2 * Bridge multicast support.
4 * Copyright (c) 2010 Herbert Xu <herbert@gondor.apana.org.au>
6 * This program is free software; you can redistribute it and/or modify it
7 * under the terms of the GNU General Public License as published by the Free
8 * Software Foundation; either version 2 of the License, or (at your option)
13 #include <linux/err.h>
14 #include <linux/if_ether.h>
15 #include <linux/igmp.h>
16 #include <linux/jhash.h>
17 #include <linux/kernel.h>
18 #include <linux/log2.h>
19 #include <linux/netdevice.h>
20 #include <linux/netfilter_bridge.h>
21 #include <linux/random.h>
22 #include <linux/rculist.h>
23 #include <linux/skbuff.h>
24 #include <linux/slab.h>
25 #include <linux/timer.h>
27 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
30 #include <net/addrconf.h>
33 #include "br_private.h"
35 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
36 static inline int ipv6_is_local_multicast(const struct in6_addr *addr)
38 if (ipv6_addr_is_multicast(addr) &&
39 IPV6_ADDR_MC_SCOPE(addr) <= IPV6_ADDR_SCOPE_LINKLOCAL)
45 static inline int br_ip_equal(const struct br_ip *a, const struct br_ip *b)
47 if (a->proto != b->proto)
51 return a->u.ip4 == b->u.ip4;
52 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
53 case htons(ETH_P_IPV6):
54 return ipv6_addr_equal(&a->u.ip6, &b->u.ip6);
60 static inline int __br_ip4_hash(struct net_bridge_mdb_htable *mdb, __be32 ip)
62 return jhash_1word(mdb->secret, (__force u32)ip) & (mdb->max - 1);
65 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
66 static inline int __br_ip6_hash(struct net_bridge_mdb_htable *mdb,
67 const struct in6_addr *ip)
69 return jhash2((__force u32 *)ip->s6_addr32, 4, mdb->secret) & (mdb->max - 1);
73 static inline int br_ip_hash(struct net_bridge_mdb_htable *mdb,
78 return __br_ip4_hash(mdb, ip->u.ip4);
79 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
80 case htons(ETH_P_IPV6):
81 return __br_ip6_hash(mdb, &ip->u.ip6);
87 static struct net_bridge_mdb_entry *__br_mdb_ip_get(
88 struct net_bridge_mdb_htable *mdb, struct br_ip *dst, int hash)
90 struct net_bridge_mdb_entry *mp;
93 hlist_for_each_entry_rcu(mp, p, &mdb->mhash[hash], hlist[mdb->ver]) {
94 if (br_ip_equal(&mp->addr, dst))
101 static struct net_bridge_mdb_entry *br_mdb_ip4_get(
102 struct net_bridge_mdb_htable *mdb, __be32 dst)
107 br_dst.proto = htons(ETH_P_IP);
109 return __br_mdb_ip_get(mdb, &br_dst, __br_ip4_hash(mdb, dst));
112 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
113 static struct net_bridge_mdb_entry *br_mdb_ip6_get(
114 struct net_bridge_mdb_htable *mdb, const struct in6_addr *dst)
118 ipv6_addr_copy(&br_dst.u.ip6, dst);
119 br_dst.proto = htons(ETH_P_IPV6);
121 return __br_mdb_ip_get(mdb, &br_dst, __br_ip6_hash(mdb, dst));
125 static struct net_bridge_mdb_entry *br_mdb_ip_get(
126 struct net_bridge_mdb_htable *mdb, struct br_ip *dst)
128 return __br_mdb_ip_get(mdb, dst, br_ip_hash(mdb, dst));
131 struct net_bridge_mdb_entry *br_mdb_get(struct net_bridge *br,
134 struct net_bridge_mdb_htable *mdb = br->mdb;
137 if (!mdb || br->multicast_disabled)
140 if (BR_INPUT_SKB_CB(skb)->igmp)
143 ip.proto = skb->protocol;
145 switch (skb->protocol) {
146 case htons(ETH_P_IP):
147 ip.u.ip4 = ip_hdr(skb)->daddr;
149 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
150 case htons(ETH_P_IPV6):
151 ipv6_addr_copy(&ip.u.ip6, &ipv6_hdr(skb)->daddr);
158 return br_mdb_ip_get(mdb, &ip);
161 static void br_mdb_free(struct rcu_head *head)
163 struct net_bridge_mdb_htable *mdb =
164 container_of(head, struct net_bridge_mdb_htable, rcu);
165 struct net_bridge_mdb_htable *old = mdb->old;
172 static int br_mdb_copy(struct net_bridge_mdb_htable *new,
173 struct net_bridge_mdb_htable *old,
176 struct net_bridge_mdb_entry *mp;
177 struct hlist_node *p;
182 for (i = 0; i < old->max; i++)
183 hlist_for_each_entry(mp, p, &old->mhash[i], hlist[old->ver])
184 hlist_add_head(&mp->hlist[new->ver],
185 &new->mhash[br_ip_hash(new, &mp->addr)]);
191 for (i = 0; i < new->max; i++) {
193 hlist_for_each_entry(mp, p, &new->mhash[i], hlist[new->ver])
199 return maxlen > elasticity ? -EINVAL : 0;
202 static void br_multicast_free_pg(struct rcu_head *head)
204 struct net_bridge_port_group *p =
205 container_of(head, struct net_bridge_port_group, rcu);
210 static void br_multicast_free_group(struct rcu_head *head)
212 struct net_bridge_mdb_entry *mp =
213 container_of(head, struct net_bridge_mdb_entry, rcu);
218 static void br_multicast_group_expired(unsigned long data)
