1 // SPDX-License-Identifier: GPL-2.0-only 2 // Copyright (c) 2020, Nikolay Aleksandrov <nikolay@cumulusnetworks.com> 3 #include <linux/kernel.h> 4 #include <linux/netdevice.h> 5 #include <linux/rtnetlink.h> 6 #include <linux/slab.h> 7 #include <net/ip_tunnels.h> 8 9 #include "br_private.h" 10 #include "br_private_tunnel.h" 11 12 static bool __vlan_tun_put(struct sk_buff *skb, const struct net_bridge_vlan *v) 13 { 14 __be32 tid = tunnel_id_to_key32(v->tinfo.tunnel_id); 15 struct nlattr *nest; 16 17 if (!v->tinfo.tunnel_dst) 18 return true; 19 20 nest = nla_nest_start(skb, BRIDGE_VLANDB_ENTRY_TUNNEL_INFO); 21 if (!nest) 22 return false; 23 if (nla_put_u32(skb, BRIDGE_VLANDB_TINFO_ID, be32_to_cpu(tid))) { 24 nla_nest_cancel(skb, nest); 25 return false; 26 } 27 nla_nest_end(skb, nest); 28 29 return true; 30 } 31 32 static bool __vlan_tun_can_enter_range(const struct net_bridge_vlan *v_curr, 33 const struct net_bridge_vlan *range_end) 34 { 35 return (!v_curr->tinfo.tunnel_dst && !range_end->tinfo.tunnel_dst) || 36 vlan_tunid_inrange(v_curr, range_end); 37 } 38 39 /* check if the options' state of v_curr allow it to enter the range */ 40 bool br_vlan_opts_eq_range(const struct net_bridge_vlan *v_curr, 41 const struct net_bridge_vlan *range_end) 42 { 43 return v_curr->state == range_end->state && 44 __vlan_tun_can_enter_range(v_curr, range_end); 45 } 46 47 bool br_vlan_opts_fill(struct sk_buff *skb, const struct net_bridge_vlan *v) 48 { 49 return !nla_put_u8(skb, BRIDGE_VLANDB_ENTRY_STATE, 50 br_vlan_get_state(v)) && 51 __vlan_tun_put(skb, v); 52 } 53 54 size_t br_vlan_opts_nl_size(void) 55 { 56 return nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_ENTRY_STATE */ 57 + nla_total_size(0) /* BRIDGE_VLANDB_ENTRY_TUNNEL_INFO */ 58 + nla_total_size(sizeof(u32)); /* BRIDGE_VLANDB_TINFO_ID */ 59 } 60 61 static int br_vlan_modify_state(struct net_bridge_vlan_group *vg, 62 struct net_bridge_vlan *v, 63 u8 state, 64 bool *changed, 65 struct netlink_ext_ack *extack) 66 { 67 struct net_bridge *br; 68 69 ASSERT_RTNL(); 70 71 if (state > BR_STATE_BLOCKING) { 72 NL_SET_ERR_MSG_MOD(extack, "Invalid vlan state"); 73 return -EINVAL; 74 } 75 76 if (br_vlan_is_brentry(v)) 77 br = v->br; 78 else 79 br = v->port->br; 80 81 if (br->stp_enabled == BR_KERNEL_STP) { 82 NL_SET_ERR_MSG_MOD(extack, "Can't modify vlan state when using kernel STP"); 83 return -EBUSY; 84 } 85 86 if (v->state == state) 87 return 0; 88 89 if (v->vid == br_get_pvid(vg)) 90 br_vlan_set_pvid_state(vg, state); 91 92 br_vlan_set_state(v, state); 93 *changed = true; 94 95 return 0; 96 } 97 98 static const struct nla_policy br_vlandb_tinfo_pol[BRIDGE_VLANDB_TINFO_MAX + 1] = { 99 [BRIDGE_VLANDB_TINFO_ID] = { .type = NLA_U32 }, 100 [BRIDGE_VLANDB_TINFO_CMD] = { .type = NLA_U32 }, 101 }; 102 103 static int br_vlan_modify_tunnel(const struct net_bridge_port *p, 104 struct net_bridge_vlan *v, 105 struct nlattr **tb, 106 bool *changed, 107 struct netlink_ext_ack *extack) 108 { 109 struct nlattr *tun_tb[BRIDGE_VLANDB_TINFO_MAX + 1], *attr; 110 struct bridge_vlan_info *vinfo; 111 u32 tun_id = 0; 112 int cmd, err; 113 114 if (!p) { 115 NL_SET_ERR_MSG_MOD(extack, "Can't modify tunnel mapping of non-port vlans"); 116 return -EINVAL; 117 } 118 if (!