xref: /openbmc/linux/net/ipv6/addrconf.c (revision 063ed369c97f8de4cce23bf93bebd7ffacb542ff)
1 /*
2  *	IPv6 Address [auto]configuration
3  *	Linux INET6 implementation
4  *
5  *	Authors:
6  *	Pedro Roque		<roque@di.fc.ul.pt>
7  *	Alexey Kuznetsov	<kuznet@ms2.inr.ac.ru>
8  *
9  *	$Id: addrconf.c,v 1.69 2001/10/31 21:55:54 davem Exp $
10  *
11  *	This program is free software; you can redistribute it and/or
12  *      modify it under the terms of the GNU General Public License
13  *      as published by the Free Software Foundation; either version
14  *      2 of the License, or (at your option) any later version.
15  */
16 
17 /*
18  *	Changes:
19  *
20  *	Janos Farkas			:	delete timer on ifdown
21  *	<chexum@bankinf.banki.hu>
22  *	Andi Kleen			:	kill double kfree on module
23  *						unload.
24  *	Maciej W. Rozycki		:	FDDI support
25  *	sekiya@USAGI			:	Don't send too many RS
26  *						packets.
27  *	yoshfuji@USAGI			:       Fixed interval between DAD
28  *						packets.
29  *	YOSHIFUJI Hideaki @USAGI	:	improved accuracy of
30  *						address validation timer.
31  *	YOSHIFUJI Hideaki @USAGI	:	Privacy Extensions (RFC3041)
32  *						support.
33  *	Yuji SEKIYA @USAGI		:	Don't assign a same IPv6
34  *						address on a same interface.
35  *	YOSHIFUJI Hideaki @USAGI	:	ARCnet support
36  *	YOSHIFUJI Hideaki @USAGI	:	convert /proc/net/if_inet6 to
37  *						seq_file.
38  *	YOSHIFUJI Hideaki @USAGI	:	improved source address
39  *						selection; consider scope,
40  *						status etc.
41  */
42 
43 #include <linux/errno.h>
44 #include <linux/types.h>
45 #include <linux/socket.h>
46 #include <linux/sockios.h>
47 #include <linux/net.h>
48 #include <linux/in6.h>
49 #include <linux/netdevice.h>
50 #include <linux/if_addr.h>
51 #include <linux/if_arp.h>
52 #include <linux/if_arcnet.h>
53 #include <linux/if_infiniband.h>
54 #include <linux/route.h>
55 #include <linux/inetdevice.h>
56 #include <linux/init.h>
57 #ifdef CONFIG_SYSCTL
58 #include <linux/sysctl.h>
59 #endif
60 #include <linux/capability.h>
61 #include <linux/delay.h>
62 #include <linux/notifier.h>
63 #include <linux/string.h>
64 
65 #include <net/sock.h>
66 #include <net/snmp.h>
67 
68 #include <net/ipv6.h>
69 #include <net/protocol.h>
70 #include <net/ndisc.h>
71 #include <net/ip6_route.h>
72 #include <net/addrconf.h>
73 #include <net/tcp.h>
74 #include <net/ip.h>
75 #include <net/netlink.h>
76 #include <linux/if_tunnel.h>
77 #include <linux/rtnetlink.h>
78 
79 #ifdef CONFIG_IPV6_PRIVACY
80 #include <linux/random.h>
81 #endif
82 
83 #include <asm/uaccess.h>
84 #include <asm/unaligned.h>
85 
86 #include <linux/proc_fs.h>
87 #include <linux/seq_file.h>
88 
89 /* Set to 3 to get tracing... */
90 #define ACONF_DEBUG 2
91 
92 #if ACONF_DEBUG >= 3
93 #define ADBG(x) printk x
94 #else
95 #define ADBG(x)
96 #endif
97 
98 #define	INFINITY_LIFE_TIME	0xFFFFFFFF
99 #define TIME_DELTA(a,b) ((unsigned long)((long)(a) - (long)(b)))
100 
101 #ifdef CONFIG_SYSCTL
102 static void addrconf_sysctl_register(struct inet6_dev *idev, struct ipv6_devconf *p);
103 static void addrconf_sysctl_unregister(struct ipv6_devconf *p);
104 #endif
105 
106 #ifdef CONFIG_IPV6_PRIVACY
107 static int __ipv6_regen_rndid(struct inet6_dev *idev);
108 static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr);
109 static void ipv6_regen_rndid(unsigned long data);
110 
111 static int desync_factor = MAX_DESYNC_FACTOR * HZ;
112 #endif
113 
114 static int ipv6_count_addresses(struct inet6_dev *idev);
115 
116 /*
117  *	Configured unicast address hash table
118  */
119 static struct inet6_ifaddr		*inet6_addr_lst[IN6_ADDR_HSIZE];
120 static DEFINE_RWLOCK(addrconf_hash_lock);
121 
122 static void addrconf_verify(unsigned long);
123 
124 static DEFINE_TIMER(addr_chk_timer, addrconf_verify, 0, 0);
125 static DEFINE_SPINLOCK(addrconf_verify_lock);
126 
127 static void addrconf_join_anycast(struct inet6_ifaddr *ifp);
128 static void addrconf_leave_anycast(struct inet6_ifaddr *ifp);
129 
130 static int addrconf_ifdown(struct net_device *dev, int how);
131 
132 static void addrconf_dad_start(struct inet6_ifaddr *ifp, u32 flags);
133 static void addrconf_dad_timer(unsigned long data);
134 static void addrconf_dad_completed(struct inet6_ifaddr *ifp);
135 static void addrconf_dad_run(struct inet6_dev *idev);
136 static void addrconf_rs_timer(unsigned long data);
137 static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
138 static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifa);
139 
140 static void inet6_prefix_notify(int event, struct inet6_dev *idev,
141 				struct prefix_info *pinfo);
142 static int ipv6_chk_same_addr(const struct in6_addr *addr, struct net_device *dev);
143 
144 static ATOMIC_NOTIFIER_HEAD(inet6addr_chain);
145 
146 struct ipv6_devconf ipv6_devconf __read_mostly = {
147 	.forwarding		= 0,
148 	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
149 	.mtu6			= IPV6_MIN_MTU,
150 	.accept_ra		= 1,
151 	.accept_redirects	= 1,
152 	.autoconf		= 1,
153 	.force_mld_version	= 0,
154 	.dad_transmits		= 1,
155 	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
156 	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
157 	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
158 #ifdef CONFIG_IPV6_PRIVACY
159 	.use_tempaddr 		= 0,
160 	.temp_valid_lft		= TEMP_VALID_LIFETIME,
161 	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
162 	.regen_max_retry	= REGEN_MAX_RETRY,
163 	.max_desync_factor	= MAX_DESYNC_FACTOR,
164 #endif
165 	.max_addresses		= IPV6_MAX_ADDRESSES,
166 	.accept_ra_defrtr	= 1,
167 	.accept_ra_pinfo	= 1,
168 #ifdef CONFIG_IPV6_ROUTER_PREF
169 	.accept_ra_rtr_pref	= 1,
170 	.rtr_probe_interval	= 60 * HZ,
171 #ifdef CONFIG_IPV6_ROUTE_INFO
172 	.accept_ra_rt_info_max_plen = 0,
173 #endif
174 #endif
175 	.proxy_ndp		= 0,
176 	.accept_source_route	= 0,	/* we do not accept RH0 by default. */
177 };
178 
179 static struct ipv6_devconf ipv6_devconf_dflt __read_mostly = {
180 	.forwarding		= 0,
181 	.hop_limit		= IPV6_DEFAULT_HOPLIMIT,
182 	.mtu6			= IPV6_MIN_MTU,
183 	.accept_ra		= 1,
184 	.accept_redirects	= 1,
185 	.autoconf		= 1,
186 	.dad_transmits		= 1,
187 	.rtr_solicits		= MAX_RTR_SOLICITATIONS,
188 	.rtr_solicit_interval	= RTR_SOLICITATION_INTERVAL,
189 	.rtr_solicit_delay	= MAX_RTR_SOLICITATION_DELAY,
190 #ifdef CONFIG_IPV6_PRIVACY
191 	.use_tempaddr		= 0,
192 	.temp_valid_lft		= TEMP_VALID_LIFETIME,
193 	.temp_prefered_lft	= TEMP_PREFERRED_LIFETIME,
194 	.regen_max_retry	= REGEN_MAX_RETRY,
195 	.max_desync_factor	= MAX_DESYNC_FACTOR,
196 #endif
197 	.max_addresses		= IPV6_MAX_ADDRESSES,
198 	.accept_ra_defrtr	= 1,
199 	.accept_ra_pinfo	= 1,
200 #ifdef CONFIG_IPV6_ROUTER_PREF
201 	.accept_ra_rtr_pref	= 1,
202 	.rtr_probe_interval	= 60 * HZ,
203 #ifdef CONFIG_IPV6_ROUTE_INFO
204 	.accept_ra_rt_info_max_plen = 0,
205 #endif
206 #endif
207 	.proxy_ndp		= 0,
208 	.accept_source_route	= 0,	/* we do not accept RH0 by default. */
209 };
210 
211 /* IPv6 Wildcard Address and Loopback Address defined by RFC2553 */
212 const struct in6_addr in6addr_any = IN6ADDR_ANY_INIT;
213 const struct in6_addr in6addr_loopback = IN6ADDR_LOOPBACK_INIT;
214 
215 static void addrconf_del_timer(struct inet6_ifaddr *ifp)
216 {
217 	if (del_timer(&ifp->timer))
218 		__in6_ifa_put(ifp);
219 }
220 
221 enum addrconf_timer_t
222 {
223 	AC_NONE,
224 	AC_DAD,
225 	AC_RS,
226 };
227 
228 static void addrconf_mod_timer(struct inet6_ifaddr *ifp,
229 			       enum addrconf_timer_t what,
230 			       unsigned long when)
231 {
232 	if (!del_timer(&ifp->timer))
233 		in6_ifa_hold(ifp);
234 
235 	switch (what) {
236 	case AC_DAD:
237 		ifp->timer.function = addrconf_dad_timer;
238 		break;
239 	case AC_RS:
240 		ifp->timer.function = addrconf_rs_timer;
241 		break;
242 	default:;
243 	}
244 	ifp->timer.expires = jiffies + when;
245 	add_timer(&ifp->timer);
246 }
247 
248 static int snmp6_alloc_dev(struct inet6_dev *idev)
249 {
250 	int err = -ENOMEM;
251 
252 	if (!idev || !idev->dev)
253 		return -EINVAL;
254 
255 	if (snmp_mib_init((void **)idev->stats.ipv6,
256 			  sizeof(struct ipstats_mib),
257 			  __alignof__(struct ipstats_mib)) < 0)
258 		goto err_ip;
259 	if (snmp_mib_init((void **)idev->stats.icmpv6,
260 			  sizeof(struct icmpv6_mib),
261 			  __alignof__(struct icmpv6_mib)) < 0)
262 		goto err_icmp;
263 
264 	return 0;
265 
266 err_icmp:
267 	snmp_mib_free((void **)idev->stats.ipv6);
268 err_ip:
269 	return err;
270 }
271 
272 static int snmp6_free_dev(struct inet6_dev *idev)
273 {
274 	snmp_mib_free((void **)idev->stats.icmpv6);
275 	snmp_mib_free((void **)idev->stats.ipv6);
276 	return 0;
277 }
278 
279 /* Nobody refers to this device, we may destroy it. */
280 
281 static void in6_dev_finish_destroy_rcu(struct rcu_head *head)
282 {
283 	struct inet6_dev *idev = container_of(head, struct inet6_dev, rcu);
284 	kfree(idev);
285 }
286 
287 void in6_dev_finish_destroy(struct inet6_dev *idev)
288 {
289 	struct net_device *dev = idev->dev;
290 	BUG_TRAP(idev->addr_list==NULL);
291 	BUG_TRAP(idev->mc_list==NULL);
292 #ifdef NET_REFCNT_DEBUG
293 	printk(KERN_DEBUG "in6_dev_finish_destroy: %s\n", dev ? dev->name : "NIL");
294 #endif
295 	dev_put(dev);
296 	if (!idev->dead) {
297 		printk("Freeing alive inet6 device %p\n", idev);
298 		return;
299 	}
300 	snmp6_free_dev(idev);
301 	call_rcu(&idev->rcu, in6_dev_finish_destroy_rcu);
302 }
303 
304 EXPORT_SYMBOL(in6_dev_finish_destroy);
305 
306 static struct inet6_dev * ipv6_add_dev(struct net_device *dev)
307 {
308 	struct inet6_dev *ndev;
309 	struct in6_addr maddr;
310 
311 	ASSERT_RTNL();
312 
313 	if (dev->mtu < IPV6_MIN_MTU)
314 		return NULL;
315 
316 	ndev = kzalloc(sizeof(struct inet6_dev), GFP_KERNEL);
317 
318 	if (ndev == NULL)
319 		return NULL;
320 
321 	rwlock_init(&ndev->lock);
322 	ndev->dev = dev;
323 	memcpy(&ndev->cnf, &ipv6_devconf_dflt, sizeof(ndev->cnf));
324 	ndev->cnf.mtu6 = dev->mtu;
325 	ndev->cnf.sysctl = NULL;
326 	ndev->nd_parms = neigh_parms_alloc(dev, &nd_tbl);
327 	if (ndev->nd_parms == NULL) {
328 		kfree(ndev);
329 		return NULL;
330 	}
331 	/* We refer to the device */
332 	dev_hold(dev);
333 
334 	if (snmp6_alloc_dev(ndev) < 0) {
335 		ADBG((KERN_WARNING
336 			"%s(): cannot allocate memory for statistics; dev=%s.\n",
337 			__FUNCTION__, dev->name));
338 		neigh_parms_release(&nd_tbl, ndev->nd_parms);
339 		ndev->dead = 1;
340 		in6_dev_finish_destroy(ndev);
341 		return NULL;
342 	}
343 
344 	if (snmp6_register_dev(ndev) < 0) {
345 		ADBG((KERN_WARNING
346 			"%s(): cannot create /proc/net/dev_snmp6/%s\n",
347 			__FUNCTION__, dev->name));
348 		neigh_parms_release(&nd_tbl, ndev->nd_parms);
349 		ndev->dead = 1;
350 		in6_dev_finish_destroy(ndev);
351 		return NULL;
352 	}
353 
354 	/* One reference from device.  We must do this before
355 	 * we invoke __ipv6_regen_rndid().
356 	 */
357 	in6_dev_hold(ndev);
358 
359 #ifdef CONFIG_IPV6_PRIVACY
360 	init_timer(&ndev->regen_timer);
361 	ndev->regen_timer.function = ipv6_regen_rndid;
362 	ndev->regen_timer.data = (unsigned long) ndev;
363 	if ((dev->flags&IFF_LOOPBACK) ||
364 	    dev->type == ARPHRD_TUNNEL ||
365 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
366 	    dev->type == ARPHRD_SIT ||
367 #endif
368 	    dev->type == ARPHRD_NONE) {
369 		printk(KERN_INFO
370 		       "%s: Disabled Privacy Extensions\n",
371 		       dev->name);
372 		ndev->cnf.use_tempaddr = -1;
373 	} else {
374 		in6_dev_hold(ndev);
375 		ipv6_regen_rndid((unsigned long) ndev);
376 	}
377 #endif
378 
379 	if (netif_running(dev) && netif_carrier_ok(dev))
380 		ndev->if_flags |= IF_READY;
381 
382 	ipv6_mc_init_dev(ndev);
383 	ndev->tstamp = jiffies;
384 #ifdef CONFIG_SYSCTL
385 	neigh_sysctl_register(dev, ndev->nd_parms, NET_IPV6,
386 			      NET_IPV6_NEIGH, "ipv6",
387 			      &ndisc_ifinfo_sysctl_change,
388 			      NULL);
389 	addrconf_sysctl_register(ndev, &ndev->cnf);
390 #endif
391 	/* protected by rtnl_lock */
392 	rcu_assign_pointer(dev->ip6_ptr, ndev);
393 
394 	/* Join all-node multicast group */
395 	ipv6_addr_all_nodes(&maddr);
396 	ipv6_dev_mc_inc(dev, &maddr);
397 
398 	return ndev;
399 }
400 
401 static struct inet6_dev * ipv6_find_idev(struct net_device *dev)
402 {
403 	struct inet6_dev *idev;
404 
405 	ASSERT_RTNL();
406 
407 	if ((idev = __in6_dev_get(dev)) == NULL) {
408 		if ((idev = ipv6_add_dev(dev)) == NULL)
409 			return NULL;
410 	}
411 
412 	if (dev->flags&IFF_UP)
413 		ipv6_mc_up(idev);
414 	return idev;
415 }
416 
417 #ifdef CONFIG_SYSCTL
418 static void dev_forward_change(struct inet6_dev *idev)
419 {
420 	struct net_device *dev;
421 	struct inet6_ifaddr *ifa;
422 	struct in6_addr addr;
423 
424 	if (!idev)
425 		return;
426 	dev = idev->dev;
427 	if (dev && (dev->flags & IFF_MULTICAST)) {
428 		ipv6_addr_all_routers(&addr);
429 
430 		if (idev->cnf.forwarding)
431 			ipv6_dev_mc_inc(dev, &addr);
432 		else
433 			ipv6_dev_mc_dec(dev, &addr);
434 	}
435 	for (ifa=idev->addr_list; ifa; ifa=ifa->if_next) {
436 		if (ifa->flags&IFA_F_TENTATIVE)
437 			continue;
438 		if (idev->cnf.forwarding)
439 			addrconf_join_anycast(ifa);
440 		else
441 			addrconf_leave_anycast(ifa);
442 	}
443 }
444 
445 
446 static void addrconf_forward_change(void)
447 {
448 	struct net_device *dev;
449 	struct inet6_dev *idev;
450 
451 	read_lock(&dev_base_lock);
452 	for_each_netdev(dev) {
453 		rcu_read_lock();
454 		idev = __in6_dev_get(dev);
455 		if (idev) {
456 			int changed = (!idev->cnf.forwarding) ^ (!ipv6_devconf.forwarding);
457 			idev->cnf.forwarding = ipv6_devconf.forwarding;
458 			if (changed)
459 				dev_forward_change(idev);
460 		}
461 		rcu_read_unlock();
462 	}
463 	read_unlock(&dev_base_lock);
464 }
465 #endif
466 
467 /* Nobody refers to this ifaddr, destroy it */
468 
469 void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp)
470 {
471 	BUG_TRAP(ifp->if_next==NULL);
472 	BUG_TRAP(ifp->lst_next==NULL);
473 #ifdef NET_REFCNT_DEBUG
474 	printk(KERN_DEBUG "inet6_ifa_finish_destroy\n");
475 #endif
476 
477 	in6_dev_put(ifp->idev);
478 
479 	if (del_timer(&ifp->timer))
480 		printk("Timer is still running, when freeing ifa=%p\n", ifp);
481 
482 	if (!ifp->dead) {
483 		printk("Freeing alive inet6 address %p\n", ifp);
484 		return;
485 	}
486 	dst_release(&ifp->rt->u.dst);
487 
488 	kfree(ifp);
489 }
490 
491 static void
492 ipv6_link_dev_addr(struct inet6_dev *idev, struct inet6_ifaddr *ifp)
493 {
494 	struct inet6_ifaddr *ifa, **ifap;
495 	int ifp_scope = ipv6_addr_src_scope(&ifp->addr);
496 
497 	/*
498 	 * Each device address list is sorted in order of scope -
499 	 * global before linklocal.
