xref: /openbmc/linux/net/bridge/br_netlink.c (revision 036b9e7c)
1 /*
2  *	Bridge netlink control interface
3  *
4  *	Authors:
5  *	Stephen Hemminger		<shemminger@osdl.org>
6  *
7  *	This program is free software; you can redistribute it and/or
8  *	modify it under the terms of the GNU General Public License
9  *	as published by the Free Software Foundation; either version
10  *	2 of the License, or (at your option) any later version.
11  */
12 
13 #include <linux/kernel.h>
14 #include <linux/slab.h>
15 #include <linux/etherdevice.h>
16 #include <net/rtnetlink.h>
17 #include <net/net_namespace.h>
18 #include <net/sock.h>
19 #include <uapi/linux/if_bridge.h>
20 
21 #include "br_private.h"
22 #include "br_private_stp.h"
23 #include "br_private_tunnel.h"
24 
25 static int __get_num_vlan_infos(struct net_bridge_vlan_group *vg,
26 				u32 filter_mask)
27 {
28 	struct net_bridge_vlan *v;
29 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
30 	u16 flags, pvid;
31 	int num_vlans = 0;
32 
33 	if (!(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
34 		return 0;
35 
36 	pvid = br_get_pvid(vg);
37 	/* Count number of vlan infos */
38 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
39 		flags = 0;
40 		/* only a context, bridge vlan not activated */
41 		if (!br_vlan_should_use(v))
42 			continue;
43 		if (v->vid == pvid)
44 			flags |= BRIDGE_VLAN_INFO_PVID;
45 
46 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
47 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
48 
49 		if (vid_range_start == 0) {
50 			goto initvars;
51 		} else if ((v->vid - vid_range_end) == 1 &&
52 			flags == vid_range_flags) {
53 			vid_range_end = v->vid;
54 			continue;
55 		} else {
56 			if ((vid_range_end - vid_range_start) > 0)
57 				num_vlans += 2;
58 			else
59 				num_vlans += 1;
60 		}
61 initvars:
62 		vid_range_start = v->vid;
63 		vid_range_end = v->vid;
64 		vid_range_flags = flags;
65 	}
66 
67 	if (vid_range_start != 0) {
68 		if ((vid_range_end - vid_range_start) > 0)
69 			num_vlans += 2;
70 		else
71 			num_vlans += 1;
72 	}
73 
74 	return num_vlans;
75 }
76 
77 static int br_get_num_vlan_infos(struct net_bridge_vlan_group *vg,
78 				 u32 filter_mask)
79 {
80 	int num_vlans;
81 
82 	if (!vg)
83 		return 0;
84 
85 	if (filter_mask & RTEXT_FILTER_BRVLAN)
86 		return vg->num_vlans;
87 
88 	rcu_read_lock();
89 	num_vlans = __get_num_vlan_infos(vg, filter_mask);
90 	rcu_read_unlock();
91 
92 	return num_vlans;
93 }
94 
95 static size_t br_get_link_af_size_filtered(const struct net_device *dev,
96 					   u32 filter_mask)
97 {
98 	struct net_bridge_vlan_group *vg = NULL;
99 	struct net_bridge_port *p = NULL;
100 	struct net_bridge *br;
101 	int num_vlan_infos;
102 	size_t vinfo_sz = 0;
103 
104 	rcu_read_lock();
105 	if (br_port_exists(dev)) {
106 		p = br_port_get_rcu(dev);
107 		vg = nbp_vlan_group_rcu(p);
108 	} else if (dev->priv_flags & IFF_EBRIDGE) {
109 		br = netdev_priv(dev);
110 		vg = br_vlan_group_rcu(br);
111 	}
112 	num_vlan_infos = br_get_num_vlan_infos(vg, filter_mask);
113 	rcu_read_unlock();
114 
115 	if (p && (p->flags & BR_VLAN_TUNNEL))
116 		vinfo_sz += br_get_vlan_tunnel_info_size(vg);
117 
118 	/* Each VLAN is returned in bridge_vlan_info along with flags */
119 	vinfo_sz += num_vlan_infos * nla_total_size(sizeof(struct bridge_vlan_info));
120 
121 	return vinfo_sz;
122 }
123 
124 static inline size_t br_port_info_size(void)
125 {
126 	return nla_total_size(1)	/* IFLA_BRPORT_STATE  */
127 		+ nla_total_size(2)	/* IFLA_BRPORT_PRIORITY */
128 		+ nla_total_size(4)	/* IFLA_BRPORT_COST */
129 		+ nla_total_size(1)	/* IFLA_BRPORT_MODE */
130 		+ nla_total_size(1)	/* IFLA_BRPORT_GUARD */
131 		+ nla_total_size(1)	/* IFLA_BRPORT_PROTECT */
132 		+ nla_total_size(1)	/* IFLA_BRPORT_FAST_LEAVE */
133 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_TO_UCAST */
134 		+ nla_total_size(1)	/* IFLA_BRPORT_LEARNING */
135 		+ nla_total_size(1)	/* IFLA_BRPORT_UNICAST_FLOOD */
136 		+ nla_total_size(1)	/* IFLA_BRPORT_MCAST_FLOOD */
137 		+ nla_total_size(1)	/* IFLA_BRPORT_BCAST_FLOOD */
138 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP */
139 		+ nla_total_size(1)	/* IFLA_BRPORT_PROXYARP_WIFI */
140 		+ nla_total_size(1)	/* IFLA_BRPORT_VLAN_TUNNEL */
141 		+ nla_total_size(1)	/* IFLA_BRPORT_NEIGH_SUPPRESS */
142 		+ nla_total_size(1)	/* IFLA_BRPORT_ISOLATED */
143 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_ROOT_ID */
144 		+ nla_total_size(sizeof(struct ifla_bridge_id))	/* IFLA_BRPORT_BRIDGE_ID */
145 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_PORT */
146 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_DESIGNATED_COST */
147 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_ID */
148 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_NO */
149 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_TOPOLOGY_CHANGE_ACK */
150 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_CONFIG_PENDING */
151 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_MESSAGE_AGE_TIMER */
152 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_FORWARD_DELAY_TIMER */
153 		+ nla_total_size_64bit(sizeof(u64)) /* IFLA_BRPORT_HOLD_TIMER */
154 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
155 		+ nla_total_size(sizeof(u8))	/* IFLA_BRPORT_MULTICAST_ROUTER */
156 #endif
157 		+ nla_total_size(sizeof(u16))	/* IFLA_BRPORT_GROUP_FWD_MASK */
158 		+ 0;
159 }
160 
161 static inline size_t br_nlmsg_size(struct net_device *dev, u32 filter_mask)
162 {
163 	return NLMSG_ALIGN(sizeof(struct ifinfomsg))
164 		+ nla_total_size(IFNAMSIZ) /* IFLA_IFNAME */
165 		+ nla_total_size(MAX_ADDR_LEN) /* IFLA_ADDRESS */
166 		+ nla_total_size(4) /* IFLA_MASTER */
167 		+ nla_total_size(4) /* IFLA_MTU */
168 		+ nla_total_size(4) /* IFLA_LINK */
169 		+ nla_total_size(1) /* IFLA_OPERSTATE */
170 		+ nla_total_size(br_port_info_size()) /* IFLA_PROTINFO */
171 		+ nla_total_size(br_get_link_af_size_filtered(dev,
172 				 filter_mask)) /* IFLA_AF_SPEC */
173 		+ nla_total_size(4); /* IFLA_BRPORT_BACKUP_PORT */
174 }
175 
176 static int br_port_fill_attrs(struct sk_buff *skb,
177 			      const struct net_bridge_port *p)
178 {
179 	u8 mode = !!(p->flags & BR_HAIRPIN_MODE);
180 	struct net_bridge_port *backup_p;
181 	u64 timerval;
182 
183 	if (nla_put_u8(skb, IFLA_BRPORT_STATE, p->state) ||
184 	    nla_put_u16(skb, IFLA_BRPORT_PRIORITY, p->priority) ||
185 	    nla_put_u32(skb, IFLA_BRPORT_COST, p->path_cost) ||
