at master 16 kB view raw
1/* SPDX-License-Identifier: GPL-2.0 */ 2#ifndef _ADDRCONF_H 3#define _ADDRCONF_H 4 5#define MAX_RTR_SOLICITATIONS -1 /* unlimited */ 6#define RTR_SOLICITATION_INTERVAL (4*HZ) 7#define RTR_SOLICITATION_MAX_INTERVAL (3600*HZ) /* 1 hour */ 8 9#define MIN_VALID_LIFETIME (2*3600) /* 2 hours */ 10 11#define TEMP_VALID_LIFETIME (7*86400) /* 1 week */ 12#define TEMP_PREFERRED_LIFETIME (86400) /* 24 hours */ 13#define REGEN_MIN_ADVANCE (2) /* 2 seconds */ 14#define REGEN_MAX_RETRY (3) 15#define MAX_DESYNC_FACTOR (600) 16 17#define ADDR_CHECK_FREQUENCY (120*HZ) 18 19#define IPV6_MAX_ADDRESSES 16 20 21#define ADDRCONF_TIMER_FUZZ_MINUS (HZ > 50 ? HZ / 50 : 1) 22#define ADDRCONF_TIMER_FUZZ (HZ / 4) 23#define ADDRCONF_TIMER_FUZZ_MAX (HZ) 24 25#define ADDRCONF_NOTIFY_PRIORITY 0 26 27#include <linux/in.h> 28#include <linux/in6.h> 29 30struct prefix_info { 31 __u8 type; 32 __u8 length; 33 __u8 prefix_len; 34 35 union __packed { 36 __u8 flags; 37 struct __packed { 38#if defined(__BIG_ENDIAN_BITFIELD) 39 __u8 onlink : 1, 40 autoconf : 1, 41 routeraddr : 1, 42 preferpd : 1, 43 reserved : 4; 44#elif defined(__LITTLE_ENDIAN_BITFIELD) 45 __u8 reserved : 4, 46 preferpd : 1, 47 routeraddr : 1, 48 autoconf : 1, 49 onlink : 1; 50#else 51#error "Please fix <asm/byteorder.h>" 52#endif 53 }; 54 }; 55 __be32 valid; 56 __be32 prefered; 57 __be32 reserved2; 58 59 struct in6_addr prefix; 60}; 61 62/* rfc4861 4.6.2: IPv6 PIO is 32 bytes in size */ 63static_assert(sizeof(struct prefix_info) == 32); 64 65#include <linux/ipv6.h> 66#include <linux/netdevice.h> 67#include <net/if_inet6.h> 68#include <net/ipv6.h> 69 70struct in6_validator_info { 71 struct in6_addr i6vi_addr; 72 struct inet6_dev *i6vi_dev; 73 struct netlink_ext_ack *extack; 74}; 75 76struct ifa6_config { 77 const struct in6_addr *pfx; 78 unsigned int plen; 79 80 u8 ifa_proto; 81 82 const struct in6_addr *peer_pfx; 83 84 u32 rt_priority; 85 u32 ifa_flags; 86 u32 preferred_lft; 87 u32 valid_lft; 88 u16 scope; 89}; 90 91enum addr_type_t { 92 UNICAST_ADDR, 93 MULTICAST_ADDR, 94 ANYCAST_ADDR, 95}; 96 97struct inet6_fill_args { 98 u32 portid; 99 u32 seq; 100 int event; 101 unsigned int flags; 102 int netnsid; 103 int ifindex; 104 enum addr_type_t type; 105 bool force_rt_scope_universe; 106}; 107 108int addrconf_init(void); 109void addrconf_cleanup(void); 110 111int addrconf_add_ifaddr(struct net *net, void __user *arg); 112int addrconf_del_ifaddr(struct net *net, void __user *arg); 113int addrconf_set_dstaddr(struct net *net, void __user *arg); 114 115int ipv6_chk_addr(struct net *net, const struct in6_addr *addr, 116 const struct net_device *dev, int strict); 117int ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr, 118 const struct net_device *dev, bool skip_dev_check, 119 int strict, u32 banned_flags); 120 121#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE) 122int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr); 123#endif 124 125int ipv6_chk_rpl_srh_loop(struct net *net, const struct in6_addr *segs, 126 unsigned char nsegs); 127 128bool ipv6_chk_custom_prefix(const struct in6_addr *addr, 129 const unsigned int prefix_len, 130 struct net_device *dev); 131 132int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev); 133 134struct net_device *ipv6_dev_find(struct net *net, const struct in6_addr *addr, 135 struct net_device *dev); 136 137struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net, 138 const struct in6_addr *addr, 139 struct net_device *dev, int strict); 140 141int ipv6_dev_get_saddr(struct net *net, const struct net_device *dev, 142 const struct in6_addr *daddr, unsigned int srcprefs, 143 struct in6_addr *saddr); 144int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr, 145 u32 banned_flags); 146bool inet_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2, 147 bool match_wildcard); 148bool inet_rcv_saddr_any(const struct sock *sk); 149void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr); 150void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr); 151 152void addrconf_add_linklocal(struct inet6_dev *idev, 153 const struct in6_addr *addr, u32 flags); 154 155int addrconf_prefix_rcv_add_addr(struct net *net, struct net_device *dev, 156 const struct prefix_info *pinfo, 157 struct inet6_dev *in6_dev, 158 const struct in6_addr *addr, int addr_type, 159 u32 addr_flags, bool sllao, bool tokenized, 160 __u32 valid_lft, u32 prefered_lft); 161 162static inline void addrconf_addr_eui48_base(u8 *eui, const char *const addr) 163{ 164 memcpy(eui, addr, 3); 165 eui[3] = 0xFF; 166 eui[4] = 0xFE; 167 memcpy(eui + 5, addr + 3, 3); 168} 169 170static inline void addrconf_addr_eui48(u8 *eui, const char *const addr) 171{ 172 addrconf_addr_eui48_base(eui, addr); 173 eui[0] ^= 2; 174} 175 176static inline int addrconf_ifid_eui48(u8 *eui, struct net_device *dev) 177{ 178 if (dev->addr_len != ETH_ALEN) 179 return -1; 180 181 /* 182 * The zSeries OSA network cards can be shared among various 183 * OS instances, but the OSA cards have only one MAC address. 184 * This leads to duplicate address conflicts in conjunction 185 * with IPv6 if more than one instance uses the same card. 186 * 187 * The driver for these cards can deliver a unique 16-bit 188 * identifier for each instance sharing the same card. It is 189 * placed instead of 0xFFFE in the interface identifier. The 190 * "u" bit of the interface identifier is not inverted in this 191 * case. Hence the resulting interface identifier has local 192 * scope according to RFC2373. 193 */ 194 195 addrconf_addr_eui48_base(eui, dev->dev_addr); 196 197 if (dev->dev_id) { 198 eui[3] = (dev->dev_id >> 8) & 0xFF; 199 eui[4] = dev->dev_id & 0xFF; 200 } else { 201 eui[0] ^= 2; 202 } 203 204 return 0; 205} 206 207#define INFINITY_LIFE_TIME 0xFFFFFFFF 208 209static inline unsigned long addrconf_timeout_fixup(u32 timeout, 210 unsigned int unit) 211{ 212 if (timeout == INFINITY_LIFE_TIME) 213 return ~0UL; 214 215 /* 216 * Avoid arithmetic overflow. 217 * Assuming unit is constant and non-zero, this "if" statement 218 * will go away on 64bit archs. 219 */ 220 if (0xfffffffe > LONG_MAX / unit && timeout > LONG_MAX / unit) 221 return LONG_MAX / unit; 222 223 return timeout; 224} 225 226static inline int addrconf_finite_timeout(unsigned long timeout) 227{ 228 return ~timeout; 229} 230 231/* 232 * IPv6 Address Label subsystem (addrlabel.c) 233 */ 234int ipv6_addr_label_init(void); 235void ipv6_addr_label_cleanup(void); 236int ipv6_addr_label_rtnl_register(void); 237u32 ipv6_addr_label(struct net *net, const struct in6_addr *addr, 238 int type, int ifindex); 239 240/* 241 * multicast prototypes (mcast.c) 242 */ 243static