LCOV - code coverage report
Current view: top level - net/ipv4 - devinet.c (source / functions) Hit Total Coverage
Test: landlock.info Lines: 548 1447 37.9 %
Date: 2021-04-22 12:43:58 Functions: 31 64 48.4 %

          Line data    Source code
       1             : // SPDX-License-Identifier: GPL-2.0-or-later
       2             : /*
       3             :  *      NET3    IP device support routines.
       4             :  *
       5             :  *      Derived from the IP parts of dev.c 1.0.19
       6             :  *              Authors:        Ross Biro
       7             :  *                              Fred N. van Kempen, <waltje@uWalt.NL.Mugnet.ORG>
       8             :  *                              Mark Evans, <evansmp@uhura.aston.ac.uk>
       9             :  *
      10             :  *      Additional Authors:
      11             :  *              Alan Cox, <gw4pts@gw4pts.ampr.org>
      12             :  *              Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
      13             :  *
      14             :  *      Changes:
      15             :  *              Alexey Kuznetsov:       pa_* fields are replaced with ifaddr
      16             :  *                                      lists.
      17             :  *              Cyrus Durgin:           updated for kmod
      18             :  *              Matthias Andree:        in devinet_ioctl, compare label and
      19             :  *                                      address (4.4BSD alias style support),
      20             :  *                                      fall back to comparing just the label
      21             :  *                                      if no match found.
      22             :  */
      23             : 
      24             : 
      25             : #include <linux/uaccess.h>
      26             : #include <linux/bitops.h>
      27             : #include <linux/capability.h>
      28             : #include <linux/module.h>
      29             : #include <linux/types.h>
      30             : #include <linux/kernel.h>
      31             : #include <linux/sched/signal.h>
      32             : #include <linux/string.h>
      33             : #include <linux/mm.h>
      34             : #include <linux/socket.h>
      35             : #include <linux/sockios.h>
      36             : #include <linux/in.h>
      37             : #include <linux/errno.h>
      38             : #include <linux/interrupt.h>
      39             : #include <linux/if_addr.h>
      40             : #include <linux/if_ether.h>
      41             : #include <linux/inet.h>
      42             : #include <linux/netdevice.h>
      43             : #include <linux/etherdevice.h>
      44             : #include <linux/skbuff.h>
      45             : #include <linux/init.h>
      46             : #include <linux/notifier.h>
      47             : #include <linux/inetdevice.h>
      48             : #include <linux/igmp.h>
      49             : #include <linux/slab.h>
      50             : #include <linux/hash.h>
      51             : #ifdef CONFIG_SYSCTL
      52             : #include <linux/sysctl.h>
      53             : #endif
      54             : #include <linux/kmod.h>
      55             : #include <linux/netconf.h>
      56             : 
      57             : #include <net/arp.h>
      58             : #include <net/ip.h>
      59             : #include <net/route.h>
      60             : #include <net/ip_fib.h>
      61             : #include <net/rtnetlink.h>
      62             : #include <net/net_namespace.h>
      63             : #include <net/addrconf.h>
      64             : 
      65             : #define IPV6ONLY_FLAGS  \
      66             :                 (IFA_F_NODAD | IFA_F_OPTIMISTIC | IFA_F_DADFAILED | \
      67             :                  IFA_F_HOMEADDRESS | IFA_F_TENTATIVE | \
      68             :                  IFA_F_MANAGETEMPADDR | IFA_F_STABLE_PRIVACY)
      69             : 
      70             : static struct ipv4_devconf ipv4_devconf = {
      71             :         .data = {
      72             :                 [IPV4_DEVCONF_ACCEPT_REDIRECTS - 1] = 1,
      73             :                 [IPV4_DEVCONF_SEND_REDIRECTS - 1] = 1,
      74             :                 [IPV4_DEVCONF_SECURE_REDIRECTS - 1] = 1,
      75             :                 [IPV4_DEVCONF_SHARED_MEDIA - 1] = 1,
      76             :                 [IPV4_DEVCONF_IGMPV2_UNSOLICITED_REPORT_INTERVAL - 1] = 10000 /*ms*/,
      77             :                 [IPV4_DEVCONF_IGMPV3_UNSOLICITED_REPORT_INTERVAL - 1] =  1000 /*ms*/,
      78             :         },
      79             : };
      80             : 
      81             : static struct ipv4_devconf ipv4_devconf_dflt = {
      82             :         .data = {
      83             :                 [IPV4_DEVCONF_ACCEPT_REDIRECTS - 1] = 1,
      84             :                 [IPV4_DEVCONF_SEND_REDIRECTS - 1] = 1,
      85             :                 [IPV4_DEVCONF_SECURE_REDIRECTS - 1] = 1,
      86             :                 [IPV4_DEVCONF_SHARED_MEDIA - 1] = 1,
      87             :                 [IPV4_DEVCONF_ACCEPT_SOURCE_ROUTE - 1] = 1,
      88             :                 [IPV4_DEVCONF_IGMPV2_UNSOLICITED_REPORT_INTERVAL - 1] = 10000 /*ms*/,
      89             :                 [IPV4_DEVCONF_IGMPV3_UNSOLICITED_REPORT_INTERVAL - 1] =  1000 /*ms*/,
      90             :         },
      91             : };
      92             : 
      93             : #define IPV4_DEVCONF_DFLT(net, attr) \
      94             :         IPV4_DEVCONF((*net->ipv4.devconf_dflt), attr)
      95             : 
      96             : static const struct nla_policy ifa_ipv4_policy[IFA_MAX+1] = {
      97             :         [IFA_LOCAL]             = { .type = NLA_U32 },
      98             :         [IFA_ADDRESS]           = { .type = NLA_U32 },
      99             :         [IFA_BROADCAST]         = { .type = NLA_U32 },
     100             :         [IFA_LABEL]             = { .type = NLA_STRING, .len = IFNAMSIZ - 1 },
     101             :         [IFA_CACHEINFO]         = { .len = sizeof(struct ifa_cacheinfo) },
     102             :         [IFA_FLAGS]             = { .type = NLA_U32 },
     103             :         [IFA_RT_PRIORITY]       = { .type = NLA_U32 },
     104             :         [IFA_TARGET_NETNSID]    = { .type = NLA_S32 },
     105             : };
     106             : 
     107             : struct inet_fill_args {
     108             :         u32 portid;
     109             :         u32 seq;
     110             :         int event;
     111             :         unsigned int flags;
     112             :         int netnsid;
     113             :         int ifindex;
     114             : };
     115             : 
     116             : #define IN4_ADDR_HSIZE_SHIFT    8
     117             : #define IN4_ADDR_HSIZE          (1U << IN4_ADDR_HSIZE_SHIFT)
     118             : 
     119             : static struct hlist_head inet_addr_lst[IN4_ADDR_HSIZE];
     120             : 
     121         100 : static u32 inet_addr_hash(const struct net *net, __be32 addr)
     122             : {
     123         100 :         u32 val = (__force u32) addr ^ net_hash_mix(net);
     124             : 
     125         100 :         return hash_32(val, IN4_ADDR_HSIZE_SHIFT);
     126             : }
     127             : 
     128           2 : static void inet_hash_insert(struct net *net, struct in_ifaddr *ifa)
     129             : {
     130           2 :         u32 hash = inet_addr_hash(net, ifa->ifa_local);
     131             : 
     132           2 :         ASSERT_RTNL();
     133           2 :         hlist_add_head_rcu(&ifa->hash, &inet_addr_lst[hash]);
     134           2 : }
     135             : 
     136           0 : static void inet_hash_remove(struct in_ifaddr *ifa)
     137             : {
     138           0 :         ASSERT_RTNL();
     139           0 :         hlist_del_init_rcu(&ifa->hash);
     140           0 : }
     141             : 
     142             : /**
     143             :  * __ip_dev_find - find the first device with a given source address.
     144             :  * @net: the net namespace
     145             :  * @addr: the source address
     146             :  * @devref: if true, take a reference on the found device
     147             :  *
     148             :  * If a caller uses devref=false, it should be protected by RCU, or RTNL
     149             :  */
     150          25 : struct net_device *__ip_dev_find(struct net *net, __be32 addr, bool devref)
     151             : {
     152          25 :         struct net_device *result = NULL;
     153          25 :         struct in_ifaddr *ifa;
     154             : 
     155          25 :         rcu_read_lock();
     156          25 :         ifa = inet_lookup_ifaddr_rcu(net, addr);
     157          25 :         if (!ifa) {
     158           0 :                 struct flowi4 fl4 = { .daddr = addr };
     159           0 :                 struct fib_result res = { 0 };
     160           0 :                 struct fib_table *local;
     161             : 
     162             :                 /* Fallback to FIB local table so that communication
     163             :                  * over loopback subnets work.
     164             :                  */
     165           0 :                 local = fib_get_table(net, RT_TABLE_LOCAL);
     166           0 :                 if (local &&
     167           0 :                     !fib_table_lookup(local, &fl4, &res, FIB_LOOKUP_NOREF) &&
     168           0 :                     res.type == RTN_LOCAL)
     169           0 :                         result = FIB_RES_DEV(res);
     170             :         } else {
     171          25 :                 result = ifa->ifa_dev->dev;
     172             :         }
     173          25 :         if (result && devref)
     174           0 :                 dev_hold(result);
     175          25 :         rcu_read_unlock();
     176          25 :         return result;
     177             : }
     178             : EXPORT_SYMBOL(__ip_dev_find);
     179             : 
     180             : /* called under RCU lock */
     181          98 : struct in_ifaddr *inet_lookup_ifaddr_rcu(struct net *net, __be32 addr)
     182             : {
     183          98 :         u32 hash = inet_addr_hash(net, addr);
     184          98 :         struct in_ifaddr *ifa;
     185             : 
     186         196 :         hlist_for_each_entry_rcu(ifa, &inet_addr_lst[hash], hash)
     187          25 :                 if (ifa->ifa_local == addr &&
     188          25 :                     net_eq(dev_net(ifa->ifa_dev->dev), net))
     189          25 :                         return ifa;
     190             : 
     191             :         return NULL;
     192             : }
     193             : 
     194             : static void rtmsg_ifa(int event, struct in_ifaddr *, struct nlmsghdr *, u32);
     195             : 
     196             : static BLOCKING_NOTIFIER_HEAD(inetaddr_chain);
     197             : static BLOCKING_NOTIFIER_HEAD(inetaddr_validator_chain);
     198             : static void inet_del_ifa(struct in_device *in_dev,
     199             :                          struct in_ifaddr __rcu **ifap,
     200             :                          int destroy);
     201             : #ifdef CONFIG_SYSCTL
     202             : static int devinet_sysctl_register(struct in_device *idev);
     203             : static void devinet_sysctl_unregister(struct in_device *idev);
     204             : #else
     205             : static int devinet_sysctl_register(struct in_device *idev)
     206             : {
     207             :         return 0;
     208             : }
     209             : static void devinet_sysctl_unregister(struct in_device *idev)
     210             : {
     211             : }
     212             : #endif
     213             : 
     214             : /* Locks all the inet devices. */
     215             : 
     216           3 : static struct in_ifaddr *inet_alloc_ifa(void)
     217             : {
     218           3 :         return kzalloc(sizeof(struct in_ifaddr), GFP_KERNEL);
     219             : }
     220             : 
     221           1 : static void inet_rcu_free_ifa(struct rcu_head *head)
     222             : {
     223           1 :         struct in_ifaddr *ifa = container_of(head, struct in_ifaddr, rcu_head);
     224           1 :         if (ifa->ifa_dev)
     225           1 :                 in_dev_put(ifa->ifa_dev);
     226           1 :         kfree(ifa);
     227           1 : }
     228             : 
     229           1 : static void inet_free_ifa(struct in_ifaddr *ifa)
     230             : {
     231           1 :         call_rcu(&ifa->rcu_head, inet_rcu_free_ifa);
     232           0 : }
     233             : 
     234           0 : void in_dev_finish_destroy(struct in_device *idev)
     235             : {
     236           0 :         struct net_device *dev = idev->dev;
     237             : 
     238           0 :         WARN_ON(idev->ifa_list);
     239           0 :         WARN_ON(idev->mc_list);
     240           0 :         kfree(rcu_dereference_protected(idev->mc_hash, 1));
     241             : #ifdef NET_REFCNT_DEBUG
     242             :         pr_debug("%s: %p=%s\n", __func__, idev, dev ? dev->name : "NIL");
     243             : #endif
     244           0 :         dev_put(dev);
     245           0 :         if (!idev->dead)
     246           0 :                 pr_err("Freeing alive in_device %p\n", idev);
     247             :         else
     248           0 :                 kfree(idev);
     249           0 : }
     250             : EXPORT_SYMBOL(in_dev_finish_destroy);
     251             : 
     252           2 : static struct in_device *inetdev_init(struct net_device *dev)
     253             : {
     254           2 :         struct in_device *in_dev;
     255           2 :         int err = -ENOMEM;
     256             : 
     257           2 :         ASSERT_RTNL();
     258             : 
     259           2 :         in_dev = kzalloc(sizeof(*in_dev), GFP_KERNEL);
     260           2 :         if (!in_dev)
     261           0 :                 goto out;
     262           2 :         memcpy(&in_dev->cnf, dev_net(dev)->ipv4.devconf_dflt,
     263             :                         sizeof(in_dev->cnf));
     264           2 :         in_dev->cnf.sysctl = NULL;
     265           2 :         in_dev->dev = dev;
     266           2 :         in_dev->arp_parms = neigh_parms_alloc(dev, &arp_tbl);
     267           2 :         if (!in_dev->arp_parms)
     268           0 :                 goto out_kfree;
     269           2 :         if (IPV4_DEVCONF(in_dev->cnf, FORWARDING))
     270           0 :                 dev_disable_lro(dev);
     271             :         /* Reference in_dev->dev */
     272           2 :         dev_hold(dev);
     273             :         /* Account for reference dev->ip_ptr (below) */
     274           2 :         refcount_set(&in_dev->refcnt, 1);
     275             : 
     276           2 :         err = devinet_sysctl_register(in_dev);
     277           2 :         if (err) {
     278           0 :                 in_dev->dead = 1;
     279           0 :                 neigh_parms_release(&arp_tbl, in_dev->arp_parms);
     280           0 :                 in_dev_put(in_dev);
     281           0 :                 in_dev = NULL;
     282           0 :                 goto out;
     283             :         }
     284           2 :         ip_mc_init_dev(in_dev);
     285           2 :         if (dev->flags & IFF_UP)
     286           0 :                 ip_mc_up(in_dev);
     287             : 
     288             :         /* we can receive as soon as ip_ptr is set -- do this last */
     289           2 :         rcu_assign_pointer(dev->ip_ptr, in_dev);
     290           2 : out:
     291           2 :         return in_dev ?: ERR_PTR(err);
     292           0 : out_kfree:
     293           0 :         kfree(in_dev);
     294           0 :         in_dev = NULL;
     295           0 :         goto out;
     296             : }
     297             : 
     298           0 : static void in_dev_rcu_put(struct rcu_head *head)
     299             : {
     300           0 :         struct in_device *idev = container_of(head, struct in_device, rcu_head);
     301           0 :         in_dev_put(idev);
     302           0 : }
     303             : 
     304           0 : static void inetdev_destroy(struct in_device *in_dev)
     305             : {
     306           0 :         struct net_device *dev;
     307           0 :         struct in_ifaddr *ifa;
     308             : 
     309           0 :         ASSERT_RTNL();
     310             : 
     311           0 :         dev = in_dev->dev;
     312             : 
     313           0 :         in_dev->dead = 1;
     314             : 
     315           0 :         ip_mc_destroy_dev(in_dev);
     316             : 
     317           0 :         while ((ifa = rtnl_dereference(in_dev->ifa_list)) != NULL) {
     318           0 :                 inet_del_ifa(in_dev, &in_dev->ifa_list, 0);
     319           0 :                 inet_free_ifa(ifa);
     320             :         }
     321             : 
     322           0 :         RCU_INIT_POINTER(dev->ip_ptr, NULL);
     323             : 
     324           0 :         devinet_sysctl_unregister(in_dev);
     325           0 :         neigh_parms_release(&arp_tbl, in_dev->arp_parms);
     326           0 :         arp_ifdown(dev);
     327             : 
     328           0 :         call_rcu(&in_dev->rcu_head, in_dev_rcu_put);
     329           0 : }
     330             : 
     331           0 : int inet_addr_onlink(struct in_device *in_dev, __be32 a, __be32 b)
     332             : {
     333           0 :         const struct in_ifaddr *ifa;
     334             : 
     335           0 :         rcu_read_lock();
     336           0 :         in_dev_for_each_ifa_rcu(ifa, in_dev) {
     337           0 :                 if (inet_ifa_match(a, ifa)) {
     338           0 :                         if (!b || inet_ifa_match(b, ifa)) {
     339           0 :                                 rcu_read_unlock();
     340           0 :                                 return 1;
     341             :                         }
     342             :                 }
     343             :         }
     344           0 :         rcu_read_unlock();
     345           0 :         return 0;
     346             : }
     347             : 
     348           0 : static void __inet_del_ifa(struct in_device *in_dev,
     349             :                            struct in_ifaddr __rcu **ifap,
     350             :                            int destroy, struct nlmsghdr *nlh, u32 portid)
     351             : {
     352           0 :         struct in_ifaddr *promote = NULL;
     353           0 :         struct in_ifaddr *ifa, *ifa1;
     354           0 :         struct in_ifaddr *last_prim;
     355           0 :         struct in_ifaddr *prev_prom = NULL;
     356           0 :         int do_promote = IN_DEV_PROMOTE_SECONDARIES(in_dev);
     357             : 
     358           0 :         ASSERT_RTNL();
     359             : 
     360           0 :         ifa1 = rtnl_dereference(*ifap);
     361           0 :         last_prim = rtnl_dereference(in_dev->ifa_list);
     362           0 :         if (in_dev->dead)
     363           0 :                 goto no_promotions;
     364             : 
     365             :         /* 1. Deleting primary ifaddr forces deletion all secondaries
     366             :          * unless alias promotion is set
     367             :          **/
     368             : 
     369           0 :         if (!(ifa1->ifa_flags & IFA_F_SECONDARY)) {
     370           0 :                 struct in_ifaddr __rcu **ifap1 = &ifa1->ifa_next;
     371             : 
     372           0 :                 while ((ifa = rtnl_dereference(*ifap1)) != NULL) {
     373           0 :                         if (!(ifa->ifa_flags & IFA_F_SECONDARY) &&
     374           0 :                             ifa1->ifa_scope <= ifa->ifa_scope)
     375           0 :                                 last_prim = ifa;
     376             : 
     377           0 :                         if (!(ifa->ifa_flags & IFA_F_SECONDARY) ||
     378           0 :                             ifa1->ifa_mask != ifa->ifa_mask ||
     379           0 :                             !inet_ifa_match(ifa1->ifa_address, ifa)) {
     380           0 :                                 ifap1 = &ifa->ifa_next;
     381           0 :                                 prev_prom = ifa;
     382           0 :                                 continue;
     383             :                         }
     384             : 
     385           0 :                         if (!do_promote) {
     386           0 :                                 inet_hash_remove(ifa);
     387           0 :                                 *ifap1 = ifa->ifa_next;
     388             : 
     389           0 :                                 rtmsg_ifa(RTM_DELADDR, ifa, nlh, portid);
     390           0 :                                 blocking_notifier_call_chain(&inetaddr_chain,
     391             :                                                 NETDEV_DOWN, ifa);
     392           0 :                                 inet_free_ifa(ifa);
     393             :                         } else {
     394             :                                 promote = ifa;
     395             :                                 break;
     396             :                         }
     397             :                 }
     398             :         }
     399             : 
     400             :         /* On promotion all secondaries from subnet are changing
     401             :          * the primary IP, we must remove all their routes silently
     402             :          * and later to add them back with new prefsrc. Do this
     403             :          * while all addresses are on the device list.