500 	 */
501 	for (ifap = &idev->addr_list; (ifa = *ifap) != NULL;
502 	     ifap = &ifa->if_next) {
503 		if (ifp_scope >= ipv6_addr_src_scope(&ifa->addr))
504 			break;
505 	}
506 
507 	ifp->if_next = *ifap;
508 	*ifap = ifp;
509 }
510 
511 /* On success it returns ifp with increased reference count */
512 
513 static struct inet6_ifaddr *
514 ipv6_add_addr(struct inet6_dev *idev, const struct in6_addr *addr, int pfxlen,
515 	      int scope, u32 flags)
516 {
517 	struct inet6_ifaddr *ifa = NULL;
518 	struct rt6_info *rt;
519 	int hash;
520 	int err = 0;
521 
522 	rcu_read_lock_bh();
523 	if (idev->dead) {
524 		err = -ENODEV;			/*XXX*/
525 		goto out2;
526 	}
527 
528 	write_lock(&addrconf_hash_lock);
529 
530 	/* Ignore adding duplicate addresses on an interface */
531 	if (ipv6_chk_same_addr(addr, idev->dev)) {
532 		ADBG(("ipv6_add_addr: already assigned\n"));
533 		err = -EEXIST;
534 		goto out;
535 	}
536 
537 	ifa = kzalloc(sizeof(struct inet6_ifaddr), GFP_ATOMIC);
538 
539 	if (ifa == NULL) {
540 		ADBG(("ipv6_add_addr: malloc failed\n"));
541 		err = -ENOBUFS;
542 		goto out;
543 	}
544 
545 	rt = addrconf_dst_alloc(idev, addr, 0);
546 	if (IS_ERR(rt)) {
547 		err = PTR_ERR(rt);
548 		goto out;
549 	}
550 
551 	ipv6_addr_copy(&ifa->addr, addr);
552 
553 	spin_lock_init(&ifa->lock);
554 	init_timer(&ifa->timer);
555 	ifa->timer.data = (unsigned long) ifa;
556 	ifa->scope = scope;
557 	ifa->prefix_len = pfxlen;
558 	ifa->flags = flags | IFA_F_TENTATIVE;
559 	ifa->cstamp = ifa->tstamp = jiffies;
560 
561 	ifa->rt = rt;
562 
563 	/*
564 	 * part one of RFC 4429, section 3.3
565 	 * We should not configure an address as
566 	 * optimistic if we do not yet know the link
567 	 * layer address of our nexhop router
568 	 */
569 
570 	if (rt->rt6i_nexthop == NULL)
571 		ifa->flags &= ~IFA_F_OPTIMISTIC;
572 
573 	ifa->idev = idev;
574 	in6_dev_hold(idev);
575 	/* For caller */
576 	in6_ifa_hold(ifa);
577 
578 	/* Add to big hash table */
579 	hash = ipv6_addr_hash(addr);
580 
581 	ifa->lst_next = inet6_addr_lst[hash];
582 	inet6_addr_lst[hash] = ifa;
583 	in6_ifa_hold(ifa);
584 	write_unlock(&addrconf_hash_lock);
585 
586 	write_lock(&idev->lock);
587 	/* Add to inet6_dev unicast addr list. */
588 	ipv6_link_dev_addr(idev, ifa);
589 
590 #ifdef CONFIG_IPV6_PRIVACY
591 	if (ifa->flags&IFA_F_TEMPORARY) {
592 		ifa->tmp_next = idev->tempaddr_list;
593 		idev->tempaddr_list = ifa;
594 		in6_ifa_hold(ifa);
595 	}
596 #endif
597 
598 	in6_ifa_hold(ifa);
599 	write_unlock(&idev->lock);
600 out2:
601 	rcu_read_unlock_bh();
602 
603 	if (likely(err == 0))
604 		atomic_notifier_call_chain(&inet6addr_chain, NETDEV_UP, ifa);
605 	else {
606 		kfree(ifa);
607 		ifa = ERR_PTR(err);
608 	}
609 
610 	return ifa;
611 out:
612 	write_unlock(&addrconf_hash_lock);
613 	goto out2;
614 }
615 
616 /* This function wants to get referenced ifp and releases it before return */
617 
618 static void ipv6_del_addr(struct inet6_ifaddr *ifp)
619 {
620 	struct inet6_ifaddr *ifa, **ifap;
621 	struct inet6_dev *idev = ifp->idev;
622 	int hash;
623 	int deleted = 0, onlink = 0;
624 	unsigned long expires = jiffies;
625 
626 	hash = ipv6_addr_hash(&ifp->addr);
627 
628 	ifp->dead = 1;
629 
630 	write_lock_bh(&addrconf_hash_lock);
631 	for (ifap = &inet6_addr_lst[hash]; (ifa=*ifap) != NULL;
632 	     ifap = &ifa->lst_next) {
633 		if (ifa == ifp) {
634 			*ifap = ifa->lst_next;
635 			__in6_ifa_put(ifp);
636 			ifa->lst_next = NULL;
637 			break;
638 		}
639 	}
640 	write_unlock_bh(&addrconf_hash_lock);
641 
642 	write_lock_bh(&idev->lock);
643 #ifdef CONFIG_IPV6_PRIVACY
644 	if (ifp->flags&IFA_F_TEMPORARY) {
645 		for (ifap = &idev->tempaddr_list; (ifa=*ifap) != NULL;
646 		     ifap = &ifa->tmp_next) {
647 			if (ifa == ifp) {
648 				*ifap = ifa->tmp_next;
649 				if (ifp->ifpub) {
650 					in6_ifa_put(ifp->ifpub);
651 					ifp->ifpub = NULL;
652 				}
653 				__in6_ifa_put(ifp);
654 				ifa->tmp_next = NULL;
655 				break;
656 			}
657 		}
658 	}
659 #endif
660 
661 	for (ifap = &idev->addr_list; (ifa=*ifap) != NULL;) {
662 		if (ifa == ifp) {
663 			*ifap = ifa->if_next;
664 			__in6_ifa_put(ifp);
665 			ifa->if_next = NULL;
666 			if (!(ifp->flags & IFA_F_PERMANENT) || onlink > 0)
667 				break;
668 			deleted = 1;
669 			continue;
670 		} else if (ifp->flags & IFA_F_PERMANENT) {
671 			if (ipv6_prefix_equal(&ifa->addr, &ifp->addr,
672 					      ifp->prefix_len)) {
673 				if (ifa->flags & IFA_F_PERMANENT) {
674 					onlink = 1;
675 					if (deleted)
676 						break;
677 				} else {
678 					unsigned long lifetime;
679 
680 					if (!onlink)
681 						onlink = -1;
682 
683 					spin_lock(&ifa->lock);
684 					lifetime = min_t(unsigned long,
685 							 ifa->valid_lft, 0x7fffffffUL/HZ);
686 					if (time_before(expires,
687 							ifa->tstamp + lifetime * HZ))
688 						expires = ifa->tstamp + lifetime * HZ;
689 					spin_unlock(&ifa->lock);
690 				}
691 			}
692 		}
693 		ifap = &ifa->if_next;
694 	}
695 	write_unlock_bh(&idev->lock);
696 
697 	ipv6_ifa_notify(RTM_DELADDR, ifp);
698 
699 	atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifp);
700 
701 	addrconf_del_timer(ifp);
702 
703 	/*
704 	 * Purge or update corresponding prefix
705 	 *
706 	 * 1) we don't purge prefix here if address was not permanent.
707 	 *    prefix is managed by its own lifetime.
708 	 * 2) if there're no addresses, delete prefix.
709 	 * 3) if there're still other permanent address(es),
710 	 *    corresponding prefix is still permanent.
711 	 * 4) otherwise, update prefix lifetime to the
712 	 *    longest valid lifetime among the corresponding
713 	 *    addresses on the device.
714 	 *    Note: subsequent RA will update lifetime.
715 	 *
716 	 * --yoshfuji
717 	 */
718 	if ((ifp->flags & IFA_F_PERMANENT) && onlink < 1) {
719 		struct in6_addr prefix;
720 		struct rt6_info *rt;
721 
722 		ipv6_addr_prefix(&prefix, &ifp->addr, ifp->prefix_len);
723 		rt = rt6_lookup(&prefix, NULL, ifp->idev->dev->ifindex, 1);
724 
725 		if (rt && ((rt->rt6i_flags & (RTF_GATEWAY | RTF_DEFAULT)) == 0)) {
726 			if (onlink == 0) {
727 				ip6_del_rt(rt);
728 				rt = NULL;
729 			} else if (!(rt->rt6i_flags & RTF_EXPIRES)) {
730 				rt->rt6i_expires = expires;
731 				rt->rt6i_flags |= RTF_EXPIRES;
732 			}
733 		}
734 		dst_release(&rt->u.dst);
735 	}
736 
737 	in6_ifa_put(ifp);
738 }
739 
740 #ifdef CONFIG_IPV6_PRIVACY
741 static int ipv6_create_tempaddr(struct inet6_ifaddr *ifp, struct inet6_ifaddr *ift)
742 {
743 	struct inet6_dev *idev = ifp->idev;
744 	struct in6_addr addr, *tmpaddr;
745 	unsigned long tmp_prefered_lft, tmp_valid_lft, tmp_cstamp, tmp_tstamp;
746 	int tmp_plen;
747 	int ret = 0;
748 	int max_addresses;
749 	u32 addr_flags;
750 
751 	write_lock(&idev->lock);
752 	if (ift) {
753 		spin_lock_bh(&ift->lock);
754 		memcpy(&addr.s6_addr[8], &ift->addr.s6_addr[8], 8);
755 		spin_unlock_bh(&ift->lock);
756 		tmpaddr = &addr;
757 	} else {
758 		tmpaddr = NULL;
759 	}
760 retry:
761 	in6_dev_hold(idev);
762 	if (idev->cnf.use_tempaddr <= 0) {
763 		write_unlock(&idev->lock);
764 		printk(KERN_INFO
765 			"ipv6_create_tempaddr(): use_tempaddr is disabled.\n");
766 		in6_dev_put(idev);
767 		ret = -1;
768 		goto out;
769 	}
770 	spin_lock_bh(&ifp->lock);
771 	if (ifp->regen_count++ >= idev->cnf.regen_max_retry) {
772 		idev->cnf.use_tempaddr = -1;	/*XXX*/
773 		spin_unlock_bh(&ifp->lock);
774 		write_unlock(&idev->lock);
775 		printk(KERN_WARNING
776 			"ipv6_create_tempaddr(): regeneration time exceeded. disabled temporary address support.\n");
777 		in6_dev_put(idev);
778 		ret = -1;
779 		goto out;
780 	}
781 	in6_ifa_hold(ifp);
782 	memcpy(addr.s6_addr, ifp->addr.s6_addr, 8);
783 	if (__ipv6_try_regen_rndid(idev, tmpaddr) < 0) {
784 		spin_unlock_bh(&ifp->lock);
785 		write_unlock(&idev->lock);
786 		printk(KERN_WARNING
787 			"ipv6_create_tempaddr(): regeneration of randomized interface id failed.\n");
788 		in6_ifa_put(ifp);
789 		in6_dev_put(idev);
790 		ret = -1;
791 		goto out;
792 	}
793 	memcpy(&addr.s6_addr[8], idev->rndid, 8);
794 	tmp_valid_lft = min_t(__u32,
795 			      ifp->valid_lft,
796 			      idev->cnf.temp_valid_lft);
797 	tmp_prefered_lft = min_t(__u32,
798 				 ifp->prefered_lft,
799 				 idev->cnf.temp_prefered_lft - desync_factor / HZ);
800 	tmp_plen = ifp->prefix_len;
801 	max_addresses = idev->cnf.max_addresses;
802 	tmp_cstamp = ifp->cstamp;
803 	tmp_tstamp = ifp->tstamp;
804 	spin_unlock_bh(&ifp->lock);
805 
806 	write_unlock(&idev->lock);
807 
808 	addr_flags = IFA_F_TEMPORARY;
809 	/* set in addrconf_prefix_rcv() */
810 	if (ifp->flags & IFA_F_OPTIMISTIC)
811 		addr_flags |= IFA_F_OPTIMISTIC;
812 
813 	ift = !max_addresses ||
814 	      ipv6_count_addresses(idev) < max_addresses ?
815 		ipv6_add_addr(idev, &addr, tmp_plen,
816 			      ipv6_addr_type(&addr)&IPV6_ADDR_SCOPE_MASK,
817 			      addr_flags) : NULL;
818 	if (!ift || IS_ERR(ift)) {
819 		in6_ifa_put(ifp);
820 		in6_dev_put(idev);
821 		printk(KERN_INFO
822 			"ipv6_create_tempaddr(): retry temporary address regeneration.\n");
823 		tmpaddr = &addr;
824 		write_lock(&idev->lock);
825 		goto retry;
826 	}
827 
828 	spin_lock_bh(&ift->lock);
829 	ift->ifpub = ifp;
830 	ift->valid_lft = tmp_valid_lft;
831 	ift->prefered_lft = tmp_prefered_lft;
832 	ift->cstamp = tmp_cstamp;
833 	ift->tstamp = tmp_tstamp;
834 	spin_unlock_bh(&ift->lock);
835 
836 	addrconf_dad_start(ift, 0);
837 	in6_ifa_put(ift);
838 	in6_dev_put(idev);
839 out:
840 	return ret;
841 }
842 #endif
843 
844 /*
845  *	Choose an appropriate source address (RFC3484)
846  */
847 struct ipv6_saddr_score {
848 	int		addr_type;
849 	unsigned int	attrs;
850 	int		matchlen;
851 	int		scope;
852 	unsigned int	rule;
853 };
854 
855 #define IPV6_SADDR_SCORE_LOCAL		0x0001
856 #define IPV6_SADDR_SCORE_PREFERRED	0x0004
857 #define IPV6_SADDR_SCORE_HOA		0x0008
858 #define IPV6_SADDR_SCORE_OIF		0x0010
859 #define IPV6_SADDR_SCORE_LABEL		0x0020
860 #define IPV6_SADDR_SCORE_PRIVACY	0x0040
861 
862 static inline int ipv6_saddr_preferred(int type)
863 {
864 	if (type & (IPV6_ADDR_MAPPED|IPV6_ADDR_COMPATv4|
865 		    IPV6_ADDR_LOOPBACK|IPV6_ADDR_RESERVED))
866 		return 1;
867 	return 0;
868 }
869 
870 /* static matching label */
871 static inline int ipv6_saddr_label(const struct in6_addr *addr, int type)
872 {
873  /*
874   * 	prefix (longest match)	label
875   * 	-----------------------------
876   * 	::1/128			0
877   * 	::/0			1
878   * 	2002::/16		2
879   * 	::/96			3
880   * 	::ffff:0:0/96		4
881   *	fc00::/7		5
882   * 	2001::/32		6
883   */
884 	if (type & IPV6_ADDR_LOOPBACK)
885 		return 0;
886 	else if (type & IPV6_ADDR_COMPATv4)
887 		return 3;
888 	else if (type & IPV6_ADDR_MAPPED)
889 		return 4;
890 	else if (addr->s6_addr32[0] == htonl(0x20010000))
891 		return 6;
892 	else if (addr->s6_addr16[0] == htons(0x2002))
893 		return 2;
894 	else if ((addr->s6_addr[0] & 0xfe) == 0xfc)
895 		return 5;
896 	return 1;
897 }
898 
899 int ipv6_dev_get_saddr(struct net_device *daddr_dev,
900 		       struct in6_addr *daddr, struct in6_addr *saddr)
901 {
902 	struct ipv6_saddr_score hiscore;
903 	struct inet6_ifaddr *ifa_result = NULL;
904 	int daddr_type = __ipv6_addr_type(daddr);
905 	int daddr_scope = __ipv6_addr_src_scope(daddr_type);
906 	u32 daddr_label = ipv6_saddr_label(daddr, daddr_type);
907 	struct net_device *dev;
908 
909 	memset(&hiscore, 0, sizeof(hiscore));
910 
911 	read_lock(&dev_base_lock);
912 	rcu_read_lock();
913 
914 	for_each_netdev(dev) {
915 		struct inet6_dev *idev;
916 		struct inet6_ifaddr *ifa;
917 
918 		/* Rule 0: Candidate Source Address (section 4)
919 		 *  - multicast and link-local destination address,
920 		 *    the set of candidate source address MUST only
921 		 *    include addresses assigned to interfaces
922 		 *    belonging to the same link as the outgoing
923 		 *    interface.
924 		 * (- For site-local destination addresses, the
925 		 *    set of candidate source addresses MUST only
926 		 *    include addresses assigned to interfaces
927 		 *    belonging to the same site as the outgoing
928 		 *    interface.)
929 		 */
930 		if ((daddr_type & IPV6_ADDR_MULTICAST ||
931 		     daddr_scope <= IPV6_ADDR_SCOPE_LINKLOCAL) &&
932 		    daddr_dev && dev != daddr_dev)
933 			continue;
934 
935 		idev = __in6_dev_get(dev);
936 		if (!idev)
937 			continue;
938 
939 		read_lock_bh(&idev->lock);
940 		for (ifa = idev->addr_list; ifa; ifa = ifa->if_next) {
941 			struct ipv6_saddr_score score;
942 
943 			score.addr_type = __ipv6_addr_type(&ifa->addr);
944 
945 			/* Rule 0:
946 			 * - Tentative Address (RFC2462 section 5.4)
947 			 *  - A tentative address is not considered
948 			 *    "assigned to an interface" in the traditional
949 			 *    sense, unless it is also flagged as optimistic.
950 			 * - Candidate Source Address (section 4)
951 			 *  - In any case, anycast addresses, multicast
952 			 *    addresses, and the unspecified address MUST
953 			 *    NOT be included in a candidate set.
954 			 */
955 			if ((ifa->flags & IFA_F_TENTATIVE) &&
956 			    (!(ifa->flags & IFA_F_OPTIMISTIC)))
957 				continue;
958 			if (unlikely(score.addr_type == IPV6_ADDR_ANY ||
959 				     score.addr_type & IPV6_ADDR_MULTICAST)) {
960 				LIMIT_NETDEBUG(KERN_DEBUG
961 					       "ADDRCONF: unspecified / multicast address"
962 					       "assigned as unicast address on %s",
963 					       dev->name);
964 				continue;
965 			}
966 
967 			score.attrs = 0;
968 			score.matchlen = 0;
969 			score.scope = 0;
970 			score.rule = 0;
971 
972 			if (ifa_result == NULL) {
973 				/* record it if the first available entry */
974 				goto record_it;
975 			}
976 
977 			/* Rule 1: Prefer same address */
978 			if (hiscore.rule < 1) {
979 				if (ipv6_addr_equal(&ifa_result->addr, daddr))
980 					hiscore.attrs |= IPV6_SADDR_SCORE_LOCAL;
981 				hiscore.rule++;
982 			}
983 			if (ipv6_addr_equal(&ifa->addr, daddr)) {
984 				score.attrs |= IPV6_SADDR_SCORE_LOCAL;
985 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_LOCAL)) {
986 					score.rule = 1;
987 					goto record_it;
988 				}
989 			} else {
990 				if (hiscore.attrs & IPV6_SADDR_SCORE_LOCAL)
991 					continue;
992 			}
993 
994 			/* Rule 2: Prefer appropriate scope */
995 			if (hiscore.rule < 2) {
996 				hiscore.scope = __ipv6_addr_src_scope(hiscore.addr_type);
997 				hiscore.rule++;
998 			}
999 			score.scope = __ipv6_addr_src_scope(score.addr_type);
1000 			if (hiscore.scope < score.scope) {
1001 				if (hiscore.scope < daddr_scope) {
1002 					score.rule = 2;
1003 					goto record_it;
1004 				} else
1005 					continue;
1006 			} else if (score.scope < hiscore.scope) {
1007 				if (score.scope < daddr_scope)
1008 					break; /* addresses sorted by scope */
1009 				else {
1010 					score.rule = 2;
1011 					goto record_it;
1012 				}
1013 			}
1014 
1015 			/* Rule 3: Avoid deprecated and optimistic addresses */
1016 			if (hiscore.rule < 3) {
1017 				if (ipv6_saddr_preferred(hiscore.addr_type) ||
1018 				   (((ifa_result->flags &
1019 				    (IFA_F_DEPRECATED|IFA_F_OPTIMISTIC)) == 0)))
1020 					hiscore.attrs |= IPV6_SADDR_SCORE_PREFERRED;
1021 				hiscore.rule++;
1022 			}
1023 			if (ipv6_saddr_preferred(score.addr_type) ||
1024 			   (((ifa_result->flags &
1025 			    (IFA_F_DEPRECATED|IFA_F_OPTIMISTIC)) == 0))) {
1026 				score.attrs |= IPV6_SADDR_SCORE_PREFERRED;
1027 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_PREFERRED)) {
1028 					score.rule = 3;
1029 					goto record_it;
1030 				}
1031 			} else {
1032 				if (hiscore.attrs & IPV6_SADDR_SCORE_PREFERRED)
1033 					continue;
1034 			}
1035 
1036 			/* Rule 4: Prefer home address */
1037 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
1038 			if (hiscore.rule < 4) {
1039 				if (ifa_result->flags & IFA_F_HOMEADDRESS)
1040 					hiscore.attrs |= IPV6_SADDR_SCORE_HOA;
1041 				hiscore.rule++;
1042 			}
1043 			if (ifa->flags & IFA_F_HOMEADDRESS) {
1044 				score.attrs |= IPV6_SADDR_SCORE_HOA;
1045 				if (!(ifa_result->flags & IFA_F_HOMEADDRESS)) {
1046 					score.rule = 4;
1047 					goto record_it;
1048 				}
1049 			} else {
1050 				if (hiscore.attrs & IPV6_SADDR_SCORE_HOA)
1051 					continue;
1052 			}
1053 #else
1054 			if (hiscore.rule < 4)
1055 				hiscore.rule++;
1056 #endif
1057 
1058 			/* Rule 5: Prefer outgoing interface */
1059 			if (hiscore.rule < 5) {
1060 				if (daddr_dev == NULL ||
1061 				    daddr_dev == ifa_result->idev->dev)
1062 					hiscore.attrs |= IPV6_SADDR_SCORE_OIF;
1063 				hiscore.rule++;
1064 			}
1065 			if (daddr_dev == NULL ||
1066 			    daddr_dev == ifa->idev->dev) {
1067 				score.attrs |= IPV6_SADDR_SCORE_OIF;
1068 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_OIF)) {
1069 					score.rule = 5;
1070 					goto record_it;
1071 				}
1072 			} else {
1073 				if (hiscore.attrs & IPV6_SADDR_SCORE_OIF)
1074 					continue;
1075 			}
1076 
1077 			/* Rule 6: Prefer matching label */
1078 			if (hiscore.rule < 6) {
1079 				if (ipv6_saddr_label(&ifa_result->addr, hiscore.addr_type) == daddr_label)
1080 					hiscore.attrs |= IPV6_SADDR_SCORE_LABEL;
1081 				hiscore.rule++;
1082 			}
