123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197119811991200120112021203120412051206120712081209121012111212121312141215121612171218121912201221122212231224122512261227122812291230123112321233123412351236123712381239124012411242124312441245124612471248124912501251125212531254125512561257125812591260126112621263126412651266126712681269127012711272127312741275127612771278127912801281128212831284128512861287128812891290129112921293129412951296129712981299130013011302130313041305130613071308130913101311131213131314131513161317131813191320132113221323132413251326132713281329133013311332133313341335133613371338133913401341134213431344134513461347134813491350135113521353135413551356135713581359136013611362136313641365136613671368136913701371137213731374137513761377137813791380138113821383138413851386138713881389139013911392139313941395139613971398139914001401140214031404140514061407140814091410141114121413141414151416141714181419142014211422142314241425142614271428142914301431143214331434143514361437143814391440144114421443144414451446144714481449145014511452145314541455145614571458145914601461146214631464146514661467146814691470147114721473147414751476147714781479148014811482148314841485148614871488148914901491149214931494149514961497149814991500150115021503150415051506150715081509151015111512151315141515151615171518151915201521152215231524152515261527152815291530153115321533153415351536153715381539154015411542154315441545154615471548154915501551155215531554155515561557155815591560156115621563156415651566156715681569157015711572157315741575157615771578157915801581158215831584158515861587158815891590159115921593159415951596159715981599160016011602160316041605160616071608160916101611161216131614161516161617161816191620162116221623162416251626162716281629163016311632163316341635163616371638163916401641164216431644164516461647164816491650165116521653165416551656165716581659166016611662166316641665166616671668166916701671167216731674167516761677167816791680168116821683168416851686168716881689169016911692169316941695169616971698169917001701170217031704170517061707170817091710171117121713171417151716171717181719172017211722172317241725172617271728172917301731173217331734173517361737173817391740174117421743174417451746174717481749175017511752175317541755175617571758175917601761176217631764176517661767176817691770177117721773177417751776177717781779178017811782178317841785178617871788178917901791179217931794179517961797179817991800180118021803180418051806180718081809181018111812181318141815181618171818181918201821182218231824182518261827182818291830183118321833183418351836183718381839184018411842184318441845184618471848184918501851185218531854185518561857185818591860186118621863186418651866186718681869187018711872187318741875187618771878187918801881188218831884188518861887188818891890189118921893189418951896189718981899190019011902190319041905190619071908190919101911191219131914191519161917191819191920192119221923192419251926192719281929193019311932193319341935193619371938193919401941194219431944194519461947194819491950195119521953195419551956195719581959196019611962196319641965196619671968196919701971197219731974197519761977197819791980198119821983198419851986198719881989199019911992199319941995199619971998199920002001200220032004200520062007200820092010201120122013201420152016201720182019202020212022202320242025202620272028202920302031203220332034203520362037203820392040204120422043204420452046204720482049205020512052205320542055205620572058205920602061206220632064206520662067206820692070207120722073207420752076207720782079208020812082208320842085208620872088208920902091209220932094209520962097209820992100210121022103210421052106210721082109211021112112211321142115211621172118211921202121212221232124212521262127212821292130213121322133213421352136213721382139214021412142214321442145214621472148214921502151215221532154215521562157215821592160216121622163216421652166216721682169217021712172217321742175217621772178217921802181218221832184218521862187218821892190219121922193219421952196219721982199220022012202220322042205220622072208220922102211221222132214221522162217221822192220222122222223222422252226222722282229223022312232223322342235223622372238223922402241224222432244224522462247224822492250225122522253225422552256225722582259226022612262226322642265226622672268226922702271227222732274227522762277227822792280228122822283228422852286228722882289229022912292229322942295229622972298229923002301230223032304230523062307230823092310231123122313231423152316231723182319232023212322232323242325232623272328232923302331233223332334233523362337233823392340234123422343234423452346234723482349235023512352235323542355235623572358235923602361236223632364236523662367236823692370237123722373237423752376237723782379238023812382238323842385238623872388238923902391239223932394239523962397239823992400240124022403240424052406240724082409241024112412241324142415241624172418241924202421242224232424242524262427242824292430243124322433243424352436243724382439244024412442244324442445244624472448244924502451245224532454245524562457245824592460246124622463246424652466246724682469247024712472247324742475247624772478247924802481248224832484248524862487248824892490249124922493249424952496249724982499250025012502250325042505250625072508250925102511251225132514251525162517251825192520252125222523252425252526252725282529253025312532253325342535253625372538253925402541254225432544254525462547254825492550255125522553255425552556255725582559256025612562256325642565256625672568256925702571257225732574257525762577257825792580258125822583258425852586258725882589259025912592259325942595259625972598259926002601260226032604260526062607260826092610261126122613261426152616261726182619262026212622262326242625262626272628262926302631263226332634263526362637263826392640264126422643264426452646264726482649265026512652265326542655265626572658265926602661266226632664266526662667266826692670267126722673267426752676267726782679268026812682268326842685268626872688268926902691269226932694269526962697269826992700270127022703270427052706270727082709271027112712271327142715271627172718271927202721272227232724272527262727272827292730273127322733273427352736273727382739274027412742274327442745274627472748274927502751275227532754275527562757275827592760276127622763276427652766276727682769277027712772277327742775277627772778 |
- // SPDX-License-Identifier: GPL-2.0-or-later
- /*
- * NET3 IP device support routines.
- *
- * Derived from the IP parts of dev.c 1.0.19
- * Authors: Ross Biro
- * Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
- * Mark Evans, <evansmp@uhura.aston.ac.uk>
- *
- * Additional Authors:
- * Alan Cox, <gw4pts@gw4pts.ampr.org>
- * Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
- *
- * Changes:
- * Alexey Kuznetsov: pa_* fields are replaced with ifaddr
- * lists.
- * Cyrus Durgin: updated for kmod
- * Matthias Andree: in devinet_ioctl, compare label and
- * address (4.4BSD alias style support),
- * fall back to comparing just the label
- * if no match found.
- */
- #include <linux/uaccess.h>
- #include <linux/bitops.h>
- #include <linux/capability.h>
- #include <linux/module.h>
- #include <linux/types.h>
- #include <linux/kernel.h>
- #include <linux/sched/signal.h>
- #include <linux/string.h>
- #include <linux/mm.h>
- #include <linux/socket.h>
- #include <linux/sockios.h>
- #include <linux/in.h>
- #include <linux/errno.h>
- #include <linux/interrupt.h>
- #include <linux/if_addr.h>
- #include <linux/if_ether.h>
- #include <linux/inet.h>
- #include <linux/netdevice.h>
- #include <linux/etherdevice.h>
- #include <linux/skbuff.h>
- #include <linux/init.h>
- #include <linux/notifier.h>
- #include <linux/inetdevice.h>
- #include <linux/igmp.h>
- #include <linux/slab.h>
- #include <linux/hash.h>
- #ifdef CONFIG_SYSCTL
- #include <linux/sysctl.h>
- #endif
- #include <linux/kmod.h>
- #include <linux/netconf.h>
- #include <net/arp.h>
- #include <net/ip.h>
- #include <net/route.h>
- #include <net/ip_fib.h>
- #include <net/rtnetlink.h>
- #include <net/net_namespace.h>
- #include <net/addrconf.h>
- #define IPV6ONLY_FLAGS \
- (IFA_F_NODAD | IFA_F_OPTIMISTIC | IFA_F_DADFAILED | \
- IFA_F_HOMEADDRESS | IFA_F_TENTATIVE | \
- IFA_F_MANAGETEMPADDR | IFA_F_STABLE_PRIVACY)
- static struct ipv4_devconf ipv4_devconf = {
- .data = {
- [IPV4_DEVCONF_ACCEPT_REDIRECTS - 1] = 1,
- [IPV4_DEVCONF_SEND_REDIRECTS - 1] = 1,
- [IPV4_DEVCONF_SECURE_REDIRECTS - 1] = 1,
- [IPV4_DEVCONF_SHARED_MEDIA - 1] = 1,
- [IPV4_DEVCONF_IGMPV2_UNSOLICITED_REPORT_INTERVAL - 1] = 10000 /*ms*/,
- [IPV4_DEVCONF_IGMPV3_UNSOLICITED_REPORT_INTERVAL - 1] = 1000 /*ms*/,
- },
- };
- static struct ipv4_devconf ipv4_devconf_dflt = {
- .data = {
- [IPV4_DEVCONF_ACCEPT_REDIRECTS - 1] = 1,
- [IPV4_DEVCONF_SEND_REDIRECTS - 1] = 1,
- [IPV4_DEVCONF_SECURE_REDIRECTS - 1] = 1,
- [IPV4_DEVCONF_SHARED_MEDIA - 1] = 1,
- [IPV4_DEVCONF_ACCEPT_SOURCE_ROUTE - 1] = 1,
- [IPV4_DEVCONF_IGMPV2_UNSOLICITED_REPORT_INTERVAL - 1] = 10000 /*ms*/,
- [IPV4_DEVCONF_IGMPV3_UNSOLICITED_REPORT_INTERVAL - 1] = 1000 /*ms*/,
- },
- };
- #define IPV4_DEVCONF_DFLT(net, attr) \
- IPV4_DEVCONF((*net->ipv4.devconf_dflt), attr)
- static const struct nla_policy ifa_ipv4_policy[IFA_MAX+1] = {
- [IFA_LOCAL] = { .type = NLA_U32 },
- [IFA_ADDRESS] = { .type = NLA_U32 },
- [IFA_BROADCAST] = { .type = NLA_U32 },
- [IFA_LABEL] = { .type = NLA_STRING, .len = IFNAMSIZ - 1 },
- [IFA_CACHEINFO] = { .len = sizeof(struct ifa_cacheinfo) },
- [IFA_FLAGS] = { .type = NLA_U32 },
- [IFA_RT_PRIORITY] = { .type = NLA_U32 },
- [IFA_TARGET_NETNSID] = { .type = NLA_S32 },
- };
- struct inet_fill_args {
- u32 portid;
- u32 seq;
- int event;
- unsigned int flags;
- int netnsid;
- int ifindex;
- };
- #define IN4_ADDR_HSIZE_SHIFT 8
- #define IN4_ADDR_HSIZE (1U << IN4_ADDR_HSIZE_SHIFT)
- static struct hlist_head inet_addr_lst[IN4_ADDR_HSIZE];
- static u32 inet_addr_hash(const struct net *net, __be32 addr)
- {
- u32 val = (__force u32) addr ^ net_hash_mix(net);
- return hash_32(val, IN4_ADDR_HSIZE_SHIFT);
- }
- static void inet_hash_insert(struct net *net, struct in_ifaddr *ifa)
- {
- u32 hash = inet_addr_hash(net, ifa->ifa_local);
- ASSERT_RTNL();
- hlist_add_head_rcu(&ifa->hash, &inet_addr_lst[hash]);
- }
- static void inet_hash_remove(struct in_ifaddr *ifa)
- {
- ASSERT_RTNL();
- hlist_del_init_rcu(&ifa->hash);
- }
- /**
- * __ip_dev_find - find the first device with a given source address.
- * @net: the net namespace
- * @addr: the source address
- * @devref: if true, take a reference on the found device
- *
- * If a caller uses devref=false, it should be protected by RCU, or RTNL
- */
- struct net_device *__ip_dev_find(struct net *net, __be32 addr, bool devref)
- {
- struct net_device *result = NULL;
- struct in_ifaddr *ifa;
- rcu_read_lock();
- ifa = inet_lookup_ifaddr_rcu(net, addr);
- if (!ifa) {
- struct flowi4 fl4 = { .daddr = addr };
- struct fib_result res = { 0 };
- struct fib_table *local;
- /* Fallback to FIB local table so that communication
- * over loopback subnets work.
