Commit | Line | Data |
---|---|---|
2874c5fd | 1 | // SPDX-License-Identifier: GPL-2.0-or-later |
1da177e4 LT |
2 | /* |
3 | * net/sched/act_api.c Packet action API. | |
4 | * | |
1da177e4 | 5 | * Author: Jamal Hadi Salim |
1da177e4 LT |
6 | */ |
7 | ||
1da177e4 LT |
8 | #include <linux/types.h> |
9 | #include <linux/kernel.h> | |
1da177e4 | 10 | #include <linux/string.h> |
1da177e4 | 11 | #include <linux/errno.h> |
5a0e3ad6 | 12 | #include <linux/slab.h> |
1da177e4 | 13 | #include <linux/skbuff.h> |
1da177e4 LT |
14 | #include <linux/init.h> |
15 | #include <linux/kmod.h> | |
ab27cfb8 | 16 | #include <linux/err.h> |
3a9a231d | 17 | #include <linux/module.h> |
b854272b DL |
18 | #include <net/net_namespace.h> |
19 | #include <net/sock.h> | |
1da177e4 | 20 | #include <net/sch_generic.h> |
1045ba77 | 21 | #include <net/pkt_cls.h> |
1da177e4 | 22 | #include <net/act_api.h> |
dc5fc579 | 23 | #include <net/netlink.h> |
1da177e4 | 24 | |
db50514f JP |
25 | static void tcf_action_goto_chain_exec(const struct tc_action *a, |
26 | struct tcf_result *res) | |
27 | { | |
ee3bbfe8 | 28 | const struct tcf_chain *chain = rcu_dereference_bh(a->goto_chain); |
db50514f JP |
29 | |
30 | res->goto_tp = rcu_dereference_bh(chain->filter_chain); | |
31 | } | |
32 | ||
eec94fdb VB |
33 | static void tcf_free_cookie_rcu(struct rcu_head *p) |
34 | { | |
35 | struct tc_cookie *cookie = container_of(p, struct tc_cookie, rcu); | |
36 | ||
37 | kfree(cookie->data); | |
38 | kfree(cookie); | |
39 | } | |
40 | ||
41 | static void tcf_set_action_cookie(struct tc_cookie __rcu **old_cookie, | |
42 | struct tc_cookie *new_cookie) | |
43 | { | |
44 | struct tc_cookie *old; | |
45 | ||
0dbc81ea | 46 | old = xchg((__force struct tc_cookie **)old_cookie, new_cookie); |
eec94fdb VB |
47 | if (old) |
48 | call_rcu(&old->rcu, tcf_free_cookie_rcu); | |
49 | } | |
50 | ||
85d0966f DC |
51 | int tcf_action_check_ctrlact(int action, struct tcf_proto *tp, |
52 | struct tcf_chain **newchain, | |
53 | struct netlink_ext_ack *extack) | |
54 | { | |
55 | int opcode = TC_ACT_EXT_OPCODE(action), ret = -EINVAL; | |
56 | u32 chain_index; | |
57 | ||
58 | if (!opcode) | |
59 | ret = action > TC_ACT_VALUE_MAX ? -EINVAL : 0; | |
60 | else if (opcode <= TC_ACT_EXT_OPCODE_MAX || action == TC_ACT_UNSPEC) | |
61 | ret = 0; | |
62 | if (ret) { | |
63 | NL_SET_ERR_MSG(extack, "invalid control action"); | |
64 | goto end; | |
65 | } | |
66 | ||
67 | if (TC_ACT_EXT_CMP(action, TC_ACT_GOTO_CHAIN)) { | |
68 | chain_index = action & TC_ACT_EXT_VAL_MASK; | |
69 | if (!tp || !newchain) { | |
70 | ret = -EINVAL; | |
71 | NL_SET_ERR_MSG(extack, | |
72 | "can't goto NULL proto/chain"); | |
73 | goto end; | |
74 | } | |
75 | *newchain = tcf_chain_get_by_act(tp->chain->block, chain_index); | |
76 | if (!*newchain) { | |
77 | ret = -ENOMEM; | |
78 | NL_SET_ERR_MSG(extack, | |
79 | "can't allocate goto_chain"); | |
80 | } | |
81 | } | |
82 | end: | |
83 | return ret; | |
84 | } | |
85 | EXPORT_SYMBOL(tcf_action_check_ctrlact); | |
86 | ||
87 | struct tcf_chain *tcf_action_set_ctrlact(struct tc_action *a, int action, | |
ee3bbfe8 | 88 | struct tcf_chain *goto_chain) |
85d0966f | 89 | { |
85d0966f | 90 | a->tcfa_action = action; |
445d3749 | 91 | goto_chain = rcu_replace_pointer(a->goto_chain, goto_chain, 1); |
ee3bbfe8 | 92 | return goto_chain; |
85d0966f DC |
93 | } |
94 | EXPORT_SYMBOL(tcf_action_set_ctrlact); | |
95 | ||
d7fb60b9 CW |
96 | /* XXX: For standalone actions, we don't need a RCU grace period either, because |
97 | * actions are always connected to filters and filters are already destroyed in | |
98 | * RCU callbacks, so after a RCU grace period actions are already disconnected | |
99 | * from filters. Readers later can not find us. | |
100 | */ | |
101 | static void free_tcf(struct tc_action *p) | |
519c818e | 102 | { |
ee3bbfe8 | 103 | struct tcf_chain *chain = rcu_dereference_protected(p->goto_chain, 1); |
85d0966f | 104 | |
519c818e | 105 | free_percpu(p->cpu_bstats); |
28169aba | 106 | free_percpu(p->cpu_bstats_hw); |
519c818e | 107 | free_percpu(p->cpu_qstats); |
1045ba77 | 108 | |
eec94fdb | 109 | tcf_set_action_cookie(&p->act_cookie, NULL); |
85d0966f DC |
110 | if (chain) |
111 | tcf_chain_put_by_act(chain); | |
1045ba77 | 112 | |
519c818e ED |
113 | kfree(p); |
114 | } | |
115 | ||
16af6067 | 116 | static void tcf_action_cleanup(struct tc_action *p) |
e9ce1cd3 | 117 | { |
16af6067 VB |
118 | if (p->ops->cleanup) |
119 | p->ops->cleanup(p); | |
120 | ||
1c0d32fd | 121 | gen_kill_estimator(&p->tcfa_rate_est); |
d7fb60b9 | 122 | free_tcf(p); |
e9ce1cd3 | 123 | } |
e9ce1cd3 | 124 | |
16af6067 VB |
125 | static int __tcf_action_put(struct tc_action *p, bool bind) |
126 | { | |
127 | struct tcf_idrinfo *idrinfo = p->idrinfo; | |
128 | ||
95278dda | 129 | if (refcount_dec_and_mutex_lock(&p->tcfa_refcnt, &idrinfo->lock)) { |
16af6067 VB |
130 | if (bind) |
131 | atomic_dec(&p->tcfa_bindcnt); | |
132 | idr_remove(&idrinfo->action_idr, p->tcfa_index); | |
95278dda | 133 | mutex_unlock(&idrinfo->lock); |
16af6067 VB |
134 | |
135 | tcf_action_cleanup(p); | |
136 | return 1; | |
137 | } | |
138 | ||
139 | if (bind) | |
140 | atomic_dec(&p->tcfa_bindcnt); | |
141 | ||
142 | return 0; | |
143 | } | |
144 | ||
65a206c0 | 145 | int __tcf_idr_release(struct tc_action *p, bool bind, bool strict) |
e9ce1cd3 DM |
146 | { |
147 | int ret = 0; | |
148 | ||
036bb443 VB |
149 | /* Release with strict==1 and bind==0 is only called through act API |
150 | * interface (classifiers always bind). Only case when action with | |
151 | * positive reference count and zero bind count can exist is when it was | |
152 | * also created with act API (unbinding last classifier will destroy the | |
153 | * action if it was created by classifier). So only case when bind count | |
154 | * can be changed after initial check is when unbound action is | |
155 | * destroyed by act API while classifier binds to action with same id | |
156 | * concurrently. This result either creation of new action(same behavior | |
157 | * as before), or reusing existing action if concurrent process | |
158 | * increments reference count before action is deleted. Both scenarios | |
159 | * are acceptable. | |
160 | */ | |
e9ce1cd3 | 161 | if (p) { |
16af6067 | 162 | if (!bind && strict && atomic_read(&p->tcfa_bindcnt) > 0) |
55334a5d | 163 | return -EPERM; |
e9ce1cd3 | 164 | |
16af6067 | 165 | if (__tcf_action_put(p, bind)) |
1d4150c0 | 166 | ret = ACT_P_DELETED; |
e9ce1cd3 | 167 | } |
28e6b67f | 168 | |
e9ce1cd3 DM |
169 | return ret; |
170 | } | |
65a206c0 | 171 | EXPORT_SYMBOL(__tcf_idr_release); |
e9ce1cd3 | 172 | |
4e76e75d RM |
173 | static size_t tcf_action_shared_attrs_size(const struct tc_action *act) |
174 | { | |
e0479b67 | 175 | struct tc_cookie *act_cookie; |
4e76e75d RM |
176 | u32 cookie_len = 0; |
177 | ||
e0479b67 VB |
178 | rcu_read_lock(); |
179 | act_cookie = rcu_dereference(act->act_cookie); | |
180 | ||
181 | if (act_cookie) | |
182 | cookie_len = nla_total_size(act_cookie->len); | |
183 | rcu_read_unlock(); | |
4e76e75d RM |
184 | |
185 | return nla_total_size(0) /* action number nested */ | |
186 | + nla_total_size(IFNAMSIZ) /* TCA_ACT_KIND */ | |
187 | + cookie_len /* TCA_ACT_COOKIE */ | |
0dfb2d82 | 188 | + nla_total_size(sizeof(struct nla_bitfield32)) /* TCA_ACT_HW_STATS */ |
4e76e75d | 189 | + nla_total_size(0) /* TCA_ACT_STATS nested */ |
1521a67e | 190 | + nla_total_size(sizeof(struct nla_bitfield32)) /* TCA_ACT_FLAGS */ |
4e76e75d RM |
191 | /* TCA_STATS_BASIC */ |
192 | + nla_total_size_64bit(sizeof(struct gnet_stats_basic)) | |
b33e699f ED |
193 | /* TCA_STATS_PKT64 */ |
194 | + nla_total_size_64bit(sizeof(u64)) | |
4e76e75d RM |
195 | /* TCA_STATS_QUEUE */ |
196 | + nla_total_size_64bit(sizeof(struct gnet_stats_queue)) | |
197 | + nla_total_size(0) /* TCA_OPTIONS nested */ | |
198 | + nla_total_size(sizeof(struct tcf_t)); /* TCA_GACT_TM */ | |
199 | } | |