1083 			if (ipv6_saddr_label(&ifa->addr, score.addr_type) == daddr_label) {
1084 				score.attrs |= IPV6_SADDR_SCORE_LABEL;
1085 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_LABEL)) {
1086 					score.rule = 6;
1087 					goto record_it;
1088 				}
1089 			} else {
1090 				if (hiscore.attrs & IPV6_SADDR_SCORE_LABEL)
1091 					continue;
1092 			}
1093 
1094 #ifdef CONFIG_IPV6_PRIVACY
1095 			/* Rule 7: Prefer public address
1096 			 * Note: prefer temprary address if use_tempaddr >= 2
1097 			 */
1098 			if (hiscore.rule < 7) {
1099 				if ((!(ifa_result->flags & IFA_F_TEMPORARY)) ^
1100 				    (ifa_result->idev->cnf.use_tempaddr >= 2))
1101 					hiscore.attrs |= IPV6_SADDR_SCORE_PRIVACY;
1102 				hiscore.rule++;
1103 			}
1104 			if ((!(ifa->flags & IFA_F_TEMPORARY)) ^
1105 			    (ifa->idev->cnf.use_tempaddr >= 2)) {
1106 				score.attrs |= IPV6_SADDR_SCORE_PRIVACY;
1107 				if (!(hiscore.attrs & IPV6_SADDR_SCORE_PRIVACY)) {
1108 					score.rule = 7;
1109 					goto record_it;
1110 				}
1111 			} else {
1112 				if (hiscore.attrs & IPV6_SADDR_SCORE_PRIVACY)
1113 					continue;
1114 			}
1115 #else
1116 			if (hiscore.rule < 7)
1117 				hiscore.rule++;
1118 #endif
1119 			/* Rule 8: Use longest matching prefix */
1120 			if (hiscore.rule < 8) {
1121 				hiscore.matchlen = ipv6_addr_diff(&ifa_result->addr, daddr);
1122 				hiscore.rule++;
1123 			}
1124 			score.matchlen = ipv6_addr_diff(&ifa->addr, daddr);
1125 			if (score.matchlen > hiscore.matchlen) {
1126 				score.rule = 8;
1127 				goto record_it;
1128 			}
1129 #if 0
1130 			else if (score.matchlen < hiscore.matchlen)
1131 				continue;
1132 #endif
1133 
1134 			/* Final Rule: choose first available one */
1135 			continue;
1136 record_it:
1137 			if (ifa_result)
1138 				in6_ifa_put(ifa_result);
1139 			in6_ifa_hold(ifa);
1140 			ifa_result = ifa;
1141 			hiscore = score;
1142 		}
1143 		read_unlock_bh(&idev->lock);
1144 	}
1145 	rcu_read_unlock();
1146 	read_unlock(&dev_base_lock);
1147 
1148 	if (!ifa_result)
1149 		return -EADDRNOTAVAIL;
1150 
1151 	ipv6_addr_copy(saddr, &ifa_result->addr);
1152 	in6_ifa_put(ifa_result);
1153 	return 0;
1154 }
1155 
1156 
1157 int ipv6_get_saddr(struct dst_entry *dst,
1158 		   struct in6_addr *daddr, struct in6_addr *saddr)
1159 {
1160 	return ipv6_dev_get_saddr(dst ? ip6_dst_idev(dst)->dev : NULL, daddr, saddr);
1161 }
1162 
1163 EXPORT_SYMBOL(ipv6_get_saddr);
1164 
1165 int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr,
1166 		    unsigned char banned_flags)
1167 {
1168 	struct inet6_dev *idev;
1169 	int err = -EADDRNOTAVAIL;
1170 
1171 	rcu_read_lock();
1172 	if ((idev = __in6_dev_get(dev)) != NULL) {
1173 		struct inet6_ifaddr *ifp;
1174 
1175 		read_lock_bh(&idev->lock);
1176 		for (ifp=idev->addr_list; ifp; ifp=ifp->if_next) {
1177 			if (ifp->scope == IFA_LINK && !(ifp->flags & banned_flags)) {
1178 				ipv6_addr_copy(addr, &ifp->addr);
1179 				err = 0;
1180 				break;
1181 			}
1182 		}
1183 		read_unlock_bh(&idev->lock);
1184 	}
1185 	rcu_read_unlock();
1186 	return err;
1187 }
1188 
1189 static int ipv6_count_addresses(struct inet6_dev *idev)
1190 {
1191 	int cnt = 0;
1192 	struct inet6_ifaddr *ifp;
1193 
1194 	read_lock_bh(&idev->lock);
1195 	for (ifp=idev->addr_list; ifp; ifp=ifp->if_next)
1196 		cnt++;
1197 	read_unlock_bh(&idev->lock);
1198 	return cnt;
1199 }
1200 
1201 int ipv6_chk_addr(struct in6_addr *addr, struct net_device *dev, int strict)
1202 {
1203 	struct inet6_ifaddr * ifp;
1204 	u8 hash = ipv6_addr_hash(addr);
1205 
1206 	read_lock_bh(&addrconf_hash_lock);
1207 	for(ifp = inet6_addr_lst[hash]; ifp; ifp=ifp->lst_next) {
1208 		if (ipv6_addr_equal(&ifp->addr, addr) &&
1209 		    !(ifp->flags&IFA_F_TENTATIVE)) {
1210 			if (dev == NULL || ifp->idev->dev == dev ||
1211 			    !(ifp->scope&(IFA_LINK|IFA_HOST) || strict))
1212 				break;
1213 		}
1214 	}
1215 	read_unlock_bh(&addrconf_hash_lock);
1216 	return ifp != NULL;
1217 }
1218 
1219 EXPORT_SYMBOL(ipv6_chk_addr);
1220 
1221 static
1222 int ipv6_chk_same_addr(const struct in6_addr *addr, struct net_device *dev)
1223 {
1224 	struct inet6_ifaddr * ifp;
1225 	u8 hash = ipv6_addr_hash(addr);
1226 
1227 	for(ifp = inet6_addr_lst[hash]; ifp; ifp=ifp->lst_next) {
1228 		if (ipv6_addr_equal(&ifp->addr, addr)) {
1229 			if (dev == NULL || ifp->idev->dev == dev)
1230 				break;
1231 		}
1232 	}
1233 	return ifp != NULL;
1234 }
1235 
1236 struct inet6_ifaddr * ipv6_get_ifaddr(struct in6_addr *addr, struct net_device *dev, int strict)
1237 {
1238 	struct inet6_ifaddr * ifp;
1239 	u8 hash = ipv6_addr_hash(addr);
1240 
1241 	read_lock_bh(&addrconf_hash_lock);
1242 	for(ifp = inet6_addr_lst[hash]; ifp; ifp=ifp->lst_next) {
1243 		if (ipv6_addr_equal(&ifp->addr, addr)) {
1244 			if (dev == NULL || ifp->idev->dev == dev ||
1245 			    !(ifp->scope&(IFA_LINK|IFA_HOST) || strict)) {
1246 				in6_ifa_hold(ifp);
1247 				break;
1248 			}
1249 		}
1250 	}
1251 	read_unlock_bh(&addrconf_hash_lock);
1252 
1253 	return ifp;
1254 }
1255 
1256 int ipv6_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2)
1257 {
1258 	const struct in6_addr *sk_rcv_saddr6 = &inet6_sk(sk)->rcv_saddr;
1259 	const struct in6_addr *sk2_rcv_saddr6 = inet6_rcv_saddr(sk2);
1260 	__be32 sk_rcv_saddr = inet_sk(sk)->rcv_saddr;
1261 	__be32 sk2_rcv_saddr = inet_rcv_saddr(sk2);
1262 	int sk_ipv6only = ipv6_only_sock(sk);
1263 	int sk2_ipv6only = inet_v6_ipv6only(sk2);
1264 	int addr_type = ipv6_addr_type(sk_rcv_saddr6);
1265 	int addr_type2 = sk2_rcv_saddr6 ? ipv6_addr_type(sk2_rcv_saddr6) : IPV6_ADDR_MAPPED;
1266 
1267 	if (!sk2_rcv_saddr && !sk_ipv6only)
1268 		return 1;
1269 
1270 	if (addr_type2 == IPV6_ADDR_ANY &&
1271 	    !(sk2_ipv6only && addr_type == IPV6_ADDR_MAPPED))
1272 		return 1;
1273 
1274 	if (addr_type == IPV6_ADDR_ANY &&
1275 	    !(sk_ipv6only && addr_type2 == IPV6_ADDR_MAPPED))
1276 		return 1;
1277 
1278 	if (sk2_rcv_saddr6 &&
1279 	    ipv6_addr_equal(sk_rcv_saddr6, sk2_rcv_saddr6))
1280 		return 1;
1281 
1282 	if (addr_type == IPV6_ADDR_MAPPED &&
1283 	    !sk2_ipv6only &&
1284 	    (!sk2_rcv_saddr || !sk_rcv_saddr || sk_rcv_saddr == sk2_rcv_saddr))
1285 		return 1;
1286 
1287 	return 0;
1288 }
1289 
1290 /* Gets referenced address, destroys ifaddr */
1291 
1292 static void addrconf_dad_stop(struct inet6_ifaddr *ifp)
1293 {
1294 	if (ifp->flags&IFA_F_PERMANENT) {
1295 		spin_lock_bh(&ifp->lock);
1296 		addrconf_del_timer(ifp);
1297 		ifp->flags |= IFA_F_TENTATIVE;
1298 		spin_unlock_bh(&ifp->lock);
1299 		in6_ifa_put(ifp);
1300 #ifdef CONFIG_IPV6_PRIVACY
1301 	} else if (ifp->flags&IFA_F_TEMPORARY) {
1302 		struct inet6_ifaddr *ifpub;
1303 		spin_lock_bh(&ifp->lock);
1304 		ifpub = ifp->ifpub;
1305 		if (ifpub) {
1306 			in6_ifa_hold(ifpub);
1307 			spin_unlock_bh(&ifp->lock);
1308 			ipv6_create_tempaddr(ifpub, ifp);
1309 			in6_ifa_put(ifpub);
1310 		} else {
1311 			spin_unlock_bh(&ifp->lock);
1312 		}
1313 		ipv6_del_addr(ifp);
1314 #endif
1315 	} else
1316 		ipv6_del_addr(ifp);
1317 }
1318 
1319 void addrconf_dad_failure(struct inet6_ifaddr *ifp)
1320 {
1321 	if (net_ratelimit())
1322 		printk(KERN_INFO "%s: duplicate address detected!\n", ifp->idev->dev->name);
1323 	addrconf_dad_stop(ifp);
1324 }
1325 
1326 /* Join to solicited addr multicast group. */
1327 
1328 void addrconf_join_solict(struct net_device *dev, struct in6_addr *addr)
1329 {
1330 	struct in6_addr maddr;
1331 
1332 	if (dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1333 		return;
1334 
1335 	addrconf_addr_solict_mult(addr, &maddr);
1336 	ipv6_dev_mc_inc(dev, &maddr);
1337 }
1338 
1339 void addrconf_leave_solict(struct inet6_dev *idev, struct in6_addr *addr)
1340 {
1341 	struct in6_addr maddr;
1342 
1343 	if (idev->dev->flags&(IFF_LOOPBACK|IFF_NOARP))
1344 		return;
1345 
1346 	addrconf_addr_solict_mult(addr, &maddr);
1347 	__ipv6_dev_mc_dec(idev, &maddr);
1348 }
1349 
1350 static void addrconf_join_anycast(struct inet6_ifaddr *ifp)
1351 {
1352 	struct in6_addr addr;
1353 	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1354 	if (ipv6_addr_any(&addr))
1355 		return;
1356 	ipv6_dev_ac_inc(ifp->idev->dev, &addr);
1357 }
1358 
1359 static void addrconf_leave_anycast(struct inet6_ifaddr *ifp)
1360 {
1361 	struct in6_addr addr;
1362 	ipv6_addr_prefix(&addr, &ifp->addr, ifp->prefix_len);
1363 	if (ipv6_addr_any(&addr))
1364 		return;
1365 	__ipv6_dev_ac_dec(ifp->idev, &addr);
1366 }
1367 
1368 static int addrconf_ifid_eui48(u8 *eui, struct net_device *dev)
1369 {
1370 	if (dev->addr_len != ETH_ALEN)
1371 		return -1;
1372 	memcpy(eui, dev->dev_addr, 3);
1373 	memcpy(eui + 5, dev->dev_addr + 3, 3);
1374 
1375 	/*
1376 	 * The zSeries OSA network cards can be shared among various
1377 	 * OS instances, but the OSA cards have only one MAC address.
1378 	 * This leads to duplicate address conflicts in conjunction
1379 	 * with IPv6 if more than one instance uses the same card.
1380 	 *
1381 	 * The driver for these cards can deliver a unique 16-bit
1382 	 * identifier for each instance sharing the same card.  It is
1383 	 * placed instead of 0xFFFE in the interface identifier.  The
1384 	 * "u" bit of the interface identifier is not inverted in this
1385 	 * case.  Hence the resulting interface identifier has local
1386 	 * scope according to RFC2373.
1387 	 */
1388 	if (dev->dev_id) {
1389 		eui[3] = (dev->dev_id >> 8) & 0xFF;
1390 		eui[4] = dev->dev_id & 0xFF;
1391 	} else {
1392 		eui[3] = 0xFF;
1393 		eui[4] = 0xFE;
1394 		eui[0] ^= 2;
1395 	}
1396 	return 0;
1397 }
1398 
1399 static int addrconf_ifid_arcnet(u8 *eui, struct net_device *dev)
1400 {
1401 	/* XXX: inherit EUI-64 from other interface -- yoshfuji */
1402 	if (dev->addr_len != ARCNET_ALEN)
1403 		return -1;
1404 	memset(eui, 0, 7);
1405 	eui[7] = *(u8*)dev->dev_addr;
1406 	return 0;
1407 }
1408 
1409 static int addrconf_ifid_infiniband(u8 *eui, struct net_device *dev)
1410 {
1411 	if (dev->addr_len != INFINIBAND_ALEN)
1412 		return -1;
1413 	memcpy(eui, dev->dev_addr + 12, 8);
1414 	eui[0] |= 2;
1415 	return 0;
1416 }
1417 
1418 static int ipv6_generate_eui64(u8 *eui, struct net_device *dev)
1419 {
1420 	switch (dev->type) {
1421 	case ARPHRD_ETHER:
1422 	case ARPHRD_FDDI:
1423 	case ARPHRD_IEEE802_TR:
1424 		return addrconf_ifid_eui48(eui, dev);
1425 	case ARPHRD_ARCNET:
1426 		return addrconf_ifid_arcnet(eui, dev);
1427 	case ARPHRD_INFINIBAND:
1428 		return addrconf_ifid_infiniband(eui, dev);
1429 	}
1430 	return -1;
1431 }
1432 
1433 static int ipv6_inherit_eui64(u8 *eui, struct inet6_dev *idev)
1434 {
1435 	int err = -1;
1436 	struct inet6_ifaddr *ifp;
1437 
1438 	read_lock_bh(&idev->lock);
1439 	for (ifp=idev->addr_list; ifp; ifp=ifp->if_next) {
1440 		if (ifp->scope == IFA_LINK && !(ifp->flags&IFA_F_TENTATIVE)) {
1441 			memcpy(eui, ifp->addr.s6_addr+8, 8);
1442 			err = 0;
1443 			break;
1444 		}
1445 	}
1446 	read_unlock_bh(&idev->lock);
1447 	return err;
1448 }
1449 
1450 #ifdef CONFIG_IPV6_PRIVACY
1451 /* (re)generation of randomized interface identifier (RFC 3041 3.2, 3.5) */
1452 static int __ipv6_regen_rndid(struct inet6_dev *idev)
1453 {
1454 regen:
1455 	get_random_bytes(idev->rndid, sizeof(idev->rndid));
1456 	idev->rndid[0] &= ~0x02;
1457 
1458 	/*
1459 	 * <draft-ietf-ipngwg-temp-addresses-v2-00.txt>:
1460 	 * check if generated address is not inappropriate
1461 	 *
1462 	 *  - Reserved subnet anycast (RFC 2526)
1463 	 *	11111101 11....11 1xxxxxxx
1464 	 *  - ISATAP (draft-ietf-ngtrans-isatap-13.txt) 5.1
1465 	 *	00-00-5E-FE-xx-xx-xx-xx
1466 	 *  - value 0
1467 	 *  - XXX: already assigned to an address on the device
1468 	 */
1469 	if (idev->rndid[0] == 0xfd &&
1470 	    (idev->rndid[1]&idev->rndid[2]&idev->rndid[3]&idev->rndid[4]&idev->rndid[5]&idev->rndid[6]) == 0xff &&
1471 	    (idev->rndid[7]&0x80))
1472 		goto regen;
1473 	if ((idev->rndid[0]|idev->rndid[1]) == 0) {
1474 		if (idev->rndid[2] == 0x5e && idev->rndid[3] == 0xfe)
1475 			goto regen;
1476 		if ((idev->rndid[2]|idev->rndid[3]|idev->rndid[4]|idev->rndid[5]|idev->rndid[6]|idev->rndid[7]) == 0x00)
1477 			goto regen;
1478 	}
1479 
1480 	return 0;
1481 }
1482 
1483 static void ipv6_regen_rndid(unsigned long data)
1484 {
1485 	struct inet6_dev *idev = (struct inet6_dev *) data;
1486 	unsigned long expires;
1487 
1488 	rcu_read_lock_bh();
1489 	write_lock_bh(&idev->lock);
1490 
1491 	if (idev->dead)
1492 		goto out;
1493 
1494 	if (__ipv6_regen_rndid(idev) < 0)
1495 		goto out;
1496 
1497 	expires = jiffies +
1498 		idev->cnf.temp_prefered_lft * HZ -
1499 		idev->cnf.regen_max_retry * idev->cnf.dad_transmits * idev->nd_parms->retrans_time - desync_factor;
1500 	if (time_before(expires, jiffies)) {
1501 		printk(KERN_WARNING
1502 			"ipv6_regen_rndid(): too short regeneration interval; timer disabled for %s.\n",
1503 			idev->dev->name);
1504 		goto out;
1505 	}
1506 
1507 	if (!mod_timer(&idev->regen_timer, expires))
1508 		in6_dev_hold(idev);
1509 
1510 out:
1511 	write_unlock_bh(&idev->lock);
1512 	rcu_read_unlock_bh();
1513 	in6_dev_put(idev);
1514 }
1515 
1516 static int __ipv6_try_regen_rndid(struct inet6_dev *idev, struct in6_addr *tmpaddr) {
1517 	int ret = 0;
1518 
1519 	if (tmpaddr && memcmp(idev->rndid, &tmpaddr->s6_addr[8], 8) == 0)
1520 		ret = __ipv6_regen_rndid(idev);
1521 	return ret;
1522 }
1523 #endif
1524 
1525 /*
1526  *	Add prefix route.
1527  */
1528 
1529 static void
1530 addrconf_prefix_route(struct in6_addr *pfx, int plen, struct net_device *dev,
1531 		      unsigned long expires, u32 flags)
1532 {
1533 	struct fib6_config cfg = {
1534 		.fc_table = RT6_TABLE_PREFIX,
1535 		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1536 		.fc_ifindex = dev->ifindex,
1537 		.fc_expires = expires,
1538 		.fc_dst_len = plen,
1539 		.fc_flags = RTF_UP | flags,
1540 	};
1541 
1542 	ipv6_addr_copy(&cfg.fc_dst, pfx);
1543 
1544 	/* Prevent useless cloning on PtP SIT.
1545 	   This thing is done here expecting that the whole
1546 	   class of non-broadcast devices need not cloning.
1547 	 */
1548 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1549 	if (dev->type == ARPHRD_SIT && (dev->flags & IFF_POINTOPOINT))
1550 		cfg.fc_flags |= RTF_NONEXTHOP;
1551 #endif
1552 
1553 	ip6_route_add(&cfg);
1554 }
1555 
1556 /* Create "default" multicast route to the interface */
1557 
1558 static void addrconf_add_mroute(struct net_device *dev)
1559 {
1560 	struct fib6_config cfg = {
1561 		.fc_table = RT6_TABLE_LOCAL,
1562 		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1563 		.fc_ifindex = dev->ifindex,
1564 		.fc_dst_len = 8,
1565 		.fc_flags = RTF_UP,
1566 	};
1567 
1568 	ipv6_addr_set(&cfg.fc_dst, htonl(0xFF000000), 0, 0, 0);
1569 
1570 	ip6_route_add(&cfg);
1571 }
1572 
1573 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1574 static void sit_route_add(struct net_device *dev)
1575 {
1576 	struct fib6_config cfg = {
1577 		.fc_table = RT6_TABLE_MAIN,
1578 		.fc_metric = IP6_RT_PRIO_ADDRCONF,
1579 		.fc_ifindex = dev->ifindex,
1580 		.fc_dst_len = 96,
1581 		.fc_flags = RTF_UP | RTF_NONEXTHOP,
1582 	};
1583 
1584 	/* prefix length - 96 bits "::d.d.d.d" */
1585 	ip6_route_add(&cfg);
1586 }
1587 #endif
1588 
1589 static void addrconf_add_lroute(struct net_device *dev)
1590 {
1591 	struct in6_addr addr;
1592 
1593 	ipv6_addr_set(&addr,  htonl(0xFE800000), 0, 0, 0);
1594 	addrconf_prefix_route(&addr, 64, dev, 0, 0);
1595 }
1596 
1597 static struct inet6_dev *addrconf_add_dev(struct net_device *dev)
1598 {
1599 	struct inet6_dev *idev;
1600 
1601 	ASSERT_RTNL();
1602 
1603 	if ((idev = ipv6_find_idev(dev)) == NULL)
1604 		return NULL;
1605 
1606 	/* Add default multicast route */
1607 	addrconf_add_mroute(dev);
1608 
1609 	/* Add link local route */
1610 	addrconf_add_lroute(dev);
1611 	return idev;
1612 }
1613 
1614 void addrconf_prefix_rcv(struct net_device *dev, u8 *opt, int len)
1615 {
1616 	struct prefix_info *pinfo;
1617 	__u32 valid_lft;
1618 	__u32 prefered_lft;
1619 	int addr_type;
1620 	unsigned long rt_expires;
1621 	struct inet6_dev *in6_dev;
1622 
1623 	pinfo = (struct prefix_info *) opt;
1624 
1625 	if (len < sizeof(struct prefix_info)) {
1626 		ADBG(("addrconf: prefix option too short\n"));
1627 		return;
1628 	}
1629 
1630 	/*
1631 	 *	Validation checks ([ADDRCONF], page 19)
1632 	 */
1633 
1634 	addr_type = ipv6_addr_type(&pinfo->prefix);
1635 
1636 	if (addr_type & (IPV6_ADDR_MULTICAST|IPV6_ADDR_LINKLOCAL))
1637 		return;
1638 
1639 	valid_lft = ntohl(pinfo->valid);
1640 	prefered_lft = ntohl(pinfo->prefered);
1641 
1642 	if (prefered_lft > valid_lft) {
1643 		if (net_ratelimit())
1644 			printk(KERN_WARNING "addrconf: prefix option has invalid lifetime\n");
1645 		return;
1646 	}
1647 
1648 	in6_dev = in6_dev_get(dev);
1649 
1650 	if (in6_dev == NULL) {
1651 		if (net_ratelimit())
1652 			printk(KERN_DEBUG "addrconf: device %s not configured\n", dev->name);
1653 		return;
1654 	}
1655 
1656 	/*
1657 	 *	Two things going on here:
1658 	 *	1) Add routes for on-link prefixes
1659 	 *	2) Configure prefixes with the auto flag set
1660 	 */
1661 
1662 	/* Avoid arithmetic overflow. Really, we could
1663 	   save rt_expires in seconds, likely valid_lft,
1664 	   but it would require division in fib gc, that it
1665 	   not good.