- */
- local = fib_get_table(net, RT_TABLE_LOCAL);
- if (local &&
- !fib_table_lookup(local, &fl4, &res, FIB_LOOKUP_NOREF) &&
- res.type == RTN_LOCAL)
- result = FIB_RES_DEV(res);
- } else {
- result = ifa->ifa_dev->dev;
- }
- if (result && devref)
- dev_hold(result);
- rcu_read_unlock();
- return result;
- }
- EXPORT_SYMBOL(__ip_dev_find);
- /* called under RCU lock */
- struct in_ifaddr *inet_lookup_ifaddr_rcu(struct net *net, __be32 addr)
- {
- u32 hash = inet_addr_hash(net, addr);
- struct in_ifaddr *ifa;
- hlist_for_each_entry_rcu(ifa, &inet_addr_lst[hash], hash)
- if (ifa->ifa_local == addr &&
- net_eq(dev_net(ifa->ifa_dev->dev), net))
- return ifa;
- return NULL;
- }
- static void rtmsg_ifa(int event, struct in_ifaddr *, struct nlmsghdr *, u32);
- static BLOCKING_NOTIFIER_HEAD(inetaddr_chain);
- static BLOCKING_NOTIFIER_HEAD(inetaddr_validator_chain);
- static void inet_del_ifa(struct in_device *in_dev,
- struct in_ifaddr __rcu **ifap,
- int destroy);
- #ifdef CONFIG_SYSCTL
- static int devinet_sysctl_register(struct in_device *idev);
- static void devinet_sysctl_unregister(struct in_device *idev);
- #else
- static int devinet_sysctl_register(struct in_device *idev)
- {
- return 0;
- }
- static void devinet_sysctl_unregister(struct in_device *idev)
- {
- }
- #endif
- /* Locks all the inet devices. */
- static struct in_ifaddr *inet_alloc_ifa(void)
- {
- return kzalloc(sizeof(struct in_ifaddr), GFP_KERNEL);
- }
- static void inet_rcu_free_ifa(struct rcu_head *head)
- {
- struct in_ifaddr *ifa = container_of(head, struct in_ifaddr, rcu_head);
- if (ifa->ifa_dev)
- in_dev_put(ifa->ifa_dev);
- kfree(ifa);
- }
- static void inet_free_ifa(struct in_ifaddr *ifa)
- {
- call_rcu(&ifa->rcu_head, inet_rcu_free_ifa);
- }
- void in_dev_finish_destroy(struct in_device *idev)
- {
- struct net_device *dev = idev->dev;
- WARN_ON(idev->ifa_list);
- WARN_ON(idev->mc_list);
- kfree(rcu_dereference_protected(idev->mc_hash, 1));
- #ifdef NET_REFCNT_DEBUG
- pr_debug("%s: %p=%s\n", __func__, idev, dev ? dev->name : "NIL");
- #endif
- dev_put(dev);
- if (!idev->dead)
- pr_err("Freeing alive in_device %p\n", idev);
- else
- kfree(idev);
- }
- EXPORT_SYMBOL(in_dev_finish_destroy);
- static struct in_device *inetdev_init(struct net_device *dev)
- {
- struct in_device *in_dev;
- int err = -ENOMEM;
- ASSERT_RTNL();
- in_dev = kzalloc(sizeof(*in_dev), GFP_KERNEL);
- if (!in_dev)
- goto out;
- memcpy(&in_dev->cnf, dev_net(dev)->ipv4.devconf_dflt,
- sizeof(in_dev->cnf));
- in_dev->cnf.sysctl = NULL;
- in_dev->dev = dev;
- in_dev->arp_parms = neigh_parms_alloc(dev, &arp_tbl);
- if (!in_dev->arp_parms)
- goto out_kfree;
- if (IPV4_DEVCONF(in_dev->cnf, FORWARDING))
- dev_disable_lro(dev);
- /* Reference in_dev->dev */
- dev_hold(dev);
- /* Account for reference dev->ip_ptr (below) */
- refcount_set(&in_dev->refcnt, 1);
- err = devinet_sysctl_register(in_dev);
- if (err) {
- in_dev->dead = 1;
- neigh_parms_release(&arp_tbl, in_dev->arp_parms);
- in_dev_put(in_dev);
- in_dev = NULL;
- goto out;
- }
- ip_mc_init_dev(in_dev);
- if (dev->flags & IFF_UP)
- ip_mc_up(in_dev);
- /* we can receive as soon as ip_ptr is set -- do this last */
- rcu_assign_pointer(dev->ip_ptr, in_dev);
- out:
- return in_dev ?: ERR_PTR(err);
- out_kfree:
- kfree(in_dev);
- in_dev = NULL;
- goto out;
- }
- static void in_dev_rcu_put(struct rcu_head *head)
- {
- struct in_device *idev = container_of(head, struct in_device, rcu_head);
- in_dev_put(idev);
- }
- static void inetdev_destroy(struct in_device *in_dev)
- {
- struct net_device *dev;
- struct in_ifaddr *ifa;
- ASSERT_RTNL();
- dev = in_dev->dev;
- in_dev->dead = 1;
- ip_mc_destroy_dev(in_dev);
- while ((ifa = rtnl_dereference(in_dev->ifa_list)) != NULL) {
- inet_del_ifa(in_dev, &in_dev->ifa_list, 0);
- inet_free_ifa(ifa);
- }
- RCU_INIT_POINTER(dev->ip_ptr, NULL);
- devinet_sysctl_unregister(in_dev);
- neigh_parms_release(&arp_tbl, in_dev->arp_parms);
- arp_ifdown(dev);
- call_rcu(&in_dev->rcu_head, in_dev_rcu_put);
- }
- int inet_addr_onlink(struct in_device *in_dev, __be32 a, __be32 b)
- {
- const struct in_ifaddr *ifa;
- rcu_read_lock();
- in_dev_for_each_ifa_rcu(ifa, in_dev) {
- if (inet_ifa_match(a, ifa)) {
- if (!b || inet_ifa_match(b, ifa)) {
- rcu_read_unlock();
- return 1;
- }
- }
- }
- rcu_read_unlock();
- return 0;
- }
- static void __inet_del_ifa(struct in_device *in_dev,
- struct in_ifaddr __rcu **ifap,
- int destroy, struct nlmsghdr *nlh, u32 portid)
- {
- struct in_ifaddr *promote = NULL;
- struct in_ifaddr *ifa, *ifa1;
- struct in_ifaddr *last_prim;
- struct in_ifaddr *prev_prom = NULL;
- int do_promote = IN_DEV_PROMOTE_SECONDARIES(in_dev);
- ASSERT_RTNL();
- ifa1 = rtnl_dereference(*ifap);
- last_prim = rtnl_dereference(in_dev->ifa_list);
- if (in_dev->dead)
- goto no_promotions;
- /* 1. Deleting primary ifaddr forces deletion all secondaries
- * unless alias promotion is set
- **/
- if (!(ifa1->ifa_flags & IFA_F_SECONDARY)) {
- struct in_ifaddr __rcu **ifap1 = &ifa1->ifa_next;
- while ((ifa = rtnl_dereference(*ifap1)) != NULL) {
- if (!(ifa->ifa_flags & IFA_F_SECONDARY) &&
- ifa1->ifa_scope <= ifa->ifa_scope)
- last_prim = ifa;
- if (!(ifa->ifa_flags & IFA_F_SECONDARY) ||
- ifa1->ifa_mask != ifa->ifa_mask ||
- !inet_ifa_match(ifa1->ifa_address, ifa)) {
- ifap1 = &ifa->ifa_next;
- prev_prom = ifa;
- continue;
- }
- if (!do_promote) {
- inet_hash_remove(ifa);
- *ifap1 = ifa->ifa_next;
- rtmsg_ifa(RTM_DELADDR, ifa, nlh, portid);
- blocking_notifier_call_chain(&inetaddr_chain,
- NETDEV_DOWN, ifa);
- inet_free_ifa(ifa);
- } else {
- promote = ifa;
- break;
- }
- }
- }
- /* On promotion all secondaries from subnet are changing
- * the primary IP, we must remove all their routes silently
- * and later to add them back with new prefsrc. Do this
- * while all addresses are on the device list.
- */
- for (ifa = promote; ifa; ifa = rtnl_dereference(ifa->ifa_next)) {
- if (ifa1->ifa_mask == ifa->ifa_mask &&
- inet_ifa_match(ifa1->ifa_address, ifa))
- fib_del_ifaddr(ifa, ifa1);
- }
- no_promotions:
- /* 2. Unlink it */
- *ifap = ifa1->ifa_next;
- inet_hash_remove(ifa1);
- /* 3. Announce address deletion */
- /* Send message first, then call notifier.
- At first sight, FIB update triggered by notifier
- will refer to already deleted ifaddr, that could confuse
- netlink listeners. It is not true: look, gated sees
- that route deleted and if it still thinks that ifaddr
- is valid, it will try to restore deleted routes... Grr.
- So that, this order is correct.
- */
- rtmsg_ifa(RTM_DELADDR, ifa1, nlh, portid);
- blocking_notifier_call_chain(&inetaddr_chain, NETDEV_DOWN, ifa1);
- if (promote) {
- struct in_ifaddr *next_sec;
- next_sec = rtnl_dereference(promote->ifa_next);
- if (prev_prom) {
- struct in_ifaddr *last_sec;
- rcu_assign_pointer(prev_prom->ifa_next, next_sec);
- last_sec = rtnl_dereference(last_prim->ifa_next);
- rcu_assign_pointer(promote->ifa_next, last_sec);
- rcu_assign_pointer(last_prim->ifa_next, promote);
- }
- promote->ifa_flags &= ~IFA_F_SECONDARY;
- rtmsg_ifa(RTM_NEWADDR, promote, nlh, portid);
- blocking_notifier_call_chain(&inetaddr_chain,
- NETDEV_UP, promote);
- for (ifa = next_sec; ifa;
- ifa = rtnl_dereference(ifa->ifa_next)) {
- if (ifa1->ifa_mask != ifa->ifa_mask ||
- !inet_ifa_match(ifa1->ifa_address, ifa))
- continue;
- fib_add_ifaddr(ifa);
- }
- }
- if (destroy)
- inet_free_ifa(ifa1);
- }
- static void inet_del_ifa(struct in_device *in_dev,
- struct in_ifaddr __rcu **ifap,
- int destroy)
- {
- __inet_del_ifa(in_dev, ifap, destroy, NULL, 0);
- }
- static void check_lifetime(struct work_struct *work);
- static DECLARE_DELAYED_WORK(check_lifetime_work, check_lifetime);
- static int __inet_insert_ifa(struct in_ifaddr *ifa, struct nlmsghdr *nlh,
- u32 portid, struct netlink_ext_ack *extack)
- {
- struct in_ifaddr __rcu **last_primary, **ifap;
- struct in_device *in_dev = ifa->ifa_dev;
- struct in_validator_info ivi;
- struct in_ifaddr *ifa1;
- int ret;
- ASSERT_RTNL();
- if (!ifa->ifa_local) {
- inet_free_ifa(ifa);
- return 0;
- }
- ifa->ifa_flags &= ~IFA_F_SECONDARY;
- last_primary = &in_dev->ifa_list;
- /* Don't set IPv6 only flags to IPv4 addresses */
- ifa->ifa_flags &= ~IPV6ONLY_FLAGS;
- ifap = &in_dev->ifa_list;
- ifa1 = rtnl_dereference(*ifap);
- while (ifa1) {
- if (!(ifa1->ifa_flags & IFA_F_SECONDARY) &&
- ifa->ifa_scope <= ifa1->ifa_scope)
- last_primary = &ifa1->ifa_next;
- if (ifa1->ifa_mask == ifa->ifa_mask &&
- inet_ifa_match(ifa1->ifa_address, ifa)) {
- if (ifa1->ifa_local == ifa->ifa_local) {
- inet_free_ifa(ifa);
- return -EEXIST;
- }
- if (ifa1->ifa_scope != ifa->ifa_scope) {
- inet_free_ifa(ifa);
- return -EINVAL;
- }
- ifa->ifa_flags |= IFA_F_SECONDARY;
- }
- ifap = &ifa1->ifa_next;
- ifa1 = rtnl_dereference(*ifap);
- }
- /* Allow any devices that wish to register ifaddr validtors to weigh
- * in now, before changes are committed. The rntl lock is serializing
- * access here, so the state should not change between a validator call
- * and a final notify on commit. This isn't invoked on promotion under
- * the assumption that validators are checking the address itself, and
- * not the flags.
- */
- ivi.ivi_addr = ifa->ifa_address;
- ivi.ivi_dev = ifa->ifa_dev;
- ivi.extack = extack;
- ret = blocking_notifier_call_chain(&inetaddr_validator_chain,
- NETDEV_UP, &ivi);
- ret = notifier_to_errno(ret);
- if (ret) {
- inet_free_ifa(ifa);
- return ret;
- }
- if (!(ifa->ifa_flags & IFA_F_SECONDARY)) {
- prandom_seed((__force u32) ifa->ifa_local);
- ifap = last_primary;
- }
- rcu_assign_pointer(ifa->ifa_next, *ifap);
- rcu_assign_pointer(*ifap, ifa);
- inet_hash_insert(dev_net(in_dev->dev), ifa);
- cancel_delayed_work(&check_lifetime_work);
- queue_delayed_work(system_power_efficient_wq, &check_lifetime_work, 0);
- /* Send message first, then call notifier.