     404             :          */
     405           0 :         for (ifa = promote; ifa; ifa = rtnl_dereference(ifa->ifa_next)) {
     406           0 :                 if (ifa1->ifa_mask == ifa->ifa_mask &&
     407           0 :                     inet_ifa_match(ifa1->ifa_address, ifa))
     408           0 :                         fib_del_ifaddr(ifa, ifa1);
     409             :         }
     410             : 
     411           0 : no_promotions:
     412             :         /* 2. Unlink it */
     413             : 
     414           0 :         *ifap = ifa1->ifa_next;
     415           0 :         inet_hash_remove(ifa1);
     416             : 
     417             :         /* 3. Announce address deletion */
     418             : 
     419             :         /* Send message first, then call notifier.
     420             :            At first sight, FIB update triggered by notifier
     421             :            will refer to already deleted ifaddr, that could confuse
     422             :            netlink listeners. It is not true: look, gated sees
     423             :            that route deleted and if it still thinks that ifaddr
     424             :            is valid, it will try to restore deleted routes... Grr.
     425             :            So that, this order is correct.
     426             :          */
     427           0 :         rtmsg_ifa(RTM_DELADDR, ifa1, nlh, portid);
     428           0 :         blocking_notifier_call_chain(&inetaddr_chain, NETDEV_DOWN, ifa1);
     429             : 
     430           0 :         if (promote) {
     431           0 :                 struct in_ifaddr *next_sec;
     432             : 
     433           0 :                 next_sec = rtnl_dereference(promote->ifa_next);
     434           0 :                 if (prev_prom) {
     435           0 :                         struct in_ifaddr *last_sec;
     436             : 
     437           0 :                         rcu_assign_pointer(prev_prom->ifa_next, next_sec);
     438             : 
     439           0 :                         last_sec = rtnl_dereference(last_prim->ifa_next);
     440           0 :                         rcu_assign_pointer(promote->ifa_next, last_sec);
     441           0 :                         rcu_assign_pointer(last_prim->ifa_next, promote);
     442             :                 }
     443             : 
     444           0 :                 promote->ifa_flags &= ~IFA_F_SECONDARY;
     445           0 :                 rtmsg_ifa(RTM_NEWADDR, promote, nlh, portid);
     446           0 :                 blocking_notifier_call_chain(&inetaddr_chain,
     447             :                                 NETDEV_UP, promote);
     448           0 :                 for (ifa = next_sec; ifa;
     449           0 :                      ifa = rtnl_dereference(ifa->ifa_next)) {
     450           0 :                         if (ifa1->ifa_mask != ifa->ifa_mask ||
     451           0 :                             !inet_ifa_match(ifa1->ifa_address, ifa))
     452           0 :                                         continue;
     453           0 :                         fib_add_ifaddr(ifa);
     454             :                 }
     455             : 
     456             :         }
     457           0 :         if (destroy)
     458           0 :                 inet_free_ifa(ifa1);
     459           0 : }
     460             : 
     461           0 : static void inet_del_ifa(struct in_device *in_dev,
     462             :                          struct in_ifaddr __rcu **ifap,
     463             :                          int destroy)
     464             : {
     465           0 :         __inet_del_ifa(in_dev, ifap, destroy, NULL, 0);
     466           0 : }
     467             : 
     468             : static void check_lifetime(struct work_struct *work);
     469             : 
     470             : static DECLARE_DELAYED_WORK(check_lifetime_work, check_lifetime);
     471             : 
     472           3 : static int __inet_insert_ifa(struct in_ifaddr *ifa, struct nlmsghdr *nlh,
     473             :                              u32 portid, struct netlink_ext_ack *extack)
     474             : {
     475           3 :         struct in_ifaddr __rcu **last_primary, **ifap;
     476           3 :         struct in_device *in_dev = ifa->ifa_dev;
     477           3 :         struct in_validator_info ivi;
     478           3 :         struct in_ifaddr *ifa1;
     479           3 :         int ret;
     480             : 
     481           3 :         ASSERT_RTNL();
     482             : 
     483           3 :         if (!ifa->ifa_local) {
     484           0 :                 inet_free_ifa(ifa);
     485           0 :                 return 0;
     486             :         }
     487             : 
     488           3 :         ifa->ifa_flags &= ~IFA_F_SECONDARY;
     489           3 :         last_primary = &in_dev->ifa_list;
     490             : 
     491             :         /* Don't set IPv6 only flags to IPv4 addresses */
     492           3 :         ifa->ifa_flags &= ~IPV6ONLY_FLAGS;
     493             : 
     494           3 :         ifap = &in_dev->ifa_list;
     495           3 :         ifa1 = rtnl_dereference(*ifap);
     496             : 
     497           3 :         while (ifa1) {
     498           1 :                 if (!(ifa1->ifa_flags & IFA_F_SECONDARY) &&
     499           1 :                     ifa->ifa_scope <= ifa1->ifa_scope)
     500           1 :                         last_primary = &ifa1->ifa_next;
     501           1 :                 if (ifa1->ifa_mask == ifa->ifa_mask &&
     502           1 :                     inet_ifa_match(ifa1->ifa_address, ifa)) {
     503           1 :                         if (ifa1->ifa_local == ifa->ifa_local) {
     504           1 :                                 inet_free_ifa(ifa);
     505           1 :                                 return -EEXIST;
     506             :                         }
     507           0 :                         if (ifa1->ifa_scope != ifa->ifa_scope) {
     508           0 :                                 inet_free_ifa(ifa);
     509           0 :                                 return -EINVAL;
     510             :                         }
     511           0 :                         ifa->ifa_flags |= IFA_F_SECONDARY;
     512             :                 }
     513             : 
     514           0 :                 ifap = &ifa1->ifa_next;
     515           0 :                 ifa1 = rtnl_dereference(*ifap);
     516             :         }
     517             : 
     518             :         /* Allow any devices that wish to register ifaddr validtors to weigh
     519             :          * in now, before changes are committed.  The rntl lock is serializing
     520             :          * access here, so the state should not change between a validator call
     521             :          * and a final notify on commit.  This isn't invoked on promotion under
     522             :          * the assumption that validators are checking the address itself, and
     523             :          * not the flags.
     524             :          */
     525           2 :         ivi.ivi_addr = ifa->ifa_address;
     526           2 :         ivi.ivi_dev = ifa->ifa_dev;
     527           2 :         ivi.extack = extack;
     528           2 :         ret = blocking_notifier_call_chain(&inetaddr_validator_chain,
     529             :                                            NETDEV_UP, &ivi);
     530           2 :         ret = notifier_to_errno(ret);
     531           0 :         if (ret) {
     532           0 :                 inet_free_ifa(ifa);
     533           0 :                 return ret;
     534             :         }
     535             : 
     536           2 :         if (!(ifa->ifa_flags & IFA_F_SECONDARY)) {
     537           2 :                 prandom_seed((__force u32) ifa->ifa_local);
     538           2 :                 ifap = last_primary;
     539             :         }
     540             : 
     541           2 :         rcu_assign_pointer(ifa->ifa_next, *ifap);
     542           2 :         rcu_assign_pointer(*ifap, ifa);
     543             : 
     544           2 :         inet_hash_insert(dev_net(in_dev->dev), ifa);
     545             : 
     546           2 :         cancel_delayed_work(&check_lifetime_work);
     547           2 :         queue_delayed_work(system_power_efficient_wq, &check_lifetime_work, 0);
     548             : 
     549             :         /* Send message first, then call notifier.
     550             :            Notifier will trigger FIB update, so that
     551             :            listeners of netlink will know about new ifaddr */
     552           2 :         rtmsg_ifa(RTM_NEWADDR, ifa, nlh, portid);
     553           2 :         blocking_notifier_call_chain(&inetaddr_chain, NETDEV_UP, ifa);
     554             : 
     555           2 :         return 0;
     556             : }
     557             : 
     558           1 : static int inet_insert_ifa(struct in_ifaddr *ifa)
     559             : {
     560           1 :         return __inet_insert_ifa(ifa, NULL, 0, NULL);
     561             : }
     562             : 
     563           0 : static int inet_set_ifa(struct net_device *dev, struct in_ifaddr *ifa)
     564             : {
     565           0 :         struct in_device *in_dev = __in_dev_get_rtnl(dev);
     566             : 
     567           0 :         ASSERT_RTNL();
     568             : 
     569           0 :         if (!in_dev) {
     570           0 :                 inet_free_ifa(ifa);
     571           0 :                 return -ENOBUFS;
     572             :         }
     573           0 :         ipv4_devconf_setall(in_dev);
     574           0 :         neigh_parms_data_state_setall(in_dev->arp_parms);
     575           0 :         if (ifa->ifa_dev != in_dev) {
     576           0 :                 WARN_ON(ifa->ifa_dev);
     577           0 :                 in_dev_hold(in_dev);
     578           0 :                 ifa->ifa_dev = in_dev;
     579             :         }
     580           0 :         if (ipv4_is_loopback(ifa->ifa_local))
     581           0 :                 ifa->ifa_scope = RT_SCOPE_HOST;
     582           0 :         return inet_insert_ifa(ifa);
     583             : }
     584             : 
     585             : /* Caller must hold RCU or RTNL :
     586             :  * We dont take a reference on found in_device
     587             :  */
     588           7 : struct in_device *inetdev_by_index(struct net *net, int ifindex)
     589             : {
     590           7 :         struct net_device *dev;
     591           7 :         struct in_device *in_dev = NULL;
     592             : 
     593           7 :         rcu_read_lock();
     594           7 :         dev = dev_get_by_index_rcu(net, ifindex);
     595           7 :         if (dev)
     596           7 :                 in_dev = rcu_dereference_rtnl(dev->ip_ptr);
     597           7 :         rcu_read_unlock();
     598           7 :         return in_dev;
     599             : }
     600             : EXPORT_SYMBOL(inetdev_by_index);
     601             : 
     602             : /* Called only from RTNL semaphored context. No locks. */
     603             : 
     604           0 : struct in_ifaddr *inet_ifa_byprefix(struct in_device *in_dev, __be32 prefix,
     605             :                                     __be32 mask)
     606             : {
     607           0 :         struct in_ifaddr *ifa;
     608             : 
     609           0 :         ASSERT_RTNL();
     610             : 
     611           0 :         in_dev_for_each_ifa_rtnl(ifa, in_dev) {
     612           0 :                 if (ifa->ifa_mask == mask && inet_ifa_match(prefix, ifa))
     613           0 :                         return ifa;
     614             :         }
     615             :         return NULL;
     616             : }
     617             : 
     618           0 : static int ip_mc_autojoin_config(struct net *net, bool join,
     619             :                                  const struct in_ifaddr *ifa)
     620             : {
     621             : #if defined(CONFIG_IP_MULTICAST)
     622             :         struct ip_mreqn mreq = {
     623             :                 .imr_multiaddr.s_addr = ifa->ifa_address,
     624             :                 .imr_ifindex = ifa->ifa_dev->dev->ifindex,
     625             :         };
     626             :         struct sock *sk = net->ipv4.mc_autojoin_sk;
     627             :         int ret;
     628             : 
     629             :         ASSERT_RTNL();
     630             : 
     631             :         lock_sock(sk);
     632             :         if (join)
     633             :                 ret = ip_mc_join_group(sk, &mreq);
     634             :         else
     635             :                 ret = ip_mc_leave_group(sk, &mreq);
     636             :         release_sock(sk);
     637             : 
     638             :         return ret;
     639             : #else
     640           0 :         return -EOPNOTSUPP;
     641             : #endif
     642             : }
     643             : 
     644           0 : static int inet_rtm_deladdr(struct sk_buff *skb, struct nlmsghdr *nlh,
     645             :                             struct netlink_ext_ack *extack)
     646             : {
     647           0 :         struct net *net = sock_net(skb->sk);
     648           0 :         struct in_ifaddr __rcu **ifap;
     649           0 :         struct nlattr *tb[IFA_MAX+1];
     650           0 :         struct in_device *in_dev;
     651           0 :         struct ifaddrmsg *ifm;
     652           0 :         struct in_ifaddr *ifa;
     653           0 :         int err;
     654             : 
     655           0 :         ASSERT_RTNL();
     656             : 
     657           0 :         err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
     658             :                                      ifa_ipv4_policy, extack);
     659           0 :         if (err < 0)
     660           0 :                 goto errout;
     661             : 
     662           0 :         ifm = nlmsg_data(nlh);
     663           0 :         in_dev = inetdev_by_index(net, ifm->ifa_index);
     664           0 :         if (!in_dev) {
     665           0 :                 err = -ENODEV;
     666           0 :                 goto errout;
     667             :         }
     668             : 
     669           0 :         for (ifap = &in_dev->ifa_list; (ifa = rtnl_dereference(*ifap)) != NULL;
     670           0 :              ifap = &ifa->ifa_next) {
     671           0 :                 if (tb[IFA_LOCAL] &&
     672           0 :                     ifa->ifa_local != nla_get_in_addr(tb[IFA_LOCAL]))
     673           0 :                         continue;
     674             : 
     675           0 :                 if (tb[IFA_LABEL] && nla_strcmp(tb[IFA_LABEL], ifa->ifa_label))
     676           0 :                         continue;
     677             : 
     678           0 :                 if (tb[IFA_ADDRESS] &&
     679           0 :                     (ifm->ifa_prefixlen != ifa->ifa_prefixlen ||
     680           0 :                     !inet_ifa_match(nla_get_in_addr(tb[IFA_ADDRESS]), ifa)))
     681           0 :                         continue;
     682             : 
     683           0 :                 if (ipv4_is_multicast(ifa->ifa_address))
     684           0 :                         ip_mc_autojoin_config(net, false, ifa);
     685           0 :                 __inet_del_ifa(in_dev, ifap, 1, nlh, NETLINK_CB(skb).portid);
     686           0 :                 return 0;
     687             :         }
     688             : 
     689             :         err = -EADDRNOTAVAIL;
     690             : errout:
     691             :         return err;
     692             : }
     693             : 
     694             : #define INFINITY_LIFE_TIME      0xFFFFFFFF
     695             : 
     696           3 : static void check_lifetime(struct work_struct *work)
     697             : {
     698           3 :         unsigned long now, next, next_sec, next_sched;
     699           3 :         struct in_ifaddr *ifa;
     700           3 :         struct hlist_node *n;
     701           3 :         int i;
     702             : 
     703           3 :         now = jiffies;
     704           3 :         next = round_jiffies_up(now + ADDR_CHECK_FREQUENCY);
     705             : 
     706         774 :         for (i = 0; i < IN4_ADDR_HSIZE; i++) {
     707         768 :                 bool change_needed = false;
     708             : 
     709         768 :                 rcu_read_lock();
     710        1542 :                 hlist_for_each_entry_rcu(ifa, &inet_addr_lst[i], hash) {
     711           3 :                         unsigned long age;
     712             : 
     713           3 :                         if (ifa->ifa_flags & IFA_F_PERMANENT)
     714           2 :                                 continue;
     715             : 
     716             :                         /* We try to batch several events at once. */
     717           1 :                         age = (now - ifa->ifa_tstamp +
     718             :                                ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
     719             : 
     720           1 :                         if (ifa->ifa_valid_lft != INFINITY_LIFE_TIME &&
     721           1 :                             age >= ifa->ifa_valid_lft) {
     722             :                                 change_needed = true;
     723           1 :                         } else if (ifa->ifa_preferred_lft ==
     724             :                                    INFINITY_LIFE_TIME) {
     725           0 :                                 continue;
     726           1 :                         } else if (age >= ifa->ifa_preferred_lft) {
     727           0 :                                 if (time_before(ifa->ifa_tstamp +
     728             :                                                 ifa->ifa_valid_lft * HZ, next))
     729           0 :                                         next = ifa->ifa_tstamp +
     730             :                                                ifa->ifa_valid_lft * HZ;
     731             : 
     732           0 :                                 if (!(ifa->ifa_flags & IFA_F_DEPRECATED))
     733           0 :                                         change_needed = true;
     734           1 :                         } else if (time_before(ifa->ifa_tstamp +
     735             :                                                ifa->ifa_preferred_lft * HZ,
     736             :                                                next)) {
     737           0 :                                 next = ifa->ifa_tstamp +
     738             :                                        ifa->ifa_preferred_lft * HZ;
     739             :                         }
     740             :                 }
     741         768 :                 rcu_read_unlock();
     742         768 :                 if (!change_needed)
     743         768 :                         continue;
     744           0 :                 rtnl_lock();
     745           0 :                 hlist_for_each_entry_safe(ifa, n, &inet_addr_lst[i], hash) {
