
6226 if (ret)
6227 *ppos = pos;
1ab1457c 6228 return ret;
1da177e4
LT
6229}
6230
32927393
CH
6231static int addrconf_sysctl_mtu(struct ctl_table *ctl, int write,
6232 void *buffer, size_t *lenp, loff_t *ppos)
77751427
ML
6233{
6234 struct inet6_dev *idev = ctl->extra1;
6235 int min_mtu = IPV6_MIN_MTU;
6236 struct ctl_table lctl;
6237
6238 lctl = *ctl;
6239 lctl.extra1 = &min_mtu;
6240 lctl.extra2 = idev ? &idev->dev->mtu : NULL;
6241
6242 return proc_dointvec_minmax(&lctl, write, buffer, lenp, ppos);
6243}
6244
56d417b1
BH
6245static void dev_disable_change(struct inet6_dev *idev)
6246{
75538c2b
CW
6247 struct netdev_notifier_info info;
6248
56d417b1
BH
6249 if (!idev || !idev->dev)
6250 return;
6251
75538c2b 6252 netdev_notifier_info_init(&info, idev->dev);
56d417b1 6253 if (idev->cnf.disable_ipv6)
75538c2b 6254 addrconf_notify(NULL, NETDEV_DOWN, &info);
56d417b1 6255 else
75538c2b 6256 addrconf_notify(NULL, NETDEV_UP, &info);
56d417b1
BH
6257}
6258
6259static void addrconf_disable_change(struct net *net, __s32 newf)
6260{
6261 struct net_device *dev;
6262 struct inet6_dev *idev;
6263
03e4deff 6264 for_each_netdev(net, dev) {
56d417b1
BH
6265 idev = __in6_dev_get(dev);
6266 if (idev) {
6267 int changed = (!idev->cnf.disable_ipv6) ^ (!newf);
6268 idev->cnf.disable_ipv6 = newf;
6269 if (changed)
6270 dev_disable_change(idev);
6271 }
56d417b1 6272 }
56d417b1
BH
6273}
6274
013d97e9 6275static int addrconf_disable_ipv6(struct ctl_table *table, int *p, int newf)
56d417b1
BH
6276{
6277 struct net *net;
013d97e9
FR
6278 int old;
6279
6280 if (!rtnl_trylock())
6281 return restart_syscall();
56d417b1
BH
6282
6283 net = (struct net *)table->extra2;
013d97e9
FR
6284 old = *p;
6285 *p = newf;
56d417b1 6286
013d97e9
FR
6287 if (p == &net->ipv6.devconf_dflt->disable_ipv6) {
6288 rtnl_unlock();
56d417b1 6289 return 0;
88af182e 6290 }
56d417b1
BH
6291
6292 if (p == &net->ipv6.devconf_all->disable_ipv6) {
56d417b1
BH
6293 net->ipv6.devconf_dflt->disable_ipv6 = newf;
6294 addrconf_disable_change(net, newf);
013d97e9 6295 } else if ((!newf) ^ (!old))
56d417b1
BH
6296 dev_disable_change((struct inet6_dev *)table->extra1);
6297
6298 rtnl_unlock();
6299 return 0;
6300}
6301
32927393
CH
6302static int addrconf_sysctl_disable(struct ctl_table *ctl, int write,
6303 void *buffer, size_t *lenp, loff_t *ppos)
56d417b1
BH
6304{
6305 int *valp = ctl->data;
6306 int val = *valp;
88af182e 6307 loff_t pos = *ppos;
fe2c6338 6308 struct ctl_table lctl;
56d417b1
BH
6309 int ret;
6310
013d97e9
FR
6311 /*
6312 * ctl->data points to idev->cnf.disable_ipv6, we should
6313 * not modify it until we get the rtnl lock.
6314 */
6315 lctl = *ctl;
6316 lctl.data = &val;
6317
6318 ret = proc_dointvec(&lctl, write, buffer, lenp, ppos);
56d417b1
BH
6319
6320 if (write)
6321 ret = addrconf_disable_ipv6(ctl, valp, val);
88af182e
EB
6322 if (ret)
6323 *ppos = pos;
56d417b1
BH
6324 return ret;
6325}
6326
32927393
CH
6327static int addrconf_sysctl_proxy_ndp(struct ctl_table *ctl, int write,
6328 void *buffer, size_t *lenp, loff_t *ppos)
c92d5491 6329{
6330 int *valp = ctl->data;
6331 int ret;
6332 int old, new;
6333
6334 old = *valp;
6335 ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
6336 new = *valp;
6337
6338 if (write && old != new) {
6339 struct net *net = ctl->extra2;
6340
6341 if (!rtnl_trylock())
6342 return restart_syscall();
6343
6344 if (valp == &net->ipv6.devconf_dflt->proxy_ndp)
85b3daad
DA
6345 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF,
6346 NETCONFA_PROXY_NEIGH,
c92d5491 6347 NETCONFA_IFINDEX_DEFAULT,
6348 net->ipv6.devconf_dflt);
6349 else if (valp == &net->ipv6.devconf_all->proxy_ndp)
85b3daad
DA
6350 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF,
6351 NETCONFA_PROXY_NEIGH,
c92d5491 6352 NETCONFA_IFINDEX_ALL,
6353 net->ipv6.devconf_all);
6354 else {
6355 struct inet6_dev *idev = ctl->extra1;
6356
85b3daad
DA
6357 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF,
6358 NETCONFA_PROXY_NEIGH,
c92d5491 6359 idev->dev->ifindex,
6360 &idev->cnf);
6361 }