- Notifier will trigger FIB update, so that
- listeners of netlink will know about new ifaddr */
- rtmsg_ifa(RTM_NEWADDR, ifa, nlh, portid);
- blocking_notifier_call_chain(&inetaddr_chain, NETDEV_UP, ifa);
- return 0;
- }
- static int inet_insert_ifa(struct in_ifaddr *ifa)
- {
- return __inet_insert_ifa(ifa, NULL, 0, NULL);
- }
- static int inet_set_ifa(struct net_device *dev, struct in_ifaddr *ifa)
- {
- struct in_device *in_dev = __in_dev_get_rtnl(dev);
- ASSERT_RTNL();
- if (!in_dev) {
- inet_free_ifa(ifa);
- return -ENOBUFS;
- }
- ipv4_devconf_setall(in_dev);
- neigh_parms_data_state_setall(in_dev->arp_parms);
- if (ifa->ifa_dev != in_dev) {
- WARN_ON(ifa->ifa_dev);
- in_dev_hold(in_dev);
- ifa->ifa_dev = in_dev;
- }
- if (ipv4_is_loopback(ifa->ifa_local))
- ifa->ifa_scope = RT_SCOPE_HOST;
- return inet_insert_ifa(ifa);
- }
- /* Caller must hold RCU or RTNL :
- * We dont take a reference on found in_device
- */
- struct in_device *inetdev_by_index(struct net *net, int ifindex)
- {
- struct net_device *dev;
- struct in_device *in_dev = NULL;
- rcu_read_lock();
- dev = dev_get_by_index_rcu(net, ifindex);
- if (dev)
- in_dev = rcu_dereference_rtnl(dev->ip_ptr);
- rcu_read_unlock();
- return in_dev;
- }
- EXPORT_SYMBOL(inetdev_by_index);
- /* Called only from RTNL semaphored context. No locks. */
- struct in_ifaddr *inet_ifa_byprefix(struct in_device *in_dev, __be32 prefix,
- __be32 mask)
- {
- struct in_ifaddr *ifa;
- ASSERT_RTNL();
- in_dev_for_each_ifa_rtnl(ifa, in_dev) {
- if (ifa->ifa_mask == mask && inet_ifa_match(prefix, ifa))
- return ifa;
- }
- return NULL;
- }
- static int ip_mc_autojoin_config(struct net *net, bool join,
- const struct in_ifaddr *ifa)
- {
- #if defined(CONFIG_IP_MULTICAST)
- struct ip_mreqn mreq = {
- .imr_multiaddr.s_addr = ifa->ifa_address,
- .imr_ifindex = ifa->ifa_dev->dev->ifindex,
- };
- struct sock *sk = net->ipv4.mc_autojoin_sk;
- int ret;
- ASSERT_RTNL();
- lock_sock(sk);
- if (join)
- ret = ip_mc_join_group(sk, &mreq);
- else
- ret = ip_mc_leave_group(sk, &mreq);
- release_sock(sk);
- return ret;
- #else
- return -EOPNOTSUPP;
- #endif
- }
- static int inet_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh,
- struct netlink_ext_ack *extack)
- {
- struct net *net = sock_net(skb->sk);
- struct in_ifaddr __rcu **ifap;
- struct nlattr *tb[IFA_MAX+1];
- struct in_device *in_dev;
- struct ifaddrmsg *ifm;
- struct in_ifaddr *ifa;
- int err = -EINVAL;
- ASSERT_RTNL();
- err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
- ifa_ipv4_policy, extack);
- if (err < 0)
- goto errout;
- ifm = nlmsg_data(nlh);
- in_dev = inetdev_by_index(net, ifm->ifa_index);
- if (!in_dev) {
- err = -ENODEV;
- goto errout;
- }
- for (ifap = &in_dev->ifa_list; (ifa = rtnl_dereference(*ifap)) != NULL;
- ifap = &ifa->ifa_next) {
- if (tb[IFA_LOCAL] &&
- ifa->ifa_local != nla_get_in_addr(tb[IFA_LOCAL]))
- continue;
- if (tb[IFA_LABEL] && nla_strcmp(tb[IFA_LABEL], ifa->ifa_label))
- continue;
- if (tb[IFA_ADDRESS] &&
- (ifm->ifa_prefixlen != ifa->ifa_prefixlen ||
- !inet_ifa_match(nla_get_in_addr(tb[IFA_ADDRESS]), ifa)))
- continue;
- if (ipv4_is_multicast(ifa->ifa_address))
- ip_mc_autojoin_config(net, false, ifa);
- __inet_del_ifa(in_dev, ifap, 1, nlh, NETLINK_CB(skb).portid);
- return 0;
- }
- err = -EADDRNOTAVAIL;
- errout:
- return err;
- }
- #define INFINITY_LIFE_TIME 0xFFFFFFFF
- static void check_lifetime(struct work_struct *work)
- {
- unsigned long now, next, next_sec, next_sched;
- struct in_ifaddr *ifa;
- struct hlist_node *n;
- int i;
- now = jiffies;
- next = round_jiffies_up(now + ADDR_CHECK_FREQUENCY);
- for (i = 0; i < IN4_ADDR_HSIZE; i++) {
- bool change_needed = false;
- rcu_read_lock();
- hlist_for_each_entry_rcu(ifa, &inet_addr_lst[i], hash) {
- unsigned long age;
- if (ifa->ifa_flags & IFA_F_PERMANENT)
- continue;
- /* We try to batch several events at once. */
- age = (now - ifa->ifa_tstamp +
- ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
- if (ifa->ifa_valid_lft != INFINITY_LIFE_TIME &&
- age >= ifa->ifa_valid_lft) {
- change_needed = true;
- } else if (ifa->ifa_preferred_lft ==
- INFINITY_LIFE_TIME) {
- continue;
- } else if (age >= ifa->ifa_preferred_lft) {
- if (time_before(ifa->ifa_tstamp +
- ifa->ifa_valid_lft * HZ, next))
- next = ifa->ifa_tstamp +
- ifa->ifa_valid_lft * HZ;
- if (!(ifa->ifa_flags & IFA_F_DEPRECATED))
- change_needed = true;
- } else if (time_before(ifa->ifa_tstamp +
- ifa->ifa_preferred_lft * HZ,
- next)) {
- next = ifa->ifa_tstamp +
- ifa->ifa_preferred_lft * HZ;
- }
- }
- rcu_read_unlock();
- if (!change_needed)
- continue;
- rtnl_lock();
- hlist_for_each_entry_safe(ifa, n, &inet_addr_lst[i], hash) {
- unsigned long age;
- if (ifa->ifa_flags & IFA_F_PERMANENT)
- continue;
- /* We try to batch several events at once. */
- age = (now - ifa->ifa_tstamp +
- ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
- if (ifa->ifa_valid_lft != INFINITY_LIFE_TIME &&
- age >= ifa->ifa_valid_lft) {
- struct in_ifaddr __rcu **ifap;
- struct in_ifaddr *tmp;
- ifap = &ifa->ifa_dev->ifa_list;
- tmp = rtnl_dereference(*ifap);
- while (tmp) {
- if (tmp == ifa) {
- inet_del_ifa(ifa->ifa_dev,
- ifap, 1);
- break;
- }
- ifap = &tmp->ifa_next;
- tmp = rtnl_dereference(*ifap);
- }
- } else if (ifa->ifa_preferred_lft !=
- INFINITY_LIFE_TIME &&
- age >= ifa->ifa_preferred_lft &&
- !(ifa->ifa_flags & IFA_F_DEPRECATED)) {
- ifa->ifa_flags |= IFA_F_DEPRECATED;
- rtmsg_ifa(RTM_NEWADDR, ifa, NULL, 0);
- }
- }
- rtnl_unlock();
- }
- next_sec = round_jiffies_up(next);
- next_sched = next;
- /* If rounded timeout is accurate enough, accept it. */
- if (time_before(next_sec, next + ADDRCONF_TIMER_FUZZ))
- next_sched = next_sec;
- now = jiffies;
- /* And minimum interval is ADDRCONF_TIMER_FUZZ_MAX. */
- if (time_before(next_sched, now + ADDRCONF_TIMER_FUZZ_MAX))
- next_sched = now + ADDRCONF_TIMER_FUZZ_MAX;
- queue_delayed_work(system_power_efficient_wq, &check_lifetime_work,
- next_sched - now);
- }
- static void set_ifa_lifetime(struct in_ifaddr *ifa, __u32 valid_lft,
- __u32 prefered_lft)
- {
- unsigned long timeout;
- ifa->ifa_flags &= ~(IFA_F_PERMANENT | IFA_F_DEPRECATED);
- timeout = addrconf_timeout_fixup(valid_lft, HZ);
- if (addrconf_finite_timeout(timeout))
- ifa->ifa_valid_lft = timeout;
- else
- ifa->ifa_flags |= IFA_F_PERMANENT;
- timeout = addrconf_timeout_fixup(prefered_lft, HZ);
- if (addrconf_finite_timeout(timeout)) {
- if (timeout == 0)
- ifa->ifa_flags |= IFA_F_DEPRECATED;
- ifa->ifa_preferred_lft = timeout;
- }
- ifa->ifa_tstamp = jiffies;
- if (!ifa->ifa_cstamp)
- ifa->ifa_cstamp = ifa->ifa_tstamp;
- }
- static struct in_ifaddr *rtm_to_ifaddr(struct net *net, struct nlmsghdr *nlh,
- __u32 *pvalid_lft, __u32 *pprefered_lft,
- struct netlink_ext_ack *extack)
- {
- struct nlattr *tb[IFA_MAX+1];
- struct in_ifaddr *ifa;
- struct ifaddrmsg *ifm;
- struct net_device *dev;
- struct in_device *in_dev;
- int err;
- err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
- ifa_ipv4_policy, extack);
- if (err < 0)
- goto errout;
- ifm = nlmsg_data(nlh);
- err = -EINVAL;
- if (ifm->ifa_prefixlen > 32 || !tb[IFA_LOCAL])
- goto errout;
- dev = __dev_get_by_index(net, ifm->ifa_index);
- err = -ENODEV;
- if (!dev)
- goto errout;
- in_dev = __in_dev_get_rtnl(dev);
- err = -ENOBUFS;
- if (!in_dev)
- goto errout;
- ifa = inet_alloc_ifa();
- if (!ifa)
- /*
- * A potential indev allocation can be left alive, it stays
- * assigned to its device and is destroy with it.
- */
- goto errout;
- ipv4_devconf_setall(in_dev);
- neigh_parms_data_state_setall(in_dev->arp_parms);
- in_dev_hold(in_dev);
- if (!tb[IFA_ADDRESS])
- tb[IFA_ADDRESS] = tb[IFA_LOCAL];
- INIT_HLIST_NODE(&ifa->hash);
- ifa->ifa_prefixlen = ifm->ifa_prefixlen;
- ifa->ifa_mask = inet_make_mask(ifm->ifa_prefixlen);
- ifa->ifa_flags = tb[IFA_FLAGS] ? nla_get_u32(tb[IFA_FLAGS]) :
- ifm->ifa_flags;
- ifa->ifa_scope = ifm->ifa_scope;
- ifa->ifa_dev = in_dev;
- ifa->ifa_local = nla_get_in_addr(tb[IFA_LOCAL]);
- ifa->ifa_address = nla_get_in_addr(tb[IFA_ADDRESS]);
- if (tb[IFA_BROADCAST])
- ifa->ifa_broadcast = nla_get_in_addr(tb[IFA_BROADCAST]);
- if (tb[IFA_LABEL])
- nla_strlcpy(ifa->ifa_label, tb[IFA_LABEL], IFNAMSIZ);
- else
- memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
- if (tb[IFA_RT_PRIORITY])
- ifa->ifa_rt_priority = nla_get_u32(tb[IFA_RT_PRIORITY]);
- if (tb[IFA_CACHEINFO]) {
- struct ifa_cacheinfo *ci;
- ci = nla_data(tb[IFA_CACHEINFO]);
- if (!ci->ifa_valid || ci->ifa_prefered > ci->ifa_valid) {
- err = -EINVAL;
- goto errout_free;
- }
- *pvalid_lft = ci->ifa_valid;
- *pprefered_lft = ci->ifa_prefered;
- }
- return ifa;
- errout_free:
- inet_free_ifa(ifa);
- errout:
- return ERR_PTR(err);
- }
- static struct in_ifaddr *find_matching_ifa(struct in_ifaddr *ifa)
- {
- struct in_device *in_dev = ifa->ifa_dev;
- struct in_ifaddr *ifa1;
- if (!ifa->ifa_local)
- return NULL;
- in_dev_for_each_ifa_rtnl(ifa1, in_dev) {
- if (ifa1->ifa_mask == ifa->ifa_mask &&
- inet_ifa_match(ifa1->ifa_address, ifa) &&
- ifa1->ifa_local == ifa->ifa_local)
- return ifa1;
- }
- return NULL;
- }
- static int inet_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh,
- struct netlink_ext_ack *extack)
- {
- struct net *net = sock_net(skb->sk);
- struct in_ifaddr *ifa;
- struct in_ifaddr *ifa_existing;
- __u32 valid_lft = INFINITY_LIFE_TIME;
- __u32 prefered_lft = INFINITY_LIFE_TIME;
- ASSERT_RTNL();
- ifa = rtm_to_ifaddr(net, nlh, &valid_lft, &prefered_lft, extack);
- if (IS_ERR(ifa))
- return PTR_ERR(ifa);
- ifa_existing = find_matching_ifa(ifa);
- if (!ifa_existing) {
- /* It would be best to check for !NLM_F_CREATE here but
- * userspace already relies on not having to provide this.