     746           0 :                         unsigned long age;
     747             : 
     748           0 :                         if (ifa->ifa_flags & IFA_F_PERMANENT)
     749           0 :                                 continue;
     750             : 
     751             :                         /* We try to batch several events at once. */
     752           0 :                         age = (now - ifa->ifa_tstamp +
     753             :                                ADDRCONF_TIMER_FUZZ_MINUS) / HZ;
     754             : 
     755           0 :                         if (ifa->ifa_valid_lft != INFINITY_LIFE_TIME &&
     756           0 :                             age >= ifa->ifa_valid_lft) {
     757           0 :                                 struct in_ifaddr __rcu **ifap;
     758           0 :                                 struct in_ifaddr *tmp;
     759             : 
     760           0 :                                 ifap = &ifa->ifa_dev->ifa_list;
     761           0 :                                 tmp = rtnl_dereference(*ifap);
     762           0 :                                 while (tmp) {
     763           0 :                                         if (tmp == ifa) {
     764           0 :                                                 inet_del_ifa(ifa->ifa_dev,
     765             :                                                              ifap, 1);
     766             :                                                 break;
     767             :                                         }
     768           0 :                                         ifap = &tmp->ifa_next;
     769           0 :                                         tmp = rtnl_dereference(*ifap);
     770             :                                 }
     771           0 :                         } else if (ifa->ifa_preferred_lft !=
     772           0 :                                    INFINITY_LIFE_TIME &&
     773           0 :                                    age >= ifa->ifa_preferred_lft &&
     774           0 :                                    !(ifa->ifa_flags & IFA_F_DEPRECATED)) {
     775           0 :                                 ifa->ifa_flags |= IFA_F_DEPRECATED;
     776           0 :                                 rtmsg_ifa(RTM_NEWADDR, ifa, NULL, 0);
     777             :                         }
     778             :                 }
     779           0 :                 rtnl_unlock();
     780             :         }
     781             : 
     782           3 :         next_sec = round_jiffies_up(next);
     783           3 :         next_sched = next;
     784             : 
     785             :         /* If rounded timeout is accurate enough, accept it. */
     786           3 :         if (time_before(next_sec, next + ADDRCONF_TIMER_FUZZ))
     787           0 :                 next_sched = next_sec;
     788             : 
     789           3 :         now = jiffies;
     790             :         /* And minimum interval is ADDRCONF_TIMER_FUZZ_MAX. */
     791           3 :         if (time_before(next_sched, now + ADDRCONF_TIMER_FUZZ_MAX))
     792           0 :                 next_sched = now + ADDRCONF_TIMER_FUZZ_MAX;
     793             : 
     794           3 :         queue_delayed_work(system_power_efficient_wq, &check_lifetime_work,
     795             :                         next_sched - now);
     796           3 : }
     797             : 
     798           3 : static void set_ifa_lifetime(struct in_ifaddr *ifa, __u32 valid_lft,
     799             :                              __u32 prefered_lft)
     800             : {
     801           3 :         unsigned long timeout;
     802             : 
     803           3 :         ifa->ifa_flags &= ~(IFA_F_PERMANENT | IFA_F_DEPRECATED);
     804             : 
     805           3 :         timeout = addrconf_timeout_fixup(valid_lft, HZ);
     806           3 :         if (addrconf_finite_timeout(timeout))
     807           1 :                 ifa->ifa_valid_lft = timeout;
     808             :         else
     809           2 :                 ifa->ifa_flags |= IFA_F_PERMANENT;
     810             : 
     811           3 :         timeout = addrconf_timeout_fixup(prefered_lft, HZ);
     812           3 :         if (addrconf_finite_timeout(timeout)) {
     813           1 :                 if (timeout == 0)
     814           0 :                         ifa->ifa_flags |= IFA_F_DEPRECATED;
     815           1 :                 ifa->ifa_preferred_lft = timeout;
     816             :         }
     817           3 :         ifa->ifa_tstamp = jiffies;
     818           3 :         if (!ifa->ifa_cstamp)
     819           3 :                 ifa->ifa_cstamp = ifa->ifa_tstamp;
     820           3 : }
     821             : 
     822           2 : static struct in_ifaddr *rtm_to_ifaddr(struct net *net, struct nlmsghdr *nlh,
     823             :                                        __u32 *pvalid_lft, __u32 *pprefered_lft,
     824             :                                        struct netlink_ext_ack *extack)
     825             : {
     826           2 :         struct nlattr *tb[IFA_MAX+1];
     827           2 :         struct in_ifaddr *ifa;
     828           2 :         struct ifaddrmsg *ifm;
     829           2 :         struct net_device *dev;
     830           2 :         struct in_device *in_dev;
     831           2 :         int err;
     832             : 
     833           2 :         err = nlmsg_parse_deprecated(nlh, sizeof(*ifm), tb, IFA_MAX,
     834             :                                      ifa_ipv4_policy, extack);
     835           2 :         if (err < 0)
     836           0 :                 goto errout;
     837             : 
     838           2 :         ifm = nlmsg_data(nlh);
     839           2 :         err = -EINVAL;
     840           2 :         if (ifm->ifa_prefixlen > 32 || !tb[IFA_LOCAL])
     841           0 :                 goto errout;
     842             : 
     843           2 :         dev = __dev_get_by_index(net, ifm->ifa_index);
     844           2 :         err = -ENODEV;
     845           2 :         if (!dev)
     846           0 :                 goto errout;
     847             : 
     848           2 :         in_dev = __in_dev_get_rtnl(dev);
     849           2 :         err = -ENOBUFS;
     850           2 :         if (!in_dev)
     851           0 :                 goto errout;
     852             : 
     853           2 :         ifa = inet_alloc_ifa();
     854           2 :         if (!ifa)
     855             :                 /*
     856             :                  * A potential indev allocation can be left alive, it stays
     857             :                  * assigned to its device and is destroy with it.
     858             :                  */
     859           0 :                 goto errout;
     860             : 
     861           2 :         ipv4_devconf_setall(in_dev);
     862           2 :         neigh_parms_data_state_setall(in_dev->arp_parms);
     863           2 :         in_dev_hold(in_dev);
     864             : 
     865           2 :         if (!tb[IFA_ADDRESS])
     866           1 :                 tb[IFA_ADDRESS] = tb[IFA_LOCAL];
     867             : 
     868           2 :         INIT_HLIST_NODE(&ifa->hash);
     869           2 :         ifa->ifa_prefixlen = ifm->ifa_prefixlen;
     870           2 :         ifa->ifa_mask = inet_make_mask(ifm->ifa_prefixlen);
     871           2 :         ifa->ifa_flags = tb[IFA_FLAGS] ? nla_get_u32(tb[IFA_FLAGS]) :
     872           2 :                                          ifm->ifa_flags;
     873           2 :         ifa->ifa_scope = ifm->ifa_scope;
     874           2 :         ifa->ifa_dev = in_dev;
     875             : 
     876           2 :         ifa->ifa_local = nla_get_in_addr(tb[IFA_LOCAL]);
     877           2 :         ifa->ifa_address = nla_get_in_addr(tb[IFA_ADDRESS]);
     878             : 
     879           2 :         if (tb[IFA_BROADCAST])
     880           1 :                 ifa->ifa_broadcast = nla_get_in_addr(tb[IFA_BROADCAST]);
     881             : 
     882           2 :         if (tb[IFA_LABEL])
     883           1 :                 nla_strscpy(ifa->ifa_label, tb[IFA_LABEL], IFNAMSIZ);
     884             :         else
     885           1 :                 memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
     886             : 
     887           2 :         if (tb[IFA_RT_PRIORITY])
     888           0 :                 ifa->ifa_rt_priority = nla_get_u32(tb[IFA_RT_PRIORITY]);
     889             : 
     890           2 :         if (tb[IFA_CACHEINFO]) {
     891           1 :                 struct ifa_cacheinfo *ci;
     892             : 
     893           1 :                 ci = nla_data(tb[IFA_CACHEINFO]);
     894           1 :                 if (!ci->ifa_valid || ci->ifa_prefered > ci->ifa_valid) {
     895           0 :                         err = -EINVAL;
     896           0 :                         goto errout_free;
     897             :                 }
     898           1 :                 *pvalid_lft = ci->ifa_valid;
     899           1 :                 *pprefered_lft = ci->ifa_prefered;
     900             :         }
     901             : 
     902             :         return ifa;
     903             : 
     904           0 : errout_free:
     905           0 :         inet_free_ifa(ifa);
     906           0 : errout:
     907           0 :         return ERR_PTR(err);
     908             : }
     909             : 
     910           2 : static struct in_ifaddr *find_matching_ifa(struct in_ifaddr *ifa)
     911             : {
     912           2 :         struct in_device *in_dev = ifa->ifa_dev;
     913           2 :         struct in_ifaddr *ifa1;
     914             : 
     915           2 :         if (!ifa->ifa_local)
     916             :                 return NULL;
     917             : 
     918           2 :         in_dev_for_each_ifa_rtnl(ifa1, in_dev) {
     919           0 :                 if (ifa1->ifa_mask == ifa->ifa_mask &&
     920           0 :                     inet_ifa_match(ifa1->ifa_address, ifa) &&
     921           0 :                     ifa1->ifa_local == ifa->ifa_local)
     922           0 :                         return ifa1;
     923             :         }
     924             :         return NULL;
     925             : }
     926             : 
     927           2 : static int inet_rtm_newaddr(struct sk_buff *skb, struct nlmsghdr *nlh,
     928             :                             struct netlink_ext_ack *extack)
     929             : {
     930           2 :         struct net *net = sock_net(skb->sk);
     931           2 :         struct in_ifaddr *ifa;
     932           2 :         struct in_ifaddr *ifa_existing;
     933           2 :         __u32 valid_lft = INFINITY_LIFE_TIME;
     934           2 :         __u32 prefered_lft = INFINITY_LIFE_TIME;
     935             : 
     936           2 :         ASSERT_RTNL();
     937             : 
     938           2 :         ifa = rtm_to_ifaddr(net, nlh, &valid_lft, &prefered_lft, extack);
     939           2 :         if (IS_ERR(ifa))
     940           0 :                 return PTR_ERR(ifa);
     941             : 
     942           2 :         ifa_existing = find_matching_ifa(ifa);
     943           2 :         if (!ifa_existing) {
     944             :                 /* It would be best to check for !NLM_F_CREATE here but
     945             :                  * userspace already relies on not having to provide this.
     946             :                  */
     947           2 :                 set_ifa_lifetime(ifa, valid_lft, prefered_lft);
     948           2 :                 if (ifa->ifa_flags & IFA_F_MCAUTOJOIN) {
     949           0 :                         int ret = ip_mc_autojoin_config(net, true, ifa);
     950             : 
     951           0 :                         if (ret < 0) {
     952           0 :                                 inet_free_ifa(ifa);
     953           0 :                                 return ret;
     954             :                         }
     955             :                 }
     956           2 :                 return __inet_insert_ifa(ifa, nlh, NETLINK_CB(skb).portid,
     957             :                                          extack);
     958             :         } else {
     959           0 :                 u32 new_metric = ifa->ifa_rt_priority;
     960             : 
     961           0 :                 inet_free_ifa(ifa);
     962             : 
     963           0 :                 if (nlh->nlmsg_flags & NLM_F_EXCL ||
     964             :                     !(nlh->nlmsg_flags & NLM_F_REPLACE))
     965             :                         return -EEXIST;
     966           0 :                 ifa = ifa_existing;
     967             : 
     968           0 :                 if (ifa->ifa_rt_priority != new_metric) {
     969           0 :                         fib_modify_prefix_metric(ifa, new_metric);
     970           0 :                         ifa->ifa_rt_priority = new_metric;
     971             :                 }
     972             : 
     973           0 :                 set_ifa_lifetime(ifa, valid_lft, prefered_lft);
     974           0 :                 cancel_delayed_work(&check_lifetime_work);
     975           0 :                 queue_delayed_work(system_power_efficient_wq,
     976             :                                 &check_lifetime_work, 0);
     977           0 :                 rtmsg_ifa(RTM_NEWADDR, ifa, nlh, NETLINK_CB(skb).portid);
     978             :         }
     979           0 :         return 0;
     980             : }
     981             : 
     982             : /*
     983             :  *      Determine a default network mask, based on the IP address.
     984             :  */
     985             : 
     986           0 : static int inet_abc_len(__be32 addr)
     987             : {
     988           0 :         int rc = -1;    /* Something else, probably a multicast. */
     989             : 
     990           0 :         if (ipv4_is_zeronet(addr) || ipv4_is_lbcast(addr))
     991             :                 rc = 0;
     992             :         else {
     993           0 :                 __u32 haddr = ntohl(addr);
     994           0 :                 if (IN_CLASSA(haddr))
     995             :                         rc = 8;
     996           0 :                 else if (IN_CLASSB(haddr))
     997             :                         rc = 16;
     998           0 :                 else if (IN_CLASSC(haddr))
     999             :                         rc = 24;
    1000           0 :                 else if (IN_CLASSE(haddr))
    1001           0 :                         rc = 32;
    1002             :         }
    1003             : 
    1004           0 :         return rc;
    1005             : }
    1006             : 
    1007             : 
    1008           0 : int devinet_ioctl(struct net *net, unsigned int cmd, struct ifreq *ifr)
    1009             : {
    1010           0 :         struct sockaddr_in sin_orig;
    1011           0 :         struct sockaddr_in *sin = (struct sockaddr_in *)&ifr->ifr_addr;
    1012           0 :         struct in_ifaddr __rcu **ifap = NULL;
    1013           0 :         struct in_device *in_dev;
    1014           0 :         struct in_ifaddr *ifa = NULL;
    1015           0 :         struct net_device *dev;
    1016           0 :         char *colon;
    1017           0 :         int ret = -EFAULT;
    1018           0 :         int tryaddrmatch = 0;
    1019             : 
    1020           0 :         ifr->ifr_name[IFNAMSIZ - 1] = 0;
    1021             : 
    1022             :         /* save original address for comparison */
    1023           0 :         memcpy(&sin_orig, sin, sizeof(*sin));
    1024             : 
    1025           0 :         colon = strchr(ifr->ifr_name, ':');
    1026           0 :         if (colon)
    1027           0 :                 *colon = 0;
    1028             : 
    1029           0 :         dev_load(net, ifr->ifr_name);
    1030             : 
    1031           0 :         switch (cmd) {
    1032           0 :         case SIOCGIFADDR:       /* Get interface address */
    1033             :         case SIOCGIFBRDADDR:    /* Get the broadcast address */
    1034             :         case SIOCGIFDSTADDR:    /* Get the destination address */
    1035             :         case SIOCGIFNETMASK:    /* Get the netmask for the interface */
    1036             :                 /* Note that these ioctls will not sleep,
    1037             :                    so that we do not impose a lock.
    1038             :                    One day we will be forced to put shlock here (I mean SMP)
    1039             :                  */
    1040           0 :                 tryaddrmatch = (sin_orig.sin_family == AF_INET);
    1041           0 :                 memset(sin, 0, sizeof(*sin));
    1042           0 :                 sin->sin_family = AF_INET;
    1043           0 :                 break;
    1044             : 
    1045           0 :         case SIOCSIFFLAGS:
    1046           0 :                 ret = -EPERM;
    1047           0 :                 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
    1048           0 :                         goto out;
    1049             :                 break;
    1050           0 :         case SIOCSIFADDR:       /* Set interface address (and family) */
    1051             :         case SIOCSIFBRDADDR:    /* Set the broadcast address */
    1052             :         case SIOCSIFDSTADDR:    /* Set the destination address */
    1053             :         case SIOCSIFNETMASK:    /* Set the netmask for the interface */
    1054           0 :                 ret = -EPERM;
    1055           0 :                 if (!ns_capable(net->user_ns, CAP_NET_ADMIN))
    1056           0 :                         goto out;
    1057           0 :                 ret = -EINVAL;
    1058           0 :                 if (sin->sin_family != AF_INET)
    1059           0 :                         goto out;
    1060             :                 break;
    1061           0 :         default:
    1062           0 :                 ret = -EINVAL;
    1063           0 :                 goto out;
    1064             :         }
    1065             : 
    1066           0 :         rtnl_lock();
    1067             : 
    1068           0 :         ret = -ENODEV;
    1069           0 :         dev = __dev_get_by_name(net, ifr->ifr_name);
    1070           0 :         if (!dev)
    1071           0 :                 goto done;
    1072             : 
    1073           0 :         if (colon)
    1074           0 :                 *colon = ':';
    1075             : 
    1076           0 :         in_dev = __in_dev_get_rtnl(dev);
    1077           0 :         if (in_dev) {
    1078           0 :                 if (tryaddrmatch) {
    1079             :                         /* Matthias Andree */
    1080             :                         /* compare label and address (4.4BSD style) */
    1081             :                         /* note: we only do this for a limited set of ioctls
    1082             :                            and only if the original address family was AF_INET.
