1 /* 2 * INET 802.1Q VLAN 3 * Ethernet-type device handling. 4 * 5 * Authors: Ben Greear <greearb@candelatech.com> 6 * Please send support related email to: netdev@vger.kernel.org 7 * VLAN Home Page: http://www.candelatech.com/~greear/vlan.html 8 * 9 * Fixes: 10 * Fix for packet capture - Nick Eggleston <nick@dccinc.com>; 11 * Add HW acceleration hooks - David S. Miller <davem@redhat.com>; 12 * Correct all the locking - David S. Miller <davem@redhat.com>; 13 * Use hash table for VLAN groups - David S. Miller <davem@redhat.com> 14 * 15 * This program is free software; you can redistribute it and/or 16 * modify it under the terms of the GNU General Public License 17 * as published by the Free Software Foundation; either version 18 * 2 of the License, or (at your option) any later version. 19 */ 20 21 #include <linux/capability.h> 22 #include <linux/module.h> 23 #include <linux/netdevice.h> 24 #include <linux/skbuff.h> 25 #include <linux/slab.h> 26 #include <linux/init.h> 27 #include <linux/rculist.h> 28 #include <net/p8022.h> 29 #include <net/arp.h> 30 #include <linux/rtnetlink.h> 31 #include <linux/notifier.h> 32 #include <net/rtnetlink.h> 33 #include <net/net_namespace.h> 34 #include <net/netns/generic.h> 35 #include <asm/uaccess.h> 36 37 #include <linux/if_vlan.h> 38 #include "vlan.h" 39 #include "vlanproc.h" 40 41 #define DRV_VERSION "1.8" 42 43 /* Global VLAN variables */ 44 45 int vlan_net_id __read_mostly; 46 47 const char vlan_fullname[] = "802.1Q VLAN Support"; 48 const char vlan_version[] = DRV_VERSION; 49 50 /* End of global variables definitions. */ 51 52 static void vlan_group_free(struct vlan_group *grp) 53 { 54 int i; 55 56 for (i = 0; i < VLAN_GROUP_ARRAY_SPLIT_PARTS; i++) 57 kfree(grp->vlan_devices_arrays[i]); 58 kfree(grp); 59 } 60 61 static struct vlan_group *vlan_group_alloc(struct net_device *real_dev) 62 { 63 struct vlan_group *grp; 64 65 grp = kzalloc(sizeof(struct vlan_group), GFP_KERNEL); 66 if (!grp) 67 return NULL; 68 69 grp->real_dev = real_dev; 70 return grp; 71 } 72 73 static int vlan_group_prealloc_vid(struct vlan_group *vg, u16 vlan_id) 74 { 75 struct net_device **array; 76 unsigned int size; 77 78 ASSERT_RTNL(); 79 80 array = vg->vlan_devices_arrays[vlan_id / VLAN_GROUP_ARRAY_PART_LEN]; 81 if (array != NULL) 82 return 0; 83 84 size = sizeof(struct net_device *) * VLAN_GROUP_ARRAY_PART_LEN; 85 array = kzalloc(size, GFP_KERNEL); 86 if (array == NULL) 87 return -ENOBUFS; 88 89 vg->vlan_devices_arrays[vlan_id / VLAN_GROUP_ARRAY_PART_LEN] = array; 90 return 0; 91 } 92 93 static void vlan_rcu_free(struct rcu_head *rcu) 94 { 95 vlan_group_free(container_of(rcu, struct vlan_group, rcu)); 96 } 97 98 void unregister_vlan_dev(struct net_device *dev, struct list_head *head) 99 { 100 struct vlan_dev_info *vlan = vlan_dev_info(dev); 101 struct net_device *real_dev = vlan->real_dev; 102 const struct net_device_ops *ops = real_dev->netdev_ops; 103 struct vlan_group *grp; 104 u16 vlan_id = vlan->vlan_id; 105 106 ASSERT_RTNL(); 107 108 grp = rtnl_dereference(real_dev->vlgrp); 109 BUG_ON(!grp); 110 111 /* Take it out of our own structures, but be sure to interlock with 112 * HW accelerating devices or SW vlan input packet processing if 113 * VLAN is not 0 (leave it there for 802.1p). 