- */
- set_ifa_lifetime(ifa, valid_lft, prefered_lft);
- if (ifa->ifa_flags & IFA_F_MCAUTOJOIN) {
- int ret = ip_mc_autojoin_config(net, true, ifa);
- if (ret < 0) {
- inet_free_ifa(ifa);
- return ret;
- }
- }
- return __inet_insert_ifa(ifa, nlh, NETLINK_CB(skb).portid,
- extack);
- } else {
- u32 new_metric = ifa->ifa_rt_priority;
- inet_free_ifa(ifa);
- if (nlh->nlmsg_flags & NLM_F_EXCL ||
- !(nlh->nlmsg_flags & NLM_F_REPLACE))
- return -EEXIST;
- ifa = ifa_existing;
- if (ifa->ifa_rt_priority != new_metric) {
- fib_modify_prefix_metric(ifa, new_metric);
- ifa->ifa_rt_priority = new_metric;
- }
- set_ifa_lifetime(ifa, valid_lft, prefered_lft);
- cancel_delayed_work(&check_lifetime_work);
- queue_delayed_work(system_power_efficient_wq,
- &check_lifetime_work, 0);
- rtmsg_ifa(RTM_NEWADDR, ifa, nlh, NETLINK_CB(skb).portid);
- }
- return 0;
- }
- /*
- * Determine a default network mask, based on the IP address.
- */
- static int inet_abc_len(__be32 addr)
- {
- int rc = -1; /* Something else, probably a multicast. */
- if (ipv4_is_zeronet(addr) || ipv4_is_lbcast(addr))
- rc = 0;
- else {
- __u32 haddr = ntohl(addr);
- if (IN_CLASSA(haddr))
- rc = 8;
- else if (IN_CLASSB(haddr))
- rc = 16;
- else if (IN_CLASSC(haddr))
- rc = 24;
- else if (IN_CLASSE(haddr))
- rc = 32;
- }
- return rc;
- }
- int devinet_ioctl(struct net *net, unsigned int cmd, struct ifreq *ifr)
- {
- struct sockaddr_in sin_orig;
- struct sockaddr_in *sin = (struct sockaddr_in *)&ifr->ifr_addr;
- struct in_ifaddr __rcu **ifap = NULL;
- struct in_device *in_dev;
- struct in_ifaddr *ifa = NULL;
- struct net_device *dev;
- char *colon;
- int ret = -EFAULT;
- int tryaddrmatch = 0;
- ifr->ifr_name[IFNAMSIZ - 1] = 0;
- /* save original address for comparison */
- memcpy(&sin_orig, sin, sizeof(*sin));
- colon = strchr(ifr->ifr_name, ':');
- if (colon)
- *colon = 0;
- dev_load(net, ifr->ifr_name);
- switch (cmd) {
- case SIOCGIFADDR: /* Get interface address */
- case SIOCGIFBRDADDR: /* Get the broadcast address */
- case SIOCGIFDSTADDR: /* Get the destination address */
- case SIOCGIFNETMASK: /* Get the netmask for the interface */
- /* Note that these ioctls will not sleep,
- so that we do not impose a lock.
- One day we will be forced to put shlock here (I mean SMP)
- */
- tryaddrmatch = (sin_orig.sin_family == AF_INET);
- memset(sin, 0, sizeof(*sin));
- sin->sin_family = AF_INET;
- break;
- case SIOCSIFFLAGS:
- ret = -EPERM;
- if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
- goto out;
- break;
- case SIOCSIFADDR: /* Set interface address (and family) */
- case SIOCSIFBRDADDR: /* Set the broadcast address */
- case SIOCSIFDSTADDR: /* Set the destination address */
- case SIOCSIFNETMASK: /* Set the netmask for the interface */
- ret = -EPERM;
- if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
- goto out;
- ret = -EINVAL;
- if (sin->sin_family != AF_INET)
- goto out;
- break;
- default:
- ret = -EINVAL;
- goto out;
- }
- rtnl_lock();
- ret = -ENODEV;
- dev = __dev_get_by_name(net, ifr->ifr_name);
- if (!dev)
- goto done;
- if (colon)
- *colon = ':';
- in_dev = __in_dev_get_rtnl(dev);
- if (in_dev) {
- if (tryaddrmatch) {
- /* Matthias Andree */
- /* compare label and address (4.4BSD style) */
- /* note: we only do this for a limited set of ioctls
- and only if the original address family was AF_INET.
- This is checked above. */
- for (ifap = &in_dev->ifa_list;
- (ifa = rtnl_dereference(*ifap)) != NULL;
- ifap = &ifa->ifa_next) {
- if (!strcmp(ifr->ifr_name, ifa->ifa_label) &&
- sin_orig.sin_addr.s_addr ==
- ifa->ifa_local) {
- break; /* found */
- }
- }
- }
- /* we didn't get a match, maybe the application is
- 4.3BSD-style and passed in junk so we fall back to
- comparing just the label */
- if (!ifa) {
- for (ifap = &in_dev->ifa_list;
- (ifa = rtnl_dereference(*ifap)) != NULL;
- ifap = &ifa->ifa_next)
- if (!strcmp(ifr->ifr_name, ifa->ifa_label))
- break;
- }
- }
- ret = -EADDRNOTAVAIL;
- if (!ifa && cmd != SIOCSIFADDR && cmd != SIOCSIFFLAGS)
- goto done;
- switch (cmd) {
- case SIOCGIFADDR: /* Get interface address */
- ret = 0;
- sin->sin_addr.s_addr = ifa->ifa_local;
- break;
- case SIOCGIFBRDADDR: /* Get the broadcast address */
- ret = 0;
- sin->sin_addr.s_addr = ifa->ifa_broadcast;
- break;
- case SIOCGIFDSTADDR: /* Get the destination address */
- ret = 0;
- sin->sin_addr.s_addr = ifa->ifa_address;
- break;
- case SIOCGIFNETMASK: /* Get the netmask for the interface */
- ret = 0;
- sin->sin_addr.s_addr = ifa->ifa_mask;
- break;
- case SIOCSIFFLAGS:
- if (colon) {
- ret = -EADDRNOTAVAIL;
- if (!ifa)
- break;
- ret = 0;
- if (!(ifr->ifr_flags & IFF_UP))
- inet_del_ifa(in_dev, ifap, 1);
- break;
- }
- ret = dev_change_flags(dev, ifr->ifr_flags, NULL);
- break;
- case SIOCSIFADDR: /* Set interface address (and family) */
- ret = -EINVAL;
- if (inet_abc_len(sin->sin_addr.s_addr) < 0)
- break;
- if (!ifa) {
- ret = -ENOBUFS;
- ifa = inet_alloc_ifa();
- if (!ifa)
- break;
- INIT_HLIST_NODE(&ifa->hash);
- if (colon)
- memcpy(ifa->ifa_label, ifr->ifr_name, IFNAMSIZ);
- else
- memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
- } else {
- ret = 0;
- if (ifa->ifa_local == sin->sin_addr.s_addr)
- break;
- inet_del_ifa(in_dev, ifap, 0);
- ifa->ifa_broadcast = 0;
- ifa->ifa_scope = 0;
- }
- ifa->ifa_address = ifa->ifa_local = sin->sin_addr.s_addr;
- if (!(dev->flags & IFF_POINTOPOINT)) {
- ifa->ifa_prefixlen = inet_abc_len(ifa->ifa_address);
- ifa->ifa_mask = inet_make_mask(ifa->ifa_prefixlen);
- if ((dev->flags & IFF_BROADCAST) &&
- ifa->ifa_prefixlen < 31)
- ifa->ifa_broadcast = ifa->ifa_address |
- ~ifa->ifa_mask;
- } else {
- ifa->ifa_prefixlen = 32;
- ifa->ifa_mask = inet_make_mask(32);
- }
- set_ifa_lifetime(ifa, INFINITY_LIFE_TIME, INFINITY_LIFE_TIME);
- ret = inet_set_ifa(dev, ifa);
- break;
- case SIOCSIFBRDADDR: /* Set the broadcast address */
- ret = 0;
- if (ifa->ifa_broadcast != sin->sin_addr.s_addr) {
- inet_del_ifa(in_dev, ifap, 0);
- ifa->ifa_broadcast = sin->sin_addr.s_addr;
- inet_insert_ifa(ifa);
- }
- break;
- case SIOCSIFDSTADDR: /* Set the destination address */
- ret = 0;
- if (ifa->ifa_address == sin->sin_addr.s_addr)
- break;
- ret = -EINVAL;
- if (inet_abc_len(sin->sin_addr.s_addr) < 0)
- break;
- ret = 0;
- inet_del_ifa(in_dev, ifap, 0);
- ifa->ifa_address = sin->sin_addr.s_addr;
- inet_insert_ifa(ifa);
- break;
- case SIOCSIFNETMASK: /* Set the netmask for the interface */
- /*
- * The mask we set must be legal.
- */
- ret = -EINVAL;
- if (bad_mask(sin->sin_addr.s_addr, 0))
- break;
- ret = 0;
- if (ifa->ifa_mask != sin->sin_addr.s_addr) {
- __be32 old_mask = ifa->ifa_mask;
- inet_del_ifa(in_dev, ifap, 0);
- ifa->ifa_mask = sin->sin_addr.s_addr;
- ifa->ifa_prefixlen = inet_mask_len(ifa->ifa_mask);
- /* See if current broadcast address matches
- * with current netmask, then recalculate
- * the broadcast address. Otherwise it's a
- * funny address, so don't touch it since
- * the user seems to know what (s)he's doing...
- */
- if ((dev->flags & IFF_BROADCAST) &&
- (ifa->ifa_prefixlen < 31) &&
- (ifa->ifa_broadcast ==
- (ifa->ifa_local|~old_mask))) {
- ifa->ifa_broadcast = (ifa->ifa_local |
- ~sin->sin_addr.s_addr);
- }
- inet_insert_ifa(ifa);
- }
- break;
- }
- done:
- rtnl_unlock();
- out:
- return ret;
- }
- static int inet_gifconf(struct net_device *dev, char __user *buf, int len, int size)
- {
- struct in_device *in_dev = __in_dev_get_rtnl(dev);
- const struct in_ifaddr *ifa;
- struct ifreq ifr;
- int done = 0;
- if (WARN_ON(size > sizeof(struct ifreq)))
- goto out;
- if (!in_dev)
- goto out;
- in_dev_for_each_ifa_rtnl(ifa, in_dev) {
- if (!buf) {
- done += size;
- continue;
- }
- if (len < size)
- break;
- memset(&ifr, 0, sizeof(struct ifreq));
- strcpy(ifr.ifr_name, ifa->ifa_label);
- (*(struct sockaddr_in *)&ifr.ifr_addr).sin_family = AF_INET;
- (*(struct sockaddr_in *)&ifr.ifr_addr).sin_addr.s_addr =
- ifa->ifa_local;
- if (copy_to_user(buf + done, &ifr, size)) {
- done = -EFAULT;
- break;
- }
- len -= size;
- done += size;
- }
- out:
- return done;
- }
- static __be32 in_dev_select_addr(const struct in_device *in_dev,
- int scope)
- {
- const struct in_ifaddr *ifa;
- in_dev_for_each_ifa_rcu(ifa, in_dev) {
- if (ifa->ifa_flags & IFA_F_SECONDARY)
- continue;
- if (ifa->ifa_scope != RT_SCOPE_LINK &&
- ifa->ifa_scope <= scope)
- return ifa->ifa_local;
- }
- return 0;
- }
- __be32 inet_select_addr(const struct net_device *dev, __be32 dst, int scope)
- {
- const struct in_ifaddr *ifa;
- __be32 addr = 0;
- unsigned char localnet_scope = RT_SCOPE_HOST;
- struct in_device *in_dev;
- struct net *net = dev_net(dev);
- int master_idx;
- rcu_read_lock();
- in_dev = __in_dev_get_rcu(dev);
- if (!in_dev)
- goto no_in_dev;
- if (unlikely(IN_DEV_ROUTE_LOCALNET(in_dev)))
- localnet_scope = RT_SCOPE_LINK;
- in_dev_for_each_ifa_rcu(ifa, in_dev) {
- if (ifa->ifa_flags & IFA_F_SECONDARY)
- continue;
- if (min(ifa->ifa_scope, localnet_scope) > scope)
- continue;
- if (!dst || inet_ifa_match(dst, ifa)) {
- addr = ifa->ifa_local;
- break;
- }
- if (!addr)
- addr = ifa->ifa_local;
- }
- if (addr)
- goto out_unlock;
- no_in_dev:
- master_idx = l3mdev_master_ifindex_rcu(dev);
- /* For VRFs, the VRF device takes the place of the loopback device,
- * with addresses on it being preferred. Note in such cases the
- * loopback device will be among the devices that fail the master_idx
- * equality check in the loop below.