1666 	 */
1667 	if (valid_lft >= 0x7FFFFFFF/HZ)
1668 		rt_expires = 0x7FFFFFFF - (0x7FFFFFFF % HZ);
1669 	else
1670 		rt_expires = valid_lft * HZ;
1671 
1672 	/*
1673 	 * We convert this (in jiffies) to clock_t later.
1674 	 * Avoid arithmetic overflow there as well.
1675 	 * Overflow can happen only if HZ < USER_HZ.
1676 	 */
1677 	if (HZ < USER_HZ && rt_expires > 0x7FFFFFFF / USER_HZ)
1678 		rt_expires = 0x7FFFFFFF / USER_HZ;
1679 
1680 	if (pinfo->onlink) {
1681 		struct rt6_info *rt;
1682 		rt = rt6_lookup(&pinfo->prefix, NULL, dev->ifindex, 1);
1683 
1684 		if (rt && ((rt->rt6i_flags & (RTF_GATEWAY | RTF_DEFAULT)) == 0)) {
1685 			if (rt->rt6i_flags&RTF_EXPIRES) {
1686 				if (valid_lft == 0) {
1687 					ip6_del_rt(rt);
1688 					rt = NULL;
1689 				} else {
1690 					rt->rt6i_expires = jiffies + rt_expires;
1691 				}
1692 			}
1693 		} else if (valid_lft) {
1694 			addrconf_prefix_route(&pinfo->prefix, pinfo->prefix_len,
1695 					      dev, jiffies_to_clock_t(rt_expires), RTF_ADDRCONF|RTF_EXPIRES|RTF_PREFIX_RT);
1696 		}
1697 		if (rt)
1698 			dst_release(&rt->u.dst);
1699 	}
1700 
1701 	/* Try to figure out our local address for this prefix */
1702 
1703 	if (pinfo->autoconf && in6_dev->cnf.autoconf) {
1704 		struct inet6_ifaddr * ifp;
1705 		struct in6_addr addr;
1706 		int create = 0, update_lft = 0;
1707 
1708 		if (pinfo->prefix_len == 64) {
1709 			memcpy(&addr, &pinfo->prefix, 8);
1710 			if (ipv6_generate_eui64(addr.s6_addr + 8, dev) &&
1711 			    ipv6_inherit_eui64(addr.s6_addr + 8, in6_dev)) {
1712 				in6_dev_put(in6_dev);
1713 				return;
1714 			}
1715 			goto ok;
1716 		}
1717 		if (net_ratelimit())
1718 			printk(KERN_DEBUG "IPv6 addrconf: prefix with wrong length %d\n",
1719 			       pinfo->prefix_len);
1720 		in6_dev_put(in6_dev);
1721 		return;
1722 
1723 ok:
1724 
1725 		ifp = ipv6_get_ifaddr(&addr, dev, 1);
1726 
1727 		if (ifp == NULL && valid_lft) {
1728 			int max_addresses = in6_dev->cnf.max_addresses;
1729 			u32 addr_flags = 0;
1730 
1731 #ifdef CONFIG_IPV6_OPTIMISTIC_DAD
1732 			if (in6_dev->cnf.optimistic_dad &&
1733 			    !ipv6_devconf.forwarding)
1734 				addr_flags = IFA_F_OPTIMISTIC;
1735 #endif
1736 
1737 			/* Do not allow to create too much of autoconfigured
1738 			 * addresses; this would be too easy way to crash kernel.
1739 			 */
1740 			if (!max_addresses ||
1741 			    ipv6_count_addresses(in6_dev) < max_addresses)
1742 				ifp = ipv6_add_addr(in6_dev, &addr, pinfo->prefix_len,
1743 						    addr_type&IPV6_ADDR_SCOPE_MASK,
1744 						    addr_flags);
1745 
1746 			if (!ifp || IS_ERR(ifp)) {
1747 				in6_dev_put(in6_dev);
1748 				return;
1749 			}
1750 
1751 			update_lft = create = 1;
1752 			ifp->cstamp = jiffies;
1753 			addrconf_dad_start(ifp, RTF_ADDRCONF|RTF_PREFIX_RT);
1754 		}
1755 
1756 		if (ifp) {
1757 			int flags;
1758 			unsigned long now;
1759 #ifdef CONFIG_IPV6_PRIVACY
1760 			struct inet6_ifaddr *ift;
1761 #endif
1762 			u32 stored_lft;
1763 
1764 			/* update lifetime (RFC2462 5.5.3 e) */
1765 			spin_lock(&ifp->lock);
1766 			now = jiffies;
1767 			if (ifp->valid_lft > (now - ifp->tstamp) / HZ)
1768 				stored_lft = ifp->valid_lft - (now - ifp->tstamp) / HZ;
1769 			else
1770 				stored_lft = 0;
1771 			if (!update_lft && stored_lft) {
1772 				if (valid_lft > MIN_VALID_LIFETIME ||
1773 				    valid_lft > stored_lft)
1774 					update_lft = 1;
1775 				else if (stored_lft <= MIN_VALID_LIFETIME) {
1776 					/* valid_lft <= stored_lft is always true */
1777 					/* XXX: IPsec */
1778 					update_lft = 0;
1779 				} else {
1780 					valid_lft = MIN_VALID_LIFETIME;
1781 					if (valid_lft < prefered_lft)
1782 						prefered_lft = valid_lft;
1783 					update_lft = 1;
1784 				}
1785 			}
1786 
1787 			if (update_lft) {
1788 				ifp->valid_lft = valid_lft;
1789 				ifp->prefered_lft = prefered_lft;
1790 				ifp->tstamp = now;
1791 				flags = ifp->flags;
1792 				ifp->flags &= ~IFA_F_DEPRECATED;
1793 				spin_unlock(&ifp->lock);
1794 
1795 				if (!(flags&IFA_F_TENTATIVE))
1796 					ipv6_ifa_notify(0, ifp);
1797 			} else
1798 				spin_unlock(&ifp->lock);
1799 
1800 #ifdef CONFIG_IPV6_PRIVACY
1801 			read_lock_bh(&in6_dev->lock);
1802 			/* update all temporary addresses in the list */
1803 			for (ift=in6_dev->tempaddr_list; ift; ift=ift->tmp_next) {
1804 				/*
1805 				 * When adjusting the lifetimes of an existing
1806 				 * temporary address, only lower the lifetimes.
1807 				 * Implementations must not increase the
1808 				 * lifetimes of an existing temporary address
1809 				 * when processing a Prefix Information Option.
1810 				 */
1811 				spin_lock(&ift->lock);
1812 				flags = ift->flags;
1813 				if (ift->valid_lft > valid_lft &&
1814 				    ift->valid_lft - valid_lft > (jiffies - ift->tstamp) / HZ)
1815 					ift->valid_lft = valid_lft + (jiffies - ift->tstamp) / HZ;
1816 				if (ift->prefered_lft > prefered_lft &&
1817 				    ift->prefered_lft - prefered_lft > (jiffies - ift->tstamp) / HZ)
1818 					ift->prefered_lft = prefered_lft + (jiffies - ift->tstamp) / HZ;
1819 				spin_unlock(&ift->lock);
1820 				if (!(flags&IFA_F_TENTATIVE))
1821 					ipv6_ifa_notify(0, ift);
1822 			}
1823 
1824 			if (create && in6_dev->cnf.use_tempaddr > 0) {
1825 				/*
1826 				 * When a new public address is created as described in [ADDRCONF],
1827 				 * also create a new temporary address.
1828 				 */
1829 				read_unlock_bh(&in6_dev->lock);
1830 				ipv6_create_tempaddr(ifp, NULL);
1831 			} else {
1832 				read_unlock_bh(&in6_dev->lock);
1833 			}
1834 #endif
1835 			in6_ifa_put(ifp);
1836 			addrconf_verify(0);
1837 		}
1838 	}
1839 	inet6_prefix_notify(RTM_NEWPREFIX, in6_dev, pinfo);
1840 	in6_dev_put(in6_dev);
1841 }
1842 
1843 /*
1844  *	Set destination address.
1845  *	Special case for SIT interfaces where we create a new "virtual"
1846  *	device.
1847  */
1848 int addrconf_set_dstaddr(void __user *arg)
1849 {
1850 	struct in6_ifreq ireq;
1851 	struct net_device *dev;
1852 	int err = -EINVAL;
1853 
1854 	rtnl_lock();
1855 
1856 	err = -EFAULT;
1857 	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
1858 		goto err_exit;
1859 
1860 	dev = __dev_get_by_index(ireq.ifr6_ifindex);
1861 
1862 	err = -ENODEV;
1863 	if (dev == NULL)
1864 		goto err_exit;
1865 
1866 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
1867 	if (dev->type == ARPHRD_SIT) {
1868 		struct ifreq ifr;
1869 		mm_segment_t	oldfs;
1870 		struct ip_tunnel_parm p;
1871 
1872 		err = -EADDRNOTAVAIL;
1873 		if (!(ipv6_addr_type(&ireq.ifr6_addr) & IPV6_ADDR_COMPATv4))
1874 			goto err_exit;
1875 
1876 		memset(&p, 0, sizeof(p));
1877 		p.iph.daddr = ireq.ifr6_addr.s6_addr32[3];
1878 		p.iph.saddr = 0;
1879 		p.iph.version = 4;
1880 		p.iph.ihl = 5;
1881 		p.iph.protocol = IPPROTO_IPV6;
1882 		p.iph.ttl = 64;
1883 		ifr.ifr_ifru.ifru_data = (void __user *)&p;
1884 
1885 		oldfs = get_fs(); set_fs(KERNEL_DS);
1886 		err = dev->do_ioctl(dev, &ifr, SIOCADDTUNNEL);
1887 		set_fs(oldfs);
1888 
1889 		if (err == 0) {
1890 			err = -ENOBUFS;
1891 			if ((dev = __dev_get_by_name(p.name)) == NULL)
1892 				goto err_exit;
1893 			err = dev_open(dev);
1894 		}
1895 	}
1896 #endif
1897 
1898 err_exit:
1899 	rtnl_unlock();
1900 	return err;
1901 }
1902 
1903 /*
1904  *	Manual configuration of address on an interface
1905  */
1906 static int inet6_addr_add(int ifindex, struct in6_addr *pfx, int plen,
1907 			  __u8 ifa_flags, __u32 prefered_lft, __u32 valid_lft)
1908 {
1909 	struct inet6_ifaddr *ifp;
1910 	struct inet6_dev *idev;
1911 	struct net_device *dev;
1912 	int scope;
1913 	u32 flags = RTF_EXPIRES;
1914 
1915 	ASSERT_RTNL();
1916 
1917 	/* check the lifetime */
1918 	if (!valid_lft || prefered_lft > valid_lft)
1919 		return -EINVAL;
1920 
1921 	if ((dev = __dev_get_by_index(ifindex)) == NULL)
1922 		return -ENODEV;
1923 
1924 	if ((idev = addrconf_add_dev(dev)) == NULL)
1925 		return -ENOBUFS;
1926 
1927 	scope = ipv6_addr_scope(pfx);
1928 
1929 	if (valid_lft == INFINITY_LIFE_TIME) {
1930 		ifa_flags |= IFA_F_PERMANENT;
1931 		flags = 0;
1932 	} else if (valid_lft >= 0x7FFFFFFF/HZ)
1933 		valid_lft = 0x7FFFFFFF/HZ;
1934 
1935 	if (prefered_lft == 0)
1936 		ifa_flags |= IFA_F_DEPRECATED;
1937 	else if ((prefered_lft >= 0x7FFFFFFF/HZ) &&
1938 		 (prefered_lft != INFINITY_LIFE_TIME))
1939 		prefered_lft = 0x7FFFFFFF/HZ;
1940 
1941 	ifp = ipv6_add_addr(idev, pfx, plen, scope, ifa_flags);
1942 
1943 	if (!IS_ERR(ifp)) {
1944 		spin_lock_bh(&ifp->lock);
1945 		ifp->valid_lft = valid_lft;
1946 		ifp->prefered_lft = prefered_lft;
1947 		ifp->tstamp = jiffies;
1948 		spin_unlock_bh(&ifp->lock);
1949 
1950 		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, dev,
1951 				      jiffies_to_clock_t(valid_lft * HZ), flags);
1952 		/*
1953 		 * Note that section 3.1 of RFC 4429 indicates
1954 		 * that the Optimistic flag should not be set for
1955 		 * manually configured addresses
1956 		 */
1957 		addrconf_dad_start(ifp, 0);
1958 		in6_ifa_put(ifp);
1959 		addrconf_verify(0);
1960 		return 0;
1961 	}
1962 
1963 	return PTR_ERR(ifp);
1964 }
1965 
1966 static int inet6_addr_del(int ifindex, struct in6_addr *pfx, int plen)
1967 {
1968 	struct inet6_ifaddr *ifp;
1969 	struct inet6_dev *idev;
1970 	struct net_device *dev;
1971 
1972 	if ((dev = __dev_get_by_index(ifindex)) == NULL)
1973 		return -ENODEV;
1974 
1975 	if ((idev = __in6_dev_get(dev)) == NULL)
1976 		return -ENXIO;
1977 
1978 	read_lock_bh(&idev->lock);
1979 	for (ifp = idev->addr_list; ifp; ifp=ifp->if_next) {
1980 		if (ifp->prefix_len == plen &&
1981 		    ipv6_addr_equal(pfx, &ifp->addr)) {
1982 			in6_ifa_hold(ifp);
1983 			read_unlock_bh(&idev->lock);
1984 
1985 			ipv6_del_addr(ifp);
1986 
1987 			/* If the last address is deleted administratively,
1988 			   disable IPv6 on this interface.
1989 			 */
1990 			if (idev->addr_list == NULL)
1991 				addrconf_ifdown(idev->dev, 1);
1992 			return 0;
1993 		}
1994 	}
1995 	read_unlock_bh(&idev->lock);
1996 	return -EADDRNOTAVAIL;
1997 }
1998 
1999 
2000 int addrconf_add_ifaddr(void __user *arg)
2001 {
2002 	struct in6_ifreq ireq;
2003 	int err;
2004 
2005 	if (!capable(CAP_NET_ADMIN))
2006 		return -EPERM;
2007 
2008 	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2009 		return -EFAULT;
2010 
2011 	rtnl_lock();
2012 	err = inet6_addr_add(ireq.ifr6_ifindex, &ireq.ifr6_addr, ireq.ifr6_prefixlen,
2013 			     IFA_F_PERMANENT, INFINITY_LIFE_TIME, INFINITY_LIFE_TIME);
2014 	rtnl_unlock();
2015 	return err;
2016 }
2017 
2018 int addrconf_del_ifaddr(void __user *arg)
2019 {
2020 	struct in6_ifreq ireq;
2021 	int err;
2022 
2023 	if (!capable(CAP_NET_ADMIN))
2024 		return -EPERM;
2025 
2026 	if (copy_from_user(&ireq, arg, sizeof(struct in6_ifreq)))
2027 		return -EFAULT;
2028 
2029 	rtnl_lock();
2030 	err = inet6_addr_del(ireq.ifr6_ifindex, &ireq.ifr6_addr, ireq.ifr6_prefixlen);
2031 	rtnl_unlock();
2032 	return err;
2033 }
2034 
2035 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2036 static void sit_add_v4_addrs(struct inet6_dev *idev)
2037 {
2038 	struct inet6_ifaddr * ifp;
2039 	struct in6_addr addr;
2040 	struct net_device *dev;
2041 	int scope;
2042 
2043 	ASSERT_RTNL();
2044 
2045 	memset(&addr, 0, sizeof(struct in6_addr));
2046 	memcpy(&addr.s6_addr32[3], idev->dev->dev_addr, 4);
2047 
2048 	if (idev->dev->flags&IFF_POINTOPOINT) {
2049 		addr.s6_addr32[0] = htonl(0xfe800000);
2050 		scope = IFA_LINK;
2051 	} else {
2052 		scope = IPV6_ADDR_COMPATv4;
2053 	}
2054 
2055 	if (addr.s6_addr32[3]) {
2056 		ifp = ipv6_add_addr(idev, &addr, 128, scope, IFA_F_PERMANENT);
2057 		if (!IS_ERR(ifp)) {
2058 			spin_lock_bh(&ifp->lock);
2059 			ifp->flags &= ~IFA_F_TENTATIVE;
2060 			spin_unlock_bh(&ifp->lock);
2061 			ipv6_ifa_notify(RTM_NEWADDR, ifp);
2062 			in6_ifa_put(ifp);
2063 		}
2064 		return;
2065 	}
2066 
2067 	for_each_netdev(dev) {
2068 		struct in_device * in_dev = __in_dev_get_rtnl(dev);
2069 		if (in_dev && (dev->flags & IFF_UP)) {
2070 			struct in_ifaddr * ifa;
2071 
2072 			int flag = scope;
2073 
2074 			for (ifa = in_dev->ifa_list; ifa; ifa = ifa->ifa_next) {
2075 				int plen;
2076 
2077 				addr.s6_addr32[3] = ifa->ifa_local;
2078 
2079 				if (ifa->ifa_scope == RT_SCOPE_LINK)
2080 					continue;
2081 				if (ifa->ifa_scope >= RT_SCOPE_HOST) {
2082 					if (idev->dev->flags&IFF_POINTOPOINT)
2083 						continue;
2084 					flag |= IFA_HOST;
2085 				}
2086 				if (idev->dev->flags&IFF_POINTOPOINT)
2087 					plen = 64;
2088 				else
2089 					plen = 96;
2090 
2091 				ifp = ipv6_add_addr(idev, &addr, plen, flag,
2092 						    IFA_F_PERMANENT);
2093 				if (!IS_ERR(ifp)) {
2094 					spin_lock_bh(&ifp->lock);
2095 					ifp->flags &= ~IFA_F_TENTATIVE;
2096 					spin_unlock_bh(&ifp->lock);
2097 					ipv6_ifa_notify(RTM_NEWADDR, ifp);
2098 					in6_ifa_put(ifp);
2099 				}
2100 			}
2101 		}
2102 	}
2103 }
2104 #endif
2105 
2106 static void init_loopback(struct net_device *dev)
2107 {
2108 	struct inet6_dev  *idev;
2109 	struct inet6_ifaddr * ifp;
2110 
2111 	/* ::1 */
2112 
2113 	ASSERT_RTNL();
2114 
2115 	if ((idev = ipv6_find_idev(dev)) == NULL) {
2116 		printk(KERN_DEBUG "init loopback: add_dev failed\n");
2117 		return;
2118 	}
2119 
2120 	ifp = ipv6_add_addr(idev, &in6addr_loopback, 128, IFA_HOST, IFA_F_PERMANENT);
2121 	if (!IS_ERR(ifp)) {
2122 		spin_lock_bh(&ifp->lock);
2123 		ifp->flags &= ~IFA_F_TENTATIVE;
2124 		spin_unlock_bh(&ifp->lock);
2125 		ipv6_ifa_notify(RTM_NEWADDR, ifp);
2126 		in6_ifa_put(ifp);
2127 	}
2128 }
2129 
2130 static void addrconf_add_linklocal(struct inet6_dev *idev, struct in6_addr *addr)
2131 {
2132 	struct inet6_ifaddr * ifp;
2133 	u32 addr_flags = IFA_F_PERMANENT;
2134 
2135 #ifdef CONFIG_IPV6_OPTIMISTIC_DAD
2136 	if (idev->cnf.optimistic_dad &&
2137 	    !ipv6_devconf.forwarding)
2138 		addr_flags |= IFA_F_OPTIMISTIC;
2139 #endif
2140 
2141 
2142 	ifp = ipv6_add_addr(idev, addr, 64, IFA_LINK, addr_flags);
2143 	if (!IS_ERR(ifp)) {
2144 		addrconf_prefix_route(&ifp->addr, ifp->prefix_len, idev->dev, 0, 0);
2145 		addrconf_dad_start(ifp, 0);
2146 		in6_ifa_put(ifp);
2147 	}
2148 }
2149 
2150 static void addrconf_dev_config(struct net_device *dev)
2151 {
2152 	struct in6_addr addr;
2153 	struct inet6_dev    * idev;
2154 
2155 	ASSERT_RTNL();
2156 
2157 	if ((dev->type != ARPHRD_ETHER) &&
2158 	    (dev->type != ARPHRD_FDDI) &&
2159 	    (dev->type != ARPHRD_IEEE802_TR) &&
2160 	    (dev->type != ARPHRD_ARCNET) &&
2161 	    (dev->type != ARPHRD_INFINIBAND)) {
2162 		/* Alas, we support only Ethernet autoconfiguration. */
2163 		return;
2164 	}
2165 
2166 	idev = addrconf_add_dev(dev);
2167 	if (idev == NULL)
2168 		return;
2169 
2170 	memset(&addr, 0, sizeof(struct in6_addr));
2171 	addr.s6_addr32[0] = htonl(0xFE800000);
2172 
2173 	if (ipv6_generate_eui64(addr.s6_addr + 8, dev) == 0)
2174 		addrconf_add_linklocal(idev, &addr);
2175 }
2176 
2177 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2178 static void addrconf_sit_config(struct net_device *dev)
2179 {
2180 	struct inet6_dev *idev;
2181 
2182 	ASSERT_RTNL();
2183 
2184 	/*
2185 	 * Configure the tunnel with one of our IPv4
2186 	 * addresses... we should configure all of
2187 	 * our v4 addrs in the tunnel
2188 	 */
2189 
2190 	if ((idev = ipv6_find_idev(dev)) == NULL) {
2191 		printk(KERN_DEBUG "init sit: add_dev failed\n");
2192 		return;
2193 	}
2194 
2195 	sit_add_v4_addrs(idev);
2196 
2197 	if (dev->flags&IFF_POINTOPOINT) {
2198 		addrconf_add_mroute(dev);
2199 		addrconf_add_lroute(dev);
2200 	} else
2201 		sit_route_add(dev);
2202 }
2203 #endif
2204 
2205 static inline int
2206 ipv6_inherit_linklocal(struct inet6_dev *idev, struct net_device *link_dev)
2207 {
2208 	struct in6_addr lladdr;
2209 
2210 	if (!ipv6_get_lladdr(link_dev, &lladdr, IFA_F_TENTATIVE)) {
2211 		addrconf_add_linklocal(idev, &lladdr);
2212 		return 0;
2213 	}
2214 	return -1;
2215 }
2216 
2217 static void ip6_tnl_add_linklocal(struct inet6_dev *idev)
2218 {
2219 	struct net_device *link_dev;
2220 
2221 	/* first try to inherit the link-local address from the link device */
2222 	if (idev->dev->iflink &&
2223 	    (link_dev = __dev_get_by_index(idev->dev->iflink))) {
2224 		if (!ipv6_inherit_linklocal(idev, link_dev))
2225 			return;
2226 	}
2227 	/* then try to inherit it from any device */
2228 	for_each_netdev(link_dev) {
2229 		if (!ipv6_inherit_linklocal(idev, link_dev))
2230 			return;
2231 	}
2232 	printk(KERN_DEBUG "init ip6-ip6: add_linklocal failed\n");
2233 }
2234 
2235 /*
2236  * Autoconfigure tunnel with a link-local address so routing protocols,
2237  * DHCPv6, MLD etc. can be run over the virtual link
2238  */
2239 
2240 static void addrconf_ip6_tnl_config(struct net_device *dev)
2241 {
2242 	struct inet6_dev *idev;
2243 
2244 	ASSERT_RTNL();
2245 
2246 	if ((idev = addrconf_add_dev(dev)) == NULL) {
2247 		printk(KERN_DEBUG "init ip6-ip6: add_dev failed\n");
2248 		return;
2249 	}
2250 	ip6_tnl_add_linklocal(idev);
2251 }
2252 
2253 static int addrconf_notify(struct notifier_block *this, unsigned long event,
2254 			   void * data)
2255 {
2256 	struct net_device *dev = (struct net_device *) data;
2257 	struct inet6_dev *idev = __in6_dev_get(dev);
2258 	int run_pending = 0;
2259 
2260 	switch(event) {
2261 	case NETDEV_REGISTER:
2262 		if (!idev && dev->mtu >= IPV6_MIN_MTU) {
2263 			idev = ipv6_add_dev(dev);
2264 			if (!idev)
2265 				printk(KERN_WARNING "IPv6: add_dev failed for %s\n",
2266 					dev->name);
2267 		}
2268 		break;
2269 	case NETDEV_UP:
2270 	case NETDEV_CHANGE:
2271 		if (dev->flags & IFF_SLAVE)
2272 			break;
2273 
2274 		if (event == NETDEV_UP) {
2275 			if (!netif_carrier_ok(dev)) {
2276 				/* device is not ready yet. */
2277 				printk(KERN_INFO
2278 					"ADDRCONF(NETDEV_UP): %s: "
2279 					"link is not ready\n",
2280 					dev->name);
2281 				break;
2282 			}
2283 
2284 			if (idev)
2285 				idev->if_flags |= IF_READY;
2286 		} else {
2287 			if (!netif_carrier_ok(dev)) {
2288 				/* device is still not ready. */
2289 				break;
2290 			}
2291 
2292 			if (idev) {
2293 				if (idev->if_flags & IF_READY) {
2294 					/* device is already configured. */
2295 					break;
2296 				}
2297 				idev->if_flags |= IF_READY;
2298 			}
2299 
2300 			printk(KERN_INFO
2301 					"ADDRCONF(NETDEV_CHANGE): %s: "
2302 					"link becomes ready\n",
2303 					dev->name);
2304 
2305 			run_pending = 1;
2306 		}
2307 
2308 		switch(dev->type) {
2309 #if defined(CONFIG_IPV6_SIT) || defined(CONFIG_IPV6_SIT_MODULE)
2310 		case ARPHRD_SIT:
2311 			addrconf_sit_config(dev);
2312 			break;
2313 #endif
2314 		case ARPHRD_TUNNEL6:
2315 			addrconf_ip6_tnl_config(dev);
2316 			break;
2317 		case ARPHRD_LOOPBACK:
2318 			init_loopback(dev);
2319 			break;
2320 
2321 		default:
2322 			addrconf_dev_config(dev);
2323 			break;
2324 		}
2325 		if (idev) {
2326 			if (run_pending)
2327 				addrconf_dad_run(idev);
2328 
2329 			/* If the MTU changed during the interface down, when the
2330 			   interface up, the changed MTU must be reflected in the
2331 			   idev as well as routers.