6362 rtnl_unlock();
6363 }
6364
6365 return ret;
6366}
6367
d35a00b8 6368static int addrconf_sysctl_addr_gen_mode(struct ctl_table *ctl, int write,
32927393 6369 void *buffer, size_t *lenp,
d35a00b8
FJ
6370 loff_t *ppos)
6371{
6372 int ret = 0;
c6dbf7aa 6373 u32 new_val;
d35a00b8
FJ
6374 struct inet6_dev *idev = (struct inet6_dev *)ctl->extra1;
6375 struct net *net = (struct net *)ctl->extra2;
c6dbf7aa
SD
6376 struct ctl_table tmp = {
6377 .data = &new_val,
6378 .maxlen = sizeof(new_val),
6379 .mode = ctl->mode,
6380 };
d35a00b8 6381
8c171d6c
FJ
6382 if (!rtnl_trylock())
6383 return restart_syscall();
6384
c6dbf7aa 6385 new_val = *((u32 *)ctl->data);
d35a00b8 6386
c6dbf7aa
SD
6387 ret = proc_douintvec(&tmp, write, buffer, lenp, ppos);
6388 if (ret != 0)
6389 goto out;
d35a00b8 6390
c6dbf7aa 6391 if (write) {
8c171d6c
FJ
6392 if (check_addr_gen_mode(new_val) < 0) {
6393 ret = -EINVAL;
6394 goto out;
6395 }
d35a00b8 6396
c6dbf7aa 6397 if (idev) {
8c171d6c
FJ
6398 if (check_stable_privacy(idev, net, new_val) < 0) {
6399 ret = -EINVAL;
6400 goto out;
6401 }
d35a00b8
FJ
6402
6403 if (idev->cnf.addr_gen_mode != new_val) {
6404 idev->cnf.addr_gen_mode = new_val;
23ca0c2c 6405 addrconf_init_auto_addrs(idev->dev);
d35a00b8 6406 }
f24c5987
SD
6407 } else if (&net->ipv6.devconf_all->addr_gen_mode == ctl->data) {
6408 struct net_device *dev;
6409
6410 net->ipv6.devconf_dflt->addr_gen_mode = new_val;
6411 for_each_netdev(net, dev) {
6412 idev = __in6_dev_get(dev);
6413 if (idev &&
6414 idev->cnf.addr_gen_mode != new_val) {
6415 idev->cnf.addr_gen_mode = new_val;
23ca0c2c 6416 addrconf_init_auto_addrs(idev->dev);
f24c5987
SD
6417 }
6418 }
d35a00b8 6419 }
c6dbf7aa
SD
6420
6421 *((u32 *)ctl->data) = new_val;
d35a00b8
FJ
6422 }
6423
8c171d6c
FJ
6424out:
6425 rtnl_unlock();
6426
d35a00b8
FJ
6427 return ret;
6428}
6429
3d1bec99 6430static int addrconf_sysctl_stable_secret(struct ctl_table *ctl, int write,
32927393 6431 void *buffer, size_t *lenp,
3d1bec99
HFS
6432 loff_t *ppos)
6433{
6434 int err;
6435 struct in6_addr addr;
6436 char str[IPV6_MAX_STRLEN];
6437 struct ctl_table lctl = *ctl;
622c81d5 6438 struct net *net = ctl->extra2;
3d1bec99
HFS
6439 struct ipv6_stable_secret *secret = ctl->data;
6440
622c81d5
HFS
6441 if (&net->ipv6.devconf_all->stable_secret == ctl->data)
6442 return -EIO;
6443
3d1bec99
HFS
6444 lctl.maxlen = IPV6_MAX_STRLEN;
6445 lctl.data = str;
6446
6447 if (!rtnl_trylock())
6448 return restart_syscall();
6449
6450 if (!write && !secret->initialized) {
6451 err = -EIO;
6452 goto out;
6453 }
6454
5449a5ca
WC
6455 err = snprintf(str, sizeof(str), "%pI6", &secret->secret);
6456 if (err >= sizeof(str)) {
6457 err = -EIO;
6458 goto out;
3d1bec99
HFS
6459 }
6460
6461 err = proc_dostring(&lctl, write, buffer, lenp, ppos);
6462 if (err || !write)
6463 goto out;
6464
6465 if (in6_pton(str, -1, addr.in6_u.u6_addr8, -1, NULL) != 1) {
6466 err = -EIO;
6467 goto out;
6468 }
6469
6470 secret->initialized = true;
6471 secret->secret = addr;
6472
622c81d5
HFS
6473 if (&net->ipv6.devconf_dflt->stable_secret == ctl->data) {
6474 struct net_device *dev;
6475
6476 for_each_netdev(net, dev) {
6477 struct inet6_dev *idev = __in6_dev_get(dev);
6478
6479 if (idev) {
d35a00b8 6480 idev->cnf.addr_gen_mode =
622c81d5
HFS
6481 IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
6482 }
6483 }
6484 } else {
6485 struct inet6_dev *idev = ctl->extra1;
6486
d35a00b8 6487 idev->cnf.addr_gen_mode = IN6_ADDR_GEN_MODE_STABLE_PRIVACY;
622c81d5
HFS
6488 }
6489
3d1bec99
HFS
6490out:
6491 rtnl_unlock();
6492
6493 return err;
6494}
c92d5491 6495
35103d11
AG
6496static
6497int addrconf_sysctl_ignore_routes_with_linkdown(struct ctl_table *ctl,
32927393 6498 int write, void *buffer,
35103d11
AG
6499 size_t *lenp,
6500 loff_t *ppos)
6501{
6502 int *valp = ctl->data;
6503 int val = *valp;
6504 loff_t pos = *ppos;
6505 struct ctl_table lctl;
6506 int ret;
6507
6508 /* ctl->data points to idev->cnf.ignore_routes_when_linkdown
6509 * we should not modify it until we get the rtnl lock.
