1 /*
2 * INET 802.1Q VLAN
3 * Ethernet-type device handling.
4 *
5 * Authors: Ben Greear <greearb@candelatech.com>
6 * Please send support related email to: netdev@vger.kernel.org
7 * VLAN Home Page: http://www.candelatech.com/~greear/vlan.html
8 *
9 * Fixes:
10 * Fix for packet capture - Nick Eggleston <nick@dccinc.com>;
11 * Add HW acceleration hooks - David S. Miller <davem@redhat.com>;
12 * Correct all the locking - David S. Miller <davem@redhat.com>;
13 * Use hash table for VLAN groups - David S. Miller <davem@redhat.com>
14 *
15 * This program is free software; you can redistribute it and/or
16 * modify it under the terms of the GNU General Public License
17 * as published by the Free Software Foundation; either version
18 * 2 of the License, or (at your option) any later version.
19 */
20
21 #define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
22
23 #include <linux/capability.h>
24 #include <linux/module.h>
25 #include <linux/netdevice.h>
26 #include <linux/skbuff.h>
27 #include <linux/slab.h>
28 #include <linux/init.h>
29 #include <linux/rculist.h>
30 #include <net/p8022.h>
31 #include <net/arp.h>
32 #include <linux/rtnetlink.h>
33 #include <linux/notifier.h>
34 #include <net/rtnetlink.h>
35 #include <net/net_namespace.h>
36 #include <net/netns/generic.h>
37 #include <asm/uaccess.h>
38
39 #include <linux/if_vlan.h>
40 #include "vlan.h"
41 #include "vlanproc.h"
42
43 #define DRV_VERSION "1.8"
44
45 /* Global VLAN variables */
46
47 int vlan_net_id __read_mostly;
48
49 const char vlan_fullname[] = "802.1Q VLAN Support";
50 const char vlan_version[] = DRV_VERSION;
51
52 /* End of global variables definitions. */
53
vlan_group_prealloc_vid(struct vlan_group * vg,__be16 vlan_proto,u16 vlan_id)54 static int vlan_group_prealloc_vid(struct vlan_group *vg,
55 __be16 vlan_proto, u16 vlan_id)
56 {
57 struct net_device **array;
58 unsigned int pidx, vidx;
59 unsigned int size;
60
61 ASSERT_RTNL();
62
63 pidx = vlan_proto_idx(vlan_proto);
64 vidx = vlan_id / VLAN_GROUP_ARRAY_PART_LEN;
65 array = vg->vlan_devices_arrays[pidx][vidx];
66 if (array != NULL)
67 return 0;
68
69 size = sizeof(struct net_device *) * VLAN_GROUP_ARRAY_PART_LEN;
70 array = kzalloc(size, GFP_KERNEL);
71 if (array == NULL)
72 return -ENOBUFS;
73
74 vg->vlan_devices_arrays[pidx][vidx] = array;
75 return 0;
76 }
77
unregister_vlan_dev(struct net_device * dev,struct list_head * head)78 void unregister_vlan_dev(struct net_device *dev, struct list_head *head)
79 {
80 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
81 struct net_device *real_dev = vlan->real_dev;
82 struct vlan_info *vlan_info;
83 struct vlan_group *grp;
84 u16 vlan_id = vlan->vlan_id;
85
86 ASSERT_RTNL();
87
88 vlan_info = rtnl_dereference(real_dev->vlan_info);
89 BUG_ON(!vlan_info);
90
91 grp = &vlan_info->grp;
92
93 grp->nr_vlan_devs--;
94
95 if (vlan->flags & VLAN_FLAG_MVRP)
96 vlan_mvrp_request_leave(dev);
97 if (vlan->flags & VLAN_FLAG_GVRP)
98 vlan_gvrp_request_leave(dev);
99
100 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, NULL);
101
102 netdev_upper_dev_unlink(real_dev, dev);
103 /* Because unregister_netdevice_queue() makes sure at least one rcu
104 * grace period is respected before device freeing,
105 * we dont need to call synchronize_net() here.