220 struct net_bridge_mdb_entry *mp = (void *)data;
221 struct net_bridge *br = mp->br;
222 struct net_bridge_mdb_htable *mdb;
224 spin_lock(&br->multicast_lock);
225 if (!netif_running(br->dev) || timer_pending(&mp->timer))
228 if (!hlist_unhashed(&mp->mglist))
229 hlist_del_init(&mp->mglist);
235 hlist_del_rcu(&mp->hlist[mdb->ver]);
238 del_timer(&mp->query_timer);
239 call_rcu_bh(&mp->rcu, br_multicast_free_group);
242 spin_unlock(&br->multicast_lock);
245 static void br_multicast_del_pg(struct net_bridge *br,
246 struct net_bridge_port_group *pg)
248 struct net_bridge_mdb_htable *mdb = br->mdb;
249 struct net_bridge_mdb_entry *mp;
250 struct net_bridge_port_group *p;
251 struct net_bridge_port_group **pp;
253 mp = br_mdb_ip_get(mdb, &pg->addr);
257 for (pp = &mp->ports; (p = *pp); pp = &p->next) {
262 hlist_del_init(&p->mglist);
263 del_timer(&p->timer);
264 del_timer(&p->query_timer);
265 call_rcu_bh(&p->rcu, br_multicast_free_pg);
267 if (!mp->ports && hlist_unhashed(&mp->mglist) &&
268 netif_running(br->dev))
269 mod_timer(&mp->timer, jiffies);
277 static void br_multicast_port_group_expired(unsigned long data)
279 struct net_bridge_port_group *pg = (void *)data;
280 struct net_bridge *br = pg->port->br;
282 spin_lock(&br->multicast_lock);
283 if (!netif_running(br->dev) || timer_pending(&pg->timer) ||
284 hlist_unhashed(&pg->mglist))
287 br_multicast_del_pg(br, pg);
290 spin_unlock(&br->multicast_lock);
293 static int br_mdb_rehash(struct net_bridge_mdb_htable **mdbp, int max,
296 struct net_bridge_mdb_htable *old = *mdbp;
297 struct net_bridge_mdb_htable *mdb;
300 mdb = kmalloc(sizeof(*mdb), GFP_ATOMIC);
307 mdb->mhash = kzalloc(max * sizeof(*mdb->mhash), GFP_ATOMIC);
313 mdb->size = old ? old->size : 0;
314 mdb->ver = old ? old->ver ^ 1 : 0;
316 if (!old || elasticity)
317 get_random_bytes(&mdb->secret, sizeof(mdb->secret));
319 mdb->secret = old->secret;
324 err = br_mdb_copy(mdb, old, elasticity);
331 call_rcu_bh(&mdb->rcu, br_mdb_free);
334 rcu_assign_pointer(*mdbp, mdb);
339 static struct sk_buff *br_ip4_multicast_alloc_query(struct net_bridge *br,
347 skb = netdev_alloc_skb_ip_align(br->dev, sizeof(*eth) + sizeof(*iph) +
352 skb->protocol = htons(ETH_P_IP);
354 skb_reset_mac_header(skb);
357 memcpy(eth->h_source, br->dev->dev_addr, 6);
360 eth->h_dest[2] = 0x5e;
364 eth->h_proto = htons(ETH_P_IP);
365 skb_put(skb, sizeof(*eth));
367 skb_set_network_header(skb, skb->len);
373 iph->tot_len = htons(sizeof(*iph) + sizeof(*ih) + 4);
375 iph->frag_off = htons(IP_DF);
377 iph->protocol = IPPROTO_IGMP;
379 iph->daddr = htonl(INADDR_ALLHOSTS_GROUP);
380 ((u8 *)&iph[1])[0] = IPOPT_RA;
381 ((u8 *)&iph[1])[1] = 4;
382 ((u8 *)&iph[1])[2] = 0;
383 ((u8 *)&iph[1])[3] = 0;
387 skb_set_transport_header(skb, skb->len);
389 ih->type = IGMP_HOST_MEMBERSHIP_QUERY;
390 ih->code = (group ? br->multicast_last_member_interval :
391 br->multicast_query_response_interval) /
392 (HZ / IGMP_TIMER_SCALE);
395 ih->csum = ip_compute_csum((void *)ih, sizeof(struct igmphdr));
396 skb_put(skb, sizeof(*ih));
398 __skb_pull(skb, sizeof(*eth));
404 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
405 static struct sk_buff *br_ip6_multicast_alloc_query(struct net_bridge *br,
406 struct in6_addr *group)
409 struct ipv6hdr *ip6h;
410 struct mld_msg *mldq;
413 unsigned long interval;
415 skb = netdev_alloc_skb_ip_align(br->dev, sizeof(*eth) + sizeof(*ip6h) +
420 skb->protocol = htons(ETH_P_IPV6);
422 /* Ethernet header */
423 skb_reset_mac_header(skb);
426 memcpy(eth->h_source, br->dev->dev_addr, 6);
427 ipv6_eth_mc_map(group, eth->h_dest);
428 eth->h_proto = htons(ETH_P_IPV6);
429 skb_put(skb, sizeof(*eth));
431 /* IPv6 header + HbH option */
432 skb_set_network_header(skb, skb->len);
433 ip6h = ipv6_hdr(skb);
435 *(__force __be32 *)ip6h = htonl(0x60000000);
436 ip6h->payload_len = 8 + sizeof(*mldq);
437 ip6h->nexthdr = IPPROTO_HOPOPTS;
439 ipv6_addr_set(&ip6h->saddr, 0, 0, 0, 0);
440 ipv6_addr_set(&ip6h->daddr, htonl(0xff020000), 0, 0, htonl(1));
442 hopopt = (u8 *)(ip6h + 1);
443 hopopt[0] = IPPROTO_ICMPV6; /* next hdr */
444 hopopt[1] = 0; /* length of HbH */
445 hopopt[2] = IPV6_TLV_ROUTERALERT; /* Router Alert */
446 hopopt[3] = 2; /* Length of RA Option */
447 hopopt[4] = 0; /* Type = 0x0000 (MLD) */
449 hopopt[6] = IPV6_TLV_PAD0; /* Pad0 */
450 hopopt[7] = IPV6_TLV_PAD0; /* Pad0 */
452 skb_put(skb, sizeof(*ip6h) + 8);
455 skb_set_transport_header(skb, skb->len);
