1/* SPDX-License-Identifier: GPL-2.0 */
2#ifndef _ADDRCONF_H
3#define _ADDRCONF_H
4
5#define MAX_RTR_SOLICITATIONS -1 /* unlimited */
6#define RTR_SOLICITATION_INTERVAL (4*HZ)
7#define RTR_SOLICITATION_MAX_INTERVAL (3600*HZ) /* 1 hour */
8
9#define MIN_VALID_LIFETIME (2*3600) /* 2 hours */
10
11#define TEMP_VALID_LIFETIME (7*86400)
12#define TEMP_PREFERRED_LIFETIME (86400)
13#define REGEN_MAX_RETRY (3)
14#define MAX_DESYNC_FACTOR (600)
15
16#define ADDR_CHECK_FREQUENCY (120*HZ)
17
18#define IPV6_MAX_ADDRESSES 16
19
20#define ADDRCONF_TIMER_FUZZ_MINUS (HZ > 50 ? HZ / 50 : 1)
21#define ADDRCONF_TIMER_FUZZ (HZ / 4)
22#define ADDRCONF_TIMER_FUZZ_MAX (HZ)
23
24#define ADDRCONF_NOTIFY_PRIORITY 0
25
26#include <linux/in.h>
27#include <linux/in6.h>
28
29struct prefix_info {
30 __u8 type;
31 __u8 length;
32 __u8 prefix_len;
33
34#if defined(__BIG_ENDIAN_BITFIELD)
35 __u8 onlink : 1,
36 autoconf : 1,
37 reserved : 6;
38#elif defined(__LITTLE_ENDIAN_BITFIELD)
39 __u8 reserved : 6,
40 autoconf : 1,
41 onlink : 1;
42#else
43#error "Please fix <asm/byteorder.h>"
44#endif
45 __be32 valid;
46 __be32 prefered;
47 __be32 reserved2;
48
49 struct in6_addr prefix;
50};
51
52#include <linux/ipv6.h>
53#include <linux/netdevice.h>
54#include <net/if_inet6.h>
55#include <net/ipv6.h>
56
57struct in6_validator_info {
58 struct in6_addr i6vi_addr;
59 struct inet6_dev *i6vi_dev;
60 struct netlink_ext_ack *extack;
61};
62
63struct ifa6_config {
64 const struct in6_addr *pfx;
65 unsigned int plen;
66
67 const struct in6_addr *peer_pfx;
68
69 u32 rt_priority;
70 u32 ifa_flags;
71 u32 preferred_lft;
72 u32 valid_lft;
73 u16 scope;
74};
75
76int addrconf_init(void);
77void addrconf_cleanup(void);
78
79int addrconf_add_ifaddr(struct net *net, void __user *arg);
80int addrconf_del_ifaddr(struct net *net, void __user *arg);
81int addrconf_set_dstaddr(struct net *net, void __user *arg);
82
83int ipv6_chk_addr(struct net *net, const struct in6_addr *addr,
84 const struct net_device *dev, int strict);
85int ipv6_chk_addr_and_flags(struct net *net, const struct in6_addr *addr,
86 const struct net_device *dev, bool skip_dev_check,
87 int strict, u32 banned_flags);
88
89#if defined(CONFIG_IPV6_MIP6) || defined(CONFIG_IPV6_MIP6_MODULE)
90int ipv6_chk_home_addr(struct net *net, const struct in6_addr *addr);
91#endif
92
93bool ipv6_chk_custom_prefix(const struct in6_addr *addr,
94 const unsigned int prefix_len,
95 struct net_device *dev);
96
97int ipv6_chk_prefix(const struct in6_addr *addr, struct net_device *dev);
98
99struct inet6_ifaddr *ipv6_get_ifaddr(struct net *net,
100 const struct in6_addr *addr,
101 struct net_device *dev, int strict);
102