- */
- if (master_idx &&
- (dev = dev_get_by_index_rcu(net, master_idx)) &&
- (in_dev = __in_dev_get_rcu(dev))) {
- addr = in_dev_select_addr(in_dev, scope);
- if (addr)
- goto out_unlock;
- }
- /* Not loopback addresses on loopback should be preferred
- in this case. It is important that lo is the first interface
- in dev_base list.
- */
- for_each_netdev_rcu(net, dev) {
- if (l3mdev_master_ifindex_rcu(dev) != master_idx)
- continue;
- in_dev = __in_dev_get_rcu(dev);
- if (!in_dev)
- continue;
- addr = in_dev_select_addr(in_dev, scope);
- if (addr)
- goto out_unlock;
- }
- out_unlock:
- rcu_read_unlock();
- return addr;
- }
- EXPORT_SYMBOL(inet_select_addr);
- static __be32 confirm_addr_indev(struct in_device *in_dev, __be32 dst,
- __be32 local, int scope)
- {
- unsigned char localnet_scope = RT_SCOPE_HOST;
- const struct in_ifaddr *ifa;
- __be32 addr = 0;
- int same = 0;
- if (unlikely(IN_DEV_ROUTE_LOCALNET(in_dev)))
- localnet_scope = RT_SCOPE_LINK;
- in_dev_for_each_ifa_rcu(ifa, in_dev) {
- unsigned char min_scope = min(ifa->ifa_scope, localnet_scope);
- if (!addr &&
- (local == ifa->ifa_local || !local) &&
- min_scope <= scope) {
- addr = ifa->ifa_local;
- if (same)
- break;
- }
- if (!same) {
- same = (!local || inet_ifa_match(local, ifa)) &&
- (!dst || inet_ifa_match(dst, ifa));
- if (same && addr) {
- if (local || !dst)
- break;
- /* Is the selected addr into dst subnet? */
- if (inet_ifa_match(addr, ifa))
- break;
- /* No, then can we use new local src? */
- if (min_scope <= scope) {
- addr = ifa->ifa_local;
- break;
- }
- /* search for large dst subnet for addr */
- same = 0;
- }
- }
- }
- return same ? addr : 0;
- }
- /*
- * Confirm that local IP address exists using wildcards:
- * - net: netns to check, cannot be NULL
- * - in_dev: only on this interface, NULL=any interface
- * - dst: only in the same subnet as dst, 0=any dst
- * - local: address, 0=autoselect the local address
- * - scope: maximum allowed scope value for the local address
- */
- __be32 inet_confirm_addr(struct net *net, struct in_device *in_dev,
- __be32 dst, __be32 local, int scope)
- {
- __be32 addr = 0;
- struct net_device *dev;
- if (in_dev)
- return confirm_addr_indev(in_dev, dst, local, scope);
- rcu_read_lock();
- for_each_netdev_rcu(net, dev) {
- in_dev = __in_dev_get_rcu(dev);
- if (in_dev) {
- addr = confirm_addr_indev(in_dev, dst, local, scope);
- if (addr)
- break;
- }
- }
- rcu_read_unlock();
- return addr;
- }
- EXPORT_SYMBOL(inet_confirm_addr);
- /*
- * Device notifier
- */
- int register_inetaddr_notifier(struct notifier_block *nb)
- {
- return blocking_notifier_chain_register(&inetaddr_chain, nb);
- }
- EXPORT_SYMBOL(register_inetaddr_notifier);
- int unregister_inetaddr_notifier(struct notifier_block *nb)
- {
- return blocking_notifier_chain_unregister(&inetaddr_chain, nb);
- }
- EXPORT_SYMBOL(unregister_inetaddr_notifier);
- int register_inetaddr_validator_notifier(struct notifier_block *nb)
- {
- return blocking_notifier_chain_register(&inetaddr_validator_chain, nb);
- }
- EXPORT_SYMBOL(register_inetaddr_validator_notifier);
- int unregister_inetaddr_validator_notifier(struct notifier_block *nb)
- {
- return blocking_notifier_chain_unregister(&inetaddr_validator_chain,
- nb);
- }
- EXPORT_SYMBOL(unregister_inetaddr_validator_notifier);
- /* Rename ifa_labels for a device name change. Make some effort to preserve
- * existing alias numbering and to create unique labels if possible.
- */
- static void inetdev_changename(struct net_device *dev, struct in_device *in_dev)
- {
- struct in_ifaddr *ifa;
- int named = 0;
- in_dev_for_each_ifa_rtnl(ifa, in_dev) {
- char old[IFNAMSIZ], *dot;
- memcpy(old, ifa->ifa_label, IFNAMSIZ);
- memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
- if (named++ == 0)
- goto skip;
- dot = strchr(old, ':');
- if (!dot) {
- sprintf(old, ":%d", named);
- dot = old;
- }
- if (strlen(dot) + strlen(dev->name) < IFNAMSIZ)
- strcat(ifa->ifa_label, dot);
- else
- strcpy(ifa->ifa_label + (IFNAMSIZ - strlen(dot) - 1), dot);
- skip:
- rtmsg_ifa(RTM_NEWADDR, ifa, NULL, 0);
- }
- }
- static void inetdev_send_gratuitous_arp(struct net_device *dev,
- struct in_device *in_dev)
- {
- const struct in_ifaddr *ifa;
- in_dev_for_each_ifa_rtnl(ifa, in_dev) {
- arp_send(ARPOP_REQUEST, ETH_P_ARP,
- ifa->ifa_local, dev,
- ifa->ifa_local, NULL,
- dev->dev_addr, NULL);
- }
- }
- /* Called only under RTNL semaphore */
- static int inetdev_event(struct notifier_block *this, unsigned long event,
- void *ptr)
- {
- struct net_device *dev = netdev_notifier_info_to_dev(ptr);
- struct in_device *in_dev = __in_dev_get_rtnl(dev);
- ASSERT_RTNL();
- if (!in_dev) {
- if (event == NETDEV_REGISTER) {
- in_dev = inetdev_init(dev);
- if (IS_ERR(in_dev))
- return notifier_from_errno(PTR_ERR(in_dev));
- if (dev->flags & IFF_LOOPBACK) {
- IN_DEV_CONF_SET(in_dev, NOXFRM, 1);
- IN_DEV_CONF_SET(in_dev, NOPOLICY, 1);
- }
- } else if (event == NETDEV_CHANGEMTU) {
- /* Re-enabling IP */
- if (inetdev_valid_mtu(dev->mtu))
- in_dev = inetdev_init(dev);
- }
- goto out;
- }
- switch (event) {
- case NETDEV_REGISTER:
- pr_debug("%s: bug\n", __func__);
- RCU_INIT_POINTER(dev->ip_ptr, NULL);
- break;
- case NETDEV_UP:
- if (!inetdev_valid_mtu(dev->mtu))
- break;
- if (dev->flags & IFF_LOOPBACK) {
- struct in_ifaddr *ifa = inet_alloc_ifa();
- if (ifa) {
- INIT_HLIST_NODE(&ifa->hash);
- ifa->ifa_local =
- ifa->ifa_address = htonl(INADDR_LOOPBACK);
- ifa->ifa_prefixlen = 8;
- ifa->ifa_mask = inet_make_mask(8);
- in_dev_hold(in_dev);
- ifa->ifa_dev = in_dev;
- ifa->ifa_scope = RT_SCOPE_HOST;
- memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
- set_ifa_lifetime(ifa, INFINITY_LIFE_TIME,
- INFINITY_LIFE_TIME);
- ipv4_devconf_setall(in_dev);
- neigh_parms_data_state_setall(in_dev->arp_parms);
- inet_insert_ifa(ifa);
- }
- }
- ip_mc_up(in_dev);
- fallthrough;
- case NETDEV_CHANGEADDR:
- if (!IN_DEV_ARP_NOTIFY(in_dev))
- break;
- fallthrough;
- case NETDEV_NOTIFY_PEERS:
- /* Send gratuitous ARP to notify of link change */
- inetdev_send_gratuitous_arp(dev, in_dev);
- break;
- case NETDEV_DOWN:
- ip_mc_down(in_dev);
- break;
- case NETDEV_PRE_TYPE_CHANGE:
- ip_mc_unmap(in_dev);
- break;
- case NETDEV_POST_TYPE_CHANGE:
- ip_mc_remap(in_dev);
- break;
- case NETDEV_CHANGEMTU:
- if (inetdev_valid_mtu(dev->mtu))
- break;
- /* disable IP when MTU is not enough */
- fallthrough;
- case NETDEV_UNREGISTER:
- inetdev_destroy(in_dev);
- break;
- case NETDEV_CHANGENAME:
- /* Do not notify about label change, this event is
- * not interesting to applications using netlink.