456 mldq = (struct mld_msg *) icmp6_hdr(skb);
458 interval = ipv6_addr_any(group) ? br->multicast_last_member_interval :
459 br->multicast_query_response_interval;
461 mldq->mld_type = ICMPV6_MGM_QUERY;
464 mldq->mld_maxdelay = htons((u16)jiffies_to_msecs(interval));
465 mldq->mld_reserved = 0;
466 ipv6_addr_copy(&mldq->mld_mca, group);
469 mldq->mld_cksum = csum_ipv6_magic(&ip6h->saddr, &ip6h->daddr,
470 sizeof(*mldq), IPPROTO_ICMPV6,
473 skb_put(skb, sizeof(*mldq));
475 __skb_pull(skb, sizeof(*eth));
482 static struct sk_buff *br_multicast_alloc_query(struct net_bridge *br,
485 switch (addr->proto) {
486 case htons(ETH_P_IP):
487 return br_ip4_multicast_alloc_query(br, addr->u.ip4);
488 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
489 case htons(ETH_P_IPV6):
490 return br_ip6_multicast_alloc_query(br, &addr->u.ip6);
496 static void br_multicast_send_group_query(struct net_bridge_mdb_entry *mp)
498 struct net_bridge *br = mp->br;
501 skb = br_multicast_alloc_query(br, &mp->addr);
508 if (++mp->queries_sent < br->multicast_last_member_count)
509 mod_timer(&mp->query_timer,
510 jiffies + br->multicast_last_member_interval);
513 static void br_multicast_group_query_expired(unsigned long data)
515 struct net_bridge_mdb_entry *mp = (void *)data;
516 struct net_bridge *br = mp->br;
518 spin_lock(&br->multicast_lock);
519 if (!netif_running(br->dev) || hlist_unhashed(&mp->mglist) ||
520 mp->queries_sent >= br->multicast_last_member_count)
523 br_multicast_send_group_query(mp);
526 spin_unlock(&br->multicast_lock);
529 static void br_multicast_send_port_group_query(struct net_bridge_port_group *pg)
531 struct net_bridge_port *port = pg->port;
532 struct net_bridge *br = port->br;
535 skb = br_multicast_alloc_query(br, &pg->addr);
539 br_deliver(port, skb);
542 if (++pg->queries_sent < br->multicast_last_member_count)
543 mod_timer(&pg->query_timer,
544 jiffies + br->multicast_last_member_interval);
547 static void br_multicast_port_group_query_expired(unsigned long data)
549 struct net_bridge_port_group *pg = (void *)data;
550 struct net_bridge_port *port = pg->port;
551 struct net_bridge *br = port->br;
553 spin_lock(&br->multicast_lock);
554 if (!netif_running(br->dev) || hlist_unhashed(&pg->mglist) ||
555 pg->queries_sent >= br->multicast_last_member_count)
558 br_multicast_send_port_group_query(pg);
561 spin_unlock(&br->multicast_lock);
564 static struct net_bridge_mdb_entry *br_multicast_get_group(
565 struct net_bridge *br, struct net_bridge_port *port,
566 struct br_ip *group, int hash)
568 struct net_bridge_mdb_htable *mdb = br->mdb;
569 struct net_bridge_mdb_entry *mp;
570 struct hlist_node *p;
576 hlist_for_each_entry(mp, p, &mdb->mhash[hash], hlist[mdb->ver]) {
578 if (unlikely(br_ip_equal(group, &mp->addr)))
585 if (unlikely(count > br->hash_elasticity && count)) {
587 printk(KERN_INFO "%s: Multicast hash table "
588 "chain limit reached: %s\n",
589 br->dev->name, port ? port->dev->name :
592 elasticity = br->hash_elasticity;
595 if (mdb->size >= max) {
597 if (unlikely(max >= br->hash_max)) {
598 printk(KERN_WARNING "%s: Multicast hash table maximum "
599 "reached, disabling snooping: %s, %d\n",
600 br->dev->name, port ? port->dev->name :
605 br->multicast_disabled = 1;
610 if (max > mdb->max || elasticity) {
613 printk(KERN_INFO "%s: Multicast hash table "
615 br->dev->name, port ? port->dev->name :
621 err = br_mdb_rehash(&br->mdb, max, elasticity);
623 printk(KERN_WARNING "%s: Cannot rehash multicast "
624 "hash table, disabling snooping: "
626 br->dev->name, port ? port->dev->name :
643 static struct net_bridge_mdb_entry *br_multicast_new_group(
644 struct net_bridge *br, struct net_bridge_port *port,
647 struct net_bridge_mdb_htable *mdb = br->mdb;
648 struct net_bridge_mdb_entry *mp;
652 if (br_mdb_rehash(&br->mdb, BR_HASH_SIZE, 0))
657 hash = br_ip_hash(mdb, group);
658 mp = br_multicast_get_group(br, port, group, hash);
659 switch (PTR_ERR(mp)) {
666 hash = br_ip_hash(mdb, group);
673 mp = kzalloc(sizeof(*mp), GFP_ATOMIC);
679 setup_timer(&mp->timer, br_multicast_group_expired,
681 setup_timer(&mp->query_timer, br_multicast_group_query_expired,
684 hlist_add_head_rcu(&mp->hlist[mdb->ver], &mdb->mhash[hash]);
691 static int br_multicast_add_group(struct net_bridge *br,
692 struct net_bridge_port *port,
695 struct net_bridge_mdb_entry *mp;
696 struct net_bridge_port_group *p;
697 struct net_bridge_port_group **pp;
698 unsigned long now = jiffies;
