act_api.c 36.1 KB
Newer Older
L
Linus Torvalds 已提交
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17
/*
 * net/sched/act_api.c	Packet action API.
 *
 *		This program is free software; you can redistribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Author:	Jamal Hadi Salim
 *
 *
 */

#include <linux/types.h>
#include <linux/kernel.h>
#include <linux/string.h>
#include <linux/errno.h>
18
#include <linux/slab.h>
L
Linus Torvalds 已提交
19 20 21
#include <linux/skbuff.h>
#include <linux/init.h>
#include <linux/kmod.h>
22
#include <linux/err.h>
23
#include <linux/module.h>
24 25
#include <linux/rhashtable.h>
#include <linux/list.h>
26 27
#include <net/net_namespace.h>
#include <net/sock.h>
L
Linus Torvalds 已提交
28
#include <net/sch_generic.h>
29
#include <net/pkt_cls.h>
L
Linus Torvalds 已提交
30
#include <net/act_api.h>
31
#include <net/netlink.h>
L
Linus Torvalds 已提交
32

33 34 35 36 37 38
static int tcf_action_goto_chain_init(struct tc_action *a, struct tcf_proto *tp)
{
	u32 chain_index = a->tcfa_action & TC_ACT_EXT_VAL_MASK;

	if (!tp)
		return -EINVAL;
39
	a->goto_chain = tcf_chain_get(tp->chain->block, chain_index, true);
40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57
	if (!a->goto_chain)
		return -ENOMEM;
	return 0;
}

static void tcf_action_goto_chain_fini(struct tc_action *a)
{
	tcf_chain_put(a->goto_chain);
}

static void tcf_action_goto_chain_exec(const struct tc_action *a,
				       struct tcf_result *res)
{
	const struct tcf_chain *chain = a->goto_chain;

	res->goto_tp = rcu_dereference_bh(chain->filter_chain);
}

58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75
static void tcf_free_cookie_rcu(struct rcu_head *p)
{
	struct tc_cookie *cookie = container_of(p, struct tc_cookie, rcu);

	kfree(cookie->data);
	kfree(cookie);
}

static void tcf_set_action_cookie(struct tc_cookie __rcu **old_cookie,
				  struct tc_cookie *new_cookie)
{
	struct tc_cookie *old;

	old = xchg(old_cookie, new_cookie);
	if (old)
		call_rcu(&old->rcu, tcf_free_cookie_rcu);
}

C
Cong Wang 已提交
76 77 78 79 80 81
/* XXX: For standalone actions, we don't need a RCU grace period either, because
 * actions are always connected to filters and filters are already destroyed in
 * RCU callbacks, so after a RCU grace period actions are already disconnected
 * from filters. Readers later can not find us.
 */
static void free_tcf(struct tc_action *p)
82 83 84
{
	free_percpu(p->cpu_bstats);
	free_percpu(p->cpu_qstats);
85

86
	tcf_set_action_cookie(&p->act_cookie, NULL);
87 88
	if (p->goto_chain)
		tcf_action_goto_chain_fini(p);
89

90 91 92
	kfree(p);
}

93
static void tcf_idr_remove(struct tcf_idrinfo *idrinfo, struct tc_action *p)
94
{
95
	spin_lock(&idrinfo->lock);
96
	idr_remove(&idrinfo->action_idr, p->tcfa_index);
97
	spin_unlock(&idrinfo->lock);
98
	gen_kill_estimator(&p->tcfa_rate_est);
C
Cong Wang 已提交
99
	free_tcf(p);
100 101
}

102
int __tcf_idr_release(struct tc_action *p, bool bind, bool strict)
103 104 105
{
	int ret = 0;

106 107
	ASSERT_RTNL();

108 109
	if (p) {
		if (bind)
110 111
			p->tcfa_bindcnt--;
		else if (strict && p->tcfa_bindcnt > 0)
112
			return -EPERM;
113

114 115 116
		p->tcfa_refcnt--;
		if (p->tcfa_bindcnt <= 0 && p->tcfa_refcnt <= 0) {
			if (p->ops->cleanup)
117
				p->ops->cleanup(p);
118
			tcf_idr_remove(p->idrinfo, p);
119
			ret = ACT_P_DELETED;
120 121
		}
	}
122

123 124
	return ret;
}
125
EXPORT_SYMBOL(__tcf_idr_release);
126

127 128 129 130 131 132 133 134 135 136 137 138 139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 162
static size_t tcf_action_shared_attrs_size(const struct tc_action *act)
{
	u32 cookie_len = 0;

	if (act->act_cookie)
		cookie_len = nla_total_size(act->act_cookie->len);

	return  nla_total_size(0) /* action number nested */
		+ nla_total_size(IFNAMSIZ) /* TCA_ACT_KIND */
		+ cookie_len /* TCA_ACT_COOKIE */
		+ nla_total_size(0) /* TCA_ACT_STATS nested */
		/* TCA_STATS_BASIC */
		+ nla_total_size_64bit(sizeof(struct gnet_stats_basic))
		/* TCA_STATS_QUEUE */
		+ nla_total_size_64bit(sizeof(struct gnet_stats_queue))
		+ nla_total_size(0) /* TCA_OPTIONS nested */
		+ nla_total_size(sizeof(struct tcf_t)); /* TCA_GACT_TM */
}

static size_t tcf_action_full_attrs_size(size_t sz)
{
	return NLMSG_HDRLEN                     /* struct nlmsghdr */
		+ sizeof(struct tcamsg)
		+ nla_total_size(0)             /* TCA_ACT_TAB nested */
		+ sz;
}

static size_t tcf_action_fill_size(const struct tc_action *act)
{
	size_t sz = tcf_action_shared_attrs_size(act);

	if (act->ops->get_fill_size)
		return act->ops->get_fill_size(act) + sz;
	return sz;
}

163
static int tcf_dump_walker(struct tcf_idrinfo *idrinfo, struct sk_buff *skb,
164
			   struct netlink_callback *cb)
165
{
166
	int err = 0, index = -1, s_i = 0, n_i = 0;
167
	u32 act_flags = cb->args[2];
168
	unsigned long jiffy_since = cb->args[3];
169
	struct nlattr *nest;
170 171 172
	struct idr *idr = &idrinfo->action_idr;
	struct tc_action *p;
	unsigned long id = 1;
173

174
	spin_lock(&idrinfo->lock);
175 176 177

	s_i = cb->args[0];

178
	idr_for_each_entry_ul(idr, p, id) {
179 180 181 182 183 184 185 186 187 188
		index++;
		if (index < s_i)
			continue;

		if (jiffy_since &&
		    time_after(jiffy_since,
			       (unsigned long)p->tcfa_tm.lastuse))
			continue;

		nest = nla_nest_start(skb, n_i);
189 190
		if (!nest) {
			index--;
191
			goto nla_put_failure;
192
		}
193 194 195 196 197
		err = tcf_action_dump_1(skb, p, 0, 0);
		if (err < 0) {
			index--;
			nlmsg_trim(skb, nest);
			goto done;
198
		}
199 200 201 202 203
		nla_nest_end(skb, nest);
		n_i++;
		if (!(act_flags & TCA_FLAG_LARGE_DUMP_ON) &&
		    n_i >= TCA_ACT_MAX_PRIO)
			goto done;
204 205
	}
done:
206 207 208
	if (index >= 0)
		cb->args[0] = index + 1;

209
	spin_unlock(&idrinfo->lock);
210 211 212 213
	if (n_i) {
		if (act_flags & TCA_FLAG_LARGE_DUMP_ON)
			cb->args[1] = n_i;
	}
214 215
	return n_i;

216
nla_put_failure:
217
	nla_nest_cancel(skb, nest);
218 219 220
	goto done;
}

221
static int tcf_del_walker(struct tcf_idrinfo *idrinfo, struct sk_buff *skb,
222
			  const struct tc_action_ops *ops)
223
{
224
	struct nlattr *nest;
225
	int n_i = 0;
226
	int ret = -EINVAL;
227 228 229
	struct idr *idr = &idrinfo->action_idr;
	struct tc_action *p;
	unsigned long id = 1;
230

231
	nest = nla_nest_start(skb, 0);
232 233
	if (nest == NULL)
		goto nla_put_failure;
234
	if (nla_put_string(skb, TCA_KIND, ops->kind))
235
		goto nla_put_failure;
236