6510 */
6511 lctl = *ctl;
6512 lctl.data = &val;
6513
6514 ret = proc_dointvec(&lctl, write, buffer, lenp, ppos);
6515
6516 if (write)
6517 ret = addrconf_fixup_linkdown(ctl, valp, val);
6518 if (ret)
6519 *ppos = pos;
6520 return ret;
6521}
6522
df789fe7
DF
6523static
6524void addrconf_set_nopolicy(struct rt6_info *rt, int action)
6525{
6526 if (rt) {
6527 if (action)
6528 rt->dst.flags |= DST_NOPOLICY;
6529 else
6530 rt->dst.flags &= ~DST_NOPOLICY;
6531 }
6532}
6533
6534static
6535void addrconf_disable_policy_idev(struct inet6_dev *idev, int val)
6536{
6537 struct inet6_ifaddr *ifa;
6538
6539 read_lock_bh(&idev->lock);
6540 list_for_each_entry(ifa, &idev->addr_list, if_list) {
6541 spin_lock(&ifa->lock);
6542 if (ifa->rt) {
f88d8ea6 6543 /* host routes only use builtin fib6_nh */
1cf844c7 6544 struct fib6_nh *nh = ifa->rt->fib6_nh;
df789fe7
DF
6545 int cpu;
6546
66f5d6ce 6547 rcu_read_lock();
3b6761d1 6548 ifa->rt->dst_nopolicy = val ? true : false;
f40b6ae2 6549 if (nh->rt6i_pcpu) {
df789fe7
DF
6550 for_each_possible_cpu(cpu) {
6551 struct rt6_info **rtp;
6552
f40b6ae2 6553 rtp = per_cpu_ptr(nh->rt6i_pcpu, cpu);
df789fe7
DF
6554 addrconf_set_nopolicy(*rtp, val);
6555 }
6556 }
66f5d6ce 6557 rcu_read_unlock();
df789fe7
DF
6558 }
6559 spin_unlock(&ifa->lock);
6560 }
6561 read_unlock_bh(&idev->lock);
6562}
6563
6564static
6565int addrconf_disable_policy(struct ctl_table *ctl, int *valp, int val)
6566{
6567 struct inet6_dev *idev;
6568 struct net *net;
6569
6570 if (!rtnl_trylock())
6571 return restart_syscall();
6572
6573 *valp = val;
6574
6575 net = (struct net *)ctl->extra2;
6576 if (valp == &net->ipv6.devconf_dflt->disable_policy) {
6577 rtnl_unlock();
6578 return 0;
6579 }
6580
6581 if (valp == &net->ipv6.devconf_all->disable_policy) {
6582 struct net_device *dev;
6583
6584 for_each_netdev(net, dev) {
6585 idev = __in6_dev_get(dev);
6586 if (idev)
6587 addrconf_disable_policy_idev(idev, val);
6588 }
6589 } else {
6590 idev = (struct inet6_dev *)ctl->extra1;
6591 addrconf_disable_policy_idev(idev, val);
6592 }
6593
6594 rtnl_unlock();
6595 return 0;
6596}
6597
32927393
CH
6598static int addrconf_sysctl_disable_policy(struct ctl_table *ctl, int write,
6599 void *buffer, size_t *lenp, loff_t *ppos)
df789fe7
DF
6600{
6601 int *valp = ctl->data;
6602 int val = *valp;
6603 loff_t pos = *ppos;
6604 struct ctl_table lctl;
6605 int ret;
6606
6607 lctl = *ctl;
6608 lctl.data = &val;
6609 ret = proc_dointvec(&lctl, write, buffer, lenp, ppos);
6610
6611 if (write && (*valp != val))
6612 ret = addrconf_disable_policy(ctl, valp, val);
6613
6614 if (ret)
6615 *ppos = pos;
6616
6617 return ret;
6618}
6619
cb4a4c69 6620static int minus_one = -1;
cb9e684e 6621static const int two_five_five = 255;
176f716c 6622static u32 ioam6_if_id_max = U16_MAX;
cb9e684e 6623
607ea7cd 6624static const struct ctl_table addrconf_sysctl[] = {
5df1f77f
KK
6625 {
6626 .procname = "forwarding",
6627 .data = &ipv6_devconf.forwarding,
6628 .maxlen = sizeof(int),
6629 .mode = 0644,
6630 .proc_handler = addrconf_sysctl_forward,
6631 },
6632 {
6633 .procname = "hop_limit",
6634 .data = &ipv6_devconf.hop_limit,
6635 .maxlen = sizeof(int),
6636 .mode = 0644,
cb9e684e 6637 .proc_handler = proc_dointvec_minmax,
eec4844f 6638 .extra1 = (void *)SYSCTL_ONE,
cb9e684e 6639 .extra2 = (void *)&two_five_five,
5df1f77f
KK
6640 },
6641 {
6642 .procname = "mtu",
6643 .data = &ipv6_devconf.mtu6,
6644 .maxlen = sizeof(int),
6645 .mode = 0644,
6646 .proc_handler = addrconf_sysctl_mtu,
6647 },
6648 {
6649 .procname = "accept_ra",
6650 .data = &ipv6_devconf.accept_ra,
6651 .maxlen = sizeof(int),
6652 .mode = 0644,
6653 .proc_handler = proc_dointvec,
6654 },
6655 {
6656 .procname = "accept_redirects",
6657 .data = &ipv6_devconf.accept_redirects,
6658 .maxlen = sizeof(int),
6659 .mode = 0644,
6660 .proc_handler = proc_dointvec,
6661 },
6662 {
6663 .procname = "autoconf",
6664 .data = &ipv6_devconf.autoconf,
6665 .maxlen = sizeof(int),
6666 .mode = 0644,
6667 .proc_handler = proc_dointvec,
6668 },
6669 {
6670 .procname = "dad_transmits",
6671 .data = &ipv6_devconf.dad_transmits,
6672 .maxlen = sizeof(int),
6673 .mode = 0644,
6674 .proc_handler = proc_dointvec,
6675 },
6676 {
6677 .procname = "router_solicitations",