    1083             :                            This is checked above. */
    1084             : 
    1085           0 :                         for (ifap = &in_dev->ifa_list;
    1086           0 :                              (ifa = rtnl_dereference(*ifap)) != NULL;
    1087           0 :                              ifap = &ifa->ifa_next) {
    1088           0 :                                 if (!strcmp(ifr->ifr_name, ifa->ifa_label) &&
    1089             :                                     sin_orig.sin_addr.s_addr ==
    1090           0 :                                                         ifa->ifa_local) {
    1091             :                                         break; /* found */
    1092             :                                 }
    1093             :                         }
    1094             :                 }
    1095             :                 /* we didn't get a match, maybe the application is
    1096             :                    4.3BSD-style and passed in junk so we fall back to
    1097             :                    comparing just the label */
    1098           0 :                 if (!ifa) {
    1099           0 :                         for (ifap = &in_dev->ifa_list;
    1100           0 :                              (ifa = rtnl_dereference(*ifap)) != NULL;
    1101           0 :                              ifap = &ifa->ifa_next)
    1102           0 :                                 if (!strcmp(ifr->ifr_name, ifa->ifa_label))
    1103             :                                         break;
    1104             :                 }
    1105             :         }
    1106             : 
    1107           0 :         ret = -EADDRNOTAVAIL;
    1108           0 :         if (!ifa && cmd != SIOCSIFADDR && cmd != SIOCSIFFLAGS)
    1109           0 :                 goto done;
    1110             : 
    1111           0 :         switch (cmd) {
    1112           0 :         case SIOCGIFADDR:       /* Get interface address */
    1113           0 :                 ret = 0;
    1114           0 :                 sin->sin_addr.s_addr = ifa->ifa_local;
    1115           0 :                 break;
    1116             : 
    1117           0 :         case SIOCGIFBRDADDR:    /* Get the broadcast address */
    1118           0 :                 ret = 0;
    1119           0 :                 sin->sin_addr.s_addr = ifa->ifa_broadcast;
    1120           0 :                 break;
    1121             : 
    1122           0 :         case SIOCGIFDSTADDR:    /* Get the destination address */
    1123           0 :                 ret = 0;
    1124           0 :                 sin->sin_addr.s_addr = ifa->ifa_address;
    1125           0 :                 break;
    1126             : 
    1127           0 :         case SIOCGIFNETMASK:    /* Get the netmask for the interface */
    1128           0 :                 ret = 0;
    1129           0 :                 sin->sin_addr.s_addr = ifa->ifa_mask;
    1130           0 :                 break;
    1131             : 
    1132           0 :         case SIOCSIFFLAGS:
    1133           0 :                 if (colon) {
    1134           0 :                         ret = -EADDRNOTAVAIL;
    1135           0 :                         if (!ifa)
    1136             :                                 break;
    1137           0 :                         ret = 0;
    1138           0 :                         if (!(ifr->ifr_flags & IFF_UP))
    1139           0 :                                 inet_del_ifa(in_dev, ifap, 1);
    1140             :                         break;
    1141             :                 }
    1142           0 :                 ret = dev_change_flags(dev, ifr->ifr_flags, NULL);
    1143           0 :                 break;
    1144             : 
    1145           0 :         case SIOCSIFADDR:       /* Set interface address (and family) */
    1146           0 :                 ret = -EINVAL;
    1147           0 :                 if (inet_abc_len(sin->sin_addr.s_addr) < 0)
    1148             :                         break;
    1149             : 
    1150           0 :                 if (!ifa) {
    1151           0 :                         ret = -ENOBUFS;
    1152           0 :                         ifa = inet_alloc_ifa();
    1153           0 :                         if (!ifa)
    1154             :                                 break;
    1155           0 :                         INIT_HLIST_NODE(&ifa->hash);
    1156           0 :                         if (colon)
    1157           0 :                                 memcpy(ifa->ifa_label, ifr->ifr_name, IFNAMSIZ);
    1158             :                         else
    1159           0 :                                 memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
    1160             :                 } else {
    1161           0 :                         ret = 0;
    1162           0 :                         if (ifa->ifa_local == sin->sin_addr.s_addr)
    1163             :                                 break;
    1164           0 :                         inet_del_ifa(in_dev, ifap, 0);
    1165           0 :                         ifa->ifa_broadcast = 0;
    1166           0 :                         ifa->ifa_scope = 0;
    1167             :                 }
    1168             : 
    1169           0 :                 ifa->ifa_address = ifa->ifa_local = sin->sin_addr.s_addr;
    1170             : 
    1171           0 :                 if (!(dev->flags & IFF_POINTOPOINT)) {
    1172           0 :                         ifa->ifa_prefixlen = inet_abc_len(ifa->ifa_address);
    1173           0 :                         ifa->ifa_mask = inet_make_mask(ifa->ifa_prefixlen);
    1174           0 :                         if ((dev->flags & IFF_BROADCAST) &&
    1175             :                             ifa->ifa_prefixlen < 31)
    1176           0 :                                 ifa->ifa_broadcast = ifa->ifa_address |
    1177           0 :                                                      ~ifa->ifa_mask;
    1178             :                 } else {
    1179           0 :                         ifa->ifa_prefixlen = 32;
    1180           0 :                         ifa->ifa_mask = inet_make_mask(32);
    1181             :                 }
    1182           0 :                 set_ifa_lifetime(ifa, INFINITY_LIFE_TIME, INFINITY_LIFE_TIME);
    1183           0 :                 ret = inet_set_ifa(dev, ifa);
    1184           0 :                 break;
    1185             : 
    1186           0 :         case SIOCSIFBRDADDR:    /* Set the broadcast address */
    1187           0 :                 ret = 0;
    1188           0 :                 if (ifa->ifa_broadcast != sin->sin_addr.s_addr) {
    1189           0 :                         inet_del_ifa(in_dev, ifap, 0);
    1190           0 :                         ifa->ifa_broadcast = sin->sin_addr.s_addr;
    1191           0 :                         inet_insert_ifa(ifa);
    1192             :                 }
    1193             :                 break;
    1194             : 
    1195           0 :         case SIOCSIFDSTADDR:    /* Set the destination address */
    1196           0 :                 ret = 0;
    1197           0 :                 if (ifa->ifa_address == sin->sin_addr.s_addr)
    1198             :                         break;
    1199           0 :                 ret = -EINVAL;
    1200           0 :                 if (inet_abc_len(sin->sin_addr.s_addr) < 0)
    1201             :                         break;
    1202           0 :                 ret = 0;
    1203           0 :                 inet_del_ifa(in_dev, ifap, 0);
    1204           0 :                 ifa->ifa_address = sin->sin_addr.s_addr;
    1205           0 :                 inet_insert_ifa(ifa);
    1206           0 :                 break;
    1207             : 
    1208           0 :         case SIOCSIFNETMASK:    /* Set the netmask for the interface */
    1209             : 
    1210             :                 /*
    1211             :                  *      The mask we set must be legal.
    1212             :                  */
    1213           0 :                 ret = -EINVAL;
    1214           0 :                 if (bad_mask(sin->sin_addr.s_addr, 0))
    1215             :                         break;
    1216           0 :                 ret = 0;
    1217           0 :                 if (ifa->ifa_mask != sin->sin_addr.s_addr) {
    1218           0 :                         __be32 old_mask = ifa->ifa_mask;
    1219           0 :                         inet_del_ifa(in_dev, ifap, 0);
    1220           0 :                         ifa->ifa_mask = sin->sin_addr.s_addr;
    1221           0 :                         ifa->ifa_prefixlen = inet_mask_len(ifa->ifa_mask);
    1222             : 
    1223             :                         /* See if current broadcast address matches
    1224             :                          * with current netmask, then recalculate
    1225             :                          * the broadcast address. Otherwise it's a
    1226             :                          * funny address, so don't touch it since
    1227             :                          * the user seems to know what (s)he's doing...
    1228             :                          */
    1229           0 :                         if ((dev->flags & IFF_BROADCAST) &&
    1230           0 :                             (ifa->ifa_prefixlen < 31) &&
    1231           0 :                             (ifa->ifa_broadcast ==
    1232           0 :                              (ifa->ifa_local|~old_mask))) {
    1233           0 :                                 ifa->ifa_broadcast = (ifa->ifa_local |
    1234           0 :                                                       ~sin->sin_addr.s_addr);
    1235             :                         }
    1236           0 :                         inet_insert_ifa(ifa);
    1237             :                 }
    1238             :                 break;
    1239             :         }
    1240           0 : done:
    1241           0 :         rtnl_unlock();
    1242           0 : out:
    1243           0 :         return ret;
    1244             : }
    1245             : 
    1246           0 : static int inet_gifconf(struct net_device *dev, char __user *buf, int len, int size)
    1247             : {
    1248           0 :         struct in_device *in_dev = __in_dev_get_rtnl(dev);
    1249           0 :         const struct in_ifaddr *ifa;
    1250           0 :         struct ifreq ifr;
    1251           0 :         int done = 0;
    1252             : 
    1253           0 :         if (WARN_ON(size > sizeof(struct ifreq)))
    1254           0 :                 goto out;
    1255             : 
    1256           0 :         if (!in_dev)
    1257           0 :                 goto out;
    1258             : 
    1259           0 :         in_dev_for_each_ifa_rtnl(ifa, in_dev) {
    1260           0 :                 if (!buf) {
    1261           0 :                         done += size;
    1262           0 :                         continue;
    1263             :                 }
    1264           0 :                 if (len < size)
    1265             :                         break;
    1266           0 :                 memset(&ifr, 0, sizeof(struct ifreq));
    1267           0 :                 strcpy(ifr.ifr_name, ifa->ifa_label);
    1268             : 
    1269           0 :                 (*(struct sockaddr_in *)&ifr.ifr_addr).sin_family = AF_INET;
    1270           0 :                 (*(struct sockaddr_in *)&ifr.ifr_addr).sin_addr.s_addr =
    1271           0 :                                                                 ifa->ifa_local;
    1272             : 
    1273           0 :                 if (copy_to_user(buf + done, &ifr, size)) {
    1274             :                         done = -EFAULT;
    1275             :                         break;
    1276             :                 }
    1277           0 :                 len  -= size;
    1278           0 :                 done += size;
    1279             :         }
    1280           0 : out:
    1281           0 :         return done;
    1282             : }
    1283             : 
    1284           4 : static __be32 in_dev_select_addr(const struct in_device *in_dev,
    1285             :                                  int scope)
    1286             : {
    1287           4 :         const struct in_ifaddr *ifa;
    1288             : 
    1289          12 :         in_dev_for_each_ifa_rcu(ifa, in_dev) {
    1290           2 :                 if (ifa->ifa_flags & IFA_F_SECONDARY)
    1291           0 :                         continue;
    1292           2 :                 if (ifa->ifa_scope != RT_SCOPE_LINK &&
    1293           2 :                     ifa->ifa_scope <= scope)
    1294           0 :                         return ifa->ifa_local;
    1295             :         }
    1296             : 
    1297             :         return 0;
    1298             : }
    1299             : 
    1300          14 : __be32 inet_select_addr(const struct net_device *dev, __be32 dst, int scope)
    1301             : {
    1302          14 :         const struct in_ifaddr *ifa;
    1303          14 :         __be32 addr = 0;
    1304          14 :         unsigned char localnet_scope = RT_SCOPE_HOST;
    1305          14 :         struct in_device *in_dev;
    1306          14 :         struct net *net = dev_net(dev);
    1307          14 :         int master_idx;
    1308             : 
    1309          14 :         rcu_read_lock();
    1310          14 :         in_dev = __in_dev_get_rcu(dev);
    1311          14 :         if (!in_dev)
    1312           0 :                 goto no_in_dev;
    1313             : 
    1314          14 :         if (unlikely(IN_DEV_ROUTE_LOCALNET(in_dev)))
    1315             :                 localnet_scope = RT_SCOPE_LINK;
    1316             : 
    1317          32 :         in_dev_for_each_ifa_rcu(ifa, in_dev) {
    1318          14 :                 if (ifa->ifa_flags & IFA_F_SECONDARY)
    1319           0 :                         continue;
    1320          14 :                 if (min(ifa->ifa_scope, localnet_scope) > scope)
    1321           2 :                         continue;
    1322          12 :                 if (!dst || inet_ifa_match(dst, ifa)) {
    1323          12 :                         addr = ifa->ifa_local;
    1324          12 :                         break;
    1325             :                 }
    1326           0 :                 if (!addr)
    1327           0 :                         addr = ifa->ifa_local;
    1328             :         }
    1329             : 
    1330          14 :         if (addr)
    1331          12 :                 goto out_unlock;
    1332           2 : no_in_dev:
    1333           2 :         master_idx = l3mdev_master_ifindex_rcu(dev);
    1334             : 
    1335             :         /* For VRFs, the VRF device takes the place of the loopback device,
    1336             :          * with addresses on it being preferred.  Note in such cases the
    1337             :          * loopback device will be among the devices that fail the master_idx
    1338             :          * equality check in the loop below.
    1339             :          */
    1340           2 :         if (master_idx &&
    1341             :             (dev = dev_get_by_index_rcu(net, master_idx)) &&
    1342             :             (in_dev = __in_dev_get_rcu(dev))) {
    1343             :                 addr = in_dev_select_addr(in_dev, scope);
    1344             :                 if (addr)
    1345             :                         goto out_unlock;
    1346             :         }
    1347             : 
    1348             :         /* Not loopback addresses on loopback should be preferred
    1349             :            in this case. It is important that lo is the first interface
    1350             :            in dev_base list.
    1351             :          */
    1352           6 :         for_each_netdev_rcu(net, dev) {
    1353           4 :                 if (l3mdev_master_ifindex_rcu(dev) != master_idx)
    1354             :                         continue;
    1355             : 
    1356           4 :                 in_dev = __in_dev_get_rcu(dev);
    1357           4 :                 if (!in_dev)
    1358           0 :                         continue;
    1359             : 
    1360           4 :                 addr = in_dev_select_addr(in_dev, scope);
    1361           4 :                 if (addr)
    1362           0 :                         goto out_unlock;
    1363             :         }
    1364           2 : out_unlock:
    1365          14 :         rcu_read_unlock();
    1366          14 :         return addr;
    1367             : }
    1368             : EXPORT_SYMBOL(inet_select_addr);
    1369             : 
    1370           0 : static __be32 confirm_addr_indev(struct in_device *in_dev, __be32 dst,
    1371             :                               __be32 local, int scope)
    1372             : {
    1373           0 :         unsigned char localnet_scope = RT_SCOPE_HOST;
    1374           0 :         const struct in_ifaddr *ifa;
    1375           0 :         __be32 addr = 0;
    1376           0 :         int same = 0;
    1377             : 
    1378           0 :         if (unlikely(IN_DEV_ROUTE_LOCALNET(in_dev)))
    1379             :                 localnet_scope = RT_SCOPE_LINK;
    1380             : 
    1381           0 :         in_dev_for_each_ifa_rcu(ifa, in_dev) {
    1382           0 :                 unsigned char min_scope = min(ifa->ifa_scope, localnet_scope);
    1383             : 
    1384           0 :                 if (!addr &&
    1385           0 :                     (local == ifa->ifa_local || !local) &&
    1386             :                     min_scope <= scope) {
    1387           0 :                         addr = ifa->ifa_local;
    1388           0 :                         if (same)
    1389             :                                 break;
    1390             :                 }
    1391           0 :                 if (!same) {
    1392           0 :                         same = (!local || inet_ifa_match(local, ifa)) &&
    1393           0 :                                 (!dst || inet_ifa_match(dst, ifa));
    1394           0 :                         if (same && addr) {
    1395           0 :                                 if (local || !dst)
    1396             :                                         break;
    1397             :                                 /* Is the selected addr into dst subnet? */
    1398           0 :                                 if (inet_ifa_match(addr, ifa))
    1399             :                                         break;
    1400             :                                 /* No, then can we use new local src? */
    1401           0 :                                 if (min_scope <= scope) {
    1402           0 :                                         addr = ifa->ifa_local;
    1403           0 :                                         break;
    1404             :                                 }
    1405             :                                 /* search for large dst subnet for addr */
    1406             :                                 same = 0;
    1407             :                         }
    1408             :                 }
    1409             :         }
    1410             : 
    1411           0 :         return same ? addr : 0;
    1412             : }
    1413             : 
    1414             : /*
    1415             :  * Confirm that local IP address exists using wildcards:
    1416             :  * - net: netns to check, cannot be NULL
    1417             :  * - in_dev: only on this interface, NULL=any interface
    1418             :  * - dst: only in the same subnet as dst, 0=any dst
    1419             :  * - local: address, 0=autoselect the local address
    1420             :  * - scope: maximum allowed scope value for the local address
    1421             :  */
    1422           0 : __be32 inet_confirm_addr(struct net *net, struct in_device *in_dev,
    1423             :                          __be32 dst, __be32 local, int scope)
    1424             : {
    1425           0 :         __be32 addr = 0;
    1426           0 :         struct net_device *dev;
    1427             : 
    1428           0 :         if (in_dev)
    1429           0 :                 return confirm_addr_indev(in_dev, dst, local, scope);
    1430             : 
    1431           0 :         rcu_read_lock();
    1432           0 :         for_each_netdev_rcu(net, dev) {
    1433           0 :                 in_dev = __in_dev_get_rcu(dev);
    1434           0 :                 if (in_dev) {
    1435           0 :                         addr = confirm_addr_indev(in_dev, dst, local, scope);
    1436           0 :                         if (addr)
    1437             :                                 break;
    1438             :                 }
    1439             :         }
    1440           0 :         rcu_read_unlock();
    1441             : 
    1442           0 :         return addr;
    1443             : }
    1444             : EXPORT_SYMBOL(inet_confirm_addr);
    1445             : 
    1446             : /*
    1447             :  *      Device notifier
    1448             :  */
    1449             : 
    1450           1 : int register_inetaddr_notifier(struct notifier_block *nb)
    1451             : {
    1452           1 :         return blocking_notifier_chain_register(&inetaddr_chain, nb);
    1453             : }
    1454             : EXPORT_SYMBOL(register_inetaddr_notifier);
    1455             : 
    1456           0 : int unregister_inetaddr_notifier(struct notifier_block *nb)
    1457             : {
    1458           0 :         return blocking_notifier_chain_unregister(&inetaddr_chain, nb);
    1459             : }
    1460             : EXPORT_SYMBOL(unregister_inetaddr_notifier);
    1461             : 
    1462           0 : int register_inetaddr_validator_notifier(struct notifier_block *nb)
    1463             : {
    1464           0 :         return blocking_notifier_chain_register(&inetaddr_validator_chain, nb);
    1465             : }
    1466             : EXPORT_SYMBOL(register_inetaddr_validator_notifier);
    1467             : 
    1468           0 : int unregister_inetaddr_validator_notifier(struct notifier_block *nb)
    1469             : {
    1470           0 :         return blocking_notifier_chain_unregister(&inetaddr_validator_chain,
    1471             :             nb);
    1472             : }
    1473             : EXPORT_SYMBOL(unregister_inetaddr_validator_notifier);
    1474             : 
    1475             : /* Rename ifa_labels for a device name change. Make some effort to preserve
    1476             :  * existing alias numbering and to create unique labels if possible.