237
	idr_for_each_entry_ul(idr, p, id) {
238 239
		ret = __tcf_idr_release(p, false, true);
		if (ret == ACT_P_DELETED) {
240
			module_put(ops->owner);
241 242 243
			n_i++;
		} else if (ret < 0) {
			goto nla_put_failure;
244 245
		}
	}
246 247
	if (nla_put_u32(skb, TCA_FCNT, n_i))
		goto nla_put_failure;
248
	nla_nest_end(skb, nest);
249 250

	return n_i;
251
nla_put_failure:
252
	nla_nest_cancel(skb, nest);
253
	return ret;
254 255
}

256 257
int tcf_generic_walker(struct tc_action_net *tn, struct sk_buff *skb,
		       struct netlink_callback *cb, int type,
258 259
		       const struct tc_action_ops *ops,
		       struct netlink_ext_ack *extack)
260
{
261
	struct tcf_idrinfo *idrinfo = tn->idrinfo;
262

263
	if (type == RTM_DELACTION) {
264
		return tcf_del_walker(idrinfo, skb, ops);
265
	} else if (type == RTM_GETACTION) {
266
		return tcf_dump_walker(idrinfo, skb, cb);
267
	} else {
268 269
		WARN(1, "tcf_generic_walker: unknown command %d\n", type);
		NL_SET_ERR_MSG(extack, "tcf_generic_walker: unknown command");
270 271 272
		return -EINVAL;
	}
}
273
EXPORT_SYMBOL(tcf_generic_walker);
274

275
static struct tc_action *tcf_idr_lookup(u32 index, struct tcf_idrinfo *idrinfo)
276
{
277
	struct tc_action *p = NULL;
278

279
	spin_lock(&idrinfo->lock);
280
	p = idr_find(&idrinfo->action_idr, index);
281
	spin_unlock(&idrinfo->lock);
282 283 284 285

	return p;
}

286
int tcf_idr_search(struct tc_action_net *tn, struct tc_action **a, u32 index)
287
{
288 289
	struct tcf_idrinfo *idrinfo = tn->idrinfo;
	struct tc_action *p = tcf_idr_lookup(index, idrinfo);
290 291

	if (p) {
292
		*a = p;
293 294 295 296
		return 1;
	}
	return 0;
}
297
EXPORT_SYMBOL(tcf_idr_search);
298

299 300
bool tcf_idr_check(struct tc_action_net *tn, u32 index, struct tc_action **a,
		   int bind)
301
{
302 303
	struct tcf_idrinfo *idrinfo = tn->idrinfo;
	struct tc_action *p = tcf_idr_lookup(index, idrinfo);
304

305
	if (index && p) {
306
		if (bind)
307 308 309
			p->tcfa_bindcnt++;
		p->tcfa_refcnt++;
		*a = p;
310
		return true;
311
	}
312
	return false;
313
}
314
EXPORT_SYMBOL(tcf_idr_check);
315

316 317 318
int tcf_idr_create(struct tc_action_net *tn, u32 index, struct nlattr *est,
		   struct tc_action **a, const struct tc_action_ops *ops,
		   int bind, bool cpustats)
319
{
320
	struct tc_action *p = kzalloc(ops->size, GFP_KERNEL);
321 322
	struct tcf_idrinfo *idrinfo = tn->idrinfo;
	struct idr *idr = &idrinfo->action_idr;
323
	int err = -ENOMEM;
324 325

	if (unlikely(!p))
326
		return -ENOMEM;
327
	p->tcfa_refcnt = 1;
328
	if (bind)
329
		p->tcfa_bindcnt = 1;
330

331 332
	if (cpustats) {
		p->cpu_bstats = netdev_alloc_pcpu_stats(struct gnet_stats_basic_cpu);
333
		if (!p->cpu_bstats)
334
			goto err1;
335 336 337
		p->cpu_qstats = alloc_percpu(struct gnet_stats_queue);
		if (!p->cpu_qstats)
			goto err2;
338
	}
339
	spin_lock_init(&p->tcfa_lock);
340
	idr_preload(GFP_KERNEL);
341
	spin_lock(&idrinfo->lock);
342 343
	/* user doesn't specify an index */
	if (!index) {
344 345
		index = 1;
		err = idr_alloc_u32(idr, NULL, &index, UINT_MAX, GFP_ATOMIC);
346
	} else {
347
		err = idr_alloc_u32(idr, NULL, &index, index, GFP_ATOMIC);
348
	}
349
	spin_unlock(&idrinfo->lock);
350 351 352
	idr_preload_end();
	if (err)
		goto err3;
353

354
	p->tcfa_index = index;
355 356 357
	p->tcfa_tm.install = jiffies;
	p->tcfa_tm.lastuse = jiffies;
	p->tcfa_tm.firstuse = 0;
358
	if (est) {
359 360 361
		err = gen_new_estimator(&p->tcfa_bstats, p->cpu_bstats,
					&p->tcfa_rate_est,
					&p->tcfa_lock, NULL, est);
362 363
		if (err)
			goto err4;
364 365
	}

366
	p->idrinfo = idrinfo;
367 368 369
	p->ops = ops;
	INIT_LIST_HEAD(&p->list);
	*a = p;
370
	return 0;
371 372 373 374 375 376 377 378 379
err4:
	idr_remove(idr, index);
err3:
	free_percpu(p->cpu_qstats);
err2:
	free_percpu(p->cpu_bstats);
err1:
	kfree(p);
	return err;
380
}
381
EXPORT_SYMBOL(tcf_idr_create);
382

383
void tcf_idr_insert(struct tc_action_net *tn, struct tc_action *a)
384
{
385
	struct tcf_idrinfo *idrinfo = tn->idrinfo;
386

387
	spin_lock(&idrinfo->lock);
388
	idr_replace(&idrinfo->action_idr, a, a->tcfa_index);
389
	spin_unlock(&idrinfo->lock);
390
}
391
EXPORT_SYMBOL(tcf_idr_insert);
L
Linus Torvalds 已提交
392

393 394
void tcf_idrinfo_destroy(const struct tc_action_ops *ops,
			 struct tcf_idrinfo *idrinfo)
395
{
396 397 398 399
	struct idr *idr = &idrinfo->action_idr;
	struct tc_action *p;
	int ret;
	unsigned long id = 1;
400

401
	idr_for_each_entry_ul(idr, p, id) {
402 403 404 405 406
		ret = __tcf_idr_release(p, false, true);
		if (ret == ACT_P_DELETED)
			module_put(ops->owner);
		else if (ret < 0)
			return;
407
	}
408
	idr_destroy(&idrinfo->action_idr);
409
}
410
EXPORT_SYMBOL(tcf_idrinfo_destroy);
411

412
static LIST_HEAD(act_base);
L
Linus Torvalds 已提交
413 414
static DEFINE_RWLOCK(act_mod_lock);

415 416
int tcf_register_action(struct tc_action_ops *act,
			struct pernet_operations *ops)
L
Linus Torvalds 已提交
417
{
418
	struct tc_action_ops *a;
419
	int ret;
L
Linus Torvalds 已提交
420

421
	if (!act->act || !act->dump || !act->init || !act->walk || !act->lookup)
422 423
		return -EINVAL;

424 425 426 427 428 429 430 431
	/* We have to register pernet ops before making the action ops visible,
	 * otherwise tcf_action_init_1() could get a partially initialized
	 * netns.
	 */
	ret = register_pernet_subsys(ops);
	if (ret)
		return ret;

L
Linus Torvalds 已提交
432
	write_lock(&act_mod_lock);
433
	list_for_each_entry(a, &act_base, head) {
L
Linus Torvalds 已提交
434 435
		if (act->type == a->type || (strcmp(act->kind, a->kind) == 0)) {
			write_unlock(&act_mod_lock);
436
			unregister_pernet_subsys(ops);
L
Linus Torvalds 已提交
437 438 439
			return -EEXIST;
		}
	}
440
	list_add_tail(&act->head, &act_base);
L
Linus Torvalds 已提交
441
	write_unlock(&act_mod_lock);
442

L
Linus Torvalds 已提交
443 444
	return 0;
}
445
EXPORT_SYMBOL(tcf_register_action);
L
Linus Torvalds 已提交
446