2332 			 */
2333 			if (idev->cnf.mtu6 != dev->mtu && dev->mtu >= IPV6_MIN_MTU) {
2334 				rt6_mtu_change(dev, dev->mtu);
2335 				idev->cnf.mtu6 = dev->mtu;
2336 			}
2337 			idev->tstamp = jiffies;
2338 			inet6_ifinfo_notify(RTM_NEWLINK, idev);
2339 			/* If the changed mtu during down is lower than IPV6_MIN_MTU
2340 			   stop IPv6 on this interface.
2341 			 */
2342 			if (dev->mtu < IPV6_MIN_MTU)
2343 				addrconf_ifdown(dev, event != NETDEV_DOWN);
2344 		}
2345 		break;
2346 
2347 	case NETDEV_CHANGEMTU:
2348 		if ( idev && dev->mtu >= IPV6_MIN_MTU) {
2349 			rt6_mtu_change(dev, dev->mtu);
2350 			idev->cnf.mtu6 = dev->mtu;
2351 			break;
2352 		}
2353 
2354 		/* MTU falled under IPV6_MIN_MTU. Stop IPv6 on this interface. */
2355 
2356 	case NETDEV_DOWN:
2357 	case NETDEV_UNREGISTER:
2358 		/*
2359 		 *	Remove all addresses from this interface.
2360 		 */
2361 		addrconf_ifdown(dev, event != NETDEV_DOWN);
2362 		break;
2363 
2364 	case NETDEV_CHANGENAME:
2365 		if (idev) {
2366 			snmp6_unregister_dev(idev);
2367 #ifdef CONFIG_SYSCTL
2368 			addrconf_sysctl_unregister(&idev->cnf);
2369 			neigh_sysctl_unregister(idev->nd_parms);
2370 			neigh_sysctl_register(dev, idev->nd_parms,
2371 					      NET_IPV6, NET_IPV6_NEIGH, "ipv6",
2372 					      &ndisc_ifinfo_sysctl_change,
2373 					      NULL);
2374 			addrconf_sysctl_register(idev, &idev->cnf);
2375 #endif
2376 			snmp6_register_dev(idev);
2377 		}
2378 		break;
2379 	}
2380 
2381 	return NOTIFY_OK;
2382 }
2383 
2384 /*
2385  *	addrconf module should be notified of a device going up
2386  */
2387 static struct notifier_block ipv6_dev_notf = {
2388 	.notifier_call = addrconf_notify,
2389 	.priority = 0
2390 };
2391 
2392 static int addrconf_ifdown(struct net_device *dev, int how)
2393 {
2394 	struct inet6_dev *idev;
2395 	struct inet6_ifaddr *ifa, **bifa;
2396 	int i;
2397 
2398 	ASSERT_RTNL();
2399 
2400 	if (dev == &loopback_dev && how == 1)
2401 		how = 0;
2402 
2403 	rt6_ifdown(dev);
2404 	neigh_ifdown(&nd_tbl, dev);
2405 
2406 	idev = __in6_dev_get(dev);
2407 	if (idev == NULL)
2408 		return -ENODEV;
2409 
2410 	/* Step 1: remove reference to ipv6 device from parent device.
2411 		   Do not dev_put!
2412 	 */
2413 	if (how == 1) {
2414 		idev->dead = 1;
2415 
2416 		/* protected by rtnl_lock */
2417 		rcu_assign_pointer(dev->ip6_ptr, NULL);
2418 
2419 		/* Step 1.5: remove snmp6 entry */
2420 		snmp6_unregister_dev(idev);
2421 
2422 	}
2423 
2424 	/* Step 2: clear hash table */
2425 	for (i=0; i<IN6_ADDR_HSIZE; i++) {
2426 		bifa = &inet6_addr_lst[i];
2427 
2428 		write_lock_bh(&addrconf_hash_lock);
2429 		while ((ifa = *bifa) != NULL) {
2430 			if (ifa->idev == idev) {
2431 				*bifa = ifa->lst_next;
2432 				ifa->lst_next = NULL;
2433 				addrconf_del_timer(ifa);
2434 				in6_ifa_put(ifa);
2435 				continue;
2436 			}
2437 			bifa = &ifa->lst_next;
2438 		}
2439 		write_unlock_bh(&addrconf_hash_lock);
2440 	}
2441 
2442 	write_lock_bh(&idev->lock);
2443 
2444 	/* Step 3: clear flags for stateless addrconf */
2445 	if (how != 1)
2446 		idev->if_flags &= ~(IF_RS_SENT|IF_RA_RCVD|IF_READY);
2447 
2448 	/* Step 4: clear address list */
2449 #ifdef CONFIG_IPV6_PRIVACY
2450 	if (how == 1 && del_timer(&idev->regen_timer))
2451 		in6_dev_put(idev);
2452 
2453 	/* clear tempaddr list */
2454 	while ((ifa = idev->tempaddr_list) != NULL) {
2455 		idev->tempaddr_list = ifa->tmp_next;
2456 		ifa->tmp_next = NULL;
2457 		ifa->dead = 1;
2458 		write_unlock_bh(&idev->lock);
2459 		spin_lock_bh(&ifa->lock);
2460 
2461 		if (ifa->ifpub) {
2462 			in6_ifa_put(ifa->ifpub);
2463 			ifa->ifpub = NULL;
2464 		}
2465 		spin_unlock_bh(&ifa->lock);
2466 		in6_ifa_put(ifa);
2467 		write_lock_bh(&idev->lock);
2468 	}
2469 #endif
2470 	while ((ifa = idev->addr_list) != NULL) {
2471 		idev->addr_list = ifa->if_next;
2472 		ifa->if_next = NULL;
2473 		ifa->dead = 1;
2474 		addrconf_del_timer(ifa);
2475 		write_unlock_bh(&idev->lock);
2476 
2477 		__ipv6_ifa_notify(RTM_DELADDR, ifa);
2478 		atomic_notifier_call_chain(&inet6addr_chain, NETDEV_DOWN, ifa);
2479 		in6_ifa_put(ifa);
2480 
2481 		write_lock_bh(&idev->lock);
2482 	}
2483 	write_unlock_bh(&idev->lock);
2484 
2485 	/* Step 5: Discard multicast list */
2486 
2487 	if (how == 1)
2488 		ipv6_mc_destroy_dev(idev);
2489 	else
2490 		ipv6_mc_down(idev);
2491 
2492 	/* Step 5: netlink notification of this interface */
2493 	idev->tstamp = jiffies;
2494 	inet6_ifinfo_notify(RTM_DELLINK, idev);
2495 
2496 	/* Shot the device (if unregistered) */
2497 
2498 	if (how == 1) {
2499 #ifdef CONFIG_SYSCTL
2500 		addrconf_sysctl_unregister(&idev->cnf);
2501 		neigh_sysctl_unregister(idev->nd_parms);
2502 #endif
2503 		neigh_parms_release(&nd_tbl, idev->nd_parms);
2504 		neigh_ifdown(&nd_tbl, dev);
2505 		in6_dev_put(idev);
2506 	}
2507 	return 0;
2508 }
2509 
2510 static void addrconf_rs_timer(unsigned long data)
2511 {
2512 	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2513 
2514 	if (ifp->idev->cnf.forwarding)
2515 		goto out;
2516 
2517 	if (ifp->idev->if_flags & IF_RA_RCVD) {
2518 		/*
2519 		 *	Announcement received after solicitation
2520 		 *	was sent
2521 		 */
2522 		goto out;
2523 	}
2524 
2525 	spin_lock(&ifp->lock);
2526 	if (ifp->probes++ < ifp->idev->cnf.rtr_solicits) {
2527 		struct in6_addr all_routers;
2528 
2529 		/* The wait after the last probe can be shorter */
2530 		addrconf_mod_timer(ifp, AC_RS,
2531 				   (ifp->probes == ifp->idev->cnf.rtr_solicits) ?
2532 				   ifp->idev->cnf.rtr_solicit_delay :
2533 				   ifp->idev->cnf.rtr_solicit_interval);
2534 		spin_unlock(&ifp->lock);
2535 
2536 		ipv6_addr_all_routers(&all_routers);
2537 
2538 		ndisc_send_rs(ifp->idev->dev, &ifp->addr, &all_routers);
2539 	} else {
2540 		spin_unlock(&ifp->lock);
2541 		/*
2542 		 * Note: we do not support deprecated "all on-link"
2543 		 * assumption any longer.
2544 		 */
2545 		printk(KERN_DEBUG "%s: no IPv6 routers present\n",
2546 		       ifp->idev->dev->name);
2547 	}
2548 
2549 out:
2550 	in6_ifa_put(ifp);
2551 }
2552 
2553 /*
2554  *	Duplicate Address Detection
2555  */
2556 static void addrconf_dad_kick(struct inet6_ifaddr *ifp)
2557 {
2558 	unsigned long rand_num;
2559 	struct inet6_dev *idev = ifp->idev;
2560 
2561 	if (ifp->flags & IFA_F_OPTIMISTIC)
2562 		rand_num = 0;
2563 	else
2564 		rand_num = net_random() % (idev->cnf.rtr_solicit_delay ? : 1);
2565 
2566 	ifp->probes = idev->cnf.dad_transmits;
2567 	addrconf_mod_timer(ifp, AC_DAD, rand_num);
2568 }
2569 
2570 static void addrconf_dad_start(struct inet6_ifaddr *ifp, u32 flags)
2571 {
2572 	struct inet6_dev *idev = ifp->idev;
2573 	struct net_device *dev = idev->dev;
2574 
2575 	addrconf_join_solict(dev, &ifp->addr);
2576 
2577 	net_srandom(ifp->addr.s6_addr32[3]);
2578 
2579 	read_lock_bh(&idev->lock);
2580 	if (ifp->dead)
2581 		goto out;
2582 	spin_lock_bh(&ifp->lock);
2583 
2584 	if (dev->flags&(IFF_NOARP|IFF_LOOPBACK) ||
2585 	    !(ifp->flags&IFA_F_TENTATIVE) ||
2586 	    ifp->flags & IFA_F_NODAD) {
2587 		ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC);
2588 		spin_unlock_bh(&ifp->lock);
2589 		read_unlock_bh(&idev->lock);
2590 
2591 		addrconf_dad_completed(ifp);
2592 		return;
2593 	}
2594 
2595 	if (!(idev->if_flags & IF_READY)) {
2596 		spin_unlock_bh(&ifp->lock);
2597 		read_unlock_bh(&idev->lock);
2598 		/*
2599 		 * If the defice is not ready:
2600 		 * - keep it tentative if it is a permanent address.
2601 		 * - otherwise, kill it.
2602 		 */
2603 		in6_ifa_hold(ifp);
2604 		addrconf_dad_stop(ifp);
2605 		return;
2606 	}
2607 
2608 	/*
2609 	 * Optimistic nodes can start receiving
2610 	 * Frames right away
2611 	 */
2612 	if(ifp->flags & IFA_F_OPTIMISTIC)
2613 		ip6_ins_rt(ifp->rt);
2614 
2615 	addrconf_dad_kick(ifp);
2616 	spin_unlock_bh(&ifp->lock);
2617 out:
2618 	read_unlock_bh(&idev->lock);
2619 }
2620 
2621 static void addrconf_dad_timer(unsigned long data)
2622 {
2623 	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *) data;
2624 	struct inet6_dev *idev = ifp->idev;
2625 	struct in6_addr unspec;
2626 	struct in6_addr mcaddr;
2627 
2628 	read_lock_bh(&idev->lock);
2629 	if (idev->dead) {
2630 		read_unlock_bh(&idev->lock);
2631 		goto out;
2632 	}
2633 	spin_lock_bh(&ifp->lock);
2634 	if (ifp->probes == 0) {
2635 		/*
2636 		 * DAD was successful
2637 		 */
2638 
2639 		ifp->flags &= ~(IFA_F_TENTATIVE|IFA_F_OPTIMISTIC);
2640 		spin_unlock_bh(&ifp->lock);
2641 		read_unlock_bh(&idev->lock);
2642 
2643 		addrconf_dad_completed(ifp);
2644 
2645 		goto out;
2646 	}
2647 
2648 	ifp->probes--;
2649 	addrconf_mod_timer(ifp, AC_DAD, ifp->idev->nd_parms->retrans_time);
2650 	spin_unlock_bh(&ifp->lock);
2651 	read_unlock_bh(&idev->lock);
2652 
2653 	/* send a neighbour solicitation for our addr */
2654 	memset(&unspec, 0, sizeof(unspec));
2655 	addrconf_addr_solict_mult(&ifp->addr, &mcaddr);
2656 	ndisc_send_ns(ifp->idev->dev, NULL, &ifp->addr, &mcaddr, &unspec);
2657 out:
2658 	in6_ifa_put(ifp);
2659 }
2660 
2661 static void addrconf_dad_completed(struct inet6_ifaddr *ifp)
2662 {
2663 	struct net_device *	dev = ifp->idev->dev;
2664 
2665 	/*
2666 	 *	Configure the address for reception. Now it is valid.
2667 	 */
2668 
2669 	ipv6_ifa_notify(RTM_NEWADDR, ifp);
2670 
2671 	/* If added prefix is link local and forwarding is off,
2672 	   start sending router solicitations.
