net/bridge/br_netlink.c

   1 // SPDX-License-Identifier: GPL-2.0-or-later
   2 /*
   3  *      Bridge netlink control interface
   4  *
   5  *      Authors:
   6  *      Stephen Hemminger               <shemminger@osdl.org>
   7  */
   8
   9 #include <linux/kernel.h>
  10 #include <linux/slab.h>
  11 #include <linux/etherdevice.h>
  12 #include <net/rtnetlink.h>
  13 #include <net/net_namespace.h>
  14 #include <net/sock.h>
  15 #include <uapi/linux/if_bridge.h>
  16
  17 #include "br_private.h"
  18 #include "br_private_stp.h"
  19 #include "br_private_cfm.h"
  20 #include "br_private_tunnel.h"
  21 #include "br_private_mcast_eht.h"
  22
  23 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
  24                                 u32 filter_mask)
  25 {
  26         struct net_bridge_vlan *v;
  27         u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
  28         u16 flags, pvid;
  29         int num_vlans = 0;
  30
  31         if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
  32                 return 0;
  33
  34         pvid = br_get_pvid(vg);
  35         /* Count number of vlan infos */
  36         list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
  37                 flags = 0;
  38                 /* only a context, bridge vlan not activated */
  39                 if (!br_vlan_should_use(v))
  40                         continue;
  41                 if (v->vid == pvid)
  42                         flags |= BRIDGE_VLAN_INFO_PVID;
  43
  44                 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
  45                         flags |= BRIDGE_VLAN_INFO_UNTAGGED;
  46
  47                 if (vid_range_start == 0) {
  48                         goto initvars;
  49                 } else if ((v->vid - vid_range_end) == 1 &&
  50                         flags == vid_range_flags) {
  51                         vid_range_end = v->vid;
  52                         continue;
  53                 } else {
  54                         if ((vid_range_end - vid_range_start) > 0)
  55                                 num_vlans += 2;
  56                         else
  57                                 num_vlans += 1;
  58                 }
  59 initvars:
  60                 vid_range_start = v->vid;
  61                 vid_range_end = v->vid;
  62                 vid_range_flags = flags;
  63         }
  64
  65         if (vid_range_start != 0) {
  66                 if ((vid_range_end - vid_range_start) > 0)
  67                         num_vlans += 2;
  68                 else
  69                         num_vlans += 1;
  70         }
  71
  72         return num_vlans;
  73 }
  74
  75 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
  76                                  u32 filter_mask)
  77 {
  78         int num_vlans;
  79
  80         if (!vg)
  81                 return 0;
  82
  83         if (filter_mask & RTEXT_FILTER_BRVLAN)
  84                 return vg->num_vlans;
  85
  86         rcu_read_lock();
  87         num_vlans = __get_num_vlan_infos(vg, filter_mask);
  88         rcu_read_unlock();
  89
  90         return num_vlans;
  91 }
  92
  93 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
  94                                            u32 filter_mask)
  95 {
  96         struct net_bridge_vlan_group *vg = NULL;
  97         struct net_bridge_port *p = NULL;
  98         struct net_bridge *br = NULL;
  99         u32 num_cfm_peer_mep_infos;
 100         u32 num_cfm_mep_infos;
 101         size_t vinfo_sz = 0;
 102         int num_vlan_infos;
 103
 104         rcu_read_lock();
 105         if (netif_is_bridge_port(dev)) {
 106                 p = br_port_get_check_rcu(dev);
 107                 if (p)
 108                         vg = nbp_vlan_group_rcu(p);
 109         } else if (netif_is_bridge_master(dev)) {
 110                 br = netdev_priv(dev);
 111                 vg = br_vlan_group_rcu(br);
 112         }
 113         num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
 114         rcu_read_unlock();
 115
 116         if (p && (p->flags & BR_VLAN_TUNNEL))
 117                 vinfo_sz += br_get_vlan_tunnel_info_size(vg);
 118
 119         /* Each VLAN is returned in bridge_vlan_info along with flags */
 120         vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
 121
 122         if (p && vg && (filter_mask & RTEXT_FILTER_MST))
 123                 vinfo_sz += br_mst_info_size(vg);
 124
 125         if (!(filter_mask & RTEXT_FILTER_CFM_STATUS))
 126                 return vinfo_sz;
 127
 128         if (!br)
 129                 return vinfo_sz;
 130
 131         /* CFM status info must be added */
 132         br_cfm_mep_count(br, &num_cfm_mep_infos);
 133         br_cfm_peer_mep_count(br, &num_cfm_peer_mep_infos);
 134
 135         vinfo_sz += nla_total_size(0);  /* IFLA_BRIDGE_CFM */
 136         /* For each status struct the MEP instance (u32) is added */
 137         /* MEP instance (u32) + br_cfm_mep_status */
 138         vinfo_sz += num_cfm_mep_infos *
 139                      /*IFLA_BRIDGE_CFM_MEP_STATUS_INSTANCE */
 140                     (nla_total_size(sizeof(u32))
 141                      /* IFLA_BRIDGE_CFM_MEP_STATUS_OPCODE_UNEXP_SEEN */
 142                      + nla_total_size(sizeof(u32))
 143                      /* IFLA_BRIDGE_CFM_MEP_STATUS_VERSION_UNEXP_SEEN */
 144                      + nla_total_size(sizeof(u32))
 145                      /* IFLA_BRIDGE_CFM_MEP_STATUS_RX_LEVEL_LOW_SEEN */
 146                      + nla_total_size(sizeof(u32)));
 147         /* MEP instance (u32) + br_cfm_cc_peer_status */
 148         vinfo_sz += num_cfm_peer_mep_infos *
 149                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_INSTANCE */
 150                     (nla_total_size(sizeof(u32))
 151                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PEER_MEPID */
 152                      + nla_total_size(sizeof(u32))
 153                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_CCM_DEFECT */
 154                      + nla_total_size(sizeof(u32))
 155                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_RDI */
 156                      + nla_total_size(sizeof(u32))
 157                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_PORT_TLV_VALUE */
 158                      + nla_total_size(sizeof(u8))
 159                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_IF_TLV_VALUE */
 160                      + nla_total_size(sizeof(u8))
 161                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEEN */
 162                      + nla_total_size(sizeof(u32))
 163                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_TLV_SEEN */
 164                      + nla_total_size(sizeof(u32))
 165                      /* IFLA_BRIDGE_CFM_CC_PEER_STATUS_SEQ_UNEXP_SEEN */
 166                      + nla_total_size(sizeof(u32)));
 167
 168         return vinfo_sz;
 169 }
 170
 171 static inline size_t br_port_info_size(void)
 172 {
 173         return nla_total_size(1)        /* IFLA_BRPORT_STATE  */
 174                 + nla_total_size(2)     /* IFLA_BRPORT_PRIORITY */
 175                 + nla_total_size(4)     /* IFLA_BRPORT_COST */
 176                 + nla_total_size(1)     /* IFLA_BRPORT_MODE */
 177                 + nla_total_size(1)     /* IFLA_BRPORT_GUARD */
 178                 + nla_total_size(1)     /* IFLA_BRPORT_PROTECT */
 179                 + nla_total_size(1)     /* IFLA_BRPORT_FAST_LEAVE */
 180                 + nla_total_size(1)     /* IFLA_BRPORT_MCAST_TO_UCAST */
 181                 + nla_total_size(1)     /* IFLA_BRPORT_LEARNING */
 182                 + nla_total_size(1)     /* IFLA_BRPORT_UNICAST_FLOOD */
 183                 + nla_total_size(1)     /* IFLA_BRPORT_MCAST_FLOOD */
 184                 + nla_total_size(1)     /* IFLA_BRPORT_BCAST_FLOOD */
 185                 + nla_total_size(1)     /* IFLA_BRPORT_PROXYARP */
 186                 + nla_total_size(1)     /* IFLA_BRPORT_PROXYARP_WIFI */
 187                 + nla_total_size(1)     /* IFLA_BRPORT_VLAN_TUNNEL */
 188                 + nla_total_size(1)     /* IFLA_BRPORT_NEIGH_SUPPRESS */
 189                 + nla_total_size(1)     /* IFLA_BRPORT_ISOLATED */
 190                 + nla_total_size(1)     /* IFLA_BRPORT_LOCKED */
 191                 + nla_total_size(1)     /* IFLA_BRPORT_MAB */
 192                 + nla_total_size(1)     /* IFLA_BRPORT_NEIGH_VLAN_SUPPRESS */
 193                 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_ROOT_ID */
 194                 + nla_total_size(sizeof(struct ifla_bridge_id)) /* IFLA_BRPORT_BRIDGE_ID */
 195                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_DESIGNATED_PORT */
 196                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_DESIGNATED_COST */
 197                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_ID */
 198                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_NO */
 199                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
 200                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_CONFIG_PENDING */
 201                 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
 202                 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
 203                 + nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
 204 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 205                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_MULTICAST_ROUTER */
 206                 + nla_total_size(sizeof(u32))   /* IFLA_BRPORT_MCAST_N_GROUPS */
 207                 + nla_total_size(sizeof(u32))   /* IFLA_BRPORT_MCAST_MAX_GROUPS */
 208 #endif
 209                 + nla_total_size(sizeof(u16))   /* IFLA_BRPORT_GROUP_FWD_MASK */
 210                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_MRP_RING_OPEN */
 211                 + nla_total_size(sizeof(u8))    /* IFLA_BRPORT_MRP_IN_OPEN */
 212                 + nla_total_size(sizeof(u32))   /* IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT */
 213                 + nla_total_size(sizeof(u32))   /* IFLA_BRPORT_MCAST_EHT_HOSTS_CNT */
 214                 + 0;
 215 }
 216
 217 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
 218 {
 219         return NLMSG_ALIGN(sizeof(struct ifinfomsg))
 220                 + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
 221                 + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
 222                 + nla_total_size(4) /* IFLA_MASTER */
 223                 + nla_total_size(4) /* IFLA_MTU */