186 	    nla_put_u8(skb, IFLA_BRPORT_MODE, mode) ||
187 	    nla_put_u8(skb, IFLA_BRPORT_GUARD, !!(p->flags & BR_BPDU_GUARD)) ||
188 	    nla_put_u8(skb, IFLA_BRPORT_PROTECT,
189 		       !!(p->flags & BR_ROOT_BLOCK)) ||
190 	    nla_put_u8(skb, IFLA_BRPORT_FAST_LEAVE,
191 		       !!(p->flags & BR_MULTICAST_FAST_LEAVE)) ||
192 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_TO_UCAST,
193 		       !!(p->flags & BR_MULTICAST_TO_UNICAST)) ||
194 	    nla_put_u8(skb, IFLA_BRPORT_LEARNING, !!(p->flags & BR_LEARNING)) ||
195 	    nla_put_u8(skb, IFLA_BRPORT_UNICAST_FLOOD,
196 		       !!(p->flags & BR_FLOOD)) ||
197 	    nla_put_u8(skb, IFLA_BRPORT_MCAST_FLOOD,
198 		       !!(p->flags & BR_MCAST_FLOOD)) ||
199 	    nla_put_u8(skb, IFLA_BRPORT_BCAST_FLOOD,
200 		       !!(p->flags & BR_BCAST_FLOOD)) ||
201 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP, !!(p->flags & BR_PROXYARP)) ||
202 	    nla_put_u8(skb, IFLA_BRPORT_PROXYARP_WIFI,
203 		       !!(p->flags & BR_PROXYARP_WIFI)) ||
204 	    nla_put(skb, IFLA_BRPORT_ROOT_ID, sizeof(struct ifla_bridge_id),
205 		    &p->designated_root) ||
206 	    nla_put(skb, IFLA_BRPORT_BRIDGE_ID, sizeof(struct ifla_bridge_id),
207 		    &p->designated_bridge) ||
208 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_PORT, p->designated_port) ||
209 	    nla_put_u16(skb, IFLA_BRPORT_DESIGNATED_COST, p->designated_cost) ||
210 	    nla_put_u16(skb, IFLA_BRPORT_ID, p->port_id) ||
211 	    nla_put_u16(skb, IFLA_BRPORT_NO, p->port_no) ||
212 	    nla_put_u8(skb, IFLA_BRPORT_TOPOLOGY_CHANGE_ACK,
213 		       p->topology_change_ack) ||
214 	    nla_put_u8(skb, IFLA_BRPORT_CONFIG_PENDING, p->config_pending) ||
215 	    nla_put_u8(skb, IFLA_BRPORT_VLAN_TUNNEL, !!(p->flags &
216 							BR_VLAN_TUNNEL)) ||
217 	    nla_put_u16(skb, IFLA_BRPORT_GROUP_FWD_MASK, p->group_fwd_mask) ||
218 	    nla_put_u8(skb, IFLA_BRPORT_NEIGH_SUPPRESS,
219 		       !!(p->flags & BR_NEIGH_SUPPRESS)) ||
220 	    nla_put_u8(skb, IFLA_BRPORT_ISOLATED, !!(p->flags & BR_ISOLATED)))
221 		return -EMSGSIZE;
222 
223 	timerval = br_timer_value(&p->message_age_timer);
224 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_MESSAGE_AGE_TIMER, timerval,
225 			      IFLA_BRPORT_PAD))
226 		return -EMSGSIZE;
227 	timerval = br_timer_value(&p->forward_delay_timer);
228 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_FORWARD_DELAY_TIMER, timerval,
229 			      IFLA_BRPORT_PAD))
230 		return -EMSGSIZE;
231 	timerval = br_timer_value(&p->hold_timer);
232 	if (nla_put_u64_64bit(skb, IFLA_BRPORT_HOLD_TIMER, timerval,
233 			      IFLA_BRPORT_PAD))
234 		return -EMSGSIZE;
235 
236 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
237 	if (nla_put_u8(skb, IFLA_BRPORT_MULTICAST_ROUTER,
238 		       p->multicast_router))
239 		return -EMSGSIZE;
240 #endif
241 
242 	/* we might be called only with br->lock */
243 	rcu_read_lock();
244 	backup_p = rcu_dereference(p->backup_port);
245 	if (backup_p)
246 		nla_put_u32(skb, IFLA_BRPORT_BACKUP_PORT,
247 			    backup_p->dev->ifindex);
248 	rcu_read_unlock();
249 
250 	return 0;
251 }
252 
253 static int br_fill_ifvlaninfo_range(struct sk_buff *skb, u16 vid_start,
254 				    u16 vid_end, u16 flags)
255 {
256 	struct  bridge_vlan_info vinfo;
257 
258 	if ((vid_end - vid_start) > 0) {
259 		/* add range to skb */
260 		vinfo.vid = vid_start;
261 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_BEGIN;
262 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
263 			    sizeof(vinfo), &vinfo))
264 			goto nla_put_failure;
265 
266 		vinfo.vid = vid_end;
267 		vinfo.flags = flags | BRIDGE_VLAN_INFO_RANGE_END;
268 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
269 			    sizeof(vinfo), &vinfo))
270 			goto nla_put_failure;
271 	} else {
272 		vinfo.vid = vid_start;
273 		vinfo.flags = flags;
274 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
275 			    sizeof(vinfo), &vinfo))
276 			goto nla_put_failure;
277 	}
278 
279 	return 0;
280 
281 nla_put_failure:
282 	return -EMSGSIZE;
283 }
284 
285 static int br_fill_ifvlaninfo_compressed(struct sk_buff *skb,
286 					 struct net_bridge_vlan_group *vg)
287 {
288 	struct net_bridge_vlan *v;
289 	u16 vid_range_start = 0, vid_range_end = 0, vid_range_flags = 0;
290 	u16 flags, pvid;
291 	int err = 0;
292 
293 	/* Pack IFLA_BRIDGE_VLAN_INFO's for every vlan
294 	 * and mark vlan info with begin and end flags
295 	 * if vlaninfo represents a range
296 	 */
297 	pvid = br_get_pvid(vg);
298 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
299 		flags = 0;
300 		if (!br_vlan_should_use(v))
301 			continue;
302 		if (v->vid == pvid)
303 			flags |= BRIDGE_VLAN_INFO_PVID;
304 
305 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
306 			flags |= BRIDGE_VLAN_INFO_UNTAGGED;
307 
308 		if (vid_range_start == 0) {
309 			goto initvars;
310 		} else if ((v->vid - vid_range_end) == 1 &&
311 			flags == vid_range_flags) {
312 			vid_range_end = v->vid;
313 			continue;
314 		} else {
315 			err = br_fill_ifvlaninfo_range(skb, vid_range_start,
316 						       vid_range_end,
317 						       vid_range_flags);
318 			if (err)
319 				return err;
320 		}
321 
322 initvars:
323 		vid_range_start = v->vid;
324 		vid_range_end = v->vid;
325 		vid_range_flags = flags;
326 	}
327 
328 	if (vid_range_start != 0) {
329 		/* Call it once more to send any left over vlans */
330 		err = br_fill_ifvlaninfo_range(skb, vid_range_start,
331 					       vid_range_end,
332 					       vid_range_flags);
333 		if (err)
334 			return err;
335 	}
336 
337 	return 0;
338 }
339 
340 static int br_fill_ifvlaninfo(struct sk_buff *skb,
341 			      struct net_bridge_vlan_group *vg)
342 {
343 	struct bridge_vlan_info vinfo;
344 	struct net_bridge_vlan *v;
345 	u16 pvid;
346 
347 	pvid = br_get_pvid(vg);
348 	list_for_each_entry_rcu(v, &vg->vlan_list, vlist) {
349 		if (!br_vlan_should_use(v))
350 			continue;
351 
352 		vinfo.vid = v->vid;
353 		vinfo.flags = 0;
354 		if (v->vid == pvid)
355 			vinfo.flags |= BRIDGE_VLAN_INFO_PVID;
356 
357 		if (v->flags & BRIDGE_VLAN_INFO_UNTAGGED)
358 			vinfo.flags |= BRIDGE_VLAN_INFO_UNTAGGED;
359 
360 		if (nla_put(skb, IFLA_BRIDGE_VLAN_INFO,
361 			    sizeof(vinfo), &vinfo))
362 			goto nla_put_failure;
363 	}
364 
365 	return 0;
366 
367 nla_put_failure:
368 	return -EMSGSIZE;
369 }
370 
371 /*
372  * Create one netlink message for one interface
373  * Contains port and master info as well as carrier and bridge state.