447 448
int tcf_unregister_action(struct tc_action_ops *act,
			  struct pernet_operations *ops)
L
Linus Torvalds 已提交
449
{
450
	struct tc_action_ops *a;
L
Linus Torvalds 已提交
451 452 453
	int err = -ENOENT;

	write_lock(&act_mod_lock);
454 455 456 457
	list_for_each_entry(a, &act_base, head) {
		if (a == act) {
			list_del(&act->head);
			err = 0;
L
Linus Torvalds 已提交
458
			break;
459
		}
L
Linus Torvalds 已提交
460 461
	}
	write_unlock(&act_mod_lock);
462 463
	if (!err)
		unregister_pernet_subsys(ops);
L
Linus Torvalds 已提交
464 465
	return err;
}
466
EXPORT_SYMBOL(tcf_unregister_action);
L
Linus Torvalds 已提交
467 468 469 470

/* lookup by name */
static struct tc_action_ops *tc_lookup_action_n(char *kind)
{
471
	struct tc_action_ops *a, *res = NULL;
L
Linus Torvalds 已提交
472 473 474

	if (kind) {
		read_lock(&act_mod_lock);
475
		list_for_each_entry(a, &act_base, head) {
L
Linus Torvalds 已提交
476
			if (strcmp(kind, a->kind) == 0) {
477 478
				if (try_module_get(a->owner))
					res = a;
L
Linus Torvalds 已提交
479 480 481 482 483
				break;
			}
		}
		read_unlock(&act_mod_lock);
	}
484
	return res;
L
Linus Torvalds 已提交
485 486
}

487 488
/* lookup by nlattr */
static struct tc_action_ops *tc_lookup_action(struct nlattr *kind)
L
Linus Torvalds 已提交
489
{
490
	struct tc_action_ops *a, *res = NULL;
L
Linus Torvalds 已提交
491 492 493

	if (kind) {
		read_lock(&act_mod_lock);
494
		list_for_each_entry(a, &act_base, head) {
495
			if (nla_strcmp(kind, a->kind) == 0) {
496 497
				if (try_module_get(a->owner))
					res = a;
L
Linus Torvalds 已提交
498 499 500 501 502
				break;
			}
		}
		read_unlock(&act_mod_lock);
	}
503
	return res;
L
Linus Torvalds 已提交
504 505
}

506 507
/*TCA_ACT_MAX_PRIO is 32, there count upto 32 */
#define TCA_ACT_MAX_PRIO_MASK 0x1FF
508 509
int tcf_action_exec(struct sk_buff *skb, struct tc_action **actions,
		    int nr_actions, struct tcf_result *res)
L
Linus Torvalds 已提交
510
{
511 512
	u32 jmp_prgcnt = 0;
	u32 jmp_ttl = TCA_ACT_MAX_PRIO; /*matches actions per filter */
513 514
	int i;
	int ret = TC_ACT_OK;
L
Linus Torvalds 已提交
515

516 517 518
	if (skb_skip_tc_classify(skb))
		return TC_ACT_OK;

519
restart_act_graph:
520 521 522
	for (i = 0; i < nr_actions; i++) {
		const struct tc_action *a = actions[i];

523 524 525 526
		if (jmp_prgcnt > 0) {
			jmp_prgcnt -= 1;
			continue;
		}
L
Linus Torvalds 已提交
527
repeat:
528 529 530
		ret = a->ops->act(skb, a, res);
		if (ret == TC_ACT_REPEAT)
			goto repeat;	/* we need a ttl - JHS */
531

532
		if (TC_ACT_EXT_CMP(ret, TC_ACT_JUMP)) {
533 534 535 536 537 538 539 540 541 542 543
			jmp_prgcnt = ret & TCA_ACT_MAX_PRIO_MASK;
			if (!jmp_prgcnt || (jmp_prgcnt > nr_actions)) {
				/* faulty opcode, stop pipeline */
				return TC_ACT_OK;
			} else {
				jmp_ttl -= 1;
				if (jmp_ttl > 0)
					goto restart_act_graph;
				else /* faulty graph, stop pipeline */
					return TC_ACT_OK;
			}
544 545
		} else if (TC_ACT_EXT_CMP(ret, TC_ACT_GOTO_CHAIN)) {
			tcf_action_goto_chain_exec(a, res);
546 547
		}

548
		if (ret != TC_ACT_PIPE)
549
			break;
L
Linus Torvalds 已提交
550
	}
551

L
Linus Torvalds 已提交
552 553
	return ret;
}
554
EXPORT_SYMBOL(tcf_action_exec);
L
Linus Torvalds 已提交
555

556
int tcf_action_destroy(struct list_head *actions, int bind)
L
Linus Torvalds 已提交
557
{
558
	const struct tc_action_ops *ops;
559
	struct tc_action *a, *tmp;
560
	int ret = 0;
L
Linus Torvalds 已提交
561

562
	list_for_each_entry_safe(a, tmp, actions, list) {
563
		ops = a->ops;
564
		ret = __tcf_idr_release(a, bind, true);
565
		if (ret == ACT_P_DELETED)
566
			module_put(ops->owner);
567 568
		else if (ret < 0)
			return ret;
L
Linus Torvalds 已提交
569
	}
570
	return ret;
L
Linus Torvalds 已提交
571 572 573 574 575 576 577 578 579 580 581 582
}

int
tcf_action_dump_old(struct sk_buff *skb, struct tc_action *a, int bind, int ref)
{
	return a->ops->dump(skb, a, bind, ref);
}

int
tcf_action_dump_1(struct sk_buff *skb, struct tc_action *a, int bind, int ref)
{
	int err = -EINVAL;
583
	unsigned char *b = skb_tail_pointer(skb);
584
	struct nlattr *nest;
585
	struct tc_cookie *cookie;
L
Linus Torvalds 已提交
586

587 588
	if (nla_put_string(skb, TCA_KIND, a->ops->kind))
		goto nla_put_failure;
L
Linus Torvalds 已提交
589
	if (tcf_action_copy_stats(skb, a, 0))
590
		goto nla_put_failure;
591 592 593 594 595 596

	rcu_read_lock();
	cookie = rcu_dereference(a->act_cookie);
	if (cookie) {
		if (nla_put(skb, TCA_ACT_COOKIE, cookie->len, cookie->data)) {
			rcu_read_unlock();
597
			goto nla_put_failure;
598
		}
599
	}
600
	rcu_read_unlock();
601

602 603 604
	nest = nla_nest_start(skb, TCA_OPTIONS);
	if (nest == NULL)
		goto nla_put_failure;
E
Eric Dumazet 已提交
605 606
	err = tcf_action_dump_old(skb, a, bind, ref);
	if (err > 0) {
607
		nla_nest_end(skb, nest);
L
Linus Torvalds 已提交
608 609 610
		return err;
	}

611
nla_put_failure:
612
	nlmsg_trim(skb, b);
L
Linus Torvalds 已提交
613 614
	return -1;
}
615
EXPORT_SYMBOL(tcf_action_dump_1);
L
Linus Torvalds 已提交
616

617 618
int tcf_action_dump(struct sk_buff *skb, struct list_head *actions,
		    int bind, int ref)
L
Linus Torvalds 已提交
619 620 621
{
	struct tc_action *a;
	int err = -EINVAL;
622
	struct nlattr *nest;
L
Linus Torvalds 已提交
623

624
	list_for_each_entry(a, actions, list) {
625 626 627
		nest = nla_nest_start(skb, a->order);
		if (nest == NULL)
			goto nla_put_failure;
L
Linus Torvalds 已提交
628 629
		err = tcf_action_dump_1(skb, a, bind, ref);
		if (err < 0)
630
			goto errout;
631
		nla_nest_end(skb, nest);
L
Linus Torvalds 已提交
632 633 634 635
	}

	return 0;

636
nla_put_failure:
637 638
	err = -EINVAL;
errout:
639
	nla_nest_cancel(skb, nest);
640
	return err;
L
Linus Torvalds 已提交
641 642
}

643
static struct tc_cookie *nla_memdup_cookie(struct nlattr **tb)
644
{
645 646 647 648 649 650 651 652
	struct tc_cookie *c = kzalloc(sizeof(*c), GFP_KERNEL);
	if (!c)
		return NULL;

	c->data = nla_memdup(tb[TCA_ACT_COOKIE], GFP_KERNEL);
	if (!c->data) {
		kfree(c);
		return NULL;
653
	}
654
	c->len = nla_len(tb[TCA_ACT_COOKIE]);
655