- */
- inetdev_changename(dev, in_dev);
- devinet_sysctl_unregister(in_dev);
- devinet_sysctl_register(in_dev);
- break;
- }
- out:
- return NOTIFY_DONE;
- }
- static struct notifier_block ip_netdev_notifier = {
- .notifier_call = inetdev_event,
- };
- static size_t inet_nlmsg_size(void)
- {
- return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
- + nla_total_size(4) /* IFA_ADDRESS */
- + nla_total_size(4) /* IFA_LOCAL */
- + nla_total_size(4) /* IFA_BROADCAST */
- + nla_total_size(IFNAMSIZ) /* IFA_LABEL */
- + nla_total_size(4) /* IFA_FLAGS */
- + nla_total_size(4) /* IFA_RT_PRIORITY */
- + nla_total_size(sizeof(struct ifa_cacheinfo)); /* IFA_CACHEINFO */
- }
- static inline u32 cstamp_delta(unsigned long cstamp)
- {
- return (cstamp - INITIAL_JIFFIES) * 100UL / HZ;
- }
- static int put_cacheinfo(struct sk_buff *skb, unsigned long cstamp,
- unsigned long tstamp, u32 preferred, u32 valid)
- {
- struct ifa_cacheinfo ci;
- ci.cstamp = cstamp_delta(cstamp);
- ci.tstamp = cstamp_delta(tstamp);
- ci.ifa_prefered = preferred;
- ci.ifa_valid = valid;
- return nla_put(skb, IFA_CACHEINFO, sizeof(ci), &ci);
- }
- static int inet_fill_ifaddr(struct sk_buff *skb, struct in_ifaddr *ifa,
- struct inet_fill_args *args)
- {
- struct ifaddrmsg *ifm;
- struct nlmsghdr *nlh;
- u32 preferred, valid;
- nlh = nlmsg_put(skb, args->portid, args->seq, args->event, sizeof(*ifm),
- args->flags);
- if (!nlh)
- return -EMSGSIZE;
- ifm = nlmsg_data(nlh);
- ifm->ifa_family = AF_INET;
- ifm->ifa_prefixlen = ifa->ifa_prefixlen;
- ifm->ifa_flags = ifa->ifa_flags;
- ifm->ifa_scope = ifa->ifa_scope;
- ifm->ifa_index = ifa->ifa_dev->dev->ifindex;
- if (args->netnsid >= 0 &&
- nla_put_s32(skb, IFA_TARGET_NETNSID, args->netnsid))
- goto nla_put_failure;
- if (!(ifm->ifa_flags & IFA_F_PERMANENT)) {
- preferred = ifa->ifa_preferred_lft;
- valid = ifa->ifa_valid_lft;
- if (preferred != INFINITY_LIFE_TIME) {
- long tval = (jiffies - ifa->ifa_tstamp) / HZ;
- if (preferred > tval)
- preferred -= tval;
- else
- preferred = 0;
- if (valid != INFINITY_LIFE_TIME) {
- if (valid > tval)
- valid -= tval;
- else
- valid = 0;
- }
- }
- } else {
- preferred = INFINITY_LIFE_TIME;
- valid = INFINITY_LIFE_TIME;
- }
- if ((ifa->ifa_address &&
- nla_put_in_addr(skb, IFA_ADDRESS, ifa->ifa_address)) ||
- (ifa->ifa_local &&
- nla_put_in_addr(skb, IFA_LOCAL, ifa->ifa_local)) ||
- (ifa->ifa_broadcast &&
- nla_put_in_addr(skb, IFA_BROADCAST, ifa->ifa_broadcast)) ||
- (ifa->ifa_label[0] &&
- nla_put_string(skb, IFA_LABEL, ifa->ifa_label)) ||
- nla_put_u32(skb, IFA_FLAGS, ifa->ifa_flags) ||
- (ifa->ifa_rt_priority &&
- nla_put_u32(skb, IFA_RT_PRIORITY, ifa->ifa_rt_priority)) ||
- put_cacheinfo(skb, ifa->ifa_cstamp, ifa->ifa_tstamp,
- preferred, valid))
- goto nla_put_failure;
- nlmsg_end(skb, nlh);
- return 0;
- nla_put_failure:
- nlmsg_cancel(skb, nlh);
- return -EMSGSIZE;
- }
- static int inet_valid_dump_ifaddr_req(const struct nlmsghdr *nlh,
- struct inet_fill_args *fillargs,
- struct net **tgt_net, struct sock *sk,
- struct netlink_callback *cb)
- {
- struct netlink_ext_ack *extack = cb->extack;
- struct nlattr *tb[IFA_MAX+1];
- struct ifaddrmsg *ifm;
- int err, i;
- if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
- NL_SET_ERR_MSG(extack, "ipv4: Invalid header for address dump request");
- return -EINVAL;
- }
- ifm = nlmsg_data(nlh);
- if (ifm->ifa_prefixlen || ifm->ifa_flags || ifm->ifa_scope) {
- NL_SET_ERR_MSG(extack, "ipv4: Invalid values in header for address dump request");
- return -EINVAL;
- }
- fillargs->ifindex = ifm->ifa_index;
- if (fillargs->ifindex) {
- cb->answer_flags |= NLM_F_DUMP_FILTERED;
- fillargs->flags |= NLM_F_DUMP_FILTERED;
- }
- err = nlmsg_parse_deprecated_strict(nlh, sizeof(*ifm), tb, IFA_MAX,
- ifa_ipv4_policy, extack);
- if (err < 0)
- return err;
- for (i = 0; i <= IFA_MAX; ++i) {
- if (!tb[i])
- continue;
- if (i == IFA_TARGET_NETNSID) {
- struct net *net;
- fillargs->netnsid = nla_get_s32(tb[i]);
- net = rtnl_get_net_ns_capable(sk, fillargs->netnsid);
- if (IS_ERR(net)) {
- fillargs->netnsid = -1;
- NL_SET_ERR_MSG(extack, "ipv4: Invalid target network namespace id");
- return PTR_ERR(net);
- }
- *tgt_net = net;
- } else {
- NL_SET_ERR_MSG(extack, "ipv4: Unsupported attribute in dump request");
- return -EINVAL;
- }
- }
- return 0;
- }
- static int in_dev_dump_addr(struct in_device *in_dev, struct sk_buff *skb,
- struct netlink_callback *cb, int s_ip_idx,
- struct inet_fill_args *fillargs)
- {
- struct in_ifaddr *ifa;
- int ip_idx = 0;
- int err;
- in_dev_for_each_ifa_rtnl(ifa, in_dev) {
- if (ip_idx < s_ip_idx) {
- ip_idx++;
- continue;
- }
- err = inet_fill_ifaddr(skb, ifa, fillargs);
- if (err < 0)
- goto done;
- nl_dump_check_consistent(cb, nlmsg_hdr(skb));
- ip_idx++;
- }
- err = 0;
- done:
- cb->args[2] = ip_idx;
- return err;
- }
- static int inet_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
- {
- const struct nlmsghdr *nlh = cb->nlh;
- struct inet_fill_args fillargs = {
- .portid = NETLINK_CB(cb->skb).portid,
- .seq = nlh->nlmsg_seq,
- .event = RTM_NEWADDR,
- .flags = NLM_F_MULTI,
- .netnsid = -1,
- };
- struct net *net = sock_net(skb->sk);
- struct net *tgt_net = net;
- int h, s_h;
- int idx, s_idx;
- int s_ip_idx;
- struct net_device *dev;
- struct in_device *in_dev;
- struct hlist_head *head;
- int err = 0;
- s_h = cb->args[0];
- s_idx = idx = cb->args[1];
- s_ip_idx = cb->args[2];
- if (cb->strict_check) {
- err = inet_valid_dump_ifaddr_req(nlh, &fillargs, &tgt_net,
- skb->sk, cb);
- if (err < 0)
- goto put_tgt_net;
- err = 0;
- if (fillargs.ifindex) {
- dev = __dev_get_by_index(tgt_net, fillargs.ifindex);
- if (!dev) {
- err = -ENODEV;
- goto put_tgt_net;
- }
- in_dev = __in_dev_get_rtnl(dev);
- if (in_dev) {
- err = in_dev_dump_addr(in_dev, skb, cb, s_ip_idx,
- &fillargs);
- }
- goto put_tgt_net;
- }
- }
- for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
- idx = 0;
- head = &tgt_net->dev_index_head[h];
- rcu_read_lock();
- cb->seq = atomic_read(&tgt_net->ipv4.dev_addr_genid) ^
- tgt_net->dev_base_seq;
- hlist_for_each_entry_rcu(dev, head, index_hlist) {
- if (idx < s_idx)
- goto cont;
- if (h > s_h || idx > s_idx)
- s_ip_idx = 0;
- in_dev = __in_dev_get_rcu(dev);
- if (!in_dev)
- goto cont;
- err = in_dev_dump_addr(in_dev, skb, cb, s_ip_idx,
- &fillargs);
- if (err < 0) {
- rcu_read_unlock();
- goto done;
- }
- cont:
- idx++;
- }
- rcu_read_unlock();
- }
- done:
- cb->args[0] = h;
- cb->args[1] = idx;
- put_tgt_net:
- if (fillargs.netnsid >= 0)
- put_net(tgt_net);
- return skb->len ? : err;
- }
- static void rtmsg_ifa(int event, struct in_ifaddr *ifa, struct nlmsghdr *nlh,
- u32 portid)
- {
- struct inet_fill_args fillargs = {
- .portid = portid,
- .seq = nlh ? nlh->nlmsg_seq : 0,
- .event = event,
- .flags = 0,
- .netnsid = -1,
- };
- struct sk_buff *skb;
- int err = -ENOBUFS;
- struct net *net;
- net = dev_net(ifa->ifa_dev->dev);
- skb = nlmsg_new(inet_nlmsg_size(), GFP_KERNEL);
- if (!skb)
- goto errout;
- err = inet_fill_ifaddr(skb, ifa, &fillargs);
- if (err < 0) {
- /* -EMSGSIZE implies BUG in inet_nlmsg_size() */
- WARN_ON(err == -EMSGSIZE);
- kfree_skb(skb);
- goto errout;
- }
- rtnl_notify(skb, net, portid, RTNLGRP_IPV4_IFADDR, nlh, GFP_KERNEL);
- return;
- errout:
- if (err < 0)
- rtnl_set_sk_err(net, RTNLGRP_IPV4_IFADDR, err);
- }
- static size_t inet_get_link_af_size(const struct net_device *dev,
- u32 ext_filter_mask)
- {
- struct in_device *in_dev = rcu_dereference_rtnl(dev->ip_ptr);
- if (!in_dev)
- return 0;
- return nla_total_size(IPV4_DEVCONF_MAX * 4); /* IFLA_INET_CONF */
- }
- static int inet_fill_link_af(struct sk_buff *skb, const struct net_device *dev,
- u32 ext_filter_mask)
- {
- struct in_device *in_dev = rcu_dereference_rtnl(dev->ip_ptr);
- struct nlattr *nla;
- int i;
- if (!in_dev)
- return -ENODATA;
- nla = nla_reserve(skb, IFLA_INET_CONF, IPV4_DEVCONF_MAX * 4);
- if (!nla)
- return -EMSGSIZE;
- for (i = 0; i < IPV4_DEVCONF_MAX; i++)
- ((u32 *) nla_data(nla))[i] = in_dev->cnf.data[i];
- return 0;
- }
- static const struct nla_policy inet_af_policy[IFLA_INET_MAX+1] = {
- [IFLA_INET_CONF] = { .type = NLA_NESTED },
- };
- static int inet_validate_link_af(const struct net_device *dev,
- const struct nlattr *nla)
- {
- struct nlattr *a, *tb[IFLA_INET_MAX+1];
- int err, rem;
- if (dev && !__in_dev_get_rcu(dev))
- return -EAFNOSUPPORT;
- err = nla_parse_nested_deprecated(tb, IFLA_INET_MAX, nla,
- inet_af_policy, NULL);
- if (err < 0)
- return err;
- if (tb[IFLA_INET_CONF]) {
- nla_for_each_nested(a, tb[IFLA_INET_CONF], rem) {
- int cfgid = nla_type(a);
- if (nla_len(a) < 4)
- return -EINVAL;
- if (cfgid <= 0 || cfgid > IPV4_DEVCONF_MAX)
- return -EINVAL;
- }
- }
- return 0;
- }
- static int inet_set_link_af(struct net_device *dev, const struct nlattr *nla)
- {
- struct in_device *in_dev = __in_dev_get_rcu(dev);
- struct nlattr *a, *tb[IFLA_INET_MAX+1];
- int rem;
- if (!in_dev)
- return -EAFNOSUPPORT;
- if (nla_parse_nested_deprecated(tb, IFLA_INET_MAX, nla, NULL, NULL) < 0)
- return -EINVAL;
- if (tb[IFLA_INET_CONF]) {
- nla_for_each_nested(a, tb[IFLA_INET_CONF], rem)
- ipv4_devconf_set(in_dev, nla_type(a), nla_get_u32(a));
- }
- return 0;
- }
- static int inet_netconf_msgsize_devconf(int type)
- {
- int size = NLMSG_ALIGN(sizeof(struct netconfmsg))
- + nla_total_size(4); /* NETCONFA_IFINDEX */
- bool all = false;
- if (type == NETCONFA_ALL)
- all = true;
- if (all || type == NETCONFA_FORWARDING)
- size += nla_total_size(4);
- if (all || type == NETCONFA_RP_FILTER)
- size += nla_total_size(4);
- if (all || type == NETCONFA_MC_FORWARDING)
- size += nla_total_size(4);
- if (all || type == NETCONFA_BC_FORWARDING)
- size += nla_total_size(4);
- if (all || type == NETCONFA_PROXY_NEIGH)
- size += nla_total_size(4);
- if (all || type == NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN)
- size += nla_total_size(4);
- return size;
- }
- static int inet_netconf_fill_devconf(struct sk_buff *skb, int ifindex,