(p->flags & BR_VLAN_TUNNEL)) { 119 NL_SET_ERR_MSG_MOD(extack, "Port doesn't have tunnel flag set"); 120 return -EINVAL; 121 } 122 123 attr = tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO]; 124 err = nla_parse_nested(tun_tb, BRIDGE_VLANDB_TINFO_MAX, attr, 125 br_vlandb_tinfo_pol, extack); 126 if (err) 127 return err; 128 129 if (!tun_tb[BRIDGE_VLANDB_TINFO_CMD]) { 130 NL_SET_ERR_MSG_MOD(extack, "Missing tunnel command attribute"); 131 return -ENOENT; 132 } 133 cmd = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_CMD]); 134 switch (cmd) { 135 case RTM_SETLINK: 136 if (!tun_tb[BRIDGE_VLANDB_TINFO_ID]) { 137 NL_SET_ERR_MSG_MOD(extack, "Missing tunnel id attribute"); 138 return -ENOENT; 139 } 140 /* when working on vlan ranges this is the starting tunnel id */ 141 tun_id = nla_get_u32(tun_tb[BRIDGE_VLANDB_TINFO_ID]); 142 /* vlan info attr is guaranteed by br_vlan_rtm_process_one */ 143 vinfo = nla_data(tb[BRIDGE_VLANDB_ENTRY_INFO]); 144 /* tunnel ids are mapped to each vlan in increasing order, 145 * the starting vlan is in BRIDGE_VLANDB_ENTRY_INFO and v is the 146 * current vlan, so we compute: tun_id + v - vinfo->vid 147 */ 148 tun_id += v->vid - vinfo->vid; 149 break; 150 case RTM_DELLINK: 151 break; 152 default: 153 NL_SET_ERR_MSG_MOD(extack, "Unsupported tunnel command"); 154 return -EINVAL; 155 } 156 157 return br_vlan_tunnel_info(p, cmd, v->vid, tun_id, changed); 158 } 159 160 static int br_vlan_process_one_opts(const struct net_bridge *br, 161 const struct net_bridge_port *p, 162 struct net_bridge_vlan_group *vg, 163 struct net_bridge_vlan *v, 164 struct nlattr **tb, 165 bool *changed, 166 struct netlink_ext_ack *extack) 167 { 168 int err; 169 170 *changed = false; 171 if (tb[BRIDGE_VLANDB_ENTRY_STATE]) { 172 u8 state = nla_get_u8(tb[BRIDGE_VLANDB_ENTRY_STATE]); 173 174 err = br_vlan_modify_state(vg, v, state, changed, extack); 175 if (err) 176 return err; 177 } 178 if (tb[BRIDGE_VLANDB_ENTRY_TUNNEL_INFO]) { 179 err = br_vlan_modify_tunnel(p, v, tb, changed, extack); 180 if (err) 181 return err; 182 } 183 184 return 0; 185 } 186 187 int br_vlan_process_options(const struct net_bridge *br, 188 const struct net_bridge_port *p, 189 struct net_bridge_vlan *range_start, 190 struct net_bridge_vlan *range_end, 191 struct nlattr **tb, 192 struct netlink_ext_ack *extack) 193 { 194 struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL; 195 struct net_bridge_vlan_group *vg; 196 int vid, err = 0; 197 u16 pvid; 198 199 if (p) 200 vg = nbp_vlan_group(p); 201 else 202 vg = br_vlan_group(br); 203 204 if (!range_start || !br_vlan_should_use(range_start)) { 205 NL_SET_ERR_MSG_MOD(extack, "Vlan range start doesn't exist, can't process options"); 206 return -ENOENT; 207 } 208 if (!range_end || !br_vlan_should_use(range_end)) { 209 NL_SET_ERR_MSG_MOD(extack, "Vlan range end doesn't exist, can't process options"); 210 return -ENOENT; 211 } 212 213 pvid = br_get_pvid(vg); 214 for (vid = range_start->vid; vid <= range_end->vid; vid++) { 215 bool changed = false; 216 217 v = br_vlan_find(vg, vid); 218 if (!v || !br_vlan_should_use(v)) { 219 NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process options"); 220 err = -ENOENT; 221 break; 222 } 223 224 err = br_vlan_process_one_opts(br, p, vg, v, tb, &changed, 225 extack); 226 if (err) 227 break; 228 229 if (changed) { 230 /* vlan options changed, check for range */ 231 if (!curr_start) { 232 curr_start = v; 233 curr_end = v; 234 continue; 235 } 236 237 if (v->vid == pvid || 238 !br_vlan_can_enter_range(v, curr_end)) { 239 br_vlan_notify(br, p, curr_start->vid, 240 curr_end->vid, RTM_NEWVLAN); 241 curr_start = v; 242 } 243 curr_end = v; 244 } else { 245 /* nothing changed and nothing to notify yet */ 246 if (!curr_start) 247 continue; 248 249 br_vlan_notify(br, p, curr_start->vid, curr_end->vid, 