106 */
107 unregister_netdevice_queue(dev, head);
108
109 if (grp->nr_vlan_devs == 0) {
110 vlan_mvrp_uninit_applicant(real_dev);
111 vlan_gvrp_uninit_applicant(real_dev);
112 }
113
114 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
115
116 /* Get rid of the vlan's reference to real_dev */
117 dev_put(real_dev);
118 }
119
vlan_check_real_dev(struct net_device * real_dev,__be16 protocol,u16 vlan_id)120 int vlan_check_real_dev(struct net_device *real_dev,
121 __be16 protocol, u16 vlan_id)
122 {
123 const char *name = real_dev->name;
124
125 if (real_dev->features & NETIF_F_VLAN_CHALLENGED) {
126 pr_info("VLANs not supported on %s\n", name);
127 return -EOPNOTSUPP;
128 }
129
130 if (vlan_find_dev(real_dev, protocol, vlan_id) != NULL)
131 return -EEXIST;
132
133 return 0;
134 }
135
register_vlan_dev(struct net_device * dev)136 int register_vlan_dev(struct net_device *dev)
137 {
138 struct vlan_dev_priv *vlan = vlan_dev_priv(dev);
139 struct net_device *real_dev = vlan->real_dev;
140 u16 vlan_id = vlan->vlan_id;
141 struct vlan_info *vlan_info;
142 struct vlan_group *grp;
143 int err;
144
145 err = vlan_vid_add(real_dev, vlan->vlan_proto, vlan_id);
146 if (err)
147 return err;
148
149 vlan_info = rtnl_dereference(real_dev->vlan_info);
150 /* vlan_info should be there now. vlan_vid_add took care of it */
151 BUG_ON(!vlan_info);
152
153 grp = &vlan_info->grp;
154 if (grp->nr_vlan_devs == 0) {
155 err = vlan_gvrp_init_applicant(real_dev);
156 if (err < 0)
157 goto out_vid_del;
158 err = vlan_mvrp_init_applicant(real_dev);
159 if (err < 0)
160 goto out_uninit_gvrp;
161 }
162
163 err = vlan_group_prealloc_vid(grp, vlan->vlan_proto, vlan_id);
164 if (err < 0)
165 goto out_uninit_mvrp;
166
167 vlan->nest_level = dev_get_nest_level(real_dev, is_vlan_dev) + 1;
168 err = register_netdevice(dev);
169 if (err < 0)
170 goto out_uninit_mvrp;
171
172 err = netdev_upper_dev_link(real_dev, dev);
173 if (err)
174 goto out_unregister_netdev;
175
176 /* Account for reference in struct vlan_dev_priv */
177 dev_hold(real_dev);
178
179 netif_stacked_transfer_operstate(real_dev, dev);
180 linkwatch_fire_event(dev); /* _MUST_ call rfc2863_policy() */
181
182 /* So, got the sucker initialized, now lets place
183 * it into our local structure.
184 */
185 vlan_group_set_device(grp, vlan->vlan_proto, vlan_id, dev);
186 grp->nr_vlan_devs++;
187
188 return 0;
189
190 out_unregister_netdev:
191 unregister_netdevice(dev);
192 out_uninit_mvrp:
193 if (grp->nr_vlan_devs == 0)
194 vlan_mvrp_uninit_applicant(real_dev);
195 out_uninit_gvrp:
196 if (grp->nr_vlan_devs == 0)
197 vlan_gvrp_uninit_applicant(real_dev);
198 out_vid_del:
199 vlan_vid_del(real_dev, vlan->vlan_proto, vlan_id);
200 return err;
201 }
202
203 /* Attach a VLAN device to a mac address (ie Ethernet Card).
204 * Returns 0 if the device was created or a negative error code otherwise.