374  */
375 static int br_fill_ifinfo(struct sk_buff *skb,
376 			  const struct net_bridge_port *port,
377 			  u32 pid, u32 seq, int event, unsigned int flags,
378 			  u32 filter_mask, const struct net_device *dev)
379 {
380 	u8 operstate = netif_running(dev) ? dev->operstate : IF_OPER_DOWN;
381 	struct net_bridge *br;
382 	struct ifinfomsg *hdr;
383 	struct nlmsghdr *nlh;
384 
385 	if (port)
386 		br = port->br;
387 	else
388 		br = netdev_priv(dev);
389 
390 	br_debug(br, "br_fill_info event %d port %s master %s\n",
391 		     event, dev->name, br->dev->name);
392 
393 	nlh = nlmsg_put(skb, pid, seq, event, sizeof(*hdr), flags);
394 	if (nlh == NULL)
395 		return -EMSGSIZE;
396 
397 	hdr = nlmsg_data(nlh);
398 	hdr->ifi_family = AF_BRIDGE;
399 	hdr->__ifi_pad = 0;
400 	hdr->ifi_type = dev->type;
401 	hdr->ifi_index = dev->ifindex;
402 	hdr->ifi_flags = dev_get_flags(dev);
403 	hdr->ifi_change = 0;
404 
405 	if (nla_put_string(skb, IFLA_IFNAME, dev->name) ||
406 	    nla_put_u32(skb, IFLA_MASTER, br->dev->ifindex) ||
407 	    nla_put_u32(skb, IFLA_MTU, dev->mtu) ||
408 	    nla_put_u8(skb, IFLA_OPERSTATE, operstate) ||
409 	    (dev->addr_len &&
410 	     nla_put(skb, IFLA_ADDRESS, dev->addr_len, dev->dev_addr)) ||
411 	    (dev->ifindex != dev_get_iflink(dev) &&
412 	     nla_put_u32(skb, IFLA_LINK, dev_get_iflink(dev))))
413 		goto nla_put_failure;
414 
415 	if (event == RTM_NEWLINK && port) {
416 		struct nlattr *nest
417 			= nla_nest_start(skb, IFLA_PROTINFO | NLA_F_NESTED);
418 
419 		if (nest == NULL || br_port_fill_attrs(skb, port) < 0)
420 			goto nla_put_failure;
421 		nla_nest_end(skb, nest);
422 	}
423 
424 	/* Check if  the VID information is requested */
425 	if ((filter_mask & RTEXT_FILTER_BRVLAN) ||
426 	    (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)) {
427 		struct net_bridge_vlan_group *vg;
428 		struct nlattr *af;
429 		int err;
430 
431 		/* RCU needed because of the VLAN locking rules (rcu || rtnl) */
432 		rcu_read_lock();
433 		if (port)
434 			vg = nbp_vlan_group_rcu(port);
435 		else
436 			vg = br_vlan_group_rcu(br);
437 
438 		if (!vg || !vg->num_vlans) {
439 			rcu_read_unlock();
440 			goto done;
441 		}
442 		af = nla_nest_start(skb, IFLA_AF_SPEC);
443 		if (!af) {
444 			rcu_read_unlock();
445 			goto nla_put_failure;
446 		}
447 		if (filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED)
448 			err = br_fill_ifvlaninfo_compressed(skb, vg);
449 		else
450 			err = br_fill_ifvlaninfo(skb, vg);
451 
452 		if (port && (port->flags & BR_VLAN_TUNNEL))
453 			err = br_fill_vlan_tunnel_info(skb, vg);
454 		rcu_read_unlock();
455 		if (err)
456 			goto nla_put_failure;
457 		nla_nest_end(skb, af);
458 	}
459 
460 done:
461 	nlmsg_end(skb, nlh);
462 	return 0;
463 
464 nla_put_failure:
465 	nlmsg_cancel(skb, nlh);
466 	return -EMSGSIZE;
467 }
468 
469 /* Notify listeners of a change in bridge or port information */
470 void br_ifinfo_notify(int event, const struct net_bridge *br,
471 		      const struct net_bridge_port *port)
472 {
473 	u32 filter = RTEXT_FILTER_BRVLAN_COMPRESSED;
474 	struct net_device *dev;
475 	struct sk_buff *skb;
476 	int err = -ENOBUFS;
477 	struct net *net;
478 	u16 port_no = 0;
479 
480 	if (WARN_ON(!port && !br))
481 		return;
482 
483 	if (port) {
484 		dev = port->dev;
485 		br = port->br;
486 		port_no = port->port_no;
487 	} else {
488 		dev = br->dev;
489 	}
490 
491 	net = dev_net(dev);
492 	br_debug(br, "port %u(%s) event %d\n", port_no, dev->name, event);
493 
494 	skb = nlmsg_new(br_nlmsg_size(dev, filter), GFP_ATOMIC);
495 	if (skb == NULL)
496 		goto errout;
497 
498 	err = br_fill_ifinfo(skb, port, 0, 0, event, 0, filter, dev);
499 	if (err < 0) {
500 		/* -EMSGSIZE implies BUG in br_nlmsg_size() */
501 		WARN_ON(err == -EMSGSIZE);
502 		kfree_skb(skb);
503 		goto errout;
504 	}
505 	rtnl_notify(skb, net, 0, RTNLGRP_LINK, NULL, GFP_ATOMIC);
506 	return;
507 errout:
508 	rtnl_set_sk_err(net, RTNLGRP_LINK, err);
509 }
510 
511 /*
512  * Dump information about all ports, in response to GETLINK
513  */
514 int br_getlink(struct sk_buff *skb, u32 pid, u32 seq,
515 	       struct net_device *dev, u32 filter_mask, int nlflags)
516 {
517 	struct net_bridge_port *port = br_port_get_rtnl(dev);
518 
519 	if (!port && !(filter_mask & RTEXT_FILTER_BRVLAN) &&
520 	    !(filter_mask & RTEXT_FILTER_BRVLAN_COMPRESSED))
521 		return 0;
522 
523 	return br_fill_ifinfo(skb, port, pid, seq, RTM_NEWLINK, nlflags,
524 			      filter_mask, dev);
525 }
526 
527 static int br_vlan_info(struct net_bridge *br, struct net_bridge_port *p,
528 			int cmd, struct bridge_vlan_info *vinfo, bool *changed,
529 			struct netlink_ext_ack *extack)
530 {
531 	bool curr_change;
532 	int err = 0;
533 
534 	switch (cmd) {
535 	case RTM_SETLINK:
536 		if (p) {
537 			/* if the MASTER flag is set this will act on the global
538 			 * per-VLAN entry as well
539 			 */
540 			err = nbp_vlan_add(p, vinfo->vid, vinfo->flags,
541 					   &curr_change, extack);
542 		} else {
543 			vinfo->flags |= BRIDGE_VLAN_INFO_BRENTRY;
544 			err = br_vlan_add(br, vinfo->vid, vinfo->flags,
545 					  &curr_change, extack);
546 		}
547 		if (curr_change)
548 			*changed = true;
549 		break;
550 
551 	case RTM_DELLINK:
552 		if (p) {
553 			if (!nbp_vlan_delete(p, vinfo->vid))
554 				*changed = true;
555 
556 			if ((vinfo->flags & BRIDGE_VLAN_INFO_MASTER) &&
557 			    !br_vlan_delete(p->br, vinfo->vid))
558 				*changed = true;
559 		} else if (!br_vlan_delete(br, vinfo->vid)) {
560 			*changed = true;
561 		}
562 		break;
563 	}
564 
565 	return err;
566 }
567 
568 static int br_process_vlan_info(struct net_bridge *br,
569 				struct net_bridge_port *p, int cmd,
570 				struct bridge_vlan_info *vinfo_curr,
571 				struct bridge_vlan_info **vinfo_last,
572 				bool *changed,
573 				struct netlink_ext_ack *extack)
574 {
575 	if (!vinfo_curr->vid || vinfo_curr->vid >= VLAN_VID_MASK)
576 		return -EINVAL;
577 
578 	if (vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_BEGIN) {
579 		/* check if we are already processing a range */
580 		if (*vinfo_last)
581 			return -EINVAL;
582 		*vinfo_last = vinfo_curr;
583 		/* don't allow range of pvids */
584 		if ((*vinfo_last)->flags & BRIDGE_VLAN_INFO_PVID)
585 			return -EINVAL;
586 		return 0;
587 	}
588 
589 	if (*vinfo_last) {
590 		struct bridge_vlan_info tmp_vinfo;
591 		int v, err;
592 
593 		if (!(vinfo_curr->flags & BRIDGE_VLAN_INFO_RANGE_END))
594 			return -EINVAL;
595 
596 		if (vinfo_curr->vid <= (*vinfo_last)->vid)
597 			return -EINVAL;
598 
599 		memcpy(&tmp_vinfo, *vinfo_last,
600 		       sizeof(struct bridge_vlan_info));
601 		for (v = (*vinfo_last)->vid; v <= vinfo_curr->vid; v++) {
602 			tmp_vinfo.vid = v;
603 			err = br_vlan_info(br, p, cmd, &tmp_vinfo, changed,
604 					   extack);
605 			if (err)
606 				break;
607 		}
608 		*vinfo_last = NULL;
609 
610 		return err;
611 	}
612 
613 	return br_vlan_info(br, p, cmd, vinfo_curr, changed, extack);
614 }
615 
616 static int br_afspec(struct net_bridge *br,
617 		     struct net_bridge_port *p,
618 		     struct nlattr *af_spec,
619 		     int cmd, bool *changed,
620 		     struct netlink_ext_ack *extack)
621 {
622 	struct bridge_vlan_info *vinfo_curr = NULL;