 224                 + nla_total_size(4) /* IFLA_LINK */
 225                 + nla_total_size(1) /* IFLA_OPERSTATE */
 226                 + nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
 227                 + nla_total_size(br_get_link_af_size_filtered(dev,
 228                                  filter_mask)) /* IFLA_AF_SPEC */
 229                 + nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
 230 }
 231
 232 static int br_port_fill_attrs(struct sk_buff *skb,
 233                               const struct net_bridge_port *p)
 234 {
 235         u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
 236         struct net_bridge_port *backup_p;
 237         u64 timerval;
 238
 239         if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
 240             nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
 241             nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
 242             nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
 243             nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
 244             nla_put_u8(skb, IFLA_BRPORT_PROTECT,
 245                        !!(p->flags & BR_ROOT_BLOCK)) ||
 246             nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
 247                        !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
 248             nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
 249                        !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
 250             nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
 251             nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
 252                        !!(p->flags & BR_FLOOD)) ||
 253             nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
 254                        !!(p->flags & BR_MCAST_FLOOD)) ||
 255             nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
 256                        !!(p->flags & BR_BCAST_FLOOD)) ||
 257             nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
 258             nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
 259                        !!(p->flags & BR_PROXYARP_WIFI)) ||
 260             nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
 261                     &p->designated_root) ||
 262             nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
 263                     &p->designated_bridge) ||
 264             nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
 265             nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
 266             nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
 267             nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
 268             nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
 269                        p->topology_change_ack) ||
 270             nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
 271             nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
 272                                                         BR_VLAN_TUNNEL)) ||
 273             nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
 274             nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
 275                        !!(p->flags & BR_NEIGH_SUPPRESS)) ||
 276             nla_put_u8(skb, IFLA_BRPORT_MRP_RING_OPEN, !!(p->flags &
 277                                                           BR_MRP_LOST_CONT)) ||
 278             nla_put_u8(skb, IFLA_BRPORT_MRP_IN_OPEN,
 279                        !!(p->flags & BR_MRP_LOST_IN_CONT)) ||
 280             nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)) ||
 281             nla_put_u8(skb, IFLA_BRPORT_LOCKED, !!(p->flags & BR_PORT_LOCKED)) ||
 282             nla_put_u8(skb, IFLA_BRPORT_MAB, !!(p->flags & BR_PORT_MAB)) ||
 283             nla_put_u8(skb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
 284                        !!(p->flags & BR_NEIGH_VLAN_SUPPRESS)))
 285                 return -EMSGSIZE;
 286
 287         timerval = br_timer_value(&p->message_age_timer);
 288         if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
 289                               IFLA_BRPORT_PAD))
 290                 return -EMSGSIZE;
 291         timerval = br_timer_value(&p->forward_delay_timer);
 292         if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
 293                               IFLA_BRPORT_PAD))
 294                 return -EMSGSIZE;
 295         timerval = br_timer_value(&p->hold_timer);
 296         if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
 297                               IFLA_BRPORT_PAD))
 298                 return -EMSGSIZE;
 299
 300 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
 301         if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
 302                        p->multicast_ctx.multicast_router) ||
 303             nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT,
 304                         p->multicast_eht_hosts_limit) ||
 305             nla_put_u32(skb, IFLA_BRPORT_MCAST_EHT_HOSTS_CNT,
 306                         p->multicast_eht_hosts_cnt) ||
 307             nla_put_u32(skb, IFLA_BRPORT_MCAST_N_GROUPS,
 308                         br_multicast_ngroups_get(&p->multicast_ctx)) ||
 309             nla_put_u32(skb, IFLA_BRPORT_MCAST_MAX_GROUPS,
 310                         br_multicast_ngroups_get_max(&p->multicast_ctx)))
 311                 return -EMSGSIZE;
 312 #endif
 313
 314         /* we might be called only with br->lock */
 315         rcu_read_lock();
 316         backup_p = rcu_dereference(p->backup_port);
 317         if (backup_p)
 318                 nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
 319                             backup_p->dev->ifindex);
 320         rcu_read_unlock();
 321
 322         return 0;
 323 }
 324
 325 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
 326                                     u16 vid_end, u16 flags)
 327 {
 328         struct  bridge_vlan_info vinfo;
 329
 330         if ((vid_end - vid_start) > 0) {
 331                 /* add range to skb */
 332                 vinfo.vid = vid_start;
 333                 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
 334                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 335                             sizeof(vinfo), &vinfo))
 336                         goto nla_put_failure;
 337
 338                 vinfo.vid = vid_end;
 339                 vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
 340                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 341                             sizeof(vinfo), &vinfo))
 342                         goto nla_put_failure;
 343         } else {
 344                 vinfo.vid = vid_start;
 345                 vinfo.flags = flags;
 346                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 347                             sizeof(vinfo), &vinfo))
 348                         goto nla_put_failure;
 349         }
 350
 351         return 0;
 352
 353 nla_put_failure:
 354         return -EMSGSIZE;
 355 }
 356
 357 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
 358                                          struct net_bridge_vlan_group *vg)
 359 {
 360         struct net_bridge_vlan *v;
 361         u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
 362         u16 flags, pvid;
 363         int err = 0;
 364
 365         /* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
 366          * and mark vlan info with begin and end flags
 367          * if vlaninfo represents a range
 368          */
 369         pvid = br_get_pvid(vg);
 370         list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
 371                 flags = 0;
 372                 if (!br_vlan_should_use(v))
 373                         continue;
 374                 if (v->vid == pvid)
 375                         flags |= BRIDGE_VLAN_INFO_PVID;
 376
 377                 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
 378                         flags |= BRIDGE_VLAN_INFO_UNTAGGED;
 379
 380                 if (vid_range_start == 0) {
 381                         goto initvars;
 382                 } else if ((v->vid - vid_range_end) == 1 &&
 383                         flags == vid_range_flags) {
 384                         vid_range_end = v->vid;
 385                         continue;
 386                 } else {
 387                         err = br_fill_ifvlaninfo_range(skb, vid_range_start,
 388                                                        vid_range_end,
 389                                                        vid_range_flags);
 390                         if (err)
 391                                 return err;
 392                 }
 393
 394 initvars:
 395                 vid_range_start = v->vid;
 396                 vid_range_end = v->vid;
 397                 vid_range_flags = flags;
 398         }
 399
 400         if (vid_range_start != 0) {
 401                 /* Call it once more to send any left over vlans */
 402                 err = br_fill_ifvlaninfo_range(skb, vid_range_start,
 403                                                vid_range_end,
 404                                                vid_range_flags);
 405                 if (err)
 406                         return err;
 407         }
 408
 409         return 0;
 410 }
 411
 412 static int br_fill_ifvlaninfo(struct sk_buff *skb,
 413                               struct net_bridge_vlan_group *vg)
 414 {
 415         struct bridge_vlan_info vinfo;
 416         struct net_bridge_vlan *v;
 417         u16 pvid;
 418
 419         pvid = br_get_pvid(vg);
 420         list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
 421                 if (!br_vlan_should_use(v))
 422                         continue;
 423
 424                 vinfo.vid = v->vid;
 425                 vinfo.flags = 0;
 426                 if (v->vid == pvid)
 427                         vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
 428
 429                 if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
 430                         vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
 431
 432                 if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
 433                             sizeof(vinfo), &vinfo))
 434                         goto nla_put_failure;
 435         }
 436
 437         return 0;
 438
 439 nla_put_failure:
 440         return -EMSGSIZE;
 441 }
 442
 443 /*
 444  * Create one netlink message for one interface
 445  * Contains port and master info as well as carrier and bridge state.