200 | ||
201 | static size_t tcf_action_full_attrs_size(size_t sz) | |
202 | { | |
203 | return NLMSG_HDRLEN /* struct nlmsghdr */ | |
204 | + sizeof(struct tcamsg) | |
205 | + nla_total_size(0) /* TCA_ACT_TAB nested */ | |
206 | + sz; | |
207 | } | |
208 | ||
209 | static size_t tcf_action_fill_size(const struct tc_action *act) | |
210 | { | |
211 | size_t sz = tcf_action_shared_attrs_size(act); | |
212 | ||
213 | if (act->ops->get_fill_size) | |
214 | return act->ops->get_fill_size(act) + sz; | |
215 | return sz; | |
216 | } | |
217 | ||
65a206c0 | 218 | static int tcf_dump_walker(struct tcf_idrinfo *idrinfo, struct sk_buff *skb, |
a85a970a | 219 | struct netlink_callback *cb) |
e9ce1cd3 | 220 | { |
65a206c0 | 221 | int err = 0, index = -1, s_i = 0, n_i = 0; |
90825b23 | 222 | u32 act_flags = cb->args[2]; |
e62e484d | 223 | unsigned long jiffy_since = cb->args[3]; |
4b3550ef | 224 | struct nlattr *nest; |
65a206c0 CM |
225 | struct idr *idr = &idrinfo->action_idr; |
226 | struct tc_action *p; | |
227 | unsigned long id = 1; | |
e33d2b74 | 228 | unsigned long tmp; |
e9ce1cd3 | 229 | |
95278dda | 230 | mutex_lock(&idrinfo->lock); |
e9ce1cd3 DM |
231 | |
232 | s_i = cb->args[0]; | |
233 | ||
e33d2b74 | 234 | idr_for_each_entry_ul(idr, p, tmp, id) { |
65a206c0 CM |
235 | index++; |
236 | if (index < s_i) | |
237 | continue; | |
238 | ||
239 | if (jiffy_since && | |
240 | time_after(jiffy_since, | |
241 | (unsigned long)p->tcfa_tm.lastuse)) | |
242 | continue; | |
243 | ||
ae0be8de | 244 | nest = nla_nest_start_noflag(skb, n_i); |
734549eb CD |
245 | if (!nest) { |
246 | index--; | |
65a206c0 | 247 | goto nla_put_failure; |
734549eb | 248 | } |
65a206c0 CM |
249 | err = tcf_action_dump_1(skb, p, 0, 0); |
250 | if (err < 0) { | |
251 | index--; | |
252 | nlmsg_trim(skb, nest); | |
253 | goto done; | |
e9ce1cd3 | 254 | } |
65a206c0 CM |
255 | nla_nest_end(skb, nest); |
256 | n_i++; | |
257 | if (!(act_flags & TCA_FLAG_LARGE_DUMP_ON) && | |
258 | n_i >= TCA_ACT_MAX_PRIO) | |
259 | goto done; | |
e9ce1cd3 DM |
260 | } |
261 | done: | |
e62e484d JHS |
262 | if (index >= 0) |
263 | cb->args[0] = index + 1; | |
264 | ||
95278dda | 265 | mutex_unlock(&idrinfo->lock); |
90825b23 | 266 | if (n_i) { |
90825b23 JHS |
267 | if (act_flags & TCA_FLAG_LARGE_DUMP_ON) |
268 | cb->args[1] = n_i; | |
269 | } | |
e9ce1cd3 DM |
270 | return n_i; |
271 | ||
7ba699c6 | 272 | nla_put_failure: |
4b3550ef | 273 | nla_nest_cancel(skb, nest); |
e9ce1cd3 DM |
274 | goto done; |
275 | } | |
276 | ||
ec3ed293 VB |
277 | static int tcf_idr_release_unsafe(struct tc_action *p) |
278 | { | |
279 | if (atomic_read(&p->tcfa_bindcnt) > 0) | |
280 | return -EPERM; | |
281 | ||
282 | if (refcount_dec_and_test(&p->tcfa_refcnt)) { | |
283 | idr_remove(&p->idrinfo->action_idr, p->tcfa_index); | |
284 | tcf_action_cleanup(p); | |
285 | return ACT_P_DELETED; | |
286 | } | |
287 | ||
288 | return 0; | |
289 | } | |
290 | ||
65a206c0 | 291 | static int tcf_del_walker(struct tcf_idrinfo *idrinfo, struct sk_buff *skb, |
a85a970a | 292 | const struct tc_action_ops *ops) |
e9ce1cd3 | 293 | { |
4b3550ef | 294 | struct nlattr *nest; |
65a206c0 | 295 | int n_i = 0; |
55334a5d | 296 | int ret = -EINVAL; |
65a206c0 CM |
297 | struct idr *idr = &idrinfo->action_idr; |
298 | struct tc_action *p; | |
299 | unsigned long id = 1; | |
e33d2b74 | 300 | unsigned long tmp; |
e9ce1cd3 | 301 | |
ae0be8de | 302 | nest = nla_nest_start_noflag(skb, 0); |
4b3550ef PM |
303 | if (nest == NULL) |
304 | goto nla_put_failure; | |
a85a970a | 305 | if (nla_put_string(skb, TCA_KIND, ops->kind)) |
1b34ec43 | 306 | goto nla_put_failure; |
65a206c0 | 307 | |
95278dda | 308 | mutex_lock(&idrinfo->lock); |
e33d2b74 | 309 | idr_for_each_entry_ul(idr, p, tmp, id) { |
ec3ed293 | 310 | ret = tcf_idr_release_unsafe(p); |
65a206c0 | 311 | if (ret == ACT_P_DELETED) { |
255cd50f | 312 | module_put(ops->owner); |
65a206c0 CM |
313 | n_i++; |
314 | } else if (ret < 0) { | |
95278dda | 315 | mutex_unlock(&idrinfo->lock); |
65a206c0 | 316 | goto nla_put_failure; |
e9ce1cd3 DM |
317 | } |
318 | } | |
95278dda | 319 | mutex_unlock(&idrinfo->lock); |
ec3ed293 | 320 | |
1b34ec43 DM |
321 | if (nla_put_u32(skb, TCA_FCNT, n_i)) |
322 | goto nla_put_failure; | |
4b3550ef | 323 | nla_nest_end(skb, nest); |
e9ce1cd3 DM |
324 | |
325 | return n_i; | |
7ba699c6 | 326 | nla_put_failure: |
4b3550ef | 327 | nla_nest_cancel(skb, nest); |
55334a5d | 328 | return ret; |
e9ce1cd3 DM |
329 | } |
330 | ||
ddf97ccd WC |
331 | int tcf_generic_walker(struct tc_action_net *tn, struct sk_buff *skb, |
332 | struct netlink_callback *cb, int type, | |
b3620145 AA |
333 | const struct tc_action_ops *ops, |
334 | struct netlink_ext_ack *extack) | |
e9ce1cd3 | 335 | { |
65a206c0 | 336 | struct tcf_idrinfo *idrinfo = tn->idrinfo; |
ddf97ccd | 337 | |
e9ce1cd3 | 338 | if (type == RTM_DELACTION) { |
65a206c0 | 339 | return tcf_del_walker(idrinfo, skb, ops); |
e9ce1cd3 | 340 | } else if (type == RTM_GETACTION) { |
65a206c0 | 341 | return tcf_dump_walker(idrinfo, skb, cb); |
e9ce1cd3 | 342 | } else { |
b3620145 AA |
343 | WARN(1, "tcf_generic_walker: unknown command %d\n", type); |
344 | NL_SET_ERR_MSG(extack, "tcf_generic_walker: unknown command"); | |
e9ce1cd3 DM |
345 | return -EINVAL; |
346 | } | |
347 | } | |
ddf97ccd | 348 | EXPORT_SYMBOL(tcf_generic_walker); |
e9ce1cd3 | 349 | |
7d485c45 | 350 | int tcf_idr_search(struct tc_action_net *tn, struct tc_action **a, u32 index) |
e9ce1cd3 | 351 | { |
3f7c72bc VB |
352 | struct tcf_idrinfo *idrinfo = tn->idrinfo; |
353 | struct tc_action *p; | |
e9ce1cd3 | 354 | |
95278dda | 355 | mutex_lock(&idrinfo->lock); |
322d884b | 356 | p = idr_find(&idrinfo->action_idr, index); |
7d485c45 | 357 | if (IS_ERR(p)) |
0190c1d4 | 358 | p = NULL; |
7d485c45 | 359 | else if (p) |
3f7c72bc | 360 | refcount_inc(&p->tcfa_refcnt); |
95278dda | 361 | mutex_unlock(&idrinfo->lock); |
e9ce1cd3 | 362 | |
3f7c72bc VB |
363 | if (p) { |
364 | *a = p; | |
365 | return true; | |
366 | } | |
367 | return false; | |
e9ce1cd3 | 368 | } |
65a206c0 | 369 | EXPORT_SYMBOL(tcf_idr_search); |
e9ce1cd3 | 370 | |
97a3f84f | 371 | static int tcf_idr_delete_index(struct tcf_idrinfo *idrinfo, u32 index) |
2a2ea349 | 372 | { |
2a2ea349 VB |
373 | struct tc_action *p; |
374 | int ret = 0; | |
375 | ||
95278dda | 376 | mutex_lock(&idrinfo->lock); |
2a2ea349 VB |
377 | p = idr_find(&idrinfo->action_idr, index); |
378 | if (!p) { | |
95278dda | 379 | mutex_unlock(&idrinfo->lock); |
2a2ea349 VB |
380 | return -ENOENT; |
381 | } | |
382 | ||
383 | if (!atomic_read(&p->tcfa_bindcnt)) { | |
384 | if (refcount_dec_and_test(&p->tcfa_refcnt)) { | |
385 | struct module *owner = p->ops->owner; | |
386 | ||
387 | WARN_ON(p != idr_remove(&idrinfo->action_idr, | |
388 | p->tcfa_index)); | |
95278dda | 389 | mutex_unlock(&idrinfo->lock); |
2a2ea349 | 390 | |
16af6067 | 391 | tcf_action_cleanup(p); |
2a2ea349 VB |
392 | module_put(owner); |
393 | return 0; | |
394 | } | |
395 | ret = 0; | |
396 | } else { | |
397 | ret = -EPERM; | |
398 | } | |
399 | ||
95278dda | 400 | mutex_unlock(&idrinfo->lock); |
2a2ea349 VB |
401 | return ret; |
402 | } | |
2a2ea349 | 403 | |
65a206c0 CM |
404 | int tcf_idr_create(struct tc_action_net *tn, u32 index, struct nlattr *est, |
405 | struct tc_action **a, const struct tc_action_ops *ops, | |
e3822678 | 406 | int bind, bool cpustats, u32 flags) |
e9ce1cd3 | 407 | { |
ec0595cc | 408 | struct tc_action *p = kzalloc(ops->size, GFP_KERNEL); |
65a206c0 | 409 | struct tcf_idrinfo *idrinfo = tn->idrinfo; |
519c818e | 410 | int err = -ENOMEM; |
e9ce1cd3 DM |
411 | |
412 | if (unlikely(!p)) | |
86062033 | 413 | return -ENOMEM; |
036bb443 | 414 | refcount_set(&p->tcfa_refcnt, 1); |
e9ce1cd3 | 415 | if (bind) |
036bb443 | 416 | atomic_set(&p->tcfa_bindcnt, 1); |
e9ce1cd3 | 417 | |
519c818e ED |
418 | if (cpustats) { |
419 | p->cpu_bstats = netdev_alloc_pcpu_stats(struct gnet_stats_basic_cpu); | |