103int ipv6_dev_get_saddr(struct net *net, const struct net_device *dev,
104 const struct in6_addr *daddr, unsigned int srcprefs,
105 struct in6_addr *saddr);
106int __ipv6_get_lladdr(struct inet6_dev *idev, struct in6_addr *addr,
107 u32 banned_flags);
108int ipv6_get_lladdr(struct net_device *dev, struct in6_addr *addr,
109 u32 banned_flags);
110bool inet_rcv_saddr_equal(const struct sock *sk, const struct sock *sk2,
111 bool match_wildcard);
112bool inet_rcv_saddr_any(const struct sock *sk);
113void addrconf_join_solict(struct net_device *dev, const struct in6_addr *addr);
114void addrconf_leave_solict(struct inet6_dev *idev, const struct in6_addr *addr);
115
116void addrconf_add_linklocal(struct inet6_dev *idev,
117 const struct in6_addr *addr, u32 flags);
118
119int addrconf_prefix_rcv_add_addr(struct net *net, struct net_device *dev,
120 const struct prefix_info *pinfo,
121 struct inet6_dev *in6_dev,
122 const struct in6_addr *addr, int addr_type,
123 u32 addr_flags, bool sllao, bool tokenized,
124 __u32 valid_lft, u32 prefered_lft);
125
126static inline void addrconf_addr_eui48_base(u8 *eui, const char *const addr)
127{
128 memcpy(eui, addr, 3);
129 eui[3] = 0xFF;
130 eui[4] = 0xFE;
131 memcpy(eui + 5, addr + 3, 3);
132}
133
134static inline void addrconf_addr_eui48(u8 *eui, const char *const addr)
135{
136 addrconf_addr_eui48_base(eui, addr);
137 eui[0] ^= 2;
138}
139
140static inline int addrconf_ifid_eui48(u8 *eui, struct net_device *dev)
141{
142 if (dev->addr_len != ETH_ALEN)
143 return -1;
144
145 /*
146 * The zSeries OSA network cards can be shared among various
147 * OS instances, but the OSA cards have only one MAC address.
148 * This leads to duplicate address conflicts in conjunction
149 * with IPv6 if more than one instance uses the same card.
150 *
151 * The driver for these cards can deliver a unique 16-bit
152 * identifier for each instance sharing the same card. It is
153 * placed instead of 0xFFFE in the interface identifier. The
154 * "u" bit of the interface identifier is not inverted in this
155 * case. Hence the resulting interface identifier has local
156 * scope according to RFC2373.
157 */
158
159 addrconf_addr_eui48_base(eui, dev->dev_addr);
160
161 if (dev->dev_id) {
162 eui[3] = (dev->dev_id >> 8) & 0xFF;
163 eui[4] = dev->dev_id & 0xFF;
164 } else {
165 eui[0] ^= 2;
166 }
167
168 return 0;
169}
170
171static inline unsigned long addrconf_timeout_fixup(u32 timeout,
172 unsigned int unit)
173{
174 if (timeout == 0xffffffff)
175 return ~0UL;
176
177 /*
178 * Avoid arithmetic overflow.
179 * Assuming unit is constant and non-zero, this "if" statement
180 * will go away on 64bit archs.