 446  */
 447 static int br_fill_ifinfo(struct sk_buff *skb,
 448                           const struct net_bridge_port *port,
 449                           u32 pid, u32 seq, int event, unsigned int flags,
 450                           u32 filter_mask, const struct net_device *dev,
 451                           bool getlink)
 452 {
 453         u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
 454         struct nlattr *af = NULL;
 455         struct net_bridge *br;
 456         struct ifinfomsg *hdr;
 457         struct nlmsghdr *nlh;
 458
 459         if (port)
 460                 br = port->br;
 461         else
 462                 br = netdev_priv(dev);
 463
 464         br_debug(br, "br_fill_info event %d port %s master %s\n",
 465                      event, dev->name, br->dev->name);
 466
 467         nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
 468         if (nlh == NULL)
 469                 return -EMSGSIZE;
 470
 471         hdr = nlmsg_data(nlh);
 472         hdr->ifi_family = AF_BRIDGE;
 473         hdr->__ifi_pad = 0;
 474         hdr->ifi_type = dev->type;
 475         hdr->ifi_index = dev->ifindex;
 476         hdr->ifi_flags = dev_get_flags(dev);
 477         hdr->ifi_change = 0;
 478
 479         if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
 480             nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
 481             nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
 482             nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
 483             (dev->addr_len &&
 484              nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
 485             (dev->ifindex != dev_get_iflink(dev) &&
 486              nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
 487                 goto nla_put_failure;
 488
 489         if (event == RTM_NEWLINK && port) {
 490                 struct nlattr *nest;
 491
 492                 nest = nla_nest_start(skb, IFLA_PROTINFO);
 493                 if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
 494                         goto nla_put_failure;
 495                 nla_nest_end(skb, nest);
 496         }
 497
 498         if (filter_mask & (RTEXT_FILTER_BRVLAN |
 499                            RTEXT_FILTER_BRVLAN_COMPRESSED |
 500                            RTEXT_FILTER_MRP |
 501                            RTEXT_FILTER_CFM_CONFIG |
 502                            RTEXT_FILTER_CFM_STATUS |
 503                            RTEXT_FILTER_MST)) {
 504                 af = nla_nest_start_noflag(skb, IFLA_AF_SPEC);
 505                 if (!af)
 506                         goto nla_put_failure;
 507         }
 508
 509         /* Check if  the VID information is requested */
 510         if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
 511             (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
 512                 struct net_bridge_vlan_group *vg;
 513                 int err;
 514
 515                 /* RCU needed because of the VLAN locking rules (rcu || rtnl) */
 516                 rcu_read_lock();
 517                 if (port)
 518                         vg = nbp_vlan_group_rcu(port);
 519                 else
 520                         vg = br_vlan_group_rcu(br);
 521
 522                 if (!vg || !vg->num_vlans) {
 523                         rcu_read_unlock();
 524                         goto done;
 525                 }
 526                 if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
 527                         err = br_fill_ifvlaninfo_compressed(skb, vg);
 528                 else
 529                         err = br_fill_ifvlaninfo(skb, vg);
 530
 531                 if (port && (port->flags & BR_VLAN_TUNNEL))
 532                         err = br_fill_vlan_tunnel_info(skb, vg);
 533                 rcu_read_unlock();
 534                 if (err)
 535                         goto nla_put_failure;
 536         }
 537
 538         if (filter_mask & RTEXT_FILTER_MRP) {
 539                 int err;
 540
 541                 if (!br_mrp_enabled(br) || port)
 542                         goto done;
 543
 544                 rcu_read_lock();
 545                 err = br_mrp_fill_info(skb, br);
 546                 rcu_read_unlock();
 547
 548                 if (err)
 549                         goto nla_put_failure;
 550         }
 551
 552         if (filter_mask & (RTEXT_FILTER_CFM_CONFIG | RTEXT_FILTER_CFM_STATUS)) {
 553                 struct nlattr *cfm_nest = NULL;
 554                 int err;
 555
 556                 if (!br_cfm_created(br) || port)
 557                         goto done;
 558
 559                 cfm_nest = nla_nest_start(skb, IFLA_BRIDGE_CFM);
 560                 if (!cfm_nest)
 561                         goto nla_put_failure;
 562
 563                 if (filter_mask & RTEXT_FILTER_CFM_CONFIG) {
 564                         rcu_read_lock();
 565                         err = br_cfm_config_fill_info(skb, br);
 566                         rcu_read_unlock();
 567                         if (err)
 568                                 goto nla_put_failure;
 569                 }
 570
 571                 if (filter_mask & RTEXT_FILTER_CFM_STATUS) {
 572                         rcu_read_lock();
 573                         err = br_cfm_status_fill_info(skb, br, getlink);
 574                         rcu_read_unlock();
 575                         if (err)
 576                                 goto nla_put_failure;
 577                 }
 578
 579                 nla_nest_end(skb, cfm_nest);
 580         }
 581
 582         if ((filter_mask & RTEXT_FILTER_MST) &&
 583             br_opt_get(br, BROPT_MST_ENABLED) && port) {
 584                 const struct net_bridge_vlan_group *vg = nbp_vlan_group(port);
 585                 struct nlattr *mst_nest;
 586                 int err;
 587
 588                 if (!vg || !vg->num_vlans)
 589                         goto done;
 590
 591                 mst_nest = nla_nest_start(skb, IFLA_BRIDGE_MST);
 592                 if (!mst_nest)
 593                         goto nla_put_failure;
 594
 595                 err = br_mst_fill_info(skb, vg);
 596                 if (err)
 597                         goto nla_put_failure;
 598
 599                 nla_nest_end(skb, mst_nest);
 600         }
 601
 602 done:
 603         if (af) {
 604                 if (nlmsg_get_pos(skb) - (void *)af > nla_attr_size(0))
 605                         nla_nest_end(skb, af);
 606                 else
 607                         nla_nest_cancel(skb, af);
 608         }
 609
 610         nlmsg_end(skb, nlh);
 611         return 0;
 612
 613 nla_put_failure:
 614         nlmsg_cancel(skb, nlh);
 615         return -EMSGSIZE;
 616 }
 617
 618 void br_info_notify(int event, const struct net_bridge *br,
 619                     const struct net_bridge_port *port, u32 filter)
 620 {
 621         struct net_device *dev;
 622         struct sk_buff *skb;
 623         int err = -ENOBUFS;
 624         struct net *net;
 625         u16 port_no = 0;
 626
 627         if (WARN_ON(!port && !br))
 628                 return;
 629
 630         if (port) {
 631                 dev = port->dev;
 632                 br = port->br;
 633                 port_no = port->port_no;
 634         } else {
 635                 dev = br->dev;
 636         }
 637
 638         net = dev_net(dev);
 639         br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
 640
 641         skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
 642         if (skb == NULL)
 643                 goto errout;
 644
 645         err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev, false);
 646         if (err < 0) {
 647                 /* -EMSGSIZE implies BUG in br_nlmsg_size() */
 648                 WARN_ON(err == -EMSGSIZE);
 649                 kfree_skb(skb);
 650                 goto errout;
 651         }
 652         rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
 653         return;
 654 errout:
 655         rtnl_set_sk_err(net, RTNLGRP_LINK, err);
 656 }
 657
 658 /* Notify listeners of a change in bridge or port information */
 659 void br_ifinfo_notify(int event, const struct net_bridge *br,
 660                       const struct net_bridge_port *port)
 661 {
 662         u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
 663
 664         return br_info_notify(event, br, port, filter);
 665 }
 666
 667 /*
 668  * Dump information about all ports, in response to GETLINK
 669  */
 670 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
 671                struct net_device *dev, u32 filter_mask, int nlflags)
 672 {
 673         struct net_bridge_port *port = br_port_get_rtnl(dev);
 674
 675         if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
 676             !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED) &&
 677             !(filter_mask & RTEXT_FILTER_MRP) &&
 678             !(filter_mask & RTEXT_FILTER_CFM_CONFIG) &&
 679             !(filter_mask & RTEXT_FILTER_CFM_STATUS))
 680                 return 0;
 681
 682         return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
 683                               filter_mask, dev, true);
 684 }
 685
 686 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
 687                         int cmd, struct bridge_vlan_info *vinfo, bool *changed,
 688                         struct netlink_ext_ack *extack)
 689 {
 690         bool curr_change;
 691         int err = 0;
 692
 693         switch (cmd) {
 694         case RTM_SETLINK:
 695                 if (p) {
 696                         /* if the MASTER flag is set this will act on the global
 697                          * per-VLAN entry as well
 698                          */
 699                         err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
 700                                            &curr_change, extack);
 701                 } else {
 702                         vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
 703                         err = br_vlan_add(br, vinfo->vid, vinfo->flags,
 704                                           &curr_change, extack);
 705                 }
 706                 if (curr_change)
 707                         *changed = true;
 708                 break;
 709
 710         case RTM_DELLINK:
 711                 if (p) {
 712                         if (!nbp_vlan_delete(p, vinfo->vid))
 713                                 *changed = true;
 714
 715                         if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
 716                             !br_vlan_delete(p->br, vinfo->vid))