656
	return c;
657 658
}

659 660
struct tc_action *tcf_action_init_1(struct net *net, struct tcf_proto *tp,
				    struct nlattr *nla, struct nlattr *est,
661 662
				    char *name, int ovr, int bind,
				    struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
663 664 665
{
	struct tc_action *a;
	struct tc_action_ops *a_o;
666
	struct tc_cookie *cookie = NULL;
L
Linus Torvalds 已提交
667
	char act_name[IFNAMSIZ];
E
Eric Dumazet 已提交
668
	struct nlattr *tb[TCA_ACT_MAX + 1];
669
	struct nlattr *kind;
670
	int err;
L
Linus Torvalds 已提交
671 672

	if (name == NULL) {
673
		err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL, extack);
674
		if (err < 0)
L
Linus Torvalds 已提交
675
			goto err_out;
676
		err = -EINVAL;
677
		kind = tb[TCA_ACT_KIND];
678 679
		if (!kind) {
			NL_SET_ERR_MSG(extack, "TC action kind must be specified");
L
Linus Torvalds 已提交
680
			goto err_out;
681 682 683
		}
		if (nla_strlcpy(act_name, kind, IFNAMSIZ) >= IFNAMSIZ) {
			NL_SET_ERR_MSG(extack, "TC action name too long");
L
Linus Torvalds 已提交
684
			goto err_out;
685
		}
686 687 688
		if (tb[TCA_ACT_COOKIE]) {
			int cklen = nla_len(tb[TCA_ACT_COOKIE]);

689 690
			if (cklen > TC_COOKIE_MAX_SIZE) {
				NL_SET_ERR_MSG(extack, "TC cookie size above the maximum");
691
				goto err_out;
692
			}
693 694 695

			cookie = nla_memdup_cookie(tb);
			if (!cookie) {
696
				NL_SET_ERR_MSG(extack, "No memory to generate TC cookie");
697 698 699 700
				err = -ENOMEM;
				goto err_out;
			}
		}
L
Linus Torvalds 已提交
701
	} else {
702 703 704
		if (strlcpy(act_name, name, IFNAMSIZ) >= IFNAMSIZ) {
			NL_SET_ERR_MSG(extack, "TC action name too long");
			err = -EINVAL;
L
Linus Torvalds 已提交
705
			goto err_out;
706
		}
L
Linus Torvalds 已提交
707 708 709 710
	}

	a_o = tc_lookup_action_n(act_name);
	if (a_o == NULL) {
711
#ifdef CONFIG_MODULES
L
Linus Torvalds 已提交
712
		rtnl_unlock();
713
		request_module("act_%s", act_name);
L
Linus Torvalds 已提交
714 715 716 717 718 719 720 721 722 723 724
		rtnl_lock();

		a_o = tc_lookup_action_n(act_name);

		/* We dropped the RTNL semaphore in order to
		 * perform the module load.  So, even if we
		 * succeeded in loading the module we have to
		 * tell the caller to replay the request.  We
		 * indicate this using -EAGAIN.
		 */
		if (a_o != NULL) {
725
			err = -EAGAIN;
L
Linus Torvalds 已提交
726 727 728
			goto err_mod;
		}
#endif
729
		NL_SET_ERR_MSG(extack, "Failed to load TC action module");
730
		err = -ENOENT;
L
Linus Torvalds 已提交
731 732 733 734 735
		goto err_out;
	}

	/* backward compatibility for policer */
	if (name == NULL)
736 737
		err = a_o->init(net, tb[TCA_ACT_OPTIONS], est, &a, ovr, bind,
				extack);
L
Linus Torvalds 已提交
738
	else
739
		err = a_o->init(net, nla, est, &a, ovr, bind, extack);
740
	if (err < 0)
741
		goto err_mod;
L
Linus Torvalds 已提交
742

743 744
	if (!name && tb[TCA_ACT_COOKIE])
		tcf_set_action_cookie(&a->act_cookie, cookie);
745

L
Linus Torvalds 已提交
746
	/* module count goes up only when brand new policy is created
E
Eric Dumazet 已提交
747 748 749
	 * if it exists and is only bound to in a_o->init() then
	 * ACT_P_CREATED is not returned (a zero is).
	 */
750
	if (err != ACT_P_CREATED)
L
Linus Torvalds 已提交
751 752
		module_put(a_o->owner);

753 754 755 756 757 758 759
	if (TC_ACT_EXT_CMP(a->tcfa_action, TC_ACT_GOTO_CHAIN)) {
		err = tcf_action_goto_chain_init(a, tp);
		if (err) {
			LIST_HEAD(actions);

			list_add_tail(&a->list, &actions);
			tcf_action_destroy(&actions, bind);
760
			NL_SET_ERR_MSG(extack, "Failed to init TC action chain");
761 762 763 764
			return ERR_PTR(err);
		}
	}

L
Linus Torvalds 已提交
765 766 767 768 769
	return a;

err_mod:
	module_put(a_o->owner);
err_out:
770 771 772 773
	if (cookie) {
		kfree(cookie->data);
		kfree(cookie);
	}
774
	return ERR_PTR(err);
L
Linus Torvalds 已提交
775 776
}

777 778 779 780 781 782 783 784 785 786 787
static void cleanup_a(struct list_head *actions, int ovr)
{
	struct tc_action *a;

	if (!ovr)
		return;

	list_for_each_entry(a, actions, list)
		a->tcfa_refcnt--;
}

788 789
int tcf_action_init(struct net *net, struct tcf_proto *tp, struct nlattr *nla,
		    struct nlattr *est, char *name, int ovr, int bind,
790 791
		    struct list_head *actions, size_t *attr_size,
		    struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
792
{
E
Eric Dumazet 已提交
793
	struct nlattr *tb[TCA_ACT_MAX_PRIO + 1];
794
	struct tc_action *act;
795
	size_t sz = 0;
796
	int err;
L
Linus Torvalds 已提交
797 798
	int i;

799
	err = nla_parse_nested(tb, TCA_ACT_MAX_PRIO, nla, NULL, extack);
800
	if (err < 0)
801
		return err;
L
Linus Torvalds 已提交
802

803
	for (i = 1; i <= TCA_ACT_MAX_PRIO && tb[i]; i++) {
804 805
		act = tcf_action_init_1(net, tp, tb[i], est, name, ovr, bind,
					extack);
806 807
		if (IS_ERR(act)) {
			err = PTR_ERR(act);
L
Linus Torvalds 已提交
808
			goto err;
809
		}
810
		act->order = i;
811
		sz += tcf_action_fill_size(act);
812 813
		if (ovr)
			act->tcfa_refcnt++;
814
		list_add_tail(&act->list, actions);
L
Linus Torvalds 已提交
815
	}
816

817 818
	*attr_size = tcf_action_full_attrs_size(sz);

819 820 821 822
	/* Remove the temp refcnt which was necessary to protect against
	 * destroying an existing action which was being replaced
	 */
	cleanup_a(actions, ovr);
823
	return 0;
L
Linus Torvalds 已提交
824 825

err:
826 827
	tcf_action_destroy(actions, bind);
	return err;
L
Linus Torvalds 已提交
828 829
}

830
int tcf_action_copy_stats(struct sk_buff *skb, struct tc_action *p,
L
Linus Torvalds 已提交
831 832 833 834
			  int compat_mode)
{
	int err = 0;
	struct gnet_dump d;
835

836
	if (p == NULL)
L
Linus Torvalds 已提交
837 838 839
		goto errout;

	/* compat_mode being true specifies a call that is supposed
840
	 * to add additional backward compatibility statistic TLVs.
L
Linus Torvalds 已提交
841 842
	 */
	if (compat_mode) {
843
		if (p->type == TCA_OLD_COMPAT)
L
Linus Torvalds 已提交
844
			err = gnet_stats_start_copy_compat(skb, 0,
845 846
							   TCA_STATS,
							   TCA_XSTATS,
847
							   &p->tcfa_lock, &d,
848
							   TCA_PAD);
L
Linus Torvalds 已提交
849 850 851 852
		else
			return 0;
	} else
		err = gnet_stats_start_copy(skb, TCA_ACT_STATS,
853
					    &p->tcfa_lock, &d, TCA_ACT_PAD);
L
Linus Torvalds 已提交
854 855 856 857

	if (err < 0)
		goto errout;

