1 /* SPDX-License-Identifier: GPL-2.0 */ 2 #ifndef _ADDRCONF_H 3 #define _ADDRCONF_H 4 5 #define MAX_RTR_SOLICITATIONS -1 /* unlimited */ 6 #define RTR_SOLICITATION_INTERVAL (4*HZ) 7 #define RTR_SOLICITATION_MAX_INTERVAL (3600*HZ) /* 1 hour */ 8 9 #define MIN_VALID_LIFETIME (2*3600) /* 2 hours */ 10 11 #define TEMP_VALID_LIFETIME (7*86400) 12 #define TEMP_PREFERRED_LIFETIME (86400) 13 #define REGEN_MAX_RETRY (3) 14 #define MAX_DESYNC_FACTOR (600) 15 16 #define ADDR_CHECK_FREQUENCY (120*HZ) 17 18 #define IPV6_MAX_ADDRESSES 16 19 20 #define ADDRCONF_TIMER_FUZZ_MINUS (HZ > 50 ? HZ / 50 : 1) 21 #define ADDRCONF_TIMER_FUZZ (HZ / 4) 22 #define ADDRCONF_TIMER_FUZZ_MAX (HZ) 23 24 #define ADDRCONF_NOTIFY_PRIORITY 0 25 26 #include <linux/in.h> 27 #include <linux/in6.h> 28 29 struct prefix_info { 30 __u8 type; 31 __u8 length; 32 __u8 prefix_len; 33 34 #if defined(__BIG_ENDIAN_BITFIELD) 35 __u8 onlink : 1, 36 autoconf : 1, 37 reserved : 6; 38 #elif defined(__LITTLE_ENDIAN_BITFIELD) 39 __u8 reserved : 6, 40 autoconf : 1, 41 onlink : 1; 42 #else 43 #error "Please fix <asm/byteorder.h>" 44 #endif 45 __be32 valid; 46 __be32 prefered; 47 __be32 reserved2; 48 49 struct in6_addr prefix; 50 }; 51 52 #include <linux/netdevice.h> 53 #include <net/if_inet6.h> 54 #include <net/ipv6.h> 55 56 struct in6_validator_info { 57 struct in6_addr i6vi_addr; 58 struct inet6_dev *i6vi_dev; 59 struct netlink_ext_ack *extack; 60 }; 61 62 struct ifa6_config { 63 const struct in6_addr *pfx; 64 unsigned int plen; 65 66 const struct in6_addr *peer_pfx; 67 68 u32 ifa_flags; 69 u32 preferred_lft; 70 u32 valid_lft; 71 u16 scope; 72 }; 73 74 int addrconf_init(void); 75 void addrconf_cleanup(void); 76 77 int addrconf_add_ifaddr(struct net *net, void __user *arg); 78 int addrconf_del_ifaddr(struct net *net, void __user *arg); 79 int addrconf_set_dstaddr(struct net *net, void __user *arg); 80 81 int ipv6_chk_addr(struct net *net, const struct in6_addr *addr, 82 const struct net_device *dev, int strict); 83 int ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr, 84 const struct net_device *dev, bool skip_dev_check, 85 int strict, u32 banned_flags); 86 87 #if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE) 88 int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr); 89 #endif 90 91 bool ipv6_chk_custom_prefix(const struct in6_addr *addr, 92 const unsigned int prefix_len, 93 struct net_device *dev); 94 95 int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev); 96 97 struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net, 98 const struct in6_addr *addr, 99 struct net_device *dev, int strict); 100 101 int ipv6_dev_get_saddr(struct net *net, const struct net_device *dev, 102 const struct in6_addr *daddr, unsigned int srcprefs, 103 struct in6_addr *saddr); 104 int __ipv6_get_lladdr(struct inet6_dev *idev, struct in6_addr *addr, 105 u32 banned_flags); 106 int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr, 107 u32 banned_flags); 108 bool inet_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2, 109 bool match_wildcard); 110 void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr); 111 void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr); 112 113 void addrconf_add_linklocal(struct inet6_dev *idev, 114 const struct in6_addr *addr, u32 flags); 115 116 int addrconf_prefix_rcv_add_addr(struct net *net, struct net_device *dev, 117 const struct prefix_info *pinfo, 118 struct inet6_dev *in6_dev, 119 const struct in6_addr *addr, int addr_type, 120 u32 addr_flags, bool sllao, bool tokenized, 121 __u32 valid_lft, u32 prefered_lft); 122 123 static inline void addrconf_addr_eui48_base(u8 *eui, const char *const addr) 124 { 125 memcpy(eui, addr, 3); 126 eui[3] = 0xFF; 127 eui[4] = 0xFE; 128 memcpy(eui + 5, addr + 3, 3); 129 } 130 131 static inline void addrconf_addr_eui48(u8 *eui, const char *const addr) 132 { 133 addrconf_addr_eui48_base(eui, addr); 134 eui[0] ^= 2; 135 } 136 137 static inline int addrconf_ifid_eui48(u8 *eui, struct net_device *dev) 138 { 139 if (dev->addr_len != ETH_ALEN) 140 return -1; 141 142 /* 143 * The zSeries OSA network cards can be shared among various 144 * OS instances, but the OSA cards have only one MAC address. 