 717                                 *changed = true;
 718                 } else if (!br_vlan_delete(br, vinfo->vid)) {
 719                         *changed = true;
 720                 }
 721                 break;
 722         }
 723
 724         return err;
 725 }
 726
 727 int br_process_vlan_info(struct net_bridge *br,
 728                          struct net_bridge_port *p, int cmd,
 729                          struct bridge_vlan_info *vinfo_curr,
 730                          struct bridge_vlan_info **vinfo_last,
 731                          bool *changed,
 732                          struct netlink_ext_ack *extack)
 733 {
 734         int err, rtm_cmd;
 735
 736         if (!br_vlan_valid_id(vinfo_curr->vid, extack))
 737                 return -EINVAL;
 738
 739         /* needed for vlan-only NEWVLAN/DELVLAN notifications */
 740         rtm_cmd = br_afspec_cmd_to_rtm(cmd);
 741
 742         if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
 743                 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
 744                         return -EINVAL;
 745                 *vinfo_last = vinfo_curr;
 746                 return 0;
 747         }
 748
 749         if (*vinfo_last) {
 750                 struct bridge_vlan_info tmp_vinfo;
 751                 int v, v_change_start = 0;
 752
 753                 if (!br_vlan_valid_range(vinfo_curr, *vinfo_last, extack))
 754                         return -EINVAL;
 755
 756                 memcpy(&tmp_vinfo, *vinfo_last,
 757                        sizeof(struct bridge_vlan_info));
 758                 for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
 759                         bool curr_change = false;
 760
 761                         tmp_vinfo.vid = v;
 762                         err = br_vlan_info(br, p, cmd, &tmp_vinfo, &curr_change,
 763                                            extack);
 764                         if (err)
 765                                 break;
 766                         if (curr_change) {
 767                                 *changed = curr_change;
 768                                 if (!v_change_start)
 769                                         v_change_start = v;
 770                         } else {
 771                                 /* nothing to notify yet */
 772                                 if (!v_change_start)
 773                                         continue;
 774                                 br_vlan_notify(br, p, v_change_start,
 775                                                v - 1, rtm_cmd);
 776                                 v_change_start = 0;
 777                         }
 778                         cond_resched();
 779                 }
 780                 /* v_change_start is set only if the last/whole range changed */
 781                 if (v_change_start)
 782                         br_vlan_notify(br, p, v_change_start,
 783                                        v - 1, rtm_cmd);
 784
 785                 *vinfo_last = NULL;
 786
 787                 return err;
 788         }
 789
 790         err = br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
 791         if (*changed)
 792                 br_vlan_notify(br, p, vinfo_curr->vid, 0, rtm_cmd);
 793
 794         return err;
 795 }
 796
 797 static int br_afspec(struct net_bridge *br,
 798                      struct net_bridge_port *p,
 799                      struct nlattr *af_spec,
 800                      int cmd, bool *changed,
 801                      struct netlink_ext_ack *extack)
 802 {
 803         struct bridge_vlan_info *vinfo_curr = NULL;
 804         struct bridge_vlan_info *vinfo_last = NULL;
 805         struct nlattr *attr;
 806         struct vtunnel_info tinfo_last = {};
 807         struct vtunnel_info tinfo_curr = {};
 808         int err = 0, rem;
 809
 810         nla_for_each_nested(attr, af_spec, rem) {
 811                 err = 0;
 812                 switch (nla_type(attr)) {
 813                 case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
 814                         if (!p || !(p->flags & BR_VLAN_TUNNEL))
 815                                 return -EINVAL;
 816                         err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
 817                         if (err)
 818                                 return err;
 819                         err = br_process_vlan_tunnel_info(br, p, cmd,
 820                                                           &tinfo_curr,
 821                                                           &tinfo_last,
 822                                                           changed);
 823                         if (err)
 824                                 return err;
 825                         break;
 826                 case IFLA_BRIDGE_VLAN_INFO:
 827                         if (nla_len(attr) != sizeof(struct bridge_vlan_info))
 828                                 return -EINVAL;
 829                         vinfo_curr = nla_data(attr);
 830                         err = br_process_vlan_info(br, p, cmd, vinfo_curr,
 831                                                    &vinfo_last, changed,
 832                                                    extack);
 833                         if (err)
 834                                 return err;
 835                         break;
 836                 case IFLA_BRIDGE_MRP:
 837                         err = br_mrp_parse(br, p, attr, cmd, extack);
 838                         if (err)
 839                                 return err;
 840                         break;
 841                 case IFLA_BRIDGE_CFM:
 842                         err = br_cfm_parse(br, p, attr, cmd, extack);
 843                         if (err)
 844                                 return err;
 845                         break;
 846                 case IFLA_BRIDGE_MST:
 847                         if (!p) {
 848                                 NL_SET_ERR_MSG(extack,
 849                                                "MST states can only be set on bridge ports");
 850                                 return -EINVAL;
 851                         }
 852
 853                         if (cmd != RTM_SETLINK) {
 854                                 NL_SET_ERR_MSG(extack,
 855                                                "MST states can only be set through RTM_SETLINK");
 856                                 return -EINVAL;
 857                         }
 858
 859                         err = br_mst_process(p, attr, extack);
 860                         if (err)
 861                                 return err;
 862                         break;
 863                 }
 864         }
 865
 866         return err;
 867 }
 868
 869 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
 870         [IFLA_BRPORT_UNSPEC]    = { .strict_start_type =
 871                                         IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT + 1 },
 872         [IFLA_BRPORT_STATE]     = { .type = NLA_U8 },
 873         [IFLA_BRPORT_COST]      = { .type = NLA_U32 },
 874         [IFLA_BRPORT_PRIORITY]  = { .type = NLA_U16 },
 875         [IFLA_BRPORT_MODE]      = { .type = NLA_U8 },
 876         [IFLA_BRPORT_GUARD]     = { .type = NLA_U8 },
 877         [IFLA_BRPORT_PROTECT]   = { .type = NLA_U8 },
 878         [IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
 879         [IFLA_BRPORT_LEARNING]  = { .type = NLA_U8 },
 880         [IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
 881         [IFLA_BRPORT_PROXYARP]  = { .type = NLA_U8 },
 882         [IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
 883         [IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
 884         [IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
 885         [IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
 886         [IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
 887         [IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
 888         [IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
 889         [IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
 890         [IFLA_BRPORT_ISOLATED]  = { .type = NLA_U8 },
 891         [IFLA_BRPORT_LOCKED] = { .type = NLA_U8 },
 892         [IFLA_BRPORT_MAB] = { .type = NLA_U8 },
 893         [IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
 894         [IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT] = { .type = NLA_U32 },
 895         [IFLA_BRPORT_MCAST_N_GROUPS] = { .type = NLA_REJECT },
 896         [IFLA_BRPORT_MCAST_MAX_GROUPS] = { .type = NLA_U32 },
 897         [IFLA_BRPORT_NEIGH_VLAN_SUPPRESS] = NLA_POLICY_MAX(NLA_U8, 1),
 898 };
 899
 900 /* Change the state of the port and notify spanning tree */
 901 static int br_set_port_state(struct net_bridge_port *p, u8 state)
 902 {
 903         if (state > BR_STATE_BLOCKING)
 904                 return -EINVAL;
 905
 906         /* if kernel STP is running, don't allow changes */
 907         if (p->br->stp_enabled == BR_KERNEL_STP)
 908                 return -EBUSY;
 909
 910         /* if device is not up, change is not allowed
 911          * if link is not present, only allowable state is disabled
 912          */
 913         if (!netif_running(p->dev) ||
 914             (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
 915                 return -ENETDOWN;
 916
 917         br_set_state(p, state);
 918         br_port_state_selection(p->br);
 919         return 0;
 920 }
 921
 922 /* Set/clear or port flags based on attribute */
 923 static void br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
 924                              int attrtype, unsigned long mask)
 925 {
 926         if (!tb[attrtype])
 927                 return;
 928
 929         if (nla_get_u8(tb[attrtype]))
 930                 p->flags |= mask;
 931         else
 932                 p->flags &= ~mask;
 933 }
 934
 935 /* Process bridge protocol info on port */
 936 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[],
 937                       struct netlink_ext_ack *extack)
 938 {
 939         unsigned long old_flags, changed_mask;
 940         bool br_vlan_tunnel_old;
 941         int err;
 942
 943         old_flags = p->flags;
 944         br_vlan_tunnel_old = (old_flags & BR_VLAN_TUNNEL) ? true : false;
 945
 946         br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
 947         br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
 948         br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE,
 949                          BR_MULTICAST_FAST_LEAVE);
