2 * Multicast support for IPv6
3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
8 * Based on linux/ipv4/igmp.c and linux/ipv4/ip_sockglue.c
10 * This program is free software; you can redistribute it and/or
11 * modify it under the terms of the GNU General Public License
12 * as published by the Free Software Foundation; either version
13 * 2 of the License, or (at your option) any later version.
18 * yoshfuji : fix format of router-alert option
19 * YOSHIFUJI Hideaki @USAGI:
20 * Fixed source address for MLD message based on
21 * <draft-ietf-magma-mld-source-05.txt>.
22 * YOSHIFUJI Hideaki @USAGI:
23 * - Ignore Queries for invalid addresses.
24 * - MLD for link-local addresses.
25 * David L Stevens <dlstevens@us.ibm.com>:
29 #include <linux/module.h>
30 #include <linux/errno.h>
31 #include <linux/types.h>
32 #include <linux/string.h>
33 #include <linux/socket.h>
34 #include <linux/sockios.h>
35 #include <linux/jiffies.h>
36 #include <linux/times.h>
37 #include <linux/net.h>
39 #include <linux/in6.h>
40 #include <linux/netdevice.h>
41 #include <linux/if_arp.h>
42 #include <linux/route.h>
43 #include <linux/init.h>
44 #include <linux/proc_fs.h>
45 #include <linux/seq_file.h>
46 #include <linux/slab.h>
47 #include <linux/pkt_sched.h>
50 #include <linux/netfilter.h>
51 #include <linux/netfilter_ipv6.h>
53 #include <net/net_namespace.h>
58 #include <net/protocol.h>
59 #include <net/if_inet6.h>
60 #include <net/ndisc.h>
61 #include <net/addrconf.h>
62 #include <net/ip6_route.h>
63 #include <net/inet_common.h>
65 #include <net/ip6_checksum.h>
67 /* Set to 3 to get tracing... */
71 #define MDBG(x) printk x
76 /* Ensure that we have struct in6_addr aligned on 32bit word. */
77 static void *__mld2_query_bugs
[] __attribute__((__unused__
)) = {
78 BUILD_BUG_ON_NULL(offsetof(struct mld2_query
, mld2q_srcs
) % 4),
79 BUILD_BUG_ON_NULL(offsetof(struct mld2_report
, mld2r_grec
) % 4),
80 BUILD_BUG_ON_NULL(offsetof(struct mld2_grec
, grec_mca
) % 4)
83 static struct in6_addr mld2_all_mcr
= MLD2_ALL_MCR_INIT
;
85 /* Big mc list lock for all the sockets */
86 static DEFINE_SPINLOCK(ipv6_sk_mc_lock
);
88 static void igmp6_join_group(struct ifmcaddr6
*ma
);
89 static void igmp6_leave_group(struct ifmcaddr6
*ma
);
90 static void igmp6_timer_handler(unsigned long data
);
92 static void mld_gq_timer_expire(unsigned long data
);
93 static void mld_ifc_timer_expire(unsigned long data
);
94 static void mld_ifc_event(struct inet6_dev
*idev
);
95 static void mld_add_delrec(struct inet6_dev
*idev
, struct ifmcaddr6
*pmc
);
96 static void mld_del_delrec(struct inet6_dev
*idev
, const struct in6_addr
*addr
);
97 static void mld_clear_delrec(struct inet6_dev
*idev
);
98 static bool mld_in_v1_mode(const struct inet6_dev
*idev
);
99 static int sf_setstate(struct ifmcaddr6
*pmc
);
100 static void sf_markstate(struct ifmcaddr6
*pmc
);
101 static void ip6_mc_clear_src(struct ifmcaddr6
*pmc
);
102 static int ip6_mc_del_src(struct inet6_dev
*idev
, const struct in6_addr
*pmca
,
103 int sfmode
, int sfcount
, const struct in6_addr
*psfsrc
,
105 static int ip6_mc_add_src(struct inet6_dev
*idev
, const struct in6_addr
*pmca
,
106 int sfmode
, int sfcount
, const struct in6_addr
*psfsrc
,
108 static int ip6_mc_leave_src(struct sock
*sk
, struct ipv6_mc_socklist
*iml
,
109 struct inet6_dev
*idev
);
111 #define MLD_QRV_DEFAULT 2
112 /* RFC3810, 9.2. Query Interval */
113 #define MLD_QI_DEFAULT (125 * HZ)
114 /* RFC3810, 9.3. Query Response Interval */
115 #define MLD_QRI_DEFAULT (10 * HZ)
117 /* RFC3810, 8.1 Query Version Distinctions */
118 #define MLD_V1_QUERY_LEN 24
119 #define MLD_V2_QUERY_LEN_MIN 28
121 #define IPV6_MLD_MAX_MSF 64
123 int sysctl_mld_max_msf __read_mostly
= IPV6_MLD_MAX_MSF
;
126 * socket join on multicast group
129 #define for_each_pmc_rcu(np, pmc) \
130 for (pmc = rcu_dereference(np->ipv6_mc_list); \
132 pmc = rcu_dereference(pmc->next))
134 static int unsolicited_report_interval(struct inet6_dev
*idev
)
138 if (mld_in_v1_mode(idev
))
139 iv
= idev
->cnf
.mldv1_unsolicited_report_interval
;
141 iv
= idev
->cnf
.mldv2_unsolicited_report_interval
;
143 return iv
> 0 ? iv
: 1;
146 int ipv6_sock_mc_join(struct sock
*sk
, int ifindex
, const struct in6_addr
*addr
)
148 struct net_device
*dev
= NULL
;
149 struct ipv6_mc_socklist
*mc_lst
;
150 struct ipv6_pinfo
*np
= inet6_sk(sk
);
151 struct net
*net
= sock_net(sk
);
154 if (!ipv6_addr_is_multicast(addr
))
158 for_each_pmc_rcu(np
, mc_lst
) {
159 if ((ifindex
== 0 || mc_lst
->ifindex
== ifindex
) &&
160 ipv6_addr_equal(&mc_lst
->addr
, addr
)) {
167 mc_lst
= sock_kmalloc(sk
, sizeof(struct ipv6_mc_socklist
), GFP_KERNEL
);
173 mc_lst
->addr
= *addr
;
178 rt
= rt6_lookup(net
, addr
, NULL
, 0, 0);
184 dev
= dev_get_by_index_rcu(net
, ifindex
);
188 sock_kfree_s(sk
, mc_lst
, sizeof(*mc_lst
));
192 mc_lst
->ifindex
= dev
->ifindex
;
193 mc_lst
->sfmode
= MCAST_EXCLUDE
;
194 rwlock_init(&mc_lst
->sflock
);
195 mc_lst
->sflist
= NULL
;
198 * now add/increase the group membership on the device
201 err
= ipv6_dev_mc_inc(dev
, addr
);
205 sock_kfree_s(sk
, mc_lst
, sizeof(*mc_lst
));
209 spin_lock(&ipv6_sk_mc_lock
);
210 mc_lst
->next
= np
->ipv6_mc_list
;
211 rcu_assign_pointer(np
->ipv6_mc_list
, mc_lst
);
212 spin_unlock(&ipv6_sk_mc_lock
);
220 * socket leave on multicast group
222 int ipv6_sock_mc_drop(struct sock
*sk
, int ifindex
, const struct in6_addr
*addr
)
224 struct ipv6_pinfo
*np
= inet6_sk(sk
);
225 struct ipv6_mc_socklist
*mc_lst
;
226 struct ipv6_mc_socklist __rcu
**lnk
;
227 struct net
*net
= sock_net(sk
);
229 if (!ipv6_addr_is_multicast(addr
))
232 spin_lock(&ipv6_sk_mc_lock
);
233 for (lnk
= &np
->ipv6_mc_list
;
234 (mc_lst
= rcu_dereference_protected(*lnk
,
235 lockdep_is_held(&ipv6_sk_mc_lock
))) !=NULL
;
236 lnk
= &mc_lst
->next
) {
237 if ((ifindex
== 0 || mc_lst
->ifindex
== ifindex
) &&
238 ipv6_addr_equal(&mc_lst
->addr
, addr
)) {
239 struct net_device
*dev
;
242 spin_unlock(&ipv6_sk_mc_lock
);
245 dev
= dev_get_by_index_rcu(net
, mc_lst
->ifindex
);
247 struct inet6_dev
*idev
= __in6_dev_get(dev
);
249 (void) ip6_mc_leave_src(sk
, mc_lst
, idev
);
251 __ipv6_dev_mc_dec(idev
, &mc_lst
->addr
);
253 (void) ip6_mc_leave_src(sk
, mc_lst
, NULL
);
255 atomic_sub(sizeof(*mc_lst
), &sk
->sk_omem_alloc
);
256 kfree_rcu(mc_lst
, rcu
);
260 spin_unlock(&ipv6_sk_mc_lock
);
262 return -EADDRNOTAVAIL
;
265 /* called with rcu_read_lock() */
266 static struct inet6_dev
*ip6_mc_find_dev_rcu(struct net
*net
,
267 const struct in6_addr
*group
,
270 struct net_device
*dev
= NULL
;
271 struct inet6_dev
*idev
= NULL
;
274 struct rt6_info
*rt
= rt6_lookup(net
, group
, NULL
, 0, 0);
281 dev
= dev_get_by_index_rcu(net
, ifindex
);
285 idev
= __in6_dev_get(dev
);
288 read_lock_bh(&idev
->lock
);
290 read_unlock_bh(&idev
->lock
);
296 void ipv6_sock_mc_close(struct sock
*sk
)
298 struct ipv6_pinfo
*np
= inet6_sk(sk
);
299 struct ipv6_mc_socklist
*mc_lst
;
300 struct net
*net
= sock_net(sk
);
302 if (!rcu_access_pointer(np
->ipv6_mc_list
))
305 spin_lock(&ipv6_sk_mc_lock
);
306 while ((mc_lst
= rcu_dereference_protected(np
->ipv6_mc_list
,
307 lockdep_is_held(&ipv6_sk_mc_lock
))) != NULL
) {
308 struct net_device
*dev
;
310 np
->ipv6_mc_list
= mc_lst
->next
;
311 spin_unlock(&ipv6_sk_mc_lock
);
314 dev
= dev_get_by_index_rcu(net
, mc_lst
->ifindex
);
316 struct inet6_dev
*idev
= __in6_dev_get(dev
);
318 (void) ip6_mc_leave_src(sk
, mc_lst
, idev
);
320 __ipv6_dev_mc_dec(idev
, &mc_lst
->addr
);
322 (void) ip6_mc_leave_src(sk
, mc_lst
, NULL
);
325 atomic_sub(sizeof(*mc_lst
), &sk
->sk_omem_alloc
);
326 kfree_rcu(mc_lst
, rcu
);
328 spin_lock(&ipv6_sk_mc_lock
);
330 spin_unlock(&ipv6_sk_mc_lock
);
333 int ip6_mc_source(int add
, int omode
, struct sock
*sk
,
334 struct group_source_req
*pgsr
)
336 struct in6_addr
*source
, *group
;
337 struct ipv6_mc_socklist
*pmc
;
338 struct inet6_dev
*idev
;
339 struct ipv6_pinfo
*inet6
= inet6_sk(sk
);
340 struct ip6_sf_socklist
*psl
;
341 struct net
*net
= sock_net(sk
);
347 source
= &((struct sockaddr_in6
*)&pgsr
->gsr_source
)->sin6_addr
;
348 group
= &((struct sockaddr_in6
*)&pgsr
->gsr_group
)->sin6_addr
;
350 if (!ipv6_addr_is_multicast(group
))
354 idev
= ip6_mc_find_dev_rcu(net
, group
, pgsr
->gsr_interface
);
360 err
= -EADDRNOTAVAIL
;
362 for_each_pmc_rcu(inet6
, pmc
) {
363 if (pgsr
->gsr_interface