339913a8 | 420 | if (!p->cpu_bstats) |
519c818e | 421 | goto err1; |
28169aba EC |
422 | p->cpu_bstats_hw = netdev_alloc_pcpu_stats(struct gnet_stats_basic_cpu); |
423 | if (!p->cpu_bstats_hw) | |
424 | goto err2; | |
339913a8 MW |
425 | p->cpu_qstats = alloc_percpu(struct gnet_stats_queue); |
426 | if (!p->cpu_qstats) | |
28169aba | 427 | goto err3; |
519c818e | 428 | } |
ec0595cc | 429 | spin_lock_init(&p->tcfa_lock); |
339913a8 | 430 | p->tcfa_index = index; |
ec0595cc WC |
431 | p->tcfa_tm.install = jiffies; |
432 | p->tcfa_tm.lastuse = jiffies; | |
433 | p->tcfa_tm.firstuse = 0; | |
e3822678 | 434 | p->tcfa_flags = flags; |
0e991ec6 | 435 | if (est) { |
ec0595cc WC |
436 | err = gen_new_estimator(&p->tcfa_bstats, p->cpu_bstats, |
437 | &p->tcfa_rate_est, | |
438 | &p->tcfa_lock, NULL, est); | |
339913a8 | 439 | if (err) |
28169aba | 440 | goto err4; |
0e991ec6 SH |
441 | } |
442 | ||
65a206c0 | 443 | p->idrinfo = idrinfo; |
ec0595cc | 444 | p->ops = ops; |
ec0595cc | 445 | *a = p; |
86062033 | 446 | return 0; |
28169aba | 447 | err4: |
339913a8 | 448 | free_percpu(p->cpu_qstats); |
28169aba EC |
449 | err3: |
450 | free_percpu(p->cpu_bstats_hw); | |
339913a8 MW |
451 | err2: |
452 | free_percpu(p->cpu_bstats); | |
453 | err1: | |
454 | kfree(p); | |
455 | return err; | |
e9ce1cd3 | 456 | } |
65a206c0 | 457 | EXPORT_SYMBOL(tcf_idr_create); |
e9ce1cd3 | 458 | |
e3822678 VB |
459 | int tcf_idr_create_from_flags(struct tc_action_net *tn, u32 index, |
460 | struct nlattr *est, struct tc_action **a, | |
461 | const struct tc_action_ops *ops, int bind, | |
462 | u32 flags) | |
463 | { | |
464 | /* Set cpustats according to actions flags. */ | |
465 | return tcf_idr_create(tn, index, est, a, ops, bind, | |
466 | !(flags & TCA_ACT_FLAGS_NO_PERCPU_STATS), flags); | |
467 | } | |
468 | EXPORT_SYMBOL(tcf_idr_create_from_flags); | |
469 | ||
65a206c0 | 470 | void tcf_idr_insert(struct tc_action_net *tn, struct tc_action *a) |
e9ce1cd3 | 471 | { |
65a206c0 | 472 | struct tcf_idrinfo *idrinfo = tn->idrinfo; |
e9ce1cd3 | 473 | |
95278dda | 474 | mutex_lock(&idrinfo->lock); |
0190c1d4 VB |
475 | /* Replace ERR_PTR(-EBUSY) allocated by tcf_idr_check_alloc */ |
476 | WARN_ON(!IS_ERR(idr_replace(&idrinfo->action_idr, a, a->tcfa_index))); | |
95278dda | 477 | mutex_unlock(&idrinfo->lock); |
e9ce1cd3 | 478 | } |
65a206c0 | 479 | EXPORT_SYMBOL(tcf_idr_insert); |
1da177e4 | 480 | |
0190c1d4 VB |
481 | /* Cleanup idr index that was allocated but not initialized. */ |
482 | ||
483 | void tcf_idr_cleanup(struct tc_action_net *tn, u32 index) | |
484 | { | |
485 | struct tcf_idrinfo *idrinfo = tn->idrinfo; | |
486 | ||
95278dda | 487 | mutex_lock(&idrinfo->lock); |
0190c1d4 VB |
488 | /* Remove ERR_PTR(-EBUSY) allocated by tcf_idr_check_alloc */ |
489 | WARN_ON(!IS_ERR(idr_remove(&idrinfo->action_idr, index))); | |
95278dda | 490 | mutex_unlock(&idrinfo->lock); |
0190c1d4 VB |
491 | } |
492 | EXPORT_SYMBOL(tcf_idr_cleanup); | |
493 | ||
494 | /* Check if action with specified index exists. If actions is found, increments | |
495 | * its reference and bind counters, and return 1. Otherwise insert temporary | |
496 | * error pointer (to prevent concurrent users from inserting actions with same | |
497 | * index) and return 0. | |
498 | */ | |
499 | ||
500 | int tcf_idr_check_alloc(struct tc_action_net *tn, u32 *index, | |
501 | struct tc_action **a, int bind) | |
502 | { | |
503 | struct tcf_idrinfo *idrinfo = tn->idrinfo; | |
504 | struct tc_action *p; | |
505 | int ret; | |
506 | ||
507 | again: | |
95278dda | 508 | mutex_lock(&idrinfo->lock); |
0190c1d4 VB |
509 | if (*index) { |
510 | p = idr_find(&idrinfo->action_idr, *index); | |
511 | if (IS_ERR(p)) { | |
512 | /* This means that another process allocated | |
513 | * index but did not assign the pointer yet. | |
514 | */ | |
95278dda | 515 | mutex_unlock(&idrinfo->lock); |
0190c1d4 VB |
516 | goto again; |
517 | } | |
518 | ||
519 | if (p) { | |
520 | refcount_inc(&p->tcfa_refcnt); | |
521 | if (bind) | |
522 | atomic_inc(&p->tcfa_bindcnt); | |
523 | *a = p; | |
524 | ret = 1; | |
525 | } else { | |
526 | *a = NULL; | |
527 | ret = idr_alloc_u32(&idrinfo->action_idr, NULL, index, | |
95278dda | 528 | *index, GFP_KERNEL); |
0190c1d4 VB |
529 | if (!ret) |
530 | idr_replace(&idrinfo->action_idr, | |
531 | ERR_PTR(-EBUSY), *index); | |
532 | } | |
533 | } else { | |
534 | *index = 1; | |
535 | *a = NULL; | |
536 | ret = idr_alloc_u32(&idrinfo->action_idr, NULL, index, | |
95278dda | 537 | UINT_MAX, GFP_KERNEL); |
0190c1d4 VB |
538 | if (!ret) |
539 | idr_replace(&idrinfo->action_idr, ERR_PTR(-EBUSY), | |
540 | *index); | |
541 | } | |
95278dda | 542 | mutex_unlock(&idrinfo->lock); |
0190c1d4 VB |
543 | return ret; |
544 | } | |
545 | EXPORT_SYMBOL(tcf_idr_check_alloc); | |
546 | ||
65a206c0 CM |
547 | void tcf_idrinfo_destroy(const struct tc_action_ops *ops, |
548 | struct tcf_idrinfo *idrinfo) | |
1d4150c0 | 549 | { |
65a206c0 CM |
550 | struct idr *idr = &idrinfo->action_idr; |
551 | struct tc_action *p; | |
552 | int ret; | |
553 | unsigned long id = 1; | |
e33d2b74 | 554 | unsigned long tmp; |
1d4150c0 | 555 | |
e33d2b74 | 556 | idr_for_each_entry_ul(idr, p, tmp, id) { |
65a206c0 CM |
557 | ret = __tcf_idr_release(p, false, true); |
558 | if (ret == ACT_P_DELETED) | |
559 | module_put(ops->owner); | |
560 | else if (ret < 0) | |
561 | return; | |
1d4150c0 | 562 | } |
65a206c0 | 563 | idr_destroy(&idrinfo->action_idr); |
1d4150c0 | 564 | } |
65a206c0 | 565 | EXPORT_SYMBOL(tcf_idrinfo_destroy); |
1d4150c0 | 566 | |
1f747c26 | 567 | static LIST_HEAD(act_base); |
1da177e4 LT |
568 | static DEFINE_RWLOCK(act_mod_lock); |
569 | ||
ddf97ccd WC |
570 | int tcf_register_action(struct tc_action_ops *act, |
571 | struct pernet_operations *ops) | |
1da177e4 | 572 | { |
1f747c26 | 573 | struct tc_action_ops *a; |
ddf97ccd | 574 | int ret; |
1da177e4 | 575 | |
ddf97ccd | 576 | if (!act->act || !act->dump || !act->init || !act->walk || !act->lookup) |
76c82d7a JHS |
577 | return -EINVAL; |
578 | ||
ab102b80 WC |
579 | /* We have to register pernet ops before making the action ops visible, |
580 | * otherwise tcf_action_init_1() could get a partially initialized | |
581 | * netns. | |
582 | */ | |
583 | ret = register_pernet_subsys(ops); | |
584 | if (ret) | |
585 | return ret; | |
586 | ||
1da177e4 | 587 | write_lock(&act_mod_lock); |
1f747c26 | 588 | list_for_each_entry(a, &act_base, head) { |
eddd2cf1 | 589 | if (act->id == a->id || (strcmp(act->kind, a->kind) == 0)) { |
1da177e4 | 590 | write_unlock(&act_mod_lock); |
ab102b80 | 591 | unregister_pernet_subsys(ops); |
1da177e4 LT |
592 | return -EEXIST; |
593 | } | |
594 | } | |
1f747c26 | 595 | list_add_tail(&act->head, &act_base); |
1da177e4 | 596 | write_unlock(&act_mod_lock); |
ddf97ccd | 597 | |
1da177e4 LT |
598 | return 0; |
599 | } | |
62e3ba1b | 600 | EXPORT_SYMBOL(tcf_register_action); |
1da177e4 | 601 | |
ddf97ccd WC |
602 | int tcf_unregister_action(struct tc_action_ops *act, |
603 | struct pernet_operations *ops) | |
1da177e4 | 604 | { |
1f747c26 | 605 | struct tc_action_ops *a; |
1da177e4 LT |
606 | int err = -ENOENT; |
607 | ||
608 | write_lock(&act_mod_lock); | |
a792866a ED |
609 | list_for_each_entry(a, &act_base, head) { |
610 | if (a == act) { | |
611 | list_del(&act->head); | |
612 | err = 0; | |
1da177e4 | 613 | break; |
a792866a | 614 | } |
1da177e4 LT |
615 | } |
616 | write_unlock(&act_mod_lock); | |
ab102b80 WC |
617 | if (!err) |
618 | unregister_pernet_subsys(ops); | |
1da177e4 LT |
619 | return err; |
620 | } | |
62e3ba1b | 621 | EXPORT_SYMBOL(tcf_unregister_action); |
1da177e4 LT |
622 | |
623 | /* lookup by name */ | |
624 | static struct tc_action_ops *tc_lookup_action_n(char *kind) | |
625 | { | |
a792866a | 626 | struct tc_action_ops *a, *res = NULL; |
1da177e4 LT |
627 | |
628 | if (kind) { | |
629 | read_lock(&act_mod_lock); | |
1f747c26 | 630 | list_for_each_entry(a, &act_base, head) { |