 950         br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
 951         br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
 952         br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
 953         br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
 954         br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST,
 955                          BR_MULTICAST_TO_UNICAST);
 956         br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
 957         br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
 958         br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
 959         br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
 960         br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS, BR_NEIGH_SUPPRESS);
 961         br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
 962         br_set_port_flag(p, tb, IFLA_BRPORT_LOCKED, BR_PORT_LOCKED);
 963         br_set_port_flag(p, tb, IFLA_BRPORT_MAB, BR_PORT_MAB);
 964         br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_VLAN_SUPPRESS,
 965                          BR_NEIGH_VLAN_SUPPRESS);
 966
 967         if ((p->flags & BR_PORT_MAB) &&
 968             (!(p->flags & BR_PORT_LOCKED) || !(p->flags & BR_LEARNING))) {
 969                 NL_SET_ERR_MSG(extack, "Bridge port must be locked and have learning enabled when MAB is enabled");
 970                 p->flags = old_flags;
 971                 return -EINVAL;
 972         } else if (!(p->flags & BR_PORT_MAB) && (old_flags & BR_PORT_MAB)) {
 973                 struct net_bridge_fdb_flush_desc desc = {
 974                         .flags = BIT(BR_FDB_LOCKED),
 975                         .flags_mask = BIT(BR_FDB_LOCKED),
 976                         .port_ifindex = p->dev->ifindex,
 977                 };
 978
 979                 br_fdb_flush(p->br, &desc);
 980         }
 981
 982         changed_mask = old_flags ^ p->flags;
 983
 984         err = br_switchdev_set_port_flag(p, p->flags, changed_mask, extack);
 985         if (err) {
 986                 p->flags = old_flags;
 987                 return err;
 988         }
 989
 990         if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
 991                 nbp_vlan_tunnel_info_flush(p);
 992
 993         br_port_flags_change(p, changed_mask);
 994
 995         if (tb[IFLA_BRPORT_COST]) {
 996                 err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
 997                 if (err)
 998                         return err;
 999         }
1000
1001         if (tb[IFLA_BRPORT_PRIORITY]) {
1002                 err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
1003                 if (err)
1004                         return err;
1005         }
1006
1007         if (tb[IFLA_BRPORT_STATE]) {
1008                 err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
1009                 if (err)
1010                         return err;
1011         }
1012
1013         if (tb[IFLA_BRPORT_FLUSH])
1014                 br_fdb_delete_by_port(p->br, p, 0, 0);
1015
1016 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1017         if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
1018                 u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
1019
1020                 err = br_multicast_set_port_router(&p->multicast_ctx,
1021                                                    mcast_router);
1022                 if (err)
1023                         return err;
1024         }
1025
1026         if (tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]) {
1027                 u32 hlimit;
1028
1029                 hlimit = nla_get_u32(tb[IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT]);
1030                 err = br_multicast_eht_set_hosts_limit(p, hlimit);
1031                 if (err)
1032                         return err;
1033         }
1034
1035         if (tb[IFLA_BRPORT_MCAST_MAX_GROUPS]) {
1036                 u32 max_groups;
1037
1038                 max_groups = nla_get_u32(tb[IFLA_BRPORT_MCAST_MAX_GROUPS]);
1039                 br_multicast_ngroups_set_max(&p->multicast_ctx, max_groups);
1040         }
1041 #endif
1042
1043         if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
1044                 u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
1045
1046                 if (fwd_mask & BR_GROUPFWD_MACPAUSE)
1047                         return -EINVAL;
1048                 p->group_fwd_mask = fwd_mask;
1049         }
1050
1051         if (tb[IFLA_BRPORT_BACKUP_PORT]) {
1052                 struct net_device *backup_dev = NULL;
1053                 u32 backup_ifindex;
1054
1055                 backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
1056                 if (backup_ifindex) {
1057                         backup_dev = __dev_get_by_index(dev_net(p->dev),
1058                                                         backup_ifindex);
1059                         if (!backup_dev)
1060                                 return -ENOENT;
1061                 }
1062
1063                 err = nbp_backup_change(p, backup_dev);
1064                 if (err)
1065                         return err;
1066         }
1067
1068         return 0;
1069 }
1070
1071 /* Change state and parameters on port. */
1072 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
1073                struct netlink_ext_ack *extack)
1074 {
1075         struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1076         struct nlattr *tb[IFLA_BRPORT_MAX + 1];
1077         struct net_bridge_port *p;
1078         struct nlattr *protinfo;
1079         struct nlattr *afspec;
1080         bool changed = false;
1081         int err = 0;
1082
1083         protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
1084         afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1085         if (!protinfo && !afspec)
1086                 return 0;
1087
1088         p = br_port_get_rtnl(dev);
1089         /* We want to accept dev as bridge itself if the AF_SPEC
1090          * is set to see if someone is setting vlan info on the bridge
1091          */
1092         if (!p && !afspec)
1093                 return -EINVAL;
1094
1095         if (p && protinfo) {
1096                 if (protinfo->nla_type & NLA_F_NESTED) {
1097                         err = nla_parse_nested_deprecated(tb, IFLA_BRPORT_MAX,
1098                                                           protinfo,
1099                                                           br_port_policy,
1100                                                           NULL);
1101                         if (err)
1102                                 return err;
1103
1104                         spin_lock_bh(&p->br->lock);
1105                         err = br_setport(p, tb, extack);
1106                         spin_unlock_bh(&p->br->lock);
1107                 } else {
1108                         /* Binary compatibility with old RSTP */
1109                         if (nla_len(protinfo) < sizeof(u8))
1110                                 return -EINVAL;
1111
1112                         spin_lock_bh(&p->br->lock);
1113                         err = br_set_port_state(p, nla_get_u8(protinfo));
1114                         spin_unlock_bh(&p->br->lock);
1115                 }
1116                 if (err)
1117                         goto out;
1118                 changed = true;
1119         }
1120
1121         if (afspec)
1122                 err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
1123
1124         if (changed)
1125                 br_ifinfo_notify(RTM_NEWLINK, br, p);
1126 out:
1127         return err;
1128 }
1129
1130 /* Delete port information */
1131 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
1132 {
1133         struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
1134         struct net_bridge_port *p;
1135         struct nlattr *afspec;
1136         bool changed = false;
1137         int err = 0;
1138
1139         afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
1140         if (!afspec)
1141                 return 0;
1142
1143         p = br_port_get_rtnl(dev);
1144         /* We want to accept dev as bridge itself as well */
1145         if (!p && !netif_is_bridge_master(dev))
1146                 return -EINVAL;
1147
1148         err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
1149         if (changed)
1150                 /* Send RTM_NEWLINK because userspace
1151                  * expects RTM_NEWLINK for vlan dels
1152                  */
1153                 br_ifinfo_notify(RTM_NEWLINK, br, p);
1154
1155         return err;
1156 }
1157
1158 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
1159                        struct netlink_ext_ack *extack)
1160 {
1161         if (tb[IFLA_ADDRESS]) {
1162                 if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
1163                         return -EINVAL;
1164                 if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
1165                         return -EADDRNOTAVAIL;
1166         }
1167
1168         if (!data)
1169                 return 0;
1170
1171 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1172         if (data[IFLA_BR_VLAN_PROTOCOL] &&
1173             !eth_type_vlan(nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])))
1174                 return -EPROTONOSUPPORT;
1175
1176         if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1177                 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1178
1179                 if (defpvid >= VLAN_VID_MASK)
1180                         return -EINVAL;
1181         }
1182 #endif
1183
1184         return 0;
1185 }
1186
1187 static int br_port_slave_changelink(struct net_device *brdev,
1188                                     struct net_device *dev,
1189                                     struct nlattr *tb[],
1190                                     struct nlattr *data[],
1191                                     struct netlink_ext_ack *extack)
1192 {
1193         struct net_bridge *br = netdev_priv(brdev);
1194         int ret;
1195
1196         if (!data)
1197                 return 0;
1198
1199         spin_lock_bh(&br->lock);
1200         ret = br_setport(br_port_get_rtnl(dev), data, extack);
1201         spin_unlock_bh(&br->lock);
1202
1203         return ret;
1204 }
1205
1206 static int br_port_fill_slave_info(struct sk_buff *skb,
1207                                    const struct net_device *brdev,
1208                                    const struct net_device *dev)
1209 {
1210         return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1211 }