114 */ 115 if (vlan_id && (real_dev->features & NETIF_F_HW_VLAN_FILTER)) 116 ops->ndo_vlan_rx_kill_vid(real_dev, vlan_id); 117 118 grp->nr_vlans--; 119 120 if (vlan->flags & VLAN_FLAG_GVRP) 121 vlan_gvrp_request_leave(dev); 122 123 vlan_group_set_device(grp, vlan_id, NULL); 124 /* Because unregister_netdevice_queue() makes sure at least one rcu 125 * grace period is respected before device freeing, 126 * we dont need to call synchronize_net() here. 127 */ 128 unregister_netdevice_queue(dev, head); 129 130 /* If the group is now empty, kill off the group. */ 131 if (grp->nr_vlans == 0) { 132 vlan_gvrp_uninit_applicant(real_dev); 133 134 rcu_assign_pointer(real_dev->vlgrp, NULL); 135 if (ops->ndo_vlan_rx_register) 136 ops->ndo_vlan_rx_register(real_dev, NULL); 137 138 /* Free the group, after all cpu's are done. */ 139 call_rcu(&grp->rcu, vlan_rcu_free); 140 } 141 142 /* Get rid of the vlan's reference to real_dev */ 143 dev_put(real_dev); 144 } 145 146 int vlan_check_real_dev(struct net_device *real_dev, u16 vlan_id) 147 { 148 const char *name = real_dev->name; 149 const struct net_device_ops *ops = real_dev->netdev_ops; 150 151 if (real_dev->features & NETIF_F_VLAN_CHALLENGED) { 152 pr_info("8021q: VLANs not supported on %s\n", name); 153 return -EOPNOTSUPP; 154 } 155 156 if ((real_dev->features & NETIF_F_HW_VLAN_FILTER) && 157 (!ops->ndo_vlan_rx_add_vid || !ops->ndo_vlan_rx_kill_vid)) { 158 pr_info("8021q: Device %s has buggy VLAN hw accel\n", name); 159 return -EOPNOTSUPP; 160 } 161 162 if (vlan_find_dev(real_dev, vlan_id) != NULL) 163 return -EEXIST; 164 165 return 0; 166 } 167 168 int register_vlan_dev(struct net_device *dev) 169 { 170 struct vlan_dev_info *vlan = vlan_dev_info(dev); 171 struct net_device *real_dev = vlan->real_dev; 172 const struct net_device_ops *ops = real_dev->netdev_ops; 173 u16 vlan_id = vlan->vlan_id; 174 struct vlan_group *grp, *ngrp = NULL; 175 int err; 176 177 grp = rtnl_dereference(real_dev->vlgrp); 178 if (!grp) { 179 ngrp = grp = vlan_group_alloc(real_dev); 180 if (!grp) 181 return -ENOBUFS; 182 err = vlan_gvrp_init_applicant(real_dev); 183 if (err < 0) 184 goto out_free_group; 185 } 186 187 err = vlan_group_prealloc_vid(grp, vlan_id); 188 if (err < 0) 189 goto out_uninit_applicant; 190 191 err = register_netdevice(dev); 192 if (err < 0) 193 goto out_uninit_applicant; 194 195 /* Account for reference in struct vlan_dev_info */ 196 dev_hold(real_dev); 197 198 netif_stacked_transfer_operstate(real_dev, dev); 199 linkwatch_fire_event(dev); /* _MUST_ call rfc2863_policy() */ 200 201 /* So, got the sucker initialized, now lets place 202 * it into our local structure. 203 */ 204 vlan_group_set_device(grp, vlan_id, dev); 205 grp->nr_vlans++; 206 207 if (ngrp) { 208 if (ops->ndo_vlan_rx_register) 209 ops->ndo_vlan_rx_register(real_dev, ngrp); 210 rcu_assign_pointer(real_dev->vlgrp, ngrp); 211 } 212 if (real_dev->features & NETIF_F_HW_VLAN_FILTER) 213 ops->ndo_vlan_rx_add_vid(real_dev, vlan_id); 214 215 return 0; 216 217 out_uninit_applicant: 218 if (ngrp) 219 vlan_gvrp_uninit_applicant(real_dev); 220 out_free_group: 221 if (ngrp) { 222 /* Free the group, after all cpu's are done. */ 223 call_rcu(&ngrp->rcu, vlan_rcu_free); 224 } 225 return err; 226 } 227 228 /* Attach a VLAN device to a mac address (ie Ethernet Card). 