1da177e4 | 631 | if (strcmp(kind, a->kind) == 0) { |
a792866a ED |
632 | if (try_module_get(a->owner)) |
633 | res = a; | |
1da177e4 LT |
634 | break; |
635 | } | |
636 | } | |
637 | read_unlock(&act_mod_lock); | |
638 | } | |
a792866a | 639 | return res; |
1da177e4 LT |
640 | } |
641 | ||
7ba699c6 PM |
642 | /* lookup by nlattr */ |
643 | static struct tc_action_ops *tc_lookup_action(struct nlattr *kind) | |
1da177e4 | 644 | { |
a792866a | 645 | struct tc_action_ops *a, *res = NULL; |
1da177e4 LT |
646 | |
647 | if (kind) { | |
648 | read_lock(&act_mod_lock); | |
1f747c26 | 649 | list_for_each_entry(a, &act_base, head) { |
7ba699c6 | 650 | if (nla_strcmp(kind, a->kind) == 0) { |
a792866a ED |
651 | if (try_module_get(a->owner)) |
652 | res = a; | |
1da177e4 LT |
653 | break; |
654 | } | |
655 | } | |
656 | read_unlock(&act_mod_lock); | |
657 | } | |
a792866a | 658 | return res; |
1da177e4 | 659 | } |
1da177e4 | 660 | |
e0ee84de JHS |
661 | /*TCA_ACT_MAX_PRIO is 32, there count upto 32 */ |
662 | #define TCA_ACT_MAX_PRIO_MASK 0x1FF | |
22dc13c8 WC |
663 | int tcf_action_exec(struct sk_buff *skb, struct tc_action **actions, |
664 | int nr_actions, struct tcf_result *res) | |
1da177e4 | 665 | { |
e0ee84de JHS |
666 | u32 jmp_prgcnt = 0; |
667 | u32 jmp_ttl = TCA_ACT_MAX_PRIO; /*matches actions per filter */ | |
ec1a9cca JP |
668 | int i; |
669 | int ret = TC_ACT_OK; | |
1da177e4 | 670 | |
e7246e12 WB |
671 | if (skb_skip_tc_classify(skb)) |
672 | return TC_ACT_OK; | |
673 | ||
e0ee84de | 674 | restart_act_graph: |
22dc13c8 WC |
675 | for (i = 0; i < nr_actions; i++) { |
676 | const struct tc_action *a = actions[i]; | |
677 | ||
e0ee84de JHS |
678 | if (jmp_prgcnt > 0) { |
679 | jmp_prgcnt -= 1; | |
680 | continue; | |
681 | } | |
1da177e4 | 682 | repeat: |
63acd680 | 683 | ret = a->ops->act(skb, a, res); |
63acd680 JHS |
684 | if (ret == TC_ACT_REPEAT) |
685 | goto repeat; /* we need a ttl - JHS */ | |
e0ee84de | 686 | |
9da3242e | 687 | if (TC_ACT_EXT_CMP(ret, TC_ACT_JUMP)) { |
e0ee84de JHS |
688 | jmp_prgcnt = ret & TCA_ACT_MAX_PRIO_MASK; |
689 | if (!jmp_prgcnt || (jmp_prgcnt > nr_actions)) { | |
690 | /* faulty opcode, stop pipeline */ | |
691 | return TC_ACT_OK; | |
692 | } else { | |
693 | jmp_ttl -= 1; | |
694 | if (jmp_ttl > 0) | |
695 | goto restart_act_graph; | |
696 | else /* faulty graph, stop pipeline */ | |
697 | return TC_ACT_OK; | |
698 | } | |
db50514f | 699 | } else if (TC_ACT_EXT_CMP(ret, TC_ACT_GOTO_CHAIN)) { |
ee3bbfe8 DC |
700 | if (unlikely(!rcu_access_pointer(a->goto_chain))) { |
701 | net_warn_ratelimited("can't go to NULL chain!\n"); | |
702 | return TC_ACT_SHOT; | |
703 | } | |
db50514f | 704 | tcf_action_goto_chain_exec(a, res); |
e0ee84de JHS |
705 | } |
706 | ||
63acd680 | 707 | if (ret != TC_ACT_PIPE) |
e7246e12 | 708 | break; |
1da177e4 | 709 | } |
e0ee84de | 710 | |
1da177e4 LT |
711 | return ret; |
712 | } | |
62e3ba1b | 713 | EXPORT_SYMBOL(tcf_action_exec); |
1da177e4 | 714 | |
90b73b77 | 715 | int tcf_action_destroy(struct tc_action *actions[], int bind) |
1da177e4 | 716 | { |
255cd50f | 717 | const struct tc_action_ops *ops; |
90b73b77 VB |
718 | struct tc_action *a; |
719 | int ret = 0, i; | |
1da177e4 | 720 | |
90b73b77 VB |
721 | for (i = 0; i < TCA_ACT_MAX_PRIO && actions[i]; i++) { |
722 | a = actions[i]; | |
723 | actions[i] = NULL; | |
255cd50f | 724 | ops = a->ops; |
65a206c0 | 725 | ret = __tcf_idr_release(a, bind, true); |
55334a5d | 726 | if (ret == ACT_P_DELETED) |
255cd50f | 727 | module_put(ops->owner); |
55334a5d WC |
728 | else if (ret < 0) |
729 | return ret; | |
1da177e4 | 730 | } |
55334a5d | 731 | return ret; |
1da177e4 LT |
732 | } |
733 | ||
97763dc0 PA |
734 | static int tcf_action_destroy_1(struct tc_action *a, int bind) |
735 | { | |
736 | struct tc_action *actions[] = { a, NULL }; | |
737 | ||
738 | return tcf_action_destroy(actions, bind); | |
739 | } | |
740 | ||
16af6067 VB |
741 | static int tcf_action_put(struct tc_action *p) |
742 | { | |
743 | return __tcf_action_put(p, false); | |
744 | } | |
745 | ||
edfaf94f | 746 | /* Put all actions in this array, skip those NULL's. */ |
90b73b77 | 747 | static void tcf_action_put_many(struct tc_action *actions[]) |
cae422f3 | 748 | { |
90b73b77 | 749 | int i; |
cae422f3 | 750 | |
edfaf94f | 751 | for (i = 0; i < TCA_ACT_MAX_PRIO; i++) { |
90b73b77 | 752 | struct tc_action *a = actions[i]; |
edfaf94f | 753 | const struct tc_action_ops *ops; |
cae422f3 | 754 | |
edfaf94f CW |
755 | if (!a) |
756 | continue; | |
757 | ops = a->ops; | |
cae422f3 VB |
758 | if (tcf_action_put(a)) |
759 | module_put(ops->owner); | |
760 | } | |
761 | } | |
762 | ||
1da177e4 LT |
763 | int |
764 | tcf_action_dump_old(struct sk_buff *skb, struct tc_action *a, int bind, int ref) | |
765 | { | |
1da177e4 LT |
766 | return a->ops->dump(skb, a, bind, ref); |
767 | } | |
768 | ||
ca44b738 VB |
769 | static int |
770 | tcf_action_dump_terse(struct sk_buff *skb, struct tc_action *a) | |
1da177e4 | 771 | { |
27a884dc | 772 | unsigned char *b = skb_tail_pointer(skb); |
eec94fdb | 773 | struct tc_cookie *cookie; |
1da177e4 | 774 | |
1b34ec43 DM |
775 | if (nla_put_string(skb, TCA_KIND, a->ops->kind)) |
776 | goto nla_put_failure; | |
1da177e4 | 777 | if (tcf_action_copy_stats(skb, a, 0)) |
7ba699c6 | 778 | goto nla_put_failure; |
eec94fdb VB |
779 | |
780 | rcu_read_lock(); | |
781 | cookie = rcu_dereference(a->act_cookie); | |
782 | if (cookie) { | |
783 | if (nla_put(skb, TCA_ACT_COOKIE, cookie->len, cookie->data)) { | |
784 | rcu_read_unlock(); | |
1045ba77 | 785 | goto nla_put_failure; |
eec94fdb | 786 | } |
1045ba77 | 787 | } |
eec94fdb | 788 | rcu_read_unlock(); |
1045ba77 | 789 | |
ca44b738 VB |
790 | return 0; |
791 | ||
792 | nla_put_failure: | |
793 | nlmsg_trim(skb, b); | |
794 | return -1; | |
795 | } | |
796 | ||
797 | int | |
798 | tcf_action_dump_1(struct sk_buff *skb, struct tc_action *a, int bind, int ref) | |
799 | { | |
800 | int err = -EINVAL; | |
801 | unsigned char *b = skb_tail_pointer(skb); | |
802 | struct nlattr *nest; | |
803 | ||
804 | if (tcf_action_dump_terse(skb, a)) | |
805 | goto nla_put_failure; | |
806 | ||
8953b077 JP |
807 | if (a->hw_stats != TCA_ACT_HW_STATS_ANY && |
808 | nla_put_bitfield32(skb, TCA_ACT_HW_STATS, | |
809 | a->hw_stats, TCA_ACT_HW_STATS_ANY)) | |
810 | goto nla_put_failure; | |
e3822678 | 811 | |
93a129eb JP |
812 | if (a->used_hw_stats_valid && |
813 | nla_put_bitfield32(skb, TCA_ACT_USED_HW_STATS, | |
814 | a->used_hw_stats, TCA_ACT_HW_STATS_ANY)) | |
815 | goto nla_put_failure; | |
816 | ||
8953b077 JP |
817 | if (a->tcfa_flags && |
818 | nla_put_bitfield32(skb, TCA_ACT_FLAGS, | |
819 | a->tcfa_flags, a->tcfa_flags)) | |
820 | goto nla_put_failure; | |
e3822678 | 821 | |
ae0be8de | 822 | nest = nla_nest_start_noflag(skb, TCA_OPTIONS); |
4b3550ef PM |
823 | if (nest == NULL) |
824 | goto nla_put_failure; | |
cc7ec456 ED |
825 | err = tcf_action_dump_old(skb, a, bind, ref); |
826 | if (err > 0) { | |
4b3550ef | 827 | nla_nest_end(skb, nest); |
1da177e4 LT |
828 | return err; |
829 | } | |
830 | ||
7ba699c6 | 831 | nla_put_failure: |
dc5fc579 | 832 | nlmsg_trim(skb, b); |
1da177e4 LT |
833 | return -1; |
834 | } | |
62e3ba1b | 835 | EXPORT_SYMBOL(tcf_action_dump_1); |
1da177e4 | 836 | |
90b73b77 | 837 | int tcf_action_dump(struct sk_buff *skb, struct tc_action *actions[], |
ca44b738 | 838 | int bind, int ref, bool terse) |
1da177e4 LT |
839 | { |
840 | struct tc_action *a; | |
90b73b77 | 841 | int err = -EINVAL, i; |
4b3550ef | 842 | struct nlattr *nest; |
1da177e4 | 843 | |
90b73b77 VB |
844 | for (i = 0; i < TCA_ACT_MAX_PRIO && actions[i]; i++) { |
845 | a = actions[i]; | |
4097e9d2 | 846 | nest = nla_nest_start_noflag(skb, i + 1); |
4b3550ef PM |
847 | if (nest == NULL) |
848 | goto nla_put_failure; | |
ca44b738 VB |
849 | err = terse ? tcf_action_dump_terse(skb, a) : |
850 | tcf_action_dump_1(skb, a, bind, ref); | |