205 */
register_vlan_device(struct net_device * real_dev,u16 vlan_id)206 static int register_vlan_device(struct net_device *real_dev, u16 vlan_id)
207 {
208 struct net_device *new_dev;
209 struct vlan_dev_priv *vlan;
210 struct net *net = dev_net(real_dev);
211 struct vlan_net *vn = net_generic(net, vlan_net_id);
212 char name[IFNAMSIZ];
213 int err;
214
215 if (vlan_id >= VLAN_VID_MASK)
216 return -ERANGE;
217
218 err = vlan_check_real_dev(real_dev, htons(ETH_P_8021Q), vlan_id);
219 if (err < 0)
220 return err;
221
222 /* Gotta set up the fields for the device. */
223 switch (vn->name_type) {
224 case VLAN_NAME_TYPE_RAW_PLUS_VID:
225 /* name will look like: eth1.0005 */
226 snprintf(name, IFNAMSIZ, "%s.%.4i", real_dev->name, vlan_id);
227 break;
228 case VLAN_NAME_TYPE_PLUS_VID_NO_PAD:
229 /* Put our vlan.VID in the name.
230 * Name will look like: vlan5
231 */
232 snprintf(name, IFNAMSIZ, "vlan%i", vlan_id);
233 break;
234 case VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD:
235 /* Put our vlan.VID in the name.
236 * Name will look like: eth0.5
237 */
238 snprintf(name, IFNAMSIZ, "%s.%i", real_dev->name, vlan_id);
239 break;
240 case VLAN_NAME_TYPE_PLUS_VID:
241 /* Put our vlan.VID in the name.
242 * Name will look like: vlan0005
243 */
244 default:
245 snprintf(name, IFNAMSIZ, "vlan%.4i", vlan_id);
246 }
247
248 new_dev = alloc_netdev(sizeof(struct vlan_dev_priv), name,
249 NET_NAME_UNKNOWN, vlan_setup);
250
251 if (new_dev == NULL)
252 return -ENOBUFS;
253
254 dev_net_set(new_dev, net);
255 /* need 4 bytes for extra VLAN header info,
256 * hope the underlying device can handle it.
257 */
258 new_dev->mtu = real_dev->mtu;
259 new_dev->priv_flags |= (real_dev->priv_flags & IFF_UNICAST_FLT);
260
261 vlan = vlan_dev_priv(new_dev);
262 vlan->vlan_proto = htons(ETH_P_8021Q);
263 vlan->vlan_id = vlan_id;
264 vlan->real_dev = real_dev;
265 vlan->dent = NULL;
266 vlan->flags = VLAN_FLAG_REORDER_HDR;
267
268 new_dev->rtnl_link_ops = &vlan_link_ops;
269 err = register_vlan_dev(new_dev);
270 if (err < 0)
271 goto out_free_newdev;
272
273 return 0;
274
275 out_free_newdev:
276 if (new_dev->reg_state == NETREG_UNINITIALIZED)
277 free_netdev(new_dev);
278 return err;
279 }
280
vlan_sync_address(struct net_device * dev,struct net_device * vlandev)281 static void vlan_sync_address(struct net_device *dev,
282 struct net_device *vlandev)
283 {
284 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
285
286 /* May be called without an actual change */
287 if (ether_addr_equal(vlan->real_dev_addr, dev->dev_addr))
288 return;
289
290 /* vlan continues to inherit address of lower device */
291 if (vlan_dev_inherit_address(vlandev, dev))
292 goto out;
293
294 /* vlan address was different from the old address and is equal to
295 * the new address */
296 if (!ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
297 ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
298 dev_uc_del(dev, vlandev->dev_addr);
299
300 /* vlan address was equal to the old address and is different from
301 * the new address */
302 if (ether_addr_equal(vlandev->dev_addr, vlan->real_dev_addr) &&
303 !ether_addr_equal(vlandev->dev_addr, dev->dev_addr))
304 dev_uc_add(dev, vlandev->dev_addr);
305
306 out:
307 ether_addr_copy(vlan->real_dev_addr, dev->dev_addr);