623 	struct bridge_vlan_info *vinfo_last = NULL;
624 	struct nlattr *attr;
625 	struct vtunnel_info tinfo_last = {};
626 	struct vtunnel_info tinfo_curr = {};
627 	int err = 0, rem;
628 
629 	nla_for_each_nested(attr, af_spec, rem) {
630 		err = 0;
631 		switch (nla_type(attr)) {
632 		case IFLA_BRIDGE_VLAN_TUNNEL_INFO:
633 			if (!p || !(p->flags & BR_VLAN_TUNNEL))
634 				return -EINVAL;
635 			err = br_parse_vlan_tunnel_info(attr, &tinfo_curr);
636 			if (err)
637 				return err;
638 			err = br_process_vlan_tunnel_info(br, p, cmd,
639 							  &tinfo_curr,
640 							  &tinfo_last,
641 							  changed);
642 			if (err)
643 				return err;
644 			break;
645 		case IFLA_BRIDGE_VLAN_INFO:
646 			if (nla_len(attr) != sizeof(struct bridge_vlan_info))
647 				return -EINVAL;
648 			vinfo_curr = nla_data(attr);
649 			err = br_process_vlan_info(br, p, cmd, vinfo_curr,
650 						   &vinfo_last, changed,
651 						   extack);
652 			if (err)
653 				return err;
654 			break;
655 		}
656 	}
657 
658 	return err;
659 }
660 
661 static const struct nla_policy br_port_policy[IFLA_BRPORT_MAX + 1] = {
662 	[IFLA_BRPORT_STATE]	= { .type = NLA_U8 },
663 	[IFLA_BRPORT_COST]	= { .type = NLA_U32 },
664 	[IFLA_BRPORT_PRIORITY]	= { .type = NLA_U16 },
665 	[IFLA_BRPORT_MODE]	= { .type = NLA_U8 },
666 	[IFLA_BRPORT_GUARD]	= { .type = NLA_U8 },
667 	[IFLA_BRPORT_PROTECT]	= { .type = NLA_U8 },
668 	[IFLA_BRPORT_FAST_LEAVE]= { .type = NLA_U8 },
669 	[IFLA_BRPORT_LEARNING]	= { .type = NLA_U8 },
670 	[IFLA_BRPORT_UNICAST_FLOOD] = { .type = NLA_U8 },
671 	[IFLA_BRPORT_PROXYARP]	= { .type = NLA_U8 },
672 	[IFLA_BRPORT_PROXYARP_WIFI] = { .type = NLA_U8 },
673 	[IFLA_BRPORT_MULTICAST_ROUTER] = { .type = NLA_U8 },
674 	[IFLA_BRPORT_MCAST_TO_UCAST] = { .type = NLA_U8 },
675 	[IFLA_BRPORT_MCAST_FLOOD] = { .type = NLA_U8 },
676 	[IFLA_BRPORT_BCAST_FLOOD] = { .type = NLA_U8 },
677 	[IFLA_BRPORT_VLAN_TUNNEL] = { .type = NLA_U8 },
678 	[IFLA_BRPORT_GROUP_FWD_MASK] = { .type = NLA_U16 },
679 	[IFLA_BRPORT_NEIGH_SUPPRESS] = { .type = NLA_U8 },
680 	[IFLA_BRPORT_ISOLATED]	= { .type = NLA_U8 },
681 	[IFLA_BRPORT_BACKUP_PORT] = { .type = NLA_U32 },
682 };
683 
684 /* Change the state of the port and notify spanning tree */
685 static int br_set_port_state(struct net_bridge_port *p, u8 state)
686 {
687 	if (state > BR_STATE_BLOCKING)
688 		return -EINVAL;
689 
690 	/* if kernel STP is running, don't allow changes */
691 	if (p->br->stp_enabled == BR_KERNEL_STP)
692 		return -EBUSY;
693 
694 	/* if device is not up, change is not allowed
695 	 * if link is not present, only allowable state is disabled
696 	 */
697 	if (!netif_running(p->dev) ||
698 	    (!netif_oper_up(p->dev) && state != BR_STATE_DISABLED))
699 		return -ENETDOWN;
700 
701 	br_set_state(p, state);
702 	br_port_state_selection(p->br);
703 	return 0;
704 }
705 
706 /* Set/clear or port flags based on attribute */
707 static int br_set_port_flag(struct net_bridge_port *p, struct nlattr *tb[],
708 			    int attrtype, unsigned long mask)
709 {
710 	unsigned long flags;
711 	int err;
712 
713 	if (!tb[attrtype])
714 		return 0;
715 
716 	if (nla_get_u8(tb[attrtype]))
717 		flags = p->flags | mask;
718 	else
719 		flags = p->flags & ~mask;
720 
721 	err = br_switchdev_set_port_flag(p, flags, mask);
722 	if (err)
723 		return err;
724 
725 	p->flags = flags;
726 	return 0;
727 }
728 
729 /* Process bridge protocol info on port */
730 static int br_setport(struct net_bridge_port *p, struct nlattr *tb[])
731 {
732 	unsigned long old_flags = p->flags;
733 	bool br_vlan_tunnel_old = false;
734 	int err;
735 
736 	err = br_set_port_flag(p, tb, IFLA_BRPORT_MODE, BR_HAIRPIN_MODE);
737 	if (err)
738 		return err;
739 
740 	err = br_set_port_flag(p, tb, IFLA_BRPORT_GUARD, BR_BPDU_GUARD);
741 	if (err)
742 		return err;
743 
744 	err = br_set_port_flag(p, tb, IFLA_BRPORT_FAST_LEAVE, BR_MULTICAST_FAST_LEAVE);
745 	if (err)
746 		return err;
747 
748 	err = br_set_port_flag(p, tb, IFLA_BRPORT_PROTECT, BR_ROOT_BLOCK);
749 	if (err)
750 		return err;
751 
752 	err = br_set_port_flag(p, tb, IFLA_BRPORT_LEARNING, BR_LEARNING);
753 	if (err)
754 		return err;
755 
756 	err = br_set_port_flag(p, tb, IFLA_BRPORT_UNICAST_FLOOD, BR_FLOOD);
757 	if (err)
758 		return err;
759 
760 	err = br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_FLOOD, BR_MCAST_FLOOD);
761 	if (err)
762 		return err;
763 
764 	err = br_set_port_flag(p, tb, IFLA_BRPORT_MCAST_TO_UCAST, BR_MULTICAST_TO_UNICAST);
765 	if (err)
766 		return err;
767 
768 	err = br_set_port_flag(p, tb, IFLA_BRPORT_BCAST_FLOOD, BR_BCAST_FLOOD);
769 	if (err)
770 		return err;
771 
772 	err = br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP, BR_PROXYARP);
773 	if (err)
774 		return err;
775 
776 	err = br_set_port_flag(p, tb, IFLA_BRPORT_PROXYARP_WIFI, BR_PROXYARP_WIFI);
777 	if (err)
778 		return err;
779 
780 	br_vlan_tunnel_old = (p->flags & BR_VLAN_TUNNEL) ? true : false;
781 	err = br_set_port_flag(p, tb, IFLA_BRPORT_VLAN_TUNNEL, BR_VLAN_TUNNEL);
782 	if (err)
783 		return err;
784 
785 	if (br_vlan_tunnel_old && !(p->flags & BR_VLAN_TUNNEL))
786 		nbp_vlan_tunnel_info_flush(p);
787 
788 	if (tb[IFLA_BRPORT_COST]) {
789 		err = br_stp_set_path_cost(p, nla_get_u32(tb[IFLA_BRPORT_COST]));
790 		if (err)
791 			return err;
792 	}
793 
794 	if (tb[IFLA_BRPORT_PRIORITY]) {
795 		err = br_stp_set_port_priority(p, nla_get_u16(tb[IFLA_BRPORT_PRIORITY]));
796 		if (err)
797 			return err;
798 	}
799 
800 	if (tb[IFLA_BRPORT_STATE]) {
801 		err = br_set_port_state(p, nla_get_u8(tb[IFLA_BRPORT_STATE]));
802 		if (err)
803 			return err;
804 	}
805 
806 	if (tb[IFLA_BRPORT_FLUSH])
807 		br_fdb_delete_by_port(p->br, p, 0, 0);
808 
809 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
810 	if (tb[IFLA_BRPORT_MULTICAST_ROUTER]) {
811 		u8 mcast_router = nla_get_u8(tb[IFLA_BRPORT_MULTICAST_ROUTER]);
812 
813 		err = br_multicast_set_port_router(p, mcast_router);
814 		if (err)
815 			return err;
816 	}
817 #endif
818 
819 	if (tb[IFLA_BRPORT_GROUP_FWD_MASK]) {
820 		u16 fwd_mask = nla_get_u16(tb[IFLA_BRPORT_GROUP_FWD_MASK]);
821 
822 		if (fwd_mask & BR_GROUPFWD_MACPAUSE)
823 			return -EINVAL;
824 		p->group_fwd_mask = fwd_mask;
825 	}
826 
827 	err = br_set_port_flag(p, tb, IFLA_BRPORT_NEIGH_SUPPRESS,
828 			       BR_NEIGH_SUPPRESS);
829 	if (err)
830 		return err;
831 
832 	err = br_set_port_flag(p, tb, IFLA_BRPORT_ISOLATED, BR_ISOLATED);
833 	if (err)
834 		return err;
835 
836 	if (tb[IFLA_BRPORT_BACKUP_PORT]) {
837 		struct net_device *backup_dev = NULL;
838 		u32 backup_ifindex;
839 
840 		backup_ifindex = nla_get_u32(tb[IFLA_BRPORT_BACKUP_PORT]);
841 		if (backup_ifindex) {
842 			backup_dev = __dev_get_by_index(dev_net(p->dev),
843 							backup_ifindex);
844 			if (!backup_dev)
845 				return -ENOENT;
846 		}
847 
848 		err = nbp_backup_change(p, backup_dev);
849 		if (err)
850 			return err;
851 	}
852 
853 	br_port_flags_change(p, old_flags ^ p->flags);
854 	return 0;
855 }
856 
857 /* Change state and parameters on port. */
858 int br_setlink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags,
859 	       struct netlink_ext_ack *extack)
860 {
861 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
862 	struct nlattr *tb[IFLA_BRPORT_MAX + 1];
863 	struct net_bridge_port *p;
