Commit 14f98f25 authored by stephen hemminger's avatar stephen hemminger Committed by David S. Miller
Browse files

bridge: range check STP parameters 



Apply restrictions on STP parameters based 802.1D 1998 standard.
   * Fixes missing locking in set path cost ioctl
   * Uses common code for both ioctl and sysfs

This is based on an earlier patch Sasikanth V but with overhaul.

Note:
1. It does NOT enforce the restriction on the relationship max_age and
   forward delay or hello time because in existing implementation these are
   set as independant operations.

2. If STP is disabled, there is no restriction on forward delay

3. No restriction on holding time because users use Linux code to act
   as hub or be sticky.

4. Although standard allow 0-255, Linux only allows 0-63 for port priority
   because more bits are reserved for port number.

Signed-off-by: default avatarStephen Hemminger <shemminger@vyatta.com>
Signed-off-by: default avatarDavid S. Miller <davem@davemloft.net>
parent bb900b27

net/bridge/br_ioctl.c

+9 −31
Original line number Diff line number Diff line
@@ -181,40 +181,19 @@ static int old_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd) 
		if (!capable(CAP_NET_ADMIN))

			return -EPERM;



		spin_lock_bh(&br->lock);

		br->bridge_forward_delay = clock_t_to_jiffies(args[1]);

		if (br_is_root_bridge(br))

			br->forward_delay = br->bridge_forward_delay;

		spin_unlock_bh(&br->lock);

		return 0;

		return br_set_forward_delay(br, args[1]);



	case BRCTL_SET_BRIDGE_HELLO_TIME:

	{

		unsigned long t = clock_t_to_jiffies(args[1]);

		if (!capable(CAP_NET_ADMIN))

			return -EPERM;



		if (t < HZ)

			return -EINVAL;



		spin_lock_bh(&br->lock);

		br->bridge_hello_time = t;

		if (br_is_root_bridge(br))

			br->hello_time = br->bridge_hello_time;

		spin_unlock_bh(&br->lock);

		return 0;

	}

		return br_set_hello_time(br, args[1]);



	case BRCTL_SET_BRIDGE_MAX_AGE:

		if (!capable(CAP_NET_ADMIN))

			return -EPERM;



		spin_lock_bh(&br->lock);

		br->bridge_max_age = clock_t_to_jiffies(args[1]);

		if (br_is_root_bridge(br))

			br->max_age = br->bridge_max_age;

		spin_unlock_bh(&br->lock);

		return 0;

		return br_set_max_age(br, args[1]);



	case BRCTL_SET_AGEING_TIME:

		if (!capable(CAP_NET_ADMIN))
@@ -275,19 +254,16 @@ static int old_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd) 
	case BRCTL_SET_PORT_PRIORITY:

	{

		struct net_bridge_port *p;

		int ret = 0;

		int ret;



		if (!capable(CAP_NET_ADMIN))

			return -EPERM;



		if (args[2] >= (1<<(16-BR_PORT_BITS)))

			return -ERANGE;



		spin_lock_bh(&br->lock);

		if ((p = br_get_port(br, args[1])) == NULL)

			ret = -EINVAL;

		else

			br_stp_set_port_priority(p, args[2]);

			ret = br_stp_set_port_priority(p, args[2]);

		spin_unlock_bh(&br->lock);

		return ret;

	}
@@ -295,15 +271,17 @@ static int old_dev_ioctl(struct net_device *dev, struct ifreq *rq, int cmd) 
	case BRCTL_SET_PATH_COST:

	{

		struct net_bridge_port *p;

		int ret = 0;

		int ret;



		if (!capable(CAP_NET_ADMIN))

			return -EPERM;



		spin_lock_bh(&br->lock);

		if ((p = br_get_port(br, args[1])) == NULL)

			ret = -EINVAL;

		else

			br_stp_set_path_cost(p, args[2]);

			ret = br_stp_set_path_cost(p, args[2]);

		spin_unlock_bh(&br->lock);



		return ret;