&& pmc
->ifindex
!= pgsr
->gsr_interface
)
365 if (ipv6_addr_equal(&pmc
->addr
, group
))
368 if (!pmc
) { /* must have a prior join */
372 /* if a source filter was set, must be the same mode as before */
374 if (pmc
->sfmode
!= omode
) {
378 } else if (pmc
->sfmode
!= omode
) {
379 /* allow mode switches for empty-set filters */
380 ip6_mc_add_src(idev
, group
, omode
, 0, NULL
, 0);
381 ip6_mc_del_src(idev
, group
, pmc
->sfmode
, 0, NULL
, 0);
385 write_lock(&pmc
->sflock
);
391 goto done
; /* err = -EADDRNOTAVAIL */
393 for (i
=0; i
<psl
->sl_count
; i
++) {
394 rv
= !ipv6_addr_equal(&psl
->sl_addr
[i
], source
);
398 if (rv
) /* source not found */
399 goto done
; /* err = -EADDRNOTAVAIL */
401 /* special case - (INCLUDE, empty) == LEAVE_GROUP */
402 if (psl
->sl_count
== 1 && omode
== MCAST_INCLUDE
) {
407 /* update the interface filter */
408 ip6_mc_del_src(idev
, group
, omode
, 1, source
, 1);
410 for (j
=i
+1; j
<psl
->sl_count
; j
++)
411 psl
->sl_addr
[j
-1] = psl
->sl_addr
[j
];
416 /* else, add a new source to the filter */
418 if (psl
&& psl
->sl_count
>= sysctl_mld_max_msf
) {
422 if (!psl
|| psl
->sl_count
== psl
->sl_max
) {
423 struct ip6_sf_socklist
*newpsl
;
424 int count
= IP6_SFBLOCK
;
427 count
+= psl
->sl_max
;
428 newpsl
= sock_kmalloc(sk
, IP6_SFLSIZE(count
), GFP_ATOMIC
);
433 newpsl
->sl_max
= count
;
434 newpsl
->sl_count
= count
- IP6_SFBLOCK
;
436 for (i
=0; i
<psl
->sl_count
; i
++)
437 newpsl
->sl_addr
[i
] = psl
->sl_addr
[i
];
438 sock_kfree_s(sk
, psl
, IP6_SFLSIZE(psl
->sl_max
));
440 pmc
->sflist
= psl
= newpsl
;
442 rv
= 1; /* > 0 for insert logic below if sl_count is 0 */
443 for (i
=0; i
<psl
->sl_count
; i
++) {
444 rv
= !ipv6_addr_equal(&psl
->sl_addr
[i
], source
);
445 if (rv
== 0) /* There is an error in the address. */
448 for (j
=psl
->sl_count
-1; j
>=i
; j
--)
449 psl
->sl_addr
[j
+1] = psl
->sl_addr
[j
];
450 psl
->sl_addr
[i
] = *source
;
453 /* update the interface list */
454 ip6_mc_add_src(idev
, group
, omode
, 1, source
, 1);
457 write_unlock(&pmc
->sflock
);
458 read_unlock_bh(&idev
->lock
);
461 return ipv6_sock_mc_drop(sk
, pgsr
->gsr_interface
, group
);
465 int ip6_mc_msfilter(struct sock
*sk
, struct group_filter
*gsf
)
467 const struct in6_addr
*group
;
468 struct ipv6_mc_socklist
*pmc
;
469 struct inet6_dev
*idev
;
470 struct ipv6_pinfo
*inet6
= inet6_sk(sk
);
471 struct ip6_sf_socklist
*newpsl
, *psl
;
472 struct net
*net
= sock_net(sk
);
476 group
= &((struct sockaddr_in6
*)&gsf
->gf_group
)->sin6_addr
;
478 if (!ipv6_addr_is_multicast(group
))
480 if (gsf
->gf_fmode
!= MCAST_INCLUDE
&&
481 gsf
->gf_fmode
!= MCAST_EXCLUDE
)
485 idev
= ip6_mc_find_dev_rcu(net
, group
, gsf
->gf_interface
);
494 if (gsf
->gf_fmode
== MCAST_INCLUDE
&& gsf
->gf_numsrc
== 0) {
499 for_each_pmc_rcu(inet6
, pmc
) {
500 if (pmc
->ifindex
!= gsf
->gf_interface
)
502 if (ipv6_addr_equal(&pmc
->addr
, group
))
505 if (!pmc
) { /* must have a prior join */
509 if (gsf
->gf_numsrc
) {
510 newpsl
= sock_kmalloc(sk
, IP6_SFLSIZE(gsf
->gf_numsrc
),
516 newpsl
->sl_max
= newpsl
->sl_count
= gsf
->gf_numsrc
;
517 for (i
=0; i
<newpsl
->sl_count
; ++i
) {
518 struct sockaddr_in6
*psin6
;
520 psin6
= (struct sockaddr_in6
*)&gsf
->gf_slist
[i
];
521 newpsl
->sl_addr
[i
] = psin6
->sin6_addr
;
523 err
= ip6_mc_add_src(idev
, group
, gsf
->gf_fmode
,
524 newpsl
->sl_count
, newpsl
->sl_addr
, 0);
526 sock_kfree_s(sk
, newpsl
, IP6_SFLSIZE(newpsl
->sl_max
));
531 (void) ip6_mc_add_src(idev
, group
, gsf
->gf_fmode
, 0, NULL
, 0);
534 write_lock(&pmc
->sflock
);
537 (void) ip6_mc_del_src(idev
, group
, pmc
->sfmode
,
538 psl
->sl_count
, psl
->sl_addr
, 0);
539 sock_kfree_s(sk
, psl
, IP6_SFLSIZE(psl
->sl_max
));
541 (void) ip6_mc_del_src(idev
, group
, pmc
->sfmode
, 0, NULL
, 0);
542 pmc
->sflist
= newpsl
;
543 pmc
->sfmode
= gsf
->gf_fmode
;
544 write_unlock(&pmc
->sflock
);
547 read_unlock_bh(&idev
->lock
);
550 err
= ipv6_sock_mc_drop(sk
, gsf
->gf_interface
, group
);
554 int ip6_mc_msfget(struct sock
*sk
, struct group_filter
*gsf
,
555 struct group_filter __user
*optval
, int __user
*optlen
)
557 int err
, i
, count
, copycount
;
558 const struct in6_addr
*group
;
559 struct ipv6_mc_socklist
*pmc
;
560 struct inet6_dev
*idev
;
561 struct ipv6_pinfo
*inet6
= inet6_sk(sk
);
562 struct ip6_sf_socklist
*psl
;
563 struct net
*net
= sock_net(sk
);
565 group
= &((struct sockaddr_in6
*)&gsf
->gf_group
)->sin6_addr
;
567 if (!ipv6_addr_is_multicast(group
))
571 idev
= ip6_mc_find_dev_rcu(net
, group
, gsf
->gf_interface
);
578 err
= -EADDRNOTAVAIL
;
580 * changes to the ipv6_mc_list require the socket lock and
581 * a read lock on ip6_sk_mc_lock. We have the socket lock,
582 * so reading the list is safe.
585 for_each_pmc_rcu(inet6
, pmc
) {
586 if (pmc
->ifindex
!= gsf
->gf_interface
)
588 if (ipv6_addr_equal(group
, &pmc
->addr
))
591 if (!pmc
) /* must have a prior join */
593 gsf
->gf_fmode
= pmc
->sfmode
;
595 count
= psl
? psl
->sl_count
: 0;
596 read_unlock_bh(&idev
->lock
);
599 copycount
= count
< gsf
->gf_numsrc
? count
: gsf
->gf_numsrc
;
600 gsf
->gf_numsrc
= count
;
601 if (put_user(GROUP_FILTER_SIZE(copycount
), optlen
) ||
602 copy_to_user(optval
, gsf
, GROUP_FILTER_SIZE(0))) {
605 /* changes to psl require the socket lock, a read lock on
606 * on ipv6_sk_mc_lock and a write lock on pmc->sflock. We
607 * have the socket lock, so reading here is safe.
609 for (i
=0; i
<copycount
; i
++) {
610 struct sockaddr_in6
*psin6
;
611 struct sockaddr_storage ss
;
613 psin6
= (struct sockaddr_in6
*)&ss
;
614 memset(&ss
, 0, sizeof(ss
));
615 psin6
->sin6_family
= AF_INET6
;
616 psin6
->sin6_addr
= psl
->sl_addr
[i
];
617 if (copy_to_user(&optval
->gf_slist
[i
], &ss
, sizeof(ss
)))
622 read_unlock_bh(&idev
->lock
);
627 bool inet6_mc_check(struct sock
*sk
, const struct in6_addr
*mc_addr
,
628 const struct in6_addr
*src_addr
)
630 struct ipv6_pinfo
*np
= inet6_sk(sk
);
631 struct ipv6_mc_socklist
*mc
;
632 struct ip6_sf_socklist
*psl
;
636 for_each_pmc_rcu(np
, mc
) {
637 if (ipv6_addr_equal(&mc
->addr
, mc_addr
))
644 read_lock(&mc
->sflock
);
647 rv
= mc
->sfmode
== MCAST_EXCLUDE
;
651 for (i
=0; i
<psl
->sl_count
; i
++) {
652 if (ipv6_addr_equal(&psl
->sl_addr
[i
], src_addr
))
655 if (mc
->sfmode
== MCAST_INCLUDE
&& i
>= psl
->sl_count
)
657 if (mc
->sfmode
== MCAST_EXCLUDE
&& i
< psl
->sl_count
)
660 read_unlock(&mc
->sflock
);
666 static void ma_put(struct ifmcaddr6
*mc
)
668 if (atomic_dec_and_test(&mc
->mca_refcnt
)) {
669 in6_dev_put(mc
->idev
);
674 static void igmp6_group_added(struct ifmcaddr6
*mc
)
676 struct net_device
*dev
= mc
->idev
->dev
;
677 char buf
[MAX_ADDR_LEN
];
679 if (IPV6_ADDR_MC_SCOPE(&mc
->mca_addr
) <
680 IPV6_ADDR_SCOPE_LINKLOCAL
)
683 spin_lock_bh(&mc
->mca_lock
);
684 if (!(mc
->mca_flags
&MAF_LOADED
)) {
685 mc
->mca_flags
|= MAF_LOADED
;
686 if (ndisc_mc_map(&mc
->mca_addr
, buf
, dev
, 0) == 0)
687 dev_mc_add(dev
, buf
);
689 spin_unlock_bh(&mc
->mca_lock
);
691 if (!(dev
->flags
& IFF_UP
) || (mc
->mca_flags
& MAF_NOREPORT
))
694 if (mld_in_v1_mode(mc
->idev
)) {
695 igmp6_join_group(mc
);
700 mc
->mca_crcount
= mc
->idev
->mc_qrv
;
701 mld_ifc_event(mc
->idev
);
704 static void igmp6_group_dropped(struct ifmcaddr6
*mc
)
706 struct net_device
*dev
= mc
->idev
->dev
;
707 char buf
[MAX_ADDR_LEN
];
709 if (IPV6_ADDR_MC_SCOPE(&mc
->mca_addr
) <
710 IPV6_ADDR_SCOPE_LINKLOCAL
)
713 spin_lock_bh(&mc
->mca_lock
);
714 if (mc
->mca_flags
&MAF_LOADED
) {
715 mc
->mca_flags
&= ~MAF_LOADED
;
716 if (ndisc_mc_map(&mc
->mca_addr
, buf
, dev
, 0) == 0)
717 dev_mc_del(dev
, buf
);
720 if (mc
->mca_flags
& MAF_NOREPORT
)
722 spin_unlock_bh(&mc
->mca_lock
);
725 igmp6_leave_group(mc
);
727 spin_lock_bh(&mc
->mca_lock
);
728 if (del_timer(&mc
->mca_timer
))
729 atomic_dec(&mc
->mca_refcnt
);
731 ip6_mc_clear_src(mc
);
732 spin_unlock_bh(&mc
->mca_lock
);
736 * deleted ifmcaddr6 manipulation
738 static void mld_add_delrec(struct inet6_dev
*idev
, struct ifmcaddr6
*im
)
740 struct ifmcaddr6
*pmc
;
742 /* this is an "ifmcaddr6" for convenience; only the fields below
743 * are actually used. In particular, the refcnt and users are not
744 * used for management of the delete list. Using the same structure
745 * for deleted items allows change reports to use common code with
746 * non-deleted or query-response MCA's.