1da177e4 | 851 | if (err < 0) |
4fe683f5 | 852 | goto errout; |
4b3550ef | 853 | nla_nest_end(skb, nest); |
1da177e4 LT |
854 | } |
855 | ||
856 | return 0; | |
857 | ||
7ba699c6 | 858 | nla_put_failure: |
4fe683f5 TG |
859 | err = -EINVAL; |
860 | errout: | |
4b3550ef | 861 | nla_nest_cancel(skb, nest); |
4fe683f5 | 862 | return err; |
1da177e4 LT |
863 | } |
864 | ||
e0535ce5 | 865 | static struct tc_cookie *nla_memdup_cookie(struct nlattr **tb) |
1045ba77 | 866 | { |
e0535ce5 WB |
867 | struct tc_cookie *c = kzalloc(sizeof(*c), GFP_KERNEL); |
868 | if (!c) | |
869 | return NULL; | |
870 | ||
871 | c->data = nla_memdup(tb[TCA_ACT_COOKIE], GFP_KERNEL); | |
872 | if (!c->data) { | |
873 | kfree(c); | |
874 | return NULL; | |
1045ba77 | 875 | } |
e0535ce5 | 876 | c->len = nla_len(tb[TCA_ACT_COOKIE]); |
1045ba77 | 877 | |
e0535ce5 | 878 | return c; |
1045ba77 JHS |
879 | } |
880 | ||
0dfb2d82 | 881 | static u8 tcf_action_hw_stats_get(struct nlattr *hw_stats_attr) |
44f86580 | 882 | { |
0dfb2d82 | 883 | struct nla_bitfield32 hw_stats_bf; |
44f86580 JP |
884 | |
885 | /* If the user did not pass the attr, that means he does | |
886 | * not care about the type. Return "any" in that case | |
887 | * which is setting on all supported types. | |
888 | */ | |
0dfb2d82 JK |
889 | if (!hw_stats_attr) |
890 | return TCA_ACT_HW_STATS_ANY; | |
891 | hw_stats_bf = nla_get_bitfield32(hw_stats_attr); | |
892 | return hw_stats_bf.value; | |
44f86580 JP |
893 | } |
894 | ||
199ce850 | 895 | static const struct nla_policy tcf_action_policy[TCA_ACT_MAX + 1] = { |
4b793fec | 896 | [TCA_ACT_KIND] = { .type = NLA_STRING }, |
199ce850 CW |
897 | [TCA_ACT_INDEX] = { .type = NLA_U32 }, |
898 | [TCA_ACT_COOKIE] = { .type = NLA_BINARY, | |
899 | .len = TC_COOKIE_MAX_SIZE }, | |
900 | [TCA_ACT_OPTIONS] = { .type = NLA_NESTED }, | |
47a1494b JB |
901 | [TCA_ACT_FLAGS] = NLA_POLICY_BITFIELD32(TCA_ACT_FLAGS_NO_PERCPU_STATS), |
902 | [TCA_ACT_HW_STATS] = NLA_POLICY_BITFIELD32(TCA_ACT_HW_STATS_ANY), | |
199ce850 CW |
903 | }; |
904 | ||
9fb9f251 JP |
905 | struct tc_action *tcf_action_init_1(struct net *net, struct tcf_proto *tp, |
906 | struct nlattr *nla, struct nlattr *est, | |
aea0d727 | 907 | char *name, int ovr, int bind, |
789871bb | 908 | bool rtnl_held, |
aea0d727 | 909 | struct netlink_ext_ack *extack) |
1da177e4 | 910 | { |
abbb0d33 | 911 | struct nla_bitfield32 flags = { 0, 0 }; |
0dfb2d82 | 912 | u8 hw_stats = TCA_ACT_HW_STATS_ANY; |
1da177e4 LT |
913 | struct tc_action *a; |
914 | struct tc_action_ops *a_o; | |
e0535ce5 | 915 | struct tc_cookie *cookie = NULL; |
1da177e4 | 916 | char act_name[IFNAMSIZ]; |
cc7ec456 | 917 | struct nlattr *tb[TCA_ACT_MAX + 1]; |
7ba699c6 | 918 | struct nlattr *kind; |
ab27cfb8 | 919 | int err; |
1da177e4 | 920 | |
1da177e4 | 921 | if (name == NULL) { |
199ce850 CW |
922 | err = nla_parse_nested_deprecated(tb, TCA_ACT_MAX, nla, |
923 | tcf_action_policy, extack); | |
cee63723 | 924 | if (err < 0) |
1da177e4 | 925 | goto err_out; |
cee63723 | 926 | err = -EINVAL; |
7ba699c6 | 927 | kind = tb[TCA_ACT_KIND]; |
84ae017a AA |
928 | if (!kind) { |
929 | NL_SET_ERR_MSG(extack, "TC action kind must be specified"); | |
1da177e4 | 930 | goto err_out; |
84ae017a | 931 | } |
4b793fec CW |
932 | if (nla_strlcpy(act_name, kind, IFNAMSIZ) >= IFNAMSIZ) { |
933 | NL_SET_ERR_MSG(extack, "TC action name too long"); | |
934 | goto err_out; | |
935 | } | |
199ce850 | 936 | if (tb[TCA_ACT_COOKIE]) { |
e0535ce5 WB |
937 | cookie = nla_memdup_cookie(tb); |
938 | if (!cookie) { | |
84ae017a | 939 | NL_SET_ERR_MSG(extack, "No memory to generate TC cookie"); |
e0535ce5 WB |
940 | err = -ENOMEM; |
941 | goto err_out; | |
942 | } | |
943 | } | |
0dfb2d82 | 944 | hw_stats = tcf_action_hw_stats_get(tb[TCA_ACT_HW_STATS]); |
abbb0d33 VB |
945 | if (tb[TCA_ACT_FLAGS]) |
946 | flags = nla_get_bitfield32(tb[TCA_ACT_FLAGS]); | |
1da177e4 | 947 | } else { |
84ae017a AA |
948 | if (strlcpy(act_name, name, IFNAMSIZ) >= IFNAMSIZ) { |
949 | NL_SET_ERR_MSG(extack, "TC action name too long"); | |
950 | err = -EINVAL; | |
1da177e4 | 951 | goto err_out; |
84ae017a | 952 | } |
1da177e4 LT |
953 | } |
954 | ||
955 | a_o = tc_lookup_action_n(act_name); | |
956 | if (a_o == NULL) { | |
95a5afca | 957 | #ifdef CONFIG_MODULES |
789871bb VB |
958 | if (rtnl_held) |
959 | rtnl_unlock(); | |
4bba3925 | 960 | request_module("act_%s", act_name); |
789871bb VB |
961 | if (rtnl_held) |
962 | rtnl_lock(); | |
1da177e4 LT |
963 | |
964 | a_o = tc_lookup_action_n(act_name); | |
965 | ||
966 | /* We dropped the RTNL semaphore in order to | |
967 | * perform the module load. So, even if we | |
968 | * succeeded in loading the module we have to | |
969 | * tell the caller to replay the request. We | |
970 | * indicate this using -EAGAIN. | |
971 | */ | |
972 | if (a_o != NULL) { | |
ab27cfb8 | 973 | err = -EAGAIN; |
1da177e4 LT |
974 | goto err_mod; |
975 | } | |
976 | #endif | |
84ae017a | 977 | NL_SET_ERR_MSG(extack, "Failed to load TC action module"); |
ab27cfb8 | 978 | err = -ENOENT; |
1da177e4 LT |
979 | goto err_out; |
980 | } | |
981 | ||
1da177e4 LT |
982 | /* backward compatibility for policer */ |
983 | if (name == NULL) | |
589dad6d | 984 | err = a_o->init(net, tb[TCA_ACT_OPTIONS], est, &a, ovr, bind, |
abbb0d33 | 985 | rtnl_held, tp, flags.value, extack); |
1da177e4 | 986 | else |
789871bb | 987 | err = a_o->init(net, nla, est, &a, ovr, bind, rtnl_held, |
abbb0d33 | 988 | tp, flags.value, extack); |
ab27cfb8 | 989 | if (err < 0) |
a85a970a | 990 | goto err_mod; |
1da177e4 | 991 | |
eec94fdb VB |
992 | if (!name && tb[TCA_ACT_COOKIE]) |
993 | tcf_set_action_cookie(&a->act_cookie, cookie); | |
1045ba77 | 994 | |
44f86580 | 995 | if (!name) |
0dfb2d82 | 996 | a->hw_stats = hw_stats; |
44f86580 | 997 | |
1da177e4 | 998 | /* module count goes up only when brand new policy is created |
cc7ec456 ED |
999 | * if it exists and is only bound to in a_o->init() then |
1000 | * ACT_P_CREATED is not returned (a zero is). | |
1001 | */ | |
ab27cfb8 | 1002 | if (err != ACT_P_CREATED) |
1da177e4 | 1003 | module_put(a_o->owner); |
1da177e4 | 1004 | |
85d0966f | 1005 | if (TC_ACT_EXT_CMP(a->tcfa_action, TC_ACT_GOTO_CHAIN) && |
ee3bbfe8 | 1006 | !rcu_access_pointer(a->goto_chain)) { |
97763dc0 | 1007 | tcf_action_destroy_1(a, bind); |
85d0966f | 1008 | NL_SET_ERR_MSG(extack, "can't use goto chain with NULL chain"); |
97763dc0 | 1009 | return ERR_PTR(-EINVAL); |
802bfb19 PA |
1010 | } |
1011 | ||
1da177e4 LT |
1012 | return a; |
1013 | ||
1da177e4 LT |
1014 | err_mod: |
1015 | module_put(a_o->owner); | |
1016 | err_out: | |
e0535ce5 WB |
1017 | if (cookie) { |
1018 | kfree(cookie->data); | |
1019 | kfree(cookie); | |
1020 | } | |
ab27cfb8 | 1021 | return ERR_PTR(err); |
1da177e4 LT |
1022 | } |
1023 | ||
90b73b77 VB |
1024 | /* Returns numbers of initialized actions or negative error. */ |
1025 | ||
9fb9f251 JP |
1026 | int tcf_action_init(struct net *net, struct tcf_proto *tp, struct nlattr *nla, |
1027 | struct nlattr *est, char *name, int ovr, int bind, | |
90b73b77 | 1028 | struct tc_action *actions[], size_t *attr_size, |
789871bb | 1029 | bool rtnl_held, struct netlink_ext_ack *extack) |
1da177e4 | 1030 | { |
cc7ec456 | 1031 | struct nlattr *tb[TCA_ACT_MAX_PRIO + 1]; |
33be6271 | 1032 | struct tc_action *act; |
4e76e75d | 1033 | size_t sz = 0; |
cee63723 | 1034 | int err; |
1da177e4 LT |
1035 | int i; |
1036 | ||
8cb08174 JB |
1037 | err = nla_parse_nested_deprecated(tb, TCA_ACT_MAX_PRIO, nla, NULL, |
1038 | extack); | |
cee63723 | 1039 | if (err < 0) |
33be6271 | 1040 | return err; |
1da177e4 | 1041 | |
7ba699c6 | 1042 | for (i = 1; i <= TCA_ACT_MAX_PRIO && tb[i]; i++) { |
aea0d727 | 1043 | act = tcf_action_init_1(net, tp, tb[i], est, name, ovr, bind, |
789871bb | 1044 | rtnl_held, extack); |
33be6271 WC |
1045 | if (IS_ERR(act)) { |
1046 | err = PTR_ERR(act); | |
1da177e4 | 1047 | goto err; |
33be6271 | 1048 | } |