701 spin_lock(&br->multicast_lock);
702 if (!netif_running(br->dev) ||
703 (port && port->state == BR_STATE_DISABLED))
706 mp = br_multicast_new_group(br, port, group);
708 if (unlikely(IS_ERR(mp) || !mp))
712 hlist_add_head(&mp->mglist, &br->mglist);
713 mod_timer(&mp->timer, now + br->multicast_membership_interval);
717 for (pp = &mp->ports; (p = *pp); pp = &p->next) {
720 if ((unsigned long)p->port < (unsigned long)port)
724 p = kzalloc(sizeof(*p), GFP_ATOMIC);
732 hlist_add_head(&p->mglist, &port->mglist);
733 setup_timer(&p->timer, br_multicast_port_group_expired,
735 setup_timer(&p->query_timer, br_multicast_port_group_query_expired,
738 rcu_assign_pointer(*pp, p);
741 mod_timer(&p->timer, now + br->multicast_membership_interval);
746 spin_unlock(&br->multicast_lock);
750 static int br_ip4_multicast_add_group(struct net_bridge *br,
751 struct net_bridge_port *port,
754 struct br_ip br_group;
756 if (ipv4_is_local_multicast(group))
759 br_group.u.ip4 = group;
760 br_group.proto = htons(ETH_P_IP);
762 return br_multicast_add_group(br, port, &br_group);
765 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
766 static int br_ip6_multicast_add_group(struct net_bridge *br,
767 struct net_bridge_port *port,
768 const struct in6_addr *group)
770 struct br_ip br_group;
772 if (ipv6_is_local_multicast(group))
775 ipv6_addr_copy(&br_group.u.ip6, group);
776 br_group.proto = htons(ETH_P_IP);
778 return br_multicast_add_group(br, port, &br_group);
782 static void br_multicast_router_expired(unsigned long data)
784 struct net_bridge_port *port = (void *)data;
785 struct net_bridge *br = port->br;
787 spin_lock(&br->multicast_lock);
788 if (port->multicast_router != 1 ||
789 timer_pending(&port->multicast_router_timer) ||
790 hlist_unhashed(&port->rlist))
793 hlist_del_init_rcu(&port->rlist);
796 spin_unlock(&br->multicast_lock);
799 static void br_multicast_local_router_expired(unsigned long data)
803 static void __br_multicast_send_query(struct net_bridge *br,
804 struct net_bridge_port *port,
809 skb = br_multicast_alloc_query(br, ip);
814 __skb_push(skb, sizeof(struct ethhdr));
815 skb->dev = port->dev;
816 NF_HOOK(PF_BRIDGE, NF_BR_LOCAL_OUT, skb, NULL, skb->dev,
822 static void br_multicast_send_query(struct net_bridge *br,
823 struct net_bridge_port *port, u32 sent)
826 struct br_ip br_group;
828 if (!netif_running(br->dev) || br->multicast_disabled ||
829 timer_pending(&br->multicast_querier_timer))
832 memset(&br_group.u, 0, sizeof(br_group.u));
834 br_group.proto = htons(ETH_P_IP);
835 __br_multicast_send_query(br, port, &br_group);
837 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
838 br_group.proto = htons(ETH_P_IPV6);
839 __br_multicast_send_query(br, port, &br_group);
843 time += sent < br->multicast_startup_query_count ?
844 br->multicast_startup_query_interval :
845 br->multicast_query_interval;
846 mod_timer(port ? &port->multicast_query_timer :
847 &br->multicast_query_timer, time);
850 static void br_multicast_port_query_expired(unsigned long data)
852 struct net_bridge_port *port = (void *)data;
853 struct net_bridge *br = port->br;
855 spin_lock(&br->multicast_lock);
856 if (port->state == BR_STATE_DISABLED ||
857 port->state == BR_STATE_BLOCKING)
860 if (port->multicast_startup_queries_sent <
861 br->multicast_startup_query_count)
862 port->multicast_startup_queries_sent++;
864 br_multicast_send_query(port->br, port,
865 port->multicast_startup_queries_sent);
868 spin_unlock(&br->multicast_lock);
871 void br_multicast_add_port(struct net_bridge_port *port)
873 port->multicast_router = 1;
875 setup_timer(&port->multicast_router_timer, br_multicast_router_expired,
876 (unsigned long)port);
877 setup_timer(&port->multicast_query_timer,
878 br_multicast_port_query_expired, (unsigned long)port);
881 void br_multicast_del_port(struct net_bridge_port *port)
883 del_timer_sync(&port->multicast_router_timer);
886 static void __br_multicast_enable_port(struct net_bridge_port *port)
888 port->multicast_startup_queries_sent = 0;
890 if (try_to_del_timer_sync(&port->multicast_query_timer) >= 0 ||
891 del_timer(&port->multicast_query_timer))
892 mod_timer(&port->multicast_query_timer, jiffies);
895 void br_multicast_enable_port(struct net_bridge_port *port)
897 struct net_bridge *br = port->br;
899 spin_lock(&br->multicast_lock);
900 if (br->multicast_disabled || !netif_running(br->dev))
903 __br_multicast_enable_port(port);
906 spin_unlock(&br->multicast_lock);