181 */
182 if (0xfffffffe > LONG_MAX / unit && timeout > LONG_MAX / unit)
183 return LONG_MAX / unit;
184
185 return timeout;
186}
187
188static inline int addrconf_finite_timeout(unsigned long timeout)
189{
190 return ~timeout;
191}
192
193/*
194 * IPv6 Address Label subsystem (addrlabel.c)
195 */
196int ipv6_addr_label_init(void);
197void ipv6_addr_label_cleanup(void);
198int ipv6_addr_label_rtnl_register(void);
199u32 ipv6_addr_label(struct net *net, const struct in6_addr *addr,
200 int type, int ifindex);
201
202/*
203 * multicast prototypes (mcast.c)
204 */
205static inline int ipv6_mc_may_pull(struct sk_buff *skb,
206 unsigned int len)
207{
208 if (skb_transport_offset(skb) + ipv6_transport_len(skb) < len)
209 return -EINVAL;
210
211 return pskb_may_pull(skb, len);
212}
213
214int ipv6_sock_mc_join(struct sock *sk, int ifindex,
215 const struct in6_addr *addr);
216int ipv6_sock_mc_drop(struct sock *sk, int ifindex,
217 const struct in6_addr *addr);
218void __ipv6_sock_mc_close(struct sock *sk);
219void ipv6_sock_mc_close(struct sock *sk);
220bool inet6_mc_check(struct sock *sk, const struct in6_addr *mc_addr,
221 const struct in6_addr *src_addr);
222
223int ipv6_dev_mc_inc(struct net_device *dev, const struct in6_addr *addr);
224int __ipv6_dev_mc_dec(struct inet6_dev *idev, const struct in6_addr *addr);
225int ipv6_dev_mc_dec(struct net_device *dev, const struct in6_addr *addr);
226void ipv6_mc_up(struct inet6_dev *idev);
227void ipv6_mc_down(struct inet6_dev *idev);
228void ipv6_mc_unmap(struct inet6_dev *idev);
229void ipv6_mc_remap(struct inet6_dev *idev);
230void ipv6_mc_init_dev(struct inet6_dev *idev);
231void ipv6_mc_destroy_dev(struct inet6_dev *idev);
232int ipv6_mc_check_icmpv6(struct sk_buff *skb);
233int ipv6_mc_check_mld(struct sk_buff *skb);
234void addrconf_dad_failure(struct sk_buff *skb, struct inet6_ifaddr *ifp);
235
236bool ipv6_chk_mcast_addr(struct net_device *dev, const struct in6_addr *group,
237 const struct in6_addr *src_addr);
238
239void ipv6_mc_dad_complete(struct inet6_dev *idev);
240
241/* A stub used by vxlan module. This is ugly, ideally these
242 * symbols should be built into the core kernel.
243 */
244struct ipv6_stub {
245 int (*ipv6_sock_mc_join)(struct sock *sk, int ifindex,
246 const struct in6_addr *addr);
247 int (*ipv6_sock_mc_drop)(struct sock *sk, int ifindex,
248 const struct in6_addr *addr);
249 int (*ipv6_dst_lookup)(struct net *net, struct sock *sk,
250 struct dst_entry **dst, struct flowi6 *fl6);
251 int (*ipv6_route_input)(struct sk_buff *skb);
252
253 struct fib6_table *(*fib6_get_table)(struct net *net, u32 id);
254 struct fib6_info *(*fib6_lookup)(struct net *net, int oif,
255 struct flowi6 *fl6, int flags);
256 struct fib6_info *(*fib6_table_lookup)(struct net *net,
257 struct fib6_table *table,
258 int oif, struct flowi6 *fl6,
259 int flags);
260 struct fib6_info *(*fib6_multipath_select)(const struct net *net,
261 struct fib6_info *f6i,
262 struct flowi6 *fl6, int oif,
263 const struct sk_buff *skb,
264 int strict);
265 u32 (*ip6_mtu_from_fib6)(struct fib6_info *f6i, struct in6_addr *daddr,
266 struct in6_addr *saddr);
267
268 void (*udpv6_encap_enable)(void);
269 void (*ndisc_send_na)(struct net_device *dev, const struct in6_addr *daddr,
270 const struct in6_addr *solicited_addr,
271 bool router, bool solicited, bool override, bool inc_opt);
272 struct neigh_table *nd_tbl;
273};
274extern const struct ipv6_stub *ipv6_stub __read_mostly;
275
276/* A stub used by bpf helpers. Similarly ugly as ipv6_stub */