748 pmc
= kzalloc(sizeof(*pmc
), GFP_ATOMIC
);
752 spin_lock_bh(&im
->mca_lock
);
753 spin_lock_init(&pmc
->mca_lock
);
754 pmc
->idev
= im
->idev
;
756 pmc
->mca_addr
= im
->mca_addr
;
757 pmc
->mca_crcount
= idev
->mc_qrv
;
758 pmc
->mca_sfmode
= im
->mca_sfmode
;
759 if (pmc
->mca_sfmode
== MCAST_INCLUDE
) {
760 struct ip6_sf_list
*psf
;
762 pmc
->mca_tomb
= im
->mca_tomb
;
763 pmc
->mca_sources
= im
->mca_sources
;
764 im
->mca_tomb
= im
->mca_sources
= NULL
;
765 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
)
766 psf
->sf_crcount
= pmc
->mca_crcount
;
768 spin_unlock_bh(&im
->mca_lock
);
770 spin_lock_bh(&idev
->mc_lock
);
771 pmc
->next
= idev
->mc_tomb
;
773 spin_unlock_bh(&idev
->mc_lock
);
776 static void mld_del_delrec(struct inet6_dev
*idev
, const struct in6_addr
*pmca
)
778 struct ifmcaddr6
*pmc
, *pmc_prev
;
779 struct ip6_sf_list
*psf
, *psf_next
;
781 spin_lock_bh(&idev
->mc_lock
);
783 for (pmc
=idev
->mc_tomb
; pmc
; pmc
=pmc
->next
) {
784 if (ipv6_addr_equal(&pmc
->mca_addr
, pmca
))
790 pmc_prev
->next
= pmc
->next
;
792 idev
->mc_tomb
= pmc
->next
;
794 spin_unlock_bh(&idev
->mc_lock
);
797 for (psf
=pmc
->mca_tomb
; psf
; psf
=psf_next
) {
798 psf_next
= psf
->sf_next
;
801 in6_dev_put(pmc
->idev
);
806 static void mld_clear_delrec(struct inet6_dev
*idev
)
808 struct ifmcaddr6
*pmc
, *nextpmc
;
810 spin_lock_bh(&idev
->mc_lock
);
812 idev
->mc_tomb
= NULL
;
813 spin_unlock_bh(&idev
->mc_lock
);
815 for (; pmc
; pmc
= nextpmc
) {
817 ip6_mc_clear_src(pmc
);
818 in6_dev_put(pmc
->idev
);
822 /* clear dead sources, too */
823 read_lock_bh(&idev
->lock
);
824 for (pmc
=idev
->mc_list
; pmc
; pmc
=pmc
->next
) {
825 struct ip6_sf_list
*psf
, *psf_next
;
827 spin_lock_bh(&pmc
->mca_lock
);
829 pmc
->mca_tomb
= NULL
;
830 spin_unlock_bh(&pmc
->mca_lock
);
831 for (; psf
; psf
=psf_next
) {
832 psf_next
= psf
->sf_next
;
836 read_unlock_bh(&idev
->lock
);
841 * device multicast group inc (add if not found)
843 int ipv6_dev_mc_inc(struct net_device
*dev
, const struct in6_addr
*addr
)
845 struct ifmcaddr6
*mc
;
846 struct inet6_dev
*idev
;
848 /* we need to take a reference on idev */
849 idev
= in6_dev_get(dev
);
854 write_lock_bh(&idev
->lock
);
856 write_unlock_bh(&idev
->lock
);
861 for (mc
= idev
->mc_list
; mc
; mc
= mc
->next
) {
862 if (ipv6_addr_equal(&mc
->mca_addr
, addr
)) {
864 write_unlock_bh(&idev
->lock
);
865 ip6_mc_add_src(idev
, &mc
->mca_addr
, MCAST_EXCLUDE
, 0,
873 * not found: create a new one.
876 mc
= kzalloc(sizeof(struct ifmcaddr6
), GFP_ATOMIC
);
879 write_unlock_bh(&idev
->lock
);
884 setup_timer(&mc
->mca_timer
, igmp6_timer_handler
, (unsigned long)mc
);
886 mc
->mca_addr
= *addr
;
887 mc
->idev
= idev
; /* (reference taken) */
889 /* mca_stamp should be updated upon changes */
890 mc
->mca_cstamp
= mc
->mca_tstamp
= jiffies
;
891 atomic_set(&mc
->mca_refcnt
, 2);
892 spin_lock_init(&mc
->mca_lock
);
894 /* initial mode is (EX, empty) */
895 mc
->mca_sfmode
= MCAST_EXCLUDE
;
896 mc
->mca_sfcount
[MCAST_EXCLUDE
] = 1;
898 if (ipv6_addr_is_ll_all_nodes(&mc
->mca_addr
) ||
899 IPV6_ADDR_MC_SCOPE(&mc
->mca_addr
) < IPV6_ADDR_SCOPE_LINKLOCAL
)
900 mc
->mca_flags
|= MAF_NOREPORT
;
902 mc
->next
= idev
->mc_list
;
904 write_unlock_bh(&idev
->lock
);
906 mld_del_delrec(idev
, &mc
->mca_addr
);
907 igmp6_group_added(mc
);
913 * device multicast group del
915 int __ipv6_dev_mc_dec(struct inet6_dev
*idev
, const struct in6_addr
*addr
)
917 struct ifmcaddr6
*ma
, **map
;
919 write_lock_bh(&idev
->lock
);
920 for (map
= &idev
->mc_list
; (ma
=*map
) != NULL
; map
= &ma
->next
) {
921 if (ipv6_addr_equal(&ma
->mca_addr
, addr
)) {
922 if (--ma
->mca_users
== 0) {
924 write_unlock_bh(&idev
->lock
);
926 igmp6_group_dropped(ma
);
931 write_unlock_bh(&idev
->lock
);
935 write_unlock_bh(&idev
->lock
);
940 int ipv6_dev_mc_dec(struct net_device
*dev
, const struct in6_addr
*addr
)
942 struct inet6_dev
*idev
;
947 idev
= __in6_dev_get(dev
);
951 err
= __ipv6_dev_mc_dec(idev
, addr
);
958 * check if the interface/address pair is valid
960 bool ipv6_chk_mcast_addr(struct net_device
*dev
, const struct in6_addr
*group
,
961 const struct in6_addr
*src_addr
)
963 struct inet6_dev
*idev
;
964 struct ifmcaddr6
*mc
;
968 idev
= __in6_dev_get(dev
);
970 read_lock_bh(&idev
->lock
);
971 for (mc
= idev
->mc_list
; mc
; mc
=mc
->next
) {
972 if (ipv6_addr_equal(&mc
->mca_addr
, group
))
976 if (src_addr
&& !ipv6_addr_any(src_addr
)) {
977 struct ip6_sf_list
*psf
;
979 spin_lock_bh(&mc
->mca_lock
);
980 for (psf
=mc
->mca_sources
;psf
;psf
=psf
->sf_next
) {
981 if (ipv6_addr_equal(&psf
->sf_addr
, src_addr
))
985 rv
= psf
->sf_count
[MCAST_INCLUDE
] ||
986 psf
->sf_count
[MCAST_EXCLUDE
] !=
987 mc
->mca_sfcount
[MCAST_EXCLUDE
];
989 rv
= mc
->mca_sfcount
[MCAST_EXCLUDE
] !=0;
990 spin_unlock_bh(&mc
->mca_lock
);
992 rv
= true; /* don't filter unspecified source */
994 read_unlock_bh(&idev
->lock
);
1000 static void mld_gq_start_timer(struct inet6_dev
*idev
)
1002 unsigned long tv
= prandom_u32() % idev
->mc_maxdelay
;
1004 idev
->mc_gq_running
= 1;
1005 if (!mod_timer(&idev
->mc_gq_timer
, jiffies
+tv
+2))
1009 static void mld_gq_stop_timer(struct inet6_dev
*idev
)
1011 idev
->mc_gq_running
= 0;
1012 if (del_timer(&idev
->mc_gq_timer
))
1013 __in6_dev_put(idev
);
1016 static void mld_ifc_start_timer(struct inet6_dev
*idev
, unsigned long delay
)
1018 unsigned long tv
= prandom_u32() % delay
;
1020 if (!mod_timer(&idev
->mc_ifc_timer
, jiffies
+tv
+2))
1024 static void mld_ifc_stop_timer(struct inet6_dev
*idev
)
1026 idev
->mc_ifc_count
= 0;
1027 if (del_timer(&idev
->mc_ifc_timer
))
1028 __in6_dev_put(idev
);
1031 static void mld_dad_start_timer(struct inet6_dev
*idev
, unsigned long delay
)
1033 unsigned long tv
= prandom_u32() % delay
;
1035 if (!mod_timer(&idev
->mc_dad_timer
, jiffies
+tv
+2))
1039 static void mld_dad_stop_timer(struct inet6_dev
*idev
)
1041 if (del_timer(&idev
->mc_dad_timer
))
1042 __in6_dev_put(idev
);
1046 * IGMP handling (alias multicast ICMPv6 messages)
1049 static void igmp6_group_queried(struct ifmcaddr6
*ma
, unsigned long resptime
)
1051 unsigned long delay
= resptime
;
1053 /* Do not start timer for these addresses */
1054 if (ipv6_addr_is_ll_all_nodes(&ma
->mca_addr
) ||
1055 IPV6_ADDR_MC_SCOPE(&ma
->mca_addr
) < IPV6_ADDR_SCOPE_LINKLOCAL
)
1058 if (del_timer(&ma
->mca_timer
)) {
1059 atomic_dec(&ma
->mca_refcnt
);
1060 delay
= ma
->mca_timer
.expires
- jiffies
;
1063 if (delay
>= resptime
)
1064 delay
= prandom_u32() % resptime
;
1066 ma
->mca_timer
.expires
= jiffies
+ delay
;
1067 if (!mod_timer(&ma
->mca_timer
, jiffies
+ delay
))
1068 atomic_inc(&ma
->mca_refcnt
);
1069 ma
->mca_flags
|= MAF_TIMER_RUNNING
;
1072 /* mark EXCLUDE-mode sources */
1073 static bool mld_xmarksources(struct ifmcaddr6
*pmc
, int nsrcs
,
1074 const struct in6_addr
*srcs
)
1076 struct ip6_sf_list
*psf
;
1080 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
) {
1081 if (scount
== nsrcs
)
1083 for (i
=0; i
<nsrcs
; i
++) {
1084 /* skip inactive filters */
1085 if (psf
->sf_count
[MCAST_INCLUDE
] ||
1086 pmc
->mca_sfcount
[MCAST_EXCLUDE
] !=
1087 psf
->sf_count
[MCAST_EXCLUDE
])
1089 if (ipv6_addr_equal(&srcs
[i
], &psf
->sf_addr
)) {
1095 pmc
->mca_flags
&= ~MAF_GSQUERY
;
1096 if (scount
== nsrcs
) /* all sources excluded */
1101 static bool mld_marksources(struct ifmcaddr6
*pmc
, int nsrcs
,
1102 const struct in6_addr
*srcs
)
1104 struct ip6_sf_list
*psf
;
1107 if (pmc
->mca_sfmode
== MCAST_EXCLUDE
)
1108 return mld_xmarksources(pmc
, nsrcs
, srcs
);
1110 /* mark INCLUDE-mode sources */
1113 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
) {
1114 if (scount
== nsrcs
)
1116 for (i
=0; i
<nsrcs
; i
++) {
1117 if (ipv6_addr_equal(&srcs
[i
], &psf
->sf_addr
)) {
1125 pmc
->mca_flags
&= ~MAF_GSQUERY
;
1128 pmc
->mca_flags
|= MAF_GSQUERY
;
1132 static int mld_force_mld_version(const struct inet6_dev
*idev
)
1134 /* Normally, both are 0 here. If enforcement to a particular is
1135 * being used, individual device enforcement will have a lower
1136 * precedence over 'all' device (.../conf/all/force_mld_version).