4e76e75d | 1049 | sz += tcf_action_fill_size(act); |
90b73b77 VB |
1050 | /* Start from index 0 */ |
1051 | actions[i - 1] = act; | |
1da177e4 | 1052 | } |
aecc5cef | 1053 | |
4e76e75d | 1054 | *attr_size = tcf_action_full_attrs_size(sz); |
90b73b77 | 1055 | return i - 1; |
1da177e4 LT |
1056 | |
1057 | err: | |
33be6271 WC |
1058 | tcf_action_destroy(actions, bind); |
1059 | return err; | |
1da177e4 LT |
1060 | } |
1061 | ||
4b61d3e8 PL |
1062 | void tcf_action_update_stats(struct tc_action *a, u64 bytes, u64 packets, |
1063 | u64 drops, bool hw) | |
c8ecebd0 | 1064 | { |
5e174d5e VB |
1065 | if (a->cpu_bstats) { |
1066 | _bstats_cpu_update(this_cpu_ptr(a->cpu_bstats), bytes, packets); | |
c8ecebd0 | 1067 | |
4b61d3e8 | 1068 | this_cpu_ptr(a->cpu_qstats)->drops += drops; |
5e174d5e VB |
1069 | |
1070 | if (hw) | |
1071 | _bstats_cpu_update(this_cpu_ptr(a->cpu_bstats_hw), | |
1072 | bytes, packets); | |
1073 | return; | |
1074 | } | |
c8ecebd0 | 1075 | |
5e174d5e | 1076 | _bstats_update(&a->tcfa_bstats, bytes, packets); |
4b61d3e8 | 1077 | a->tcfa_qstats.drops += drops; |
c8ecebd0 | 1078 | if (hw) |
5e174d5e | 1079 | _bstats_update(&a->tcfa_bstats_hw, bytes, packets); |
c8ecebd0 VB |
1080 | } |
1081 | EXPORT_SYMBOL(tcf_action_update_stats); | |
1082 | ||
ec0595cc | 1083 | int tcf_action_copy_stats(struct sk_buff *skb, struct tc_action *p, |
1da177e4 LT |
1084 | int compat_mode) |
1085 | { | |
1086 | int err = 0; | |
1087 | struct gnet_dump d; | |
10297b99 | 1088 | |
7eb8896d | 1089 | if (p == NULL) |
1da177e4 LT |
1090 | goto errout; |
1091 | ||
1092 | /* compat_mode being true specifies a call that is supposed | |
06fe9fb4 | 1093 | * to add additional backward compatibility statistic TLVs. |
1da177e4 LT |
1094 | */ |
1095 | if (compat_mode) { | |
ec0595cc | 1096 | if (p->type == TCA_OLD_COMPAT) |
1da177e4 | 1097 | err = gnet_stats_start_copy_compat(skb, 0, |
9854518e ND |
1098 | TCA_STATS, |
1099 | TCA_XSTATS, | |
ec0595cc | 1100 | &p->tcfa_lock, &d, |
9854518e | 1101 | TCA_PAD); |
1da177e4 LT |
1102 | else |
1103 | return 0; | |
1104 | } else | |
1105 | err = gnet_stats_start_copy(skb, TCA_ACT_STATS, | |
ec0595cc | 1106 | &p->tcfa_lock, &d, TCA_ACT_PAD); |
1da177e4 LT |
1107 | |
1108 | if (err < 0) | |
1109 | goto errout; | |
1110 | ||
ec0595cc | 1111 | if (gnet_stats_copy_basic(NULL, &d, p->cpu_bstats, &p->tcfa_bstats) < 0 || |
28169aba EC |
1112 | gnet_stats_copy_basic_hw(NULL, &d, p->cpu_bstats_hw, |
1113 | &p->tcfa_bstats_hw) < 0 || | |
1c0d32fd | 1114 | gnet_stats_copy_rate_est(&d, &p->tcfa_rate_est) < 0 || |
519c818e | 1115 | gnet_stats_copy_queue(&d, p->cpu_qstats, |
ec0595cc WC |
1116 | &p->tcfa_qstats, |
1117 | p->tcfa_qstats.qlen) < 0) | |
1da177e4 LT |
1118 | goto errout; |
1119 | ||
1120 | if (gnet_stats_finish_copy(&d) < 0) | |
1121 | goto errout; | |
1122 | ||
1123 | return 0; | |
1124 | ||
1125 | errout: | |
1126 | return -1; | |
1127 | } | |
1128 | ||
90b73b77 | 1129 | static int tca_get_fill(struct sk_buff *skb, struct tc_action *actions[], |
0b0f43fe JHS |
1130 | u32 portid, u32 seq, u16 flags, int event, int bind, |
1131 | int ref) | |
1da177e4 LT |
1132 | { |
1133 | struct tcamsg *t; | |
1134 | struct nlmsghdr *nlh; | |
27a884dc | 1135 | unsigned char *b = skb_tail_pointer(skb); |
4b3550ef | 1136 | struct nlattr *nest; |
1da177e4 | 1137 | |
15e47304 | 1138 | nlh = nlmsg_put(skb, portid, seq, event, sizeof(*t), flags); |
8b00a53c DM |
1139 | if (!nlh) |
1140 | goto out_nlmsg_trim; | |
1141 | t = nlmsg_data(nlh); | |
1da177e4 | 1142 | t->tca_family = AF_UNSPEC; |
9ef1d4c7 PM |
1143 | t->tca__pad1 = 0; |
1144 | t->tca__pad2 = 0; | |
10297b99 | 1145 | |
ae0be8de | 1146 | nest = nla_nest_start_noflag(skb, TCA_ACT_TAB); |
1af85155 | 1147 | if (!nest) |
8b00a53c | 1148 | goto out_nlmsg_trim; |
1da177e4 | 1149 | |
ca44b738 | 1150 | if (tcf_action_dump(skb, actions, bind, ref, false) < 0) |
8b00a53c | 1151 | goto out_nlmsg_trim; |
1da177e4 | 1152 | |
4b3550ef | 1153 | nla_nest_end(skb, nest); |
10297b99 | 1154 | |
27a884dc | 1155 | nlh->nlmsg_len = skb_tail_pointer(skb) - b; |
1da177e4 LT |
1156 | return skb->len; |
1157 | ||
8b00a53c | 1158 | out_nlmsg_trim: |
dc5fc579 | 1159 | nlmsg_trim(skb, b); |
1da177e4 LT |
1160 | return -1; |
1161 | } | |
1162 | ||
1163 | static int | |
c4c4290c | 1164 | tcf_get_notify(struct net *net, u32 portid, struct nlmsghdr *n, |
90b73b77 | 1165 | struct tc_action *actions[], int event, |
84ae017a | 1166 | struct netlink_ext_ack *extack) |
1da177e4 LT |
1167 | { |
1168 | struct sk_buff *skb; | |
1da177e4 LT |
1169 | |
1170 | skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL); | |
1171 | if (!skb) | |
1172 | return -ENOBUFS; | |
0b0f43fe | 1173 | if (tca_get_fill(skb, actions, portid, n->nlmsg_seq, 0, event, |
3f7c72bc | 1174 | 0, 1) <= 0) { |
84ae017a | 1175 | NL_SET_ERR_MSG(extack, "Failed to fill netlink attributes while adding TC action"); |
1da177e4 LT |
1176 | kfree_skb(skb); |
1177 | return -EINVAL; | |
1178 | } | |
2942e900 | 1179 | |
15e47304 | 1180 | return rtnl_unicast(skb, net, portid); |
1da177e4 LT |
1181 | } |
1182 | ||
ddf97ccd | 1183 | static struct tc_action *tcf_action_get_1(struct net *net, struct nlattr *nla, |
84ae017a AA |
1184 | struct nlmsghdr *n, u32 portid, |
1185 | struct netlink_ext_ack *extack) | |
1da177e4 | 1186 | { |
cc7ec456 | 1187 | struct nlattr *tb[TCA_ACT_MAX + 1]; |
a85a970a | 1188 | const struct tc_action_ops *ops; |
1da177e4 LT |
1189 | struct tc_action *a; |
1190 | int index; | |
ab27cfb8 | 1191 | int err; |
1da177e4 | 1192 | |
199ce850 CW |
1193 | err = nla_parse_nested_deprecated(tb, TCA_ACT_MAX, nla, |
1194 | tcf_action_policy, extack); | |
cee63723 | 1195 | if (err < 0) |
ab27cfb8 | 1196 | goto err_out; |
1da177e4 | 1197 | |
cee63723 | 1198 | err = -EINVAL; |
7ba699c6 | 1199 | if (tb[TCA_ACT_INDEX] == NULL || |
84ae017a AA |
1200 | nla_len(tb[TCA_ACT_INDEX]) < sizeof(index)) { |
1201 | NL_SET_ERR_MSG(extack, "Invalid TC action index value"); | |
ab27cfb8 | 1202 | goto err_out; |
84ae017a | 1203 | } |
1587bac4 | 1204 | index = nla_get_u32(tb[TCA_ACT_INDEX]); |
1da177e4 | 1205 | |
ab27cfb8 | 1206 | err = -EINVAL; |
a85a970a | 1207 | ops = tc_lookup_action(tb[TCA_ACT_KIND]); |
84ae017a | 1208 | if (!ops) { /* could happen in batch of actions */ |
f061b48c | 1209 | NL_SET_ERR_MSG(extack, "Specified TC action kind not found"); |
a85a970a | 1210 | goto err_out; |
84ae017a | 1211 | } |
ab27cfb8 | 1212 | err = -ENOENT; |
f061b48c CW |
1213 | if (ops->lookup(net, &a, index) == 0) { |
1214 | NL_SET_ERR_MSG(extack, "TC action with specified index not found"); | |
1da177e4 | 1215 | goto err_mod; |
f061b48c | 1216 | } |
1da177e4 | 1217 | |
a85a970a | 1218 | module_put(ops->owner); |
1da177e4 | 1219 | return a; |
ab27cfb8 | 1220 | |
1da177e4 | 1221 | err_mod: |
a85a970a | 1222 | module_put(ops->owner); |
ab27cfb8 PM |
1223 | err_out: |
1224 | return ERR_PTR(err); | |
1da177e4 LT |
1225 | } |
1226 | ||
7316ae88 | 1227 | static int tca_action_flush(struct net *net, struct nlattr *nla, |
84ae017a AA |
1228 | struct nlmsghdr *n, u32 portid, |
1229 | struct netlink_ext_ack *extack) | |
1da177e4 LT |
1230 | { |
1231 | struct sk_buff *skb; | |
1232 | unsigned char *b; | |
1233 | struct nlmsghdr *nlh; | |
1234 | struct tcamsg *t; | |
1235 | struct netlink_callback dcb; | |
4b3550ef | 1236 | struct nlattr *nest; |
cc7ec456 | 1237 | struct nlattr *tb[TCA_ACT_MAX + 1]; |
a85a970a | 1238 | const struct tc_action_ops *ops; |
7ba699c6 | 1239 | struct nlattr *kind; |
36723873 | 1240 | int err = -ENOMEM; |
1da177e4 | 1241 | |
1da177e4 | 1242 | skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL); |
84ae017a | 1243 | if (!skb) |
36723873 | 1244 | return err; |
1da177e4 | 1245 | |
27a884dc | 1246 | b = skb_tail_pointer(skb); |
1da177e4 | 1247 | |
199ce850 CW |
1248 | err = nla_parse_nested_deprecated(tb, TCA_ACT_MAX, nla, |
1249 | tcf_action_policy, extack); | |
cee63723 | 1250 | if (err < 0) |
1da177e4 LT |
1251 | goto err_out; |
