at v5.7 503 lines 14 kB view raw
1/* SPDX-License-Identifier: GPL-2.0 */ 2#ifndef _ADDRCONF_H 3#define _ADDRCONF_H 4 5#define MAX_RTR_SOLICITATIONS -1 /* unlimited */ 6#define RTR_SOLICITATION_INTERVAL (4*HZ) 7#define RTR_SOLICITATION_MAX_INTERVAL (3600*HZ) /* 1 hour */ 8 9#define MIN_VALID_LIFETIME (2*3600) /* 2 hours */ 10 11#define TEMP_VALID_LIFETIME (7*86400) 12#define TEMP_PREFERRED_LIFETIME (86400) 13#define REGEN_MAX_RETRY (3) 14#define MAX_DESYNC_FACTOR (600) 15 16#define ADDR_CHECK_FREQUENCY (120*HZ) 17 18#define IPV6_MAX_ADDRESSES 16 19 20#define ADDRCONF_TIMER_FUZZ_MINUS (HZ > 50 ? HZ / 50 : 1) 21#define ADDRCONF_TIMER_FUZZ (HZ / 4) 22#define ADDRCONF_TIMER_FUZZ_MAX (HZ) 23 24#define ADDRCONF_NOTIFY_PRIORITY 0 25 26#include <linux/in.h> 27#include <linux/in6.h> 28 29struct prefix_info { 30 __u8 type; 31 __u8 length; 32 __u8 prefix_len; 33 34#if defined(__BIG_ENDIAN_BITFIELD) 35 __u8 onlink : 1, 36 autoconf : 1, 37 reserved : 6; 38#elif defined(__LITTLE_ENDIAN_BITFIELD) 39 __u8 reserved : 6, 40 autoconf : 1, 41 onlink : 1; 42#else 43#error "Please fix <asm/byteorder.h>" 44#endif 45 __be32 valid; 46 __be32 prefered; 47 __be32 reserved2; 48 49 struct in6_addr prefix; 50}; 51 52#include <linux/ipv6.h> 53#include <linux/netdevice.h> 54#include <net/if_inet6.h> 55#include <net/ipv6.h> 56 57struct in6_validator_info { 58 struct in6_addr i6vi_addr; 59 struct inet6_dev *i6vi_dev; 60 struct netlink_ext_ack *extack; 61}; 62 63struct ifa6_config { 64 const struct in6_addr *pfx; 65 unsigned int plen; 66 67 const struct in6_addr *peer_pfx; 68 69 u32 rt_priority; 70 u32 ifa_flags; 71 u32 preferred_lft; 72 u32 valid_lft; 73 u16 scope; 74}; 75 76int addrconf_init(void); 77void addrconf_cleanup(void); 78 79int addrconf_add_ifaddr(struct net *net, void __user *arg); 80int addrconf_del_ifaddr(struct net *net, void __user *arg); 81int addrconf_set_dstaddr(struct net *net, void __user *arg); 82 83int ipv6_chk_addr(struct net *net, const struct in6_addr *addr, 84 const struct net_device *dev, int strict); 85int ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr, 86 const struct net_device *dev, bool skip_dev_check, 87 int strict, u32 banned_flags); 88 89#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE) 90int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr); 91#endif 92 93int ipv6_chk_rpl_srh_loop(struct net *net, const struct in6_addr *segs, 94 unsigned char nsegs); 95 96bool ipv6_chk_custom_prefix(const struct in6_addr *addr, 97 const unsigned int prefix_len, 98 struct net_device *dev); 99 100int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev); 101 102struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net, 103 const struct in6_addr *addr, 104 struct net_device *dev, int strict); 105 106int ipv6_dev_get_saddr(struct net *net, const struct net_device *dev, 107 const struct in6_addr *daddr, unsigned int srcprefs, 108 struct in6_addr *saddr); 109int __ipv6_get_lladdr(struct inet6_dev *idev, struct in6_addr *addr, 110 u32 banned_flags); 111int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr, 112 u32 banned_flags); 113bool inet_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2, 114 bool match_wildcard); 115bool inet_rcv_saddr_any(const struct sock *sk); 116void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr); 117void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr); 118 119void addrconf_add_linklocal(struct inet6_dev *idev, 120 const struct in6_addr *addr, u32 flags); 121 122int addrconf_prefix_rcv_add_addr(struct net *net, struct net_device *dev, 123 const struct prefix_info *pinfo, 124 struct inet6_dev *in6_dev, 125 const struct in6_addr *addr, int addr_type, 126 u32 addr_flags, bool sllao, bool tokenized, 127 __u32 valid_lft, u32 prefered_lft); 128 129static inline void addrconf_addr_eui48_base(u8 *eui, const char *const addr) 130{ 131 memcpy(eui, addr, 3); 132 eui[3] = 0xFF; 133 eui[4] = 0xFE; 134 memcpy(eui + 5, addr + 3, 3); 135} 136 137static inline void addrconf_addr_eui48(u8 *eui, const char *const addr) 138{ 139 addrconf_addr_eui48_base(eui, addr); 140 eui[0] ^= 2; 141} 142 143static inline int addrconf_ifid_eui48(u8 *eui, struct net_device *dev) 144{ 145 if (dev->addr_len != ETH_ALEN) 146 return -1; 147 148 /* 149 * The zSeries OSA network cards can be shared among various 150 * OS instances, but the OSA cards have only one MAC address. 