inline bool ipv6_mc_may_pull(struct sk_buff *skb, 244 unsigned int len) 245{ 246 if (skb_transport_offset(skb) + ipv6_transport_len(skb) < len) 247 return false; 248 249 return pskb_may_pull(skb, len); 250} 251 252int ipv6_sock_mc_join(struct sock *sk, int ifindex, 253 const struct in6_addr *addr); 254int ipv6_sock_mc_drop(struct sock *sk, int ifindex, 255 const struct in6_addr *addr); 256void __ipv6_sock_mc_close(struct sock *sk); 257void ipv6_sock_mc_close(struct sock *sk); 258bool inet6_mc_check(const struct sock *sk, const struct in6_addr *mc_addr, 259 const struct in6_addr *src_addr); 260 261int ipv6_dev_mc_inc(struct net_device *dev, const struct in6_addr *addr); 262int __ipv6_dev_mc_dec(struct inet6_dev *idev, const struct in6_addr *addr); 263int ipv6_dev_mc_dec(struct net_device *dev, const struct in6_addr *addr); 264void ipv6_mc_up(struct inet6_dev *idev); 265void ipv6_mc_down(struct inet6_dev *idev); 266void ipv6_mc_unmap(struct inet6_dev *idev); 267void ipv6_mc_remap(struct inet6_dev *idev); 268void ipv6_mc_init_dev(struct inet6_dev *idev); 269void ipv6_mc_destroy_dev(struct inet6_dev *idev); 270int ipv6_mc_check_mld(struct sk_buff *skb); 271void addrconf_dad_failure(struct sk_buff *skb, struct inet6_ifaddr *ifp); 272 273bool ipv6_chk_mcast_addr(struct net_device *dev, const struct in6_addr *group, 274 const struct in6_addr *src_addr); 275 276void ipv6_mc_dad_complete(struct inet6_dev *idev); 277 278/* 279 * identify MLD packets for MLD filter exceptions 280 */ 281static inline bool ipv6_is_mld(struct sk_buff *skb, int nexthdr, int offset) 282{ 283 struct icmp6hdr *hdr; 284 285 if (nexthdr != IPPROTO_ICMPV6 || 286 !pskb_network_may_pull(skb, offset + sizeof(struct icmp6hdr))) 287 return false; 288 289 hdr = (struct icmp6hdr *)(skb_network_header(skb) + offset); 290 291 switch (hdr->icmp6_type) { 292 case ICMPV6_MGM_QUERY: 293 case ICMPV6_MGM_REPORT: 294 case ICMPV6_MGM_REDUCTION: 295 case ICMPV6_MLD2_REPORT: 296 return true; 297 default: 298 break; 299 } 300 return false; 301} 302 303void addrconf_prefix_rcv(struct net_device *dev, 304 u8 *opt, int len, bool sllao); 305 306/* 307 * anycast prototypes (anycast.c) 308 */ 309int ipv6_sock_ac_join(struct sock *sk, int ifindex, 310 const struct in6_addr *addr); 311int ipv6_sock_ac_drop(struct sock *sk, int ifindex, 312 const struct in6_addr *addr); 313void __ipv6_sock_ac_close(struct sock *sk); 314void ipv6_sock_ac_close(struct sock *sk); 315 316int __ipv6_dev_ac_inc(struct inet6_dev *idev, const struct in6_addr *addr); 317int __ipv6_dev_ac_dec(struct inet6_dev *idev, const struct in6_addr *addr); 318void ipv6_ac_destroy_dev(struct inet6_dev *idev); 319bool ipv6_chk_acast_addr(struct net *net, struct net_device *dev, 320 const struct in6_addr *addr); 321bool ipv6_chk_acast_addr_src(struct net *net, struct net_device *dev, 322 const struct in6_addr *addr); 323int ipv6_anycast_init(void); 324void ipv6_anycast_cleanup(void); 325 326/* Device notifier */ 327int register_inet6addr_notifier(struct notifier_block *nb); 328int unregister_inet6addr_notifier(struct notifier_block *nb); 329int inet6addr_notifier_call_chain(unsigned long val, void *v); 330 331int register_inet6addr_validator_notifier(struct notifier_block *nb); 332int unregister_inet6addr_validator_notifier(struct notifier_block *nb); 333int