277struct ipv6_bpf_stub {
278 int (*inet6_bind)(struct sock *sk, struct sockaddr *uaddr, int addr_len,
279 bool force_bind_address_no_port, bool with_lock);
280 struct sock *(*udp6_lib_lookup)(struct net *net,
281 const struct in6_addr *saddr, __be16 sport,
282 const struct in6_addr *daddr, __be16 dport,
283 int dif, int sdif, struct udp_table *tbl,
284 struct sk_buff *skb);
285};
286extern const struct ipv6_bpf_stub *ipv6_bpf_stub __read_mostly;
287
288/*
289 * identify MLD packets for MLD filter exceptions
290 */
291static inline bool ipv6_is_mld(struct sk_buff *skb, int nexthdr, int offset)
292{
293 struct icmp6hdr *hdr;
294
295 if (nexthdr != IPPROTO_ICMPV6 ||
296 !pskb_network_may_pull(skb, offset + sizeof(struct icmp6hdr)))
297 return false;
298
299 hdr = (struct icmp6hdr *)(skb_network_header(skb) + offset);
300
301 switch (hdr->icmp6_type) {
302 case ICMPV6_MGM_QUERY:
303 case ICMPV6_MGM_REPORT:
304 case ICMPV6_MGM_REDUCTION:
305 case ICMPV6_MLD2_REPORT:
306 return true;
307 default:
308 break;
309 }
310 return false;
311}
312
313void addrconf_prefix_rcv(struct net_device *dev,
314 u8 *opt, int len, bool sllao);
315
316/*
317 * anycast prototypes (anycast.c)
318 */
319int ipv6_sock_ac_join(struct sock *sk, int ifindex,
320 const struct in6_addr *addr);
321int ipv6_sock_ac_drop(struct sock *sk, int ifindex,
322 const struct in6_addr *addr);
323void ipv6_sock_ac_close(struct sock *sk);
324
325int __ipv6_dev_ac_inc(struct inet6_dev *idev, const struct in6_addr *addr);
326int __ipv6_dev_ac_dec(struct inet6_dev *idev, const struct in6_addr *addr);
327void ipv6_ac_destroy_dev(struct inet6_dev *idev);
328bool ipv6_chk_acast_addr(struct net *net, struct net_device *dev,
329 const struct in6_addr *addr);
330bool ipv6_chk_acast_addr_src(struct net *net, struct net_device *dev,
331 const struct in6_addr *addr);
332int ipv6_anycast_init(void);
333void ipv6_anycast_cleanup(void);
334
335/* Device notifier */
336int register_inet6addr_notifier(struct notifier_block *nb);
337int unregister_inet6addr_notifier(struct notifier_block *nb);
338int inet6addr_notifier_call_chain(unsigned long val, void *v);
339
340int register_inet6addr_validator_notifier(struct notifier_block *nb);
341int unregister_inet6addr_validator_notifier(struct notifier_block *nb);
342int inet6addr_validator_notifier_call_chain(unsigned long val, void *v);
343
344void inet6_netconf_notify_devconf(struct net *net, int event, int type,
345 int ifindex, struct ipv6_devconf *devconf);
346
347/**
348 * __in6_dev_get - get inet6_dev pointer from netdevice
349 * @dev: network device
350 *
351 * Caller must hold rcu_read_lock or RTNL, because this function
352 * does not take a reference on the inet6_dev.
353 */
354static inline struct inet6_dev *__in6_dev_get(const struct net_device *dev)
355{
356 return rcu_dereference_rtnl(dev->ip6_ptr);
357}
358
359/**
360 * __in6_dev_get_safely - get inet6_dev pointer from netdevice
361 * @dev: network device
362 *
363 * This is a safer version of __in6_dev_get
364 */
365static inline struct inet6_dev *__in6_dev_get_safely(const struct net_device *dev)
366{
367 if (likely(dev))
368 return rcu_dereference_rtnl(dev->ip6_ptr);
369 else
370 return NULL;
371}
372
373/**
374 * in6_dev_get - get inet6_dev pointer from netdevice
375 * @dev: network device
376 *
377 * This version can be used in any context, and takes a reference
378 * on the inet6_dev. Callers must use in6_dev_put() later to
379 * release this reference.