1139 if (dev_net(idev
->dev
)->ipv6
.devconf_all
->force_mld_version
!= 0)
1140 return dev_net(idev
->dev
)->ipv6
.devconf_all
->force_mld_version
;
1142 return idev
->cnf
.force_mld_version
;
1145 static bool mld_in_v2_mode_only(const struct inet6_dev
*idev
)
1147 return mld_force_mld_version(idev
) == 2;
1150 static bool mld_in_v1_mode_only(const struct inet6_dev
*idev
)
1152 return mld_force_mld_version(idev
) == 1;
1155 static bool mld_in_v1_mode(const struct inet6_dev
*idev
)
1157 if (mld_in_v2_mode_only(idev
))
1159 if (mld_in_v1_mode_only(idev
))
1161 if (idev
->mc_v1_seen
&& time_before(jiffies
, idev
->mc_v1_seen
))
1167 static void mld_set_v1_mode(struct inet6_dev
*idev
)
1169 /* RFC3810, relevant sections:
1170 * - 9.1. Robustness Variable
1171 * - 9.2. Query Interval
1172 * - 9.3. Query Response Interval
1173 * - 9.12. Older Version Querier Present Timeout
1175 unsigned long switchback
;
1177 switchback
= (idev
->mc_qrv
* idev
->mc_qi
) + idev
->mc_qri
;
1179 idev
->mc_v1_seen
= jiffies
+ switchback
;
1182 static void mld_update_qrv(struct inet6_dev
*idev
,
1183 const struct mld2_query
*mlh2
)
1185 /* RFC3810, relevant sections:
1186 * - 5.1.8. QRV (Querier's Robustness Variable)
1187 * - 9.1. Robustness Variable
1190 /* The value of the Robustness Variable MUST NOT be zero,
1191 * and SHOULD NOT be one. Catch this here if we ever run
1192 * into such a case in future.
1194 WARN_ON(idev
->mc_qrv
== 0);
1196 if (mlh2
->mld2q_qrv
> 0)
1197 idev
->mc_qrv
= mlh2
->mld2q_qrv
;
1199 if (unlikely(idev
->mc_qrv
< 2)) {
1200 net_warn_ratelimited("IPv6: MLD: clamping QRV from %u to %u!\n",
1201 idev
->mc_qrv
, MLD_QRV_DEFAULT
);
1202 idev
->mc_qrv
= MLD_QRV_DEFAULT
;
1206 static void mld_update_qi(struct inet6_dev
*idev
,
1207 const struct mld2_query
*mlh2
)
1209 /* RFC3810, relevant sections:
1210 * - 5.1.9. QQIC (Querier's Query Interval Code)
1211 * - 9.2. Query Interval
1212 * - 9.12. Older Version Querier Present Timeout
1213 * (the [Query Interval] in the last Query received)
1215 unsigned long mc_qqi
;
1217 if (mlh2
->mld2q_qqic
< 128) {
1218 mc_qqi
= mlh2
->mld2q_qqic
;
1220 unsigned long mc_man
, mc_exp
;
1222 mc_exp
= MLDV2_QQIC_EXP(mlh2
->mld2q_qqic
);
1223 mc_man
= MLDV2_QQIC_MAN(mlh2
->mld2q_qqic
);
1225 mc_qqi
= (mc_man
| 0x10) << (mc_exp
+ 3);
1228 idev
->mc_qi
= mc_qqi
* HZ
;
1231 static void mld_update_qri(struct inet6_dev
*idev
,
1232 const struct mld2_query
*mlh2
)
1234 /* RFC3810, relevant sections:
1235 * - 5.1.3. Maximum Response Code
1236 * - 9.3. Query Response Interval
1238 idev
->mc_qri
= msecs_to_jiffies(mldv2_mrc(mlh2
));
1241 static int mld_process_v1(struct inet6_dev
*idev
, struct mld_msg
*mld
,
1242 unsigned long *max_delay
)
1244 unsigned long mldv1_md
;
1246 /* Ignore v1 queries */
1247 if (mld_in_v2_mode_only(idev
))
1250 /* MLDv1 router present */
1251 mldv1_md
= ntohs(mld
->mld_maxdelay
);
1252 *max_delay
= max(msecs_to_jiffies(mldv1_md
), 1UL);
1254 mld_set_v1_mode(idev
);
1256 /* cancel MLDv2 report timer */
1257 mld_gq_stop_timer(idev
);
1258 /* cancel the interface change timer */
1259 mld_ifc_stop_timer(idev
);
1260 /* clear deleted report items */
1261 mld_clear_delrec(idev
);
1266 static int mld_process_v2(struct inet6_dev
*idev
, struct mld2_query
*mld
,
1267 unsigned long *max_delay
)
1269 /* hosts need to stay in MLDv1 mode, discard MLDv2 queries */
1270 if (mld_in_v1_mode(idev
))
1273 *max_delay
= max(msecs_to_jiffies(mldv2_mrc(mld
)), 1UL);
1275 mld_update_qrv(idev
, mld
);
1276 mld_update_qi(idev
, mld
);
1277 mld_update_qri(idev
, mld
);
1279 idev
->mc_maxdelay
= *max_delay
;
1284 /* called with rcu_read_lock() */
1285 int igmp6_event_query(struct sk_buff
*skb
)
1287 struct mld2_query
*mlh2
= NULL
;
1288 struct ifmcaddr6
*ma
;
1289 const struct in6_addr
*group
;
1290 unsigned long max_delay
;
1291 struct inet6_dev
*idev
;
1292 struct mld_msg
*mld
;
1297 if (!pskb_may_pull(skb
, sizeof(struct in6_addr
)))
1300 /* compute payload length excluding extension headers */
1301 len
= ntohs(ipv6_hdr(skb
)->payload_len
) + sizeof(struct ipv6hdr
);
1302 len
-= skb_network_header_len(skb
);
1305 * Upon reception of an MLD message that contains a Query, the node
1306 * checks if the source address of the message is a valid link-local
1307 * address, if the Hop Limit is set to 1, and if the Router Alert
1308 * option is present in the Hop-By-Hop Options header of the IPv6
1309 * packet. If any of these checks fails, the packet is dropped.
1311 if (!(ipv6_addr_type(&ipv6_hdr(skb
)->saddr
) & IPV6_ADDR_LINKLOCAL
) ||
1312 ipv6_hdr(skb
)->hop_limit
!= 1 ||
1313 !(IP6CB(skb
)->flags
& IP6SKB_ROUTERALERT
) ||
1314 IP6CB(skb
)->ra
!= htons(IPV6_OPT_ROUTERALERT_MLD
))
1317 idev
= __in6_dev_get(skb
->dev
);
1321 mld
= (struct mld_msg
*)icmp6_hdr(skb
);
1322 group
= &mld
->mld_mca
;
1323 group_type
= ipv6_addr_type(group
);
1325 if (group_type
!= IPV6_ADDR_ANY
&&
1326 !(group_type
&IPV6_ADDR_MULTICAST
))
1329 if (len
== MLD_V1_QUERY_LEN
) {
1330 err
= mld_process_v1(idev
, mld
, &max_delay
);
1333 } else if (len
>= MLD_V2_QUERY_LEN_MIN
) {
1334 int srcs_offset
= sizeof(struct mld2_query
) -
1335 sizeof(struct icmp6hdr
);
1337 if (!pskb_may_pull(skb
, srcs_offset
))
1340 mlh2
= (struct mld2_query
*)skb_transport_header(skb
);
1342 err
= mld_process_v2(idev
, mlh2
, &max_delay
);
1346 if (group_type
== IPV6_ADDR_ANY
) { /* general query */
1347 if (mlh2
->mld2q_nsrcs
)
1348 return -EINVAL
; /* no sources allowed */
1350 mld_gq_start_timer(idev
);
1353 /* mark sources to include, if group & source-specific */
1354 if (mlh2
->mld2q_nsrcs
!= 0) {
1355 if (!pskb_may_pull(skb
, srcs_offset
+
1356 ntohs(mlh2
->mld2q_nsrcs
) * sizeof(struct in6_addr
)))
1359 mlh2
= (struct mld2_query
*)skb_transport_header(skb
);
1365 read_lock_bh(&idev
->lock
);
1366 if (group_type
== IPV6_ADDR_ANY
) {
1367 for (ma
= idev
->mc_list
; ma
; ma
=ma
->next
) {
1368 spin_lock_bh(&ma
->mca_lock
);
1369 igmp6_group_queried(ma
, max_delay
);
1370 spin_unlock_bh(&ma
->mca_lock
);
1373 for (ma
= idev
->mc_list
; ma
; ma
=ma
->next
) {
1374 if (!ipv6_addr_equal(group
, &ma
->mca_addr
))
1376 spin_lock_bh(&ma
->mca_lock
);
1377 if (ma
->mca_flags
& MAF_TIMER_RUNNING
) {
1378 /* gsquery <- gsquery && mark */
1380 ma
->mca_flags
&= ~MAF_GSQUERY
;
1382 /* gsquery <- mark */
1384 ma
->mca_flags
|= MAF_GSQUERY
;
1386 ma
->mca_flags
&= ~MAF_GSQUERY
;
1388 if (!(ma
->mca_flags
& MAF_GSQUERY
) ||
1389 mld_marksources(ma
, ntohs(mlh2
->mld2q_nsrcs
), mlh2
->mld2q_srcs
))
1390 igmp6_group_queried(ma
, max_delay
);
1391 spin_unlock_bh(&ma
->mca_lock
);
1395 read_unlock_bh(&idev
->lock
);
1400 /* called with rcu_read_lock() */
1401 int igmp6_event_report(struct sk_buff
*skb
)
1403 struct ifmcaddr6
*ma
;
1404 struct inet6_dev
*idev
;
1405 struct mld_msg
*mld
;
1408 /* Our own report looped back. Ignore it. */
1409 if (skb
->pkt_type
== PACKET_LOOPBACK
)
1412 /* send our report if the MC router may not have heard this report */
1413 if (skb
->pkt_type
!= PACKET_MULTICAST
&&
1414 skb
->pkt_type
!= PACKET_BROADCAST
)
1417 if (!pskb_may_pull(skb
, sizeof(*mld
) - sizeof(struct icmp6hdr
)))
1420 mld
= (struct mld_msg
*)icmp6_hdr(skb
);
1422 /* Drop reports with not link local source */
1423 addr_type
= ipv6_addr_type(&ipv6_hdr(skb
)->saddr
);
1424 if (addr_type
!= IPV6_ADDR_ANY
&&
1425 !(addr_type
&IPV6_ADDR_LINKLOCAL
))
1428 idev
= __in6_dev_get(skb
->dev
);
1433 * Cancel the timer for this group
1436 read_lock_bh(&idev
->lock
);
1437 for (ma
= idev
->mc_list
; ma
; ma
=ma
->next
) {
1438 if (ipv6_addr_equal(&ma
->mca_addr
, &mld
->mld_mca
)) {
1439 spin_lock(&ma
->mca_lock
);
1440 if (del_timer(&ma
->mca_timer
))
1441 atomic_dec(&ma
->mca_refcnt
);
1442 ma
->mca_flags
&= ~(MAF_LAST_REPORTER
|MAF_TIMER_RUNNING
);
1443 spin_unlock(&ma
->mca_lock
);
1447 read_unlock_bh(&idev
->lock
);
1451 static bool is_in(struct ifmcaddr6
*pmc
, struct ip6_sf_list
*psf
, int type
,
1452 int gdeleted
, int sdeleted
)
1455 case MLD2_MODE_IS_INCLUDE
:
1456 case MLD2_MODE_IS_EXCLUDE
:
1457 if (gdeleted
|| sdeleted
)
1459 if (!((pmc
->mca_flags
& MAF_GSQUERY
) && !psf
->sf_gsresp
)) {
1460 if (pmc
->mca_sfmode
== MCAST_INCLUDE
)
1462 /* don't include if this source is excluded
1465 if (psf
->sf_count
[MCAST_INCLUDE
])
1466 return type
== MLD2_MODE_IS_INCLUDE
;
1467 return pmc
->mca_sfcount
[MCAST_EXCLUDE
] ==
1468 psf
->sf_count
[MCAST_EXCLUDE
];
1471 case MLD2_CHANGE_TO_INCLUDE
:
1472 if (gdeleted
|| sdeleted
)
1474 return psf
->sf_count
[MCAST_INCLUDE
] != 0;
1475 case MLD2_CHANGE_TO_EXCLUDE
:
1476 if (gdeleted
|| sdeleted
)
1478 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
] == 0 ||
1479 psf
->sf_count
[MCAST_INCLUDE
])
1481 return pmc
->mca_sfcount
[MCAST_EXCLUDE
] ==
1482 psf
->sf_count
[MCAST_EXCLUDE
];
1483 case MLD2_ALLOW_NEW_SOURCES
:
1484 if (gdeleted
|| !psf
->sf_crcount
)
1486 return (pmc
->mca_sfmode
== MCAST_INCLUDE
) ^ sdeleted
;
1487 case MLD2_BLOCK_OLD_SOURCES
:
1488 if (pmc
->mca_sfmode
== MCAST_INCLUDE
)
1489 return gdeleted
|| (psf
->sf_crcount
&& sdeleted
);
1490 return psf
->sf_crcount
&& !gdeleted
&& !sdeleted
;
1496 mld_scount(struct ifmcaddr6
*pmc
, int type
, int gdeleted
, int sdeleted
)
1498 struct ip6_sf_list
*psf
;
1501 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
) {
1502 if (!is_in(pmc
, psf
, type
, gdeleted
, sdeleted
))
1509 static void ip6_mc_hdr(struct sock
*sk
, struct sk_buff
*skb
,
1510 struct net_device
*dev
,
1511 const struct in6_addr
*saddr
,
1512 const struct in6_addr
*daddr
,
1515 struct ipv6hdr
*hdr
;
1517 skb
->protocol
= htons(ETH_P_IPV6
);
1520 skb_reset_network_header(skb
);
1521 skb_put(skb
, sizeof(struct ipv6hdr
));
1522 hdr
= ipv6_hdr(skb
);
1524 ip6_flow_hdr(hdr
, 0, 0);
1526 hdr
->payload_len
= htons(len
);
1527 hdr
->nexthdr
= proto
;
1528 hdr
->hop_limit
= inet6_sk(sk
)->hop_limit
;
1530 hdr
->saddr
= *saddr
;
1531 hdr
->daddr
= *daddr
;
1534 static struct sk_buff
*mld_newpack(struct inet6_dev
*idev
, int size
)
1536 struct net_device
*dev
= idev
->dev
;
1537 struct net
*net
= dev_net(dev
);
1538 struct sock
*sk
= net
->ipv6
.igmp_sk
;
1539 struct sk_buff
*skb
;
1540 struct mld2_report
*pmr
;
1541 struct in6_addr addr_buf
;
1542 const struct in6_addr
*saddr
;
1543 int hlen
= LL_RESERVED_SPACE(dev
);
1544 int tlen
= dev
->needed_tailroom
;
1546 u8 ra
[8] = { IPPROTO_ICMPV6
, 0,
1547 IPV6_TLV_ROUTERALERT
, 2, 0, 0,
1550 /* we assume size > sizeof(ra) here */
1551 size
+= hlen
+ tlen
;
1552 /* limit our allocations to order-0 page */
1553 size
= min_t(int, size
, SKB_MAX_ORDER(0, 0));
1554 skb
= sock_alloc_send_skb(sk
, size
, 1, &err
);
1559 skb
->priority
= TC_PRIO_CONTROL
;
1560 skb_reserve(skb
, hlen
);
1562 if (__ipv6_get_lladdr(idev
, &addr_buf
, IFA_F_TENTATIVE
)) {
1563 /* <draft-ietf-magma-mld-source-05.txt>:
1564 * use unspecified address as the source address
1565 * when a valid link-local address is not available.