858
	if (gnet_stats_copy_basic(NULL, &d, p->cpu_bstats, &p->tcfa_bstats) < 0 ||
859
	    gnet_stats_copy_rate_est(&d, &p->tcfa_rate_est) < 0 ||
860
	    gnet_stats_copy_queue(&d, p->cpu_qstats,
861 862
				  &p->tcfa_qstats,
				  p->tcfa_qstats.qlen) < 0)
L
Linus Torvalds 已提交
863 864 865 866 867 868 869 870 871 872 873
		goto errout;

	if (gnet_stats_finish_copy(&d) < 0)
		goto errout;

	return 0;

errout:
	return -1;
}

874 875 876
static int tca_get_fill(struct sk_buff *skb, struct list_head *actions,
			u32 portid, u32 seq, u16 flags, int event, int bind,
			int ref)
L
Linus Torvalds 已提交
877 878 879
{
	struct tcamsg *t;
	struct nlmsghdr *nlh;
880
	unsigned char *b = skb_tail_pointer(skb);
881
	struct nlattr *nest;
L
Linus Torvalds 已提交
882

883
	nlh = nlmsg_put(skb, portid, seq, event, sizeof(*t), flags);
884 885 886
	if (!nlh)
		goto out_nlmsg_trim;
	t = nlmsg_data(nlh);
L
Linus Torvalds 已提交
887
	t->tca_family = AF_UNSPEC;
888 889
	t->tca__pad1 = 0;
	t->tca__pad2 = 0;
890

891
	nest = nla_nest_start(skb, TCA_ACT_TAB);
892
	if (!nest)
893
		goto out_nlmsg_trim;
L
Linus Torvalds 已提交
894

895
	if (tcf_action_dump(skb, actions, bind, ref) < 0)
896
		goto out_nlmsg_trim;
L
Linus Torvalds 已提交
897

898
	nla_nest_end(skb, nest);
899

900
	nlh->nlmsg_len = skb_tail_pointer(skb) - b;
L
Linus Torvalds 已提交
901 902
	return skb->len;

903
out_nlmsg_trim:
904
	nlmsg_trim(skb, b);
L
Linus Torvalds 已提交
905 906 907 908
	return -1;
}

static int
909
tcf_get_notify(struct net *net, u32 portid, struct nlmsghdr *n,
910 911
	       struct list_head *actions, int event,
	       struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
912 913 914 915 916 917
{
	struct sk_buff *skb;

	skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL);
	if (!skb)
		return -ENOBUFS;
918 919
	if (tca_get_fill(skb, actions, portid, n->nlmsg_seq, 0, event,
			 0, 0) <= 0) {
920
		NL_SET_ERR_MSG(extack, "Failed to fill netlink attributes while adding TC action");
L
Linus Torvalds 已提交
921 922 923
		kfree_skb(skb);
		return -EINVAL;
	}
924

925
	return rtnl_unicast(skb, net, portid);
L
Linus Torvalds 已提交
926 927
}

928
static struct tc_action *tcf_action_get_1(struct net *net, struct nlattr *nla,
929 930
					  struct nlmsghdr *n, u32 portid,
					  struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
931
{
E
Eric Dumazet 已提交
932
	struct nlattr *tb[TCA_ACT_MAX + 1];
933
	const struct tc_action_ops *ops;
L
Linus Torvalds 已提交
934 935
	struct tc_action *a;
	int index;
936
	int err;
L
Linus Torvalds 已提交
937

938
	err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL, extack);
939
	if (err < 0)
940
		goto err_out;
L
Linus Torvalds 已提交
941

942
	err = -EINVAL;
943
	if (tb[TCA_ACT_INDEX] == NULL ||
944 945
	    nla_len(tb[TCA_ACT_INDEX]) < sizeof(index)) {
		NL_SET_ERR_MSG(extack, "Invalid TC action index value");
946
		goto err_out;
947
	}
948
	index = nla_get_u32(tb[TCA_ACT_INDEX]);
L
Linus Torvalds 已提交
949

950
	err = -EINVAL;
951
	ops = tc_lookup_action(tb[TCA_ACT_KIND]);
952 953
	if (!ops) { /* could happen in batch of actions */
		NL_SET_ERR_MSG(extack, "Specified TC action not found");
954
		goto err_out;
955
	}
956
	err = -ENOENT;
957
	if (ops->lookup(net, &a, index, extack) == 0)
L
Linus Torvalds 已提交
958 959
		goto err_mod;

960
	module_put(ops->owner);
L
Linus Torvalds 已提交
961
	return a;
962

L
Linus Torvalds 已提交
963
err_mod:
964
	module_put(ops->owner);
965 966
err_out:
	return ERR_PTR(err);
L
Linus Torvalds 已提交
967 968
}

969
static int tca_action_flush(struct net *net, struct nlattr *nla,
970 971
			    struct nlmsghdr *n, u32 portid,
			    struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
972 973 974 975 976 977
{
	struct sk_buff *skb;
	unsigned char *b;
	struct nlmsghdr *nlh;
	struct tcamsg *t;
	struct netlink_callback dcb;
978
	struct nlattr *nest;
E
Eric Dumazet 已提交
979
	struct nlattr *tb[TCA_ACT_MAX + 1];
980
	const struct tc_action_ops *ops;
981
	struct nlattr *kind;
982
	int err = -ENOMEM;
L
Linus Torvalds 已提交
983 984

	skb = alloc_skb(NLMSG_GOODSIZE, GFP_KERNEL);
985
	if (!skb)
986
		return err;
L
Linus Torvalds 已提交
987

988
	b = skb_tail_pointer(skb);
L
Linus Torvalds 已提交
989

990
	err = nla_parse_nested(tb, TCA_ACT_MAX, nla, NULL, extack);
991
	if (err < 0)
L
Linus Torvalds 已提交
992 993
		goto err_out;

994
	err = -EINVAL;
995
	kind = tb[TCA_ACT_KIND];
996
	ops = tc_lookup_action(kind);
997 998
	if (!ops) { /*some idjot trying to flush unknown action */
		NL_SET_ERR_MSG(extack, "Cannot flush unknown TC action");
L
Linus Torvalds 已提交
999
		goto err_out;
1000
	}
L
Linus Torvalds 已提交
1001

1002 1003
	nlh = nlmsg_put(skb, portid, n->nlmsg_seq, RTM_DELACTION,
			sizeof(*t), 0);
1004 1005
	if (!nlh) {
		NL_SET_ERR_MSG(extack, "Failed to create TC action flush notification");
1006
		goto out_module_put;
1007
	}
1008
	t = nlmsg_data(nlh);
L
Linus Torvalds 已提交
1009
	t->tca_family = AF_UNSPEC;
1010 1011
	t->tca__pad1 = 0;
	t->tca__pad2 = 0;
L
Linus Torvalds 已提交
1012

1013
	nest = nla_nest_start(skb, TCA_ACT_TAB);
1014 1015
	if (!nest) {
		NL_SET_ERR_MSG(extack, "Failed to add new netlink message");
1016
		goto out_module_put;
1017
	}
L
Linus Torvalds 已提交
1018

1019
	err = ops->walk(net, skb, &dcb, RTM_DELACTION, ops, extack);
1020 1021
	if (err <= 0) {
		nla_nest_cancel(skb, nest);
1022
		goto out_module_put;
1023
	}
L
Linus Torvalds 已提交
1024

1025
	nla_nest_end(skb, nest);
L
Linus Torvalds 已提交
1026

1027
	nlh->nlmsg_len = skb_tail_pointer(skb) - b;
L
Linus Torvalds 已提交
1028
	nlh->nlmsg_flags |= NLM_F_ROOT;
1029
	module_put(ops->owner);
1030
	err = rtnetlink_send(skb, net, portid, RTNLGRP_TC,
E
Eric Dumazet 已提交
1031
			     n->nlmsg_flags & NLM_F_ECHO);
L
Linus Torvalds 已提交
1032 1033
	if (err > 0)
		return 0;
1034 1035
	if (err < 0)
		NL_SET_ERR_MSG(extack, "Failed to send TC action flush notification");
L
Linus Torvalds 已提交
1036 1037 1038

	return err;