6678 .data = &ipv6_devconf.rtr_solicits,
6679 .maxlen = sizeof(int),
6680 .mode = 0644,
cb4a4c69
6681 .proc_handler = proc_dointvec_minmax,
6682 .extra1 = &minus_one,
5df1f77f
KK
6683 },
6684 {
6685 .procname = "router_solicitation_interval",
6686 .data = &ipv6_devconf.rtr_solicit_interval,
6687 .maxlen = sizeof(int),
6688 .mode = 0644,
6689 .proc_handler = proc_dointvec_jiffies,
6690 },
bd11f074
6691 {
6692 .procname = "router_solicitation_max_interval",
6693 .data = &ipv6_devconf.rtr_solicit_max_interval,
6694 .maxlen = sizeof(int),
6695 .mode = 0644,
6696 .proc_handler = proc_dointvec_jiffies,
6697 },
5df1f77f
KK
6698 {
6699 .procname = "router_solicitation_delay",
6700 .data = &ipv6_devconf.rtr_solicit_delay,
6701 .maxlen = sizeof(int),
6702 .mode = 0644,
6703 .proc_handler = proc_dointvec_jiffies,
6704 },
6705 {
6706 .procname = "force_mld_version",
6707 .data = &ipv6_devconf.force_mld_version,
6708 .maxlen = sizeof(int),
6709 .mode = 0644,
6710 .proc_handler = proc_dointvec,
6711 },
6712 {
6713 .procname = "mldv1_unsolicited_report_interval",
6714 .data =
6715 &ipv6_devconf.mldv1_unsolicited_report_interval,
6716 .maxlen = sizeof(int),
6717 .mode = 0644,
6718 .proc_handler = proc_dointvec_ms_jiffies,
6719 },
6720 {
6721 .procname = "mldv2_unsolicited_report_interval",
6722 .data =
6723 &ipv6_devconf.mldv2_unsolicited_report_interval,
6724 .maxlen = sizeof(int),
6725 .mode = 0644,
6726 .proc_handler = proc_dointvec_ms_jiffies,
6727 },
6728 {
6729 .procname = "use_tempaddr",
6730 .data = &ipv6_devconf.use_tempaddr,
6731 .maxlen = sizeof(int),
6732 .mode = 0644,
6733 .proc_handler = proc_dointvec,
6734 },
6735 {
6736 .procname = "temp_valid_lft",
6737 .data = &ipv6_devconf.temp_valid_lft,
6738 .maxlen = sizeof(int),
6739 .mode = 0644,
6740 .proc_handler = proc_dointvec,
6741 },
6742 {
6743 .procname = "temp_prefered_lft",
6744 .data = &ipv6_devconf.temp_prefered_lft,
6745 .maxlen = sizeof(int),
6746 .mode = 0644,
6747 .proc_handler = proc_dointvec,
6748 },
6749 {
6750 .procname = "regen_max_retry",
6751 .data = &ipv6_devconf.regen_max_retry,
6752 .maxlen = sizeof(int),
6753 .mode = 0644,
6754 .proc_handler = proc_dointvec,
6755 },
6756 {
6757 .procname = "max_desync_factor",
6758 .data = &ipv6_devconf.max_desync_factor,
6759 .maxlen = sizeof(int),
6760 .mode = 0644,
6761 .proc_handler = proc_dointvec,
6762 },
6763 {
6764 .procname = "max_addresses",
6765 .data = &ipv6_devconf.max_addresses,
6766 .maxlen = sizeof(int),
6767 .mode = 0644,
6768 .proc_handler = proc_dointvec,
6769 },
6770 {
6771 .procname = "accept_ra_defrtr",
6772 .data = &ipv6_devconf.accept_ra_defrtr,
6773 .maxlen = sizeof(int),
6774 .mode = 0644,
6775 .proc_handler = proc_dointvec,
6776 },
6b2e04bc
PC
6777 {
6778 .procname = "ra_defrtr_metric",
6779 .data = &ipv6_devconf.ra_defrtr_metric,
6780 .maxlen = sizeof(u32),
6781 .mode = 0644,
6782 .proc_handler = proc_douintvec_minmax,
6783 .extra1 = (void *)SYSCTL_ONE,
6784 },
5df1f77f
KK
6785 {
6786 .procname = "accept_ra_min_hop_limit",
6787 .data = &ipv6_devconf.accept_ra_min_hop_limit,
6788 .maxlen = sizeof(int),
6789 .mode = 0644,
6790 .proc_handler = proc_dointvec,
6791 },
6792 {
6793 .procname = "accept_ra_pinfo",
6794 .data = &ipv6_devconf.accept_ra_pinfo,
6795 .maxlen = sizeof(int),
6796 .mode = 0644,
6797 .proc_handler = proc_dointvec,
6798 },
930d6ff2 6799#ifdef CONFIG_IPV6_ROUTER_PREF
5df1f77f
KK
6800 {
6801 .procname = "accept_ra_rtr_pref",
6802 .data = &ipv6_devconf.accept_ra_rtr_pref,
6803 .maxlen = sizeof(int),
6804 .mode = 0644,
6805 .proc_handler = proc_dointvec,
6806 },
6807 {
6808 .procname = "router_probe_interval",
6809 .data = &ipv6_devconf.rtr_probe_interval,
6810 .maxlen = sizeof(int),
6811 .mode = 0644,
6812 .proc_handler = proc_dointvec_jiffies,
6813 },
fa03ef38 6814#ifdef CONFIG_IPV6_ROUTE_INFO
bbea124b
JS
6815 {
6816 .procname = "accept_ra_rt_info_min_plen",
6817 .data = &ipv6_devconf.accept_ra_rt_info_min_plen,
6818 .maxlen = sizeof(int),
6819 .mode = 0644,
6820 .proc_handler = proc_dointvec,
6821 },
5df1f77f
KK
6822 {
6823 .procname = "accept_ra_rt_info_max_plen",
6824 .data = &ipv6_devconf.accept_ra_rt_info_max_plen,
6825 .maxlen = sizeof(int),
6826 .mode = 0644,