909 void br_multicast_disable_port(struct net_bridge_port *port)
911 struct net_bridge *br = port->br;
912 struct net_bridge_port_group *pg;
913 struct hlist_node *p, *n;
915 spin_lock(&br->multicast_lock);
916 hlist_for_each_entry_safe(pg, p, n, &port->mglist, mglist)
917 br_multicast_del_pg(br, pg);
919 if (!hlist_unhashed(&port->rlist))
920 hlist_del_init_rcu(&port->rlist);
921 del_timer(&port->multicast_router_timer);
922 del_timer(&port->multicast_query_timer);
923 spin_unlock(&br->multicast_lock);
926 static int br_ip4_multicast_igmp3_report(struct net_bridge *br,
927 struct net_bridge_port *port,
930 struct igmpv3_report *ih;
931 struct igmpv3_grec *grec;
939 if (!pskb_may_pull(skb, sizeof(*ih)))
942 ih = igmpv3_report_hdr(skb);
943 num = ntohs(ih->ngrec);
946 for (i = 0; i < num; i++) {
947 len += sizeof(*grec);
948 if (!pskb_may_pull(skb, len))
951 grec = (void *)(skb->data + len - sizeof(*grec));
952 group = grec->grec_mca;
953 type = grec->grec_type;
955 len += ntohs(grec->grec_nsrcs) * 4;
956 if (!pskb_may_pull(skb, len))
959 /* We treat this as an IGMPv2 report for now. */
961 case IGMPV3_MODE_IS_INCLUDE:
962 case IGMPV3_MODE_IS_EXCLUDE:
963 case IGMPV3_CHANGE_TO_INCLUDE:
964 case IGMPV3_CHANGE_TO_EXCLUDE:
965 case IGMPV3_ALLOW_NEW_SOURCES:
966 case IGMPV3_BLOCK_OLD_SOURCES:
973 err = br_ip4_multicast_add_group(br, port, group);
981 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
982 static int br_ip6_multicast_mld2_report(struct net_bridge *br,
983 struct net_bridge_port *port,
986 struct icmp6hdr *icmp6h;
987 struct mld2_grec *grec;
993 if (!pskb_may_pull(skb, sizeof(*icmp6h)))
996 icmp6h = icmp6_hdr(skb);
997 num = ntohs(icmp6h->icmp6_dataun.un_data16[1]);
998 len = sizeof(*icmp6h);
1000 for (i = 0; i < num; i++) {
1001 __be16 *nsrcs, _nsrcs;
1003 nsrcs = skb_header_pointer(skb,
1004 len + offsetof(struct mld2_grec,
1006 sizeof(_nsrcs), &_nsrcs);
1010 if (!pskb_may_pull(skb,
1011 len + sizeof(*grec) +
1012 sizeof(struct in6_addr) * (*nsrcs)))
1015 grec = (struct mld2_grec *)(skb->data + len);
1016 len += sizeof(*grec) + sizeof(struct in6_addr) * (*nsrcs);
1018 /* We treat these as MLDv1 reports for now. */
1019 switch (grec->grec_type) {
1020 case MLD2_MODE_IS_INCLUDE:
1021 case MLD2_MODE_IS_EXCLUDE:
1022 case MLD2_CHANGE_TO_INCLUDE:
1023 case MLD2_CHANGE_TO_EXCLUDE:
1024 case MLD2_ALLOW_NEW_SOURCES:
1025 case MLD2_BLOCK_OLD_SOURCES:
1032 err = br_ip6_multicast_add_group(br, port, &grec->grec_mca);
1041 static void br_multicast_add_router(struct net_bridge *br,
1042 struct net_bridge_port *port)
1044 struct hlist_node *p;
1045 struct hlist_node **h;
1047 for (h = &br->router_list.first;
1049 (unsigned long)container_of(p, struct net_bridge_port, rlist) >
1050 (unsigned long)port;
1054 port->rlist.pprev = h;
1055 port->rlist.next = p;
1056 rcu_assign_pointer(*h, &port->rlist);
1058 p->pprev = &port->rlist.next;
1061 static void br_multicast_mark_router(struct net_bridge *br,
1062 struct net_bridge_port *port)
1064 unsigned long now = jiffies;
1067 if (br->multicast_router == 1)
1068 mod_timer(&br->multicast_router_timer,
1069 now + br->multicast_querier_interval);
1073 if (port->multicast_router != 1)
1076 if (!hlist_unhashed(&port->rlist))
1079 br_multicast_add_router(br, port);
1082 mod_timer(&port->multicast_router_timer,
1083 now + br->multicast_querier_interval);
1086 static void br_multicast_query_received(struct net_bridge *br,
1087 struct net_bridge_port *port,
1091 mod_timer(&br->multicast_querier_timer,
1092 jiffies + br->multicast_querier_interval);
1093 else if (timer_pending(&br->multicast_querier_timer))
1096 br_multicast_mark_router(br, port);
1099 static int br_ip4_multicast_query(struct net_bridge *br,
1100 struct net_bridge_port *port,
1101 struct sk_buff *skb)
1103 struct iphdr *iph = ip_hdr(skb);
1104 struct igmphdr *ih = igmp_hdr(skb);
1105 struct net_bridge_mdb_entry *mp;
1106 struct igmpv3_query *ih3;
1107 struct net_bridge_port_group *p;
1108 struct net_bridge_port_group **pp;
1109 unsigned long max_delay;
1110 unsigned long now = jiffies;
1114 spin_lock(&br->multicast_lock);
1115 if (!netif_running(br->dev) ||
1116 (port && port->state == BR_STATE_DISABLED))
1119 br_multicast_query_received(br, port, !!iph->saddr);
1123 if (skb->len == sizeof(*ih)) {
1124 max_delay = ih->code * (HZ / IGMP_TIMER_SCALE);
1127 max_delay = 10 * HZ;
1131 if (!pskb_may_pull(skb, sizeof(struct igmpv3_query))) {
1136 ih3 = igmpv3_query_hdr(skb);
1140 max_delay = ih3->code ?