864 	struct nlattr *protinfo;
865 	struct nlattr *afspec;
866 	bool changed = false;
867 	int err = 0;
868 
869 	protinfo = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_PROTINFO);
870 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
871 	if (!protinfo && !afspec)
872 		return 0;
873 
874 	p = br_port_get_rtnl(dev);
875 	/* We want to accept dev as bridge itself if the AF_SPEC
876 	 * is set to see if someone is setting vlan info on the bridge
877 	 */
878 	if (!p && !afspec)
879 		return -EINVAL;
880 
881 	if (p && protinfo) {
882 		if (protinfo->nla_type & NLA_F_NESTED) {
883 			err = nla_parse_nested(tb, IFLA_BRPORT_MAX, protinfo,
884 					       br_port_policy, NULL);
885 			if (err)
886 				return err;
887 
888 			spin_lock_bh(&p->br->lock);
889 			err = br_setport(p, tb);
890 			spin_unlock_bh(&p->br->lock);
891 		} else {
892 			/* Binary compatibility with old RSTP */
893 			if (nla_len(protinfo) < sizeof(u8))
894 				return -EINVAL;
895 
896 			spin_lock_bh(&p->br->lock);
897 			err = br_set_port_state(p, nla_get_u8(protinfo));
898 			spin_unlock_bh(&p->br->lock);
899 		}
900 		if (err)
901 			goto out;
902 		changed = true;
903 	}
904 
905 	if (afspec)
906 		err = br_afspec(br, p, afspec, RTM_SETLINK, &changed, extack);
907 
908 	if (changed)
909 		br_ifinfo_notify(RTM_NEWLINK, br, p);
910 out:
911 	return err;
912 }
913 
914 /* Delete port information */
915 int br_dellink(struct net_device *dev, struct nlmsghdr *nlh, u16 flags)
916 {
917 	struct net_bridge *br = (struct net_bridge *)netdev_priv(dev);
918 	struct net_bridge_port *p;
919 	struct nlattr *afspec;
920 	bool changed = false;
921 	int err = 0;
922 
923 	afspec = nlmsg_find_attr(nlh, sizeof(struct ifinfomsg), IFLA_AF_SPEC);
924 	if (!afspec)
925 		return 0;
926 
927 	p = br_port_get_rtnl(dev);
928 	/* We want to accept dev as bridge itself as well */
929 	if (!p && !(dev->priv_flags & IFF_EBRIDGE))
930 		return -EINVAL;
931 
932 	err = br_afspec(br, p, afspec, RTM_DELLINK, &changed, NULL);
933 	if (changed)
934 		/* Send RTM_NEWLINK because userspace
935 		 * expects RTM_NEWLINK for vlan dels
936 		 */
937 		br_ifinfo_notify(RTM_NEWLINK, br, p);
938 
939 	return err;
940 }
941 
942 static int br_validate(struct nlattr *tb[], struct nlattr *data[],
943 		       struct netlink_ext_ack *extack)
944 {
945 	if (tb[IFLA_ADDRESS]) {
946 		if (nla_len(tb[IFLA_ADDRESS]) != ETH_ALEN)
947 			return -EINVAL;
948 		if (!is_valid_ether_addr(nla_data(tb[IFLA_ADDRESS])))
949 			return -EADDRNOTAVAIL;
950 	}
951 
952 	if (!data)
953 		return 0;
954 
955 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
956 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
957 		switch (nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL])) {
958 		case htons(ETH_P_8021Q):
959 		case htons(ETH_P_8021AD):
960 			break;
961 		default:
962 			return -EPROTONOSUPPORT;
963 		}
964 	}
965 
966 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
967 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
968 
969 		if (defpvid >= VLAN_VID_MASK)
970 			return -EINVAL;
971 	}
972 #endif
973 
974 	return 0;
975 }
976 
977 static int br_port_slave_changelink(struct net_device *brdev,
978 				    struct net_device *dev,
979 				    struct nlattr *tb[],
980 				    struct nlattr *data[],
981 				    struct netlink_ext_ack *extack)
982 {
983 	struct net_bridge *br = netdev_priv(brdev);
984 	int ret;
985 
986 	if (!data)
987 		return 0;
988 
989 	spin_lock_bh(&br->lock);
990 	ret = br_setport(br_port_get_rtnl(dev), data);
991 	spin_unlock_bh(&br->lock);
992 
993 	return ret;
994 }
995 
996 static int br_port_fill_slave_info(struct sk_buff *skb,
997 				   const struct net_device *brdev,
998 				   const struct net_device *dev)
999 {
1000 	return br_port_fill_attrs(skb, br_port_get_rtnl(dev));
1001 }
1002 
1003 static size_t br_port_get_slave_size(const struct net_device *brdev,
1004 				     const struct net_device *dev)
1005 {
1006 	return br_port_info_size();
1007 }
1008 
1009 static const struct nla_policy br_policy[IFLA_BR_MAX + 1] = {
1010 	[IFLA_BR_FORWARD_DELAY]	= { .type = NLA_U32 },
1011 	[IFLA_BR_HELLO_TIME]	= { .type = NLA_U32 },
1012 	[IFLA_BR_MAX_AGE]	= { .type = NLA_U32 },
1013 	[IFLA_BR_AGEING_TIME] = { .type = NLA_U32 },
1014 	[IFLA_BR_STP_STATE] = { .type = NLA_U32 },
1015 	[IFLA_BR_PRIORITY] = { .type = NLA_U16 },
1016 	[IFLA_BR_VLAN_FILTERING] = { .type = NLA_U8 },
1017 	[IFLA_BR_VLAN_PROTOCOL] = { .type = NLA_U16 },
1018 	[IFLA_BR_GROUP_FWD_MASK] = { .type = NLA_U16 },
1019 	[IFLA_BR_GROUP_ADDR] = { .type = NLA_BINARY,
1020 				 .len  = ETH_ALEN },
1021 	[IFLA_BR_MCAST_ROUTER] = { .type = NLA_U8 },
1022 	[IFLA_BR_MCAST_SNOOPING] = { .type = NLA_U8 },
1023 	[IFLA_BR_MCAST_QUERY_USE_IFADDR] = { .type = NLA_U8 },
1024 	[IFLA_BR_MCAST_QUERIER] = { .type = NLA_U8 },
1025 	[IFLA_BR_MCAST_HASH_ELASTICITY] = { .type = NLA_U32 },
1026 	[IFLA_BR_MCAST_HASH_MAX] = { .type = NLA_U32 },
1027 	[IFLA_BR_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 },
1028 	[IFLA_BR_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 },
1029 	[IFLA_BR_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 },
1030 	[IFLA_BR_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 },
1031 	[IFLA_BR_MCAST_QUERIER_INTVL] = { .type = NLA_U64 },
1032 	[IFLA_BR_MCAST_QUERY_INTVL] = { .type = NLA_U64 },
1033 	[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 },
1034 	[IFLA_BR_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 },
1035 	[IFLA_BR_NF_CALL_IPTABLES] = { .type = NLA_U8 },
1036 	[IFLA_BR_NF_CALL_IP6TABLES] = { .type = NLA_U8 },
1037 	[IFLA_BR_NF_CALL_ARPTABLES] = { .type = NLA_U8 },
1038 	[IFLA_BR_VLAN_DEFAULT_PVID] = { .type = NLA_U16 },
1039 	[IFLA_BR_VLAN_STATS_ENABLED] = { .type = NLA_U8 },
1040 	[IFLA_BR_MCAST_STATS_ENABLED] = { .type = NLA_U8 },
1041 	[IFLA_BR_MCAST_IGMP_VERSION] = { .type = NLA_U8 },
1042 	[IFLA_BR_MCAST_MLD_VERSION] = { .type = NLA_U8 },
1043 	[IFLA_BR_VLAN_STATS_PER_PORT] = { .type = NLA_U8 },
1044 	[IFLA_BR_MULTI_BOOLOPT] = { .type = NLA_EXACT_LEN,
1045 				    .len = sizeof(struct br_boolopt_multi) },
1046 };
1047 
1048 static int br_changelink(struct net_device *brdev, struct nlattr *tb[],
1049 			 struct nlattr *data[],
1050 			 struct netlink_ext_ack *extack)
1051 {
1052 	struct net_bridge *br = netdev_priv(brdev);
1053 	int err;
1054 
1055 	if (!data)
1056 		return 0;
1057 
1058 	if (data[IFLA_BR_FORWARD_DELAY]) {
1059 		err = br_set_forward_delay(br, nla_get_u32(data[IFLA_BR_FORWARD_DELAY]));
1060 		if (err)
1061 			return err;
1062 	}
1063 
1064 	if (data[IFLA_BR_HELLO_TIME]) {
1065 		err = br_set_hello_time(br, nla_get_u32(data[IFLA_BR_HELLO_TIME]));
1066 		if (err)
1067 			return err;
1068 	}
1069 
1070 	if (data[IFLA_BR_MAX_AGE]) {
1071 		err = br_set_max_age(br, nla_get_u32(data[IFLA_BR_MAX_AGE]));
1072 		if (err)
1073 			return err;
1074 	}
1075 
1076 	if (data[IFLA_BR_AGEING_TIME]) {
1077 		err = br_set_ageing_time(br, nla_get_u32(data[IFLA_BR_AGEING_TIME]));
1078 		if (err)
1079 			return err;
1080 	}
1081 
1082 	if (data[IFLA_BR_STP_STATE]) {
1083 		u32 stp_enabled = nla_get_u32(data[IFLA_BR_STP_STATE]);
1084 
1085 		br_stp_set_enabled(br, stp_enabled);
1086 	}
1087 
1088 	if (data[IFLA_BR_PRIORITY]) {