250 RTM_NEWVLAN); 251 curr_start = NULL; 252 curr_end = NULL; 253 } 254 } 255 if (curr_start) 256 br_vlan_notify(br, p, curr_start->vid, curr_end->vid, 257 RTM_NEWVLAN); 258 259 return err; 260 } 261 262 bool br_vlan_global_opts_can_enter_range(const struct net_bridge_vlan *v_curr, 263 const struct net_bridge_vlan *r_end) 264 { 265 return v_curr->vid - r_end->vid == 1 && 266 ((v_curr->priv_flags ^ r_end->priv_flags) & 267 BR_VLFLAG_GLOBAL_MCAST_ENABLED) == 0 && 268 br_multicast_ctx_options_equal(&v_curr->br_mcast_ctx, 269 &r_end->br_mcast_ctx); 270 } 271 272 bool br_vlan_global_opts_fill(struct sk_buff *skb, u16 vid, u16 vid_range, 273 const struct net_bridge_vlan *v_opts) 274 { 275 struct nlattr *nest2 __maybe_unused; 276 u64 clockval __maybe_unused; 277 struct nlattr *nest; 278 279 nest = nla_nest_start(skb, BRIDGE_VLANDB_GLOBAL_OPTIONS); 280 if (!nest) 281 return false; 282 283 if (nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_ID, vid)) 284 goto out_err; 285 286 if (vid_range && vid < vid_range && 287 nla_put_u16(skb, BRIDGE_VLANDB_GOPTS_RANGE, vid_range)) 288 goto out_err; 289 290 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 291 if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING, 292 !!(v_opts->priv_flags & BR_VLFLAG_GLOBAL_MCAST_ENABLED)) || 293 nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION, 294 v_opts->br_mcast_ctx.multicast_igmp_version) || 295 nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT, 296 v_opts->br_mcast_ctx.multicast_last_member_count) || 297 nla_put_u32(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT, 298 v_opts->br_mcast_ctx.multicast_startup_query_count) || 299 nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER, 300 v_opts->br_mcast_ctx.multicast_querier) || 301 nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_ROUTER, 302 v_opts->br_mcast_ctx.multicast_router) || 303 br_multicast_dump_querier_state(skb, &v_opts->br_mcast_ctx, 304 BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_STATE)) 305 goto out_err; 306 307 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_last_member_interval); 308 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL, 309 clockval, BRIDGE_VLANDB_GOPTS_PAD)) 310 goto out_err; 311 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_membership_interval); 312 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL, 313 clockval, BRIDGE_VLANDB_GOPTS_PAD)) 314 goto out_err; 315 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_querier_interval); 316 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL, 317 clockval, BRIDGE_VLANDB_GOPTS_PAD)) 318 goto out_err; 319 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_interval); 320 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL, 321 clockval, BRIDGE_VLANDB_GOPTS_PAD)) 322 goto out_err; 323 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_query_response_interval); 324 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL, 325 clockval, BRIDGE_VLANDB_GOPTS_PAD)) 326 goto out_err; 327 clockval = jiffies_to_clock_t(v_opts->br_mcast_ctx.multicast_startup_query_interval); 328 if (nla_put_u64_64bit(skb, BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL, 329 clockval, BRIDGE_VLANDB_GOPTS_PAD)) 330 goto out_err; 331 332 if (br_rports_have_mc_router(&v_opts->br_mcast_ctx)) { 333 nest2 = nla_nest_start(skb, 334 BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS); 335 if (!nest2) 336 goto out_err; 337 338 rcu_read_lock(); 339 if (br_rports_fill_info(skb, &v_opts->br_mcast_ctx)) { 