6827 .proc_handler = proc_dointvec,
6828 },
09c884d4 6829#endif
930d6ff2 6830#endif
5df1f77f
KK
6831 {
6832 .procname = "proxy_ndp",
6833 .data = &ipv6_devconf.proxy_ndp,
6834 .maxlen = sizeof(int),
6835 .mode = 0644,
6836 .proc_handler = addrconf_sysctl_proxy_ndp,
6837 },
6838 {
6839 .procname = "accept_source_route",
6840 .data = &ipv6_devconf.accept_source_route,
6841 .maxlen = sizeof(int),
6842 .mode = 0644,
6843 .proc_handler = proc_dointvec,
6844 },
95c385b4 6845#ifdef CONFIG_IPV6_OPTIMISTIC_DAD
5df1f77f
KK
6846 {
6847 .procname = "optimistic_dad",
6848 .data = &ipv6_devconf.optimistic_dad,
6849 .maxlen = sizeof(int),
6850 .mode = 0644,
6851 .proc_handler = proc_dointvec,
6852 },
6853 {
6854 .procname = "use_optimistic",
6855 .data = &ipv6_devconf.use_optimistic,
6856 .maxlen = sizeof(int),
6857 .mode = 0644,
6858 .proc_handler = proc_dointvec,
6859 },
7bc570c8
YH
6860#endif
6861#ifdef CONFIG_IPV6_MROUTE
5df1f77f
KK
6862 {
6863 .procname = "mc_forwarding",
6864 .data = &ipv6_devconf.mc_forwarding,
6865 .maxlen = sizeof(int),
6866 .mode = 0444,
6867 .proc_handler = proc_dointvec,
6868 },
95c385b4 6869#endif
5df1f77f
KK
6870 {
6871 .procname = "disable_ipv6",
6872 .data = &ipv6_devconf.disable_ipv6,
6873 .maxlen = sizeof(int),
6874 .mode = 0644,
6875 .proc_handler = addrconf_sysctl_disable,
6876 },
6877 {
6878 .procname = "accept_dad",
6879 .data = &ipv6_devconf.accept_dad,
6880 .maxlen = sizeof(int),
6881 .mode = 0644,
6882 .proc_handler = proc_dointvec,
6883 },
6884 {
6885 .procname = "force_tllao",
6886 .data = &ipv6_devconf.force_tllao,
6887 .maxlen = sizeof(int),
6888 .mode = 0644,
6889 .proc_handler = proc_dointvec
6890 },
6891 {
6892 .procname = "ndisc_notify",
6893 .data = &ipv6_devconf.ndisc_notify,
6894 .maxlen = sizeof(int),
6895 .mode = 0644,
6896 .proc_handler = proc_dointvec
6897 },
6898 {
6899 .procname = "suppress_frag_ndisc",
6900 .data = &ipv6_devconf.suppress_frag_ndisc,
6901 .maxlen = sizeof(int),
6902 .mode = 0644,
6903 .proc_handler = proc_dointvec
6904 },
6905 {
6906 .procname = "accept_ra_from_local",
6907 .data = &ipv6_devconf.accept_ra_from_local,
6908 .maxlen = sizeof(int),
6909 .mode = 0644,
6910 .proc_handler = proc_dointvec,
6911 },
6912 {
6913 .procname = "accept_ra_mtu",
6914 .data = &ipv6_devconf.accept_ra_mtu,
6915 .maxlen = sizeof(int),
6916 .mode = 0644,
6917 .proc_handler = proc_dointvec,
6918 },
6919 {
6920 .procname = "stable_secret",
6921 .data = &ipv6_devconf.stable_secret,
6922 .maxlen = IPV6_MAX_STRLEN,
6923 .mode = 0600,
6924 .proc_handler = addrconf_sysctl_stable_secret,
6925 },
6926 {
6927 .procname = "use_oif_addrs_only",
6928 .data = &ipv6_devconf.use_oif_addrs_only,
6929 .maxlen = sizeof(int),
6930 .mode = 0644,
6931 .proc_handler = proc_dointvec,
6932 },
6933 {
6934 .procname = "ignore_routes_with_linkdown",
6935 .data = &ipv6_devconf.ignore_routes_with_linkdown,
6936 .maxlen = sizeof(int),
6937 .mode = 0644,
6938 .proc_handler = addrconf_sysctl_ignore_routes_with_linkdown,
6939 },
6940 {
6941 .procname = "drop_unicast_in_l2_multicast",
6942 .data = &ipv6_devconf.drop_unicast_in_l2_multicast,
6943 .maxlen = sizeof(int),
6944 .mode = 0644,
6945 .proc_handler = proc_dointvec,
6946 },
6947 {
6948 .procname = "drop_unsolicited_na",
6949 .data = &ipv6_devconf.drop_unsolicited_na,
6950 .maxlen = sizeof(int),
6951 .mode = 0644,
6952 .proc_handler = proc_dointvec,
6953 },
6954 {
6955 .procname = "keep_addr_on_down",
6956 .data = &ipv6_devconf.keep_addr_on_down,
6957 .maxlen = sizeof(int),
6958 .mode = 0644,
6959 .proc_handler = proc_dointvec,
6960
6961 },
1ababeba
DL
6962 {
6963 .procname = "seg6_enabled",
6964 .data = &ipv6_devconf.seg6_enabled,
6965 .maxlen = sizeof(int),
6966 .mode = 0644,
6967 .proc_handler = proc_dointvec,
6968 },
bf355b8d
DL
6969#ifdef CONFIG_IPV6_SEG6_HMAC
6970 {
6971 .procname = "seg6_require_hmac",
6972 .data = &ipv6_devconf.seg6_require_hmac,
6973 .maxlen = sizeof(int),
6974 .mode = 0644,
6975 .proc_handler = proc_dointvec,
6976 },
6977#endif
adc176c5
EN
6978 {
6979 .procname = "enhanced_dad",
6980 .data = &ipv6_devconf.enhanced_dad,
6981 .maxlen = sizeof(int),
6982 .mode = 0644,
6983 .proc_handler = proc_dointvec,
6984 },
d35a00b8 6985 {
12e64b3b
RY