1089 		u32 priority = nla_get_u16(data[IFLA_BR_PRIORITY]);
1090 
1091 		br_stp_set_bridge_priority(br, priority);
1092 	}
1093 
1094 	if (data[IFLA_BR_VLAN_FILTERING]) {
1095 		u8 vlan_filter = nla_get_u8(data[IFLA_BR_VLAN_FILTERING]);
1096 
1097 		err = __br_vlan_filter_toggle(br, vlan_filter);
1098 		if (err)
1099 			return err;
1100 	}
1101 
1102 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1103 	if (data[IFLA_BR_VLAN_PROTOCOL]) {
1104 		__be16 vlan_proto = nla_get_be16(data[IFLA_BR_VLAN_PROTOCOL]);
1105 
1106 		err = __br_vlan_set_proto(br, vlan_proto);
1107 		if (err)
1108 			return err;
1109 	}
1110 
1111 	if (data[IFLA_BR_VLAN_DEFAULT_PVID]) {
1112 		__u16 defpvid = nla_get_u16(data[IFLA_BR_VLAN_DEFAULT_PVID]);
1113 
1114 		err = __br_vlan_set_default_pvid(br, defpvid, extack);
1115 		if (err)
1116 			return err;
1117 	}
1118 
1119 	if (data[IFLA_BR_VLAN_STATS_ENABLED]) {
1120 		__u8 vlan_stats = nla_get_u8(data[IFLA_BR_VLAN_STATS_ENABLED]);
1121 
1122 		err = br_vlan_set_stats(br, vlan_stats);
1123 		if (err)
1124 			return err;
1125 	}
1126 
1127 	if (data[IFLA_BR_VLAN_STATS_PER_PORT]) {
1128 		__u8 per_port = nla_get_u8(data[IFLA_BR_VLAN_STATS_PER_PORT]);
1129 
1130 		err = br_vlan_set_stats_per_port(br, per_port);
1131 		if (err)
1132 			return err;
1133 	}
1134 #endif
1135 
1136 	if (data[IFLA_BR_GROUP_FWD_MASK]) {
1137 		u16 fwd_mask = nla_get_u16(data[IFLA_BR_GROUP_FWD_MASK]);
1138 
1139 		if (fwd_mask & BR_GROUPFWD_RESTRICTED)
1140 			return -EINVAL;
1141 		br->group_fwd_mask = fwd_mask;
1142 	}
1143 
1144 	if (data[IFLA_BR_GROUP_ADDR]) {
1145 		u8 new_addr[ETH_ALEN];
1146 
1147 		if (nla_len(data[IFLA_BR_GROUP_ADDR]) != ETH_ALEN)
1148 			return -EINVAL;
1149 		memcpy(new_addr, nla_data(data[IFLA_BR_GROUP_ADDR]), ETH_ALEN);
1150 		if (!is_link_local_ether_addr(new_addr))
1151 			return -EINVAL;
1152 		if (new_addr[5] == 1 ||		/* 802.3x Pause address */
1153 		    new_addr[5] == 2 ||		/* 802.3ad Slow protocols */
1154 		    new_addr[5] == 3)		/* 802.1X PAE address */
1155 			return -EINVAL;
1156 		spin_lock_bh(&br->lock);
1157 		memcpy(br->group_addr, new_addr, sizeof(br->group_addr));
1158 		spin_unlock_bh(&br->lock);
1159 		br_opt_toggle(br, BROPT_GROUP_ADDR_SET, true);
1160 		br_recalculate_fwd_mask(br);
1161 	}
1162 
1163 	if (data[IFLA_BR_FDB_FLUSH])
1164 		br_fdb_flush(br);
1165 
1166 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1167 	if (data[IFLA_BR_MCAST_ROUTER]) {
1168 		u8 multicast_router = nla_get_u8(data[IFLA_BR_MCAST_ROUTER]);
1169 
1170 		err = br_multicast_set_router(br, multicast_router);
1171 		if (err)
1172 			return err;
1173 	}
1174 
1175 	if (data[IFLA_BR_MCAST_SNOOPING]) {
1176 		u8 mcast_snooping = nla_get_u8(data[IFLA_BR_MCAST_SNOOPING]);
1177 
1178 		err = br_multicast_toggle(br, mcast_snooping);
1179 		if (err)
1180 			return err;
1181 	}
1182 
1183 	if (data[IFLA_BR_MCAST_QUERY_USE_IFADDR]) {
1184 		u8 val;
1185 
1186 		val = nla_get_u8(data[IFLA_BR_MCAST_QUERY_USE_IFADDR]);
1187 		br_opt_toggle(br, BROPT_MULTICAST_QUERY_USE_IFADDR, !!val);
1188 	}
1189 
1190 	if (data[IFLA_BR_MCAST_QUERIER]) {
1191 		u8 mcast_querier = nla_get_u8(data[IFLA_BR_MCAST_QUERIER]);
1192 
1193 		err = br_multicast_set_querier(br, mcast_querier);
1194 		if (err)
1195 			return err;
1196 	}
1197 
1198 	if (data[IFLA_BR_MCAST_HASH_ELASTICITY])
1199 		br_warn(br, "the hash_elasticity option has been deprecated and is always %u\n",
1200 			RHT_ELASTICITY);
1201 
1202 	if (data[IFLA_BR_MCAST_HASH_MAX])
1203 		br->hash_max = nla_get_u32(data[IFLA_BR_MCAST_HASH_MAX]);
1204 
1205 	if (data[IFLA_BR_MCAST_LAST_MEMBER_CNT]) {
1206 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_LAST_MEMBER_CNT]);
1207 
1208 		br->multicast_last_member_count = val;
1209 	}
1210 
1211 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]) {
1212 		u32 val = nla_get_u32(data[IFLA_BR_MCAST_STARTUP_QUERY_CNT]);
1213 
1214 		br->multicast_startup_query_count = val;
1215 	}
1216 
1217 	if (data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]) {
1218 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_LAST_MEMBER_INTVL]);
1219 
1220 		br->multicast_last_member_interval = clock_t_to_jiffies(val);
1221 	}
1222 
1223 	if (data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]) {
1224 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_MEMBERSHIP_INTVL]);
1225 
1226 		br->multicast_membership_interval = clock_t_to_jiffies(val);
1227 	}
1228 
1229 	if (data[IFLA_BR_MCAST_QUERIER_INTVL]) {
1230 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERIER_INTVL]);
1231 
1232 		br->multicast_querier_interval = clock_t_to_jiffies(val);
1233 	}
1234 
1235 	if (data[IFLA_BR_MCAST_QUERY_INTVL]) {
1236 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_INTVL]);
1237 
1238 		br->multicast_query_interval = clock_t_to_jiffies(val);
1239 	}
1240 
1241 	if (data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]) {
1242 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_QUERY_RESPONSE_INTVL]);
1243 
1244 		br->multicast_query_response_interval = clock_t_to_jiffies(val);
1245 	}
1246 
1247 	if (data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]) {
1248 		u64 val = nla_get_u64(data[IFLA_BR_MCAST_STARTUP_QUERY_INTVL]);
1249 
1250 		br->multicast_startup_query_interval = clock_t_to_jiffies(val);
1251 	}
1252 
1253 	if (data[IFLA_BR_MCAST_STATS_ENABLED]) {
1254 		__u8 mcast_stats;
1255 
1256 		mcast_stats = nla_get_u8(data[IFLA_BR_MCAST_STATS_ENABLED]);
1257 		br_opt_toggle(br, BROPT_MULTICAST_STATS_ENABLED, !!mcast_stats);
1258 	}
1259 
1260 	if (data[IFLA_BR_MCAST_IGMP_VERSION]) {
1261 		__u8 igmp_version;
1262 
1263 		igmp_version = nla_get_u8(data[IFLA_BR_MCAST_IGMP_VERSION]);
1264 		err = br_multicast_set_igmp_version(br, igmp_version);
1265 		if (err)
1266 			return err;
1267 	}
1268 
1269 #if IS_ENABLED(CONFIG_IPV6)
1270 	if (data[IFLA_BR_MCAST_MLD_VERSION]) {
1271 		__u8 mld_version;
1272 
1273 		mld_version = nla_get_u8(data[IFLA_BR_MCAST_MLD_VERSION]);
1274 		err = br_multicast_set_mld_version(br, mld_version);
1275 		if (err)
1276 			return err;
1277 	}
1278 #endif
1279 #endif
1280 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1281 	if (data[IFLA_BR_NF_CALL_IPTABLES]) {
1282 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IPTABLES]);
1283 
1284 		br_opt_toggle(br, BROPT_NF_CALL_IPTABLES, !!val);
1285 	}
1286 
1287 	if (data[IFLA_BR_NF_CALL_IP6TABLES]) {
1288 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_IP6TABLES]);
1289 
1290 		br_opt_toggle(br, BROPT_NF_CALL_IP6TABLES, !!val);
1291 	}
1292 
1293 	if (data[IFLA_BR_NF_CALL_ARPTABLES]) {
1294 		u8 val = nla_get_u8(data[IFLA_BR_NF_CALL_ARPTABLES]);
1295 
1296 		br_opt_toggle(br, BROPT_NF_CALL_ARPTABLES, !!val);
1297 	}
1298 #endif
1299 
1300 	if (data[IFLA_BR_MULTI_BOOLOPT]) {
1301 		struct br_boolopt_multi *bm;
1302 
1303 		bm = nla_data(data[IFLA_BR_MULTI_BOOLOPT]);
1304 		err = br_boolopt_multi_toggle(br, bm, extack);
1305 		if (err)
1306 			return err;
1307 	}
1308 
1309 	return 0;
1310 }
1311 
1312 static int br_dev_newlink(struct net *src_net, struct net_device *dev,
1313 			  struct nlattr *tb[], struct nlattr *data[],
1314 			  struct netlink_ext_ack *extack)
1315 {
1316 	struct net_bridge *br = netdev_priv(dev);
1317 	int err;
1318 