2673 	 */
2674 
2675 	if (ifp->idev->cnf.forwarding == 0 &&
2676 	    ifp->idev->cnf.rtr_solicits > 0 &&
2677 	    (dev->flags&IFF_LOOPBACK) == 0 &&
2678 	    (ipv6_addr_type(&ifp->addr) & IPV6_ADDR_LINKLOCAL)) {
2679 		struct in6_addr all_routers;
2680 
2681 		ipv6_addr_all_routers(&all_routers);
2682 
2683 		/*
2684 		 *	If a host as already performed a random delay
2685 		 *	[...] as part of DAD [...] there is no need
2686 		 *	to delay again before sending the first RS
2687 		 */
2688 		ndisc_send_rs(ifp->idev->dev, &ifp->addr, &all_routers);
2689 
2690 		spin_lock_bh(&ifp->lock);
2691 		ifp->probes = 1;
2692 		ifp->idev->if_flags |= IF_RS_SENT;
2693 		addrconf_mod_timer(ifp, AC_RS, ifp->idev->cnf.rtr_solicit_interval);
2694 		spin_unlock_bh(&ifp->lock);
2695 	}
2696 }
2697 
2698 static void addrconf_dad_run(struct inet6_dev *idev) {
2699 	struct inet6_ifaddr *ifp;
2700 
2701 	read_lock_bh(&idev->lock);
2702 	for (ifp = idev->addr_list; ifp; ifp = ifp->if_next) {
2703 		spin_lock_bh(&ifp->lock);
2704 		if (!(ifp->flags & IFA_F_TENTATIVE)) {
2705 			spin_unlock_bh(&ifp->lock);
2706 			continue;
2707 		}
2708 		spin_unlock_bh(&ifp->lock);
2709 		addrconf_dad_kick(ifp);
2710 	}
2711 	read_unlock_bh(&idev->lock);
2712 }
2713 
2714 #ifdef CONFIG_PROC_FS
2715 struct if6_iter_state {
2716 	int bucket;
2717 };
2718 
2719 static struct inet6_ifaddr *if6_get_first(struct seq_file *seq)
2720 {
2721 	struct inet6_ifaddr *ifa = NULL;
2722 	struct if6_iter_state *state = seq->private;
2723 
2724 	for (state->bucket = 0; state->bucket < IN6_ADDR_HSIZE; ++state->bucket) {
2725 		ifa = inet6_addr_lst[state->bucket];
2726 		if (ifa)
2727 			break;
2728 	}
2729 	return ifa;
2730 }
2731 
2732 static struct inet6_ifaddr *if6_get_next(struct seq_file *seq, struct inet6_ifaddr *ifa)
2733 {
2734 	struct if6_iter_state *state = seq->private;
2735 
2736 	ifa = ifa->lst_next;
2737 try_again:
2738 	if (!ifa && ++state->bucket < IN6_ADDR_HSIZE) {
2739 		ifa = inet6_addr_lst[state->bucket];
2740 		goto try_again;
2741 	}
2742 	return ifa;
2743 }
2744 
2745 static struct inet6_ifaddr *if6_get_idx(struct seq_file *seq, loff_t pos)
2746 {
2747 	struct inet6_ifaddr *ifa = if6_get_first(seq);
2748 
2749 	if (ifa)
2750 		while(pos && (ifa = if6_get_next(seq, ifa)) != NULL)
2751 			--pos;
2752 	return pos ? NULL : ifa;
2753 }
2754 
2755 static void *if6_seq_start(struct seq_file *seq, loff_t *pos)
2756 {
2757 	read_lock_bh(&addrconf_hash_lock);
2758 	return if6_get_idx(seq, *pos);
2759 }
2760 
2761 static void *if6_seq_next(struct seq_file *seq, void *v, loff_t *pos)
2762 {
2763 	struct inet6_ifaddr *ifa;
2764 
2765 	ifa = if6_get_next(seq, v);
2766 	++*pos;
2767 	return ifa;
2768 }
2769 
2770 static void if6_seq_stop(struct seq_file *seq, void *v)
2771 {
2772 	read_unlock_bh(&addrconf_hash_lock);
2773 }
2774 
2775 static int if6_seq_show(struct seq_file *seq, void *v)
2776 {
2777 	struct inet6_ifaddr *ifp = (struct inet6_ifaddr *)v;
2778 	seq_printf(seq,
2779 		   NIP6_SEQFMT " %02x %02x %02x %02x %8s\n",
2780 		   NIP6(ifp->addr),
2781 		   ifp->idev->dev->ifindex,
2782 		   ifp->prefix_len,
2783 		   ifp->scope,
2784 		   ifp->flags,
2785 		   ifp->idev->dev->name);
2786 	return 0;
2787 }
2788 
2789 static const struct seq_operations if6_seq_ops = {
2790 	.start	= if6_seq_start,
2791 	.next	= if6_seq_next,
2792 	.show	= if6_seq_show,
2793 	.stop	= if6_seq_stop,
2794 };
2795 
2796 static int if6_seq_open(struct inode *inode, struct file *file)
2797 {
2798 	struct seq_file *seq;
2799 	int rc = -ENOMEM;
2800 	struct if6_iter_state *s = kzalloc(sizeof(*s), GFP_KERNEL);
2801 
2802 	if (!s)
2803 		goto out;
2804 
2805 	rc = seq_open(file, &if6_seq_ops);
2806 	if (rc)
2807 		goto out_kfree;
2808 
2809 	seq = file->private_data;
2810 	seq->private = s;
2811 out:
2812 	return rc;
2813 out_kfree:
2814 	kfree(s);
2815 	goto out;
2816 }
2817 
2818 static const struct file_operations if6_fops = {
2819 	.owner		= THIS_MODULE,
2820 	.open		= if6_seq_open,
2821 	.read		= seq_read,
2822 	.llseek		= seq_lseek,
2823 	.release	= seq_release_private,
2824 };
2825 
2826 int __init if6_proc_init(void)
2827 {
2828 	if (!proc_net_fops_create("if_inet6", S_IRUGO, &if6_fops))
2829 		return -ENOMEM;
2830 	return 0;
2831 }
2832 
2833 void if6_proc_exit(void)
2834 {
2835 	proc_net_remove("if_inet6");
2836 }
2837 #endif	/* CONFIG_PROC_FS */
2838 
2839 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
2840 /* Check if address is a home address configured on any interface. */
2841 int ipv6_chk_home_addr(struct in6_addr *addr)
2842 {
2843 	int ret = 0;
2844 	struct inet6_ifaddr * ifp;
2845 	u8 hash = ipv6_addr_hash(addr);
2846 	read_lock_bh(&addrconf_hash_lock);
2847 	for (ifp = inet6_addr_lst[hash]; ifp; ifp = ifp->lst_next) {
2848 		if (ipv6_addr_cmp(&ifp->addr, addr) == 0 &&
2849 		    (ifp->flags & IFA_F_HOMEADDRESS)) {
2850 			ret = 1;
2851 			break;
2852 		}
2853 	}
2854 	read_unlock_bh(&addrconf_hash_lock);
2855 	return ret;
2856 }
2857 #endif
2858 
2859 /*
2860  *	Periodic address status verification
2861  */
2862 
2863 static void addrconf_verify(unsigned long foo)
2864 {
2865 	struct inet6_ifaddr *ifp;
2866 	unsigned long now, next;
2867 	int i;
2868 
2869 	spin_lock_bh(&addrconf_verify_lock);
2870 	now = jiffies;
2871 	next = now + ADDR_CHECK_FREQUENCY;
2872 
2873 	del_timer(&addr_chk_timer);
2874 
2875 	for (i=0; i < IN6_ADDR_HSIZE; i++) {
2876 
2877 restart:
2878 		read_lock(&addrconf_hash_lock);
2879 		for (ifp=inet6_addr_lst[i]; ifp; ifp=ifp->lst_next) {
2880 			unsigned long age;
2881 #ifdef CONFIG_IPV6_PRIVACY
2882 			unsigned long regen_advance;
2883 #endif
2884 
2885 			if (ifp->flags & IFA_F_PERMANENT)
2886 				continue;
2887 
2888 			spin_lock(&ifp->lock);
2889 			age = (now - ifp->tstamp) / HZ;
2890 
2891 #ifdef CONFIG_IPV6_PRIVACY
2892 			regen_advance = ifp->idev->cnf.regen_max_retry *
2893 					ifp->idev->cnf.dad_transmits *
2894 					ifp->idev->nd_parms->retrans_time / HZ;
2895 #endif
2896 
2897 			if (ifp->valid_lft != INFINITY_LIFE_TIME &&
2898 			    age >= ifp->valid_lft) {
2899 				spin_unlock(&ifp->lock);
2900 				in6_ifa_hold(ifp);
2901 				read_unlock(&addrconf_hash_lock);
2902 				ipv6_del_addr(ifp);
2903 				goto restart;
2904 			} else if (ifp->prefered_lft == INFINITY_LIFE_TIME) {
2905 				spin_unlock(&ifp->lock);
2906 				continue;
2907 			} else if (age >= ifp->prefered_lft) {
2908 				/* jiffies - ifp->tsamp > age >= ifp->prefered_lft */
2909 				int deprecate = 0;
2910 
2911 				if (!(ifp->flags&IFA_F_DEPRECATED)) {
2912 					deprecate = 1;
2913 					ifp->flags |= IFA_F_DEPRECATED;
2914 				}
2915 
2916 				if (time_before(ifp->tstamp + ifp->valid_lft * HZ, next))
2917 					next = ifp->tstamp + ifp->valid_lft * HZ;
2918 
2919 				spin_unlock(&ifp->lock);
2920 
2921 				if (deprecate) {
2922 					in6_ifa_hold(ifp);
2923 					read_unlock(&addrconf_hash_lock);
2924 
2925 					ipv6_ifa_notify(0, ifp);
2926 					in6_ifa_put(ifp);
2927 					goto restart;
2928 				}
2929 #ifdef CONFIG_IPV6_PRIVACY
2930 			} else if ((ifp->flags&IFA_F_TEMPORARY) &&
2931 				   !(ifp->flags&IFA_F_TENTATIVE)) {
2932 				if (age >= ifp->prefered_lft - regen_advance) {
2933 					struct inet6_ifaddr *ifpub = ifp->ifpub;
2934 					if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
2935 						next = ifp->tstamp + ifp->prefered_lft * HZ;
2936 					if (!ifp->regen_count && ifpub) {
2937 						ifp->regen_count++;
2938 						in6_ifa_hold(ifp);
2939 						in6_ifa_hold(ifpub);
2940 						spin_unlock(&ifp->lock);
2941 						read_unlock(&addrconf_hash_lock);
2942 						spin_lock(&ifpub->lock);
2943 						ifpub->regen_count = 0;
2944 						spin_unlock(&ifpub->lock);
2945 						ipv6_create_tempaddr(ifpub, ifp);
2946 						in6_ifa_put(ifpub);
2947 						in6_ifa_put(ifp);
2948 						goto restart;
2949 					}
2950 				} else if (time_before(ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ, next))
2951 					next = ifp->tstamp + ifp->prefered_lft * HZ - regen_advance * HZ;
2952 				spin_unlock(&ifp->lock);
2953 #endif
2954 			} else {
2955 				/* ifp->prefered_lft <= ifp->valid_lft */
2956 				if (time_before(ifp->tstamp + ifp->prefered_lft * HZ, next))
2957 					next = ifp->tstamp + ifp->prefered_lft * HZ;
2958 				spin_unlock(&ifp->lock);
2959 			}
2960 		}
2961 		read_unlock(&addrconf_hash_lock);
2962 	}
2963 
2964 	addr_chk_timer.expires = time_before(next, jiffies + HZ) ? jiffies + HZ : next;
2965 	add_timer(&addr_chk_timer);
2966 	spin_unlock_bh(&addrconf_verify_lock);
2967 }
2968 
2969 static struct in6_addr *extract_addr(struct nlattr *addr, struct nlattr *local)
2970 {
2971 	struct in6_addr *pfx = NULL;
2972 
2973 	if (addr)
2974 		pfx = nla_data(addr);
2975 
2976 	if (local) {
2977 		if (pfx && nla_memcmp(local, pfx, sizeof(*pfx)))
2978 			pfx = NULL;
2979 		else
2980 			pfx = nla_data(local);
2981 	}
2982 
2983 	return pfx;
2984 }
2985 
2986 static const struct nla_policy ifa_ipv6_policy[IFA_MAX+1] = {
2987 	[IFA_ADDRESS]		= { .len = sizeof(struct in6_addr) },
2988 	[IFA_LOCAL]		= { .len = sizeof(struct in6_addr) },
2989 	[IFA_CACHEINFO]		= { .len = sizeof(struct ifa_cacheinfo) },
2990 };
2991 
2992 static int
2993 inet6_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
2994 {
2995 	struct ifaddrmsg *ifm;
2996 	struct nlattr *tb[IFA_MAX+1];
2997 	struct in6_addr *pfx;
2998 	int err;
2999 
3000 	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3001 	if (err < 0)
3002 		return err;
3003 
3004 	ifm = nlmsg_data(nlh);
3005 	pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3006 	if (pfx == NULL)
3007 		return -EINVAL;
3008 
3009 	return inet6_addr_del(ifm->ifa_index, pfx, ifm->ifa_prefixlen);
3010 }
3011 
3012 static int inet6_addr_modify(struct inet6_ifaddr *ifp, u8 ifa_flags,
3013 			     u32 prefered_lft, u32 valid_lft)
3014 {
3015 	u32 flags = RTF_EXPIRES;
3016 
3017 	if (!valid_lft || (prefered_lft > valid_lft))
3018 		return -EINVAL;
3019 
3020 	if (valid_lft == INFINITY_LIFE_TIME) {
3021 		ifa_flags |= IFA_F_PERMANENT;
3022 		flags = 0;
3023 	} else if (valid_lft >= 0x7FFFFFFF/HZ)
3024 		valid_lft = 0x7FFFFFFF/HZ;
3025 
3026 	if (prefered_lft == 0)
3027 		ifa_flags |= IFA_F_DEPRECATED;
3028 	else if ((prefered_lft >= 0x7FFFFFFF/HZ) &&
3029 		 (prefered_lft != INFINITY_LIFE_TIME))
3030 		prefered_lft = 0x7FFFFFFF/HZ;
3031 
3032 	spin_lock_bh(&ifp->lock);
3033 	ifp->flags = (ifp->flags & ~(IFA_F_DEPRECATED | IFA_F_PERMANENT | IFA_F_NODAD | IFA_F_HOMEADDRESS)) | ifa_flags;
3034 	ifp->tstamp = jiffies;
3035 	ifp->valid_lft = valid_lft;
3036 	ifp->prefered_lft = prefered_lft;
3037 
3038 	spin_unlock_bh(&ifp->lock);
3039 	if (!(ifp->flags&IFA_F_TENTATIVE))
3040 		ipv6_ifa_notify(0, ifp);
3041 
3042 	addrconf_prefix_route(&ifp->addr, ifp->prefix_len, ifp->idev->dev,
3043 			      jiffies_to_clock_t(valid_lft * HZ), flags);
3044 	addrconf_verify(0);
3045 
3046 	return 0;
3047 }
3048 
3049 static int
3050 inet6_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh, void *arg)
3051 {
3052 	struct ifaddrmsg *ifm;
3053 	struct nlattr *tb[IFA_MAX+1];
3054 	struct in6_addr *pfx;
3055 	struct inet6_ifaddr *ifa;
3056 	struct net_device *dev;
3057 	u32 valid_lft = INFINITY_LIFE_TIME, preferred_lft = INFINITY_LIFE_TIME;
3058 	u8 ifa_flags;
3059 	int err;
3060 
3061 	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3062 	if (err < 0)
3063 		return err;
3064 
3065 	ifm = nlmsg_data(nlh);
3066 	pfx = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3067 	if (pfx == NULL)
3068 		return -EINVAL;
3069 
3070 	if (tb[IFA_CACHEINFO]) {
3071 		struct ifa_cacheinfo *ci;
3072 
3073 		ci = nla_data(tb[IFA_CACHEINFO]);
3074 		valid_lft = ci->ifa_valid;
3075 		preferred_lft = ci->ifa_prefered;
3076 	} else {
3077 		preferred_lft = INFINITY_LIFE_TIME;
3078 		valid_lft = INFINITY_LIFE_TIME;
3079 	}
3080 
3081 	dev =  __dev_get_by_index(ifm->ifa_index);
3082 	if (dev == NULL)
3083 		return -ENODEV;
3084 
3085 	/* We ignore other flags so far. */
3086 	ifa_flags = ifm->ifa_flags & (IFA_F_NODAD | IFA_F_HOMEADDRESS);
3087 
3088 	ifa = ipv6_get_ifaddr(pfx, dev, 1);
3089 	if (ifa == NULL) {
3090 		/*
3091 		 * It would be best to check for !NLM_F_CREATE here but
3092 		 * userspace alreay relies on not having to provide this.
3093 		 */
3094 		return inet6_addr_add(ifm->ifa_index, pfx, ifm->ifa_prefixlen,
3095 				      ifa_flags, preferred_lft, valid_lft);
3096 	}
3097 
3098 	if (nlh->nlmsg_flags & NLM_F_EXCL ||
3099 	    !(nlh->nlmsg_flags & NLM_F_REPLACE))
3100 		err = -EEXIST;
3101 	else
3102 		err = inet6_addr_modify(ifa, ifa_flags, preferred_lft, valid_lft);
3103 
3104 	in6_ifa_put(ifa);
3105 
3106 	return err;
3107 }
3108 
3109 static void put_ifaddrmsg(struct nlmsghdr *nlh, u8 prefixlen, u8 flags,
3110 			  u8 scope, int ifindex)
3111 {
3112 	struct ifaddrmsg *ifm;
3113 
3114 	ifm = nlmsg_data(nlh);
3115 	ifm->ifa_family = AF_INET6;
3116 	ifm->ifa_prefixlen = prefixlen;
3117 	ifm->ifa_flags = flags;
3118 	ifm->ifa_scope = scope;
3119 	ifm->ifa_index = ifindex;
3120 }
3121 
3122 static int put_cacheinfo(struct sk_buff *skb, unsigned long cstamp,
3123 			 unsigned long tstamp, u32 preferred, u32 valid)
3124 {
3125 	struct ifa_cacheinfo ci;
3126 
3127 	ci.cstamp = (u32)(TIME_DELTA(cstamp, INITIAL_JIFFIES) / HZ * 100
3128 			+ TIME_DELTA(cstamp, INITIAL_JIFFIES) % HZ * 100 / HZ);
3129 	ci.tstamp = (u32)(TIME_DELTA(tstamp, INITIAL_JIFFIES) / HZ * 100
3130 			+ TIME_DELTA(tstamp, INITIAL_JIFFIES) % HZ * 100 / HZ);
3131 	ci.ifa_prefered = preferred;
3132 	ci.ifa_valid = valid;
3133 
3134 	return nla_put(skb, IFA_CACHEINFO, sizeof(ci), &ci);
3135 }
3136 
3137 static inline int rt_scope(int ifa_scope)
3138 {
3139 	if (ifa_scope & IFA_HOST)
3140 		return RT_SCOPE_HOST;
3141 	else if (ifa_scope & IFA_LINK)
3142 		return RT_SCOPE_LINK;
3143 	else if (ifa_scope & IFA_SITE)
3144 		return RT_SCOPE_SITE;
3145 	else
3146 		return RT_SCOPE_UNIVERSE;
3147 }
3148 
3149 static inline int inet6_ifaddr_msgsize(void)
3150 {
3151 	return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
3152 	       + nla_total_size(16) /* IFA_ADDRESS */
3153 	       + nla_total_size(sizeof(struct ifa_cacheinfo));
3154 }
3155 
3156 static int inet6_fill_ifaddr(struct sk_buff *skb, struct inet6_ifaddr *ifa,
3157 			     u32 pid, u32 seq, int event, unsigned int flags)
3158 {
3159 	struct nlmsghdr  *nlh;
3160 	u32 preferred, valid;
3161 
3162 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3163 	if (nlh == NULL)
3164 		return -EMSGSIZE;
3165 
3166 	put_ifaddrmsg(nlh, ifa->prefix_len, ifa->flags, rt_scope(ifa->scope),
3167 		      ifa->idev->dev->ifindex);
3168 
3169 	if (!(ifa->flags&IFA_F_PERMANENT)) {
3170 		preferred = ifa->prefered_lft;
3171 		valid = ifa->valid_lft;
3172 		if (preferred != INFINITY_LIFE_TIME) {
3173 			long tval = (jiffies - ifa->tstamp)/HZ;
3174 			preferred -= tval;
3175 			if (valid != INFINITY_LIFE_TIME)
3176 				valid -= tval;
3177 		}
3178 	} else {
3179 		preferred = INFINITY_LIFE_TIME;
3180 		valid = INFINITY_LIFE_TIME;
3181 	}
3182 
3183 	if (nla_put(skb, IFA_ADDRESS, 16, &ifa->addr) < 0 ||
3184 	    put_cacheinfo(skb, ifa->cstamp, ifa->tstamp, preferred, valid) < 0) {
3185 		nlmsg_cancel(skb, nlh);
3186 		return -EMSGSIZE;
3187 	}
3188 
3189 	return nlmsg_end(skb, nlh);
3190 }
3191 
3192 static int inet6_fill_ifmcaddr(struct sk_buff *skb, struct ifmcaddr6 *ifmca,
3193 				u32 pid, u32 seq, int event, u16 flags)
3194 {
3195 	struct nlmsghdr  *nlh;
3196 	u8 scope = RT_SCOPE_UNIVERSE;
3197 	int ifindex = ifmca->idev->dev->ifindex;
3198 
3199 	if (ipv6_addr_scope(&ifmca->mca_addr) & IFA_SITE)
3200 		scope = RT_SCOPE_SITE;
3201 
3202 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3203 	if (nlh == NULL)
3204 		return -EMSGSIZE;
3205 
3206 	put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
3207 	if (nla_put(skb, IFA_MULTICAST, 16, &ifmca->mca_addr) < 0 ||
3208 	    put_cacheinfo(skb, ifmca->mca_cstamp, ifmca->mca_tstamp,
3209 			  INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
3210 		nlmsg_cancel(skb, nlh);
3211 		return -EMSGSIZE;
3212 	}
3213 
3214 	return nlmsg_end(skb, nlh);
3215 }
3216 
3217 static int inet6_fill_ifacaddr(struct sk_buff *skb, struct ifacaddr6 *ifaca,
3218 				u32 pid, u32 seq, int event, unsigned int flags)
3219 {
3220 	struct nlmsghdr  *nlh;
3221 	u8 scope = RT_SCOPE_UNIVERSE;