    1477             : */
    1478           0 : static void inetdev_changename(struct net_device *dev, struct in_device *in_dev)
    1479             : {
    1480           0 :         struct in_ifaddr *ifa;
    1481           0 :         int named = 0;
    1482             : 
    1483           0 :         in_dev_for_each_ifa_rtnl(ifa, in_dev) {
    1484           0 :                 char old[IFNAMSIZ], *dot;
    1485             : 
    1486           0 :                 memcpy(old, ifa->ifa_label, IFNAMSIZ);
    1487           0 :                 memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
    1488           0 :                 if (named++ == 0)
    1489           0 :                         goto skip;
    1490           0 :                 dot = strchr(old, ':');
    1491           0 :                 if (!dot) {
    1492           0 :                         sprintf(old, ":%d", named);
    1493           0 :                         dot = old;
    1494             :                 }
    1495           0 :                 if (strlen(dot) + strlen(dev->name) < IFNAMSIZ)
    1496           0 :                         strcat(ifa->ifa_label, dot);
    1497             :                 else
    1498           0 :                         strcpy(ifa->ifa_label + (IFNAMSIZ - strlen(dot) - 1), dot);
    1499           0 : skip:
    1500           0 :                 rtmsg_ifa(RTM_NEWADDR, ifa, NULL, 0);
    1501             :         }
    1502           0 : }
    1503             : 
    1504           0 : static void inetdev_send_gratuitous_arp(struct net_device *dev,
    1505             :                                         struct in_device *in_dev)
    1506             : 
    1507             : {
    1508           0 :         const struct in_ifaddr *ifa;
    1509             : 
    1510           0 :         in_dev_for_each_ifa_rtnl(ifa, in_dev) {
    1511           0 :                 arp_send(ARPOP_REQUEST, ETH_P_ARP,
    1512             :                          ifa->ifa_local, dev,
    1513             :                          ifa->ifa_local, NULL,
    1514           0 :                          dev->dev_addr, NULL);
    1515             :         }
    1516           0 : }
    1517             : 
    1518             : /* Called only under RTNL semaphore */
    1519             : 
    1520           7 : static int inetdev_event(struct notifier_block *this, unsigned long event,
    1521             :                          void *ptr)
    1522             : {
    1523           7 :         struct net_device *dev = netdev_notifier_info_to_dev(ptr);
    1524           7 :         struct in_device *in_dev = __in_dev_get_rtnl(dev);
    1525             : 
    1526           7 :         ASSERT_RTNL();
    1527             : 
    1528           7 :         if (!in_dev) {
    1529           3 :                 if (event == NETDEV_REGISTER) {
    1530           2 :                         in_dev = inetdev_init(dev);
    1531           2 :                         if (IS_ERR(in_dev))
    1532           0 :                                 return notifier_from_errno(PTR_ERR(in_dev));
    1533           2 :                         if (dev->flags & IFF_LOOPBACK) {
    1534           1 :                                 IN_DEV_CONF_SET(in_dev, NOXFRM, 1);
    1535           1 :                                 IN_DEV_CONF_SET(in_dev, NOPOLICY, 1);
    1536             :                         }
    1537           1 :                 } else if (event == NETDEV_CHANGEMTU) {
    1538             :                         /* Re-enabling IP */
    1539           0 :                         if (inetdev_valid_mtu(dev->mtu))
    1540           0 :                                 in_dev = inetdev_init(dev);
    1541             :                 }
    1542           3 :                 goto out;
    1543             :         }
    1544             : 
    1545           4 :         switch (event) {
    1546             :         case NETDEV_REGISTER:
    1547           0 :                 pr_debug("%s: bug\n", __func__);
    1548           0 :                 RCU_INIT_POINTER(dev->ip_ptr, NULL);
    1549           0 :                 break;
    1550           2 :         case NETDEV_UP:
    1551           2 :                 if (!inetdev_valid_mtu(dev->mtu))
    1552             :                         break;
    1553           2 :                 if (dev->flags & IFF_LOOPBACK) {
    1554           1 :                         struct in_ifaddr *ifa = inet_alloc_ifa();
    1555             : 
    1556           1 :                         if (ifa) {
    1557           1 :                                 INIT_HLIST_NODE(&ifa->hash);
    1558           1 :                                 ifa->ifa_local =
    1559           1 :                                   ifa->ifa_address = htonl(INADDR_LOOPBACK);
    1560           1 :                                 ifa->ifa_prefixlen = 8;
    1561           1 :                                 ifa->ifa_mask = inet_make_mask(8);
    1562           1 :                                 in_dev_hold(in_dev);
    1563           1 :                                 ifa->ifa_dev = in_dev;
    1564           1 :                                 ifa->ifa_scope = RT_SCOPE_HOST;
    1565           1 :                                 memcpy(ifa->ifa_label, dev->name, IFNAMSIZ);
    1566           1 :                                 set_ifa_lifetime(ifa, INFINITY_LIFE_TIME,
    1567             :                                                  INFINITY_LIFE_TIME);
    1568           1 :                                 ipv4_devconf_setall(in_dev);
    1569           1 :                                 neigh_parms_data_state_setall(in_dev->arp_parms);
    1570           1 :                                 inet_insert_ifa(ifa);
    1571             :                         }
    1572             :                 }
    1573           2 :                 ip_mc_up(in_dev);
    1574           2 :                 fallthrough;
    1575           2 :         case NETDEV_CHANGEADDR:
    1576           2 :                 if (!IN_DEV_ARP_NOTIFY(in_dev))
    1577             :                         break;
    1578           0 :                 fallthrough;
    1579             :         case NETDEV_NOTIFY_PEERS:
    1580             :                 /* Send gratuitous ARP to notify of link change */
    1581           0 :                 inetdev_send_gratuitous_arp(dev, in_dev);
    1582           0 :                 break;
    1583           0 :         case NETDEV_DOWN:
    1584           0 :                 ip_mc_down(in_dev);
    1585           0 :                 break;
    1586           0 :         case NETDEV_PRE_TYPE_CHANGE:
    1587           0 :                 ip_mc_unmap(in_dev);
    1588           0 :                 break;
    1589           0 :         case NETDEV_POST_TYPE_CHANGE:
    1590           0 :                 ip_mc_remap(in_dev);
    1591           0 :                 break;
    1592           0 :         case NETDEV_CHANGEMTU:
    1593           0 :                 if (inetdev_valid_mtu(dev->mtu))
    1594             :                         break;
    1595             :                 /* disable IP when MTU is not enough */
    1596           0 :                 fallthrough;
    1597             :         case NETDEV_UNREGISTER:
    1598           0 :                 inetdev_destroy(in_dev);
    1599           0 :                 break;
    1600           0 :         case NETDEV_CHANGENAME:
    1601             :                 /* Do not notify about label change, this event is
    1602             :                  * not interesting to applications using netlink.
    1603             :                  */
    1604           0 :                 inetdev_changename(dev, in_dev);
    1605             : 
    1606           0 :                 devinet_sysctl_unregister(in_dev);
    1607           0 :                 devinet_sysctl_register(in_dev);
    1608           0 :                 break;
    1609             :         }
    1610           2 : out:
    1611             :         return NOTIFY_DONE;
    1612             : }
    1613             : 
    1614             : static struct notifier_block ip_netdev_notifier = {
    1615             :         .notifier_call = inetdev_event,
    1616             : };
    1617             : 
    1618           2 : static size_t inet_nlmsg_size(void)
    1619             : {
    1620           2 :         return NLMSG_ALIGN(sizeof(struct ifaddrmsg))
    1621           2 :                + nla_total_size(4) /* IFA_ADDRESS */
    1622           2 :                + nla_total_size(4) /* IFA_LOCAL */
    1623           2 :                + nla_total_size(4) /* IFA_BROADCAST */
    1624           2 :                + nla_total_size(IFNAMSIZ) /* IFA_LABEL */
    1625           2 :                + nla_total_size(4)  /* IFA_FLAGS */
    1626           2 :                + nla_total_size(4)  /* IFA_RT_PRIORITY */
    1627           2 :                + nla_total_size(sizeof(struct ifa_cacheinfo)); /* IFA_CACHEINFO */
    1628             : }
    1629             : 
    1630          38 : static inline u32 cstamp_delta(unsigned long cstamp)
    1631             : {
    1632          38 :         return (cstamp - INITIAL_JIFFIES) * 100UL / HZ;
    1633             : }
    1634             : 
    1635          38 : static int put_cacheinfo(struct sk_buff *skb, unsigned long cstamp,
    1636             :                          unsigned long tstamp, u32 preferred, u32 valid)
    1637             : {
    1638          38 :         struct ifa_cacheinfo ci;
    1639             : 
    1640          38 :         ci.cstamp = cstamp_delta(cstamp);
    1641          38 :         ci.tstamp = cstamp_delta(tstamp);
    1642          38 :         ci.ifa_prefered = preferred;
    1643          38 :         ci.ifa_valid = valid;
    1644             : 
    1645          38 :         return nla_put(skb, IFA_CACHEINFO, sizeof(ci), &ci);
    1646             : }
    1647             : 
    1648          38 : static int inet_fill_ifaddr(struct sk_buff *skb, struct in_ifaddr *ifa,
    1649             :                             struct inet_fill_args *args)
    1650             : {
    1651          38 :         struct ifaddrmsg *ifm;
    1652          38 :         struct nlmsghdr  *nlh;
    1653          38 :         u32 preferred, valid;
    1654             : 
    1655          76 :         nlh = nlmsg_put(skb, args->portid, args->seq, args->event, sizeof(*ifm),
    1656          38 :                         args->flags);
    1657          38 :         if (!nlh)
    1658             :                 return -EMSGSIZE;
    1659             : 
    1660          38 :         ifm = nlmsg_data(nlh);
    1661          38 :         ifm->ifa_family = AF_INET;
    1662          38 :         ifm->ifa_prefixlen = ifa->ifa_prefixlen;
    1663          38 :         ifm->ifa_flags = ifa->ifa_flags;
    1664          38 :         ifm->ifa_scope = ifa->ifa_scope;
    1665          38 :         ifm->ifa_index = ifa->ifa_dev->dev->ifindex;
    1666             : 
    1667          38 :         if (args->netnsid >= 0 &&
    1668           0 :             nla_put_s32(skb, IFA_TARGET_NETNSID, args->netnsid))
    1669           0 :                 goto nla_put_failure;
    1670             : 
    1671          38 :         if (!(ifm->ifa_flags & IFA_F_PERMANENT)) {
    1672          11 :                 preferred = ifa->ifa_preferred_lft;
    1673          11 :                 valid = ifa->ifa_valid_lft;
    1674          11 :                 if (preferred != INFINITY_LIFE_TIME) {
    1675          11 :                         long tval = (jiffies - ifa->ifa_tstamp) / HZ;
    1676             : 
    1677          11 :                         if (preferred > tval)
    1678          11 :                                 preferred -= tval;
    1679             :                         else
    1680             :                                 preferred = 0;
    1681          11 :                         if (valid != INFINITY_LIFE_TIME) {
    1682          11 :                                 if (valid > tval)
    1683          11 :                                         valid -= tval;
    1684             :                                 else
    1685             :                                         valid = 0;
    1686             :                         }
    1687             :                 }
    1688             :         } else {
    1689             :                 preferred = INFINITY_LIFE_TIME;
    1690             :                 valid = INFINITY_LIFE_TIME;
    1691             :         }
    1692          38 :         if ((ifa->ifa_address &&
    1693          38 :              nla_put_in_addr(skb, IFA_ADDRESS, ifa->ifa_address)) ||
    1694          38 :             (ifa->ifa_local &&
    1695          38 :              nla_put_in_addr(skb, IFA_LOCAL, ifa->ifa_local)) ||
    1696          38 :             (ifa->ifa_broadcast &&
    1697          11 :              nla_put_in_addr(skb, IFA_BROADCAST, ifa->ifa_broadcast)) ||
    1698          76 :             (ifa->ifa_label[0] &&
    1699          38 :              nla_put_string(skb, IFA_LABEL, ifa->ifa_label)) ||
    1700          38 :             nla_put_u32(skb, IFA_FLAGS, ifa->ifa_flags) ||
    1701          38 :             (ifa->ifa_rt_priority &&
    1702          38 :              nla_put_u32(skb, IFA_RT_PRIORITY, ifa->ifa_rt_priority)) ||
    1703          38 :             put_cacheinfo(skb, ifa->ifa_cstamp, ifa->ifa_tstamp,
    1704             :                           preferred, valid))
    1705           0 :                 goto nla_put_failure;
    1706             : 
    1707          38 :         nlmsg_end(skb, nlh);
    1708          38 :         return 0;
    1709             : 
    1710           0 : nla_put_failure:
    1711           0 :         nlmsg_cancel(skb, nlh);
    1712           0 :         return -EMSGSIZE;
    1713             : }
    1714             : 
    1715           0 : static int inet_valid_dump_ifaddr_req(const struct nlmsghdr *nlh,
    1716             :                                       struct inet_fill_args *fillargs,
    1717             :                                       struct net **tgt_net, struct sock *sk,
    1718             :                                       struct netlink_callback *cb)
    1719             : {
    1720           0 :         struct netlink_ext_ack *extack = cb->extack;
    1721           0 :         struct nlattr *tb[IFA_MAX+1];
    1722           0 :         struct ifaddrmsg *ifm;
    1723           0 :         int err, i;
    1724             : 
    1725           0 :         if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ifm))) {
    1726           0 :                 NL_SET_ERR_MSG(extack, "ipv4: Invalid header for address dump request");
    1727           0 :                 return -EINVAL;
    1728             :         }
    1729             : 
    1730           0 :         ifm = nlmsg_data(nlh);
    1731           0 :         if (ifm->ifa_prefixlen || ifm->ifa_flags || ifm->ifa_scope) {
    1732           0 :                 NL_SET_ERR_MSG(extack, "ipv4: Invalid values in header for address dump request");
    1733           0 :                 return -EINVAL;
    1734             :         }
    1735             : 
    1736           0 :         fillargs->ifindex = ifm->ifa_index;
    1737           0 :         if (fillargs->ifindex) {
    1738           0 :                 cb->answer_flags |= NLM_F_DUMP_FILTERED;
    1739           0 :                 fillargs->flags |= NLM_F_DUMP_FILTERED;
    1740             :         }
    1741             : 
    1742           0 :         err = nlmsg_parse_deprecated_strict(nlh, sizeof(*ifm), tb, IFA_MAX,
    1743             :                                             ifa_ipv4_policy, extack);
    1744           0 :         if (err < 0)
    1745             :                 return err;
    1746             : 
    1747           0 :         for (i = 0; i <= IFA_MAX; ++i) {
    1748           0 :                 if (!tb[i])
    1749           0 :                         continue;
    1750             : 
    1751           0 :                 if (i == IFA_TARGET_NETNSID) {
    1752           0 :                         struct net *net;
    1753             : 
    1754           0 :                         fillargs->netnsid = nla_get_s32(tb[i]);
    1755             : 
    1756           0 :                         net = rtnl_get_net_ns_capable(sk, fillargs->netnsid);
    1757           0 :                         if (IS_ERR(net)) {
    1758           0 :                                 fillargs->netnsid = -1;
    1759           0 :                                 NL_SET_ERR_MSG(extack, "ipv4: Invalid target network namespace id");
    1760           0 :                                 return PTR_ERR(net);
    1761             :                         }
    1762           0 :                         *tgt_net = net;
    1763             :                 } else {
    1764           0 :                         NL_SET_ERR_MSG(extack, "ipv4: Unsupported attribute in dump request");
    1765           0 :                         return -EINVAL;
    1766             :                 }
    1767             :         }
    1768             : 
    1769             :         return 0;
    1770             : }
    1771             : 
    1772          52 : static int in_dev_dump_addr(struct in_device *in_dev, struct sk_buff *skb,
    1773             :                             struct netlink_callback *cb, int s_ip_idx,
    1774             :                             struct inet_fill_args *fillargs)
    1775             : {
    1776          52 :         struct in_ifaddr *ifa;
    1777          52 :         int ip_idx = 0;
    1778          52 :         int err;
    1779             : 
    1780          88 :         in_dev_for_each_ifa_rtnl(ifa, in_dev) {
    1781          36 :                 if (ip_idx < s_ip_idx) {
    1782           0 :                         ip_idx++;
    1783           0 :                         continue;
    1784             :                 }
    1785          36 :                 err = inet_fill_ifaddr(skb, ifa, fillargs);
    1786          36 :                 if (err < 0)
    1787           0 :                         goto done;
    1788             : 
    1789          36 :                 nl_dump_check_consistent(cb, nlmsg_hdr(skb));
    1790          36 :                 ip_idx++;
    1791             :         }
    1792             :         err = 0;
    1793             : 
    1794          52 : done:
    1795          52 :         cb->args[2] = ip_idx;
    1796             : 
    1797          52 :         return err;
    1798             : }
    1799             : 
    1800          52 : static int inet_dump_ifaddr(struct sk_buff *skb, struct netlink_callback *cb)
    1801             : {
    1802          52 :         const struct nlmsghdr *nlh = cb->nlh;
    1803          52 :         struct inet_fill_args fillargs = {
    1804          52 :                 .portid = NETLINK_CB(cb->skb).portid,