1141 IGMPV3_MRC(ih3->code) * (HZ / IGMP_TIMER_SCALE) : 1;
1147 mp = br_mdb_ip4_get(br->mdb, group);
1151 max_delay *= br->multicast_last_member_count;
1153 if (!hlist_unhashed(&mp->mglist) &&
1154 (timer_pending(&mp->timer) ?
1155 time_after(mp->timer.expires, now + max_delay) :
1156 try_to_del_timer_sync(&mp->timer) >= 0))
1157 mod_timer(&mp->timer, now + max_delay);
1159 for (pp = &mp->ports; (p = *pp); pp = &p->next) {
1160 if (timer_pending(&p->timer) ?
1161 time_after(p->timer.expires, now + max_delay) :
1162 try_to_del_timer_sync(&p->timer) >= 0)
1163 mod_timer(&mp->timer, now + max_delay);
1167 spin_unlock(&br->multicast_lock);
1171 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
1172 static int br_ip6_multicast_query(struct net_bridge *br,
1173 struct net_bridge_port *port,
1174 struct sk_buff *skb)
1176 struct ipv6hdr *ip6h = ipv6_hdr(skb);
1177 struct mld_msg *mld = (struct mld_msg *) icmp6_hdr(skb);
1178 struct net_bridge_mdb_entry *mp;
1179 struct mld2_query *mld2q;
1180 struct net_bridge_port_group *p, **pp;
1181 unsigned long max_delay;
1182 unsigned long now = jiffies;
1183 struct in6_addr *group = NULL;
1186 spin_lock(&br->multicast_lock);
1187 if (!netif_running(br->dev) ||
1188 (port && port->state == BR_STATE_DISABLED))
1191 br_multicast_query_received(br, port, !ipv6_addr_any(&ip6h->saddr));
1193 if (skb->len == sizeof(*mld)) {
1194 if (!pskb_may_pull(skb, sizeof(*mld))) {
1198 mld = (struct mld_msg *) icmp6_hdr(skb);
1199 max_delay = msecs_to_jiffies(htons(mld->mld_maxdelay));
1201 group = &mld->mld_mca;
1202 } else if (skb->len >= sizeof(*mld2q)) {
1203 if (!pskb_may_pull(skb, sizeof(*mld2q))) {
1207 mld2q = (struct mld2_query *)icmp6_hdr(skb);
1208 if (!mld2q->mld2q_nsrcs)
1209 group = &mld2q->mld2q_mca;
1210 max_delay = mld2q->mld2q_mrc ? MLDV2_MRC(mld2q->mld2q_mrc) : 1;
1216 mp = br_mdb_ip6_get(br->mdb, group);
1220 max_delay *= br->multicast_last_member_count;
1221 if (!hlist_unhashed(&mp->mglist) &&
1222 (timer_pending(&mp->timer) ?
1223 time_after(mp->timer.expires, now + max_delay) :
1224 try_to_del_timer_sync(&mp->timer) >= 0))
1225 mod_timer(&mp->timer, now + max_delay);
1227 for (pp = &mp->ports; (p = *pp); pp = &p->next) {
1228 if (timer_pending(&p->timer) ?
1229 time_after(p->timer.expires, now + max_delay) :
1230 try_to_del_timer_sync(&p->timer) >= 0)
1231 mod_timer(&mp->timer, now + max_delay);
1235 spin_unlock(&br->multicast_lock);
1240 static void br_multicast_leave_group(struct net_bridge *br,
1241 struct net_bridge_port *port,
1242 struct br_ip *group)
1244 struct net_bridge_mdb_htable *mdb;
1245 struct net_bridge_mdb_entry *mp;
1246 struct net_bridge_port_group *p;
1250 spin_lock(&br->multicast_lock);
1251 if (!netif_running(br->dev) ||
1252 (port && port->state == BR_STATE_DISABLED) ||
1253 timer_pending(&br->multicast_querier_timer))
1257 mp = br_mdb_ip_get(mdb, group);
1262 time = now + br->multicast_last_member_count *
1263 br->multicast_last_member_interval;
1266 if (!hlist_unhashed(&mp->mglist) &&
1267 (timer_pending(&mp->timer) ?
1268 time_after(mp->timer.expires, time) :
1269 try_to_del_timer_sync(&mp->timer) >= 0)) {
1270 mod_timer(&mp->timer, time);
1272 mp->queries_sent = 0;
1273 mod_timer(&mp->query_timer, now);
1279 for (p = mp->ports; p; p = p->next) {
1280 if (p->port != port)
1283 if (!hlist_unhashed(&p->mglist) &&
1284 (timer_pending(&p->timer) ?