3222 	int ifindex = ifaca->aca_idev->dev->ifindex;
3223 
3224 	if (ipv6_addr_scope(&ifaca->aca_addr) & IFA_SITE)
3225 		scope = RT_SCOPE_SITE;
3226 
3227 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(struct ifaddrmsg), flags);
3228 	if (nlh == NULL)
3229 		return -EMSGSIZE;
3230 
3231 	put_ifaddrmsg(nlh, 128, IFA_F_PERMANENT, scope, ifindex);
3232 	if (nla_put(skb, IFA_ANYCAST, 16, &ifaca->aca_addr) < 0 ||
3233 	    put_cacheinfo(skb, ifaca->aca_cstamp, ifaca->aca_tstamp,
3234 			  INFINITY_LIFE_TIME, INFINITY_LIFE_TIME) < 0) {
3235 		nlmsg_cancel(skb, nlh);
3236 		return -EMSGSIZE;
3237 	}
3238 
3239 	return nlmsg_end(skb, nlh);
3240 }
3241 
3242 enum addr_type_t
3243 {
3244 	UNICAST_ADDR,
3245 	MULTICAST_ADDR,
3246 	ANYCAST_ADDR,
3247 };
3248 
3249 static int inet6_dump_addr(struct sk_buff *skb, struct netlink_callback *cb,
3250 			   enum addr_type_t type)
3251 {
3252 	int idx, ip_idx;
3253 	int s_idx, s_ip_idx;
3254 	int err = 1;
3255 	struct net_device *dev;
3256 	struct inet6_dev *idev = NULL;
3257 	struct inet6_ifaddr *ifa;
3258 	struct ifmcaddr6 *ifmca;
3259 	struct ifacaddr6 *ifaca;
3260 
3261 	s_idx = cb->args[0];
3262 	s_ip_idx = ip_idx = cb->args[1];
3263 
3264 	idx = 0;
3265 	for_each_netdev(dev) {
3266 		if (idx < s_idx)
3267 			goto cont;
3268 		if (idx > s_idx)
3269 			s_ip_idx = 0;
3270 		ip_idx = 0;
3271 		if ((idev = in6_dev_get(dev)) == NULL)
3272 			goto cont;
3273 		read_lock_bh(&idev->lock);
3274 		switch (type) {
3275 		case UNICAST_ADDR:
3276 			/* unicast address incl. temp addr */
3277 			for (ifa = idev->addr_list; ifa;
3278 			     ifa = ifa->if_next, ip_idx++) {
3279 				if (ip_idx < s_ip_idx)
3280 					continue;
3281 				if ((err = inet6_fill_ifaddr(skb, ifa,
3282 				    NETLINK_CB(cb->skb).pid,
3283 				    cb->nlh->nlmsg_seq, RTM_NEWADDR,
3284 				    NLM_F_MULTI)) <= 0)
3285 					goto done;
3286 			}
3287 			break;
3288 		case MULTICAST_ADDR:
3289 			/* multicast address */
3290 			for (ifmca = idev->mc_list; ifmca;
3291 			     ifmca = ifmca->next, ip_idx++) {
3292 				if (ip_idx < s_ip_idx)
3293 					continue;
3294 				if ((err = inet6_fill_ifmcaddr(skb, ifmca,
3295 				    NETLINK_CB(cb->skb).pid,
3296 				    cb->nlh->nlmsg_seq, RTM_GETMULTICAST,
3297 				    NLM_F_MULTI)) <= 0)
3298 					goto done;
3299 			}
3300 			break;
3301 		case ANYCAST_ADDR:
3302 			/* anycast address */
3303 			for (ifaca = idev->ac_list; ifaca;
3304 			     ifaca = ifaca->aca_next, ip_idx++) {
3305 				if (ip_idx < s_ip_idx)
3306 					continue;
3307 				if ((err = inet6_fill_ifacaddr(skb, ifaca,
3308 				    NETLINK_CB(cb->skb).pid,
3309 				    cb->nlh->nlmsg_seq, RTM_GETANYCAST,
3310 				    NLM_F_MULTI)) <= 0)
3311 					goto done;
3312 			}
3313 			break;
3314 		default:
3315 			break;
3316 		}
3317 		read_unlock_bh(&idev->lock);
3318 		in6_dev_put(idev);
3319 cont:
3320 		idx++;
3321 	}
3322 done:
3323 	if (err <= 0) {
3324 		read_unlock_bh(&idev->lock);
3325 		in6_dev_put(idev);
3326 	}
3327 	cb->args[0] = idx;
3328 	cb->args[1] = ip_idx;
3329 	return skb->len;
3330 }
3331 
3332 static int inet6_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
3333 {
3334 	enum addr_type_t type = UNICAST_ADDR;
3335 	return inet6_dump_addr(skb, cb, type);
3336 }
3337 
3338 static int inet6_dump_ifmcaddr(struct sk_buff *skb, struct netlink_callback *cb)
3339 {
3340 	enum addr_type_t type = MULTICAST_ADDR;
3341 	return inet6_dump_addr(skb, cb, type);
3342 }
3343 
3344 
3345 static int inet6_dump_ifacaddr(struct sk_buff *skb, struct netlink_callback *cb)
3346 {
3347 	enum addr_type_t type = ANYCAST_ADDR;
3348 	return inet6_dump_addr(skb, cb, type);
3349 }
3350 
3351 static int inet6_rtm_getaddr(struct sk_buff *in_skb, struct nlmsghdr* nlh,
3352 			     void *arg)
3353 {
3354 	struct ifaddrmsg *ifm;
3355 	struct nlattr *tb[IFA_MAX+1];
3356 	struct in6_addr *addr = NULL;
3357 	struct net_device *dev = NULL;
3358 	struct inet6_ifaddr *ifa;
3359 	struct sk_buff *skb;
3360 	int err;
3361 
3362 	err = nlmsg_parse(nlh, sizeof(*ifm), tb, IFA_MAX, ifa_ipv6_policy);
3363 	if (err < 0)
3364 		goto errout;
3365 
3366 	addr = extract_addr(tb[IFA_ADDRESS], tb[IFA_LOCAL]);
3367 	if (addr == NULL) {
3368 		err = -EINVAL;
3369 		goto errout;
3370 	}
3371 
3372 	ifm = nlmsg_data(nlh);
3373 	if (ifm->ifa_index)
3374 		dev = __dev_get_by_index(ifm->ifa_index);
3375 
3376 	if ((ifa = ipv6_get_ifaddr(addr, dev, 1)) == NULL) {
3377 		err = -EADDRNOTAVAIL;
3378 		goto errout;
3379 	}
3380 
3381 	if ((skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_KERNEL)) == NULL) {
3382 		err = -ENOBUFS;
3383 		goto errout_ifa;
3384 	}
3385 
3386 	err = inet6_fill_ifaddr(skb, ifa, NETLINK_CB(in_skb).pid,
3387 				nlh->nlmsg_seq, RTM_NEWADDR, 0);
3388 	if (err < 0) {
3389 		/* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
3390 		WARN_ON(err == -EMSGSIZE);
3391 		kfree_skb(skb);
3392 		goto errout_ifa;
3393 	}
3394 	err = rtnl_unicast(skb, NETLINK_CB(in_skb).pid);
3395 errout_ifa:
3396 	in6_ifa_put(ifa);
3397 errout:
3398 	return err;
3399 }
3400 
3401 static void inet6_ifa_notify(int event, struct inet6_ifaddr *ifa)
3402 {
3403 	struct sk_buff *skb;
3404 	int err = -ENOBUFS;
3405 
3406 	skb = nlmsg_new(inet6_ifaddr_msgsize(), GFP_ATOMIC);
3407 	if (skb == NULL)
3408 		goto errout;
3409 
3410 	err = inet6_fill_ifaddr(skb, ifa, 0, 0, event, 0);
3411 	if (err < 0) {
3412 		/* -EMSGSIZE implies BUG in inet6_ifaddr_msgsize() */
3413 		WARN_ON(err == -EMSGSIZE);
3414 		kfree_skb(skb);
3415 		goto errout;
3416 	}
3417 	err = rtnl_notify(skb, 0, RTNLGRP_IPV6_IFADDR, NULL, GFP_ATOMIC);
3418 errout:
3419 	if (err < 0)
3420 		rtnl_set_sk_err(RTNLGRP_IPV6_IFADDR, err);
3421 }
3422 
3423 static inline void ipv6_store_devconf(struct ipv6_devconf *cnf,
3424 				__s32 *array, int bytes)
3425 {
3426 	BUG_ON(bytes < (DEVCONF_MAX * 4));
3427 
3428 	memset(array, 0, bytes);
3429 	array[DEVCONF_FORWARDING] = cnf->forwarding;
3430 	array[DEVCONF_HOPLIMIT] = cnf->hop_limit;
3431 	array[DEVCONF_MTU6] = cnf->mtu6;
3432 	array[DEVCONF_ACCEPT_RA] = cnf->accept_ra;
3433 	array[DEVCONF_ACCEPT_REDIRECTS] = cnf->accept_redirects;
3434 	array[DEVCONF_AUTOCONF] = cnf->autoconf;
3435 	array[DEVCONF_DAD_TRANSMITS] = cnf->dad_transmits;
3436 	array[DEVCONF_RTR_SOLICITS] = cnf->rtr_solicits;
3437 	array[DEVCONF_RTR_SOLICIT_INTERVAL] = cnf->rtr_solicit_interval;
3438 	array[DEVCONF_RTR_SOLICIT_DELAY] = cnf->rtr_solicit_delay;
3439 	array[DEVCONF_FORCE_MLD_VERSION] = cnf->force_mld_version;
3440 #ifdef CONFIG_IPV6_PRIVACY
3441 	array[DEVCONF_USE_TEMPADDR] = cnf->use_tempaddr;
3442 	array[DEVCONF_TEMP_VALID_LFT] = cnf->temp_valid_lft;
3443 	array[DEVCONF_TEMP_PREFERED_LFT] = cnf->temp_prefered_lft;
3444 	array[DEVCONF_REGEN_MAX_RETRY] = cnf->regen_max_retry;
3445 	array[DEVCONF_MAX_DESYNC_FACTOR] = cnf->max_desync_factor;
3446 #endif
3447 	array[DEVCONF_MAX_ADDRESSES] = cnf->max_addresses;
3448 	array[DEVCONF_ACCEPT_RA_DEFRTR] = cnf->accept_ra_defrtr;
3449 	array[DEVCONF_ACCEPT_RA_PINFO] = cnf->accept_ra_pinfo;
3450 #ifdef CONFIG_IPV6_ROUTER_PREF
3451 	array[DEVCONF_ACCEPT_RA_RTR_PREF] = cnf->accept_ra_rtr_pref;
3452 	array[DEVCONF_RTR_PROBE_INTERVAL] = cnf->rtr_probe_interval;
3453 #ifdef CONFIG_IPV6_ROUTE_INFO
3454 	array[DEVCONF_ACCEPT_RA_RT_INFO_MAX_PLEN] = cnf->accept_ra_rt_info_max_plen;
3455 #endif
3456 #endif
3457 	array[DEVCONF_PROXY_NDP] = cnf->proxy_ndp;
3458 	array[DEVCONF_ACCEPT_SOURCE_ROUTE] = cnf->accept_source_route;
3459 #ifdef CONFIG_IPV6_OPTIMISTIC_DAD
3460 	array[DEVCONF_OPTIMISTIC_DAD] = cnf->optimistic_dad;
3461 #endif
3462 }
3463 
3464 static inline size_t inet6_if_nlmsg_size(void)
3465 {
3466 	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
3467 	       + nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
3468 	       + nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
3469 	       + nla_total_size(4) /* IFLA_MTU */
3470 	       + nla_total_size(4) /* IFLA_LINK */
3471 	       + nla_total_size( /* IFLA_PROTINFO */
3472 			nla_total_size(4) /* IFLA_INET6_FLAGS */
3473 			+ nla_total_size(sizeof(struct ifla_cacheinfo))
3474 			+ nla_total_size(DEVCONF_MAX * 4) /* IFLA_INET6_CONF */
3475 			+ nla_total_size(IPSTATS_MIB_MAX * 8) /* IFLA_INET6_STATS */
3476 			+ nla_total_size(ICMP6_MIB_MAX * 8) /* IFLA_INET6_ICMP6STATS */
3477 		 );
3478 }
3479 
3480 static inline void __snmp6_fill_stats(u64 *stats, void **mib, int items,
3481 				      int bytes)
3482 {
3483 	int i;
3484 	int pad = bytes - sizeof(u64) * items;
3485 	BUG_ON(pad < 0);
3486 
3487 	/* Use put_unaligned() because stats may not be aligned for u64. */
3488 	put_unaligned(items, &stats[0]);
3489 	for (i = 1; i < items; i++)
3490 		put_unaligned(snmp_fold_field(mib, i), &stats[i]);
3491 
3492 	memset(&stats[items], 0, pad);
3493 }
3494 
3495 static void snmp6_fill_stats(u64 *stats, struct inet6_dev *idev, int attrtype,
3496 			     int bytes)
3497 {
3498 	switch(attrtype) {
3499 	case IFLA_INET6_STATS:
3500 		__snmp6_fill_stats(stats, (void **)idev->stats.ipv6, IPSTATS_MIB_MAX, bytes);
3501 		break;
3502 	case IFLA_INET6_ICMP6STATS:
3503 		__snmp6_fill_stats(stats, (void **)idev->stats.icmpv6, ICMP6_MIB_MAX, bytes);
3504 		break;
3505 	}
3506 }
3507 
3508 static int inet6_fill_ifinfo(struct sk_buff *skb, struct inet6_dev *idev,
3509 			     u32 pid, u32 seq, int event, unsigned int flags)
3510 {
3511 	struct net_device *dev = idev->dev;
3512 	struct nlattr *nla;
3513 	struct ifinfomsg *hdr;
3514 	struct nlmsghdr *nlh;
3515 	void *protoinfo;
3516 	struct ifla_cacheinfo ci;
3517 
3518 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
3519 	if (nlh == NULL)
3520 		return -EMSGSIZE;
3521 
3522 	hdr = nlmsg_data(nlh);
3523 	hdr->ifi_family = AF_INET6;
3524 	hdr->__ifi_pad = 0;
3525 	hdr->ifi_type = dev->type;
3526 	hdr->ifi_index = dev->ifindex;
3527 	hdr->ifi_flags = dev_get_flags(dev);
3528 	hdr->ifi_change = 0;
3529 
3530 	NLA_PUT_STRING(skb, IFLA_IFNAME, dev->name);
3531 
3532 	if (dev->addr_len)
3533 		NLA_PUT(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr);
3534 
3535 	NLA_PUT_U32(skb, IFLA_MTU, dev->mtu);
3536 	if (dev->ifindex != dev->iflink)
3537 		NLA_PUT_U32(skb, IFLA_LINK, dev->iflink);
3538 
3539 	protoinfo = nla_nest_start(skb, IFLA_PROTINFO);
3540 	if (protoinfo == NULL)
3541 		goto nla_put_failure;
3542 
3543 	NLA_PUT_U32(skb, IFLA_INET6_FLAGS, idev->if_flags);
3544 
3545 	ci.max_reasm_len = IPV6_MAXPLEN;
3546 	ci.tstamp = (__u32)(TIME_DELTA(idev->tstamp, INITIAL_JIFFIES) / HZ * 100
3547 		    + TIME_DELTA(idev->tstamp, INITIAL_JIFFIES) % HZ * 100 / HZ);
3548 	ci.reachable_time = idev->nd_parms->reachable_time;
3549 	ci.retrans_time = idev->nd_parms->retrans_time;
3550 	NLA_PUT(skb, IFLA_INET6_CACHEINFO, sizeof(ci), &ci);
3551 
3552 	nla = nla_reserve(skb, IFLA_INET6_CONF, DEVCONF_MAX * sizeof(s32));
3553 	if (nla == NULL)
3554 		goto nla_put_failure;
3555 	ipv6_store_devconf(&idev->cnf, nla_data(nla), nla_len(nla));
3556 
3557 	/* XXX - MC not implemented */
3558 
3559 	nla = nla_reserve(skb, IFLA_INET6_STATS, IPSTATS_MIB_MAX * sizeof(u64));
3560 	if (nla == NULL)
3561 		goto nla_put_failure;
3562 	snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_STATS, nla_len(nla));
3563 
3564 	nla = nla_reserve(skb, IFLA_INET6_ICMP6STATS, ICMP6_MIB_MAX * sizeof(u64));
3565 	if (nla == NULL)
3566 		goto nla_put_failure;
3567 	snmp6_fill_stats(nla_data(nla), idev, IFLA_INET6_ICMP6STATS, nla_len(nla));
3568 
3569 	nla_nest_end(skb, protoinfo);
3570 	return nlmsg_end(skb, nlh);
3571 
3572 nla_put_failure:
3573 	nlmsg_cancel(skb, nlh);
3574 	return -EMSGSIZE;
3575 }
3576 
3577 static int inet6_dump_ifinfo(struct sk_buff *skb, struct netlink_callback *cb)
3578 {
3579 	int idx, err;
3580 	int s_idx = cb->args[0];
3581 	struct net_device *dev;
3582 	struct inet6_dev *idev;
3583 
3584 	read_lock(&dev_base_lock);
3585 	idx = 0;
3586 	for_each_netdev(dev) {
3587 		if (idx < s_idx)
3588 			goto cont;
3589 		if ((idev = in6_dev_get(dev)) == NULL)
3590 			goto cont;
3591 		err = inet6_fill_ifinfo(skb, idev, NETLINK_CB(cb->skb).pid,
3592 				cb->nlh->nlmsg_seq, RTM_NEWLINK, NLM_F_MULTI);
3593 		in6_dev_put(idev);
3594 		if (err <= 0)
3595 			break;
3596 cont:
3597 		idx++;
3598 	}
3599 	read_unlock(&dev_base_lock);
3600 	cb->args[0] = idx;
3601 
3602 	return skb->len;
3603 }
3604 
3605 void inet6_ifinfo_notify(int event, struct inet6_dev *idev)
3606 {
3607 	struct sk_buff *skb;
3608 	int err = -ENOBUFS;
3609 
3610 	skb = nlmsg_new(inet6_if_nlmsg_size(), GFP_ATOMIC);
3611 	if (skb == NULL)
3612 		goto errout;
3613 
3614 	err = inet6_fill_ifinfo(skb, idev, 0, 0, event, 0);
3615 	if (err < 0) {
3616 		/* -EMSGSIZE implies BUG in inet6_if_nlmsg_size() */
3617 		WARN_ON(err == -EMSGSIZE);
3618 		kfree_skb(skb);
3619 		goto errout;
3620 	}
3621 	err = rtnl_notify(skb, 0, RTNLGRP_IPV6_IFADDR, NULL, GFP_ATOMIC);
3622 errout:
3623 	if (err < 0)
3624 		rtnl_set_sk_err(RTNLGRP_IPV6_IFADDR, err);
3625 }
3626 
3627 static inline size_t inet6_prefix_nlmsg_size(void)
3628 {
3629 	return NLMSG_ALIGN(sizeof(struct prefixmsg))
3630 	       + nla_total_size(sizeof(struct in6_addr))
3631 	       + nla_total_size(sizeof(struct prefix_cacheinfo));
3632 }
3633 
3634 static int inet6_fill_prefix(struct sk_buff *skb, struct inet6_dev *idev,
3635 			     struct prefix_info *pinfo, u32 pid, u32 seq,
3636 			     int event, unsigned int flags)
3637 {
3638 	struct prefixmsg *pmsg;
3639 	struct nlmsghdr *nlh;
3640 	struct prefix_cacheinfo	ci;
3641 
3642 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*pmsg), flags);
3643 	if (nlh == NULL)
3644 		return -EMSGSIZE;
3645 
3646 	pmsg = nlmsg_data(nlh);
3647 	pmsg->prefix_family = AF_INET6;
3648 	pmsg->prefix_pad1 = 0;
3649 	pmsg->prefix_pad2 = 0;
3650 	pmsg->prefix_ifindex = idev->dev->ifindex;
3651 	pmsg->prefix_len = pinfo->prefix_len;
3652 	pmsg->prefix_type = pinfo->type;
3653 	pmsg->prefix_pad3 = 0;
3654 	pmsg->prefix_flags = 0;
3655 	if (pinfo->onlink)
3656 		pmsg->prefix_flags |= IF_PREFIX_ONLINK;
3657 	if (pinfo->autoconf)
3658 		pmsg->prefix_flags |= IF_PREFIX_AUTOCONF;
3659 
3660 	NLA_PUT(skb, PREFIX_ADDRESS, sizeof(pinfo->prefix), &pinfo->prefix);
3661 
3662 	ci.preferred_time = ntohl(pinfo->prefered);
3663 	ci.valid_time = ntohl(pinfo->valid);
3664 	NLA_PUT(skb, PREFIX_CACHEINFO, sizeof(ci), &ci);
3665 
3666 	return nlmsg_end(skb, nlh);
3667 
3668 nla_put_failure:
3669 	nlmsg_cancel(skb, nlh);
3670 	return -EMSGSIZE;
3671 }
3672 
3673 static void inet6_prefix_notify(int event, struct inet6_dev *idev,
3674 			 struct prefix_info *pinfo)
3675 {
3676 	struct sk_buff *skb;
3677 	int err = -ENOBUFS;
3678 
3679 	skb = nlmsg_new(inet6_prefix_nlmsg_size(), GFP_ATOMIC);
3680 	if (skb == NULL)
3681 		goto errout;
3682 
3683 	err = inet6_fill_prefix(skb, idev, pinfo, 0, 0, event, 0);
3684 	if (err < 0) {
3685 		/* -EMSGSIZE implies BUG in inet6_prefix_nlmsg_size() */
3686 		WARN_ON(err == -EMSGSIZE);
3687 		kfree_skb(skb);
3688 		goto errout;
3689 	}
3690 	err = rtnl_notify(skb, 0, RTNLGRP_IPV6_PREFIX, NULL, GFP_ATOMIC);
3691 errout:
3692 	if (err < 0)
3693 		rtnl_set_sk_err(RTNLGRP_IPV6_PREFIX, err);
3694 }
3695 
3696 static void __ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
3697 {
3698 	inet6_ifa_notify(event ? : RTM_NEWADDR, ifp);
3699 
3700 	switch (event) {
3701 	case RTM_NEWADDR:
3702 		/*
3703 		 * If the address was optimistic
3704 		 * we inserted the route at the start of
3705 		 * our DAD process, so we don't need
3706 		 * to do it again
3707 		 */
3708 		if (!(ifp->rt->rt6i_node))
3709 			ip6_ins_rt(ifp->rt);
3710 		if (ifp->idev->cnf.forwarding)
3711 			addrconf_join_anycast(ifp);
3712 		break;
3713 	case RTM_DELADDR:
3714 		if (ifp->idev->cnf.forwarding)
3715 			addrconf_leave_anycast(ifp);
3716 		addrconf_leave_solict(ifp->idev, &ifp->addr);
3717 		dst_hold(&ifp->rt->u.dst);
3718 		if (ip6_del_rt(ifp->rt))
3719 			dst_free(&ifp->rt->u.dst);
3720 		break;
3721 	}
3722 }
3723 
3724 static void ipv6_ifa_notify(int event, struct inet6_ifaddr *ifp)
3725 {
3726 	rcu_read_lock_bh();
3727 	if (likely(ifp->idev->dead == 0))
3728 		__ipv6_ifa_notify(event, ifp);
3729 	rcu_read_unlock_bh();
3730 }
3731 
3732 #ifdef CONFIG_SYSCTL
3733 
3734 static
3735 int addrconf_sysctl_forward(ctl_table *ctl, int write, struct file * filp,
3736 			   void __user *buffer, size_t *lenp, loff_t *ppos)