1212
1213 static size_t br_port_get_slave_size(const struct net_device *brdev,
1214                                      const struct net_device *dev)
1215 {
1216         return br_port_info_size();
1217 }
1218
1219 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1220         [IFLA_BR_FORWARD_DELAY] = { .type = NLA_U32 },
1221         [IFLA_BR_HELLO_TIME]    = { .type = NLA_U32 },
1222         [IFLA_BR_MAX_AGE]       = { .type = NLA_U32 },
1223         [IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1224         [IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1225         [IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1226         [IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1227         [IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1228         [IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1229         [IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1230                                  .len  = ETH_ALEN },
1231         [IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1232         [IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1233         [IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1234         [IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1235         [IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1236         [IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1237         [IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1238         [IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1239         [IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1240         [IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1241         [IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1242         [IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1243         [IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1244         [IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1245         [IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1246         [IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1247         [IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1248         [IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1249         [IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1250         [IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1251         [IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1252         [IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1253         [IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1254         [IFLA_BR_MULTI_BOOLOPT] =
1255                 NLA_POLICY_EXACT_LEN(sizeof(struct br_boolopt_multi)),
1256 };
1257
1258 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1259                          struct nlattr *data[],
1260                          struct netlink_ext_ack *extack)
1261 {
1262         struct net_bridge *br = netdev_priv(brdev);
1263         int err;
1264
1265         if (!data)
1266                 return 0;
1267
1268         if (data[IFLA_BR_FORWARD_DELAY]) {
1269                 err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1270                 if (err)
1271                         return err;
1272         }
1273
1274         if (data[IFLA_BR_HELLO_TIME]) {
1275                 err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1276                 if (err)
1277                         return err;
1278         }
1279
1280         if (data[IFLA_BR_MAX_AGE]) {
1281                 err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1282                 if (err)
1283                         return err;
1284         }
1285
1286         if (data[IFLA_BR_AGEING_TIME]) {
1287                 err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1288                 if (err)
1289                         return err;
1290         }
1291
1292         if (data[IFLA_BR_STP_STATE]) {
1293                 u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1294
1295                 err = br_stp_set_enabled(br, stp_enabled, extack);
1296                 if (err)
1297                         return err;
1298         }
1299
1300         if (data[IFLA_BR_PRIORITY]) {
1301                 u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1302
1303                 br_stp_set_bridge_priority(br, priority);
1304         }
1305
1306         if (data[IFLA_BR_VLAN_FILTERING]) {
1307                 u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1308
1309                 err = br_vlan_filter_toggle(br, vlan_filter, extack);
1310                 if (err)
1311                         return err;
1312         }
1313
1314 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1315         if (data[IFLA_BR_VLAN_PROTOCOL]) {
1316                 __be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1317
1318                 err = __br_vlan_set_proto(br, vlan_proto, extack);
1319                 if (err)
1320                         return err;
1321         }
1322
1323         if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1324                 __u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1325
1326                 err = __br_vlan_set_default_pvid(br, defpvid, extack);
1327                 if (err)
1328                         return err;
1329         }
1330
1331         if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1332                 __u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1333
1334                 err = br_vlan_set_stats(br, vlan_stats);
1335                 if (err)
1336                         return err;
1337         }
1338
1339         if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1340                 __u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1341
1342                 err = br_vlan_set_stats_per_port(br, per_port);
1343                 if (err)
1344                         return err;
1345         }
1346 #endif
1347
1348         if (data[IFLA_BR_GROUP_FWD_MASK]) {
1349                 u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1350
1351                 if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1352                         return -EINVAL;
1353                 br->group_fwd_mask = fwd_mask;
1354         }
1355
1356         if (data[IFLA_BR_GROUP_ADDR]) {
1357                 u8 new_addr[ETH_ALEN];
1358
1359                 if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1360                         return -EINVAL;
1361                 memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1362                 if (!is_link_local_ether_addr(new_addr))
1363                         return -EINVAL;
1364                 if (new_addr[5] == 1 ||         /* 802.3x Pause address */
1365                     new_addr[5] == 2 ||         /* 802.3ad Slow protocols */
1366                     new_addr[5] == 3)           /* 802.1X PAE address */
1367                         return -EINVAL;
1368                 spin_lock_bh(&br->lock);
1369                 memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1370                 spin_unlock_bh(&br->lock);
1371                 br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1372                 br_recalculate_fwd_mask(br);
1373         }
1374
1375         if (data[IFLA_BR_FDB_FLUSH]) {
1376                 struct net_bridge_fdb_flush_desc desc = {
1377                         .flags_mask = BIT(BR_FDB_STATIC)
1378                 };
1379
1380                 br_fdb_flush(br, &desc);
1381         }
1382
1383 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1384         if (data[IFLA_BR_MCAST_ROUTER]) {
1385                 u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1386
1387                 err = br_multicast_set_router(&br->multicast_ctx,
1388                                               multicast_router);
1389                 if (err)
1390                         return err;
1391         }
1392
1393         if (data[IFLA_BR_MCAST_SNOOPING]) {
1394                 u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1395
1396                 err = br_multicast_toggle(br, mcast_snooping, extack);
1397                 if (err)
1398                         return err;
1399         }
1400
1401         if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1402                 u8 val;
1403
1404                 val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1405                 br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1406         }
1407
1408         if (data[IFLA_BR_MCAST_QUERIER]) {
1409                 u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1410
1411                 err = br_multicast_set_querier(&br->multicast_ctx,
1412                                                mcast_querier);
1413                 if (err)
1414                         return err;
1415         }
1416
1417         if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1418                 br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1419                         RHT_ELASTICITY);
1420
1421         if (data[IFLA_BR_MCAST_HASH_MAX])
1422                 br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1423
1424         if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1425                 u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1426
1427                 br->multicast_ctx.multicast_last_member_count = val;
1428         }
1429
1430         if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1431                 u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1432
1433                 br->multicast_ctx.multicast_startup_query_count = val;
1434         }
1435
1436         if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1437                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1438
1439                 br->multicast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val);
1440         }
1441
1442         if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1443                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1444
1445                 br->multicast_ctx.multicast_membership_interval = clock_t_to_jiffies(val);
1446         }
1447
1448         if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1449                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1450
1451                 br->multicast_ctx.multicast_querier_interval = clock_t_to_jiffies(val);
1452         }
1453
1454         if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1455                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1456
1457                 br_multicast_set_query_intvl(&br->multicast_ctx, val);