- struct ipv4_devconf *devconf, u32 portid,
- u32 seq, int event, unsigned int flags,
- int type)
- {
- struct nlmsghdr *nlh;
- struct netconfmsg *ncm;
- bool all = false;
- nlh = nlmsg_put(skb, portid, seq, event, sizeof(struct netconfmsg),
- flags);
- if (!nlh)
- return -EMSGSIZE;
- if (type == NETCONFA_ALL)
- all = true;
- ncm = nlmsg_data(nlh);
- ncm->ncm_family = AF_INET;
- if (nla_put_s32(skb, NETCONFA_IFINDEX, ifindex) < 0)
- goto nla_put_failure;
- if (!devconf)
- goto out;
- if ((all || type == NETCONFA_FORWARDING) &&
- nla_put_s32(skb, NETCONFA_FORWARDING,
- IPV4_DEVCONF(*devconf, FORWARDING)) < 0)
- goto nla_put_failure;
- if ((all || type == NETCONFA_RP_FILTER) &&
- nla_put_s32(skb, NETCONFA_RP_FILTER,
- IPV4_DEVCONF(*devconf, RP_FILTER)) < 0)
- goto nla_put_failure;
- if ((all || type == NETCONFA_MC_FORWARDING) &&
- nla_put_s32(skb, NETCONFA_MC_FORWARDING,
- IPV4_DEVCONF(*devconf, MC_FORWARDING)) < 0)
- goto nla_put_failure;
- if ((all || type == NETCONFA_BC_FORWARDING) &&
- nla_put_s32(skb, NETCONFA_BC_FORWARDING,
- IPV4_DEVCONF(*devconf, BC_FORWARDING)) < 0)
- goto nla_put_failure;
- if ((all || type == NETCONFA_PROXY_NEIGH) &&
- nla_put_s32(skb, NETCONFA_PROXY_NEIGH,
- IPV4_DEVCONF(*devconf, PROXY_ARP)) < 0)
- goto nla_put_failure;
- if ((all || type == NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN) &&
- nla_put_s32(skb, NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
- IPV4_DEVCONF(*devconf, IGNORE_ROUTES_WITH_LINKDOWN)) < 0)
- goto nla_put_failure;
- out:
- nlmsg_end(skb, nlh);
- return 0;
- nla_put_failure:
- nlmsg_cancel(skb, nlh);
- return -EMSGSIZE;
- }
- void inet_netconf_notify_devconf(struct net *net, int event, int type,
- int ifindex, struct ipv4_devconf *devconf)
- {
- struct sk_buff *skb;
- int err = -ENOBUFS;
- skb = nlmsg_new(inet_netconf_msgsize_devconf(type), GFP_KERNEL);
- if (!skb)
- goto errout;
- err = inet_netconf_fill_devconf(skb, ifindex, devconf, 0, 0,
- event, 0, type);
- if (err < 0) {
- /* -EMSGSIZE implies BUG in inet_netconf_msgsize_devconf() */
- WARN_ON(err == -EMSGSIZE);
- kfree_skb(skb);
- goto errout;
- }
- rtnl_notify(skb, net, 0, RTNLGRP_IPV4_NETCONF, NULL, GFP_KERNEL);
- return;
- errout:
- if (err < 0)
- rtnl_set_sk_err(net, RTNLGRP_IPV4_NETCONF, err);
- }
- static const struct nla_policy devconf_ipv4_policy[NETCONFA_MAX+1] = {
- [NETCONFA_IFINDEX] = { .len = sizeof(int) },
- [NETCONFA_FORWARDING] = { .len = sizeof(int) },
- [NETCONFA_RP_FILTER] = { .len = sizeof(int) },
- [NETCONFA_PROXY_NEIGH] = { .len = sizeof(int) },
- [NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN] = { .len = sizeof(int) },
- };
- static int inet_netconf_valid_get_req(struct sk_buff *skb,
- const struct nlmsghdr *nlh,
- struct nlattr **tb,
- struct netlink_ext_ack *extack)
- {
- int i, err;
- if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(struct netconfmsg))) {
- NL_SET_ERR_MSG(extack, "ipv4: Invalid header for netconf get request");
- return -EINVAL;
- }
- if (!netlink_strict_get_check(skb))
- return nlmsg_parse_deprecated(nlh, sizeof(struct netconfmsg),
- tb, NETCONFA_MAX,
- devconf_ipv4_policy, extack);
- err = nlmsg_parse_deprecated_strict(nlh, sizeof(struct netconfmsg),
- tb, NETCONFA_MAX,
- devconf_ipv4_policy, extack);
- if (err)
- return err;
- for (i = 0; i <= NETCONFA_MAX; i++) {
- if (!tb[i])
- continue;
- switch (i) {
- case NETCONFA_IFINDEX:
- break;
- default:
- NL_SET_ERR_MSG(extack, "ipv4: Unsupported attribute in netconf get request");
- return -EINVAL;
- }
- }
- return 0;
- }
- static int inet_netconf_get_devconf(struct sk_buff *in_skb,
- struct nlmsghdr *nlh,
- struct netlink_ext_ack *extack)
- {
- struct net *net = sock_net(in_skb->sk);
- struct nlattr *tb[NETCONFA_MAX+1];
- struct sk_buff *skb;
- struct ipv4_devconf *devconf;
- struct in_device *in_dev;
- struct net_device *dev;
- int ifindex;
- int err;
- err = inet_netconf_valid_get_req(in_skb, nlh, tb, extack);
- if (err)
- goto errout;
- err = -EINVAL;
- if (!tb[NETCONFA_IFINDEX])
- goto errout;
- ifindex = nla_get_s32(tb[NETCONFA_IFINDEX]);
- switch (ifindex) {
- case NETCONFA_IFINDEX_ALL:
- devconf = net->ipv4.devconf_all;
- break;
- case NETCONFA_IFINDEX_DEFAULT:
- devconf = net->ipv4.devconf_dflt;
- break;
- default:
- dev = __dev_get_by_index(net, ifindex);
- if (!dev)
- goto errout;
- in_dev = __in_dev_get_rtnl(dev);
- if (!in_dev)
- goto errout;
- devconf = &in_dev->cnf;
- break;
- }
- err = -ENOBUFS;
- skb = nlmsg_new(inet_netconf_msgsize_devconf(NETCONFA_ALL), GFP_KERNEL);
- if (!skb)
- goto errout;
- err = inet_netconf_fill_devconf(skb, ifindex, devconf,
- NETLINK_CB(in_skb).portid,
- nlh->nlmsg_seq, RTM_NEWNETCONF, 0,
- NETCONFA_ALL);
- if (err < 0) {
- /* -EMSGSIZE implies BUG in inet_netconf_msgsize_devconf() */
- WARN_ON(err == -EMSGSIZE);
- kfree_skb(skb);
- goto errout;
- }
- err = rtnl_unicast(skb, net, NETLINK_CB(in_skb).portid);
- errout:
- return err;
- }
- static int inet_netconf_dump_devconf(struct sk_buff *skb,
- struct netlink_callback *cb)
- {
- const struct nlmsghdr *nlh = cb->nlh;
- struct net *net = sock_net(skb->sk);
- int h, s_h;
- int idx, s_idx;
- struct net_device *dev;
- struct in_device *in_dev;
- struct hlist_head *head;
- if (cb->strict_check) {
- struct netlink_ext_ack *extack = cb->extack;
- struct netconfmsg *ncm;
- if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ncm))) {
- NL_SET_ERR_MSG(extack, "ipv4: Invalid header for netconf dump request");
- return -EINVAL;
- }
- if (nlmsg_attrlen(nlh, sizeof(*ncm))) {
- NL_SET_ERR_MSG(extack, "ipv4: Invalid data after header in netconf dump request");
- return -EINVAL;
- }
- }
- s_h = cb->args[0];
- s_idx = idx = cb->args[1];
- for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
- idx = 0;
- head = &net->dev_index_head[h];
- rcu_read_lock();
- cb->seq = atomic_read(&net->ipv4.dev_addr_genid) ^
- net->dev_base_seq;
- hlist_for_each_entry_rcu(dev, head, index_hlist) {
- if (idx < s_idx)
- goto cont;
- in_dev = __in_dev_get_rcu(dev);
- if (!in_dev)
- goto cont;
- if (inet_netconf_fill_devconf(skb, dev->ifindex,
- &in_dev->cnf,
- NETLINK_CB(cb->skb).portid,
- nlh->nlmsg_seq,
- RTM_NEWNETCONF,
- NLM_F_MULTI,
- NETCONFA_ALL) < 0) {
- rcu_read_unlock();
- goto done;
- }
- nl_dump_check_consistent(cb, nlmsg_hdr(skb));
- cont:
- idx++;
- }
- rcu_read_unlock();
- }
- if (h == NETDEV_HASHENTRIES) {
- if (inet_netconf_fill_devconf(skb, NETCONFA_IFINDEX_ALL,
- net->ipv4.devconf_all,
- NETLINK_CB(cb->skb).portid,
- nlh->nlmsg_seq,
- RTM_NEWNETCONF, NLM_F_MULTI,
- NETCONFA_ALL) < 0)
- goto done;
- else
- h++;
- }
- if (h == NETDEV_HASHENTRIES + 1) {
- if (inet_netconf_fill_devconf(skb, NETCONFA_IFINDEX_DEFAULT,
- net->ipv4.devconf_dflt,
- NETLINK_CB(cb->skb).portid,
- nlh->nlmsg_seq,
- RTM_NEWNETCONF, NLM_F_MULTI,
- NETCONFA_ALL) < 0)
- goto done;
- else
- h++;
- }
- done:
- cb->args[0] = h;
- cb->args[1] = idx;
- return skb->len;
- }
- #ifdef CONFIG_SYSCTL
- static void devinet_copy_dflt_conf(struct net *net, int i)
- {
- struct net_device *dev;
- rcu_read_lock();
- for_each_netdev_rcu(net, dev) {
- struct in_device *in_dev;
- in_dev = __in_dev_get_rcu(dev);
- if (in_dev && !test_bit(i, in_dev->cnf.state))
- in_dev->cnf.data[i] = net->ipv4.devconf_dflt->data[i];
- }
- rcu_read_unlock();
- }
- /* called with RTNL locked */
- static void inet_forward_change(struct net *net)
- {
- struct net_device *dev;
- int on = IPV4_DEVCONF_ALL(net, FORWARDING);
- IPV4_DEVCONF_ALL(net, ACCEPT_REDIRECTS) = !on;
- IPV4_DEVCONF_DFLT(net, FORWARDING) = on;
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_FORWARDING,
- NETCONFA_IFINDEX_ALL,
- net->ipv4.devconf_all);
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_FORWARDING,
- NETCONFA_IFINDEX_DEFAULT,
- net->ipv4.devconf_dflt);
- for_each_netdev(net, dev) {
- struct in_device *in_dev;
- if (on)
- dev_disable_lro(dev);
- in_dev = __in_dev_get_rtnl(dev);
- if (in_dev) {
- IN_DEV_CONF_SET(in_dev, FORWARDING, on);
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_FORWARDING,
- dev->ifindex, &in_dev->cnf);
- }
- }
- }
- static int devinet_conf_ifindex(struct net *net, struct ipv4_devconf *cnf)
- {
- if (cnf == net->ipv4.devconf_dflt)
- return NETCONFA_IFINDEX_DEFAULT;
- else if (cnf == net->ipv4.devconf_all)
- return NETCONFA_IFINDEX_ALL;
- else {
- struct in_device *idev
- = container_of(cnf, struct in_device, cnf);
- return idev->dev->ifindex;
- }
- }
- static int devinet_conf_proc(struct ctl_table *ctl, int write,
- void *buffer, size_t *lenp, loff_t *ppos)
- {
- int old_value = *(int *)ctl->data;
- int ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
- int new_value = *(int *)ctl->data;
- if (write) {
- struct ipv4_devconf *cnf = ctl->extra1;
- struct net *net = ctl->extra2;
- int i = (int *)ctl->data - cnf->data;
- int ifindex;
- set_bit(i, cnf->state);
- if (cnf == net->ipv4.devconf_dflt)
- devinet_copy_dflt_conf(net, i);
- if (i == IPV4_DEVCONF_ACCEPT_LOCAL - 1 ||
- i == IPV4_DEVCONF_ROUTE_LOCALNET - 1)
- if ((new_value == 0) && (old_value != 0))
- rt_cache_flush(net);
- if (i == IPV4_DEVCONF_BC_FORWARDING - 1 &&
- new_value != old_value)
- rt_cache_flush(net);
- if (i == IPV4_DEVCONF_RP_FILTER - 1 &&
- new_value != old_value) {
- ifindex = devinet_conf_ifindex(net, cnf);
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_RP_FILTER,
- ifindex, cnf);
- }
- if (i == IPV4_DEVCONF_PROXY_ARP - 1 &&
- new_value != old_value) {
- ifindex = devinet_conf_ifindex(net, cnf);
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_PROXY_NEIGH,
- ifindex, cnf);
- }
- if (i == IPV4_DEVCONF_IGNORE_ROUTES_WITH_LINKDOWN - 1 &&
- new_value != old_value) {
- ifindex = devinet_conf_ifindex(net, cnf);
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
- ifindex, cnf);
- }
- }
- return ret;
- }
- static int devinet_sysctl_forward(struct ctl_table *ctl, int write,
- void *buffer, size_t *lenp, loff_t *ppos)
- {
- int *valp = ctl->data;