3737 {
3738 	int *valp = ctl->data;
3739 	int val = *valp;
3740 	int ret;
3741 
3742 	ret = proc_dointvec(ctl, write, filp, buffer, lenp, ppos);
3743 
3744 	if (write && valp != &ipv6_devconf_dflt.forwarding) {
3745 		if (valp != &ipv6_devconf.forwarding) {
3746 			if ((!*valp) ^ (!val)) {
3747 				struct inet6_dev *idev = (struct inet6_dev *)ctl->extra1;
3748 				if (idev == NULL)
3749 					return ret;
3750 				dev_forward_change(idev);
3751 			}
3752 		} else {
3753 			ipv6_devconf_dflt.forwarding = ipv6_devconf.forwarding;
3754 			addrconf_forward_change();
3755 		}
3756 		if (*valp)
3757 			rt6_purge_dflt_routers();
3758 	}
3759 
3760 	return ret;
3761 }
3762 
3763 static int addrconf_sysctl_forward_strategy(ctl_table *table,
3764 					    int __user *name, int nlen,
3765 					    void __user *oldval,
3766 					    size_t __user *oldlenp,
3767 					    void __user *newval, size_t newlen)
3768 {
3769 	int *valp = table->data;
3770 	int new;
3771 
3772 	if (!newval || !newlen)
3773 		return 0;
3774 	if (newlen != sizeof(int))
3775 		return -EINVAL;
3776 	if (get_user(new, (int __user *)newval))
3777 		return -EFAULT;
3778 	if (new == *valp)
3779 		return 0;
3780 	if (oldval && oldlenp) {
3781 		size_t len;
3782 		if (get_user(len, oldlenp))
3783 			return -EFAULT;
3784 		if (len) {
3785 			if (len > table->maxlen)
3786 				len = table->maxlen;
3787 			if (copy_to_user(oldval, valp, len))
3788 				return -EFAULT;
3789 			if (put_user(len, oldlenp))
3790 				return -EFAULT;
3791 		}
3792 	}
3793 
3794 	if (valp != &ipv6_devconf_dflt.forwarding) {
3795 		if (valp != &ipv6_devconf.forwarding) {
3796 			struct inet6_dev *idev = (struct inet6_dev *)table->extra1;
3797 			int changed;
3798 			if (unlikely(idev == NULL))
3799 				return -ENODEV;
3800 			changed = (!*valp) ^ (!new);
3801 			*valp = new;
3802 			if (changed)
3803 				dev_forward_change(idev);
3804 		} else {
3805 			*valp = new;
3806 			addrconf_forward_change();
3807 		}
3808 
3809 		if (*valp)
3810 			rt6_purge_dflt_routers();
3811 	} else
3812 		*valp = new;
3813 
3814 	return 1;
3815 }
3816 
3817 static struct addrconf_sysctl_table
3818 {
3819 	struct ctl_table_header *sysctl_header;
3820 	ctl_table addrconf_vars[__NET_IPV6_MAX];
3821 	ctl_table addrconf_dev[2];
3822 	ctl_table addrconf_conf_dir[2];
3823 	ctl_table addrconf_proto_dir[2];
3824 	ctl_table addrconf_root_dir[2];
3825 } addrconf_sysctl __read_mostly = {
3826 	.sysctl_header = NULL,
3827 	.addrconf_vars = {
3828 		{
3829 			.ctl_name	=	NET_IPV6_FORWARDING,
3830 			.procname	=	"forwarding",
3831 			.data		=	&ipv6_devconf.forwarding,
3832 			.maxlen		=	sizeof(int),
3833 			.mode		=	0644,
3834 			.proc_handler	=	&addrconf_sysctl_forward,
3835 			.strategy	=	&addrconf_sysctl_forward_strategy,
3836 		},
3837 		{
3838 			.ctl_name	=	NET_IPV6_HOP_LIMIT,
3839 			.procname	=	"hop_limit",
3840 			.data		=	&ipv6_devconf.hop_limit,
3841 			.maxlen		=	sizeof(int),
3842 			.mode		=	0644,
3843 			.proc_handler	=	proc_dointvec,
3844 		},
3845 		{
3846 			.ctl_name	=	NET_IPV6_MTU,
3847 			.procname	=	"mtu",
3848 			.data		=	&ipv6_devconf.mtu6,
3849 			.maxlen		=	sizeof(int),
3850 			.mode		=	0644,
3851 			.proc_handler	=	&proc_dointvec,
3852 		},
3853 		{
3854 			.ctl_name	=	NET_IPV6_ACCEPT_RA,
3855 			.procname	=	"accept_ra",
3856 			.data		=	&ipv6_devconf.accept_ra,
3857 			.maxlen		=	sizeof(int),
3858 			.mode		=	0644,
3859 			.proc_handler	=	&proc_dointvec,
3860 		},
3861 		{
3862 			.ctl_name	=	NET_IPV6_ACCEPT_REDIRECTS,
3863 			.procname	=	"accept_redirects",
3864 			.data		=	&ipv6_devconf.accept_redirects,
3865 			.maxlen		=	sizeof(int),
3866 			.mode		=	0644,
3867 			.proc_handler	=	&proc_dointvec,
3868 		},
3869 		{
3870 			.ctl_name	=	NET_IPV6_AUTOCONF,
3871 			.procname	=	"autoconf",
3872 			.data		=	&ipv6_devconf.autoconf,
3873 			.maxlen		=	sizeof(int),
3874 			.mode		=	0644,
3875 			.proc_handler	=	&proc_dointvec,
3876 		},
3877 		{
3878 			.ctl_name	=	NET_IPV6_DAD_TRANSMITS,
3879 			.procname	=	"dad_transmits",
3880 			.data		=	&ipv6_devconf.dad_transmits,
3881 			.maxlen		=	sizeof(int),
3882 			.mode		=	0644,
3883 			.proc_handler	=	&proc_dointvec,
3884 		},
3885 		{
3886 			.ctl_name	=	NET_IPV6_RTR_SOLICITS,
3887 			.procname	=	"router_solicitations",
3888 			.data		=	&ipv6_devconf.rtr_solicits,
3889 			.maxlen		=	sizeof(int),
3890 			.mode		=	0644,
3891 			.proc_handler	=	&proc_dointvec,
3892 		},
3893 		{
3894 			.ctl_name	=	NET_IPV6_RTR_SOLICIT_INTERVAL,
3895 			.procname	=	"router_solicitation_interval",
3896 			.data		=	&ipv6_devconf.rtr_solicit_interval,
3897 			.maxlen		=	sizeof(int),
3898 			.mode		=	0644,
3899 			.proc_handler	=	&proc_dointvec_jiffies,
3900 			.strategy	=	&sysctl_jiffies,
3901 		},
3902 		{
3903 			.ctl_name	=	NET_IPV6_RTR_SOLICIT_DELAY,
3904 			.procname	=	"router_solicitation_delay",
3905 			.data		=	&ipv6_devconf.rtr_solicit_delay,
3906 			.maxlen		=	sizeof(int),
3907 			.mode		=	0644,
3908 			.proc_handler	=	&proc_dointvec_jiffies,
3909 			.strategy	=	&sysctl_jiffies,
3910 		},
3911 		{
3912 			.ctl_name	=	NET_IPV6_FORCE_MLD_VERSION,
3913 			.procname	=	"force_mld_version",
3914 			.data		=	&ipv6_devconf.force_mld_version,
3915 			.maxlen		=	sizeof(int),
3916 			.mode		=	0644,
3917 			.proc_handler	=	&proc_dointvec,
3918 		},
3919 #ifdef CONFIG_IPV6_PRIVACY
3920 		{
3921 			.ctl_name	=	NET_IPV6_USE_TEMPADDR,
3922 			.procname	=	"use_tempaddr",
3923 			.data		=	&ipv6_devconf.use_tempaddr,
3924 			.maxlen		=	sizeof(int),
3925 			.mode		=	0644,
3926 			.proc_handler	=	&proc_dointvec,
3927 		},
3928 		{
3929 			.ctl_name	=	NET_IPV6_TEMP_VALID_LFT,
3930 			.procname	=	"temp_valid_lft",
3931 			.data		=	&ipv6_devconf.temp_valid_lft,
3932 			.maxlen		=	sizeof(int),
3933 			.mode		=	0644,
3934 			.proc_handler	=	&proc_dointvec,
3935 		},
3936 		{
3937 			.ctl_name	=	NET_IPV6_TEMP_PREFERED_LFT,
3938 			.procname	=	"temp_prefered_lft",
3939 			.data		=	&ipv6_devconf.temp_prefered_lft,
3940 			.maxlen		=	sizeof(int),
3941 			.mode		=	0644,
3942 			.proc_handler	=	&proc_dointvec,
3943 		},
3944 		{
3945 			.ctl_name	=	NET_IPV6_REGEN_MAX_RETRY,
3946 			.procname	=	"regen_max_retry",
3947 			.data		=	&ipv6_devconf.regen_max_retry,
3948 			.maxlen		=	sizeof(int),
3949 			.mode		=	0644,
3950 			.proc_handler	=	&proc_dointvec,
3951 		},
3952 		{
3953 			.ctl_name	=	NET_IPV6_MAX_DESYNC_FACTOR,
3954 			.procname	=	"max_desync_factor",
3955 			.data		=	&ipv6_devconf.max_desync_factor,
3956 			.maxlen		=	sizeof(int),
3957 			.mode		=	0644,
3958 			.proc_handler	=	&proc_dointvec,
3959 		},
3960 #endif
3961 		{
3962 			.ctl_name	=	NET_IPV6_MAX_ADDRESSES,
3963 			.procname	=	"max_addresses",
3964 			.data		=	&ipv6_devconf.max_addresses,
3965 			.maxlen		=	sizeof(int),
3966 			.mode		=	0644,
3967 			.proc_handler	=	&proc_dointvec,
3968 		},
3969 		{
3970 			.ctl_name	=	NET_IPV6_ACCEPT_RA_DEFRTR,
3971 			.procname	=	"accept_ra_defrtr",
3972 			.data		=	&ipv6_devconf.accept_ra_defrtr,
3973 			.maxlen		=	sizeof(int),
3974 			.mode		=	0644,
3975 			.proc_handler	=	&proc_dointvec,
3976 		},
3977 		{
3978 			.ctl_name	=	NET_IPV6_ACCEPT_RA_PINFO,
3979 			.procname	=	"accept_ra_pinfo",
3980 			.data		=	&ipv6_devconf.accept_ra_pinfo,
3981 			.maxlen		=	sizeof(int),
3982 			.mode		=	0644,
3983 			.proc_handler	=	&proc_dointvec,
3984 		},
3985 #ifdef CONFIG_IPV6_ROUTER_PREF
3986 		{
3987 			.ctl_name	=	NET_IPV6_ACCEPT_RA_RTR_PREF,
3988 			.procname	=	"accept_ra_rtr_pref",
3989 			.data		=	&ipv6_devconf.accept_ra_rtr_pref,
3990 			.maxlen		=	sizeof(int),
3991 			.mode		=	0644,
3992 			.proc_handler	=	&proc_dointvec,
3993 		},
3994 		{
3995 			.ctl_name	=	NET_IPV6_RTR_PROBE_INTERVAL,
3996 			.procname	=	"router_probe_interval",
3997 			.data		=	&ipv6_devconf.rtr_probe_interval,
3998 			.maxlen		=	sizeof(int),
3999 			.mode		=	0644,
4000 			.proc_handler	=	&proc_dointvec_jiffies,
4001 			.strategy	=	&sysctl_jiffies,
4002 		},
4003 #ifdef CONFIG_IPV6_ROUTE_INFO
4004 		{
4005 			.ctl_name	=	NET_IPV6_ACCEPT_RA_RT_INFO_MAX_PLEN,
4006 			.procname	=	"accept_ra_rt_info_max_plen",
4007 			.data		=	&ipv6_devconf.accept_ra_rt_info_max_plen,
4008 			.maxlen		=	sizeof(int),
4009 			.mode		=	0644,
4010 			.proc_handler	=	&proc_dointvec,
4011 		},
4012 #endif
4013 #endif
4014 		{
4015 			.ctl_name	=	NET_IPV6_PROXY_NDP,
4016 			.procname	=	"proxy_ndp",
4017 			.data		=	&ipv6_devconf.proxy_ndp,
4018 			.maxlen		=	sizeof(int),
4019 			.mode		=	0644,
4020 			.proc_handler	=	&proc_dointvec,
4021 		},
4022 		{
4023 			.ctl_name	=	NET_IPV6_ACCEPT_SOURCE_ROUTE,
4024 			.procname	=	"accept_source_route",
4025 			.data		=	&ipv6_devconf.accept_source_route,
4026 			.maxlen		=	sizeof(int),
4027 			.mode		=	0644,
4028 			.proc_handler	=	&proc_dointvec,
4029 		},
4030 #ifdef CONFIG_IPV6_OPTIMISTIC_DAD
4031 		{
4032 			.ctl_name	=	CTL_UNNUMBERED,
4033 			.procname       =       "optimistic_dad",
4034 			.data           =       &ipv6_devconf.optimistic_dad,
4035 			.maxlen         =       sizeof(int),
4036 			.mode           =       0644,
4037 			.proc_handler   =       &proc_dointvec,
4038 
4039 		},
4040 #endif
4041 		{
4042 			.ctl_name	=	0,	/* sentinel */
4043 		}
4044 	},
4045 	.addrconf_dev = {
4046 		{
4047 			.ctl_name	=	NET_PROTO_CONF_ALL,
4048 			.procname	=	"all",
4049 			.mode		=	0555,
4050 			.child		=	addrconf_sysctl.addrconf_vars,
4051 		},
4052 		{
4053 			.ctl_name	=	0,	/* sentinel */
4054 		}
4055 	},
4056 	.addrconf_conf_dir = {
4057 		{
4058 			.ctl_name	=	NET_IPV6_CONF,
4059 			.procname	=	"conf",
4060 			.mode		=	0555,
4061 			.child		=	addrconf_sysctl.addrconf_dev,
4062 		},
4063 		{
4064 			.ctl_name	=	0,	/* sentinel */
4065 		}
4066 	},
4067 	.addrconf_proto_dir = {
4068 		{
4069 			.ctl_name	=	NET_IPV6,
4070 			.procname	=	"ipv6",
4071 			.mode		=	0555,
4072 			.child		=	addrconf_sysctl.addrconf_conf_dir,
4073 		},
4074 		{
4075 			.ctl_name	=	0,	/* sentinel */
4076 		}
4077 	},
4078 	.addrconf_root_dir = {
4079 		{
4080 			.ctl_name	=	CTL_NET,
4081 			.procname	=	"net",
4082 			.mode		=	0555,
4083 			.child		=	addrconf_sysctl.addrconf_proto_dir,
4084 		},
4085 		{
4086 			.ctl_name	=	0,	/* sentinel */
4087 		}
4088 	},
4089 };
4090 
4091 static void addrconf_sysctl_register(struct inet6_dev *idev, struct ipv6_devconf *p)
4092 {
4093 	int i;
4094 	struct net_device *dev = idev ? idev->dev : NULL;
4095 	struct addrconf_sysctl_table *t;
4096 	char *dev_name = NULL;
4097 
4098 	t = kmemdup(&addrconf_sysctl, sizeof(*t), GFP_KERNEL);
4099 	if (t == NULL)
4100 		return;
4101 	for (i=0; t->addrconf_vars[i].data; i++) {
4102 		t->addrconf_vars[i].data += (char*)p - (char*)&ipv6_devconf;
4103 		t->addrconf_vars[i].extra1 = idev; /* embedded; no ref */
4104 	}
4105 	if (dev) {
4106 		dev_name = dev->name;
4107 		t->addrconf_dev[0].ctl_name = dev->ifindex;
4108 	} else {
4109 		dev_name = "default";
4110 		t->addrconf_dev[0].ctl_name = NET_PROTO_CONF_DEFAULT;
4111 	}
4112 
4113 	/*
4114 	 * Make a copy of dev_name, because '.procname' is regarded as const
4115 	 * by sysctl and we wouldn't want anyone to change it under our feet
4116 	 * (see SIOCSIFNAME).
4117 	 */
4118 	dev_name = kstrdup(dev_name, GFP_KERNEL);
4119 	if (!dev_name)
4120 	    goto free;
4121 
4122 	t->addrconf_dev[0].procname = dev_name;
4123 
4124 	t->addrconf_dev[0].child = t->addrconf_vars;
4125 	t->addrconf_conf_dir[0].child = t->addrconf_dev;
4126 	t->addrconf_proto_dir[0].child = t->addrconf_conf_dir;
4127 	t->addrconf_root_dir[0].child = t->addrconf_proto_dir;
4128 
4129 	t->sysctl_header = register_sysctl_table(t->addrconf_root_dir);
4130 	if (t->sysctl_header == NULL)
4131 		goto free_procname;
4132 	else
4133 		p->sysctl = t;
4134 	return;
4135 
4136 	/* error path */
4137  free_procname:
4138 	kfree(dev_name);
4139  free:
4140 	kfree(t);
4141 
4142 	return;
4143 }
4144 
4145 static void addrconf_sysctl_unregister(struct ipv6_devconf *p)
4146 {
4147 	if (p->sysctl) {
4148 		struct addrconf_sysctl_table *t = p->sysctl;
4149 		p->sysctl = NULL;
4150 		unregister_sysctl_table(t->sysctl_header);
4151 		kfree(t->addrconf_dev[0].procname);
4152 		kfree(t);
4153 	}
4154 }
4155 
4156 
4157 #endif
4158 
4159 /*
4160  *      Device notifier
4161  */
4162 
4163 int register_inet6addr_notifier(struct notifier_block *nb)
4164 {
4165 	return atomic_notifier_chain_register(&inet6addr_chain, nb);
4166 }
4167 
4168 EXPORT_SYMBOL(register_inet6addr_notifier);
4169 
4170 int unregister_inet6addr_notifier(struct notifier_block *nb)
4171 {
4172 	return atomic_notifier_chain_unregister(&inet6addr_chain,nb);
4173 }
4174 
4175 EXPORT_SYMBOL(unregister_inet6addr_notifier);
4176 
4177 /*
4178  *	Init / cleanup code
4179  */
4180 
4181 int __init addrconf_init(void)
4182 {
4183 	int err = 0;
4184 
4185 	/* The addrconf netdev notifier requires that loopback_dev
4186 	 * has it's ipv6 private information allocated and setup
4187 	 * before it can bring up and give link-local addresses
4188 	 * to other devices which are up.
4189 	 *
4190 	 * Unfortunately, loopback_dev is not necessarily the first
4191 	 * entry in the global dev_base list of net devices.  In fact,
4192 	 * it is likely to be the very last entry on that list.
4193 	 * So this causes the notifier registry below to try and
4194 	 * give link-local addresses to all devices besides loopback_dev
4195 	 * first, then loopback_dev, which cases all the non-loopback_dev
4196 	 * devices to fail to get a link-local address.
4197 	 *
4198 	 * So, as a temporary fix, allocate the ipv6 structure for
4199 	 * loopback_dev first by hand.
4200 	 * Longer term, all of the dependencies ipv6 has upon the loopback
4201 	 * device and it being up should be removed.
4202 	 */
4203 	rtnl_lock();
4204 	if (!ipv6_add_dev(&loopback_dev))
4205 		err = -ENOMEM;
4206 	rtnl_unlock();
4207 	if (err)
4208 		return err;
4209 
4210 	ip6_null_entry.rt6i_idev = in6_dev_get(&loopback_dev);
4211 #ifdef CONFIG_IPV6_MULTIPLE_TABLES
4212 	ip6_prohibit_entry.rt6i_idev = in6_dev_get(&loopback_dev);
4213 	ip6_blk_hole_entry.rt6i_idev = in6_dev_get(&loopback_dev);
4214 #endif
4215 
4216 	register_netdevice_notifier(&ipv6_dev_notf);
4217 
4218 	addrconf_verify(0);
4219 
4220 	err = __rtnl_register(PF_INET6, RTM_GETLINK, NULL, inet6_dump_ifinfo);
4221 	if (err < 0)
4222 		goto errout;
4223 
4224 	/* Only the first call to __rtnl_register can fail */
4225 	__rtnl_register(PF_INET6, RTM_NEWADDR, inet6_rtm_newaddr, NULL);
4226 	__rtnl_register(PF_INET6, RTM_DELADDR, inet6_rtm_deladdr, NULL);
4227 	__rtnl_register(PF_INET6, RTM_GETADDR, inet6_rtm_getaddr, inet6_dump_ifaddr);
4228 	__rtnl_register(PF_INET6, RTM_GETMULTICAST, NULL, inet6_dump_ifmcaddr);
4229 	__rtnl_register(PF_INET6, RTM_GETANYCAST, NULL, inet6_dump_ifacaddr);
4230 
4231 #ifdef CONFIG_SYSCTL
4232 	addrconf_sysctl.sysctl_header =
4233 		register_sysctl_table(addrconf_sysctl.addrconf_root_dir);
4234 	addrconf_sysctl_register(NULL, &ipv6_devconf_dflt);
4235 #endif
4236 
4237 	return 0;
4238 errout:
4239 	unregister_netdevice_notifier(&ipv6_dev_notf);
4240 
4241 	return err;
4242 }
4243 
4244 void __exit addrconf_cleanup(void)
4245 {
4246 	struct net_device *dev;
4247 	struct inet6_ifaddr *ifa;
4248 	int i;
4249 
4250 	unregister_netdevice_notifier(&ipv6_dev_notf);
4251 
4252 #ifdef CONFIG_SYSCTL
4253 	addrconf_sysctl_unregister(&ipv6_devconf_dflt);
4254 	addrconf_sysctl_unregister(&ipv6_devconf);
4255 #endif
4256 
4257 	rtnl_lock();
4258 
4259 	/*
4260 	 *	clean dev list.
4261 	 */
4262 
4263 	for_each_netdev(dev) {
4264 		if (__in6_dev_get(dev) == NULL)
4265 			continue;
4266 		addrconf_ifdown(dev, 1);
4267 	}
4268 	addrconf_ifdown(&loopback_dev, 2);
4269 
4270 	/*
4271 	 *	Check hash table.
4272 	 */
4273 
4274 	write_lock_bh(&addrconf_hash_lock);
4275 	for (i=0; i < IN6_ADDR_HSIZE; i++) {
4276 		for (ifa=inet6_addr_lst[i]; ifa; ) {
4277 			struct inet6_ifaddr *bifa;
4278 
4279 			bifa = ifa;
4280 			ifa = ifa->lst_next;
4281 			printk(KERN_DEBUG "bug: IPv6 address leakage detected: ifa=%p\n", bifa);
4282 			/* Do not free it; something is wrong.
4283 			   Now we can investigate it with debugger.
4284 			 */
4285 		}
4286 	}
4287 	write_unlock_bh(&addrconf_hash_lock);
4288 
4289 	del_timer(&addr_chk_timer);
4290 
4291 	rtnl_unlock();
4292 
4293 #ifdef CONFIG_PROC_FS
4294 	proc_net_remove("if_inet6");
4295 #endif
4296 }
4297