308 }
309
vlan_transfer_features(struct net_device * dev,struct net_device * vlandev)310 static void vlan_transfer_features(struct net_device *dev,
311 struct net_device *vlandev)
312 {
313 struct vlan_dev_priv *vlan = vlan_dev_priv(vlandev);
314
315 vlandev->gso_max_size = dev->gso_max_size;
316
317 if (vlan_hw_offload_capable(dev->features, vlan->vlan_proto))
318 vlandev->hard_header_len = dev->hard_header_len;
319 else
320 vlandev->hard_header_len = dev->hard_header_len + VLAN_HLEN;
321
322 #if IS_ENABLED(CONFIG_FCOE)
323 vlandev->fcoe_ddp_xid = dev->fcoe_ddp_xid;
324 #endif
325
326 netdev_update_features(vlandev);
327 }
328
__vlan_device_event(struct net_device * dev,unsigned long event)329 static int __vlan_device_event(struct net_device *dev, unsigned long event)
330 {
331 int err = 0;
332
333 switch (event) {
334 case NETDEV_CHANGENAME:
335 vlan_proc_rem_dev(dev);
336 err = vlan_proc_add_dev(dev);
337 break;
338 case NETDEV_REGISTER:
339 err = vlan_proc_add_dev(dev);
340 break;
341 case NETDEV_UNREGISTER:
342 vlan_proc_rem_dev(dev);
343 break;
344 }
345
346 return err;
347 }
348
vlan_device_event(struct notifier_block * unused,unsigned long event,void * ptr)349 static int vlan_device_event(struct notifier_block *unused, unsigned long event,
350 void *ptr)
351 {
352 struct net_device *dev = netdev_notifier_info_to_dev(ptr);
353 struct vlan_group *grp;
354 struct vlan_info *vlan_info;
355 int i, flgs;
356 struct net_device *vlandev;
357 struct vlan_dev_priv *vlan;
358 bool last = false;
359 LIST_HEAD(list);
360
361 if (is_vlan_dev(dev)) {
362 int err = __vlan_device_event(dev, event);
363
364 if (err)
365 return notifier_from_errno(err);
366 }
367
368 if ((event == NETDEV_UP) &&
369 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER)) {
370 pr_info("adding VLAN 0 to HW filter on device %s\n",
371 dev->name);
372 vlan_vid_add(dev, htons(ETH_P_8021Q), 0);
373 }
374 if (event == NETDEV_DOWN &&
375 (dev->features & NETIF_F_HW_VLAN_CTAG_FILTER))
376 vlan_vid_del(dev, htons(ETH_P_8021Q), 0);
377
378 vlan_info = rtnl_dereference(dev->vlan_info);
379 if (!vlan_info)
380 goto out;
381 grp = &vlan_info->grp;
382
383 /* It is OK that we do not hold the group lock right now,
384 * as we run under the RTNL lock.
385 */
386
387 switch (event) {
388 case NETDEV_CHANGE:
389 /* Propagate real device state to vlan devices */
390 vlan_group_for_each_dev(grp, i, vlandev)
391 netif_stacked_transfer_operstate(dev, vlandev);
392 break;
393
394 case NETDEV_CHANGEADDR:
395 /* Adjust unicast filters on underlying device */
396 vlan_group_for_each_dev(grp, i, vlandev) {
397 flgs = vlandev->flags;
398 if (!(flgs & IFF_UP))
399 continue;
400
401 vlan_sync_address(dev, vlandev);
402 }
403 break;
404
405 case NETDEV_CHANGEMTU:
406 vlan_group_for_each_dev(grp, i, vlandev) {
407 if (vlandev->mtu <= dev->mtu)
408 continue;
409
410 dev_set_mtu(vlandev, dev->mtu);
411 }
412 break;
413
414 case NETDEV_FEAT_CHANGE:
415 /* Propagate device features to underlying device */
416 vlan_group_for_each_dev(grp, i, vlandev)
417 vlan_transfer_features(dev, vlandev);
418 break;
419
420 case NETDEV_DOWN:
421 /* Put all VLANs for this dev in the down state too. */
422 vlan_group_for_each_dev(grp, i, vlandev) {
423 flgs = vlandev->flags;