1039
out_module_put:
1040
	module_put(ops->owner);
L
Linus Torvalds 已提交
1041 1042 1043 1044 1045
err_out:
	kfree_skb(skb);
	return err;
}

1046 1047
static int
tcf_del_notify(struct net *net, struct nlmsghdr *n, struct list_head *actions,
1048
	       u32 portid, size_t attr_size, struct netlink_ext_ack *extack)
1049 1050 1051 1052
{
	int ret;
	struct sk_buff *skb;

1053 1054
	skb = alloc_skb(attr_size <= NLMSG_GOODSIZE ? NLMSG_GOODSIZE : attr_size,
			GFP_KERNEL);
1055 1056 1057 1058 1059
	if (!skb)
		return -ENOBUFS;

	if (tca_get_fill(skb, actions, portid, n->nlmsg_seq, 0, RTM_DELACTION,
			 0, 1) <= 0) {
1060
		NL_SET_ERR_MSG(extack, "Failed to fill netlink TC action attributes");
1061 1062 1063 1064 1065
		kfree_skb(skb);
		return -EINVAL;
	}

	/* now do the delete */
1066 1067
	ret = tcf_action_destroy(actions, 0);
	if (ret < 0) {
1068
		NL_SET_ERR_MSG(extack, "Failed to delete TC action");
1069 1070 1071
		kfree_skb(skb);
		return ret;
	}
1072 1073 1074 1075 1076 1077 1078 1079

	ret = rtnetlink_send(skb, net, portid, RTNLGRP_TC,
			     n->nlmsg_flags & NLM_F_ECHO);
	if (ret > 0)
		return 0;
	return ret;
}

L
Linus Torvalds 已提交
1080
static int
1081
tca_action_gd(struct net *net, struct nlattr *nla, struct nlmsghdr *n,
1082
	      u32 portid, int event, struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
1083
{
1084
	int i, ret;
E
Eric Dumazet 已提交
1085
	struct nlattr *tb[TCA_ACT_MAX_PRIO + 1];
1086
	struct tc_action *act;
1087
	size_t attr_size = 0;
1088
	LIST_HEAD(actions);
L
Linus Torvalds 已提交
1089

1090
	ret = nla_parse_nested(tb, TCA_ACT_MAX_PRIO, nla, NULL, extack);
1091 1092
	if (ret < 0)
		return ret;
L
Linus Torvalds 已提交
1093

E
Eric Dumazet 已提交
1094
	if (event == RTM_DELACTION && n->nlmsg_flags & NLM_F_ROOT) {
1095
		if (tb[1])
1096
			return tca_action_flush(net, tb[1], n, portid, extack);
1097

1098
		NL_SET_ERR_MSG(extack, "Invalid netlink attributes while flushing TC action");
1099
		return -EINVAL;
L
Linus Torvalds 已提交
1100 1101
	}

1102
	for (i = 1; i <= TCA_ACT_MAX_PRIO && tb[i]; i++) {
1103
		act = tcf_action_get_1(net, tb[i], n, portid, extack);
1104 1105
		if (IS_ERR(act)) {
			ret = PTR_ERR(act);
L
Linus Torvalds 已提交
1106
			goto err;
1107
		}
1108
		act->order = i;
1109
		attr_size += tcf_action_fill_size(act);
1110
		list_add_tail(&act->list, &actions);
L
Linus Torvalds 已提交
1111
	}
1112 1113

	attr_size = tcf_action_full_attrs_size(attr_size);
L
Linus Torvalds 已提交
1114 1115

	if (event == RTM_GETACTION)
1116
		ret = tcf_get_notify(net, portid, n, &actions, event, extack);
L
Linus Torvalds 已提交
1117
	else { /* delete */
1118
		ret = tcf_del_notify(net, n, &actions, portid, attr_size, extack);
1119
		if (ret)
L
Linus Torvalds 已提交
1120 1121 1122 1123
			goto err;
		return ret;
	}
err:
1124 1125
	if (event != RTM_GETACTION)
		tcf_action_destroy(&actions, 0);
L
Linus Torvalds 已提交
1126 1127 1128
	return ret;
}

1129 1130
static int
tcf_add_notify(struct net *net, struct nlmsghdr *n, struct list_head *actions,
1131
	       u32 portid, size_t attr_size, struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
1132 1133 1134 1135
{
	struct sk_buff *skb;
	int err = 0;

1136 1137
	skb = alloc_skb(attr_size <= NLMSG_GOODSIZE ? NLMSG_GOODSIZE : attr_size,
			GFP_KERNEL);
L
Linus Torvalds 已提交
1138 1139 1140
	if (!skb)
		return -ENOBUFS;

1141 1142
	if (tca_get_fill(skb, actions, portid, n->nlmsg_seq, n->nlmsg_flags,
			 RTM_NEWACTION, 0, 0) <= 0) {
1143
		NL_SET_ERR_MSG(extack, "Failed to fill netlink attributes while adding TC action");
1144 1145 1146
		kfree_skb(skb);
		return -EINVAL;
	}
1147

1148 1149
	err = rtnetlink_send(skb, net, portid, RTNLGRP_TC,
			     n->nlmsg_flags & NLM_F_ECHO);
L
Linus Torvalds 已提交
1150 1151 1152 1153 1154
	if (err > 0)
		err = 0;
	return err;
}

J
Jamal Hadi Salim 已提交
1155
static int tcf_action_add(struct net *net, struct nlattr *nla,
1156 1157
			  struct nlmsghdr *n, u32 portid, int ovr,
			  struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
1158
{
1159
	size_t attr_size = 0;
L
Linus Torvalds 已提交
1160
	int ret = 0;
1161
	LIST_HEAD(actions);
L
Linus Torvalds 已提交
1162

1163
	ret = tcf_action_init(net, NULL, nla, NULL, NULL, ovr, 0, &actions,
1164
			      &attr_size, extack);
1165
	if (ret)
1166
		return ret;
L
Linus Torvalds 已提交
1167

1168
	return tcf_add_notify(net, n, &actions, portid, attr_size, extack);
L
Linus Torvalds 已提交
1169 1170
}

1171 1172 1173 1174
static u32 tcaa_root_flags_allowed = TCA_FLAG_LARGE_DUMP_ON;
static const struct nla_policy tcaa_policy[TCA_ROOT_MAX + 1] = {
	[TCA_ROOT_FLAGS] = { .type = NLA_BITFIELD32,
			     .validation_data = &tcaa_root_flags_allowed },
1175
	[TCA_ROOT_TIME_DELTA]      = { .type = NLA_U32 },
1176 1177
};

1178 1179
static int tc_ctl_action(struct sk_buff *skb, struct nlmsghdr *n,
			 struct netlink_ext_ack *extack)
L
Linus Torvalds 已提交
1180
{
1181
	struct net *net = sock_net(skb->sk);
1182
	struct nlattr *tca[TCA_ROOT_MAX + 1];
1183
	u32 portid = skb ? NETLINK_CB(skb).portid : 0;
L
Linus Torvalds 已提交
1184 1185
	int ret = 0, ovr = 0;

1186 1187
	if ((n->nlmsg_type != RTM_GETACTION) &&
	    !netlink_capable(skb, CAP_NET_ADMIN))
1188 1189
		return -EPERM;

1190
	ret = nlmsg_parse(n, sizeof(struct tcamsg), tca, TCA_ROOT_MAX, NULL,
1191
			  extack);
1192 1193 1194 1195
	if (ret < 0)
		return ret;

	if (tca[TCA_ACT_TAB] == NULL) {
1196
		NL_SET_ERR_MSG(extack, "Netlink action attributes missing");
L
Linus Torvalds 已提交
1197 1198 1199
		return -EINVAL;
	}