1567 saddr
= &in6addr_any
;
1571 ip6_mc_hdr(sk
, skb
, dev
, saddr
, &mld2_all_mcr
, NEXTHDR_HOP
, 0);
1573 memcpy(skb_put(skb
, sizeof(ra
)), ra
, sizeof(ra
));
1575 skb_set_transport_header(skb
, skb_tail_pointer(skb
) - skb
->data
);
1576 skb_put(skb
, sizeof(*pmr
));
1577 pmr
= (struct mld2_report
*)skb_transport_header(skb
);
1578 pmr
->mld2r_type
= ICMPV6_MLD2_REPORT
;
1579 pmr
->mld2r_resv1
= 0;
1580 pmr
->mld2r_cksum
= 0;
1581 pmr
->mld2r_resv2
= 0;
1582 pmr
->mld2r_ngrec
= 0;
1586 static void mld_sendpack(struct sk_buff
*skb
)
1588 struct ipv6hdr
*pip6
= ipv6_hdr(skb
);
1589 struct mld2_report
*pmr
=
1590 (struct mld2_report
*)skb_transport_header(skb
);
1591 int payload_len
, mldlen
;
1592 struct inet6_dev
*idev
;
1593 struct net
*net
= dev_net(skb
->dev
);
1596 struct dst_entry
*dst
;
1599 idev
= __in6_dev_get(skb
->dev
);
1600 IP6_UPD_PO_STATS(net
, idev
, IPSTATS_MIB_OUT
, skb
->len
);
1602 payload_len
= (skb_tail_pointer(skb
) - skb_network_header(skb
)) -
1604 mldlen
= skb_tail_pointer(skb
) - skb_transport_header(skb
);
1605 pip6
->payload_len
= htons(payload_len
);
1607 pmr
->mld2r_cksum
= csum_ipv6_magic(&pip6
->saddr
, &pip6
->daddr
, mldlen
,
1609 csum_partial(skb_transport_header(skb
),
1612 icmpv6_flow_init(net
->ipv6
.igmp_sk
, &fl6
, ICMPV6_MLD2_REPORT
,
1613 &ipv6_hdr(skb
)->saddr
, &ipv6_hdr(skb
)->daddr
,
1615 dst
= icmp6_dst_alloc(skb
->dev
, &fl6
);
1622 skb_dst_set(skb
, dst
);
1626 payload_len
= skb
->len
;
1628 err
= NF_HOOK(NFPROTO_IPV6
, NF_INET_LOCAL_OUT
, skb
, NULL
, skb
->dev
,
1632 ICMP6MSGOUT_INC_STATS(net
, idev
, ICMPV6_MLD2_REPORT
);
1633 ICMP6_INC_STATS(net
, idev
, ICMP6_MIB_OUTMSGS
);
1634 IP6_UPD_PO_STATS(net
, idev
, IPSTATS_MIB_OUTMCAST
, payload_len
);
1636 IP6_INC_STATS(net
, idev
, IPSTATS_MIB_OUTDISCARDS
);
1647 static int grec_size(struct ifmcaddr6
*pmc
, int type
, int gdel
, int sdel
)
1649 return sizeof(struct mld2_grec
) + 16 * mld_scount(pmc
,type
,gdel
,sdel
);
1652 static struct sk_buff
*add_grhead(struct sk_buff
*skb
, struct ifmcaddr6
*pmc
,
1653 int type
, struct mld2_grec
**ppgr
)
1655 struct net_device
*dev
= pmc
->idev
->dev
;
1656 struct mld2_report
*pmr
;
1657 struct mld2_grec
*pgr
;
1660 skb
= mld_newpack(pmc
->idev
, dev
->mtu
);
1663 pgr
= (struct mld2_grec
*)skb_put(skb
, sizeof(struct mld2_grec
));
1664 pgr
->grec_type
= type
;
1665 pgr
->grec_auxwords
= 0;
1666 pgr
->grec_nsrcs
= 0;
1667 pgr
->grec_mca
= pmc
->mca_addr
; /* structure copy */
1668 pmr
= (struct mld2_report
*)skb_transport_header(skb
);
1669 pmr
->mld2r_ngrec
= htons(ntohs(pmr
->mld2r_ngrec
)+1);
1674 #define AVAILABLE(skb) ((skb) ? ((skb)->dev ? (skb)->dev->mtu - (skb)->len : \
1675 skb_tailroom(skb)) : 0)
1677 static struct sk_buff
*add_grec(struct sk_buff
*skb
, struct ifmcaddr6
*pmc
,
1678 int type
, int gdeleted
, int sdeleted
, int crsend
)
1680 struct inet6_dev
*idev
= pmc
->idev
;
1681 struct net_device
*dev
= idev
->dev
;
1682 struct mld2_report
*pmr
;
1683 struct mld2_grec
*pgr
= NULL
;
1684 struct ip6_sf_list
*psf
, *psf_next
, *psf_prev
, **psf_list
;
1685 int scount
, stotal
, first
, isquery
, truncate
;
1687 if (pmc
->mca_flags
& MAF_NOREPORT
)
1690 isquery
= type
== MLD2_MODE_IS_INCLUDE
||
1691 type
== MLD2_MODE_IS_EXCLUDE
;
1692 truncate
= type
== MLD2_MODE_IS_EXCLUDE
||
1693 type
== MLD2_CHANGE_TO_EXCLUDE
;
1695 stotal
= scount
= 0;
1697 psf_list
= sdeleted
? &pmc
->mca_tomb
: &pmc
->mca_sources
;
1702 pmr
= skb
? (struct mld2_report
*)skb_transport_header(skb
) : NULL
;
1704 /* EX and TO_EX get a fresh packet, if needed */
1706 if (pmr
&& pmr
->mld2r_ngrec
&&
1707 AVAILABLE(skb
) < grec_size(pmc
, type
, gdeleted
, sdeleted
)) {
1710 skb
= mld_newpack(idev
, dev
->mtu
);
1715 for (psf
=*psf_list
; psf
; psf
=psf_next
) {
1716 struct in6_addr
*psrc
;
1718 psf_next
= psf
->sf_next
;
1720 if (!is_in(pmc
, psf
, type
, gdeleted
, sdeleted
)) {
1725 /* clear marks on query responses */
1729 if (AVAILABLE(skb
) < sizeof(*psrc
) +
1730 first
*sizeof(struct mld2_grec
)) {
1731 if (truncate
&& !first
)
1732 break; /* truncate these */
1734 pgr
->grec_nsrcs
= htons(scount
);
1737 skb
= mld_newpack(idev
, dev
->mtu
);
1742 skb
= add_grhead(skb
, pmc
, type
, &pgr
);
1747 psrc
= (struct in6_addr
*)skb_put(skb
, sizeof(*psrc
));
1748 *psrc
= psf
->sf_addr
;
1750 if ((type
== MLD2_ALLOW_NEW_SOURCES
||
1751 type
== MLD2_BLOCK_OLD_SOURCES
) && psf
->sf_crcount
) {
1753 if ((sdeleted
|| gdeleted
) && psf
->sf_crcount
== 0) {
1755 psf_prev
->sf_next
= psf
->sf_next
;
1757 *psf_list
= psf
->sf_next
;
1767 if (type
== MLD2_ALLOW_NEW_SOURCES
||
1768 type
== MLD2_BLOCK_OLD_SOURCES
)
1770 if (pmc
->mca_crcount
|| isquery
|| crsend
) {
1771 /* make sure we have room for group header */
1772 if (skb
&& AVAILABLE(skb
) < sizeof(struct mld2_grec
)) {
1774 skb
= NULL
; /* add_grhead will get a new one */
1776 skb
= add_grhead(skb
, pmc
, type
, &pgr
);
1780 pgr
->grec_nsrcs
= htons(scount
);
1783 pmc
->mca_flags
&= ~MAF_GSQUERY
; /* clear query state */
1787 static void mld_send_report(struct inet6_dev
*idev
, struct ifmcaddr6
*pmc
)
1789 struct sk_buff
*skb
= NULL
;
1792 read_lock_bh(&idev
->lock
);
1794 for (pmc
=idev
->mc_list
; pmc
; pmc
=pmc
->next
) {
1795 if (pmc
->mca_flags
& MAF_NOREPORT
)
1797 spin_lock_bh(&pmc
->mca_lock
);
1798 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
])
1799 type
= MLD2_MODE_IS_EXCLUDE
;
1801 type
= MLD2_MODE_IS_INCLUDE
;
1802 skb
= add_grec(skb
, pmc
, type
, 0, 0, 0);
1803 spin_unlock_bh(&pmc
->mca_lock
);
1806 spin_lock_bh(&pmc
->mca_lock
);
1807 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
])
1808 type
= MLD2_MODE_IS_EXCLUDE
;
1810 type
= MLD2_MODE_IS_INCLUDE
;
1811 skb
= add_grec(skb
, pmc
, type
, 0, 0, 0);
1812 spin_unlock_bh(&pmc
->mca_lock
);
1814 read_unlock_bh(&idev
->lock
);
1820 * remove zero-count source records from a source filter list
1822 static void mld_clear_zeros(struct ip6_sf_list
**ppsf
)
1824 struct ip6_sf_list
*psf_prev
, *psf_next
, *psf
;
1827 for (psf
=*ppsf
; psf
; psf
= psf_next
) {
1828 psf_next
= psf
->sf_next
;
1829 if (psf
->sf_crcount
== 0) {
1831 psf_prev
->sf_next
= psf
->sf_next
;
1833 *ppsf
= psf
->sf_next
;
1840 static void mld_send_cr(struct inet6_dev
*idev
)
1842 struct ifmcaddr6
*pmc
, *pmc_prev
, *pmc_next
;
1843 struct sk_buff
*skb
= NULL
;
1846 read_lock_bh(&idev
->lock
);
1847 spin_lock(&idev
->mc_lock
);
1851 for (pmc
=idev
->mc_tomb
; pmc
; pmc
=pmc_next
) {
1852 pmc_next
= pmc
->next
;
1853 if (pmc
->mca_sfmode
== MCAST_INCLUDE
) {
1854 type
= MLD2_BLOCK_OLD_SOURCES
;
1855 dtype
= MLD2_BLOCK_OLD_SOURCES
;
1856 skb
= add_grec(skb
, pmc
, type
, 1, 0, 0);
1857 skb
= add_grec(skb
, pmc
, dtype
, 1, 1, 0);
1859 if (pmc
->mca_crcount
) {
1860 if (pmc
->mca_sfmode
== MCAST_EXCLUDE
) {
1861 type
= MLD2_CHANGE_TO_INCLUDE
;
1862 skb
= add_grec(skb
, pmc
, type
, 1, 0, 0);
1865 if (pmc
->mca_crcount
== 0) {
1866 mld_clear_zeros(&pmc
->mca_tomb
);
1867 mld_clear_zeros(&pmc
->mca_sources
);
1870 if (pmc
->mca_crcount
== 0 && !pmc
->mca_tomb
&&
1871 !pmc
->mca_sources
) {
1873 pmc_prev
->next
= pmc_next
;
1875 idev
->mc_tomb
= pmc_next
;
1876 in6_dev_put(pmc
->idev
);
1881 spin_unlock(&idev
->mc_lock
);
1884 for (pmc
=idev
->mc_list
; pmc
; pmc
=pmc
->next
) {
1885 spin_lock_bh(&pmc
->mca_lock
);
1886 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
]) {
1887 type