340 rcu_read_unlock(); 341 nla_nest_cancel(skb, nest2); 342 goto out_err; 343 } 344 rcu_read_unlock(); 345 346 nla_nest_end(skb, nest2); 347 } 348 349 #if IS_ENABLED(CONFIG_IPV6) 350 if (nla_put_u8(skb, BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION, 351 v_opts->br_mcast_ctx.multicast_mld_version)) 352 goto out_err; 353 #endif 354 #endif 355 356 nla_nest_end(skb, nest); 357 358 return true; 359 360 out_err: 361 nla_nest_cancel(skb, nest); 362 return false; 363 } 364 365 static size_t rtnl_vlan_global_opts_nlmsg_size(const struct net_bridge_vlan *v) 366 { 367 return NLMSG_ALIGN(sizeof(struct br_vlan_msg)) 368 + nla_total_size(0) /* BRIDGE_VLANDB_GLOBAL_OPTIONS */ 369 + nla_total_size(sizeof(u16)) /* BRIDGE_VLANDB_GOPTS_ID */ 370 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 371 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING */ 372 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION */ 373 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION */ 374 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT */ 375 + nla_total_size(sizeof(u32)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT */ 376 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL */ 377 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL */ 378 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL */ 379 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL */ 380 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL */ 381 + nla_total_size(sizeof(u64)) /* BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL */ 382 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER */ 383 + nla_total_size(sizeof(u8)) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER */ 384 + br_multicast_querier_state_size() /* BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_STATE */ 385 + nla_total_size(0) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS */ 386 + br_rports_size(&v->br_mcast_ctx) /* BRIDGE_VLANDB_GOPTS_MCAST_ROUTER_PORTS */ 387 #endif 388 + nla_total_size(sizeof(u16)); /* BRIDGE_VLANDB_GOPTS_RANGE */ 389 } 390 391 static void br_vlan_global_opts_notify(const struct net_bridge *br, 392 u16 vid, u16 vid_range) 393 { 394 struct net_bridge_vlan *v; 395 struct br_vlan_msg *bvm; 396 struct nlmsghdr *nlh; 397 struct sk_buff *skb; 398 int err = -ENOBUFS; 399 400 /* right now notifications are done only with rtnl held */ 401 ASSERT_RTNL(); 402 403 /* need to find the vlan due to flags/options */ 404 v = br_vlan_find(br_vlan_group(br), vid); 405 if (!v) 406 return; 407 408 skb = nlmsg_new(rtnl_vlan_global_opts_nlmsg_size(v), GFP_KERNEL); 409 if (!skb) 410 goto out_err; 411 412 err = -EMSGSIZE; 413 nlh = nlmsg_put(skb, 0, 0, RTM_NEWVLAN, sizeof(*bvm), 0); 414 if (!nlh) 415 goto out_err; 416 bvm = nlmsg_data(nlh); 417 memset(bvm, 0, sizeof(*bvm)); 418 bvm->family = AF_BRIDGE; 419 bvm->ifindex = br->dev->ifindex; 420 421 if (!br_vlan_global_opts_fill(skb, vid, vid_range, v)) 422 goto out_err; 423 424 nlmsg_end(skb, nlh); 425 rtnl_notify(skb, dev_net(br->dev), 0, RTNLGRP_BRVLAN, NULL, GFP_KERNEL); 426 return; 427 428 out_err: 429 rtnl_set_sk_err(dev_net(br->dev), RTNLGRP_BRVLAN, err); 430 kfree_skb(skb); 431 } 432 433 static int br_vlan_process_global_one_opts(const struct net_bridge *br, 434 struct net_bridge_vlan_group *vg, 435 struct net_bridge_vlan *v, 436 struct nlattr **tb, 437 bool *changed, 438 struct netlink_ext_ack *extack) 439 { 440 int err __maybe_unused; 441 442 *changed = false; 443 #ifdef CONFIG_BRIDGE_IGMP_SNOOPING 444 