424 if (!(flgs & IFF_UP))
425 continue;
426
427 vlan = vlan_dev_priv(vlandev);
428 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
429 dev_change_flags(vlandev, flgs & ~IFF_UP);
430 netif_stacked_transfer_operstate(dev, vlandev);
431 }
432 break;
433
434 case NETDEV_UP:
435 /* Put all VLANs for this dev in the up state too. */
436 vlan_group_for_each_dev(grp, i, vlandev) {
437 flgs = vlandev->flags;
438 if (flgs & IFF_UP)
439 continue;
440
441 vlan = vlan_dev_priv(vlandev);
442 if (!(vlan->flags & VLAN_FLAG_LOOSE_BINDING))
443 dev_change_flags(vlandev, flgs | IFF_UP);
444 netif_stacked_transfer_operstate(dev, vlandev);
445 }
446 break;
447
448 case NETDEV_UNREGISTER:
449 /* twiddle thumbs on netns device moves */
450 if (dev->reg_state != NETREG_UNREGISTERING)
451 break;
452
453 vlan_group_for_each_dev(grp, i, vlandev) {
454 /* removal of last vid destroys vlan_info, abort
455 * afterwards */
456 if (vlan_info->nr_vids == 1)
457 last = true;
458
459 unregister_vlan_dev(vlandev, &list);
460 if (last)
461 break;
462 }
463 unregister_netdevice_many(&list);
464 break;
465
466 case NETDEV_PRE_TYPE_CHANGE:
467 /* Forbid underlaying device to change its type. */
468 if (vlan_uses_dev(dev))
469 return NOTIFY_BAD;
470 break;
471
472 case NETDEV_NOTIFY_PEERS:
473 case NETDEV_BONDING_FAILOVER:
474 case NETDEV_RESEND_IGMP:
475 /* Propagate to vlan devices */
476 vlan_group_for_each_dev(grp, i, vlandev)
477 call_netdevice_notifiers(event, vlandev);
478 break;
479 }
480
481 out:
482 return NOTIFY_DONE;
483 }
484
485 static struct notifier_block vlan_notifier_block __read_mostly = {
486 .notifier_call = vlan_device_event,
487 };
488
489 /*
490 * VLAN IOCTL handler.
491 * o execute requested action or pass command to the device driver
492 * arg is really a struct vlan_ioctl_args __user *.
493 */
vlan_ioctl_handler(struct net * net,void __user * arg)494 static int vlan_ioctl_handler(struct net *net, void __user *arg)
495 {
496 int err;
497 struct vlan_ioctl_args args;
498 struct net_device *dev = NULL;
499
500 if (copy_from_user(&args, arg, sizeof(struct vlan_ioctl_args)))
501 return -EFAULT;
502
503 /* Null terminate this sucker, just in case. */
504 args.device1[23] = 0;
505 args.u.device2[23] = 0;
506
507 rtnl_lock();
508
509 switch (args.cmd) {
510 case SET_VLAN_INGRESS_PRIORITY_CMD:
511 case SET_VLAN_EGRESS_PRIORITY_CMD:
512 case SET_VLAN_FLAG_CMD:
513 case ADD_VLAN_CMD:
514 case DEL_VLAN_CMD:
515 case GET_VLAN_REALDEV_NAME_CMD:
516 case GET_VLAN_VID_CMD:
517 err = -ENODEV;
518 dev = __dev_get_by_name(net, args.device1);
519 if (!dev)
520 goto out;
521
522 err = -EINVAL;
523 if (args.cmd != ADD_VLAN_CMD && !is_vlan_dev(dev))
524 goto out;
525 }
526
527 switch (args.cmd) {
528 case SET_VLAN_INGRESS_PRIORITY_CMD:
529 err = -EPERM;
530 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
531 break;
532 vlan_dev_set_ingress_priority(dev,
533 args.u.skb_priority,
534 args.vlan_qos);
535 err = 0;
536 break;
537
538 case SET_VLAN_EGRESS_PRIORITY_CMD:
539 err = -EPERM;
540 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
541 break;
542 err = vlan_dev_set_egress_priority(dev,
543 args.u.skb_priority,
544 args.vlan_qos);
545 break;
546
547 case SET_VLAN_FLAG_CMD:
548 err = -EPERM;
549 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