= MLD2_BLOCK_OLD_SOURCES
;
1888 dtype
= MLD2_ALLOW_NEW_SOURCES
;
1890 type
= MLD2_ALLOW_NEW_SOURCES
;
1891 dtype
= MLD2_BLOCK_OLD_SOURCES
;
1893 skb
= add_grec(skb
, pmc
, type
, 0, 0, 0);
1894 skb
= add_grec(skb
, pmc
, dtype
, 0, 1, 0); /* deleted sources */
1896 /* filter mode changes */
1897 if (pmc
->mca_crcount
) {
1898 if (pmc
->mca_sfmode
== MCAST_EXCLUDE
)
1899 type
= MLD2_CHANGE_TO_EXCLUDE
;
1901 type
= MLD2_CHANGE_TO_INCLUDE
;
1902 skb
= add_grec(skb
, pmc
, type
, 0, 0, 0);
1905 spin_unlock_bh(&pmc
->mca_lock
);
1907 read_unlock_bh(&idev
->lock
);
1910 (void) mld_sendpack(skb
);
1913 static void igmp6_send(struct in6_addr
*addr
, struct net_device
*dev
, int type
)
1915 struct net
*net
= dev_net(dev
);
1916 struct sock
*sk
= net
->ipv6
.igmp_sk
;
1917 struct inet6_dev
*idev
;
1918 struct sk_buff
*skb
;
1919 struct mld_msg
*hdr
;
1920 const struct in6_addr
*snd_addr
, *saddr
;
1921 struct in6_addr addr_buf
;
1922 int hlen
= LL_RESERVED_SPACE(dev
);
1923 int tlen
= dev
->needed_tailroom
;
1924 int err
, len
, payload_len
, full_len
;
1925 u8 ra
[8] = { IPPROTO_ICMPV6
, 0,
1926 IPV6_TLV_ROUTERALERT
, 2, 0, 0,
1929 struct dst_entry
*dst
;
1931 if (type
== ICMPV6_MGM_REDUCTION
)
1932 snd_addr
= &in6addr_linklocal_allrouters
;
1936 len
= sizeof(struct icmp6hdr
) + sizeof(struct in6_addr
);
1937 payload_len
= len
+ sizeof(ra
);
1938 full_len
= sizeof(struct ipv6hdr
) + payload_len
;
1941 IP6_UPD_PO_STATS(net
, __in6_dev_get(dev
),
1942 IPSTATS_MIB_OUT
, full_len
);
1945 skb
= sock_alloc_send_skb(sk
, hlen
+ tlen
+ full_len
, 1, &err
);
1949 IP6_INC_STATS(net
, __in6_dev_get(dev
),
1950 IPSTATS_MIB_OUTDISCARDS
);
1954 skb
->priority
= TC_PRIO_CONTROL
;
1955 skb_reserve(skb
, hlen
);
1957 if (ipv6_get_lladdr(dev
, &addr_buf
, IFA_F_TENTATIVE
)) {
1958 /* <draft-ietf-magma-mld-source-05.txt>:
1959 * use unspecified address as the source address
1960 * when a valid link-local address is not available.
1962 saddr
= &in6addr_any
;
1966 ip6_mc_hdr(sk
, skb
, dev
, saddr
, snd_addr
, NEXTHDR_HOP
, payload_len
);
1968 memcpy(skb_put(skb
, sizeof(ra
)), ra
, sizeof(ra
));
1970 hdr
= (struct mld_msg
*) skb_put(skb
, sizeof(struct mld_msg
));
1971 memset(hdr
, 0, sizeof(struct mld_msg
));
1972 hdr
->mld_type
= type
;
1973 hdr
->mld_mca
= *addr
;
1975 hdr
->mld_cksum
= csum_ipv6_magic(saddr
, snd_addr
, len
,
1977 csum_partial(hdr
, len
, 0));
1980 idev
= __in6_dev_get(skb
->dev
);
1982 icmpv6_flow_init(sk
, &fl6
, type
,
1983 &ipv6_hdr(skb
)->saddr
, &ipv6_hdr(skb
)->daddr
,
1985 dst
= icmp6_dst_alloc(skb
->dev
, &fl6
);
1991 skb_dst_set(skb
, dst
);
1992 err
= NF_HOOK(NFPROTO_IPV6
, NF_INET_LOCAL_OUT
, skb
, NULL
, skb
->dev
,
1996 ICMP6MSGOUT_INC_STATS(net
, idev
, type
);
1997 ICMP6_INC_STATS(net
, idev
, ICMP6_MIB_OUTMSGS
);
1998 IP6_UPD_PO_STATS(net
, idev
, IPSTATS_MIB_OUTMCAST
, full_len
);
2000 IP6_INC_STATS(net
, idev
, IPSTATS_MIB_OUTDISCARDS
);
2010 static void mld_send_initial_cr(struct inet6_dev
*idev
)
2012 struct sk_buff
*skb
;
2013 struct ifmcaddr6
*pmc
;
2016 if (mld_in_v1_mode(idev
))
2020 read_lock_bh(&idev
->lock
);
2021 for (pmc
=idev
->mc_list
; pmc
; pmc
=pmc
->next
) {
2022 spin_lock_bh(&pmc
->mca_lock
);
2023 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
])
2024 type
= MLD2_CHANGE_TO_EXCLUDE
;
2026 type
= MLD2_CHANGE_TO_INCLUDE
;
2027 skb
= add_grec(skb
, pmc
, type
, 0, 0, 1);
2028 spin_unlock_bh(&pmc
->mca_lock
);
2030 read_unlock_bh(&idev
->lock
);
2035 void ipv6_mc_dad_complete(struct inet6_dev
*idev
)
2037 idev
->mc_dad_count
= idev
->mc_qrv
;
2038 if (idev
->mc_dad_count
) {
2039 mld_send_initial_cr(idev
);
2040 idev
->mc_dad_count
--;
2041 if (idev
->mc_dad_count
)
2042 mld_dad_start_timer(idev
, idev
->mc_maxdelay
);
2046 static void mld_dad_timer_expire(unsigned long data
)
2048 struct inet6_dev
*idev
= (struct inet6_dev
*)data
;
2050 mld_send_initial_cr(idev
);
2051 if (idev
->mc_dad_count
) {
2052 idev
->mc_dad_count
--;
2053 if (idev
->mc_dad_count
)
2054 mld_dad_start_timer(idev
, idev
->mc_maxdelay
);
2059 static int ip6_mc_del1_src(struct ifmcaddr6
*pmc
, int sfmode
,
2060 const struct in6_addr
*psfsrc
)
2062 struct ip6_sf_list
*psf
, *psf_prev
;
2066 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
) {
2067 if (ipv6_addr_equal(&psf
->sf_addr
, psfsrc
))
2071 if (!psf
|| psf
->sf_count
[sfmode
] == 0) {
2072 /* source filter not found, or count wrong => bug */
2075 psf
->sf_count
[sfmode
]--;
2076 if (!psf
->sf_count
[MCAST_INCLUDE
] && !psf
->sf_count
[MCAST_EXCLUDE
]) {
2077 struct inet6_dev
*idev
= pmc
->idev
;
2079 /* no more filters for this source */
2081 psf_prev
->sf_next
= psf
->sf_next
;
2083 pmc
->mca_sources
= psf
->sf_next
;
2084 if (psf
->sf_oldin
&& !(pmc
->mca_flags
& MAF_NOREPORT
) &&
2085 !mld_in_v1_mode(idev
)) {
2086 psf
->sf_crcount
= idev
->mc_qrv
;
2087 psf
->sf_next
= pmc
->mca_tomb
;
2088 pmc
->mca_tomb
= psf
;
2096 static int ip6_mc_del_src(struct inet6_dev
*idev
, const struct in6_addr
*pmca
,
2097 int sfmode
, int sfcount
, const struct in6_addr
*psfsrc
,
2100 struct ifmcaddr6
*pmc
;
2106 read_lock_bh(&idev
->lock
);
2107 for (pmc
=idev
->mc_list
; pmc
; pmc
=pmc
->next
) {
2108 if (ipv6_addr_equal(pmca
, &pmc
->mca_addr
))
2112 /* MCA not found?? bug */
2113 read_unlock_bh(&idev
->lock
);
2116 spin_lock_bh(&pmc
->mca_lock
);
2119 if (!pmc
->mca_sfcount
[sfmode
]) {
2120 spin_unlock_bh(&pmc
->mca_lock
);
2121 read_unlock_bh(&idev
->lock
);
2124 pmc
->mca_sfcount
[sfmode
]--;
2127 for (i
=0; i
<sfcount
; i
++) {
2128 int rv
= ip6_mc_del1_src(pmc
, sfmode
, &psfsrc
[i
]);
2130 changerec
|= rv
> 0;
2134 if (pmc
->mca_sfmode
== MCAST_EXCLUDE
&&
2135 pmc
->mca_sfcount
[MCAST_EXCLUDE
] == 0 &&
2136 pmc
->mca_sfcount
[MCAST_INCLUDE
]) {
2137 struct ip6_sf_list
*psf
;
2139 /* filter mode change */
2140 pmc
->mca_sfmode
= MCAST_INCLUDE
;
2141 pmc
->mca_crcount
= idev
->mc_qrv
;
2142 idev
->mc_ifc_count
= pmc
->mca_crcount
;
2143 for (psf
=pmc
->mca_sources
; psf
; psf
= psf
->sf_next
)
2144 psf
->sf_crcount
= 0;
2145 mld_ifc_event(pmc
->idev
);
2146 } else if (sf_setstate(pmc
) || changerec
)
2147 mld_ifc_event(pmc
->idev
);
2148 spin_unlock_bh(&pmc
->mca_lock
);
2149 read_unlock_bh(&idev
->lock
);
2154 * Add multicast single-source filter to the interface list
2156 static int ip6_mc_add1_src(struct ifmcaddr6
*pmc
, int sfmode
,
2157 const struct in6_addr
*psfsrc
)
2159 struct ip6_sf_list
*psf
, *psf_prev
;
2162 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
) {
2163 if (ipv6_addr_equal(&psf
->sf_addr
, psfsrc
))
2168 psf
= kzalloc(sizeof(*psf
), GFP_ATOMIC
);
2172 psf
->sf_addr
= *psfsrc
;
2174 psf_prev
->sf_next
= psf
;
2176 pmc
->mca_sources
= psf
;
2178 psf
->sf_count
[sfmode
]++;
2182 static void sf_markstate(struct ifmcaddr6
*pmc
)
2184 struct ip6_sf_list
*psf
;
2185 int mca_xcount
= pmc
->mca_sfcount
[MCAST_EXCLUDE
];
2187 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
)
2188 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
]) {
2189 psf
->sf_oldin
= mca_xcount
==
2190 psf
->sf_count
[MCAST_EXCLUDE
] &&
2191 !psf
->sf_count
[MCAST_INCLUDE
];
2193 psf
->sf_oldin
= psf
->sf_count
[MCAST_INCLUDE
] != 0;
2196 static int sf_setstate(struct ifmcaddr6
*pmc
)
2198 struct ip6_sf_list
*psf
, *dpsf
;
2199 int mca_xcount
= pmc
->mca_sfcount
[MCAST_EXCLUDE
];
2200 int qrv
= pmc
->idev
->mc_qrv
;
2204 for (psf
=pmc
->mca_sources