1285 time_after(p->timer.expires, time) :
1286 try_to_del_timer_sync(&p->timer) >= 0)) {
1287 mod_timer(&p->timer, time);
1289 p->queries_sent = 0;
1290 mod_timer(&p->query_timer, now);
1297 spin_unlock(&br->multicast_lock);
1300 static void br_ip4_multicast_leave_group(struct net_bridge *br,
1301 struct net_bridge_port *port,
1304 struct br_ip br_group;
1306 if (ipv4_is_local_multicast(group))
1309 br_group.u.ip4 = group;
1310 br_group.proto = htons(ETH_P_IP);
1312 br_multicast_leave_group(br, port, &br_group);
1315 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
1316 static void br_ip6_multicast_leave_group(struct net_bridge *br,
1317 struct net_bridge_port *port,
1318 const struct in6_addr *group)
1320 struct br_ip br_group;
1322 if (ipv6_is_local_multicast(group))
1325 ipv6_addr_copy(&br_group.u.ip6, group);
1326 br_group.proto = htons(ETH_P_IPV6);
1328 br_multicast_leave_group(br, port, &br_group);
1332 static int br_multicast_ipv4_rcv(struct net_bridge *br,
1333 struct net_bridge_port *port,
1334 struct sk_buff *skb)
1336 struct sk_buff *skb2 = skb;
1343 /* We treat OOM as packet loss for now. */
1344 if (!pskb_may_pull(skb, sizeof(*iph)))
1349 if (iph->ihl < 5 || iph->version != 4)
1352 if (!pskb_may_pull(skb, ip_hdrlen(skb)))
1357 if (unlikely(ip_fast_csum((u8 *)iph, iph->ihl)))
1360 if (iph->protocol != IPPROTO_IGMP)
1363 len = ntohs(iph->tot_len);
1364 if (skb->len < len || len < ip_hdrlen(skb))
1367 if (skb->len > len) {
1368 skb2 = skb_clone(skb, GFP_ATOMIC);
1372 err = pskb_trim_rcsum(skb2, len);
1377 len -= ip_hdrlen(skb2);
1378 offset = skb_network_offset(skb2) + ip_hdrlen(skb2);
1379 __skb_pull(skb2, offset);
1380 skb_reset_transport_header(skb2);
1383 if (!pskb_may_pull(skb2, sizeof(*ih)))
1386 switch (skb2->ip_summed) {
1387 case CHECKSUM_COMPLETE:
1388 if (!csum_fold(skb2->csum))
1393 if (skb_checksum_complete(skb2))
1399 BR_INPUT_SKB_CB(skb)->igmp = 1;
1400 ih = igmp_hdr(skb2);
1403 case IGMP_HOST_MEMBERSHIP_REPORT:
1404 case IGMPV2_HOST_MEMBERSHIP_REPORT:
1405 BR_INPUT_SKB_CB(skb2)->mrouters_only = 1;
1406 err = br_ip4_multicast_add_group(br, port, ih->group);
1408 case IGMPV3_HOST_MEMBERSHIP_REPORT:
1409 err = br_ip4_multicast_igmp3_report(br, port, skb2);
1411 case IGMP_HOST_MEMBERSHIP_QUERY:
1412 err = br_ip4_multicast_query(br, port, skb2);
1414 case IGMP_HOST_LEAVE_MESSAGE:
1415 br_ip4_multicast_leave_group(br, port, ih->group);
1420 __skb_push(skb2, offset);
1427 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
1428 static int br_multicast_ipv6_rcv(struct net_bridge *br,
1429 struct net_bridge_port *port,
1430 struct sk_buff *skb)
1432 struct sk_buff *skb2 = skb;
1433 struct ipv6hdr *ip6h;
1434 struct icmp6hdr *icmp6h;
1440 if (!pskb_may_pull(skb, sizeof(*ip6h)))
1443 ip6h = ipv6_hdr(skb);
1446 * We're interested in MLD messages only.
1448 * - MLD has always Router Alert hop-by-hop option
1449 * - But we do not support jumbrograms.
1451 if (ip6h->version != 6 ||
1452 ip6h->nexthdr != IPPROTO_HOPOPTS ||
1453 ip6h->payload_len == 0)
1456 len = ntohs(ip6h->payload_len);
1460 nexthdr = ip6h->nexthdr;
1461 offset = ipv6_skip_exthdr(skb, sizeof(*ip6h), &nexthdr);
1463 if (offset < 0 || nexthdr != IPPROTO_ICMPV6)
1466 /* Okay, we found ICMPv6 header */
1467 skb2 = skb_clone(skb, GFP_ATOMIC);
1471 len -= offset - skb_network_offset(skb2);
1473 __skb_pull(skb2, offset);
1474 skb_reset_transport_header(skb2);
1477 if (!pskb_may_pull(skb2, sizeof(*icmp6h)))
1480 icmp6h = icmp6_hdr(skb2);
1482 switch (icmp6h->icmp6_type) {
1483 case ICMPV6_MGM_QUERY:
1484 case ICMPV6_MGM_REPORT:
1485 case ICMPV6_MGM_REDUCTION:
1486 case ICMPV6_MLD2_REPORT:
1493 /* Okay, we found MLD message. Check further. */
1494 if (skb2->len > len) {
1495 err = pskb_trim_rcsum(skb2, len);
1500 switch (skb2->ip_summed) {
1501 case CHECKSUM_COMPLETE:
1502 if (!csum_fold(skb2->csum))
1507 if (skb_checksum_complete(skb2))
1513 BR_INPUT_SKB_CB(skb)->igmp = 1;
1515 switch (icmp6h->icmp6_type) {
1516 case ICMPV6_MGM_REPORT:
1518 struct mld_msg *mld = (struct mld_msg *)icmp6h;
1519 BR_INPUT_SKB_CB(skb2)->mrouters_only = 1;
1520 err = br_ip6_multicast_add_group(br, port, &mld->mld_mca);
1523 case ICMPV6_MLD2_REPORT:
1524 err = br_ip6_multicast_mld2_report(br, port, skb2);
1526 case ICMPV6_MGM_QUERY:
1527 err = br_ip6_multicast_query(br, port, skb2);
1529 case ICMPV6_MGM_REDUCTION:
1531 struct mld_msg *mld = (struct mld_msg *)icmp6h;