151 * This leads to duplicate address conflicts in conjunction 152 * with IPv6 if more than one instance uses the same card. 153 * 154 * The driver for these cards can deliver a unique 16-bit 155 * identifier for each instance sharing the same card. It is 156 * placed instead of 0xFFFE in the interface identifier. The 157 * "u" bit of the interface identifier is not inverted in this 158 * case. Hence the resulting interface identifier has local 159 * scope according to RFC2373. 160 */ 161 162 addrconf_addr_eui48_base(eui, dev->dev_addr); 163 164 if (dev->dev_id) { 165 eui[3] = (dev->dev_id >> 8) & 0xFF; 166 eui[4] = dev->dev_id & 0xFF; 167 } else { 168 eui[0] ^= 2; 169 } 170 171 return 0; 172} 173 174static inline unsigned long addrconf_timeout_fixup(u32 timeout, 175 unsigned int unit) 176{ 177 if (timeout == 0xffffffff) 178 return ~0UL; 179 180 /* 181 * Avoid arithmetic overflow. 182 * Assuming unit is constant and non-zero, this "if" statement 183 * will go away on 64bit archs. 184 */ 185 if (0xfffffffe > LONG_MAX / unit && timeout > LONG_MAX / unit) 186 return LONG_MAX / unit; 187 188 return timeout; 189} 190 191static inline int addrconf_finite_timeout(unsigned long timeout) 192{ 193 return ~timeout; 194} 195 196/* 197 * IPv6 Address Label subsystem (addrlabel.c) 198 */ 199int ipv6_addr_label_init(void); 200void ipv6_addr_label_cleanup(void); 201int ipv6_addr_label_rtnl_register(void); 202u32 ipv6_addr_label(struct net *net, const struct in6_addr *addr, 203 int type, int ifindex); 204 205/* 206 * multicast prototypes (mcast.c) 207 */ 208static inline bool ipv6_mc_may_pull(struct sk_buff *skb, 209 unsigned int len) 210{ 211 if (skb_transport_offset(skb) + ipv6_transport_len(skb) < len) 212 return false; 213 214 return pskb_may_pull(skb, len); 215} 216 217int ipv6_sock_mc_join(struct sock *sk, int ifindex, 218 const struct in6_addr *addr); 219int ipv6_sock_mc_drop(struct sock *sk, int ifindex, 220 const struct in6_addr *addr); 221void __ipv6_sock_mc_close(struct sock *sk); 222void ipv6_sock_mc_close(struct sock *sk); 223bool inet6_mc_check(struct sock *sk, const struct in6_addr *mc_addr, 224 const struct in6_addr *src_addr); 225 226int ipv6_dev_mc_inc(struct net_device *dev, const struct in6_addr *addr); 227int __ipv6_dev_mc_dec(struct inet6_dev *idev, const struct in6_addr *addr); 228int ipv6_dev_mc_dec(struct net_device *dev, const struct in6_addr *addr); 229void ipv6_mc_up(struct inet6_dev *idev); 230void ipv6_mc_down(struct inet6_dev *idev); 231void ipv6_mc_unmap(struct inet6_dev *idev); 232void ipv6_mc_remap(struct inet6_dev *idev); 233void ipv6_mc_init_dev(struct inet6_dev *idev); 234void ipv6_mc_destroy_dev(struct inet6_dev *idev); 235int ipv6_mc_check_icmpv6(struct sk_buff *skb); 236int ipv6_mc_check_mld(struct sk_buff *skb); 237void addrconf_dad_failure(struct sk_buff *skb, struct inet6_ifaddr *ifp); 238 239bool ipv6_chk_mcast_addr(struct net_device *dev, const struct in6_addr *group, 240 const struct in6_addr *src_addr); 241 242void ipv6_mc_dad_complete(struct inet6_dev *idev); 243 244/* 245 * identify MLD packets for MLD filter exceptions 246 */ 247static inline bool ipv6_is_mld(struct sk_buff *skb, int nexthdr, int offset) 248{ 249 struct icmp6hdr *hdr; 250 