6986 .procname = "addr_gen_mode",
6987 .data = &ipv6_devconf.addr_gen_mode,
6988 .maxlen = sizeof(int),
6989 .mode = 0644,
d35a00b8
FJ
6990 .proc_handler = addrconf_sysctl_addr_gen_mode,
6991 },
df789fe7
DF
6992 {
6993 .procname = "disable_policy",
6994 .data = &ipv6_devconf.disable_policy,
6995 .maxlen = sizeof(int),
6996 .mode = 0644,
6997 .proc_handler = addrconf_sysctl_disable_policy,
6998 },
2210d6b2
6999 {
7000 .procname = "ndisc_tclass",
7001 .data = &ipv6_devconf.ndisc_tclass,
7002 .maxlen = sizeof(int),
7003 .mode = 0644,
7004 .proc_handler = proc_dointvec_minmax,
eec4844f 7005 .extra1 = (void *)SYSCTL_ZERO,
2210d6b2
7006 .extra2 = (void *)&two_five_five,
7007 },
8610c7c6
AA
7008 {
7009 .procname = "rpl_seg_enabled",
7010 .data = &ipv6_devconf.rpl_seg_enabled,
7011 .maxlen = sizeof(int),
7012 .mode = 0644,
7013 .proc_handler = proc_dointvec,
7014 },
9ee11f0f
JI
7015 {
7016 .procname = "ioam6_enabled",
7017 .data = &ipv6_devconf.ioam6_enabled,
7018 .maxlen = sizeof(u8),
7019 .mode = 0644,
7020 .proc_handler = proc_dou8vec_minmax,
7021 .extra1 = (void *)SYSCTL_ZERO,
7022 .extra2 = (void *)SYSCTL_ONE,
7023 },
7024 {
7025 .procname = "ioam6_id",
7026 .data = &ipv6_devconf.ioam6_id,
7027 .maxlen = sizeof(u32),
7028 .mode = 0644,
7029 .proc_handler = proc_douintvec_minmax,
7030 .extra1 = (void *)SYSCTL_ZERO,
7031 .extra2 = (void *)&ioam6_if_id_max,
7032 },
7033 {
7034 .procname = "ioam6_id_wide",
7035 .data = &ipv6_devconf.ioam6_id_wide,
7036 .maxlen = sizeof(u32),
7037 .mode = 0644,
7038 .proc_handler = proc_douintvec,
7039 },
18ac597a
JP
7040 {
7041 .procname = "ndisc_evict_nocarrier",
7042 .data = &ipv6_devconf.ndisc_evict_nocarrier,
7043 .maxlen = sizeof(u8),
7044 .mode = 0644,
7045 .proc_handler = proc_dou8vec_minmax,
7046 .extra1 = (void *)SYSCTL_ZERO,
7047 .extra2 = (void *)SYSCTL_ONE,
7048 },
f9a2fb73 7049 {
3e0b8f52
AA
7050 .procname = "accept_untracked_na",
7051 .data = &ipv6_devconf.accept_untracked_na,
f9a2fb73
AA
7052 .maxlen = sizeof(int),
7053 .mode = 0644,
b66eb3a6
JP
7054 .proc_handler = proc_dointvec_minmax,
7055 .extra1 = SYSCTL_ZERO,
7056 .extra2 = SYSCTL_TWO,
f9a2fb73 7057 },
5df1f77f
KK
7058 {
7059 /* sentinel */
7060 }
1da177e4
LT
7061};
7062
bff16c2f 7063static int __addrconf_sysctl_register(struct net *net, char *dev_name,
f8572d8f 7064 struct inet6_dev *idev, struct ipv6_devconf *p)
1da177e4 7065{
29c994e3 7066 int i, ifindex;
607ea7cd 7067 struct ctl_table *table;
6105e293 7068 char path[sizeof("net/ipv6/conf/") + IFNAMSIZ];
1dab6222 7069
425b9c7f 7070 table = kmemdup(addrconf_sysctl, sizeof(addrconf_sysctl), GFP_KERNEL_ACCOUNT);
607ea7cd 7071 if (!table)
f68635e6
PE
7072 goto out;
7073
607ea7cd
KK
7074 for (i = 0; table[i].data; i++) {
7075 table[i].data += (char *)p - (char *)&ipv6_devconf;
cb9e684e
7076 /* If one of these is already set, then it is not safe to
7077 * overwrite either of them: this makes proc_dointvec_minmax
7078 * usable.
7079 */
7080 if (!table[i].extra1 && !table[i].extra2) {
7081 table[i].extra1 = idev; /* embedded; no ref */
7082 table[i].extra2 = net;
7083 }
1da177e4 7084 }
1da177e4 7085
6105e293 7086 snprintf(path, sizeof(path), "net/ipv6/conf/%s", dev_name);
1da177e4 7087
607ea7cd
KK
7088 p->sysctl_header = register_net_sysctl(net, path, table);
7089 if (!p->sysctl_header)
6105e293 7090 goto free;
f68635e6 7091
29c994e3
ND
7092 if (!strcmp(dev_name, "all"))
7093 ifindex = NETCONFA_IFINDEX_ALL;
7094 else if (!strcmp(dev_name, "default"))
7095 ifindex = NETCONFA_IFINDEX_DEFAULT;
7096 else
7097 ifindex = idev->dev->ifindex;
85b3daad
DA
7098 inet6_netconf_notify_devconf(net, RTM_NEWNETCONF, NETCONFA_ALL,
7099 ifindex, p);
95897312 7100 return 0;
1da177e4 7101
f68635e6 7102free:
607ea7cd 7103 kfree(table);
f68635e6 7104out:
95897312 7105 return -ENOBUFS;
1da177e4
LT
7106}
7107
23452170
DA
7108static void __addrconf_sysctl_unregister(struct net *net,
7109 struct ipv6_devconf *p, int ifindex)
408c4768 7110{
607ea7cd 7111 struct ctl_table *table;
408c4768 7112
607ea7cd 7113 if (!p->sysctl_header)
408c4768
PE
7114 return;
7115
607ea7cd
KK
7116 table = p->sysctl_header->ctl_table_arg;
7117 unregister_net_sysctl_table(p->sysctl_header);
7118 p->sysctl_header = NULL;
7119 kfree(table);
23452170
DA
7120