145 * This leads to duplicate address conflicts in conjunction 146 * with IPv6 if more than one instance uses the same card. 147 * 148 * The driver for these cards can deliver a unique 16-bit 149 * identifier for each instance sharing the same card. It is 150 * placed instead of 0xFFFE in the interface identifier. The 151 * "u" bit of the interface identifier is not inverted in this 152 * case. Hence the resulting interface identifier has local 153 * scope according to RFC2373. 154 */ 155 156 addrconf_addr_eui48_base(eui, dev->dev_addr); 157 158 if (dev->dev_id) { 159 eui[3] = (dev->dev_id >> 8) & 0xFF; 160 eui[4] = dev->dev_id & 0xFF; 161 } else { 162 eui[0] ^= 2; 163 } 164 165 return 0; 166 } 167 168 static inline unsigned long addrconf_timeout_fixup(u32 timeout, 169 unsigned int unit) 170 { 171 if (timeout == 0xffffffff) 172 return ~0UL; 173 174 /* 175 * Avoid arithmetic overflow. 176 * Assuming unit is constant and non-zero, this "if" statement 177 * will go away on 64bit archs. 178 */ 179 if (0xfffffffe > LONG_MAX / unit && timeout > LONG_MAX / unit) 180 return LONG_MAX / unit; 181 182 return timeout; 183 } 184 185 static inline int addrconf_finite_timeout(unsigned long timeout) 186 { 187 return ~timeout; 188 } 189 190 /* 191 * IPv6 Address Label subsystem (addrlabel.c) 192 */ 193 int ipv6_addr_label_init(void); 194 void ipv6_addr_label_cleanup(void); 195 int ipv6_addr_label_rtnl_register(void); 196 u32 ipv6_addr_label(struct net *net, const struct in6_addr *addr, 197 int type, int ifindex); 198 199 /* 200 * multicast prototypes (mcast.c) 201 */ 202 int ipv6_sock_mc_join(struct sock *sk, int ifindex, 203 const struct in6_addr *addr); 204 int ipv6_sock_mc_drop(struct sock *sk, int ifindex, 205 const struct in6_addr *addr); 206 void __ipv6_sock_mc_close(struct sock *sk); 207 void ipv6_sock_mc_close(struct sock *sk); 208 bool inet6_mc_check(struct sock *sk, const struct in6_addr *mc_addr, 209 const struct in6_addr *src_addr); 210 211 int ipv6_dev_mc_inc(struct net_device *dev, const struct in6_addr *addr); 212 int __ipv6_dev_mc_dec(struct inet6_dev *idev, const struct in6_addr *addr); 213 int ipv6_dev_mc_dec(struct net_device *dev, const struct in6_addr *addr); 214 void ipv6_mc_up(struct inet6_dev *idev); 215 void ipv6_mc_down(struct inet6_dev *idev); 216 void ipv6_mc_unmap(struct inet6_dev *idev); 217 void ipv6_mc_remap(struct inet6_dev *idev); 218 void ipv6_mc_init_dev(struct inet6_dev *idev); 219 void ipv6_mc_destroy_dev(struct inet6_dev *idev); 220 int ipv6_mc_check_mld(struct sk_buff *skb, struct sk_buff **skb_trimmed); 221 void addrconf_dad_failure(struct sk_buff *skb, struct inet6_ifaddr *ifp); 222 223 bool ipv6_chk_mcast_addr(struct net_device *dev, const struct in6_addr *group, 224 const struct in6_addr *src_addr); 225 226 void ipv6_mc_dad_complete(struct inet6_dev *idev); 227 228 /* A stub used by vxlan module. This is ugly, ideally these 229 * symbols should be built into the core kernel. 