229 * Returns 0 if the device was created or a negative error code otherwise. 230 */ 231 static int register_vlan_device(struct net_device *real_dev, u16 vlan_id) 232 { 233 struct net_device *new_dev; 234 struct net *net = dev_net(real_dev); 235 struct vlan_net *vn = net_generic(net, vlan_net_id); 236 char name[IFNAMSIZ]; 237 int err; 238 239 if (vlan_id >= VLAN_VID_MASK) 240 return -ERANGE; 241 242 err = vlan_check_real_dev(real_dev, vlan_id); 243 if (err < 0) 244 return err; 245 246 /* Gotta set up the fields for the device. */ 247 switch (vn->name_type) { 248 case VLAN_NAME_TYPE_RAW_PLUS_VID: 249 /* name will look like: eth1.0005 */ 250 snprintf(name, IFNAMSIZ, "%s.%.4i", real_dev->name, vlan_id); 251 break; 252 case VLAN_NAME_TYPE_PLUS_VID_NO_PAD: 253 /* Put our vlan.VID in the name. 254 * Name will look like: vlan5 255 */ 256 snprintf(name, IFNAMSIZ, "vlan%i", vlan_id); 257 break; 258 case VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD: 259 /* Put our vlan.VID in the name. 260 * Name will look like: eth0.5 261 */ 262 snprintf(name, IFNAMSIZ, "%s.%i", real_dev->name, vlan_id); 263 break; 264 case VLAN_NAME_TYPE_PLUS_VID: 265 /* Put our vlan.VID in the name. 266 * Name will look like: vlan0005 267 */ 268 default: 269 snprintf(name, IFNAMSIZ, "vlan%.4i", vlan_id); 270 } 271 272 new_dev = alloc_netdev(sizeof(struct vlan_dev_info), name, vlan_setup); 273 274 if (new_dev == NULL) 275 return -ENOBUFS; 276 277 dev_net_set(new_dev, net); 278 /* need 4 bytes for extra VLAN header info, 279 * hope the underlying device can handle it. 280 */ 281 new_dev->mtu = real_dev->mtu; 282 283 vlan_dev_info(new_dev)->vlan_id = vlan_id; 284 vlan_dev_info(new_dev)->real_dev = real_dev; 285 vlan_dev_info(new_dev)->dent = NULL; 286 vlan_dev_info(new_dev)->flags = VLAN_FLAG_REORDER_HDR; 287 288 new_dev->rtnl_link_ops = &vlan_link_ops; 289 err = register_vlan_dev(new_dev); 290 if (err < 0) 291 goto out_free_newdev; 292 293 return 0; 294 295 out_free_newdev: 296 free_netdev(new_dev); 297 return err; 298 } 299 300 static void vlan_sync_address(struct net_device *dev, 301 struct net_device *vlandev) 302 { 303 struct vlan_dev_info *vlan = vlan_dev_info(vlandev); 304 305 /* May be called without an actual change */ 306 if (!compare_ether_addr(vlan->real_dev_addr, dev->dev_addr)) 307 return; 308 309 /* vlan address was different from the old address and is equal to 310 * the new address */ 311 if (compare_ether_addr(vlandev->dev_addr, vlan->real_dev_addr) && 312 !compare_ether_addr(vlandev->dev_addr, dev->dev_addr)) 313 dev_uc_del(dev, vlandev->dev_addr); 314 315 /* vlan address was equal to the old address and is different from 316 * the new address */ 317 if (!compare_ether_addr(vlandev->dev_addr, vlan->real_dev_addr) && 318 compare_ether_addr(vlandev->dev_addr, dev->dev_addr)) 319 dev_uc_add(dev, vlandev->dev_addr); 320 321 memcpy(vlan->real_dev_addr, dev->dev_addr, ETH_ALEN); 