1319 	err = register_netdevice(dev);
1320 	if (err)
1321 		return err;
1322 
1323 	if (tb[IFLA_ADDRESS]) {
1324 		spin_lock_bh(&br->lock);
1325 		br_stp_change_bridge_id(br, nla_data(tb[IFLA_ADDRESS]));
1326 		spin_unlock_bh(&br->lock);
1327 	}
1328 
1329 	err = br_changelink(dev, tb, data, extack);
1330 	if (err)
1331 		br_dev_delete(dev, NULL);
1332 
1333 	return err;
1334 }
1335 
1336 static size_t br_get_size(const struct net_device *brdev)
1337 {
1338 	return nla_total_size(sizeof(u32)) +	/* IFLA_BR_FORWARD_DELAY  */
1339 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_HELLO_TIME */
1340 	       nla_total_size(sizeof(u32)) +	/* IFLA_BR_MAX_AGE */
1341 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_AGEING_TIME */
1342 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_STP_STATE */
1343 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_PRIORITY */
1344 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_FILTERING */
1345 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1346 	       nla_total_size(sizeof(__be16)) +	/* IFLA_BR_VLAN_PROTOCOL */
1347 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_VLAN_DEFAULT_PVID */
1348 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_VLAN_STATS_ENABLED */
1349 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_VLAN_STATS_PER_PORT */
1350 #endif
1351 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_GROUP_FWD_MASK */
1352 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_ROOT_ID */
1353 	       nla_total_size(sizeof(struct ifla_bridge_id)) +   /* IFLA_BR_BRIDGE_ID */
1354 	       nla_total_size(sizeof(u16)) +    /* IFLA_BR_ROOT_PORT */
1355 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_ROOT_PATH_COST */
1356 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE */
1357 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_TOPOLOGY_CHANGE_DETECTED */
1358 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_HELLO_TIMER */
1359 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TCN_TIMER */
1360 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_TOPOLOGY_CHANGE_TIMER */
1361 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_GC_TIMER */
1362 	       nla_total_size(ETH_ALEN) +       /* IFLA_BR_GROUP_ADDR */
1363 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1364 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_ROUTER */
1365 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_SNOOPING */
1366 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERY_USE_IFADDR */
1367 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_QUERIER */
1368 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_MCAST_STATS_ENABLED */
1369 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_ELASTICITY */
1370 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_HASH_MAX */
1371 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_LAST_MEMBER_CNT */
1372 	       nla_total_size(sizeof(u32)) +    /* IFLA_BR_MCAST_STARTUP_QUERY_CNT */
1373 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_LAST_MEMBER_INTVL */
1374 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_MEMBERSHIP_INTVL */
1375 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERIER_INTVL */
1376 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_INTVL */
1377 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_QUERY_RESPONSE_INTVL */
1378 	       nla_total_size_64bit(sizeof(u64)) + /* IFLA_BR_MCAST_STARTUP_QUERY_INTVL */
1379 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_IGMP_VERSION */
1380 	       nla_total_size(sizeof(u8)) +	/* IFLA_BR_MCAST_MLD_VERSION */
1381 #endif
1382 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1383 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IPTABLES */
1384 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_IP6TABLES */
1385 	       nla_total_size(sizeof(u8)) +     /* IFLA_BR_NF_CALL_ARPTABLES */
1386 #endif
1387 	       nla_total_size(sizeof(struct br_boolopt_multi)) + /* IFLA_BR_MULTI_BOOLOPT */
1388 	       0;
1389 }
1390 
1391 static int br_fill_info(struct sk_buff *skb, const struct net_device *brdev)
1392 {
1393 	struct net_bridge *br = netdev_priv(brdev);
1394 	u32 forward_delay = jiffies_to_clock_t(br->forward_delay);
1395 	u32 hello_time = jiffies_to_clock_t(br->hello_time);
1396 	u32 age_time = jiffies_to_clock_t(br->max_age);
1397 	u32 ageing_time = jiffies_to_clock_t(br->ageing_time);
1398 	u32 stp_enabled = br->stp_enabled;
1399 	u16 priority = (br->bridge_id.prio[0] << 8) | br->bridge_id.prio[1];
1400 	u8 vlan_enabled = br_vlan_enabled(br->dev);
1401 	struct br_boolopt_multi bm;
1402 	u64 clockval;
1403 
1404 	clockval = br_timer_value(&br->hello_timer);
1405 	if (nla_put_u64_64bit(skb, IFLA_BR_HELLO_TIMER, clockval, IFLA_BR_PAD))
1406 		return -EMSGSIZE;
1407 	clockval = br_timer_value(&br->tcn_timer);
1408 	if (nla_put_u64_64bit(skb, IFLA_BR_TCN_TIMER, clockval, IFLA_BR_PAD))
1409 		return -EMSGSIZE;
1410 	clockval = br_timer_value(&br->topology_change_timer);
1411 	if (nla_put_u64_64bit(skb, IFLA_BR_TOPOLOGY_CHANGE_TIMER, clockval,
1412 			      IFLA_BR_PAD))
1413 		return -EMSGSIZE;
1414 	clockval = br_timer_value(&br->gc_work.timer);
1415 	if (nla_put_u64_64bit(skb, IFLA_BR_GC_TIMER, clockval, IFLA_BR_PAD))
1416 		return -EMSGSIZE;
1417 
1418 	br_boolopt_multi_get(br, &bm);
1419 	if (nla_put_u32(skb, IFLA_BR_FORWARD_DELAY, forward_delay) ||
1420 	    nla_put_u32(skb, IFLA_BR_HELLO_TIME, hello_time) ||
1421 	    nla_put_u32(skb, IFLA_BR_MAX_AGE, age_time) ||
1422 	    nla_put_u32(skb, IFLA_BR_AGEING_TIME, ageing_time) ||
1423 	    nla_put_u32(skb, IFLA_BR_STP_STATE, stp_enabled) ||
1424 	    nla_put_u16(skb, IFLA_BR_PRIORITY, priority) ||
1425 	    nla_put_u8(skb, IFLA_BR_VLAN_FILTERING, vlan_enabled) ||
1426 	    nla_put_u16(skb, IFLA_BR_GROUP_FWD_MASK, br->group_fwd_mask) ||
1427 	    nla_put(skb, IFLA_BR_BRIDGE_ID, sizeof(struct ifla_bridge_id),
1428 		    &br->bridge_id) ||
1429 	    nla_put(skb, IFLA_BR_ROOT_ID, sizeof(struct ifla_bridge_id),
1430 		    &br->designated_root) ||
1431 	    nla_put_u16(skb, IFLA_BR_ROOT_PORT, br->root_port) ||
1432 	    nla_put_u32(skb, IFLA_BR_ROOT_PATH_COST, br->root_path_cost) ||
1433 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE, br->topology_change) ||
1434 	    nla_put_u8(skb, IFLA_BR_TOPOLOGY_CHANGE_DETECTED,
1435 		       br->topology_change_detected) ||
1436 	    nla_put(skb, IFLA_BR_GROUP_ADDR, ETH_ALEN, br->group_addr) ||
1437 	    nla_put(skb, IFLA_BR_MULTI_BOOLOPT, sizeof(bm), &bm))
1438 		return -EMSGSIZE;
1439 
1440 #ifdef CONFIG_BRIDGE_VLAN_FILTERING
1441 	if (nla_put_be16(skb, IFLA_BR_VLAN_PROTOCOL, br->vlan_proto) ||
1442 	    nla_put_u16(skb, IFLA_BR_VLAN_DEFAULT_PVID, br->default_pvid) ||
1443 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_ENABLED,
1444 		       br_opt_get(br, BROPT_VLAN_STATS_ENABLED)) ||
1445 	    nla_put_u8(skb, IFLA_BR_VLAN_STATS_PER_PORT,
1446 		       br_opt_get(br, IFLA_BR_VLAN_STATS_PER_PORT)))
1447 		return -EMSGSIZE;
1448 #endif
1449 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1450 	if (nla_put_u8(skb, IFLA_BR_MCAST_ROUTER, br->multicast_router) ||
1451 	    nla_put_u8(skb, IFLA_BR_MCAST_SNOOPING,
1452 		       br_opt_get(br, BROPT_MULTICAST_ENABLED)) ||