230 */ 231 struct ipv6_stub { 232 int (*ipv6_sock_mc_join)(struct sock *sk, int ifindex, 233 const struct in6_addr *addr); 234 int (*ipv6_sock_mc_drop)(struct sock *sk, int ifindex, 235 const struct in6_addr *addr); 236 int (*ipv6_dst_lookup)(struct net *net, struct sock *sk, 237 struct dst_entry **dst, struct flowi6 *fl6); 238 239 struct fib6_table *(*fib6_get_table)(struct net *net, u32 id); 240 struct fib6_info *(*fib6_lookup)(struct net *net, int oif, 241 struct flowi6 *fl6, int flags); 242 struct fib6_info *(*fib6_table_lookup)(struct net *net, 243 struct fib6_table *table, 244 int oif, struct flowi6 *fl6, 245 int flags); 246 struct fib6_info *(*fib6_multipath_select)(const struct net *net, 247 struct fib6_info *f6i, 248 struct flowi6 *fl6, int oif, 249 const struct sk_buff *skb, 250 int strict); 251 u32 (*ip6_mtu_from_fib6)(struct fib6_info *f6i, struct in6_addr *daddr, 252 struct in6_addr *saddr); 253 254 void (*udpv6_encap_enable)(void); 255 void (*ndisc_send_na)(struct net_device *dev, const struct in6_addr *daddr, 256 const struct in6_addr *solicited_addr, 257 bool router, bool solicited, bool override, bool inc_opt); 258 struct neigh_table *nd_tbl; 259 }; 260 extern const struct ipv6_stub *ipv6_stub __read_mostly; 261 262 /* A stub used by bpf helpers. Similarly ugly as ipv6_stub */ 263 struct ipv6_bpf_stub { 264 int (*inet6_bind)(struct sock *sk, struct sockaddr *uaddr, int addr_len, 265 bool force_bind_address_no_port, bool with_lock); 266 }; 267 extern const struct ipv6_bpf_stub *ipv6_bpf_stub __read_mostly; 268 269 /* 270 * identify MLD packets for MLD filter exceptions 271 */ 272 static inline bool ipv6_is_mld(struct sk_buff *skb, int nexthdr, int offset) 273 { 274 struct icmp6hdr *hdr; 275 276 if (nexthdr != IPPROTO_ICMPV6 || 277 !pskb_network_may_pull(skb, offset + sizeof(struct icmp6hdr))) 278 return false; 279 280 hdr = (struct icmp6hdr *)(skb_network_header(skb) + offset); 281 282 switch (hdr->icmp6_type) { 283 case ICMPV6_MGM_QUERY: 284 case ICMPV6_MGM_REPORT: 285 case ICMPV6_MGM_REDUCTION: 286 case ICMPV6_MLD2_REPORT: 287 return true; 288 default: 289 break; 290 } 291 return false; 292 } 293 294 void addrconf_prefix_rcv(struct net_device *dev, 295 u8 *opt, int len, bool sllao); 296 297 /* 298 * anycast prototypes (anycast.c) 299 */ 300 int ipv6_sock_ac_join(struct sock *sk, int ifindex, 301 const struct in6_addr *addr); 302 int ipv6_sock_ac_drop(struct sock *sk, int ifindex, 303 const struct in6_addr *addr); 304 void ipv6_sock_ac_close(struct sock *sk); 305 306 int __ipv6_dev_ac_inc(struct inet6_dev *idev, const struct in6_addr *addr); 307 int __ipv6_dev_ac_dec(struct inet6_dev *idev, const struct in6_addr *addr); 308 void ipv6_ac_destroy_dev(struct inet6_dev *idev); 309 bool ipv6_chk_acast_addr(struct net *net, struct net_device *dev, 310 const struct in6_addr *addr); 311 bool ipv6_chk_acast_addr_src(struct net *net, struct net_device *dev, 312 const struct in6_addr *addr); 313 314 /* Device notifier */ 315 int register_inet6addr_notifier(struct notifier_block *nb); 316 int unregister_inet6addr_notifier(struct notifier_block *nb); 317 int inet6addr_notifier_call_chain(unsigned long val, void *v); 318 319 int register_inet6addr_validator_notifier(struct notifier_block *nb); 320 int unregister_inet6addr_validator_notifier(struct notifier_block *nb); 321 int inet6addr_validator_notifier_call_chain(unsigned long val, void *v); 322 323 void inet6_netconf_notify_devconf(struct net *net, int event, int type, 324 int ifindex, struct ipv6_devconf *devconf); 325 326 /** 327 * __in6_dev_get - get inet6_dev pointer from netdevice 328 * @dev: network device 329 * 330 * Caller must hold rcu_read_lock or RTNL, because this function 331 * does not take a reference on the inet6_dev. 332 */ 333 static inline struct inet6_dev *__in6_dev_get(const struct net_device *dev) 334 { 335 return rcu_dereference_rtnl(dev->ip6_ptr); 336 } 337 338 /** 339 * __in6_dev_get_safely - get inet6_dev pointer from netdevice 340 * @dev: network device 341 * 342 * This is a safer version of __in6_dev_get 343 */ 344 static inline struct inet6_dev *__in6_dev_get_safely(const struct net_device *dev) 345 { 346 if (likely(dev)) 347 return rcu_dereference_rtnl(dev->ip6_ptr); 348 else 349 return NULL; 350 } 351 352 /** 353 * in6_dev_get - get inet6_dev pointer from netdevice 354 * @dev: network device 355 * 356 * This version can be used in any context, and takes a reference 357 * on the inet6_dev. Callers must use in6_dev_put() later to 358 * release this reference. 