E
Eric Dumazet 已提交
1200
	/* n->nlmsg_flags & NLM_F_CREATE */
L
Linus Torvalds 已提交
1201 1202 1203
	switch (n->nlmsg_type) {
	case RTM_NEWACTION:
		/* we are going to assume all other flags
L
Lucas De Marchi 已提交
1204
		 * imply create only if it doesn't exist
L
Linus Torvalds 已提交
1205 1206 1207 1208
		 * Note that CREATE | EXCL implies that
		 * but since we want avoid ambiguity (eg when flags
		 * is zero) then just set this
		 */
E
Eric Dumazet 已提交
1209
		if (n->nlmsg_flags & NLM_F_REPLACE)
L
Linus Torvalds 已提交
1210 1211
			ovr = 1;
replay:
1212 1213
		ret = tcf_action_add(net, tca[TCA_ACT_TAB], n, portid, ovr,
				     extack);
L
Linus Torvalds 已提交
1214 1215 1216 1217
		if (ret == -EAGAIN)
			goto replay;
		break;
	case RTM_DELACTION:
1218
		ret = tca_action_gd(net, tca[TCA_ACT_TAB], n,
1219
				    portid, RTM_DELACTION, extack);
L
Linus Torvalds 已提交
1220 1221
		break;
	case RTM_GETACTION:
1222
		ret = tca_action_gd(net, tca[TCA_ACT_TAB], n,
1223
				    portid, RTM_GETACTION, extack);
L
Linus Torvalds 已提交
1224 1225 1226 1227 1228 1229 1230 1231
		break;
	default:
		BUG();
	}

	return ret;
}

1232
static struct nlattr *find_dump_kind(struct nlattr **nla)
L
Linus Torvalds 已提交
1233
{
E
Eric Dumazet 已提交
1234
	struct nlattr *tb1, *tb2[TCA_ACT_MAX + 1];
1235 1236
	struct nlattr *tb[TCA_ACT_MAX_PRIO + 1];
	struct nlattr *kind;
L
Linus Torvalds 已提交
1237

1238
	tb1 = nla[TCA_ACT_TAB];
L
Linus Torvalds 已提交
1239 1240 1241
	if (tb1 == NULL)
		return NULL;

1242
	if (nla_parse(tb, TCA_ACT_MAX_PRIO, nla_data(tb1),
1243
		      NLMSG_ALIGN(nla_len(tb1)), NULL, NULL) < 0)
L
Linus Torvalds 已提交
1244 1245
		return NULL;

1246 1247
	if (tb[1] == NULL)
		return NULL;
1248
	if (nla_parse_nested(tb2, TCA_ACT_MAX, tb[1], NULL, NULL) < 0)
L
Linus Torvalds 已提交
1249
		return NULL;
1250
	kind = tb2[TCA_ACT_KIND];
L
Linus Torvalds 已提交
1251

1252
	return kind;
L
Linus Torvalds 已提交
1253 1254
}

J
Jamal Hadi Salim 已提交
1255
static int tc_dump_action(struct sk_buff *skb, struct netlink_callback *cb)
L
Linus Torvalds 已提交
1256
{
1257
	struct net *net = sock_net(skb->sk);
L
Linus Torvalds 已提交
1258
	struct nlmsghdr *nlh;
1259
	unsigned char *b = skb_tail_pointer(skb);
1260
	struct nlattr *nest;
L
Linus Torvalds 已提交
1261 1262
	struct tc_action_ops *a_o;
	int ret = 0;
1263
	struct tcamsg *t = (struct tcamsg *) nlmsg_data(cb->nlh);
1264 1265
	struct nlattr *tb[TCA_ROOT_MAX + 1];
	struct nlattr *count_attr = NULL;
1266
	unsigned long jiffy_since = 0;
1267 1268
	struct nlattr *kind = NULL;
	struct nla_bitfield32 bf;
1269
	u32 msecs_since = 0;
1270 1271 1272 1273 1274 1275
	u32 act_count = 0;

	ret = nlmsg_parse(cb->nlh, sizeof(struct tcamsg), tb, TCA_ROOT_MAX,
			  tcaa_policy, NULL);
	if (ret < 0)
		return ret;
L
Linus Torvalds 已提交
1276

1277
	kind = find_dump_kind(tb);
L
Linus Torvalds 已提交
1278
	if (kind == NULL) {
1279
		pr_info("tc_dump_action: action bad kind\n");
L
Linus Torvalds 已提交
1280 1281 1282
		return 0;
	}

1283
	a_o = tc_lookup_action(kind);
E
Eric Dumazet 已提交
1284
	if (a_o == NULL)
L
Linus Torvalds 已提交
1285 1286
		return 0;

1287 1288 1289 1290 1291 1292
	cb->args[2] = 0;
	if (tb[TCA_ROOT_FLAGS]) {
		bf = nla_get_bitfield32(tb[TCA_ROOT_FLAGS]);
		cb->args[2] = bf.value;
	}

1293 1294 1295 1296
	if (tb[TCA_ROOT_TIME_DELTA]) {
		msecs_since = nla_get_u32(tb[TCA_ROOT_TIME_DELTA]);
	}

1297
	nlh = nlmsg_put(skb, NETLINK_CB(cb->skb).portid, cb->nlh->nlmsg_seq,
1298 1299 1300
			cb->nlh->nlmsg_type, sizeof(*t), 0);
	if (!nlh)
		goto out_module_put;
1301

1302 1303 1304
	if (msecs_since)
		jiffy_since = jiffies - msecs_to_jiffies(msecs_since);

1305
	t = nlmsg_data(nlh);
L
Linus Torvalds 已提交
1306
	t->tca_family = AF_UNSPEC;
1307 1308
	t->tca__pad1 = 0;
	t->tca__pad2 = 0;
1309
	cb->args[3] = jiffy_since;
1310 1311 1312
	count_attr = nla_reserve(skb, TCA_ROOT_COUNT, sizeof(u32));
	if (!count_attr)
		goto out_module_put;
L
Linus Torvalds 已提交
1313

1314 1315
	nest = nla_nest_start(skb, TCA_ACT_TAB);
	if (nest == NULL)
1316
		goto out_module_put;
L
Linus Torvalds 已提交
1317

1318
	ret = a_o->walk(net, skb, cb, RTM_GETACTION, a_o, NULL);
L
Linus Torvalds 已提交
1319
	if (ret < 0)
1320
		goto out_module_put;
L
Linus Torvalds 已提交
1321 1322

	if (ret > 0) {
1323
		nla_nest_end(skb, nest);
L
Linus Torvalds 已提交
1324
		ret = skb->len;
1325 1326 1327
		act_count = cb->args[1];
		memcpy(nla_data(count_attr), &act_count, sizeof(u32));
		cb->args[1] = 0;
L
Linus Torvalds 已提交
1328
	} else
1329
		nlmsg_trim(skb, b);
L
Linus Torvalds 已提交
1330

1331
	nlh->nlmsg_len = skb_tail_pointer(skb) - b;
1332
	if (NETLINK_CB(cb->skb).portid && ret)
L
Linus Torvalds 已提交
1333 1334 1335 1336
		nlh->nlmsg_flags |= NLM_F_MULTI;
	module_put(a_o->owner);
	return skb->len;

1337
out_module_put:
L
Linus Torvalds 已提交
1338
	module_put(a_o->owner);
1339
	nlmsg_trim(skb, b);
L
Linus Torvalds 已提交
1340 1341 1342
	return skb->len;
}