322 } 323 324 static void vlan_transfer_features(struct net_device *dev, 325 struct net_device *vlandev) 326 { 327 vlandev->gso_max_size = dev->gso_max_size; 328 329 if (dev->features & NETIF_F_HW_VLAN_TX) 330 vlandev->hard_header_len = dev->hard_header_len; 331 else 332 vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN; 333 334 #if defined(CONFIG_FCOE) || defined(CONFIG_FCOE_MODULE) 335 vlandev->fcoe_ddp_xid = dev->fcoe_ddp_xid; 336 #endif 337 338 netdev_update_features(vlandev); 339 } 340 341 static void __vlan_device_event(struct net_device *dev, unsigned long event) 342 { 343 switch (event) { 344 case NETDEV_CHANGENAME: 345 vlan_proc_rem_dev(dev); 346 if (vlan_proc_add_dev(dev) < 0) 347 pr_warning("8021q: failed to change proc name for %s\n", 348 dev->name); 349 break; 350 case NETDEV_REGISTER: 351 if (vlan_proc_add_dev(dev) < 0) 352 pr_warning("8021q: failed to add proc entry for %s\n", 353 dev->name); 354 break; 355 case NETDEV_UNREGISTER: 356 vlan_proc_rem_dev(dev); 357 break; 358 } 359 } 360 361 static int vlan_device_event(struct notifier_block *unused, unsigned long event, 362 void *ptr) 363 { 364 struct net_device *dev = ptr; 365 struct vlan_group *grp; 366 int i, flgs; 367 struct net_device *vlandev; 368 struct vlan_dev_info *vlan; 369 LIST_HEAD(list); 370 371 if (is_vlan_dev(dev)) 372 __vlan_device_event(dev, event); 373 374 if ((event == NETDEV_UP) && 375 (dev->features & NETIF_F_HW_VLAN_FILTER) && 376 dev->netdev_ops->ndo_vlan_rx_add_vid) { 377 pr_info("8021q: adding VLAN 0 to HW filter on device %s\n", 378 dev->name); 379 dev->netdev_ops->ndo_vlan_rx_add_vid(dev, 0); 380 } 381 382 grp = rtnl_dereference(dev->vlgrp); 383 if (!grp) 384 goto out; 385 386 /* It is OK that we do not hold the group lock right now, 387 * as we run under the RTNL lock. 388 */ 389 390 switch (event) { 391 case NETDEV_CHANGE: 392 /* Propagate real device state to vlan devices */ 393 for (i = 0; i < VLAN_N_VID; i++) { 394 vlandev = vlan_group_get_device(grp, i); 395 if (!vlandev) 396 continue; 397 398 netif_stacked_transfer_operstate(dev, vlandev); 399 } 400 break; 401 402 case NETDEV_CHANGEADDR: 403 /* Adjust unicast filters on underlying device */ 404 for (i = 0; i < VLAN_N_VID; i++) { 405 vlandev = vlan_group_get_device(grp, i); 406 if (!vlandev) 407 continue; 408 409 flgs = vlandev->flags; 410 if (!(flgs & IFF_UP)) 411 continue; 412 413 vlan_sync_address(dev, vlandev); 414 } 415 break; 416 417 case NETDEV_CHANGEMTU: 418 for (i = 0; i < VLAN_N_VID; i++) { 419 vlandev = vlan_group_get_device(grp, i); 420 if (!vlandev) 421 continue; 422 423 if (vlandev->mtu <= dev->mtu) 424 continue; 425 426 dev_set_mtu(vlandev, dev->mtu); 427 } 428 break; 429 430 case NETDEV_FEAT_CHANGE: 431 /* Propagate device features to underlying device */ 432 for (i = 0; i < VLAN_N_VID; i++) { 433 vlandev = vlan_group_get_device(grp, i); 434 if (!vlandev) 435 continue; 436 437 vlan_transfer_features(dev, vlandev); 438 } 439 440 break; 441 442 case NETDEV_DOWN: 443 /* Put all VLANs for this dev in the down state too. */ 444 for (i = 0; i < VLAN_N_VID; i++) { 445 vlandev = vlan_group_get_device(grp, i); 446 if (!vlandev) 447 continue; 448 449 flgs = vlandev->flags; 450 if (!