inet6addr_validator_notifier_call_chain(unsigned long val, void *v); 334 335void inet6_netconf_notify_devconf(struct net *net, int event, int type, 336 int ifindex, struct ipv6_devconf *devconf); 337 338/** 339 * __in6_dev_get - get inet6_dev pointer from netdevice 340 * @dev: network device 341 * 342 * Caller must hold rcu_read_lock or RTNL, because this function 343 * does not take a reference on the inet6_dev. 344 */ 345static inline struct inet6_dev *__in6_dev_get(const struct net_device *dev) 346{ 347 return rcu_dereference_rtnl(dev->ip6_ptr); 348} 349 350static inline struct inet6_dev *in6_dev_rcu(const struct net_device *dev) 351{ 352 return rcu_dereference(dev->ip6_ptr); 353} 354 355static inline struct inet6_dev *__in6_dev_get_rtnl_net(const struct net_device *dev) 356{ 357 return rtnl_net_dereference(dev_net(dev), dev->ip6_ptr); 358} 359 360/** 361 * __in6_dev_stats_get - get inet6_dev pointer for stats 362 * @dev: network device 363 * @skb: skb for original incoming interface if needed 364 * 365 * Caller must hold rcu_read_lock or RTNL, because this function 366 * does not take a reference on the inet6_dev. 367 */ 368static inline struct inet6_dev *__in6_dev_stats_get(const struct net_device *dev, 369 const struct sk_buff *skb) 370{ 371 if (netif_is_l3_master(dev)) 372 dev = dev_get_by_index_rcu(dev_net(dev), inet6_iif(skb)); 373 return __in6_dev_get(dev); 374} 375 376/** 377 * __in6_dev_get_safely - get inet6_dev pointer from netdevice 378 * @dev: network device 379 * 380 * This is a safer version of __in6_dev_get 381 */ 382static inline struct inet6_dev *__in6_dev_get_safely(const struct net_device *dev) 383{ 384 if (likely(dev)) 385 return rcu_dereference_rtnl(dev->ip6_ptr); 386 else 387 return NULL; 388} 389 390/** 391 * in6_dev_get - get inet6_dev pointer from netdevice 392 * @dev: network device 393 * 394 * This version can be used in any context, and takes a reference 395 * on the inet6_dev. Callers must use in6_dev_put() later to 396 * release this reference. 397 */ 398static inline struct inet6_dev *in6_dev_get(const struct net_device *dev) 399{ 400 struct inet6_dev *idev; 401 402 rcu_read_lock(); 403 idev = rcu_dereference(dev->ip6_ptr); 404 if (idev) 405 refcount_inc(&idev->refcnt); 406 rcu_read_unlock(); 407 return idev; 408} 409 410static inline struct neigh_parms *__in6_dev_nd_parms_get_rcu(const struct net_device *dev) 411{ 412 struct inet6_dev *idev = __in6_dev_get(dev); 413 414 return idev ? idev->nd_parms : NULL; 415} 416 417void in6_dev_finish_destroy(struct inet6_dev *idev); 418 419static inline void in6_dev_put(struct inet6_dev *idev) 420{ 421 if (refcount_dec_and_test(&idev->refcnt)) 422 in6_dev_finish_destroy(idev); 423} 424 425static inline void in6_dev_put_clear(struct inet6_dev **pidev) 426{ 427 struct inet6_dev *idev = *pidev; 428 429 if (idev) { 430 in6_dev_put(idev); 431 *pidev = NULL; 432 } 433} 434 435static inline void __in6_dev_put(struct inet6_dev *idev) 436{ 437 refcount_dec(&idev->refcnt); 438} 439 440static inline void in6_dev_hold(struct inet6_dev *idev) 441{ 442 refcount_inc(&idev->refcnt); 443} 444 445/* called with rcu_read_lock held */ 446static inline bool ip6_ignore_linkdown(const struct net_device *dev) 447{ 448 const struct inet6_dev *idev = __in6_dev_get(dev); 449 450 if (unlikely(!idev)) 451 return true; 452 453 