    1805          52 :                 .seq = nlh->nlmsg_seq,
    1806             :                 .event = RTM_NEWADDR,
    1807             :                 .flags = NLM_F_MULTI,
    1808             :                 .netnsid = -1,
    1809             :         };
    1810          52 :         struct net *net = sock_net(skb->sk);
    1811          52 :         struct net *tgt_net = net;
    1812          52 :         int h, s_h;
    1813          52 :         int idx, s_idx;
    1814          52 :         int s_ip_idx;
    1815          52 :         struct net_device *dev;
    1816          52 :         struct in_device *in_dev;
    1817          52 :         struct hlist_head *head;
    1818          52 :         int err = 0;
    1819             : 
    1820          52 :         s_h = cb->args[0];
    1821          52 :         s_idx = idx = cb->args[1];
    1822          52 :         s_ip_idx = cb->args[2];
    1823             : 
    1824          52 :         if (cb->strict_check) {
    1825           0 :                 err = inet_valid_dump_ifaddr_req(nlh, &fillargs, &tgt_net,
    1826             :                                                  skb->sk, cb);
    1827           0 :                 if (err < 0)
    1828           0 :                         goto put_tgt_net;
    1829             : 
    1830           0 :                 err = 0;
    1831           0 :                 if (fillargs.ifindex) {
    1832           0 :                         dev = __dev_get_by_index(tgt_net, fillargs.ifindex);
    1833           0 :                         if (!dev) {
    1834           0 :                                 err = -ENODEV;
    1835           0 :                                 goto put_tgt_net;
    1836             :                         }
    1837             : 
    1838           0 :                         in_dev = __in_dev_get_rtnl(dev);
    1839           0 :                         if (in_dev) {
    1840           0 :                                 err = in_dev_dump_addr(in_dev, skb, cb, s_ip_idx,
    1841             :                                                        &fillargs);
    1842             :                         }
    1843           0 :                         goto put_tgt_net;
    1844             :                 }
    1845             :         }
    1846             : 
    1847        6708 :         for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
    1848        6656 :                 idx = 0;
    1849        6656 :                 head = &tgt_net->dev_index_head[h];
    1850        6656 :                 rcu_read_lock();
    1851        6656 :                 cb->seq = atomic_read(&tgt_net->ipv4.dev_addr_genid) ^
    1852        6656 :                           tgt_net->dev_base_seq;
    1853       13364 :                 hlist_for_each_entry_rcu(dev, head, index_hlist) {
    1854          52 :                         if (idx < s_idx)
    1855           0 :                                 goto cont;
    1856          52 :                         if (h > s_h || idx > s_idx)
    1857          52 :                                 s_ip_idx = 0;
    1858          52 :                         in_dev = __in_dev_get_rcu(dev);
    1859          52 :                         if (!in_dev)
    1860           0 :                                 goto cont;
    1861             : 
    1862          52 :                         err = in_dev_dump_addr(in_dev, skb, cb, s_ip_idx,
    1863             :                                                &fillargs);
    1864          52 :                         if (err < 0) {
    1865           0 :                                 rcu_read_unlock();
    1866           0 :                                 goto done;
    1867             :                         }
    1868          52 : cont:
    1869          52 :                         idx++;
    1870             :                 }
    1871        6656 :                 rcu_read_unlock();
    1872             :         }
    1873             : 
    1874          52 : done:
    1875          52 :         cb->args[0] = h;
    1876          52 :         cb->args[1] = idx;
    1877          52 : put_tgt_net:
    1878          52 :         if (fillargs.netnsid >= 0)
    1879          52 :                 put_net(tgt_net);
    1880             : 
    1881          52 :         return skb->len ? : err;
    1882             : }
    1883             : 
    1884           2 : static void rtmsg_ifa(int event, struct in_ifaddr *ifa, struct nlmsghdr *nlh,
    1885             :                       u32 portid)
    1886             : {
    1887           4 :         struct inet_fill_args fillargs = {
    1888             :                 .portid = portid,
    1889           2 :                 .seq = nlh ? nlh->nlmsg_seq : 0,
    1890             :                 .event = event,
    1891             :                 .flags = 0,
    1892             :                 .netnsid = -1,
    1893             :         };
    1894           2 :         struct sk_buff *skb;
    1895           2 :         int err = -ENOBUFS;
    1896           2 :         struct net *net;
    1897             : 
    1898           2 :         net = dev_net(ifa->ifa_dev->dev);
    1899           2 :         skb = nlmsg_new(inet_nlmsg_size(), GFP_KERNEL);
    1900           2 :         if (!skb)
    1901           0 :                 goto errout;
    1902             : 
    1903           2 :         err = inet_fill_ifaddr(skb, ifa, &fillargs);
    1904           2 :         if (err < 0) {
    1905             :                 /* -EMSGSIZE implies BUG in inet_nlmsg_size() */
    1906           0 :                 WARN_ON(err == -EMSGSIZE);
    1907           0 :                 kfree_skb(skb);
    1908           0 :                 goto errout;
    1909             :         }
    1910           2 :         rtnl_notify(skb, net, portid, RTNLGRP_IPV4_IFADDR, nlh, GFP_KERNEL);
    1911           2 :         return;
    1912           0 : errout:
    1913           0 :         if (err < 0)
    1914           0 :                 rtnl_set_sk_err(net, RTNLGRP_IPV4_IFADDR, err);
    1915             : }
    1916             : 
    1917           3 : static size_t inet_get_link_af_size(const struct net_device *dev,
    1918             :                                     u32 ext_filter_mask)
    1919             : {
    1920           3 :         struct in_device *in_dev = rcu_dereference_rtnl(dev->ip_ptr);
    1921             : 
    1922           3 :         if (!in_dev)
    1923           0 :                 return 0;
    1924             : 
    1925           3 :         return nla_total_size(IPV4_DEVCONF_MAX * 4); /* IFLA_INET_CONF */
    1926             : }
    1927             : 
    1928          15 : static int inet_fill_link_af(struct sk_buff *skb, const struct net_device *dev,
    1929             :                              u32 ext_filter_mask)
    1930             : {
    1931          15 :         struct in_device *in_dev = rcu_dereference_rtnl(dev->ip_ptr);
    1932          15 :         struct nlattr *nla;
    1933          15 :         int i;
    1934             : 
    1935          15 :         if (!in_dev)
    1936             :                 return -ENODATA;
    1937             : 
    1938          15 :         nla = nla_reserve(skb, IFLA_INET_CONF, IPV4_DEVCONF_MAX * 4);
    1939          15 :         if (!nla)
    1940             :                 return -EMSGSIZE;
    1941             : 
    1942         495 :         for (i = 0; i < IPV4_DEVCONF_MAX; i++)
    1943         480 :                 ((u32 *) nla_data(nla))[i] = in_dev->cnf.data[i];
    1944             : 
    1945             :         return 0;
    1946             : }
    1947             : 
    1948             : static const struct nla_policy inet_af_policy[IFLA_INET_MAX+1] = {
    1949             :         [IFLA_INET_CONF]        = { .type = NLA_NESTED },
    1950             : };
    1951             : 
    1952           0 : static int inet_validate_link_af(const struct net_device *dev,
    1953             :                                  const struct nlattr *nla)
    1954             : {
    1955           0 :         struct nlattr *a, *tb[IFLA_INET_MAX+1];
    1956           0 :         int err, rem;
    1957             : 
    1958           0 :         if (dev && !__in_dev_get_rcu(dev))
    1959             :                 return -EAFNOSUPPORT;
    1960             : 
    1961           0 :         err = nla_parse_nested_deprecated(tb, IFLA_INET_MAX, nla,
    1962             :                                           inet_af_policy, NULL);
    1963           0 :         if (err < 0)
    1964             :                 return err;
    1965             : 
    1966           0 :         if (tb[IFLA_INET_CONF]) {
    1967           0 :                 nla_for_each_nested(a, tb[IFLA_INET_CONF], rem) {
    1968           0 :                         int cfgid = nla_type(a);
    1969             : 
    1970           0 :                         if (nla_len(a) < 4)
    1971             :                                 return -EINVAL;
    1972             : 
    1973           0 :                         if (cfgid <= 0 || cfgid > IPV4_DEVCONF_MAX)
    1974             :                                 return -EINVAL;
    1975             :                 }
    1976             :         }
    1977             : 
    1978             :         return 0;
    1979             : }
    1980             : 
    1981           0 : static int inet_set_link_af(struct net_device *dev, const struct nlattr *nla)
    1982             : {
    1983           0 :         struct in_device *in_dev = __in_dev_get_rcu(dev);
    1984           0 :         struct nlattr *a, *tb[IFLA_INET_MAX+1];
    1985           0 :         int rem;
    1986             : 
    1987           0 :         if (!in_dev)
    1988             :                 return -EAFNOSUPPORT;
    1989             : 
    1990           0 :         if (nla_parse_nested_deprecated(tb, IFLA_INET_MAX, nla, NULL, NULL) < 0)
    1991           0 :                 BUG();
    1992             : 
    1993           0 :         if (tb[IFLA_INET_CONF]) {
    1994           0 :                 nla_for_each_nested(a, tb[IFLA_INET_CONF], rem)
    1995           0 :                         ipv4_devconf_set(in_dev, nla_type(a), nla_get_u32(a));
    1996             :         }
    1997             : 
    1998             :         return 0;
    1999             : }
    2000             : 
    2001           4 : static int inet_netconf_msgsize_devconf(int type)
    2002             : {
    2003           4 :         int size = NLMSG_ALIGN(sizeof(struct netconfmsg))
    2004           4 :                    + nla_total_size(4); /* NETCONFA_IFINDEX */
    2005           4 :         bool all = false;
    2006             : 
    2007           4 :         if (type == NETCONFA_ALL)
    2008           4 :                 all = true;
    2009             : 
    2010           4 :         if (all || type == NETCONFA_FORWARDING)
    2011           4 :                 size += nla_total_size(4);
    2012           4 :         if (all || type == NETCONFA_RP_FILTER)
    2013           4 :                 size += nla_total_size(4);
    2014           4 :         if (all || type == NETCONFA_MC_FORWARDING)
    2015           4 :                 size += nla_total_size(4);
    2016           4 :         if (all || type == NETCONFA_BC_FORWARDING)
    2017           4 :                 size += nla_total_size(4);
    2018           4 :         if (all || type == NETCONFA_PROXY_NEIGH)
    2019           4 :                 size += nla_total_size(4);
    2020           4 :         if (all || type == NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN)
    2021           4 :                 size += nla_total_size(4);
    2022             : 
    2023           0 :         return size;
    2024             : }
    2025             : 
    2026           4 : static int inet_netconf_fill_devconf(struct sk_buff *skb, int ifindex,
    2027             :                                      struct ipv4_devconf *devconf, u32 portid,
    2028             :                                      u32 seq, int event, unsigned int flags,
    2029             :                                      int type)
    2030             : {
    2031           4 :         struct nlmsghdr  *nlh;
    2032           4 :         struct netconfmsg *ncm;
    2033           4 :         bool all = false;
    2034             : 
    2035           4 :         nlh = nlmsg_put(skb, portid, seq, event, sizeof(struct netconfmsg),
    2036             :                         flags);
    2037           4 :         if (!nlh)
    2038             :                 return -EMSGSIZE;
    2039             : 
    2040           4 :         if (type == NETCONFA_ALL)
    2041           4 :                 all = true;
    2042             : 
    2043           4 :         ncm = nlmsg_data(nlh);
    2044           4 :         ncm->ncm_family = AF_INET;
    2045             : 
    2046           4 :         if (nla_put_s32(skb, NETCONFA_IFINDEX, ifindex) < 0)
    2047           0 :                 goto nla_put_failure;
    2048             : 
    2049           4 :         if (!devconf)
    2050           0 :                 goto out;
    2051             : 
    2052           4 :         if ((all || type == NETCONFA_FORWARDING) &&
    2053           4 :             nla_put_s32(skb, NETCONFA_FORWARDING,
    2054             :                         IPV4_DEVCONF(*devconf, FORWARDING)) < 0)
    2055           0 :                 goto nla_put_failure;
    2056           4 :         if ((all || type == NETCONFA_RP_FILTER) &&
    2057           4 :             nla_put_s32(skb, NETCONFA_RP_FILTER,
    2058             :                         IPV4_DEVCONF(*devconf, RP_FILTER)) < 0)
    2059           0 :                 goto nla_put_failure;
    2060           4 :         if ((all || type == NETCONFA_MC_FORWARDING) &&
    2061           4 :             nla_put_s32(skb, NETCONFA_MC_FORWARDING,
    2062             :                         IPV4_DEVCONF(*devconf, MC_FORWARDING)) < 0)
    2063           0 :                 goto nla_put_failure;
    2064           4 :         if ((all || type == NETCONFA_BC_FORWARDING) &&
    2065           4 :             nla_put_s32(skb, NETCONFA_BC_FORWARDING,
    2066             :                         IPV4_DEVCONF(*devconf, BC_FORWARDING)) < 0)
    2067           0 :                 goto nla_put_failure;
    2068           4 :         if ((all || type == NETCONFA_PROXY_NEIGH) &&
    2069           4 :             nla_put_s32(skb, NETCONFA_PROXY_NEIGH,
    2070             :                         IPV4_DEVCONF(*devconf, PROXY_ARP)) < 0)
    2071           0 :                 goto nla_put_failure;
    2072           4 :         if ((all || type == NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN) &&
    2073           4 :             nla_put_s32(skb, NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
    2074             :                         IPV4_DEVCONF(*devconf, IGNORE_ROUTES_WITH_LINKDOWN)) < 0)
    2075           0 :                 goto nla_put_failure;
    2076             : 
    2077           4 : out:
    2078           4 :         nlmsg_end(skb, nlh);
    2079           4 :         return 0;
    2080             : 
    2081           0 : nla_put_failure:
    2082           0 :         nlmsg_cancel(skb, nlh);
    2083           0 :         return -EMSGSIZE;
    2084             : }
    2085             : 
    2086           4 : void inet_netconf_notify_devconf(struct net *net, int event, int type,
    2087             :                                  int ifindex, struct ipv4_devconf *devconf)
    2088             : {
    2089           4 :         struct sk_buff *skb;
    2090           4 :         int err = -ENOBUFS;
    2091             : 
    2092           4 :         skb = nlmsg_new(inet_netconf_msgsize_devconf(type), GFP_KERNEL);
    2093           4 :         if (!skb)
    2094           0 :                 goto errout;
    2095             : 
    2096           4 :         err = inet_netconf_fill_devconf(skb, ifindex, devconf, 0, 0,
    2097             :                                         event, 0, type);
    2098           4 :         if (err < 0) {
    2099             :                 /* -EMSGSIZE implies BUG in inet_netconf_msgsize_devconf() */
    2100           0 :                 WARN_ON(err == -EMSGSIZE);
    2101           0 :                 kfree_skb(skb);
    2102           0 :                 goto errout;
    2103             :         }
    2104           4 :         rtnl_notify(skb, net, 0, RTNLGRP_IPV4_NETCONF, NULL, GFP_KERNEL);
    2105           4 :         return;
    2106           0 : errout:
    2107           0 :         if (err < 0)
    2108           0 :                 rtnl_set_sk_err(net, RTNLGRP_IPV4_NETCONF, err);
    2109             : }
    2110             : 
    2111             : static const struct nla_policy devconf_ipv4_policy[NETCONFA_MAX+1] = {
    2112             :         [NETCONFA_IFINDEX]      = { .len = sizeof(int) },
    2113             :         [NETCONFA_FORWARDING]   = { .len = sizeof(int) },
    2114             :         [NETCONFA_RP_FILTER]    = { .len = sizeof(int) },
    2115             :         [NETCONFA_PROXY_NEIGH]  = { .len = sizeof(int) },
    2116             :         [NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN]  = { .len = sizeof(int) },
    2117             : };
    2118             : 
    2119           0 : static int inet_netconf_valid_get_req(struct sk_buff *skb,
    2120             :                                       const struct nlmsghdr *nlh,
    2121             :                                       struct nlattr **tb,
    2122             :                                       struct netlink_ext_ack *extack)
    2123             : {
    2124           0 :         int i, err;
    2125             : 
    2126           0 :         if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(struct netconfmsg))) {
    2127           0 :                 NL_SET_ERR_MSG(extack, "ipv4: Invalid header for netconf get request");
    2128           0 :                 return -EINVAL;
    2129             :         }
    2130             : 
    2131           0 :         if (!netlink_strict_get_check(skb))
    2132           0 :                 return nlmsg_parse_deprecated(nlh, sizeof(struct netconfmsg),
    2133             :                                               tb, NETCONFA_MAX,
    2134             :                                               devconf_ipv4_policy, extack);
    2135             : 
    2136           0 :         err = nlmsg_parse_deprecated_strict(nlh, sizeof(struct netconfmsg),
    2137             :                                             tb, NETCONFA_MAX,
    2138             :                                             devconf_ipv4_policy, extack);
    2139           0 :         if (err)
    2140             :                 return err;
    2141             : 
    2142           0 :         for (i = 0; i <= NETCONFA_MAX; i++) {
    2143           0 :                 if (!tb[i])