251 if (nexthdr != IPPROTO_ICMPV6 || 252 !pskb_network_may_pull(skb, offset + sizeof(struct icmp6hdr))) 253 return false; 254 255 hdr = (struct icmp6hdr *)(skb_network_header(skb) + offset); 256 257 switch (hdr->icmp6_type) { 258 case ICMPV6_MGM_QUERY: 259 case ICMPV6_MGM_REPORT: 260 case ICMPV6_MGM_REDUCTION: 261 case ICMPV6_MLD2_REPORT: 262 return true; 263 default: 264 break; 265 } 266 return false; 267} 268 269void addrconf_prefix_rcv(struct net_device *dev, 270 u8 *opt, int len, bool sllao); 271 272/* 273 * anycast prototypes (anycast.c) 274 */ 275int ipv6_sock_ac_join(struct sock *sk, int ifindex, 276 const struct in6_addr *addr); 277int ipv6_sock_ac_drop(struct sock *sk, int ifindex, 278 const struct in6_addr *addr); 279void ipv6_sock_ac_close(struct sock *sk); 280 281int __ipv6_dev_ac_inc(struct inet6_dev *idev, const struct in6_addr *addr); 282int __ipv6_dev_ac_dec(struct inet6_dev *idev, const struct in6_addr *addr); 283void ipv6_ac_destroy_dev(struct inet6_dev *idev); 284bool ipv6_chk_acast_addr(struct net *net, struct net_device *dev, 285 const struct in6_addr *addr); 286bool ipv6_chk_acast_addr_src(struct net *net, struct net_device *dev, 287 const struct in6_addr *addr); 288int ipv6_anycast_init(void); 289void ipv6_anycast_cleanup(void); 290 291/* Device notifier */ 292int register_inet6addr_notifier(struct notifier_block *nb); 293int unregister_inet6addr_notifier(struct notifier_block *nb); 294int inet6addr_notifier_call_chain(unsigned long val, void *v); 295 296int register_inet6addr_validator_notifier(struct notifier_block *nb); 297int unregister_inet6addr_validator_notifier(struct notifier_block *nb); 298int inet6addr_validator_notifier_call_chain(unsigned long val, void *v); 299 300void inet6_netconf_notify_devconf(struct net *net, int event, int type, 301 int ifindex, struct ipv6_devconf *devconf); 302 303/** 304 * __in6_dev_get - get inet6_dev pointer from netdevice 305 * @dev: network device 306 * 307 * Caller must hold rcu_read_lock or RTNL, because this function 308 * does not take a reference on the inet6_dev. 309 */ 310static inline struct inet6_dev *__in6_dev_get(const struct net_device *dev) 311{ 312 return rcu_dereference_rtnl(dev->ip6_ptr); 313} 314 315/** 316 * __in6_dev_stats_get - get inet6_dev pointer for stats 317 * @dev: network device 318 * @skb: skb for original incoming interface if neeeded 319 * 320 * Caller must hold rcu_read_lock or RTNL, because this function 321 * does not take a reference on the inet6_dev. 322 */ 323static inline struct inet6_dev *__in6_dev_stats_get(const struct net_device *dev, 324 const struct sk_buff *skb) 325{ 326 if (netif_is_l3_master(dev)) 327 dev = dev_get_by_index_rcu(dev_net(dev), inet6_iif(skb)); 328 return __in6_dev_get(dev); 329} 330 331/** 332 * __in6_dev_get_safely - get inet6_dev pointer from netdevice 333 * @dev: network device 334 * 335 * This is a safer version of __in6_dev_get 336 */ 337static inline struct inet6_dev *__in6_dev_get_safely(const struct net_device *dev) 338{ 339 if (likely(dev)) 340 return rcu_dereference_rtnl(dev->ip6_ptr); 341 else 342 return NULL; 343} 344 345/** 346 * in6_dev_get - get inet6_dev pointer from netdevice 347 * @dev: network device 348 * 349 * This version can be used in any context, and takes a reference 350 * on the inet6_dev. Callers must use in6_dev_put() later to 351 * release this reference. 