1458         }
1459
1460         if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1461                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1462
1463                 br->multicast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val);
1464         }
1465
1466         if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1467                 u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1468
1469                 br_multicast_set_startup_query_intvl(&br->multicast_ctx, val);
1470         }
1471
1472         if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1473                 __u8 mcast_stats;
1474
1475                 mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1476                 br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1477         }
1478
1479         if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1480                 __u8 igmp_version;
1481
1482                 igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1483                 err = br_multicast_set_igmp_version(&br->multicast_ctx,
1484                                                     igmp_version);
1485                 if (err)
1486                         return err;
1487         }
1488
1489 #if IS_ENABLED(CONFIG_IPV6)
1490         if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1491                 __u8 mld_version;
1492
1493                 mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1494                 err = br_multicast_set_mld_version(&br->multicast_ctx,
1495                                                    mld_version);
1496                 if (err)
1497                         return err;
1498         }
1499 #endif
1500 #endif
1501 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1502         if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1503                 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1504
1505                 br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1506         }
1507
1508         if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1509                 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1510
1511                 br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1512         }
1513
1514         if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1515                 u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1516
1517                 br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1518         }
1519 #endif
1520
1521         if (data[IFLA_BR_MULTI_BOOLOPT]) {
1522                 struct br_boolopt_multi *bm;
1523
1524                 bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1525                 err = br_boolopt_multi_toggle(br, bm, extack);
1526                 if (err)
1527                         return err;
1528         }
1529
1530         return 0;
1531 }
1532
1533 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1534                           struct nlattr *tb[], struct nlattr *data[],
1535                           struct netlink_ext_ack *extack)
1536 {
1537         struct net_bridge *br = netdev_priv(dev);
1538         int err;
1539
1540         err = register_netdevice(dev);
1541         if (err)
1542                 return err;
1543
1544         if (tb[IFLA_ADDRESS]) {
1545                 spin_lock_bh(&br->lock);
1546                 br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1547                 spin_unlock_bh(&br->lock);
1548         }
1549
1550         err = br_changelink(dev, tb, data, extack);
1551         if (err)
1552                 br_dev_delete(dev, NULL);
1553
1554         return err;
1555 }
1556
1557 static size_t br_get_size(const struct net_device *brdev)
1558 {
1559         return nla_total_size(sizeof(u32)) +    /* IFLA_BR_FORWARD_DELAY  */
1560                nla_total_size(sizeof(u32)) +    /* IFLA_BR_HELLO_TIME */
1561                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MAX_AGE */
1562                nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1563                nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1564                nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1565                nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1566 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1567                nla_total_size(sizeof(__be16)) + /* IFLA_BR_VLAN_PROTOCOL */
1568                nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1569                nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1570                nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_PER_PORT */
1571 #endif
1572                nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1573                nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1574                nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1575                nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1576                nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1577                nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1578                nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1579                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1580                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1581                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1582                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1583                nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1584 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1585                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1586                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1587                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1588                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1589                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1590                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1591                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1592                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1593                nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1594                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1595                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1596                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1597                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1598                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1599                nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1600                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_IGMP_VERSION */
1601                nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_MLD_VERSION */
1602                br_multicast_querier_state_size() + /* IFLA_BR_MCAST_QUERIER_STATE */
1603 #endif
1604 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1605                nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1606                nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1607                nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1608 #endif
1609                nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1610                0;
1611 }
1612
1613 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1614 {
1615         struct net_bridge *br = netdev_priv(brdev);
1616         u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1617         u32 hello_time = jiffies_to_clock_t(br->hello_time);
1618         u32 age_time = jiffies_to_clock_t(br->max_age);
1619         u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1620         u32 stp_enabled = br->stp_enabled;
1621         u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1622         u8 vlan_enabled = br_vlan_enabled(br->dev);
1623         struct br_boolopt_multi bm;
1624         u64 clockval;
1625
1626         clockval = br_timer_value(&br->hello_timer);
1627         if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1628                 return -EMSGSIZE;
1629         clockval = br_timer_value(&br->tcn_timer);
1630         if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1631                 return -EMSGSIZE;
1632         clockval = br_timer_value(&br->topology_change_timer);
1633         if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1634                               IFLA_BR_PAD))
1635                 return -EMSGSIZE;
1636         clockval = br_timer_value(&br->gc_work.timer);
1637         if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1638                 return -EMSGSIZE;
1639
1640         br_boolopt_multi_get(br, &bm);
1641         if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1642             nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1643             nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1644             nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1645             nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1646             nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1647             nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1648             nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1649             nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1650                     &br->bridge_id) ||
1651             nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1652                     &br->designated_root) ||
1653             nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1654             nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1655             nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1656             nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1657                        br->topology_change_detected) ||
1658             nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1659             nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1660                 return -EMSGSIZE;
1661
1662 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1663         if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1664             nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1665             nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1666                        br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1667             nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1668                        br_opt_get(br, BROPT_VLAN_STATS_PER_PORT)))
1669                 return -EMSGSIZE;