(flgs & IFF_UP)) 451 continue; 452 453 vlan = vlan_dev_info(vlandev); 454 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING)) 455 dev_change_flags(vlandev, flgs & ~IFF_UP); 456 netif_stacked_transfer_operstate(dev, vlandev); 457 } 458 break; 459 460 case NETDEV_UP: 461 /* Put all VLANs for this dev in the up state too. */ 462 for (i = 0; i < VLAN_N_VID; i++) { 463 vlandev = vlan_group_get_device(grp, i); 464 if (!vlandev) 465 continue; 466 467 flgs = vlandev->flags; 468 if (flgs & IFF_UP) 469 continue; 470 471 vlan = vlan_dev_info(vlandev); 472 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING)) 473 dev_change_flags(vlandev, flgs | IFF_UP); 474 netif_stacked_transfer_operstate(dev, vlandev); 475 } 476 break; 477 478 case NETDEV_UNREGISTER: 479 /* twiddle thumbs on netns device moves */ 480 if (dev->reg_state != NETREG_UNREGISTERING) 481 break; 482 483 for (i = 0; i < VLAN_N_VID; i++) { 484 vlandev = vlan_group_get_device(grp, i); 485 if (!vlandev) 486 continue; 487 488 /* unregistration of last vlan destroys group, abort 489 * afterwards */ 490 if (grp->nr_vlans == 1) 491 i = VLAN_N_VID; 492 493 unregister_vlan_dev(vlandev, &list); 494 } 495 unregister_netdevice_many(&list); 496 break; 497 498 case NETDEV_PRE_TYPE_CHANGE: 499 /* Forbid underlaying device to change its type. */ 500 return NOTIFY_BAD; 501 502 case NETDEV_NOTIFY_PEERS: 503 case NETDEV_BONDING_FAILOVER: 504 /* Propagate to vlan devices */ 505 for (i = 0; i < VLAN_N_VID; i++) { 506 vlandev = vlan_group_get_device(grp, i); 507 if (!vlandev) 508 continue; 509 510 call_netdevice_notifiers(event, vlandev); 511 } 512 break; 513 } 514 515 out: 516 return NOTIFY_DONE; 517 } 518 519 static struct notifier_block vlan_notifier_block __read_mostly = { 520 .notifier_call = vlan_device_event, 521 }; 522 523 /* 524 * VLAN IOCTL handler. 525 * o execute requested action or pass command to the device driver 526 * arg is really a struct vlan_ioctl_args __user *. 527 */ 528 static int vlan_ioctl_handler(struct net *net, void __user *arg) 529 { 530 int err; 531 struct vlan_ioctl_args args; 532 struct net_device *dev = NULL; 533 534 if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args))) 535 return -EFAULT; 536 537 /* Null terminate this sucker, just in case. */ 538 args.device1[23] = 0; 539 args.u.device2[23] = 0; 540 541 rtnl_lock(); 542 543 switch (args.cmd) { 544 case SET_VLAN_INGRESS_PRIORITY_CMD: 545 case SET_VLAN_EGRESS_PRIORITY_CMD: 546 case SET_VLAN_FLAG_CMD: 547 case ADD_VLAN_CMD: 548 case DEL_VLAN_CMD: 549 case GET_VLAN_REALDEV_NAME_CMD: 550 case GET_VLAN_VID_CMD: 551 err = -ENODEV; 552 dev = __dev_get_by_name(net, args.device1); 553 if (!dev) 554 goto out; 555 556 err = -EINVAL; 557 if (args.cmd != ADD_VLAN_CMD && !is_vlan_dev(dev)) 558 goto out; 559 } 560 561 switch (args.cmd) { 562 case SET_VLAN_INGRESS_PRIORITY_CMD: 563 err = -EPERM; 564 if (!capable(CAP_NET_ADMIN)) 565 break; 566 vlan_dev_set_ingress_priority(dev, 567 args.u.skb_priority, 568 args.vlan_qos); 569 err = 0; 570 break; 571 572 case SET_VLAN_EGRESS_PRIORITY_CMD: 573 err = -EPERM; 574 if (!capable(CAP_NET_ADMIN)) 