    2144           0 :                         continue;
    2145             : 
    2146           0 :                 switch (i) {
    2147             :                 case NETCONFA_IFINDEX:
    2148             :                         break;
    2149           0 :                 default:
    2150           0 :                         NL_SET_ERR_MSG(extack, "ipv4: Unsupported attribute in netconf get request");
    2151             :                         return -EINVAL;
    2152             :                 }
    2153             :         }
    2154             : 
    2155             :         return 0;
    2156             : }
    2157             : 
    2158           0 : static int inet_netconf_get_devconf(struct sk_buff *in_skb,
    2159             :                                     struct nlmsghdr *nlh,
    2160             :                                     struct netlink_ext_ack *extack)
    2161             : {
    2162           0 :         struct net *net = sock_net(in_skb->sk);
    2163           0 :         struct nlattr *tb[NETCONFA_MAX+1];
    2164           0 :         struct sk_buff *skb;
    2165           0 :         struct ipv4_devconf *devconf;
    2166           0 :         struct in_device *in_dev;
    2167           0 :         struct net_device *dev;
    2168           0 :         int ifindex;
    2169           0 :         int err;
    2170             : 
    2171           0 :         err = inet_netconf_valid_get_req(in_skb, nlh, tb, extack);
    2172           0 :         if (err)
    2173           0 :                 goto errout;
    2174             : 
    2175           0 :         err = -EINVAL;
    2176           0 :         if (!tb[NETCONFA_IFINDEX])
    2177           0 :                 goto errout;
    2178             : 
    2179           0 :         ifindex = nla_get_s32(tb[NETCONFA_IFINDEX]);
    2180           0 :         switch (ifindex) {
    2181           0 :         case NETCONFA_IFINDEX_ALL:
    2182           0 :                 devconf = net->ipv4.devconf_all;
    2183           0 :                 break;
    2184           0 :         case NETCONFA_IFINDEX_DEFAULT:
    2185           0 :                 devconf = net->ipv4.devconf_dflt;
    2186           0 :                 break;
    2187           0 :         default:
    2188           0 :                 dev = __dev_get_by_index(net, ifindex);
    2189           0 :                 if (!dev)
    2190           0 :                         goto errout;
    2191           0 :                 in_dev = __in_dev_get_rtnl(dev);
    2192           0 :                 if (!in_dev)
    2193           0 :                         goto errout;
    2194           0 :                 devconf = &in_dev->cnf;
    2195           0 :                 break;
    2196             :         }
    2197             : 
    2198           0 :         err = -ENOBUFS;
    2199           0 :         skb = nlmsg_new(inet_netconf_msgsize_devconf(NETCONFA_ALL), GFP_KERNEL);
    2200           0 :         if (!skb)
    2201           0 :                 goto errout;
    2202             : 
    2203           0 :         err = inet_netconf_fill_devconf(skb, ifindex, devconf,
    2204             :                                         NETLINK_CB(in_skb).portid,
    2205             :                                         nlh->nlmsg_seq, RTM_NEWNETCONF, 0,
    2206             :                                         NETCONFA_ALL);
    2207           0 :         if (err < 0) {
    2208             :                 /* -EMSGSIZE implies BUG in inet_netconf_msgsize_devconf() */
    2209           0 :                 WARN_ON(err == -EMSGSIZE);
    2210           0 :                 kfree_skb(skb);
    2211           0 :                 goto errout;
    2212             :         }
    2213           0 :         err = rtnl_unicast(skb, net, NETLINK_CB(in_skb).portid);
    2214           0 : errout:
    2215           0 :         return err;
    2216             : }
    2217             : 
    2218           0 : static int inet_netconf_dump_devconf(struct sk_buff *skb,
    2219             :                                      struct netlink_callback *cb)
    2220             : {
    2221           0 :         const struct nlmsghdr *nlh = cb->nlh;
    2222           0 :         struct net *net = sock_net(skb->sk);
    2223           0 :         int h, s_h;
    2224           0 :         int idx, s_idx;
    2225           0 :         struct net_device *dev;
    2226           0 :         struct in_device *in_dev;
    2227           0 :         struct hlist_head *head;
    2228             : 
    2229           0 :         if (cb->strict_check) {
    2230           0 :                 struct netlink_ext_ack *extack = cb->extack;
    2231           0 :                 struct netconfmsg *ncm;
    2232             : 
    2233           0 :                 if (nlh->nlmsg_len < nlmsg_msg_size(sizeof(*ncm))) {
    2234           0 :                         NL_SET_ERR_MSG(extack, "ipv4: Invalid header for netconf dump request");
    2235           0 :                         return -EINVAL;
    2236             :                 }
    2237             : 
    2238           0 :                 if (nlmsg_attrlen(nlh, sizeof(*ncm))) {
    2239           0 :                         NL_SET_ERR_MSG(extack, "ipv4: Invalid data after header in netconf dump request");
    2240           0 :                         return -EINVAL;
    2241             :                 }
    2242             :         }
    2243             : 
    2244           0 :         s_h = cb->args[0];
    2245           0 :         s_idx = idx = cb->args[1];
    2246             : 
    2247           0 :         for (h = s_h; h < NETDEV_HASHENTRIES; h++, s_idx = 0) {
    2248           0 :                 idx = 0;
    2249           0 :                 head = &net->dev_index_head[h];
    2250           0 :                 rcu_read_lock();
    2251           0 :                 cb->seq = atomic_read(&net->ipv4.dev_addr_genid) ^
    2252           0 :                           net->dev_base_seq;
    2253           0 :                 hlist_for_each_entry_rcu(dev, head, index_hlist) {
    2254           0 :                         if (idx < s_idx)
    2255           0 :                                 goto cont;
    2256           0 :                         in_dev = __in_dev_get_rcu(dev);
    2257           0 :                         if (!in_dev)
    2258           0 :                                 goto cont;
    2259             : 
    2260           0 :                         if (inet_netconf_fill_devconf(skb, dev->ifindex,
    2261             :                                                       &in_dev->cnf,
    2262           0 :                                                       NETLINK_CB(cb->skb).portid,
    2263             :                                                       nlh->nlmsg_seq,
    2264             :                                                       RTM_NEWNETCONF,
    2265             :                                                       NLM_F_MULTI,
    2266             :                                                       NETCONFA_ALL) < 0) {
    2267           0 :                                 rcu_read_unlock();
    2268           0 :                                 goto done;
    2269             :                         }
    2270           0 :                         nl_dump_check_consistent(cb, nlmsg_hdr(skb));
    2271           0 : cont:
    2272           0 :                         idx++;
    2273             :                 }
    2274           0 :                 rcu_read_unlock();
    2275             :         }
    2276           0 :         if (h == NETDEV_HASHENTRIES) {
    2277           0 :                 if (inet_netconf_fill_devconf(skb, NETCONFA_IFINDEX_ALL,
    2278             :                                               net->ipv4.devconf_all,
    2279           0 :                                               NETLINK_CB(cb->skb).portid,
    2280             :                                               nlh->nlmsg_seq,
    2281             :                                               RTM_NEWNETCONF, NLM_F_MULTI,
    2282             :                                               NETCONFA_ALL) < 0)
    2283           0 :                         goto done;
    2284             :                 else
    2285             :                         h++;
    2286             :         }
    2287           0 :         if (h == NETDEV_HASHENTRIES + 1) {
    2288           0 :                 if (inet_netconf_fill_devconf(skb, NETCONFA_IFINDEX_DEFAULT,
    2289             :                                               net->ipv4.devconf_dflt,
    2290           0 :                                               NETLINK_CB(cb->skb).portid,
    2291             :                                               nlh->nlmsg_seq,
    2292             :                                               RTM_NEWNETCONF, NLM_F_MULTI,
    2293             :                                               NETCONFA_ALL) < 0)
    2294           0 :                         goto done;
    2295             :                 else
    2296             :                         h++;
    2297             :         }
    2298           0 : done:
    2299           0 :         cb->args[0] = h;
    2300           0 :         cb->args[1] = idx;
    2301             : 
    2302           0 :         return skb->len;
    2303             : }
    2304             : 
    2305             : #ifdef CONFIG_SYSCTL
    2306             : 
    2307           0 : static void devinet_copy_dflt_conf(struct net *net, int i)
    2308             : {
    2309           0 :         struct net_device *dev;
    2310             : 
    2311           0 :         rcu_read_lock();
    2312           0 :         for_each_netdev_rcu(net, dev) {
    2313           0 :                 struct in_device *in_dev;
    2314             : 
    2315           0 :                 in_dev = __in_dev_get_rcu(dev);
    2316           0 :                 if (in_dev && !test_bit(i, in_dev->cnf.state))
    2317           0 :                         in_dev->cnf.data[i] = net->ipv4.devconf_dflt->data[i];
    2318             :         }
    2319           0 :         rcu_read_unlock();
    2320           0 : }
    2321             : 
    2322             : /* called with RTNL locked */
    2323           0 : static void inet_forward_change(struct net *net)
    2324             : {
    2325           0 :         struct net_device *dev;
    2326           0 :         int on = IPV4_DEVCONF_ALL(net, FORWARDING);
    2327             : 
    2328           0 :         IPV4_DEVCONF_ALL(net, ACCEPT_REDIRECTS) = !on;
    2329           0 :         IPV4_DEVCONF_DFLT(net, FORWARDING) = on;
    2330           0 :         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2331             :                                     NETCONFA_FORWARDING,
    2332             :                                     NETCONFA_IFINDEX_ALL,
    2333             :                                     net->ipv4.devconf_all);
    2334           0 :         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2335             :                                     NETCONFA_FORWARDING,
    2336             :                                     NETCONFA_IFINDEX_DEFAULT,
    2337             :                                     net->ipv4.devconf_dflt);
    2338             : 
    2339           0 :         for_each_netdev(net, dev) {
    2340           0 :                 struct in_device *in_dev;
    2341             : 
    2342           0 :                 if (on)
    2343           0 :                         dev_disable_lro(dev);
    2344             : 
    2345           0 :                 in_dev = __in_dev_get_rtnl(dev);
    2346           0 :                 if (in_dev) {
    2347           0 :                         IN_DEV_CONF_SET(in_dev, FORWARDING, on);
    2348           0 :                         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2349             :                                                     NETCONFA_FORWARDING,
    2350             :                                                     dev->ifindex, &in_dev->cnf);
    2351             :                 }
    2352             :         }
    2353           0 : }
    2354             : 
    2355           0 : static int devinet_conf_ifindex(struct net *net, struct ipv4_devconf *cnf)
    2356             : {
    2357           0 :         if (cnf == net->ipv4.devconf_dflt)
    2358             :                 return NETCONFA_IFINDEX_DEFAULT;
    2359           0 :         else if (cnf == net->ipv4.devconf_all)
    2360             :                 return NETCONFA_IFINDEX_ALL;
    2361             :         else {
    2362           0 :                 struct in_device *idev
    2363           0 :                         = container_of(cnf, struct in_device, cnf);
    2364           0 :                 return idev->dev->ifindex;
    2365             :         }
    2366             : }
    2367             : 
    2368           0 : static int devinet_conf_proc(struct ctl_table *ctl, int write,
    2369             :                              void *buffer, size_t *lenp, loff_t *ppos)
    2370             : {
    2371           0 :         int old_value = *(int *)ctl->data;
    2372           0 :         int ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
    2373           0 :         int new_value = *(int *)ctl->data;
    2374             : 
    2375           0 :         if (write) {
    2376           0 :                 struct ipv4_devconf *cnf = ctl->extra1;
    2377           0 :                 struct net *net = ctl->extra2;
    2378           0 :                 int i = (int *)ctl->data - cnf->data;
    2379           0 :                 int ifindex;
    2380             : 
    2381           0 :                 set_bit(i, cnf->state);
    2382             : 
    2383           0 :                 if (cnf == net->ipv4.devconf_dflt)
    2384           0 :                         devinet_copy_dflt_conf(net, i);
    2385           0 :                 if (i == IPV4_DEVCONF_ACCEPT_LOCAL - 1 ||
    2386           0 :                     i == IPV4_DEVCONF_ROUTE_LOCALNET - 1)
    2387           0 :                         if ((new_value == 0) && (old_value != 0))
    2388           0 :                                 rt_cache_flush(net);
    2389             : 
    2390           0 :                 if (i == IPV4_DEVCONF_BC_FORWARDING - 1 &&
    2391           0 :                     new_value != old_value)
    2392           0 :                         rt_cache_flush(net);
    2393             : 
    2394           0 :                 if (i == IPV4_DEVCONF_RP_FILTER - 1 &&
    2395             :                     new_value != old_value) {
    2396           0 :                         ifindex = devinet_conf_ifindex(net, cnf);
    2397           0 :                         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2398             :                                                     NETCONFA_RP_FILTER,
    2399             :                                                     ifindex, cnf);
    2400             :                 }
    2401           0 :                 if (i == IPV4_DEVCONF_PROXY_ARP - 1 &&
    2402             :                     new_value != old_value) {
    2403           0 :                         ifindex = devinet_conf_ifindex(net, cnf);
    2404           0 :                         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2405             :                                                     NETCONFA_PROXY_NEIGH,
    2406             :                                                     ifindex, cnf);
    2407             :                 }
    2408           0 :                 if (i == IPV4_DEVCONF_IGNORE_ROUTES_WITH_LINKDOWN - 1 &&
    2409             :                     new_value != old_value) {
    2410           0 :                         ifindex = devinet_conf_ifindex(net, cnf);
    2411           0 :                         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2412             :                                                     NETCONFA_IGNORE_ROUTES_WITH_LINKDOWN,
    2413             :                                                     ifindex, cnf);
    2414             :                 }
    2415             :         }
    2416             : 
    2417           0 :         return ret;
    2418             : }
    2419             : 
    2420           0 : static int devinet_sysctl_forward(struct ctl_table *ctl, int write,
    2421             :                                   void *buffer, size_t *lenp, loff_t *ppos)
    2422             : {
    2423           0 :         int *valp = ctl->data;
    2424           0 :         int val = *valp;
    2425           0 :         loff_t pos = *ppos;
    2426           0 :         int ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
    2427             : 
    2428           0 :         if (write && *valp != val) {
    2429           0 :                 struct net *net = ctl->extra2;
    2430             : 
    2431           0 :                 if (valp != &IPV4_DEVCONF_DFLT(net, FORWARDING)) {
    2432           0 :                         if (!rtnl_trylock()) {
    2433             :                                 /* Restore the original values before restarting */
    2434           0 :                                 *valp = val;
    2435           0 :                                 *ppos = pos;
    2436           0 :                                 return restart_syscall();
    2437             :                         }
    2438           0 :                         if (valp == &IPV4_DEVCONF_ALL(net, FORWARDING)) {
    2439           0 :                                 inet_forward_change(net);
    2440             :                         } else {
    2441           0 :                                 struct ipv4_devconf *cnf = ctl->extra1;
    2442           0 :                                 struct in_device *idev =
    2443           0 :                                         container_of(cnf, struct in_device, cnf);
    2444           0 :                                 if (*valp)
    2445           0 :                                         dev_disable_lro(idev->dev);
    2446           0 :                                 inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2447             :                                                             NETCONFA_FORWARDING,
    2448           0 :                                                             idev->dev->ifindex,
    2449             :                                                             cnf);
    2450             :                         }
    2451           0 :                         rtnl_unlock();
    2452           0 :                         rt_cache_flush(net);
    2453             :                 } else
    2454           0 :                         inet_netconf_notify_devconf(net, RTM_NEWNETCONF,
    2455             :                                                     NETCONFA_FORWARDING,