7121 inet6_netconf_notify_devconf(net, RTM_DELNETCONF, 0, ifindex, NULL);
408c4768
PE
7122}
7123
a317a2f1 7124static int addrconf_sysctl_register(struct inet6_dev *idev)
f52295a9 7125{
a317a2f1
WC
7126 int err;
7127
7128 if (!sysctl_dev_name_is_allowed(idev->dev->name))
7129 return -EINVAL;
7130
7131 err = neigh_sysctl_register(idev->dev, idev->nd_parms,
7132 &ndisc_ifinfo_sysctl_change);
7133 if (err)
7134 return err;
7135 err = __addrconf_sysctl_register(dev_net(idev->dev), idev->dev->name,
7136 idev, &idev->cnf);
7137 if (err)
7138 neigh_sysctl_unregister(idev->nd_parms);
7139
7140 return err;
f52295a9
PE
7141}
7142
408c4768 7143static void addrconf_sysctl_unregister(struct inet6_dev *idev)
1da177e4 7144{
23452170
DA
7145 __addrconf_sysctl_unregister(dev_net(idev->dev), &idev->cnf,
7146 idev->dev->ifindex);
408c4768 7147 neigh_sysctl_unregister(idev->nd_parms);
1da177e4
LT
7148}
7149
7150
7151#endif
7152
2c8c1e72 7153static int __net_init addrconf_init_net(struct net *net)
e0da5a48 7154{
a79ca223 7155 int err = -ENOMEM;
e0da5a48
PE
7156 struct ipv6_devconf *all, *dflt;
7157
21a216a8 7158 spin_lock_init(&net->ipv6.addrconf_hash_lock);
8805d13f 7159 INIT_DEFERRABLE_WORK(&net->ipv6.addr_chk_work, addrconf_verify_work);
21a216a8
ED
7160 net->ipv6.inet6_addr_lst = kcalloc(IN6_ADDR_HSIZE,
7161 sizeof(struct hlist_head),
7162 GFP_KERNEL);
7163 if (!net->ipv6.inet6_addr_lst)
7164 goto err_alloc_addr;
7165
a79ca223 7166 all = kmemdup(&ipv6_devconf, sizeof(ipv6_devconf), GFP_KERNEL);
63159f29 7167 if (!all)
a79ca223 7168 goto err_alloc_all;
e0da5a48 7169
a79ca223 7170 dflt = kmemdup(&ipv6_devconf_dflt, sizeof(ipv6_devconf_dflt), GFP_KERNEL);
63159f29 7171 if (!dflt)
a79ca223 7172 goto err_alloc_dflt;
e0da5a48 7173
a5612ca1
KI
7174 if (!net_eq(net, &init_net)) {
7175 switch (net_inherit_devconf()) {
9efd6a3c
ND
7176 case 1: /* copy from init_net */
7177 memcpy(all, init_net.ipv6.devconf_all,
7178 sizeof(ipv6_devconf));
7179 memcpy(dflt, init_net.ipv6.devconf_dflt,
7180 sizeof(ipv6_devconf_dflt));
7181 break;
7182 case 3: /* copy from the current netns */
7183 memcpy(all, current->nsproxy->net_ns->ipv6.devconf_all,
7184 sizeof(ipv6_devconf));
7185 memcpy(dflt,
7186 current->nsproxy->net_ns->ipv6.devconf_dflt,
7187 sizeof(ipv6_devconf_dflt));
7188 break;
7189 case 0:
7190 case 2:
7191 /* use compiled values */
7192 break;
7193 }
856c395c
CW
7194 }
7195
a79ca223
HZ
7196 /* these will be inherited by all namespaces */
7197 dflt->autoconf = ipv6_defaults.autoconf;
7198 dflt->disable_ipv6 = ipv6_defaults.disable_ipv6;
e0da5a48 7199
3d1bec99
HFS
7200 dflt->stable_secret.initialized = false;
7201 all->stable_secret.initialized = false;
7202
e0da5a48
PE
7203 net->ipv6.devconf_all = all;
7204 net->ipv6.devconf_dflt = dflt;
7205
7206#ifdef CONFIG_SYSCTL
f8572d8f 7207 err = __addrconf_sysctl_register(net, "all", NULL, all);
e0da5a48
PE
7208 if (err < 0)
7209 goto err_reg_all;
7210
f8572d8f 7211 err = __addrconf_sysctl_register(net, "default", NULL, dflt);
e0da5a48
PE
7212 if (err < 0)
7213 goto err_reg_dflt;
7214#endif
7215 return 0;
7216
7217#ifdef CONFIG_SYSCTL
7218err_reg_dflt:
23452170 7219 __addrconf_sysctl_unregister(net, all, NETCONFA_IFINDEX_ALL);
e0da5a48
PE
7220err_reg_all:
7221 kfree(dflt);
1ca69520 7222 net->ipv6.devconf_dflt = NULL;
e0da5a48
PE
7223#endif
7224err_alloc_dflt:
7225 kfree(all);
1ca69520 7226 net->ipv6.devconf_all = NULL;
e0da5a48 7227err_alloc_all:
21a216a8
ED
7228 kfree(net->ipv6.inet6_addr_lst);
7229err_alloc_addr:
e0da5a48
PE
7230 return err;
7231}
7232
2c8c1e72 7233static void __net_exit addrconf_exit_net(struct net *net)
e0da5a48 7234{
21a216a8
ED
7235 int i;
7236
e0da5a48 7237#ifdef CONFIG_SYSCTL
23452170
DA
7238 __addrconf_sysctl_unregister(net, net->ipv6.devconf_dflt,
7239 NETCONFA_IFINDEX_DEFAULT);
7240 __addrconf_sysctl_unregister(net, net->ipv6.devconf_all,
7241 NETCONFA_IFINDEX_ALL);
e0da5a48 7242#endif
73cf0e92 7243 kfree(net->ipv6.devconf_dflt);
7d9b1b57 7244 net->ipv6.devconf_dflt = NULL;
73cf0e92 7245 kfree(net->ipv6.devconf_all);
7d9b1b57 7246 net->ipv6.devconf_all = NULL;
21a216a8 7247
be6b41c1 7248 cancel_delayed_work_sync(&net->ipv6.addr_chk_work);
21a216a8
ED
7249 /*
7250 * Check hash table, then free it.