return !!READ_ONCE(idev->cnf.ignore_routes_with_linkdown); 454} 455 456void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp); 457 458static inline void in6_ifa_put(struct inet6_ifaddr *ifp) 459{ 460 if (refcount_dec_and_test(&ifp->refcnt)) 461 inet6_ifa_finish_destroy(ifp); 462} 463 464static inline void __in6_ifa_put(struct inet6_ifaddr *ifp) 465{ 466 refcount_dec(&ifp->refcnt); 467} 468 469static inline void in6_ifa_hold(struct inet6_ifaddr *ifp) 470{ 471 refcount_inc(&ifp->refcnt); 472} 473 474static inline bool in6_ifa_hold_safe(struct inet6_ifaddr *ifp) 475{ 476 return refcount_inc_not_zero(&ifp->refcnt); 477} 478 479/* 480 * compute link-local solicited-node multicast address 481 */ 482 483static inline void addrconf_addr_solict_mult(const struct in6_addr *addr, 484 struct in6_addr *solicited) 485{ 486 ipv6_addr_set(solicited, 487 htonl(0xFF020000), 0, 488 htonl(0x1), 489 htonl(0xFF000000) | addr->s6_addr32[3]); 490} 491 492static inline bool ipv6_addr_is_ll_all_nodes(const struct in6_addr *addr) 493{ 494#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 495 __be64 *p = (__force __be64 *)addr; 496 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(1))) == 0UL; 497#else 498 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 499 addr->s6_addr32[1] | addr->s6_addr32[2] | 500 (addr->s6_addr32[3] ^ htonl(0x00000001))) == 0; 501#endif 502} 503 504static inline bool ipv6_addr_is_ll_all_routers(const struct in6_addr *addr) 505{ 506#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 507 __be64 *p = (__force __be64 *)addr; 508 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(2))) == 0UL; 509#else 510 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 511 addr->s6_addr32[1] | addr->s6_addr32[2] | 512 (addr->s6_addr32[3] ^ htonl(0x00000002))) == 0; 513#endif 514} 515 516static inline bool ipv6_addr_is_isatap(const struct in6_addr *addr) 517{ 518 return (addr->s6_addr32[2] | htonl(0x02000000)) == htonl(0x02005EFE); 519} 520 521static inline bool ipv6_addr_is_solict_mult(const struct in6_addr *addr) 522{ 523#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 524 __be64 *p = (__force __be64 *)addr; 525 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | 526 ((p[1] ^ cpu_to_be64(0x00000001ff000000UL)) & 527 cpu_to_be64(0xffffffffff000000UL))) == 0UL; 528#else 529 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 530 addr->s6_addr32[1] | 531 (addr->s6_addr32[2] ^ htonl(0x00000001)) | 532 (addr->s6_addr[12] ^ 0xff)) == 0; 533#endif 534} 535 536static inline bool ipv6_addr_is_all_snoopers(const struct in6_addr *addr) 537{ 538#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 539 __be64 *p = (__force __be64 *)addr; 540 541 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | 542 (p[1] ^ cpu_to_be64(0x6a))) == 0UL; 543#else 544 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 545 addr->s6_addr32[1] | addr->s6_addr32[2] | 546 (addr->s6_addr32[3] ^ htonl(0x0000006a))) == 0; 547#endif 548} 549 550#ifdef CONFIG_PROC_FS 551int if6_proc_init(void); 552void if6_proc_exit(void); 553#endif 554 555int inet6_fill_ifmcaddr(struct sk_buff *skb, 556 const struct ifmcaddr6 *ifmca, 557 struct inet6_fill_args *args); 558 559int inet6_fill_ifacaddr(struct sk_buff *skb, 560 const struct ifacaddr6 *ifaca, 561 struct inet6_fill_args *args); 562#endif