; psf
; psf
=psf
->sf_next
) {
2205 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
]) {
2206 new_in
= mca_xcount
== psf
->sf_count
[MCAST_EXCLUDE
] &&
2207 !psf
->sf_count
[MCAST_INCLUDE
];
2209 new_in
= psf
->sf_count
[MCAST_INCLUDE
] != 0;
2211 if (!psf
->sf_oldin
) {
2212 struct ip6_sf_list
*prev
= NULL
;
2214 for (dpsf
=pmc
->mca_tomb
; dpsf
;
2215 dpsf
=dpsf
->sf_next
) {
2216 if (ipv6_addr_equal(&dpsf
->sf_addr
,
2223 prev
->sf_next
= dpsf
->sf_next
;
2225 pmc
->mca_tomb
= dpsf
->sf_next
;
2228 psf
->sf_crcount
= qrv
;
2231 } else if (psf
->sf_oldin
) {
2232 psf
->sf_crcount
= 0;
2234 * add or update "delete" records if an active filter
2237 for (dpsf
=pmc
->mca_tomb
; dpsf
; dpsf
=dpsf
->sf_next
)
2238 if (ipv6_addr_equal(&dpsf
->sf_addr
,
2242 dpsf
= kmalloc(sizeof(*dpsf
), GFP_ATOMIC
);
2246 /* pmc->mca_lock held by callers */
2247 dpsf
->sf_next
= pmc
->mca_tomb
;
2248 pmc
->mca_tomb
= dpsf
;
2250 dpsf
->sf_crcount
= qrv
;
2258 * Add multicast source filter list to the interface list
2260 static int ip6_mc_add_src(struct inet6_dev
*idev
, const struct in6_addr
*pmca
,
2261 int sfmode
, int sfcount
, const struct in6_addr
*psfsrc
,
2264 struct ifmcaddr6
*pmc
;
2270 read_lock_bh(&idev
->lock
);
2271 for (pmc
=idev
->mc_list
; pmc
; pmc
=pmc
->next
) {
2272 if (ipv6_addr_equal(pmca
, &pmc
->mca_addr
))
2276 /* MCA not found?? bug */
2277 read_unlock_bh(&idev
->lock
);
2280 spin_lock_bh(&pmc
->mca_lock
);
2283 isexclude
= pmc
->mca_sfmode
== MCAST_EXCLUDE
;
2285 pmc
->mca_sfcount
[sfmode
]++;
2287 for (i
=0; i
<sfcount
; i
++) {
2288 err
= ip6_mc_add1_src(pmc
, sfmode
, &psfsrc
[i
]);
2296 pmc
->mca_sfcount
[sfmode
]--;
2298 ip6_mc_del1_src(pmc
, sfmode
, &psfsrc
[j
]);
2299 } else if (isexclude
!= (pmc
->mca_sfcount
[MCAST_EXCLUDE
] != 0)) {
2300 struct ip6_sf_list
*psf
;
2302 /* filter mode change */
2303 if (pmc
->mca_sfcount
[MCAST_EXCLUDE
])
2304 pmc
->mca_sfmode
= MCAST_EXCLUDE
;
2305 else if (pmc
->mca_sfcount
[MCAST_INCLUDE
])
2306 pmc
->mca_sfmode
= MCAST_INCLUDE
;
2307 /* else no filters; keep old mode for reports */
2309 pmc
->mca_crcount
= idev
->mc_qrv
;
2310 idev
->mc_ifc_count
= pmc
->mca_crcount
;
2311 for (psf
=pmc
->mca_sources
; psf
; psf
= psf
->sf_next
)
2312 psf
->sf_crcount
= 0;
2313 mld_ifc_event(idev
);
2314 } else if (sf_setstate(pmc
))
2315 mld_ifc_event(idev
);
2316 spin_unlock_bh(&pmc
->mca_lock
);
2317 read_unlock_bh(&idev
->lock
);
2321 static void ip6_mc_clear_src(struct ifmcaddr6
*pmc
)
2323 struct ip6_sf_list
*psf
, *nextpsf
;
2325 for (psf
=pmc
->mca_tomb
; psf
; psf
=nextpsf
) {
2326 nextpsf
= psf
->sf_next
;
2329 pmc
->mca_tomb
= NULL
;
2330 for (psf
=pmc
->mca_sources
; psf
; psf
=nextpsf
) {
2331 nextpsf
= psf
->sf_next
;
2334 pmc
->mca_sources
= NULL
;
2335 pmc
->mca_sfmode
= MCAST_EXCLUDE
;
2336 pmc
->mca_sfcount
[MCAST_INCLUDE
] = 0;
2337 pmc
->mca_sfcount
[MCAST_EXCLUDE
] = 1;
2341 static void igmp6_join_group(struct ifmcaddr6
*ma
)
2343 unsigned long delay
;
2345 if (ma
->mca_flags
& MAF_NOREPORT
)
2348 igmp6_send(&ma
->mca_addr
, ma
->idev
->dev
, ICMPV6_MGM_REPORT
);
2350 delay
= prandom_u32() % unsolicited_report_interval(ma
->idev
);
2352 spin_lock_bh(&ma
->mca_lock
);
2353 if (del_timer(&ma
->mca_timer
)) {
2354 atomic_dec(&ma
->mca_refcnt
);
2355 delay
= ma
->mca_timer
.expires
- jiffies
;
2358 if (!mod_timer(&ma
->mca_timer
, jiffies
+ delay
))
2359 atomic_inc(&ma
->mca_refcnt
);
2360 ma
->mca_flags
|= MAF_TIMER_RUNNING
| MAF_LAST_REPORTER
;
2361 spin_unlock_bh(&ma
->mca_lock
);
2364 static int ip6_mc_leave_src(struct sock
*sk
, struct ipv6_mc_socklist
*iml
,
2365 struct inet6_dev
*idev
)
2369 /* callers have the socket lock and a write lock on ipv6_sk_mc_lock,
2370 * so no other readers or writers of iml or its sflist
2373 /* any-source empty exclude case */
2374 return ip6_mc_del_src(idev
, &iml
->addr
, iml
->sfmode
, 0, NULL
, 0);
2376 err
= ip6_mc_del_src(idev
, &iml
->addr
, iml
->sfmode
,
2377 iml
->sflist
->sl_count
, iml
->sflist
->sl_addr
, 0);
2378 sock_kfree_s(sk
, iml
->sflist
, IP6_SFLSIZE(iml
->sflist
->sl_max
));
2383 static void igmp6_leave_group(struct ifmcaddr6
*ma
)
2385 if (mld_in_v1_mode(ma
->idev
)) {
2386 if (ma
->mca_flags
& MAF_LAST_REPORTER
)
2387 igmp6_send(&ma
->mca_addr
, ma
->idev
->dev
,
2388 ICMPV6_MGM_REDUCTION
);
2390 mld_add_delrec(ma
->idev
, ma
);
2391 mld_ifc_event(ma
->idev
);
2395 static void mld_gq_timer_expire(unsigned long data
)
2397 struct inet6_dev
*idev
= (struct inet6_dev
*)data
;
2399 idev
->mc_gq_running
= 0;
2400 mld_send_report(idev
, NULL
);
2404 static void mld_ifc_timer_expire(unsigned long data
)
2406 struct inet6_dev
*idev
= (struct inet6_dev
*)data
;
2409 if (idev
->mc_ifc_count
) {
2410 idev
->mc_ifc_count
--;
2411 if (idev
->mc_ifc_count
)
2412 mld_ifc_start_timer(idev
, idev
->mc_maxdelay
);
2417 static void mld_ifc_event(struct inet6_dev
*idev
)
2419 if (mld_in_v1_mode(idev
))
2421 idev
->mc_ifc_count
= idev
->mc_qrv
;
2422 mld_ifc_start_timer(idev
, 1);
2426 static void igmp6_timer_handler(unsigned long data
)
2428 struct ifmcaddr6
*ma
= (struct ifmcaddr6
*) data
;
2430 if (mld_in_v1_mode(ma
->idev
))
2431 igmp6_send(&ma
->mca_addr
, ma
->idev
->dev
, ICMPV6_MGM_REPORT
);
2433 mld_send_report(ma
->idev
, ma
);
2435 spin_lock(&ma
->mca_lock
);
2436 ma
->mca_flags
|= MAF_LAST_REPORTER
;
2437 ma
->mca_flags
&= ~MAF_TIMER_RUNNING
;
2438 spin_unlock(&ma
->mca_lock
);
2442 /* Device changing type */
2444 void ipv6_mc_unmap(struct inet6_dev
*idev
)
2446 struct ifmcaddr6
*i
;
2448 /* Install multicast list, except for all-nodes (already installed) */
2450 read_lock_bh(&idev
->lock
);
2451 for (i
= idev
->mc_list
; i
; i
= i
->next
)
2452 igmp6_group_dropped(i
);
2453 read_unlock_bh(&idev
->lock
);
2456 void ipv6_mc_remap(struct inet6_dev
*idev
)
2461 /* Device going down */
2463 void ipv6_mc_down(struct inet6_dev
*idev
)
2465 struct ifmcaddr6
*i
;
2467 /* Withdraw multicast list */
2469 read_lock_bh(&idev
->lock
);
2470 mld_ifc_stop_timer(idev
);
2471 mld_gq_stop_timer(idev
);
2472 mld_dad_stop_timer(idev
);
2474 for (i
= idev
->mc_list
; i
; i
=i
->next
)
2475 igmp6_group_dropped(i
);
2476 read_unlock_bh(&idev
->lock
);
2478 mld_clear_delrec(idev
);
2482 /* Device going up */
2484 void ipv6_mc_up(struct inet6_dev
*idev
)
2486 struct ifmcaddr6
*i
;
2488 /* Install multicast list, except for all-nodes (already installed) */
2490 read_lock_bh(&idev
->lock
);
2491 for (i
= idev
->mc_list
; i
; i
=i
->next
)
2492 igmp6_group_added(i
);
2493 read_unlock_bh(&idev
->lock
);
2496 /* IPv6 device initialization. */
2498 void ipv6_mc_init_dev(struct inet6_dev
*idev
)
2500 write_lock_bh(&idev
->lock
);
2501 spin_lock_init(&idev
->mc_lock
);
2502 idev
->mc_gq_running
= 0;
2503 setup_timer(&idev
->mc_gq_timer
, mld_gq_timer_expire
,
2504 (unsigned long)idev
);
2505 idev
->mc_tomb
= NULL
;
2506 idev
->mc_ifc_count
= 0;
2507 setup_timer(&idev
->mc_ifc_timer
, mld_ifc_timer_expire
,
2508 (unsigned long)idev
);
2509 setup_timer(&idev
->mc_dad_timer
, mld_dad_timer_expire
,
2510 (unsigned long)idev
);
2512 idev
->mc_qrv
= MLD_QRV_DEFAULT
;
2513 idev
->mc_qi
= MLD_QI_DEFAULT
;
2514 idev
->mc_qri
= MLD_QRI_DEFAULT
;
2516 idev
->mc_maxdelay
= unsolicited_report_interval(idev
);
2517 idev
->mc_v1_seen
= 0;
2518 write_unlock_bh(&idev
->lock
);
2522 * Device is about to be destroyed: clean up.