1670 #endif
1671 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1672         if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER,
1673                        br->multicast_ctx.multicast_router) ||
1674             nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1675                        br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1676             nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1677                        br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1678             nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1679                        br->multicast_ctx.multicast_querier) ||
1680             nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1681                        br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1682             nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1683             nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1684             nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1685                         br->multicast_ctx.multicast_last_member_count) ||
1686             nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1687                         br->multicast_ctx.multicast_startup_query_count) ||
1688             nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1689                        br->multicast_ctx.multicast_igmp_version) ||
1690             br_multicast_dump_querier_state(skb, &br->multicast_ctx,
1691                                             IFLA_BR_MCAST_QUERIER_STATE))
1692                 return -EMSGSIZE;
1693 #if IS_ENABLED(CONFIG_IPV6)
1694         if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1695                        br->multicast_ctx.multicast_mld_version))
1696                 return -EMSGSIZE;
1697 #endif
1698         clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_last_member_interval);
1699         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1700                               IFLA_BR_PAD))
1701                 return -EMSGSIZE;
1702         clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_membership_interval);
1703         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1704                               IFLA_BR_PAD))
1705                 return -EMSGSIZE;
1706         clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_querier_interval);
1707         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1708                               IFLA_BR_PAD))
1709                 return -EMSGSIZE;
1710         clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_interval);
1711         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1712                               IFLA_BR_PAD))
1713                 return -EMSGSIZE;
1714         clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_query_response_interval);
1715         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1716                               IFLA_BR_PAD))
1717                 return -EMSGSIZE;
1718         clockval = jiffies_to_clock_t(br->multicast_ctx.multicast_startup_query_interval);
1719         if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1720                               IFLA_BR_PAD))
1721                 return -EMSGSIZE;
1722 #endif
1723 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1724         if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1725                        br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1726             nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1727                        br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1728             nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1729                        br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1730                 return -EMSGSIZE;
1731 #endif
1732
1733         return 0;
1734 }
1735
1736 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1737 {
1738         struct net_bridge_port *p = NULL;
1739         struct net_bridge_vlan_group *vg;
1740         struct net_bridge_vlan *v;
1741         struct net_bridge *br;
1742         int numvls = 0;
1743
1744         switch (attr) {
1745         case IFLA_STATS_LINK_XSTATS:
1746                 br = netdev_priv(dev);
1747                 vg = br_vlan_group(br);
1748                 break;
1749         case IFLA_STATS_LINK_XSTATS_SLAVE:
1750                 p = br_port_get_rtnl(dev);
1751                 if (!p)
1752                         return 0;
1753                 vg = nbp_vlan_group(p);
1754                 break;
1755         default:
1756                 return 0;
1757         }
1758
1759         if (vg) {
1760                 /* we need to count all, even placeholder entries */
1761                 list_for_each_entry(v, &vg->vlan_list, vlist)
1762                         numvls++;
1763         }
1764
1765         return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1766                nla_total_size_64bit(sizeof(struct br_mcast_stats)) +
1767                (p ? nla_total_size_64bit(sizeof(p->stp_xstats)) : 0) +
1768                nla_total_size(0);
1769 }
1770
1771 static int br_fill_linkxstats(struct sk_buff *skb,
1772                               const struct net_device *dev,
1773                               int *prividx, int attr)
1774 {
1775         struct nlattr *nla __maybe_unused;
1776         struct net_bridge_port *p = NULL;
1777         struct net_bridge_vlan_group *vg;
1778         struct net_bridge_vlan *v;
1779         struct net_bridge *br;
1780         struct nlattr *nest;
1781         int vl_idx = 0;
1782
1783         switch (attr) {
1784         case IFLA_STATS_LINK_XSTATS:
1785                 br = netdev_priv(dev);
1786                 vg = br_vlan_group(br);
1787                 break;
1788         case IFLA_STATS_LINK_XSTATS_SLAVE:
1789                 p = br_port_get_rtnl(dev);
1790                 if (!p)
1791                         return 0;
1792                 br = p->br;
1793                 vg = nbp_vlan_group(p);
1794                 break;
1795         default:
1796                 return -EINVAL;
1797         }
1798
1799         nest = nla_nest_start_noflag(skb, LINK_XSTATS_TYPE_BRIDGE);
1800         if (!nest)
1801                 return -EMSGSIZE;
1802
1803         if (vg) {
1804                 u16 pvid;
1805
1806                 pvid = br_get_pvid(vg);
1807                 list_for_each_entry(v, &vg->vlan_list, vlist) {
1808                         struct bridge_vlan_xstats vxi;
1809                         struct pcpu_sw_netstats stats;
1810
1811                         if (++vl_idx < *prividx)
1812                                 continue;
1813                         memset(&vxi, 0, sizeof(vxi));
1814                         vxi.vid = v->vid;
1815                         vxi.flags = v->flags;
1816                         if (v->vid == pvid)
1817                                 vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1818                         br_vlan_get_stats(v, &stats);
1819                         vxi.rx_bytes = u64_stats_read(&stats.rx_bytes);
1820                         vxi.rx_packets = u64_stats_read(&stats.rx_packets);
1821                         vxi.tx_bytes = u64_stats_read(&stats.tx_bytes);
1822                         vxi.tx_packets = u64_stats_read(&stats.tx_packets);
1823
1824                         if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1825                                 goto nla_put_failure;
1826                 }
1827         }
1828
1829 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1830         if (++vl_idx >= *prividx) {
1831                 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1832                                         sizeof(struct br_mcast_stats),
1833                                         BRIDGE_XSTATS_PAD);
1834                 if (!nla)
1835                         goto nla_put_failure;
1836                 br_multicast_get_stats(br, p, nla_data(nla));
1837         }
1838 #endif
1839
1840         if (p) {
1841                 nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_STP,
1842                                         sizeof(p->stp_xstats),
1843                                         BRIDGE_XSTATS_PAD);
1844                 if (!nla)
1845                         goto nla_put_failure;
1846
1847                 spin_lock_bh(&br->lock);
1848                 memcpy(nla_data(nla), &p->stp_xstats, sizeof(p->stp_xstats));
1849                 spin_unlock_bh(&br->lock);
1850         }
1851
1852         nla_nest_end(skb, nest);
1853         *prividx = 0;
1854
1855         return 0;
1856
1857 nla_put_failure:
1858         nla_nest_end(skb, nest);
1859         *prividx = vl_idx;
1860
1861         return -EMSGSIZE;
1862 }
1863
1864 static struct rtnl_af_ops br_af_ops __read_mostly = {
1865         .family                 = AF_BRIDGE,
1866         .get_link_af_size       = br_get_link_af_size_filtered,
1867 };
1868
1869 struct rtnl_link_ops br_link_ops __read_mostly = {
1870         .kind                   = "bridge",
1871         .priv_size              = sizeof(struct net_bridge),
1872         .setup                  = br_dev_setup,
1873         .maxtype                = IFLA_BR_MAX,
1874         .policy                 = br_policy,
1875         .validate               = br_validate,
1876         .newlink                = br_dev_newlink,
1877         .changelink             = br_changelink,
1878         .dellink                = br_dev_delete,
1879         .get_size               = br_get_size,
1880         .fill_info              = br_fill_info,
1881         .fill_linkxstats        = br_fill_linkxstats,
1882         .get_linkxstats_size    = br_get_linkxstats_size,
1883
1884         .slave_maxtype          = IFLA_BRPORT_MAX,
1885         .slave_policy           = br_port_policy,
1886         .slave_changelink       = br_port_slave_changelink,
1887         .get_slave_size         = br_port_get_slave_size,
1888         .fill_slave_info        = br_port_fill_slave_info,
1889 };
1890
1891 int __init br_netlink_init(void)
1892 {
1893         int err;
1894
1895         br_vlan_rtnl_init();
1896         rtnl_af_register(&br_af_ops);
1897
1898         err = rtnl_link_register(&br_link_ops);
1899         if (err)
1900                 goto out_af;
1901
1902         return 0;
1903
1904 out_af:
1905         rtnl_af_unregister(&br_af_ops);
1906         return err;
1907 }
1908
1909 void br_netlink_fini(void)
1910 {
1911         br_vlan_rtnl_uninit();
1912         rtnl_af_unregister(&br_af_ops);
1913         rtnl_link_unregister(&br_link_ops);
1914 }