575 break; 576 err = vlan_dev_set_egress_priority(dev, 577 args.u.skb_priority, 578 args.vlan_qos); 579 break; 580 581 case SET_VLAN_FLAG_CMD: 582 err = -EPERM; 583 if (!capable(CAP_NET_ADMIN)) 584 break; 585 err = vlan_dev_change_flags(dev, 586 args.vlan_qos ? args.u.flag : 0, 587 args.u.flag); 588 break; 589 590 case SET_VLAN_NAME_TYPE_CMD: 591 err = -EPERM; 592 if (!capable(CAP_NET_ADMIN)) 593 break; 594 if ((args.u.name_type >= 0) && 595 (args.u.name_type < VLAN_NAME_TYPE_HIGHEST)) { 596 struct vlan_net *vn; 597 598 vn = net_generic(net, vlan_net_id); 599 vn->name_type = args.u.name_type; 600 err = 0; 601 } else { 602 err = -EINVAL; 603 } 604 break; 605 606 case ADD_VLAN_CMD: 607 err = -EPERM; 608 if (!capable(CAP_NET_ADMIN)) 609 break; 610 err = register_vlan_device(dev, args.u.VID); 611 break; 612 613 case DEL_VLAN_CMD: 614 err = -EPERM; 615 if (!capable(CAP_NET_ADMIN)) 616 break; 617 unregister_vlan_dev(dev, NULL); 618 err = 0; 619 break; 620 621 case GET_VLAN_REALDEV_NAME_CMD: 622 err = 0; 623 vlan_dev_get_realdev_name(dev, args.u.device2); 624 if (copy_to_user(arg, &args, 625 sizeof(struct vlan_ioctl_args))) 626 err = -EFAULT; 627 break; 628 629 case GET_VLAN_VID_CMD: 630 err = 0; 631 args.u.VID = vlan_dev_vlan_id(dev); 632 if (copy_to_user(arg, &args, 633 sizeof(struct vlan_ioctl_args))) 634 err = -EFAULT; 635 break; 636 637 default: 638 err = -EOPNOTSUPP; 639 break; 640 } 641 out: 642 rtnl_unlock(); 643 return err; 644 } 645 646 static int __net_init vlan_init_net(struct net *net) 647 { 648 struct vlan_net *vn = net_generic(net, vlan_net_id); 649 int err; 650 651 vn->name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD; 652 653 err = vlan_proc_init(net); 654 655 return err; 656 } 657 658 static void __net_exit vlan_exit_net(struct net *net) 659 { 660 vlan_proc_cleanup(net); 661 } 662 663 static struct pernet_operations vlan_net_ops = { 664 .init = vlan_init_net, 665 .exit = vlan_exit_net, 666 .id = &vlan_net_id, 667 .size = sizeof(struct vlan_net), 668 }; 669 670 static int __init vlan_proto_init(void) 671 { 672 int err; 673 674 pr_info("%s v%s\n", vlan_fullname, vlan_version); 675 676 err = register_pernet_subsys(&vlan_net_ops); 677 if (err < 0) 678 goto err0; 679 680 err = register_netdevice_notifier(&vlan_notifier_block); 681 if (err < 0) 682 goto err2; 683 684 err = vlan_gvrp_init(); 685 if (err < 0) 686 goto err3; 687 688 err = vlan_netlink_init(); 689 if (err < 0) 690 goto err4; 691 692 vlan_ioctl_set(vlan_ioctl_handler); 693 return 0; 694 695 err4: 696 vlan_gvrp_uninit(); 697 err3: 698 unregister_netdevice_notifier(&vlan_notifier_block); 699 err2: 700 unregister_pernet_subsys(&vlan_net_ops); 701 err0: 702 return err; 703 } 704 705 static void __exit vlan_cleanup_module(void) 706 { 707 vlan_ioctl_set(NULL); 708 vlan_netlink_fini(); 709 710 unregister_netdevice_notifier(&vlan_notifier_block); 711 712 unregister_pernet_subsys(&vlan_net_ops); 713 rcu_barrier(); /* Wait for completion of call_rcu()'s */ 714 715 vlan_gvrp_uninit(); 716 } 717 718 module_init(vlan_proto_init); 719 module_exit(vlan_cleanup_module); 720 721 MODULE_LICENSE("GPL"); 722 MODULE_VERSION(DRV_VERSION); 723