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]) { 445 u8 mc_snooping; 446 447 mc_snooping = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING]); 448 if (br_multicast_toggle_global_vlan(v, !!mc_snooping)) 449 *changed = true; 450 } 451 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]) { 452 u8 ver; 453 454 ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION]); 455 err = br_multicast_set_igmp_version(&v->br_mcast_ctx, ver); 456 if (err) 457 return err; 458 *changed = true; 459 } 460 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]) { 461 u32 cnt; 462 463 cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT]); 464 v->br_mcast_ctx.multicast_last_member_count = cnt; 465 *changed = true; 466 } 467 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]) { 468 u32 cnt; 469 470 cnt = nla_get_u32(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT]); 471 v->br_mcast_ctx.multicast_startup_query_count = cnt; 472 *changed = true; 473 } 474 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]) { 475 u64 val; 476 477 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL]); 478 v->br_mcast_ctx.multicast_last_member_interval = clock_t_to_jiffies(val); 479 *changed = true; 480 } 481 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]) { 482 u64 val; 483 484 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL]); 485 v->br_mcast_ctx.multicast_membership_interval = clock_t_to_jiffies(val); 486 *changed = true; 487 } 488 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]) { 489 u64 val; 490 491 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL]); 492 v->br_mcast_ctx.multicast_querier_interval = clock_t_to_jiffies(val); 493 *changed = true; 494 } 495 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]) { 496 u64 val; 497 498 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL]); 499 v->br_mcast_ctx.multicast_query_interval = clock_t_to_jiffies(val); 500 *changed = true; 501 } 502 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL]) { 503 u64 val; 504 505 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL]); 506 v->br_mcast_ctx.multicast_query_response_interval = clock_t_to_jiffies(val); 507 *changed = true; 508 } 509 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL]) { 510 u64 val; 511 512 val = nla_get_u64(tb[BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL]); 513 v->br_mcast_ctx.multicast_startup_query_interval = clock_t_to_jiffies(val); 514 *changed = true; 515 } 516 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER]) { 517 u8 val; 518 519 val = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_QUERIER]); 520 err = br_multicast_set_querier(&v->br_mcast_ctx, val); 521 if (err) 522 return err; 523 *changed = true; 524 } 525 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_ROUTER]) { 526 u8 val; 527 528 val = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_ROUTER]); 529 err = br_multicast_set_router(&v->br_mcast_ctx, val); 530 if (err) 531 return err; 532 *changed = true; 533 } 534 #if IS_ENABLED(CONFIG_IPV6) 535 if (tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]) { 536 u8 ver; 537 538 ver = nla_get_u8(tb[BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION]); 539 err = br_multicast_set_mld_version(&v->br_mcast_ctx, ver); 540 if (err) 541 return err; 542 *changed = true; 543 } 544 #endif 545 #endif 546 547 return 0; 548 } 549 550 static const struct nla_policy br_vlan_db_gpol[BRIDGE_VLANDB_GOPTS_MAX + 1] = { 551 [BRIDGE_VLANDB_GOPTS_ID] = { .type = NLA_U16 }, 552 [BRIDGE_VLANDB_GOPTS_RANGE] = { .type = NLA_U16 }, 553 [BRIDGE_VLANDB_GOPTS_MCAST_SNOOPING] = { .type = NLA_U8 }, 554 [BRIDGE_VLANDB_GOPTS_MCAST_MLD_VERSION] = { .type = NLA_U8 }, 555 [BRIDGE_VLANDB_GOPTS_MCAST_QUERY_INTVL] = { .type = NLA_U64 }, 556 [BRIDGE_VLANDB_GOPTS_MCAST_QUERIER] = { .type = NLA_U8 }, 557 [BRIDGE_VLANDB_GOPTS_MCAST_ROUTER] = { .type = NLA_U8 }, 558 [BRIDGE_VLANDB_GOPTS_MCAST_IGMP_VERSION] = { .type = NLA_U8 }, 559 [BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_CNT] = { .type = NLA_U32 }, 560 [BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_CNT] = { .type = NLA_U32 }, 561 [BRIDGE_VLANDB_GOPTS_MCAST_LAST_MEMBER_INTVL] = { .type = NLA_U64 }, 562 [BRIDGE_VLANDB_GOPTS_MCAST_MEMBERSHIP_INTVL] = { .type = NLA_U64 }, 563 [BRIDGE_VLANDB_GOPTS_MCAST_QUERIER_INTVL] = { .type = NLA_U64 }, 564 [BRIDGE_VLANDB_GOPTS_MCAST_STARTUP_QUERY_INTVL] = { .type = NLA_U64 }, 565 [BRIDGE_VLANDB_GOPTS_MCAST_QUERY_RESPONSE_INTVL] = { .type = NLA_U64 }, 566 }; 567 568 int br_vlan_rtm_process_global_options(struct net_device *dev, 569 const struct nlattr *attr, 570 int cmd, 571 struct netlink_ext_ack *extack) 572 { 573 struct net_bridge_vlan *v, *curr_start = NULL, *curr_end = NULL; 574 struct nlattr *tb[BRIDGE_VLANDB_GOPTS_MAX + 1]; 575 struct net_bridge_vlan_group *vg; 576 u16 vid, vid_range = 0; 577 struct net_bridge *br; 578 int err = 0; 579 580 if (cmd != RTM_NEWVLAN) { 581 NL_SET_ERR_MSG_MOD(extack, "Global vlan options support only set operation"); 582 return -EINVAL; 583 } 584 if (!netif_is_bridge_master(dev)) { 585 NL_SET_ERR_MSG_MOD(extack, "Global vlan options can only be set on bridge device"); 586 return -EINVAL; 587 } 588 br = netdev_priv(dev); 589 vg = br_vlan_group(br); 590 if (WARN_ON(!vg)) 591 return -ENODEV; 592 593 err = nla_parse_nested(tb, BRIDGE_VLANDB_GOPTS_MAX, attr, 594 br_vlan_db_gpol, extack); 595 if (err) 596 return err; 597 598 if (!tb[BRIDGE_VLANDB_GOPTS_ID]) { 599 NL_SET_ERR_MSG_MOD(extack, "Missing vlan entry id"); 600 return -EINVAL; 601 } 602 vid = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_ID]); 603 if (!br_vlan_valid_id(vid, extack)) 604 return -EINVAL; 605 606 if (tb[BRIDGE_VLANDB_GOPTS_RANGE]) { 607 vid_range = nla_get_u16(tb[BRIDGE_VLANDB_GOPTS_RANGE]); 608 if (!br_vlan_valid_id(vid_range, extack)) 609 return -EINVAL; 610 if (vid >= vid_range) { 611 NL_SET_ERR_MSG_MOD(extack, "End vlan id is less than or equal to start vlan id"); 612 return -EINVAL; 613 } 614 } else { 615 vid_range = vid; 616 } 617 618 for (; vid <= vid_range; vid++) { 619 bool changed = false; 620 621 v = br_vlan_find(vg, vid); 622 if (!v) { 623 NL_SET_ERR_MSG_MOD(extack, "Vlan in range doesn't exist, can't process global options"); 624 err = -ENOENT; 625 break; 626 } 627 628 err = br_vlan_process_global_one_opts(br, vg, v, tb, &changed, 629 extack); 630 if (err) 631 break; 632 633 if (changed) { 634 /* vlan options changed, check for range */ 635 if (!curr_start) { 636 curr_start = v; 637 curr_end = v; 638 continue; 639 } 640 641 if (!br_vlan_global_opts_can_enter_range(v, curr_end)) { 642 br_vlan_global_opts_notify(br, curr_start->vid, 643 curr_end->vid); 644 curr_start = v; 645 } 646 curr_end = v; 647 } else { 648 /* nothing changed and nothing to notify yet */ 649 if (!curr_start) 650 continue; 651 652 br_vlan_global_opts_notify(br, curr_start->vid, 653 curr_end->vid); 654 curr_start = NULL; 655 curr_end = NULL; 656 } 657 } 658 if (curr_start) 659 br_vlan_global_opts_notify(br, curr_start->vid, curr_end->vid); 660 661 return err; 662 } 663