550 break;
551 err = vlan_dev_change_flags(dev,
552 args.vlan_qos ? args.u.flag : 0,
553 args.u.flag);
554 break;
555
556 case SET_VLAN_NAME_TYPE_CMD:
557 err = -EPERM;
558 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
559 break;
560 if ((args.u.name_type >= 0) &&
561 (args.u.name_type < VLAN_NAME_TYPE_HIGHEST)) {
562 struct vlan_net *vn;
563
564 vn = net_generic(net, vlan_net_id);
565 vn->name_type = args.u.name_type;
566 err = 0;
567 } else {
568 err = -EINVAL;
569 }
570 break;
571
572 case ADD_VLAN_CMD:
573 err = -EPERM;
574 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
575 break;
576 err = register_vlan_device(dev, args.u.VID);
577 break;
578
579 case DEL_VLAN_CMD:
580 err = -EPERM;
581 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
582 break;
583 unregister_vlan_dev(dev, NULL);
584 err = 0;
585 break;
586
587 case GET_VLAN_REALDEV_NAME_CMD:
588 err = 0;
589 vlan_dev_get_realdev_name(dev, args.u.device2);
590 if (copy_to_user(arg, &args,
591 sizeof(struct vlan_ioctl_args)))
592 err = -EFAULT;
593 break;
594
595 case GET_VLAN_VID_CMD:
596 err = 0;
597 args.u.VID = vlan_dev_vlan_id(dev);
598 if (copy_to_user(arg, &args,
599 sizeof(struct vlan_ioctl_args)))
600 err = -EFAULT;
601 break;
602
603 default:
604 err = -EOPNOTSUPP;
605 break;
606 }
607 out:
608 rtnl_unlock();
609 return err;
610 }
611
vlan_init_net(struct net * net)612 static int __net_init vlan_init_net(struct net *net)
613 {
614 struct vlan_net *vn = net_generic(net, vlan_net_id);
615 int err;
616
617 vn->name_type = VLAN_NAME_TYPE_RAW_PLUS_VID_NO_PAD;
618
619 err = vlan_proc_init(net);
620
621 return err;
622 }
623
vlan_exit_net(struct net * net)624 static void __net_exit vlan_exit_net(struct net *net)
625 {
626 vlan_proc_cleanup(net);
627 }
628
629 static struct pernet_operations vlan_net_ops = {
630 .init = vlan_init_net,
631 .exit = vlan_exit_net,
632 .id = &vlan_net_id,
633 .size = sizeof(struct vlan_net),
634 };
635
vlan_proto_init(void)636 static int __init vlan_proto_init(void)
637 {
638 int err;
639
640 pr_info("%s v%s\n", vlan_fullname, vlan_version);
641
642 err = register_pernet_subsys(&vlan_net_ops);
643 if (err < 0)
644 goto err0;
645
646 err = register_netdevice_notifier(&vlan_notifier_block);
647 if (err < 0)
648 goto err2;
649
650 err = vlan_gvrp_init();
651 if (err < 0)
652 goto err3;
653
654 err = vlan_mvrp_init();
655 if (err < 0)
656 goto err4;
657
658 err = vlan_netlink_init();
659 if (err < 0)
660 goto err5;
661
662 vlan_ioctl_set(vlan_ioctl_handler);
663 return 0;
664
665 err5:
666 vlan_mvrp_uninit();
667 err4:
668 vlan_gvrp_uninit();
669 err3:
670 unregister_netdevice_notifier(&vlan_notifier_block);
671 err2:
672 unregister_pernet_subsys(&vlan_net_ops);
673 err0:
674 return err;
675 }
676
vlan_cleanup_module(void)677 static void __exit vlan_cleanup_module(void)
678 {
679 vlan_ioctl_set(NULL);
680 vlan_netlink_fini();
681
682 unregister_netdevice_notifier(&vlan_notifier_block);
683
684 unregister_pernet_subsys(&vlan_net_ops);
685 rcu_barrier(); /* Wait for completion of call_rcu()'s */
686
687 vlan_mvrp_uninit();
688 vlan_gvrp_uninit();
689 }
690
691 module_init(vlan_proto_init);
692 module_exit(vlan_cleanup_module);
693
694 MODULE_LICENSE("GPL");
695 MODULE_VERSION(DRV_VERSION);
696