380 */
381static inline struct inet6_dev *in6_dev_get(const struct net_device *dev)
382{
383 struct inet6_dev *idev;
384
385 rcu_read_lock();
386 idev = rcu_dereference(dev->ip6_ptr);
387 if (idev)
388 refcount_inc(&idev->refcnt);
389 rcu_read_unlock();
390 return idev;
391}
392
393static inline struct neigh_parms *__in6_dev_nd_parms_get_rcu(const struct net_device *dev)
394{
395 struct inet6_dev *idev = __in6_dev_get(dev);
396
397 return idev ? idev->nd_parms : NULL;
398}
399
400void in6_dev_finish_destroy(struct inet6_dev *idev);
401
402static inline void in6_dev_put(struct inet6_dev *idev)
403{
404 if (refcount_dec_and_test(&idev->refcnt))
405 in6_dev_finish_destroy(idev);
406}
407
408static inline void in6_dev_put_clear(struct inet6_dev **pidev)
409{
410 struct inet6_dev *idev = *pidev;
411
412 if (idev) {
413 in6_dev_put(idev);
414 *pidev = NULL;
415 }
416}
417
418static inline void __in6_dev_put(struct inet6_dev *idev)
419{
420 refcount_dec(&idev->refcnt);
421}
422
423static inline void in6_dev_hold(struct inet6_dev *idev)
424{
425 refcount_inc(&idev->refcnt);
426}
427
428void inet6_ifa_finish_destroy(struct inet6_ifaddr *ifp);
429
430static inline void in6_ifa_put(struct inet6_ifaddr *ifp)
431{
432 if (refcount_dec_and_test(&ifp->refcnt))
433 inet6_ifa_finish_destroy(ifp);
434}
435
436static inline void __in6_ifa_put(struct inet6_ifaddr *ifp)
437{
438 refcount_dec(&ifp->refcnt);
439}
440
441static inline void in6_ifa_hold(struct inet6_ifaddr *ifp)
442{
443 refcount_inc(&ifp->refcnt);
444}
445
446
447/*
448 * compute link-local solicited-node multicast address
449 */
450
451static inline void addrconf_addr_solict_mult(const struct in6_addr *addr,
452 struct in6_addr *solicited)
453{
454 ipv6_addr_set(solicited,
455 htonl(0xFF020000), 0,
456 htonl(0x1),
457 htonl(0xFF000000) | addr->s6_addr32[3]);
458}
459
460static inline bool ipv6_addr_is_ll_all_nodes(const struct in6_addr *addr)
461{
462#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
463 __be64 *p = (__be64 *)addr;
464 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(1))) == 0UL;
465#else
466 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
467 addr->s6_addr32[1] | addr->s6_addr32[2] |
468 (addr->s6_addr32[3] ^ htonl(0x00000001))) == 0;
469#endif
470}
471
472static inline bool ipv6_addr_is_ll_all_routers(const struct in6_addr *addr)
473{
474#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
475 __be64 *p = (__be64 *)addr;
476 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) | (p[1] ^ cpu_to_be64(2))) == 0UL;
477#else
478 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
479 addr->s6_addr32[1] | addr->s6_addr32[2] |
480 (addr->s6_addr32[3] ^ htonl(0x00000002))) == 0;
481#endif
482}
483
484static inline bool ipv6_addr_is_isatap(const struct in6_addr *addr)
485{
486 return (addr->s6_addr32[2] | htonl(0x02000000)) == htonl(0x02005EFE);
487}
488
489static inline bool ipv6_addr_is_solict_mult(const struct in6_addr *addr)
490{
491#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
492 __be64 *p = (__be64 *)addr;
493 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) |
494 ((p[1] ^ cpu_to_be64(0x00000001ff000000UL)) &
495 cpu_to_be64(0xffffffffff000000UL))) == 0UL;
496#else
497 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
498 addr->s6_addr32[1] |
499 (addr->s6_addr32[2] ^ htonl(0x00000001)) |
500 (addr->s6_addr[12] ^ 0xff)) == 0;
501#endif
502}
503
504static inline bool ipv6_addr_is_all_snoopers(const struct in6_addr *addr)
505{
506#if defined(CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS) && BITS_PER_LONG == 64
507 __be64 *p = (__be64 *)addr;
508
509 return ((p[0] ^ cpu_to_be64(0xff02000000000000UL)) |
510 (p[1] ^ cpu_to_be64(0x6a))) == 0UL;
511#else
512 return ((addr->s6_addr32[0] ^ htonl(0xff020000)) |
513 addr->s6_addr32[1] | addr->s6_addr32[2] |
514 (addr->s6_addr32[3] ^ htonl(0x0000006a))) == 0;
515#endif
516}
517
518#ifdef CONFIG_PROC_FS
519int if6_proc_init(void);
520void if6_proc_exit(void);
521#endif
522
523#endif
524