1453 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERY_USE_IFADDR,
1454 		       br_opt_get(br, BROPT_MULTICAST_QUERY_USE_IFADDR)) ||
1455 	    nla_put_u8(skb, IFLA_BR_MCAST_QUERIER,
1456 		       br_opt_get(br, BROPT_MULTICAST_QUERIER)) ||
1457 	    nla_put_u8(skb, IFLA_BR_MCAST_STATS_ENABLED,
1458 		       br_opt_get(br, BROPT_MULTICAST_STATS_ENABLED)) ||
1459 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_ELASTICITY, RHT_ELASTICITY) ||
1460 	    nla_put_u32(skb, IFLA_BR_MCAST_HASH_MAX, br->hash_max) ||
1461 	    nla_put_u32(skb, IFLA_BR_MCAST_LAST_MEMBER_CNT,
1462 			br->multicast_last_member_count) ||
1463 	    nla_put_u32(skb, IFLA_BR_MCAST_STARTUP_QUERY_CNT,
1464 			br->multicast_startup_query_count) ||
1465 	    nla_put_u8(skb, IFLA_BR_MCAST_IGMP_VERSION,
1466 		       br->multicast_igmp_version))
1467 		return -EMSGSIZE;
1468 #if IS_ENABLED(CONFIG_IPV6)
1469 	if (nla_put_u8(skb, IFLA_BR_MCAST_MLD_VERSION,
1470 		       br->multicast_mld_version))
1471 		return -EMSGSIZE;
1472 #endif
1473 	clockval = jiffies_to_clock_t(br->multicast_last_member_interval);
1474 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_LAST_MEMBER_INTVL, clockval,
1475 			      IFLA_BR_PAD))
1476 		return -EMSGSIZE;
1477 	clockval = jiffies_to_clock_t(br->multicast_membership_interval);
1478 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_MEMBERSHIP_INTVL, clockval,
1479 			      IFLA_BR_PAD))
1480 		return -EMSGSIZE;
1481 	clockval = jiffies_to_clock_t(br->multicast_querier_interval);
1482 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERIER_INTVL, clockval,
1483 			      IFLA_BR_PAD))
1484 		return -EMSGSIZE;
1485 	clockval = jiffies_to_clock_t(br->multicast_query_interval);
1486 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_INTVL, clockval,
1487 			      IFLA_BR_PAD))
1488 		return -EMSGSIZE;
1489 	clockval = jiffies_to_clock_t(br->multicast_query_response_interval);
1490 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_QUERY_RESPONSE_INTVL, clockval,
1491 			      IFLA_BR_PAD))
1492 		return -EMSGSIZE;
1493 	clockval = jiffies_to_clock_t(br->multicast_startup_query_interval);
1494 	if (nla_put_u64_64bit(skb, IFLA_BR_MCAST_STARTUP_QUERY_INTVL, clockval,
1495 			      IFLA_BR_PAD))
1496 		return -EMSGSIZE;
1497 #endif
1498 #if IS_ENABLED(CONFIG_BRIDGE_NETFILTER)
1499 	if (nla_put_u8(skb, IFLA_BR_NF_CALL_IPTABLES,
1500 		       br_opt_get(br, BROPT_NF_CALL_IPTABLES) ? 1 : 0) ||
1501 	    nla_put_u8(skb, IFLA_BR_NF_CALL_IP6TABLES,
1502 		       br_opt_get(br, BROPT_NF_CALL_IP6TABLES) ? 1 : 0) ||
1503 	    nla_put_u8(skb, IFLA_BR_NF_CALL_ARPTABLES,
1504 		       br_opt_get(br, BROPT_NF_CALL_ARPTABLES) ? 1 : 0))
1505 		return -EMSGSIZE;
1506 #endif
1507 
1508 	return 0;
1509 }
1510 
1511 static size_t br_get_linkxstats_size(const struct net_device *dev, int attr)
1512 {
1513 	struct net_bridge_port *p = NULL;
1514 	struct net_bridge_vlan_group *vg;
1515 	struct net_bridge_vlan *v;
1516 	struct net_bridge *br;
1517 	int numvls = 0;
1518 
1519 	switch (attr) {
1520 	case IFLA_STATS_LINK_XSTATS:
1521 		br = netdev_priv(dev);
1522 		vg = br_vlan_group(br);
1523 		break;
1524 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1525 		p = br_port_get_rtnl(dev);
1526 		if (!p)
1527 			return 0;
1528 		br = p->br;
1529 		vg = nbp_vlan_group(p);
1530 		break;
1531 	default:
1532 		return 0;
1533 	}
1534 
1535 	if (vg) {
1536 		/* we need to count all, even placeholder entries */
1537 		list_for_each_entry(v, &vg->vlan_list, vlist)
1538 			numvls++;
1539 	}
1540 
1541 	return numvls * nla_total_size(sizeof(struct bridge_vlan_xstats)) +
1542 	       nla_total_size(sizeof(struct br_mcast_stats)) +
1543 	       nla_total_size(0);
1544 }
1545 
1546 static int br_fill_linkxstats(struct sk_buff *skb,
1547 			      const struct net_device *dev,
1548 			      int *prividx, int attr)
1549 {
1550 	struct nlattr *nla __maybe_unused;
1551 	struct net_bridge_port *p = NULL;
1552 	struct net_bridge_vlan_group *vg;
1553 	struct net_bridge_vlan *v;
1554 	struct net_bridge *br;
1555 	struct nlattr *nest;
1556 	int vl_idx = 0;
1557 
1558 	switch (attr) {
1559 	case IFLA_STATS_LINK_XSTATS:
1560 		br = netdev_priv(dev);
1561 		vg = br_vlan_group(br);
1562 		break;
1563 	case IFLA_STATS_LINK_XSTATS_SLAVE:
1564 		p = br_port_get_rtnl(dev);
1565 		if (!p)
1566 			return 0;
1567 		br = p->br;
1568 		vg = nbp_vlan_group(p);
1569 		break;
1570 	default:
1571 		return -EINVAL;
1572 	}
1573 
1574 	nest = nla_nest_start(skb, LINK_XSTATS_TYPE_BRIDGE);
1575 	if (!nest)
1576 		return -EMSGSIZE;
1577 
1578 	if (vg) {
1579 		u16 pvid;
1580 
1581 		pvid = br_get_pvid(vg);
1582 		list_for_each_entry(v, &vg->vlan_list, vlist) {
1583 			struct bridge_vlan_xstats vxi;
1584 			struct br_vlan_stats stats;
1585 
1586 			if (++vl_idx < *prividx)
1587 				continue;
1588 			memset(&vxi, 0, sizeof(vxi));
1589 			vxi.vid = v->vid;
1590 			vxi.flags = v->flags;
1591 			if (v->vid == pvid)
1592 				vxi.flags |= BRIDGE_VLAN_INFO_PVID;
1593 			br_vlan_get_stats(v, &stats);
1594 			vxi.rx_bytes = stats.rx_bytes;
1595 			vxi.rx_packets = stats.rx_packets;
1596 			vxi.tx_bytes = stats.tx_bytes;
1597 			vxi.tx_packets = stats.tx_packets;
1598 
1599 			if (nla_put(skb, BRIDGE_XSTATS_VLAN, sizeof(vxi), &vxi))
1600 				goto nla_put_failure;
1601 		}
1602 	}
1603 
1604 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING
1605 	if (++vl_idx >= *prividx) {
1606 		nla = nla_reserve_64bit(skb, BRIDGE_XSTATS_MCAST,
1607 					sizeof(struct br_mcast_stats),
1608 					BRIDGE_XSTATS_PAD);
1609 		if (!nla)
1610 			goto nla_put_failure;
1611 		br_multicast_get_stats(br, p, nla_data(nla));
1612 	}
1613 #endif
1614 	nla_nest_end(skb, nest);
1615 	*prividx = 0;
1616 
1617 	return 0;
1618 
1619 nla_put_failure:
1620 	nla_nest_end(skb, nest);
1621 	*prividx = vl_idx;
1622 
1623 	return -EMSGSIZE;
1624 }
1625 
1626 static struct rtnl_af_ops br_af_ops __read_mostly = {
1627 	.family			= AF_BRIDGE,
1628 	.get_link_af_size	= br_get_link_af_size_filtered,
1629 };
1630 
1631 struct rtnl_link_ops br_link_ops __read_mostly = {
1632 	.kind			= "bridge",
1633 	.priv_size		= sizeof(struct net_bridge),
1634 	.setup			= br_dev_setup,
1635 	.maxtype		= IFLA_BR_MAX,
1636 	.policy			= br_policy,
1637 	.validate		= br_validate,
1638 	.newlink		= br_dev_newlink,
1639 	.changelink		= br_changelink,
1640 	.dellink		= br_dev_delete,
1641 	.get_size		= br_get_size,
1642 	.fill_info		= br_fill_info,
1643 	.fill_linkxstats	= br_fill_linkxstats,
1644 	.get_linkxstats_size	= br_get_linkxstats_size,
1645 
1646 	.slave_maxtype		= IFLA_BRPORT_MAX,
1647 	.slave_policy		= br_port_policy,
1648 	.slave_changelink	= br_port_slave_changelink,
1649 	.get_slave_size		= br_port_get_slave_size,
1650 	.fill_slave_info	= br_port_fill_slave_info,
1651 };
1652 
1653 int __init br_netlink_init(void)
1654 {
1655 	int err;
1656 
1657 	br_mdb_init();
1658 	rtnl_af_register(&br_af_ops);
1659 
1660 	err = rtnl_link_register(&br_link_ops);
1661 	if (err)
1662 		goto out_af;
1663 
1664 	return 0;
1665 
1666 out_af:
1667 	rtnl_af_unregister(&br_af_ops);
1668 	br_mdb_uninit();
1669 	return err;
1670 }
1671 
1672 void br_netlink_fini(void)
1673 {
1674 	br_mdb_uninit();
1675 	rtnl_af_unregister(&br_af_ops);
1676 	rtnl_link_unregister(&br_link_ops);
1677 }
1678