2525 void ipv6_mc_destroy_dev(struct inet6_dev
*idev
)
2527 struct ifmcaddr6
*i
;
2529 /* Deactivate timers */
2532 /* Delete all-nodes address. */
2533 /* We cannot call ipv6_dev_mc_dec() directly, our caller in
2534 * addrconf.c has NULL'd out dev->ip6_ptr so in6_dev_get() will
2537 __ipv6_dev_mc_dec(idev
, &in6addr_linklocal_allnodes
);
2539 if (idev
->cnf
.forwarding
)
2540 __ipv6_dev_mc_dec(idev
, &in6addr_linklocal_allrouters
);
2542 write_lock_bh(&idev
->lock
);
2543 while ((i
= idev
->mc_list
) != NULL
) {
2544 idev
->mc_list
= i
->next
;
2545 write_unlock_bh(&idev
->lock
);
2547 igmp6_group_dropped(i
);
2550 write_lock_bh(&idev
->lock
);
2552 write_unlock_bh(&idev
->lock
);
2555 #ifdef CONFIG_PROC_FS
2556 struct igmp6_mc_iter_state
{
2557 struct seq_net_private p
;
2558 struct net_device
*dev
;
2559 struct inet6_dev
*idev
;
2562 #define igmp6_mc_seq_private(seq) ((struct igmp6_mc_iter_state *)(seq)->private)
2564 static inline struct ifmcaddr6
*igmp6_mc_get_first(struct seq_file
*seq
)
2566 struct ifmcaddr6
*im
= NULL
;
2567 struct igmp6_mc_iter_state
*state
= igmp6_mc_seq_private(seq
);
2568 struct net
*net
= seq_file_net(seq
);
2571 for_each_netdev_rcu(net
, state
->dev
) {
2572 struct inet6_dev
*idev
;
2573 idev
= __in6_dev_get(state
->dev
);
2576 read_lock_bh(&idev
->lock
);
2582 read_unlock_bh(&idev
->lock
);
2587 static struct ifmcaddr6
*igmp6_mc_get_next(struct seq_file
*seq
, struct ifmcaddr6
*im
)
2589 struct igmp6_mc_iter_state
*state
= igmp6_mc_seq_private(seq
);
2593 if (likely(state
->idev
!= NULL
))
2594 read_unlock_bh(&state
->idev
->lock
);
2596 state
->dev
= next_net_device_rcu(state
->dev
);
2601 state
->idev
= __in6_dev_get(state
->dev
);
2604 read_lock_bh(&state
->idev
->lock
);
2605 im
= state
->idev
->mc_list
;
2610 static struct ifmcaddr6
*igmp6_mc_get_idx(struct seq_file
*seq
, loff_t pos
)
2612 struct ifmcaddr6
*im
= igmp6_mc_get_first(seq
);
2614 while (pos
&& (im
= igmp6_mc_get_next(seq
, im
)) != NULL
)
2616 return pos
? NULL
: im
;
2619 static void *igmp6_mc_seq_start(struct seq_file
*seq
, loff_t
*pos
)
2623 return igmp6_mc_get_idx(seq
, *pos
);
2626 static void *igmp6_mc_seq_next(struct seq_file
*seq
, void *v
, loff_t
*pos
)
2628 struct ifmcaddr6
*im
= igmp6_mc_get_next(seq
, v
);
2634 static void igmp6_mc_seq_stop(struct seq_file
*seq
, void *v
)
2637 struct igmp6_mc_iter_state
*state
= igmp6_mc_seq_private(seq
);
2639 if (likely(state
->idev
!= NULL
)) {
2640 read_unlock_bh(&state
->idev
->lock
);
2647 static int igmp6_mc_seq_show(struct seq_file
*seq
, void *v
)
2649 struct ifmcaddr6
*im
= (struct ifmcaddr6
*)v
;
2650 struct igmp6_mc_iter_state
*state
= igmp6_mc_seq_private(seq
);
2653 "%-4d %-15s %pi6 %5d %08X %ld\n",
2654 state
->dev
->ifindex
, state
->dev
->name
,
2656 im
->mca_users
, im
->mca_flags
,
2657 (im
->mca_flags
&MAF_TIMER_RUNNING
) ?
2658 jiffies_to_clock_t(im
->mca_timer
.expires
-jiffies
) : 0);
2662 static const struct seq_operations igmp6_mc_seq_ops
= {
2663 .start
= igmp6_mc_seq_start
,
2664 .next
= igmp6_mc_seq_next
,
2665 .stop
= igmp6_mc_seq_stop
,
2666 .show
= igmp6_mc_seq_show
,
2669 static int igmp6_mc_seq_open(struct inode
*inode
, struct file
*file
)
2671 return seq_open_net(inode
, file
, &igmp6_mc_seq_ops
,
2672 sizeof(struct igmp6_mc_iter_state
));
2675 static const struct file_operations igmp6_mc_seq_fops
= {
2676 .owner
= THIS_MODULE
,
2677 .open
= igmp6_mc_seq_open
,
2679 .llseek
= seq_lseek
,
2680 .release
= seq_release_net
,
2683 struct igmp6_mcf_iter_state
{
2684 struct seq_net_private p
;
2685 struct net_device
*dev
;
2686 struct inet6_dev
*idev
;
2687 struct ifmcaddr6
*im
;
2690 #define igmp6_mcf_seq_private(seq) ((struct igmp6_mcf_iter_state *)(seq)->private)
2692 static inline struct ip6_sf_list
*igmp6_mcf_get_first(struct seq_file
*seq
)
2694 struct ip6_sf_list
*psf
= NULL
;
2695 struct ifmcaddr6
*im
= NULL
;
2696 struct igmp6_mcf_iter_state
*state
= igmp6_mcf_seq_private(seq
);
2697 struct net
*net
= seq_file_net(seq
);
2701 for_each_netdev_rcu(net
, state
->dev
) {
2702 struct inet6_dev
*idev
;
2703 idev
= __in6_dev_get(state
->dev
);
2704 if (unlikely(idev
== NULL
))
2706 read_lock_bh(&idev
->lock
);
2708 if (likely(im
!= NULL
)) {
2709 spin_lock_bh(&im
->mca_lock
);
2710 psf
= im
->mca_sources
;
2711 if (likely(psf
!= NULL
)) {
2716 spin_unlock_bh(&im
->mca_lock
);
2718 read_unlock_bh(&idev
->lock
);
2723 static struct ip6_sf_list
*igmp6_mcf_get_next(struct seq_file
*seq
, struct ip6_sf_list
*psf
)
2725 struct igmp6_mcf_iter_state
*state
= igmp6_mcf_seq_private(seq
);
2729 spin_unlock_bh(&state
->im
->mca_lock
);
2730 state
->im
= state
->im
->next
;
2731 while (!state
->im
) {
2732 if (likely(state
->idev
!= NULL
))
2733 read_unlock_bh(&state
->idev
->lock
);
2735 state
->dev
= next_net_device_rcu(state
->dev
);
2740 state
->idev
= __in6_dev_get(state
->dev
);
2743 read_lock_bh(&state
->idev
->lock
);
2744 state
->im
= state
->idev
->mc_list
;
2748 spin_lock_bh(&state
->im
->mca_lock
);
2749 psf
= state
->im
->mca_sources
;
2755 static struct ip6_sf_list
*igmp6_mcf_get_idx(struct seq_file
*seq
, loff_t pos
)
2757 struct ip6_sf_list
*psf
= igmp6_mcf_get_first(seq
);
2759 while (pos
&& (psf
= igmp6_mcf_get_next(seq
, psf
)) != NULL
)
2761 return pos
? NULL
: psf
;
2764 static void *igmp6_mcf_seq_start(struct seq_file
*seq
, loff_t
*pos
)
2768 return *pos
? igmp6_mcf_get_idx(seq
, *pos
- 1) : SEQ_START_TOKEN
;
2771 static void *igmp6_mcf_seq_next(struct seq_file
*seq
, void *v
, loff_t
*pos
)
2773 struct ip6_sf_list
*psf
;
2774 if (v
== SEQ_START_TOKEN
)
2775 psf
= igmp6_mcf_get_first(seq
);
2777 psf
= igmp6_mcf_get_next(seq
, v
);
2782 static void igmp6_mcf_seq_stop(struct seq_file
*seq
, void *v
)
2785 struct igmp6_mcf_iter_state
*state
= igmp6_mcf_seq_private(seq
);
2786 if (likely(state
->im
!= NULL
)) {
2787 spin_unlock_bh(&state
->im
->mca_lock
);
2790 if (likely(state
->idev
!= NULL
)) {
2791 read_unlock_bh(&state
->idev
->lock
);
2798 static int igmp6_mcf_seq_show(struct seq_file
*seq
, void *v
)
2800 struct ip6_sf_list
*psf
= (struct ip6_sf_list
*)v
;
2801 struct igmp6_mcf_iter_state
*state
= igmp6_mcf_seq_private(seq
);
2803 if (v
== SEQ_START_TOKEN
) {
2806 "%32s %32s %6s %6s\n", "Idx",
2807 "Device", "Multicast Address",
2808 "Source Address", "INC", "EXC");
2811 "%3d %6.6s %pi6 %pi6 %6lu %6lu\n",
2812 state
->dev
->ifindex
, state
->dev
->name
,
2813 &state
->im
->mca_addr
,
2815 psf
->sf_count
[MCAST_INCLUDE
],
2816 psf
->sf_count
[MCAST_EXCLUDE
]);
2821 static const struct seq_operations igmp6_mcf_seq_ops
= {
2822 .start
= igmp6_mcf_seq_start
,
2823 .next
= igmp6_mcf_seq_next
,
2824 .stop
= igmp6_mcf_seq_stop
,
2825 .show
= igmp6_mcf_seq_show
,
2828 static int igmp6_mcf_seq_open(struct inode
*inode
, struct file
*file
)
2830 return seq_open_net(inode
, file
, &igmp6_mcf_seq_ops
,
2831 sizeof(struct igmp6_mcf_iter_state
));
2834 static const struct file_operations igmp6_mcf_seq_fops
= {
2835 .owner
= THIS_MODULE
,
2836 .open
= igmp6_mcf_seq_open
,
2838 .llseek
= seq_lseek
,
2839 .release
= seq_release_net
,
2842 static int __net_init
igmp6_proc_init(struct net
*net
)
2847 if (!proc_create("igmp6", S_IRUGO
, net
->proc_net
, &igmp6_mc_seq_fops
))
2849 if (!proc_create("mcfilter6", S_IRUGO
, net
->proc_net
,
2850 &igmp6_mcf_seq_fops
))
2851 goto out_proc_net_igmp6
;
2858 remove_proc_entry("igmp6", net
->proc_net
);
2862 static void __net_exit
igmp6_proc_exit(struct net
*net
)
2864 remove_proc_entry("mcfilter6", net
->proc_net
);
2865 remove_proc_entry("igmp6", net
->proc_net
);
2868 static inline int igmp6_proc_init(struct net
*net
)
2872 static inline void igmp6_proc_exit(struct net
*net
)
2877 static int __net_init
igmp6_net_init(struct net
*net
)
2881 err
= inet_ctl_sock_create(&net
->ipv6
.igmp_sk
, PF_INET6
,
2882 SOCK_RAW
, IPPROTO_ICMPV6
, net
);
2884 pr_err("Failed to initialize the IGMP6 control socket (err %d)\n",
2889 inet6_sk(net
->ipv6
.igmp_sk
)->hop_limit
= 1;
2891 err
= igmp6_proc_init(net
);
2893 goto out_sock_create
;
2898 inet_ctl_sock_destroy(net
->ipv6
.igmp_sk
);
2902 static void __net_exit
igmp6_net_exit(struct net
*net
)
2904 inet_ctl_sock_destroy(net
->ipv6
.igmp_sk
);
2905 igmp6_proc_exit(net
);
2908 static struct pernet_operations igmp6_net_ops
= {
2909 .init
= igmp6_net_init
,
2910 .exit
= igmp6_net_exit
,
2913 int __init
igmp6_init(void)
2915 return register_pernet_subsys(&igmp6_net_ops
);
2918 void igmp6_cleanup(void)
2920 unregister_pernet_subsys(&igmp6_net_ops
);