359 */ 360 static inline struct inet6_dev *in6_dev_get(const struct net_device *dev) 361 { 362 struct inet6_dev *idev; 363 364 rcu_read_lock(); 365 idev = rcu_dereference(dev->ip6_ptr); 366 if (idev) 367 refcount_inc(&idev->refcnt); 368 rcu_read_unlock(); 369 return idev; 370 } 371 372 static inline struct neigh_parms *__in6_dev_nd_parms_get_rcu(const struct net_device *dev) 373 { 374 struct inet6_dev *idev = __in6_dev_get(dev); 375 376 return idev ? idev->nd_parms : NULL; 377 } 378 379 void in6_dev_finish_destroy(struct inet6_dev *idev); 380 381 static inline void in6_dev_put(struct inet6_dev *idev) 382 { 383 if (refcount_dec_and_test(&idev->refcnt)) 384 in6_dev_finish_destroy(idev); 385 } 386 387 static inline void in6_dev_put_clear(struct inet6_dev **pidev) 388 { 389 struct inet6_dev *idev = *pidev; 390 391 if (idev) { 392 in6_dev_put(idev); 393 *pidev = NULL; 394 } 395 } 396 397 static inline void __in6_dev_put(struct inet6_dev *idev) 398 { 399 refcount_dec(&idev->refcnt); 400 } 401 402 static inline void in6_dev_hold(struct inet6_dev *idev) 403 { 404 refcount_inc(&idev->refcnt); 405 } 406 407 void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp); 408 409 static inline void in6_ifa_put(struct inet6_ifaddr *ifp) 410 { 411 if (refcount_dec_and_test(&ifp->refcnt)) 412 inet6_ifa_finish_destroy(ifp); 413 } 414 415 static inline void __in6_ifa_put(struct inet6_ifaddr *ifp) 416 { 417 refcount_dec(&ifp->refcnt); 418 } 419 420 static inline void in6_ifa_hold(struct inet6_ifaddr *ifp) 421 { 422 refcount_inc(&ifp->refcnt); 423 } 424 425 426 /* 427 * compute link-local solicited-node multicast address 428 */ 429 430 static inline void addrconf_addr_solict_mult(const struct in6_addr *addr, 431 struct in6_addr *solicited) 432 { 433 ipv6_addr_set(solicited, 434 htonl(0xFF020000), 0, 435 htonl(0x1), 436 htonl(0xFF000000) | addr->s6_addr32[3]); 437 } 438 439 static inline bool ipv6_addr_is_ll_all_nodes(const struct in6_addr *addr) 440 { 441 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 442 __be64 *p = (__be64 *)addr; 443 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(1))) == 0UL; 444 #else 445 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 446 addr->s6_addr32[1] | addr->s6_addr32[2] | 447 (addr->s6_addr32[3] ^ htonl(0x00000001))) == 0; 448 #endif 449 } 450 451 static inline bool ipv6_addr_is_ll_all_routers(const struct in6_addr *addr) 452 { 453 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 454 __be64 *p = (__be64 *)addr; 455 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(2))) == 0UL; 456 #else 457 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 458 addr->s6_addr32[1] | addr->s6_addr32[2] | 459 (addr->s6_addr32[3] ^ htonl(0x00000002))) == 0; 460 #endif 461 } 462 463 static inline bool ipv6_addr_is_isatap(const struct in6_addr *addr) 464 { 465 return (addr->s6_addr32[2] | htonl(0x02000000)) == htonl(0x02005EFE); 466 } 467 468 static inline bool ipv6_addr_is_solict_mult(const struct in6_addr *addr) 469 { 470 #if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 471 __be64 *p = (__be64 *)addr; 472 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | 473 ((p[1] ^ cpu_to_be64(0x00000001ff000000UL)) & 474 cpu_to_be64(0xffffffffff000000UL))) == 0UL; 475 #else 476 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 477 addr->s6_addr32[1] | 478 (addr->s6_addr32[2] ^ htonl(0x00000001)) | 479 (addr->s6_addr[12] ^ 0xff)) == 0; 480 #endif 481 } 482 483 #ifdef CONFIG_PROC_FS 484 int if6_proc_init(void); 485 void if6_proc_exit(void); 486 #endif 487 488 #endif 489