1252 | ||
cee63723 | 1253 | err = -EINVAL; |
7ba699c6 | 1254 | kind = tb[TCA_ACT_KIND]; |
a85a970a | 1255 | ops = tc_lookup_action(kind); |
84ae017a AA |
1256 | if (!ops) { /*some idjot trying to flush unknown action */ |
1257 | NL_SET_ERR_MSG(extack, "Cannot flush unknown TC action"); | |
1da177e4 | 1258 | goto err_out; |
84ae017a | 1259 | } |
1da177e4 | 1260 | |
0b0f43fe JHS |
1261 | nlh = nlmsg_put(skb, portid, n->nlmsg_seq, RTM_DELACTION, |
1262 | sizeof(*t), 0); | |
84ae017a AA |
1263 | if (!nlh) { |
1264 | NL_SET_ERR_MSG(extack, "Failed to create TC action flush notification"); | |
8b00a53c | 1265 | goto out_module_put; |
84ae017a | 1266 | } |
8b00a53c | 1267 | t = nlmsg_data(nlh); |
1da177e4 | 1268 | t->tca_family = AF_UNSPEC; |
9ef1d4c7 PM |
1269 | t->tca__pad1 = 0; |
1270 | t->tca__pad2 = 0; | |
1da177e4 | 1271 | |
ae0be8de | 1272 | nest = nla_nest_start_noflag(skb, TCA_ACT_TAB); |
84ae017a AA |
1273 | if (!nest) { |
1274 | NL_SET_ERR_MSG(extack, "Failed to add new netlink message"); | |
8b00a53c | 1275 | goto out_module_put; |
84ae017a | 1276 | } |
1da177e4 | 1277 | |
41780105 | 1278 | err = ops->walk(net, skb, &dcb, RTM_DELACTION, ops, extack); |
66dede2d DC |
1279 | if (err <= 0) { |
1280 | nla_nest_cancel(skb, nest); | |
8b00a53c | 1281 | goto out_module_put; |
66dede2d | 1282 | } |
1da177e4 | 1283 | |
4b3550ef | 1284 | nla_nest_end(skb, nest); |
1da177e4 | 1285 | |
27a884dc | 1286 | nlh->nlmsg_len = skb_tail_pointer(skb) - b; |
1da177e4 | 1287 | nlh->nlmsg_flags |= NLM_F_ROOT; |
a85a970a | 1288 | module_put(ops->owner); |
15e47304 | 1289 | err = rtnetlink_send(skb, net, portid, RTNLGRP_TC, |
cc7ec456 | 1290 | n->nlmsg_flags & NLM_F_ECHO); |
1da177e4 LT |
1291 | if (err > 0) |
1292 | return 0; | |
84ae017a AA |
1293 | if (err < 0) |
1294 | NL_SET_ERR_MSG(extack, "Failed to send TC action flush notification"); | |
1da177e4 LT |
1295 | |
1296 | return err; | |
1297 | ||
8b00a53c | 1298 | out_module_put: |
a85a970a | 1299 | module_put(ops->owner); |
1da177e4 LT |
1300 | err_out: |
1301 | kfree_skb(skb); | |
1da177e4 LT |
1302 | return err; |
1303 | } | |
1304 | ||
b144e7ec | 1305 | static int tcf_action_delete(struct net *net, struct tc_action *actions[]) |
16af6067 | 1306 | { |
97a3f84f | 1307 | int i; |
16af6067 | 1308 | |
90b73b77 VB |
1309 | for (i = 0; i < TCA_ACT_MAX_PRIO && actions[i]; i++) { |
1310 | struct tc_action *a = actions[i]; | |
16af6067 | 1311 | const struct tc_action_ops *ops = a->ops; |
16af6067 VB |
1312 | /* Actions can be deleted concurrently so we must save their |
1313 | * type and id to search again after reference is released. | |
1314 | */ | |
97a3f84f CW |
1315 | struct tcf_idrinfo *idrinfo = a->idrinfo; |
1316 | u32 act_index = a->tcfa_index; | |
16af6067 | 1317 | |
c10bbfae | 1318 | actions[i] = NULL; |
16af6067 VB |
1319 | if (tcf_action_put(a)) { |
1320 | /* last reference, action was deleted concurrently */ | |
1321 | module_put(ops->owner); | |
1322 | } else { | |
97a3f84f CW |
1323 | int ret; |
1324 | ||
16af6067 | 1325 | /* now do the delete */ |
97a3f84f | 1326 | ret = tcf_idr_delete_index(idrinfo, act_index); |
edfaf94f | 1327 | if (ret < 0) |
16af6067 VB |
1328 | return ret; |
1329 | } | |
1330 | } | |
1331 | return 0; | |
1332 | } | |
1333 | ||
a56e1953 | 1334 | static int |
90b73b77 | 1335 | tcf_del_notify(struct net *net, struct nlmsghdr *n, struct tc_action *actions[], |
edfaf94f | 1336 | u32 portid, size_t attr_size, struct netlink_ext_ack *extack) |
a56e1953 WC |
1337 | { |
1338 | int ret; | |
1339 | struct sk_buff *skb; | |
1340 | ||
d04e6990 RM |
1341 | skb = alloc_skb(attr_size <= NLMSG_GOODSIZE ? NLMSG_GOODSIZE : attr_size, |
1342 | GFP_KERNEL); | |
a56e1953 WC |
1343 | if (!skb) |
1344 | return -ENOBUFS; | |
1345 | ||
1346 | if (tca_get_fill(skb, actions, portid, n->nlmsg_seq, 0, RTM_DELACTION, | |
3f7c72bc | 1347 | 0, 2) <= 0) { |
84ae017a | 1348 | NL_SET_ERR_MSG(extack, "Failed to fill netlink TC action attributes"); |
a56e1953 WC |
1349 | kfree_skb(skb); |
1350 | return -EINVAL; | |
1351 | } | |
1352 | ||
1353 | /* now do the delete */ | |
b144e7ec | 1354 | ret = tcf_action_delete(net, actions); |
55334a5d | 1355 | if (ret < 0) { |
84ae017a | 1356 | NL_SET_ERR_MSG(extack, "Failed to delete TC action"); |
55334a5d WC |
1357 | kfree_skb(skb); |
1358 | return ret; | |
1359 | } | |
a56e1953 WC |
1360 | |
1361 | ret = rtnetlink_send(skb, net, portid, RTNLGRP_TC, | |
1362 | n->nlmsg_flags & NLM_F_ECHO); | |
1363 | if (ret > 0) | |
1364 | return 0; | |
1365 | return ret; | |
1366 | } | |
1367 | ||
1da177e4 | 1368 | static int |
7316ae88 | 1369 | tca_action_gd(struct net *net, struct nlattr *nla, struct nlmsghdr *n, |
84ae017a | 1370 | u32 portid, int event, struct netlink_ext_ack *extack) |
1da177e4 | 1371 | { |
cee63723 | 1372 | int i, ret; |
cc7ec456 | 1373 | struct nlattr *tb[TCA_ACT_MAX_PRIO + 1]; |
33be6271 | 1374 | struct tc_action *act; |
d04e6990 | 1375 | size_t attr_size = 0; |
edfaf94f | 1376 | struct tc_action *actions[TCA_ACT_MAX_PRIO] = {}; |
1da177e4 | 1377 | |
8cb08174 JB |
1378 | ret = nla_parse_nested_deprecated(tb, TCA_ACT_MAX_PRIO, nla, NULL, |
1379 | extack); | |
cee63723 PM |
1380 | if (ret < 0) |
1381 | return ret; | |
1da177e4 | 1382 | |
cc7ec456 | 1383 | if (event == RTM_DELACTION && n->nlmsg_flags & NLM_F_ROOT) { |
1af85155 | 1384 | if (tb[1]) |
84ae017a | 1385 | return tca_action_flush(net, tb[1], n, portid, extack); |
1af85155 | 1386 | |
84ae017a | 1387 | NL_SET_ERR_MSG(extack, "Invalid netlink attributes while flushing TC action"); |
1af85155 | 1388 | return -EINVAL; |
1da177e4 LT |
1389 | } |
1390 | ||
7ba699c6 | 1391 | for (i = 1; i <= TCA_ACT_MAX_PRIO && tb[i]; i++) { |
84ae017a | 1392 | act = tcf_action_get_1(net, tb[i], n, portid, extack); |
ab27cfb8 PM |
1393 | if (IS_ERR(act)) { |
1394 | ret = PTR_ERR(act); | |
1da177e4 | 1395 | goto err; |
ab27cfb8 | 1396 | } |
4e76e75d | 1397 | attr_size += tcf_action_fill_size(act); |
90b73b77 | 1398 | actions[i - 1] = act; |
1da177e4 | 1399 | } |
4e76e75d RM |
1400 | |
1401 | attr_size = tcf_action_full_attrs_size(attr_size); | |
1da177e4 LT |
1402 | |
1403 | if (event == RTM_GETACTION) | |
90b73b77 | 1404 | ret = tcf_get_notify(net, portid, n, actions, event, extack); |
1da177e4 | 1405 | else { /* delete */ |
edfaf94f | 1406 | ret = tcf_del_notify(net, n, actions, portid, attr_size, extack); |
a56e1953 | 1407 | if (ret) |
1da177e4 | 1408 | goto err; |
edfaf94f | 1409 | return 0; |
1da177e4 LT |
1410 | } |
1411 | err: | |
edfaf94f | 1412 | tcf_action_put_many(actions); |
1da177e4 LT |
1413 | return ret; |
1414 | } | |
1415 | ||
a56e1953 | 1416 | static int |
90b73b77 | 1417 | tcf_add_notify(struct net *net, struct nlmsghdr *n, struct tc_action *actions[], |
d04e6990 | 1418 | u32 portid, size_t attr_size, struct netlink_ext_ack *extack) |
1da177e4 | 1419 | { |
1da177e4 | 1420 | struct sk_buff *skb; |
1da177e4 LT |
1421 | int err = 0; |
1422 | ||
d04e6990 RM |
1423 | skb = alloc_skb(attr_size <= NLMSG_GOODSIZE ? NLMSG_GOODSIZE : attr_size, |
1424 | GFP_KERNEL); | |
1da177e4 LT |
1425 | if (!skb) |
1426 | return -ENOBUFS; | |
1427 | ||
a56e1953 WC |
1428 | if (tca_get_fill(skb, actions, portid, n->nlmsg_seq, n->nlmsg_flags, |
1429 | RTM_NEWACTION, 0, 0) <= 0) { | |
d143b9e3 | 1430 | NL_SET_ERR_MSG(extack, "Failed to fill netlink attributes while adding TC action"); |
a56e1953 WC |
1431 | kfree_skb(skb); |
1432 | return -EINVAL; | |
1433 | } | |
10297b99 | 1434 | |
a56e1953 WC |
1435 | err = rtnetlink_send(skb, net, portid, RTNLGRP_TC, |
1436 | n->nlmsg_flags & NLM_F_ECHO); | |
1da177e4 LT |
1437 | if (err > 0) |
1438 | err = 0; | |
1439 | return err; | |
1da177e4 LT |
1440 | } |
1441 | ||
5a7a5555 | 1442 | static int tcf_action_add(struct net *net, struct nlattr *nla, |
aea0d727 AA |
1443 | struct nlmsghdr *n, u32 portid, int ovr, |
1444 | struct netlink_ext_ack *extack) | |
1da177e4 | 1445 | { |
d04e6990 | 1446 | size_t attr_size = 0; |