7251 */
7252 for (i = 0; i < IN6_ADDR_HSIZE; i++)
7253 WARN_ON_ONCE(!hlist_empty(&net->ipv6.inet6_addr_lst[i]));
7254
7255 kfree(net->ipv6.inet6_addr_lst);
7256 net->ipv6.inet6_addr_lst = NULL;
e0da5a48
PE
7257}
7258
7259static struct pernet_operations addrconf_ops = {
7260 .init = addrconf_init_net,
7261 .exit = addrconf_exit_net,
7262};
7263
207895fd 7264static struct rtnl_af_ops inet6_ops __read_mostly = {
b382b191
TG
7265 .family = AF_INET6,
7266 .fill_link_af = inet6_fill_link_af,
7267 .get_link_af_size = inet6_get_link_af_size,
11b1f828 7268 .validate_link_af = inet6_validate_link_af,
f53adae4 7269 .set_link_af = inet6_set_link_af,
b382b191
TG
7270};
7271
1da177e4
LT
7272/*
7273 * Init / cleanup code
7274 */
7275
7276int __init addrconf_init(void)
7277{
a317a2f1 7278 struct inet6_dev *idev;
e66d1172 7279 int err;
2a8cc6c8 7280
e21e8467
SH
7281 err = ipv6_addr_label_init();
7282 if (err < 0) {
f3213831
JP
7283 pr_crit("%s: cannot initialize default policy table: %d\n",
7284 __func__, err);
2cc6d2bf 7285 goto out;
2a8cc6c8 7286 }
1da177e4 7287
2cc6d2bf
NH
7288 err = register_pernet_subsys(&addrconf_ops);
7289 if (err < 0)
7290 goto out_addrlabel;
e0da5a48 7291
c15b1cca
HFS
7292 addrconf_wq = create_workqueue("ipv6_addrconf");
7293 if (!addrconf_wq) {
7294 err = -ENOMEM;
7295 goto out_nowq;
7296 }
7297
1da177e4 7298 rtnl_lock();
e5f80fcf 7299 idev = ipv6_add_dev(blackhole_netdev);
1da177e4 7300 rtnl_unlock();
a317a2f1
WC
7301 if (IS_ERR(idev)) {
7302 err = PTR_ERR(idev);
e0da5a48 7303 goto errlo;
a317a2f1 7304 }
1da177e4 7305
2f460933
WC
7306 ip6_route_init_special_entries();
7307
1da177e4
LT
7308 register_netdevice_notifier(&ipv6_dev_notf);
7309
8805d13f 7310 addrconf_verify(&init_net);
c127ea2c 7311
3678a9d8 7312 rtnl_af_register(&inet6_ops);
b382b191 7313
16feebcf
FW
7314 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_GETLINK,
7315 NULL, inet6_dump_ifinfo, 0);
c127ea2c
TG
7316 if (err < 0)
7317 goto errout;
7318
16feebcf
FW
7319 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_NEWADDR,
7320 inet6_rtm_newaddr, NULL, 0);
7321 if (err < 0)
7322 goto errout;
7323 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_DELADDR,
7324 inet6_rtm_deladdr, NULL, 0);
7325 if (err < 0)
7326 goto errout;
7327 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_GETADDR,
7328 inet6_rtm_getaddr, inet6_dump_ifaddr,
7329 RTNL_FLAG_DOIT_UNLOCKED);
7330 if (err < 0)
7331 goto errout;
7332 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_GETMULTICAST,
7333 NULL, inet6_dump_ifmcaddr, 0);
7334 if (err < 0)
7335 goto errout;
7336 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_GETANYCAST,
7337 NULL, inet6_dump_ifacaddr, 0);
7338 if (err < 0)
7339 goto errout;
7340 err = rtnl_register_module(THIS_MODULE, PF_INET6, RTM_GETNETCONF,
7341 inet6_netconf_get_devconf,
7342 inet6_netconf_dump_devconf,
7343 RTNL_FLAG_DOIT_UNLOCKED);
7344 if (err < 0)
7345 goto errout;
a3fde2ad
FW
7346 err = ipv6_addr_label_rtnl_register();
7347 if (err < 0)
7348 goto errout;
2a8cc6c8 7349
1da177e4 7350 return 0;
c127ea2c 7351errout:
16feebcf 7352 rtnl_unregister_all(PF_INET6);
b382b191 7353 rtnl_af_unregister(&inet6_ops);
c127ea2c 7354 unregister_netdevice_notifier(&ipv6_dev_notf);
e0da5a48 7355errlo:
c15b1cca
HFS
7356 destroy_workqueue(addrconf_wq);
7357out_nowq:
e0da5a48 7358 unregister_pernet_subsys(&addrconf_ops);
2cc6d2bf
NH
7359out_addrlabel:
7360 ipv6_addr_label_cleanup();
7361out:
c127ea2c 7362 return err;
1da177e4
LT
7363}
7364
09f7709f 7365void addrconf_cleanup(void)
1da177e4 7366{
176c39af 7367 struct net_device *dev;
1da177e4
LT
7368
7369 unregister_netdevice_notifier(&ipv6_dev_notf);
e0da5a48 7370 unregister_pernet_subsys(&addrconf_ops);
2cc6d2bf 7371 ipv6_addr_label_cleanup();
1da177e4 7372
5c45121d 7373 rtnl_af_unregister(&inet6_ops);
1da177e4 7374
5c45121d 7375 rtnl_lock();
b382b191 7376
176c39af
DL
7377 /* clean dev list */
7378 for_each_netdev(&init_net, dev) {
7379 if (__in6_dev_get(dev) == NULL)
7380 continue;
ae79dbf6 7381 addrconf_ifdown(dev, true);
176c39af 7382 }
ae79dbf6 7383 addrconf_ifdown(init_net.loopback_dev, true);
176c39af 7384
1da177e4 7385 rtnl_unlock();
c15b1cca
HFS
7386
7387 destroy_workqueue(addrconf_wq);
1da177e4 7388}