1532 br_ip6_multicast_leave_group(br, port, &mld->mld_mca);
1537 __skb_push(skb2, offset);
1544 int br_multicast_rcv(struct net_bridge *br, struct net_bridge_port *port,
1545 struct sk_buff *skb)
1547 BR_INPUT_SKB_CB(skb)->igmp = 0;
1548 BR_INPUT_SKB_CB(skb)->mrouters_only = 0;
1550 if (br->multicast_disabled)
1553 switch (skb->protocol) {
1554 case htons(ETH_P_IP):
1555 return br_multicast_ipv4_rcv(br, port, skb);
1556 #if defined(CONFIG_IPV6) || defined(CONFIG_IPV6_MODULE)
1557 case htons(ETH_P_IPV6):
1558 return br_multicast_ipv6_rcv(br, port, skb);
1565 static void br_multicast_query_expired(unsigned long data)
1567 struct net_bridge *br = (void *)data;
1569 spin_lock(&br->multicast_lock);
1570 if (br->multicast_startup_queries_sent <
1571 br->multicast_startup_query_count)
1572 br->multicast_startup_queries_sent++;
1574 br_multicast_send_query(br, NULL, br->multicast_startup_queries_sent);
1576 spin_unlock(&br->multicast_lock);
1579 void br_multicast_init(struct net_bridge *br)
1581 br->hash_elasticity = 4;
1584 br->multicast_router = 1;
1585 br->multicast_last_member_count = 2;
1586 br->multicast_startup_query_count = 2;
1588 br->multicast_last_member_interval = HZ;
1589 br->multicast_query_response_interval = 10 * HZ;
1590 br->multicast_startup_query_interval = 125 * HZ / 4;
1591 br->multicast_query_interval = 125 * HZ;
1592 br->multicast_querier_interval = 255 * HZ;
1593 br->multicast_membership_interval = 260 * HZ;
1595 spin_lock_init(&br->multicast_lock);
1596 setup_timer(&br->multicast_router_timer,
1597 br_multicast_local_router_expired, 0);
1598 setup_timer(&br->multicast_querier_timer,
1599 br_multicast_local_router_expired, 0);
1600 setup_timer(&br->multicast_query_timer, br_multicast_query_expired,
1604 void br_multicast_open(struct net_bridge *br)
1606 br->multicast_startup_queries_sent = 0;
1608 if (br->multicast_disabled)
1611 mod_timer(&br->multicast_query_timer, jiffies);
1614 void br_multicast_stop(struct net_bridge *br)
1616 struct net_bridge_mdb_htable *mdb;
1617 struct net_bridge_mdb_entry *mp;
1618 struct hlist_node *p, *n;
1622 del_timer_sync(&br->multicast_router_timer);
1623 del_timer_sync(&br->multicast_querier_timer);
1624 del_timer_sync(&br->multicast_query_timer);
1626 spin_lock_bh(&br->multicast_lock);
1634 for (i = 0; i < mdb->max; i++) {
1635 hlist_for_each_entry_safe(mp, p, n, &mdb->mhash[i],
1637 del_timer(&mp->timer);
1638 del_timer(&mp->query_timer);
1639 call_rcu_bh(&mp->rcu, br_multicast_free_group);
1644 spin_unlock_bh(&br->multicast_lock);
1646 spin_lock_bh(&br->multicast_lock);
1651 call_rcu_bh(&mdb->rcu, br_mdb_free);
1654 spin_unlock_bh(&br->multicast_lock);
1657 int br_multicast_set_router(struct net_bridge *br, unsigned long val)
1661 spin_lock_bh(&br->multicast_lock);
1662 if (!netif_running(br->dev))
1668 del_timer(&br->multicast_router_timer);
1671 br->multicast_router = val;
1681 spin_unlock_bh(&br->multicast_lock);
1686 int br_multicast_set_port_router(struct net_bridge_port *p, unsigned long val)
1688 struct net_bridge *br = p->br;
1691 spin_lock(&br->multicast_lock);
1692 if (!netif_running(br->dev) || p->state == BR_STATE_DISABLED)
1699 p->multicast_router = val;
1702 if (val < 2 && !hlist_unhashed(&p->rlist))
1703 hlist_del_init_rcu(&p->rlist);
1708 del_timer(&p->multicast_router_timer);
1713 br_multicast_add_router(br, p);
1722 spin_unlock(&br->multicast_lock);
1727 int br_multicast_toggle(struct net_bridge *br, unsigned long val)
1729 struct net_bridge_port *port;
1732 spin_lock(&br->multicast_lock);
1733 if (!netif_running(br->dev))
1737 if (br->multicast_disabled == !val)
1740 br->multicast_disabled = !val;
1741 if (br->multicast_disabled)
1748 br->multicast_disabled = !!val;
1752 err = br_mdb_rehash(&br->mdb, br->mdb->max,
1753 br->hash_elasticity);
1758 br_multicast_open(br);
1759 list_for_each_entry(port, &br->port_list, list) {
1760 if (port->state == BR_STATE_DISABLED ||
1761 port->state == BR_STATE_BLOCKING)
1764 __br_multicast_enable_port(port);
1768 spin_unlock(&br->multicast_lock);
1773 int br_multicast_set_hash_max(struct net_bridge *br, unsigned long val)
1778 spin_lock(&br->multicast_lock);
1779 if (!netif_running(br->dev))
1783 if (!is_power_of_2(val))
1785 if (br->mdb && val < br->mdb->size)
1801 err = br_mdb_rehash(&br->mdb, br->hash_max,
1802 br->hash_elasticity);
1808 spin_unlock(&br->multicast_lock);