    2456             :                                                     NETCONFA_IFINDEX_DEFAULT,
    2457             :                                                     net->ipv4.devconf_dflt);
    2458             :         }
    2459             : 
    2460             :         return ret;
    2461             : }
    2462             : 
    2463           0 : static int ipv4_doint_and_flush(struct ctl_table *ctl, int write,
    2464             :                                 void *buffer, size_t *lenp, loff_t *ppos)
    2465             : {
    2466           0 :         int *valp = ctl->data;
    2467           0 :         int val = *valp;
    2468           0 :         int ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
    2469           0 :         struct net *net = ctl->extra2;
    2470             : 
    2471           0 :         if (write && *valp != val)
    2472           0 :                 rt_cache_flush(net);
    2473             : 
    2474           0 :         return ret;
    2475             : }
    2476             : 
    2477             : #define DEVINET_SYSCTL_ENTRY(attr, name, mval, proc) \
    2478             :         { \
    2479             :                 .procname       = name, \
    2480             :                 .data           = ipv4_devconf.data + \
    2481             :                                   IPV4_DEVCONF_ ## attr - 1, \
    2482             :                 .maxlen         = sizeof(int), \
    2483             :                 .mode           = mval, \
    2484             :                 .proc_handler   = proc, \
    2485             :                 .extra1         = &ipv4_devconf, \
    2486             :         }
    2487             : 
    2488             : #define DEVINET_SYSCTL_RW_ENTRY(attr, name) \
    2489             :         DEVINET_SYSCTL_ENTRY(attr, name, 0644, devinet_conf_proc)
    2490             : 
    2491             : #define DEVINET_SYSCTL_RO_ENTRY(attr, name) \
    2492             :         DEVINET_SYSCTL_ENTRY(attr, name, 0444, devinet_conf_proc)
    2493             : 
    2494             : #define DEVINET_SYSCTL_COMPLEX_ENTRY(attr, name, proc) \
    2495             :         DEVINET_SYSCTL_ENTRY(attr, name, 0644, proc)
    2496             : 
    2497             : #define DEVINET_SYSCTL_FLUSHING_ENTRY(attr, name) \
    2498             :         DEVINET_SYSCTL_COMPLEX_ENTRY(attr, name, ipv4_doint_and_flush)
    2499             : 
    2500             : static struct devinet_sysctl_table {
    2501             :         struct ctl_table_header *sysctl_header;
    2502             :         struct ctl_table devinet_vars[__IPV4_DEVCONF_MAX];
    2503             : } devinet_sysctl = {
    2504             :         .devinet_vars = {
    2505             :                 DEVINET_SYSCTL_COMPLEX_ENTRY(FORWARDING, "forwarding",
    2506             :                                              devinet_sysctl_forward),
    2507             :                 DEVINET_SYSCTL_RO_ENTRY(MC_FORWARDING, "mc_forwarding"),
    2508             :                 DEVINET_SYSCTL_RW_ENTRY(BC_FORWARDING, "bc_forwarding"),
    2509             : 
    2510             :                 DEVINET_SYSCTL_RW_ENTRY(ACCEPT_REDIRECTS, "accept_redirects"),
    2511             :                 DEVINET_SYSCTL_RW_ENTRY(SECURE_REDIRECTS, "secure_redirects"),
    2512             :                 DEVINET_SYSCTL_RW_ENTRY(SHARED_MEDIA, "shared_media"),
    2513             :                 DEVINET_SYSCTL_RW_ENTRY(RP_FILTER, "rp_filter"),
    2514             :                 DEVINET_SYSCTL_RW_ENTRY(SEND_REDIRECTS, "send_redirects"),
    2515             :                 DEVINET_SYSCTL_RW_ENTRY(ACCEPT_SOURCE_ROUTE,
    2516             :                                         "accept_source_route"),
    2517             :                 DEVINET_SYSCTL_RW_ENTRY(ACCEPT_LOCAL, "accept_local"),
    2518             :                 DEVINET_SYSCTL_RW_ENTRY(SRC_VMARK, "src_valid_mark"),
    2519             :                 DEVINET_SYSCTL_RW_ENTRY(PROXY_ARP, "proxy_arp"),
    2520             :                 DEVINET_SYSCTL_RW_ENTRY(MEDIUM_ID, "medium_id"),
    2521             :                 DEVINET_SYSCTL_RW_ENTRY(BOOTP_RELAY, "bootp_relay"),
    2522             :                 DEVINET_SYSCTL_RW_ENTRY(LOG_MARTIANS, "log_martians"),
    2523             :                 DEVINET_SYSCTL_RW_ENTRY(TAG, "tag"),
    2524             :                 DEVINET_SYSCTL_RW_ENTRY(ARPFILTER, "arp_filter"),
    2525             :                 DEVINET_SYSCTL_RW_ENTRY(ARP_ANNOUNCE, "arp_announce"),
    2526             :                 DEVINET_SYSCTL_RW_ENTRY(ARP_IGNORE, "arp_ignore"),
    2527             :                 DEVINET_SYSCTL_RW_ENTRY(ARP_ACCEPT, "arp_accept"),
    2528             :                 DEVINET_SYSCTL_RW_ENTRY(ARP_NOTIFY, "arp_notify"),
    2529             :                 DEVINET_SYSCTL_RW_ENTRY(PROXY_ARP_PVLAN, "proxy_arp_pvlan"),
    2530             :                 DEVINET_SYSCTL_RW_ENTRY(FORCE_IGMP_VERSION,
    2531             :                                         "force_igmp_version"),
    2532             :                 DEVINET_SYSCTL_RW_ENTRY(IGMPV2_UNSOLICITED_REPORT_INTERVAL,
    2533             :                                         "igmpv2_unsolicited_report_interval"),
    2534             :                 DEVINET_SYSCTL_RW_ENTRY(IGMPV3_UNSOLICITED_REPORT_INTERVAL,
    2535             :                                         "igmpv3_unsolicited_report_interval"),
    2536             :                 DEVINET_SYSCTL_RW_ENTRY(IGNORE_ROUTES_WITH_LINKDOWN,
    2537             :                                         "ignore_routes_with_linkdown"),
    2538             :                 DEVINET_SYSCTL_RW_ENTRY(DROP_GRATUITOUS_ARP,
    2539             :                                         "drop_gratuitous_arp"),
    2540             : 
    2541             :                 DEVINET_SYSCTL_FLUSHING_ENTRY(NOXFRM, "disable_xfrm"),
    2542             :                 DEVINET_SYSCTL_FLUSHING_ENTRY(NOPOLICY, "disable_policy"),
    2543             :                 DEVINET_SYSCTL_FLUSHING_ENTRY(PROMOTE_SECONDARIES,
    2544             :                                               "promote_secondaries"),
    2545             :                 DEVINET_SYSCTL_FLUSHING_ENTRY(ROUTE_LOCALNET,
    2546             :                                               "route_localnet"),
    2547             :                 DEVINET_SYSCTL_FLUSHING_ENTRY(DROP_UNICAST_IN_L2_MULTICAST,
    2548             :                                               "drop_unicast_in_l2_multicast"),
    2549             :         },
    2550             : };
    2551             : 
    2552           4 : static int __devinet_sysctl_register(struct net *net, char *dev_name,
    2553             :                                      int ifindex, struct ipv4_devconf *p)
    2554             : {
    2555           4 :         int i;
    2556           4 :         struct devinet_sysctl_table *t;
    2557           4 :         char path[sizeof("net/ipv4/conf/") + IFNAMSIZ];
    2558             : 
    2559           4 :         t = kmemdup(&devinet_sysctl, sizeof(*t), GFP_KERNEL);
    2560           4 :         if (!t)
    2561           0 :                 goto out;
    2562             : 
    2563         132 :         for (i = 0; i < ARRAY_SIZE(t->devinet_vars) - 1; i++) {
    2564         128 :                 t->devinet_vars[i].data += (char *)p - (char *)&ipv4_devconf;
    2565         128 :                 t->devinet_vars[i].extra1 = p;
    2566         128 :                 t->devinet_vars[i].extra2 = net;
    2567             :         }
    2568             : 
    2569           4 :         snprintf(path, sizeof(path), "net/ipv4/conf/%s", dev_name);
    2570             : 
    2571           4 :         t->sysctl_header = register_net_sysctl(net, path, t->devinet_vars);
    2572           4 :         if (!t->sysctl_header)
    2573           0 :                 goto free;
    2574             : 
    2575           4 :         p->sysctl = t;
    2576             : 
    2577           4 :         inet_netconf_notify_devconf(net, RTM_NEWNETCONF, NETCONFA_ALL,
    2578             :                                     ifindex, p);
    2579           4 :         return 0;
    2580             : 
    2581           0 : free:
    2582           0 :         kfree(t);
    2583             : out:
    2584             :         return -ENOBUFS;
    2585             : }
    2586             : 
    2587           0 : static void __devinet_sysctl_unregister(struct net *net,
    2588             :                                         struct ipv4_devconf *cnf, int ifindex)
    2589             : {
    2590           0 :         struct devinet_sysctl_table *t = cnf->sysctl;
    2591             : 
    2592           0 :         if (t) {
    2593           0 :                 cnf->sysctl = NULL;
    2594           0 :                 unregister_net_sysctl_table(t->sysctl_header);
    2595           0 :                 kfree(t);
    2596             :         }
    2597             : 
    2598           0 :         inet_netconf_notify_devconf(net, RTM_DELNETCONF, 0, ifindex, NULL);
    2599           0 : }
    2600             : 
    2601           2 : static int devinet_sysctl_register(struct in_device *idev)
    2602             : {
    2603           2 :         int err;
    2604             : 
    2605           2 :         if (!sysctl_dev_name_is_allowed(idev->dev->name))
    2606             :                 return -EINVAL;
    2607             : 
    2608           2 :         err = neigh_sysctl_register(idev->dev, idev->arp_parms, NULL);
    2609           2 :         if (err)
    2610             :                 return err;
    2611           4 :         err = __devinet_sysctl_register(dev_net(idev->dev), idev->dev->name,
    2612           2 :                                         idev->dev->ifindex, &idev->cnf);
    2613           2 :         if (err)
    2614           0 :                 neigh_sysctl_unregister(idev->arp_parms);
    2615             :         return err;
    2616             : }
    2617             : 
    2618           0 : static void devinet_sysctl_unregister(struct in_device *idev)
    2619             : {
    2620           0 :         struct net *net = dev_net(idev->dev);
    2621             : 
    2622           0 :         __devinet_sysctl_unregister(net, &idev->cnf, idev->dev->ifindex);
    2623           0 :         neigh_sysctl_unregister(idev->arp_parms);
    2624           0 : }
    2625             : 
    2626             : static struct ctl_table ctl_forward_entry[] = {
    2627             :         {
    2628             :                 .procname       = "ip_forward",
    2629             :                 .data           = &ipv4_devconf.data[
    2630             :                                         IPV4_DEVCONF_FORWARDING - 1],
    2631             :                 .maxlen         = sizeof(int),
    2632             :                 .mode           = 0644,
    2633             :                 .proc_handler   = devinet_sysctl_forward,
    2634             :                 .extra1         = &ipv4_devconf,
    2635             :                 .extra2         = &init_net,
    2636             :         },
    2637             :         { },
    2638             : };
    2639             : #endif
    2640             : 
    2641           1 : static __net_init int devinet_init_net(struct net *net)
    2642             : {
    2643           1 :         int err;
    2644           1 :         struct ipv4_devconf *all, *dflt;
    2645             : #ifdef CONFIG_SYSCTL
    2646           1 :         struct ctl_table *tbl;
    2647           1 :         struct ctl_table_header *forw_hdr;
    2648             : #endif
    2649             : 
    2650           1 :         err = -ENOMEM;
    2651           1 :         all = kmemdup(&ipv4_devconf, sizeof(ipv4_devconf), GFP_KERNEL);
    2652           1 :         if (!all)
    2653           0 :                 goto err_alloc_all;
    2654             : 
    2655           1 :         dflt = kmemdup(&ipv4_devconf_dflt, sizeof(ipv4_devconf_dflt), GFP_KERNEL);
    2656           1 :         if (!dflt)
    2657           0 :                 goto err_alloc_dflt;
    2658             : 
    2659             : #ifdef CONFIG_SYSCTL
    2660           1 :         tbl = kmemdup(ctl_forward_entry, sizeof(ctl_forward_entry), GFP_KERNEL);
    2661           1 :         if (!tbl)
    2662           0 :                 goto err_alloc_ctl;
    2663             : 
    2664           1 :         tbl[0].data = &all->data[IPV4_DEVCONF_FORWARDING - 1];
    2665           1 :         tbl[0].extra1 = all;
    2666           1 :         tbl[0].extra2 = net;
    2667             : #endif
    2668             : 
    2669           1 :         if (!net_eq(net, &init_net)) {
    2670             :                 if (IS_ENABLED(CONFIG_SYSCTL) &&
    2671             :                     sysctl_devconf_inherit_init_net == 3) {
    2672             :                         /* copy from the current netns */
    2673             :                         memcpy(all, current->nsproxy->net_ns->ipv4.devconf_all,
    2674             :                                sizeof(ipv4_devconf));
    2675             :                         memcpy(dflt,
    2676             :                                current->nsproxy->net_ns->ipv4.devconf_dflt,
    2677             :                                sizeof(ipv4_devconf_dflt));
    2678             :                 } else if (!IS_ENABLED(CONFIG_SYSCTL) ||
    2679             :                            sysctl_devconf_inherit_init_net != 2) {
    2680             :                         /* inherit == 0 or 1: copy from init_net */
    2681             :                         memcpy(all, init_net.ipv4.devconf_all,
    2682             :                                sizeof(ipv4_devconf));
    2683             :                         memcpy(dflt, init_net.ipv4.devconf_dflt,
    2684             :                                sizeof(ipv4_devconf_dflt));
    2685             :                 }
    2686             :                 /* else inherit == 2: use compiled values */
    2687             :         }
    2688             : 
    2689             : #ifdef CONFIG_SYSCTL
    2690           1 :         err = __devinet_sysctl_register(net, "all", NETCONFA_IFINDEX_ALL, all);
    2691           1 :         if (err < 0)
    2692           0 :                 goto err_reg_all;
    2693             : 
    2694           1 :         err = __devinet_sysctl_register(net, "default",
    2695             :                                         NETCONFA_IFINDEX_DEFAULT, dflt);
    2696           1 :         if (err < 0)
    2697           0 :                 goto err_reg_dflt;
    2698             : 
    2699           1 :         err = -ENOMEM;
    2700           1 :         forw_hdr = register_net_sysctl(net, "net/ipv4", tbl);
    2701           1 :         if (!forw_hdr)
    2702           0 :                 goto err_reg_ctl;
    2703           1 :         net->ipv4.forw_hdr = forw_hdr;
    2704             : #endif
    2705             : 
    2706           1 :         net->ipv4.devconf_all = all;
    2707           1 :         net->ipv4.devconf_dflt = dflt;
    2708           1 :         return 0;
    2709             : 
    2710             : #ifdef CONFIG_SYSCTL
    2711           0 : err_reg_ctl:
    2712           0 :         __devinet_sysctl_unregister(net, dflt, NETCONFA_IFINDEX_DEFAULT);
    2713           0 : err_reg_dflt:
    2714           0 :         __devinet_sysctl_unregister(net, all, NETCONFA_IFINDEX_ALL);
    2715           0 : err_reg_all:
    2716           0 :         kfree(tbl);
    2717           0 : err_alloc_ctl:
    2718             : #endif
    2719           0 :         kfree(dflt);
    2720           0 : err_alloc_dflt:
    2721           0 :         kfree(all);
    2722             : err_alloc_all:
    2723             :         return err;
    2724             : }
    2725             : 
    2726           0 : static __net_exit void devinet_exit_net(struct net *net)
    2727             : {
    2728             : #ifdef CONFIG_SYSCTL
    2729           0 :         struct ctl_table *tbl;
    2730             : 
    2731           0 :         tbl = net->ipv4.forw_hdr->ctl_table_arg;
    2732           0 :         unregister_net_sysctl_table(net->ipv4.forw_hdr);
    2733           0 :         __devinet_sysctl_unregister(net, net->ipv4.devconf_dflt,
    2734             :                                     NETCONFA_IFINDEX_DEFAULT);
    2735           0 :         __devinet_sysctl_unregister(net, net->ipv4.devconf_all,
    2736             :                                     NETCONFA_IFINDEX_ALL);
    2737           0 :         kfree(tbl);
    2738             : #endif
    2739           0 :         kfree(net->ipv4.devconf_dflt);
    2740           0 :         kfree(net->ipv4.devconf_all);
    2741           0 : }
    2742             : 
    2743             : static __net_initdata struct pernet_operations devinet_ops = {
    2744             :         .init = devinet_init_net,
    2745             :         .exit = devinet_exit_net,
    2746             : };
    2747             : 
    2748             : static struct rtnl_af_ops inet_af_ops __read_mostly = {
    2749             :         .family           = AF_INET,
    2750             :         .fill_link_af     = inet_fill_link_af,
    2751             :         .get_link_af_size = inet_get_link_af_size,
    2752             :         .validate_link_af = inet_validate_link_af,
    2753             :         .set_link_af      = inet_set_link_af,
    2754             : };
    2755             : 
    2756           1 : void __init devinet_init(void)
    2757             : {
    2758           1 :         int i;
    2759             : 
    2760         257 :         for (i = 0; i < IN4_ADDR_HSIZE; i++)
    2761         256 :                 INIT_HLIST_HEAD(&inet_addr_lst[i]);
    2762             : 
    2763           1 :         register_pernet_subsys(&devinet_ops);
    2764             : 
    2765           1 :         register_gifconf(PF_INET, inet_gifconf);
    2766           1 :         register_netdevice_notifier(&ip_netdev_notifier);
    2767             : 
    2768           1 :         queue_delayed_work(system_power_efficient_wq, &check_lifetime_work, 0);
    2769             : 
    2770           1 :         rtnl_af_register(&inet_af_ops);
    2771             : 
    2772           1 :         rtnl_register(PF_INET, RTM_NEWADDR, inet_rtm_newaddr, NULL, 0);
    2773           1 :         rtnl_register(PF_INET, RTM_DELADDR, inet_rtm_deladdr, NULL, 0);
    2774           1 :         rtnl_register(PF_INET, RTM_GETADDR, NULL, inet_dump_ifaddr, 0);
    2775           1 :         rtnl_register(PF_INET, RTM_GETNETCONF, inet_netconf_get_devconf,
    2776             :                       inet_netconf_dump_devconf, 0);
    2777           1 : }

Generated by: LCOV version 1.14