352 */ 353static inline struct inet6_dev *in6_dev_get(const struct net_device *dev) 354{ 355 struct inet6_dev *idev; 356 357 rcu_read_lock(); 358 idev = rcu_dereference(dev->ip6_ptr); 359 if (idev) 360 refcount_inc(&idev->refcnt); 361 rcu_read_unlock(); 362 return idev; 363} 364 365static inline struct neigh_parms *__in6_dev_nd_parms_get_rcu(const struct net_device *dev) 366{ 367 struct inet6_dev *idev = __in6_dev_get(dev); 368 369 return idev ? idev->nd_parms : NULL; 370} 371 372void in6_dev_finish_destroy(struct inet6_dev *idev); 373 374static inline void in6_dev_put(struct inet6_dev *idev) 375{ 376 if (refcount_dec_and_test(&idev->refcnt)) 377 in6_dev_finish_destroy(idev); 378} 379 380static inline void in6_dev_put_clear(struct inet6_dev **pidev) 381{ 382 struct inet6_dev *idev = *pidev; 383 384 if (idev) { 385 in6_dev_put(idev); 386 *pidev = NULL; 387 } 388} 389 390static inline void __in6_dev_put(struct inet6_dev *idev) 391{ 392 refcount_dec(&idev->refcnt); 393} 394 395static inline void in6_dev_hold(struct inet6_dev *idev) 396{ 397 refcount_inc(&idev->refcnt); 398} 399 400/* called with rcu_read_lock held */ 401static inline bool ip6_ignore_linkdown(const struct net_device *dev) 402{ 403 const struct inet6_dev *idev = __in6_dev_get(dev); 404 405 return !!idev->cnf.ignore_routes_with_linkdown; 406} 407 408void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp); 409 410static inline void in6_ifa_put(struct inet6_ifaddr *ifp) 411{ 412 if (refcount_dec_and_test(&ifp->refcnt)) 413 inet6_ifa_finish_destroy(ifp); 414} 415 416static inline void __in6_ifa_put(struct inet6_ifaddr *ifp) 417{ 418 refcount_dec(&ifp->refcnt); 419} 420 421static inline void in6_ifa_hold(struct inet6_ifaddr *ifp) 422{ 423 refcount_inc(&ifp->refcnt); 424} 425 426 427/* 428 * compute link-local solicited-node multicast address 429 */ 430 431static inline void addrconf_addr_solict_mult(const struct in6_addr *addr, 432 struct in6_addr *solicited) 433{ 434 ipv6_addr_set(solicited, 435 htonl(0xFF020000), 0, 436 htonl(0x1), 437 htonl(0xFF000000) | addr->s6_addr32[3]); 438} 439 440static inline bool ipv6_addr_is_ll_all_nodes(const struct in6_addr *addr) 441{ 442#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 443 __be64 *p = (__force __be64 *)addr; 444 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(1))) == 0UL; 445#else 446 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 447 addr->s6_addr32[1] | addr->s6_addr32[2] | 448 (addr->s6_addr32[3] ^ htonl(0x00000001))) == 0; 449#endif 450} 451 452static inline bool ipv6_addr_is_ll_all_routers(const struct in6_addr *addr) 453{ 454#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 455 __be64 *p = (__force __be64 *)addr; 456 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(2))) == 0UL; 457#else 458 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 459 addr->s6_addr32[1] | addr->s6_addr32[2] | 460 (addr->s6_addr32[3] ^ htonl(0x00000002))) == 0; 461#endif 462} 463 464static inline bool ipv6_addr_is_isatap(const struct in6_addr *addr) 465{ 466 return (addr->s6_addr32[2] | htonl(0x02000000)) == htonl(0x02005EFE); 467} 468 469static inline bool ipv6_addr_is_solict_mult(const struct in6_addr *addr) 470{ 471#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 472 __be64 *p = (__force __be64 *)addr; 473 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | 474 ((p[1] ^ cpu_to_be64(0x00000001ff000000UL)) & 475 cpu_to_be64(0xffffffffff000000UL))) == 0UL; 476#else 477 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 478 addr->s6_addr32[1] | 479 (addr->s6_addr32[2] ^ htonl(0x00000001)) | 480 (addr->s6_addr[12] ^ 0xff)) == 0; 481#endif 482} 483 484static inline bool ipv6_addr_is_all_snoopers(const struct in6_addr *addr) 485{ 486#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64 487 __be64 *p = (__force __be64 *)addr; 488 489 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | 490 (p[1] ^ cpu_to_be64(0x6a))) == 0UL; 491#else 492 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) | 493 addr->s6_addr32[1] | addr->s6_addr32[2] | 494 (addr->s6_addr32[3] ^ htonl(0x0000006a))) == 0; 495#endif 496} 497 498#ifdef CONFIG_PROC_FS 499int if6_proc_init(void); 500void if6_proc_exit(void); 501#endif 502 503#endif