39f13ea2 | 1447 | int loop, ret; |
90b73b77 | 1448 | struct tc_action *actions[TCA_ACT_MAX_PRIO] = {}; |
1da177e4 | 1449 | |
39f13ea2 ED |
1450 | for (loop = 0; loop < 10; loop++) { |
1451 | ret = tcf_action_init(net, NULL, nla, NULL, NULL, ovr, 0, | |
1452 | actions, &attr_size, true, extack); | |
1453 | if (ret != -EAGAIN) | |
1454 | break; | |
1455 | } | |
1456 | ||
90b73b77 | 1457 | if (ret < 0) |
f07fed82 | 1458 | return ret; |
90b73b77 | 1459 | ret = tcf_add_notify(net, n, actions, portid, attr_size, extack); |
cae422f3 | 1460 | if (ovr) |
90b73b77 | 1461 | tcf_action_put_many(actions); |
1da177e4 | 1462 | |
cae422f3 | 1463 | return ret; |
1da177e4 LT |
1464 | } |
1465 | ||
90825b23 | 1466 | static const struct nla_policy tcaa_policy[TCA_ROOT_MAX + 1] = { |
47a1494b | 1467 | [TCA_ROOT_FLAGS] = NLA_POLICY_BITFIELD32(TCA_FLAG_LARGE_DUMP_ON), |
e62e484d | 1468 | [TCA_ROOT_TIME_DELTA] = { .type = NLA_U32 }, |
90825b23 JHS |
1469 | }; |
1470 | ||
c21ef3e3 DA |
1471 | static int tc_ctl_action(struct sk_buff *skb, struct nlmsghdr *n, |
1472 | struct netlink_ext_ack *extack) | |
1da177e4 | 1473 | { |
3b1e0a65 | 1474 | struct net *net = sock_net(skb->sk); |
90825b23 | 1475 | struct nlattr *tca[TCA_ROOT_MAX + 1]; |
15e47304 | 1476 | u32 portid = skb ? NETLINK_CB(skb).portid : 0; |
1da177e4 LT |
1477 | int ret = 0, ovr = 0; |
1478 | ||
0b0f43fe JHS |
1479 | if ((n->nlmsg_type != RTM_GETACTION) && |
1480 | !netlink_capable(skb, CAP_NET_ADMIN)) | |
dfc47ef8 EB |
1481 | return -EPERM; |
1482 | ||
8cb08174 JB |
1483 | ret = nlmsg_parse_deprecated(n, sizeof(struct tcamsg), tca, |
1484 | TCA_ROOT_MAX, NULL, extack); | |
7ba699c6 PM |
1485 | if (ret < 0) |
1486 | return ret; | |
1487 | ||
1488 | if (tca[TCA_ACT_TAB] == NULL) { | |
84ae017a | 1489 | NL_SET_ERR_MSG(extack, "Netlink action attributes missing"); |
1da177e4 LT |
1490 | return -EINVAL; |
1491 | } | |
1492 | ||
cc7ec456 | 1493 | /* n->nlmsg_flags & NLM_F_CREATE */ |
1da177e4 LT |
1494 | switch (n->nlmsg_type) { |
1495 | case RTM_NEWACTION: | |
1496 | /* we are going to assume all other flags | |
25985edc | 1497 | * imply create only if it doesn't exist |
1da177e4 LT |
1498 | * Note that CREATE | EXCL implies that |
1499 | * but since we want avoid ambiguity (eg when flags | |
1500 | * is zero) then just set this | |
1501 | */ | |
cc7ec456 | 1502 | if (n->nlmsg_flags & NLM_F_REPLACE) |
1da177e4 | 1503 | ovr = 1; |
aea0d727 AA |
1504 | ret = tcf_action_add(net, tca[TCA_ACT_TAB], n, portid, ovr, |
1505 | extack); | |
1da177e4 LT |
1506 | break; |
1507 | case RTM_DELACTION: | |
7316ae88 | 1508 | ret = tca_action_gd(net, tca[TCA_ACT_TAB], n, |
84ae017a | 1509 | portid, RTM_DELACTION, extack); |
1da177e4 LT |
1510 | break; |
1511 | case RTM_GETACTION: | |
7316ae88 | 1512 | ret = tca_action_gd(net, tca[TCA_ACT_TAB], n, |
84ae017a | 1513 | portid, RTM_GETACTION, extack); |
1da177e4 LT |
1514 | break; |
1515 | default: | |
1516 | BUG(); | |
1517 | } | |
1518 | ||
1519 | return ret; | |
1520 | } | |
1521 | ||
90825b23 | 1522 | static struct nlattr *find_dump_kind(struct nlattr **nla) |
1da177e4 | 1523 | { |
cc7ec456 | 1524 | struct nlattr *tb1, *tb2[TCA_ACT_MAX + 1]; |
7ba699c6 | 1525 | struct nlattr *tb[TCA_ACT_MAX_PRIO + 1]; |
7ba699c6 | 1526 | struct nlattr *kind; |
1da177e4 | 1527 | |
7ba699c6 | 1528 | tb1 = nla[TCA_ACT_TAB]; |
1da177e4 LT |
1529 | if (tb1 == NULL) |
1530 | return NULL; | |
1531 | ||
8cb08174 | 1532 | if (nla_parse_deprecated(tb, TCA_ACT_MAX_PRIO, nla_data(tb1), NLMSG_ALIGN(nla_len(tb1)), NULL, NULL) < 0) |
1da177e4 | 1533 | return NULL; |
1da177e4 | 1534 | |
6d834e04 PM |
1535 | if (tb[1] == NULL) |
1536 | return NULL; | |
199ce850 | 1537 | if (nla_parse_nested_deprecated(tb2, TCA_ACT_MAX, tb[1], tcf_action_policy, NULL) < 0) |
1da177e4 | 1538 | return NULL; |
7ba699c6 | 1539 | kind = tb2[TCA_ACT_KIND]; |
1da177e4 | 1540 | |
26dab893 | 1541 | return kind; |
1da177e4 LT |
1542 | } |
1543 | ||
5a7a5555 | 1544 | static int tc_dump_action(struct sk_buff *skb, struct netlink_callback *cb) |
1da177e4 | 1545 | { |
ddf97ccd | 1546 | struct net *net = sock_net(skb->sk); |
1da177e4 | 1547 | struct nlmsghdr *nlh; |
27a884dc | 1548 | unsigned char *b = skb_tail_pointer(skb); |
4b3550ef | 1549 | struct nlattr *nest; |
1da177e4 | 1550 | struct tc_action_ops *a_o; |
1da177e4 | 1551 | int ret = 0; |
8b00a53c | 1552 | struct tcamsg *t = (struct tcamsg *) nlmsg_data(cb->nlh); |
90825b23 JHS |
1553 | struct nlattr *tb[TCA_ROOT_MAX + 1]; |
1554 | struct nlattr *count_attr = NULL; | |
e62e484d | 1555 | unsigned long jiffy_since = 0; |
90825b23 JHS |
1556 | struct nlattr *kind = NULL; |
1557 | struct nla_bitfield32 bf; | |
e62e484d | 1558 | u32 msecs_since = 0; |
90825b23 JHS |
1559 | u32 act_count = 0; |
1560 | ||
8cb08174 JB |
1561 | ret = nlmsg_parse_deprecated(cb->nlh, sizeof(struct tcamsg), tb, |
1562 | TCA_ROOT_MAX, tcaa_policy, cb->extack); | |
90825b23 JHS |
1563 | if (ret < 0) |
1564 | return ret; | |
1da177e4 | 1565 | |
90825b23 | 1566 | kind = find_dump_kind(tb); |
1da177e4 | 1567 | if (kind == NULL) { |
6ff9c364 | 1568 | pr_info("tc_dump_action: action bad kind\n"); |
1da177e4 LT |
1569 | return 0; |
1570 | } | |
1571 | ||
26dab893 | 1572 | a_o = tc_lookup_action(kind); |
cc7ec456 | 1573 | if (a_o == NULL) |
1da177e4 | 1574 | return 0; |
1da177e4 | 1575 | |
90825b23 JHS |
1576 | cb->args[2] = 0; |
1577 | if (tb[TCA_ROOT_FLAGS]) { | |
1578 | bf = nla_get_bitfield32(tb[TCA_ROOT_FLAGS]); | |
1579 | cb->args[2] = bf.value; | |
1580 | } | |
1581 | ||
e62e484d JHS |
1582 | if (tb[TCA_ROOT_TIME_DELTA]) { |
1583 | msecs_since = nla_get_u32(tb[TCA_ROOT_TIME_DELTA]); | |
1584 | } | |
1585 | ||
15e47304 | 1586 | nlh = nlmsg_put(skb, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq, |
8b00a53c DM |
1587 | cb->nlh->nlmsg_type, sizeof(*t), 0); |
1588 | if (!nlh) | |
1589 | goto out_module_put; | |
90825b23 | 1590 | |
e62e484d JHS |
1591 | if (msecs_since) |
1592 | jiffy_since = jiffies - msecs_to_jiffies(msecs_since); | |
1593 | ||
8b00a53c | 1594 | t = nlmsg_data(nlh); |
1da177e4 | 1595 | t->tca_family = AF_UNSPEC; |
9ef1d4c7 PM |
1596 | t->tca__pad1 = 0; |
1597 | t->tca__pad2 = 0; | |
e62e484d | 1598 | cb->args[3] = jiffy_since; |
90825b23 JHS |
1599 | count_attr = nla_reserve(skb, TCA_ROOT_COUNT, sizeof(u32)); |
1600 | if (!count_attr) | |
1601 | goto out_module_put; | |
1da177e4 | 1602 | |
ae0be8de | 1603 | nest = nla_nest_start_noflag(skb, TCA_ACT_TAB); |
4b3550ef | 1604 | if (nest == NULL) |
8b00a53c | 1605 | goto out_module_put; |
1da177e4 | 1606 | |
41780105 | 1607 | ret = a_o->walk(net, skb, cb, RTM_GETACTION, a_o, NULL); |
1da177e4 | 1608 | if (ret < 0) |
8b00a53c | 1609 | goto out_module_put; |
1da177e4 LT |
1610 | |
1611 | if (ret > 0) { | |
4b3550ef | 1612 | nla_nest_end(skb, nest); |
1da177e4 | 1613 | ret = skb->len; |
90825b23 JHS |
1614 | act_count = cb->args[1]; |
1615 | memcpy(nla_data(count_attr), &act_count, sizeof(u32)); | |
1616 | cb->args[1] = 0; | |
1da177e4 | 1617 | } else |
ebecaa66 | 1618 | nlmsg_trim(skb, b); |
1da177e4 | 1619 | |
27a884dc | 1620 | nlh->nlmsg_len = skb_tail_pointer(skb) - b; |
15e47304 | 1621 | if (NETLINK_CB(cb->skb).portid && ret) |
1da177e4 LT |
1622 | nlh->nlmsg_flags |= NLM_F_MULTI; |
1623 | module_put(a_o->owner); | |
1624 | return skb->len; | |
1625 | ||
8b00a53c | 1626 | out_module_put: |
1da177e4 | 1627 | module_put(a_o->owner); |
dc5fc579 | 1628 | nlmsg_trim(skb, b); |
1da177e4 LT |
1629 | return skb->len; |
1630 | } | |
1631 | ||
1632 | static int __init tc_action_init(void) | |
1633 | { | |
b97bac64 FW |
1634 | rtnl_register(PF_UNSPEC, RTM_NEWACTION, tc_ctl_action, NULL, 0); |
1635 | rtnl_register(PF_UNSPEC, RTM_DELACTION, tc_ctl_action, NULL, 0); | |
c7ac8679 | 1636 | rtnl_register(PF_UNSPEC, RTM_GETACTION, tc_ctl_action, tc_dump_action, |
b97bac64 | 1637 | 0); |
1da177e4 | 1638 | |
1da177e4 LT |
1639 | return 0; |
1640 | } | |
1641 | ||
1642 | subsys_initcall(tc_action_init); |