1343 1344 1345 1346 1347 1348 1349 1350 1351 1352 1353 1354 1355 1356 1357 1358 1359 1360 1361 1362 1363 1364 1365 1366 1367 1368 1369 1370 1371 1372 1373 1374 1375 1376 1377 1378 1379 1380 1381 1382 1383 1384 1385 1386 1387 1388 1389 1390 1391
struct tcf_action_net {
	struct rhashtable egdev_ht;
};

static unsigned int tcf_action_net_id;

struct tcf_action_egdev_cb {
	struct list_head list;
	tc_setup_cb_t *cb;
	void *cb_priv;
};

struct tcf_action_egdev {
	struct rhash_head ht_node;
	const struct net_device *dev;
	unsigned int refcnt;
	struct list_head cb_list;
};

static const struct rhashtable_params tcf_action_egdev_ht_params = {
	.key_offset = offsetof(struct tcf_action_egdev, dev),
	.head_offset = offsetof(struct tcf_action_egdev, ht_node),
	.key_len = sizeof(const struct net_device *),
};

static struct tcf_action_egdev *
tcf_action_egdev_lookup(const struct net_device *dev)
{
	struct net *net = dev_net(dev);
	struct tcf_action_net *tan = net_generic(net, tcf_action_net_id);

	return rhashtable_lookup_fast(&tan->egdev_ht, &dev,
				      tcf_action_egdev_ht_params);
}

static struct tcf_action_egdev *
tcf_action_egdev_get(const struct net_device *dev)
{
	struct tcf_action_egdev *egdev;
	struct tcf_action_net *tan;

	egdev = tcf_action_egdev_lookup(dev);
	if (egdev)
		goto inc_ref;

	egdev = kzalloc(sizeof(*egdev), GFP_KERNEL);
	if (!egdev)
		return NULL;
	INIT_LIST_HEAD(&egdev->cb_list);
1392
	egdev->dev = dev;
1393 1394 1395 1396 1397 1398 1399 1400 1401 1402 1403 1404 1405 1406 1407 1408 1409 1410 1411 1412 1413 1414 1415 1416 1417 1418 1419 1420 1421 1422 1423 1424 1425 1426 1427 1428 1429 1430 1431 1432 1433 1434 1435 1436 1437 1438 1439 1440 1441 1442 1443 1444 1445 1446 1447 1448 1449 1450 1451 1452 1453 1454 1455 1456 1457 1458 1459 1460 1461 1462 1463 1464 1465 1466 1467 1468 1469 1470 1471 1472 1473 1474 1475 1476 1477 1478 1479 1480 1481 1482 1483 1484 1485 1486 1487 1488 1489 1490 1491 1492 1493 1494 1495 1496 1497 1498 1499 1500 1501 1502 1503 1504 1505 1506 1507 1508 1509 1510 1511 1512 1513 1514 1515 1516 1517 1518 1519 1520 1521 1522 1523 1524 1525 1526 1527 1528 1529 1530 1531 1532 1533 1534 1535 1536 1537 1538 1539 1540 1541 1542 1543 1544 1545 1546 1547 1548 1549 1550 1551 1552 1553 1554 1555
	tan = net_generic(dev_net(dev), tcf_action_net_id);
	rhashtable_insert_fast(&tan->egdev_ht, &egdev->ht_node,
			       tcf_action_egdev_ht_params);

inc_ref:
	egdev->refcnt++;
	return egdev;
}

static void tcf_action_egdev_put(struct tcf_action_egdev *egdev)
{
	struct tcf_action_net *tan;

	if (--egdev->refcnt)
		return;
	tan = net_generic(dev_net(egdev->dev), tcf_action_net_id);
	rhashtable_remove_fast(&tan->egdev_ht, &egdev->ht_node,
			       tcf_action_egdev_ht_params);
	kfree(egdev);
}

static struct tcf_action_egdev_cb *
tcf_action_egdev_cb_lookup(struct tcf_action_egdev *egdev,
			   tc_setup_cb_t *cb, void *cb_priv)
{
	struct tcf_action_egdev_cb *egdev_cb;

	list_for_each_entry(egdev_cb, &egdev->cb_list, list)
		if (egdev_cb->cb == cb && egdev_cb->cb_priv == cb_priv)
			return egdev_cb;
	return NULL;
}

static int tcf_action_egdev_cb_call(struct tcf_action_egdev *egdev,
				    enum tc_setup_type type,
				    void *type_data, bool err_stop)
{
	struct tcf_action_egdev_cb *egdev_cb;
	int ok_count = 0;
	int err;

	list_for_each_entry(egdev_cb, &egdev->cb_list, list) {
		err = egdev_cb->cb(type, type_data, egdev_cb->cb_priv);
		if (err) {
			if (err_stop)
				return err;
		} else {
			ok_count++;
		}
	}
	return ok_count;
}

static int tcf_action_egdev_cb_add(struct tcf_action_egdev *egdev,
				   tc_setup_cb_t *cb, void *cb_priv)
{
	struct tcf_action_egdev_cb *egdev_cb;

	egdev_cb = tcf_action_egdev_cb_lookup(egdev, cb, cb_priv);
	if (WARN_ON(egdev_cb))
		return -EEXIST;
	egdev_cb = kzalloc(sizeof(*egdev_cb), GFP_KERNEL);
	if (!egdev_cb)
		return -ENOMEM;
	egdev_cb->cb = cb;
	egdev_cb->cb_priv = cb_priv;
	list_add(&egdev_cb->list, &egdev->cb_list);
	return 0;
}

static void tcf_action_egdev_cb_del(struct tcf_action_egdev *egdev,
				    tc_setup_cb_t *cb, void *cb_priv)
{
	struct tcf_action_egdev_cb *egdev_cb;

	egdev_cb = tcf_action_egdev_cb_lookup(egdev, cb, cb_priv);
	if (WARN_ON(!egdev_cb))
		return;
	list_del(&egdev_cb->list);
	kfree(egdev_cb);
}

static int __tc_setup_cb_egdev_register(const struct net_device *dev,
					tc_setup_cb_t *cb, void *cb_priv)
{
	struct tcf_action_egdev *egdev = tcf_action_egdev_get(dev);
	int err;

	if (!egdev)
		return -ENOMEM;
	err = tcf_action_egdev_cb_add(egdev, cb, cb_priv);
	if (err)
		goto err_cb_add;
	return 0;

err_cb_add:
	tcf_action_egdev_put(egdev);
	return err;
}
int tc_setup_cb_egdev_register(const struct net_device *dev,
			       tc_setup_cb_t *cb, void *cb_priv)
{
	int err;

	rtnl_lock();
	err = __tc_setup_cb_egdev_register(dev, cb, cb_priv);
	rtnl_unlock();
	return err;
}
EXPORT_SYMBOL_GPL(tc_setup_cb_egdev_register);

static void __tc_setup_cb_egdev_unregister(const struct net_device *dev,
					   tc_setup_cb_t *cb, void *cb_priv)
{
	struct tcf_action_egdev *egdev = tcf_action_egdev_lookup(dev);

	if (WARN_ON(!egdev))
		return;
	tcf_action_egdev_cb_del(egdev, cb, cb_priv);
	tcf_action_egdev_put(egdev);
}
void tc_setup_cb_egdev_unregister(const struct net_device *dev,
				  tc_setup_cb_t *cb, void *cb_priv)
{
	rtnl_lock();
	__tc_setup_cb_egdev_unregister(dev, cb, cb_priv);
	rtnl_unlock();
}
EXPORT_SYMBOL_GPL(tc_setup_cb_egdev_unregister);

int tc_setup_cb_egdev_call(const struct net_device *dev,
			   enum tc_setup_type type, void *type_data,
			   bool err_stop)
{
	struct tcf_action_egdev *egdev = tcf_action_egdev_lookup(dev);

	if (!egdev)
		return 0;
	return tcf_action_egdev_cb_call(egdev, type, type_data, err_stop);
}
EXPORT_SYMBOL_GPL(tc_setup_cb_egdev_call);

static __net_init int tcf_action_net_init(struct net *net)
{
	struct tcf_action_net *tan = net_generic(net, tcf_action_net_id);

	return rhashtable_init(&tan->egdev_ht, &tcf_action_egdev_ht_params);
}

static void __net_exit tcf_action_net_exit(struct net *net)
{
	struct tcf_action_net *tan = net_generic(net, tcf_action_net_id);

	rhashtable_destroy(&tan->egdev_ht);
}

static struct pernet_operations tcf_action_net_ops = {
	.init = tcf_action_net_init,
	.exit = tcf_action_net_exit,
	.id = &tcf_action_net_id,
	.size = sizeof(struct tcf_action_net),
};

L
Linus Torvalds 已提交
1556 1557
static int __init tc_action_init(void)
{
1558 1559 1560 1561 1562 1563
	int err;

	err = register_pernet_subsys(&tcf_action_net_ops);
	if (err)
		return err;

1564 1565
	rtnl_register(PF_UNSPEC, RTM_NEWACTION, tc_ctl_action, NULL, 0);
	rtnl_register(PF_UNSPEC, RTM_DELACTION, tc_ctl_action, NULL, 0);
1566
	rtnl_register(PF_UNSPEC, RTM_GETACTION, tc_ctl_action, tc_dump_action,
1567
		      0);
L
Linus Torvalds 已提交
1568 1569 1570 1571 1572

	return 0;
}

subsys_initcall(tc_action_init);