- int val = *valp;
- loff_t pos = *ppos;
- int ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
- if (write && *valp != val) {
- struct net *net = ctl->extra2;
- if (valp != &IPV4_DEVCONF_DFLT(net, FORWARDING)) {
- if (!rtnl_trylock()) {
- /* Restore the original values before restarting */
- *valp = val;
- *ppos = pos;
- return restart_syscall();
- }
- if (valp == &IPV4_DEVCONF_ALL(net, FORWARDING)) {
- inet_forward_change(net);
- } else {
- struct ipv4_devconf *cnf = ctl->extra1;
- struct in_device *idev =
- container_of(cnf, struct in_device, cnf);
- if (*valp)
- dev_disable_lro(idev->dev);
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_FORWARDING,
- idev->dev->ifindex,
- cnf);
- }
- rtnl_unlock();
- rt_cache_flush(net);
- } else
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
- NETCONFA_FORWARDING,
- NETCONFA_IFINDEX_DEFAULT,
- net->ipv4.devconf_dflt);
- }
- return ret;
- }
- static int ipv4_doint_and_flush(struct ctl_table *ctl, int write,
- void *buffer, size_t *lenp, loff_t *ppos)
- {
- int *valp = ctl->data;
- int val = *valp;
- int ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
- struct net *net = ctl->extra2;
- if (write && *valp != val)
- rt_cache_flush(net);
- return ret;
- }
- #define DEVINET_SYSCTL_ENTRY(attr, name, mval, proc) \
- { \
- .procname = name, \
- .data = ipv4_devconf.data + \
- IPV4_DEVCONF_ ## attr - 1, \
- .maxlen = sizeof(int), \
- .mode = mval, \
- .proc_handler = proc, \
- .extra1 = &ipv4_devconf, \
- }
- #define DEVINET_SYSCTL_RW_ENTRY(attr, name) \
- DEVINET_SYSCTL_ENTRY(attr, name, 0644, devinet_conf_proc)
- #define DEVINET_SYSCTL_RO_ENTRY(attr, name) \
- DEVINET_SYSCTL_ENTRY(attr, name, 0444, devinet_conf_proc)
- #define DEVINET_SYSCTL_COMPLEX_ENTRY(attr, name, proc) \
- DEVINET_SYSCTL_ENTRY(attr, name, 0644, proc)
- #define DEVINET_SYSCTL_FLUSHING_ENTRY(attr, name) \
- DEVINET_SYSCTL_COMPLEX_ENTRY(attr, name, ipv4_doint_and_flush)
- static struct devinet_sysctl_table {
- struct ctl_table_header *sysctl_header;
- struct ctl_table devinet_vars[__IPV4_DEVCONF_MAX];
- } devinet_sysctl = {
- .devinet_vars = {
- DEVINET_SYSCTL_COMPLEX_ENTRY(FORWARDING, "forwarding",
- devinet_sysctl_forward),
- DEVINET_SYSCTL_RO_ENTRY(MC_FORWARDING, "mc_forwarding"),
- DEVINET_SYSCTL_RW_ENTRY(BC_FORWARDING, "bc_forwarding"),
- DEVINET_SYSCTL_RW_ENTRY(ACCEPT_REDIRECTS, "accept_redirects"),
- DEVINET_SYSCTL_RW_ENTRY(SECURE_REDIRECTS, "secure_redirects"),
- DEVINET_SYSCTL_RW_ENTRY(SHARED_MEDIA, "shared_media"),
- DEVINET_SYSCTL_RW_ENTRY(RP_FILTER, "rp_filter"),
- DEVINET_SYSCTL_RW_ENTRY(SEND_REDIRECTS, "send_redirects"),
- DEVINET_SYSCTL_RW_ENTRY(ACCEPT_SOURCE_ROUTE,
- "accept_source_route"),
- DEVINET_SYSCTL_RW_ENTRY(ACCEPT_LOCAL, "accept_local"),
- DEVINET_SYSCTL_RW_ENTRY(SRC_VMARK, "src_valid_mark"),
- DEVINET_SYSCTL_RW_ENTRY(PROXY_ARP, "proxy_arp"),
- DEVINET_SYSCTL_RW_ENTRY(MEDIUM_ID, "medium_id"),
- DEVINET_SYSCTL_RW_ENTRY(BOOTP_RELAY, "bootp_relay"),
- DEVINET_SYSCTL_RW_ENTRY(LOG_MARTIANS, "log_martians"),
- DEVINET_SYSCTL_RW_ENTRY(TAG, "tag"),
- DEVINET_SYSCTL_RW_ENTRY(ARPFILTER, "arp_filter"),
- DEVINET_SYSCTL_RW_ENTRY(ARP_ANNOUNCE, "arp_announce"),
- DEVINET_SYSCTL_RW_ENTRY(ARP_IGNORE, "arp_ignore"),
- DEVINET_SYSCTL_RW_ENTRY(ARP_ACCEPT, "arp_accept"),
- DEVINET_SYSCTL_RW_ENTRY(ARP_NOTIFY, "arp_notify"),
- DEVINET_SYSCTL_RW_ENTRY(PROXY_ARP_PVLAN, "proxy_arp_pvlan"),
- DEVINET_SYSCTL_RW_ENTRY(FORCE_IGMP_VERSION,
- "force_igmp_version"),
- DEVINET_SYSCTL_RW_ENTRY(IGMPV2_UNSOLICITED_REPORT_INTERVAL,
- "igmpv2_unsolicited_report_interval"),
- DEVINET_SYSCTL_RW_ENTRY(IGMPV3_UNSOLICITED_REPORT_INTERVAL,
- "igmpv3_unsolicited_report_interval"),
- DEVINET_SYSCTL_RW_ENTRY(IGNORE_ROUTES_WITH_LINKDOWN,
- "ignore_routes_with_linkdown"),
- DEVINET_SYSCTL_RW_ENTRY(DROP_GRATUITOUS_ARP,
- "drop_gratuitous_arp"),
- DEVINET_SYSCTL_FLUSHING_ENTRY(NOXFRM, "disable_xfrm"),
- DEVINET_SYSCTL_FLUSHING_ENTRY(NOPOLICY, "disable_policy"),
- DEVINET_SYSCTL_FLUSHING_ENTRY(PROMOTE_SECONDARIES,
- "promote_secondaries"),
- DEVINET_SYSCTL_FLUSHING_ENTRY(ROUTE_LOCALNET,
- "route_localnet"),
- DEVINET_SYSCTL_FLUSHING_ENTRY(DROP_UNICAST_IN_L2_MULTICAST,
- "drop_unicast_in_l2_multicast"),
- },
- };
- static int __devinet_sysctl_register(struct net *net, char *dev_name,
- int ifindex, struct ipv4_devconf *p)
- {
- int i;
- struct devinet_sysctl_table *t;
- char path[sizeof("net/ipv4/conf/") + IFNAMSIZ];
- t = kmemdup(&devinet_sysctl, sizeof(*t), GFP_KERNEL);
- if (!t)
- goto out;
- for (i = 0; i < ARRAY_SIZE(t->devinet_vars) - 1; i++) {
- t->devinet_vars[i].data += (char *)p - (char *)&ipv4_devconf;
- t->devinet_vars[i].extra1 = p;
- t->devinet_vars[i].extra2 = net;
- }
- snprintf(path, sizeof(path), "net/ipv4/conf/%s", dev_name);
- t->sysctl_header = register_net_sysctl(net, path, t->devinet_vars);
- if (!t->sysctl_header)
- goto free;
- p->sysctl = t;
- inet_netconf_notify_devconf(net, RTM_NEWNETCONF, NETCONFA_ALL,
- ifindex, p);
- return 0;
- free:
- kfree(t);
- out:
- return -ENOMEM;
- }
- static void __devinet_sysctl_unregister(struct net *net,
- struct ipv4_devconf *cnf, int ifindex)
- {
- struct devinet_sysctl_table *t = cnf->sysctl;
- if (t) {
- cnf->sysctl = NULL;
- unregister_net_sysctl_table(t->sysctl_header);
- kfree(t);
- }
- inet_netconf_notify_devconf(net, RTM_DELNETCONF, 0, ifindex, NULL);
- }
- static int devinet_sysctl_register(struct in_device *idev)
- {
- int err;
- if (!sysctl_dev_name_is_allowed(idev->dev->name))
- return -EINVAL;
- err = neigh_sysctl_register(idev->dev, idev->arp_parms, NULL);
- if (err)
- return err;
- err = __devinet_sysctl_register(dev_net(idev->dev), idev->dev->name,
- idev->dev->ifindex, &idev->cnf);
- if (err)
- neigh_sysctl_unregister(idev->arp_parms);
- return err;
- }
- static void devinet_sysctl_unregister(struct in_device *idev)
- {
- struct net *net = dev_net(idev->dev);
- __devinet_sysctl_unregister(net, &idev->cnf, idev->dev->ifindex);
- neigh_sysctl_unregister(idev->arp_parms);
- }
- static struct ctl_table ctl_forward_entry[] = {
- {
- .procname = "ip_forward",
- .data = &ipv4_devconf.data[
- IPV4_DEVCONF_FORWARDING - 1],
- .maxlen = sizeof(int),
- .mode = 0644,
- .proc_handler = devinet_sysctl_forward,
- .extra1 = &ipv4_devconf,
- .extra2 = &init_net,
- },
- { },
- };
- #endif
- static __net_init int devinet_init_net(struct net *net)
- {
- int err;
- struct ipv4_devconf *all, *dflt;
- #ifdef CONFIG_SYSCTL
- struct ctl_table *tbl;
- struct ctl_table_header *forw_hdr;
- #endif
- err = -ENOMEM;
- all = kmemdup(&ipv4_devconf, sizeof(ipv4_devconf), GFP_KERNEL);
- if (!all)
- goto err_alloc_all;
- dflt = kmemdup(&ipv4_devconf_dflt, sizeof(ipv4_devconf_dflt), GFP_KERNEL);
- if (!dflt)
- goto err_alloc_dflt;
- #ifdef CONFIG_SYSCTL
- tbl = kmemdup(ctl_forward_entry, sizeof(ctl_forward_entry), GFP_KERNEL);
- if (!tbl)
- goto err_alloc_ctl;
- tbl[0].data = &all->data[IPV4_DEVCONF_FORWARDING - 1];
- tbl[0].extra1 = all;
- tbl[0].extra2 = net;
- #endif
- if (!net_eq(net, &init_net)) {
- if (IS_ENABLED(CONFIG_SYSCTL) &&
- sysctl_devconf_inherit_init_net == 3) {
- /* copy from the current netns */
- memcpy(all, current->nsproxy->net_ns->ipv4.devconf_all,
- sizeof(ipv4_devconf));
- memcpy(dflt,
- current->nsproxy->net_ns->ipv4.devconf_dflt,
- sizeof(ipv4_devconf_dflt));
- } else if (!IS_ENABLED(CONFIG_SYSCTL) ||
- sysctl_devconf_inherit_init_net != 2) {
- /* inherit == 0 or 1: copy from init_net */
- memcpy(all, init_net.ipv4.devconf_all,
- sizeof(ipv4_devconf));
- memcpy(dflt, init_net.ipv4.devconf_dflt,
- sizeof(ipv4_devconf_dflt));
- }
- /* else inherit == 2: use compiled values */
- }
- #ifdef CONFIG_SYSCTL
- err = __devinet_sysctl_register(net, "all", NETCONFA_IFINDEX_ALL, all);
- if (err < 0)
- goto err_reg_all;
- err = __devinet_sysctl_register(net, "default",
- NETCONFA_IFINDEX_DEFAULT, dflt);
- if (err < 0)
- goto err_reg_dflt;
- err = -ENOMEM;
- forw_hdr = register_net_sysctl(net, "net/ipv4", tbl);
- if (!forw_hdr)
- goto err_reg_ctl;
- net->ipv4.forw_hdr = forw_hdr;
- #endif
- net->ipv4.devconf_all = all;
- net->ipv4.devconf_dflt = dflt;
- return 0;
- #ifdef CONFIG_SYSCTL
- err_reg_ctl:
- __devinet_sysctl_unregister(net, dflt, NETCONFA_IFINDEX_DEFAULT);
- err_reg_dflt:
- __devinet_sysctl_unregister(net, all, NETCONFA_IFINDEX_ALL);
- err_reg_all:
- kfree(tbl);
- err_alloc_ctl:
- #endif
- kfree(dflt);
- err_alloc_dflt:
- kfree(all);
- err_alloc_all:
- return err;
- }
- static __net_exit void devinet_exit_net(struct net *net)
- {
- #ifdef CONFIG_SYSCTL
- struct ctl_table *tbl;
- tbl = net->ipv4.forw_hdr->ctl_table_arg;
- unregister_net_sysctl_table(net->ipv4.forw_hdr);
- __devinet_sysctl_unregister(net, net->ipv4.devconf_dflt,
- NETCONFA_IFINDEX_DEFAULT);
- __devinet_sysctl_unregister(net, net->ipv4.devconf_all,
- NETCONFA_IFINDEX_ALL);
- kfree(tbl);
- #endif
- kfree(net->ipv4.devconf_dflt);
- kfree(net->ipv4.devconf_all);
- }
- static __net_initdata struct pernet_operations devinet_ops = {
- .init = devinet_init_net,
- .exit = devinet_exit_net,
- };
- static struct rtnl_af_ops inet_af_ops __read_mostly = {
- .family = AF_INET,
- .fill_link_af = inet_fill_link_af,
- .get_link_af_size = inet_get_link_af_size,
- .validate_link_af = inet_validate_link_af,
- .set_link_af = inet_set_link_af,
- };
- void __init devinet_init(void)
- {
- int i;
- for (i = 0; i < IN4_ADDR_HSIZE; i++)
- INIT_HLIST_HEAD(&inet_addr_lst[i]);
- register_pernet_subsys(&devinet_ops);
- register_gifconf(PF_INET, inet_gifconf);
- register_netdevice_notifier(&ip_netdev_notifier);
- queue_delayed_work(system_power_efficient_wq, &check_lifetime_work, 0);
- rtnl_af_register(&inet_af_ops);
- rtnl_register(PF_INET, RTM_NEWADDR, inet_rtm_newaddr, NULL, 0);
- rtnl_register(PF_INET, RTM_DELADDR, inet_rtm_deladdr, NULL, 0);
- rtnl_register(PF_INET, RTM_GETADDR, NULL, inet_dump_ifaddr, 0);
- rtnl_register(PF_INET, RTM_GETNETCONF, inet_netconf_get_devconf,
- inet_netconf_dump_devconf, 0);
- }
|