	}

net/bridge/br_private.h

+9 −4
Original line number Diff line number Diff line
@@ -495,6 +495,11 @@ extern struct net_bridge_port *br_get_port(struct net_bridge *br, 
extern void br_init_port(struct net_bridge_port *p);

extern void br_become_designated_port(struct net_bridge_port *p);



extern int br_set_forward_delay(struct net_bridge *br, unsigned long x);

extern int br_set_hello_time(struct net_bridge *br, unsigned long x);

extern int br_set_max_age(struct net_bridge *br, unsigned long x);





/* br_stp_if.c */

extern void br_stp_enable_bridge(struct net_bridge *br);

extern void br_stp_disable_bridge(struct net_bridge *br);
@@ -505,10 +510,10 @@ extern bool br_stp_recalculate_bridge_id(struct net_bridge *br); 
extern void br_stp_change_bridge_id(struct net_bridge *br, const unsigned char *a);

extern void br_stp_set_bridge_priority(struct net_bridge *br,

				       u16 newprio);

extern void br_stp_set_port_priority(struct net_bridge_port *p,

				     u8 newprio);

extern void br_stp_set_path_cost(struct net_bridge_port *p,

				 u32 path_cost);

extern int br_stp_set_port_priority(struct net_bridge_port *p,

				    unsigned long newprio);

extern int br_stp_set_path_cost(struct net_bridge_port *p,

				unsigned long path_cost);

extern ssize_t br_show_bridge_id(char *buf, const struct bridge_id *id);



/* br_stp_bpdu.c */

net/bridge/br_private_stp.h

+13 −0
Original line number Diff line number Diff line
@@ -16,6 +16,19 @@ 
#define BPDU_TYPE_CONFIG 0

#define BPDU_TYPE_TCN 0x80



/* IEEE 802.1D-1998 timer values */

#define BR_MIN_HELLO_TIME	(1*HZ)

#define BR_MAX_HELLO_TIME	(10*HZ)



#define BR_MIN_FORWARD_DELAY	(2*HZ)

#define BR_MAX_FORWARD_DELAY	(30*HZ)



#define BR_MIN_MAX_AGE		(6*HZ)

#define BR_MAX_MAX_AGE		(40*HZ)



#define BR_MIN_PATH_COST	1

#define BR_MAX_PATH_COST	65535



struct br_config_bpdu

{

	unsigned	topology_change:1;

net/bridge/br_stp.c

+48 −0
Original line number Diff line number Diff line
@@ -484,3 +484,51 @@ void br_received_tcn_bpdu(struct net_bridge_port *p) 
		br_topology_change_acknowledge(p);

	}

}



/* Change bridge STP parameter */

int br_set_hello_time(struct net_bridge *br, unsigned long val)

{

	unsigned long t = clock_t_to_jiffies(val);



	if (t < BR_MIN_HELLO_TIME || t > BR_MAX_HELLO_TIME)

		return -ERANGE;



	spin_lock_bh(&br->lock);

	br->bridge_hello_time = t;

	if (br_is_root_bridge(br))

		br->hello_time = br->bridge_hello_time;

	spin_unlock_bh(&br->lock);

	return 0;

}



int br_set_max_age(struct net_bridge *br, unsigned long val)

{

	unsigned long t = clock_t_to_jiffies(val);



	if (t < BR_MIN_MAX_AGE || t > BR_MAX_MAX_AGE)

		return -ERANGE;



	spin_lock_bh(&br->lock);

	br->bridge_max_age = t;

	if (br_is_root_bridge(br))

		br->max_age = br->bridge_max_age;

	spin_unlock_bh(&br->lock);

	return 0;



}



int br_set_forward_delay(struct net_bridge *br, unsigned long val)

{

	unsigned long t = clock_t_to_jiffies(val);



	if (br->stp_enabled != BR_NO_STP &&

	    (t < BR_MIN_FORWARD_DELAY || t > BR_MAX_FORWARD_DELAY))

		return -ERANGE;



	spin_lock_bh(&br->lock);

	br->bridge_forward_delay = t;

	if (br_is_root_bridge(br))

		br->forward_delay = br->bridge_forward_delay;

	spin_unlock_bh(&br->lock);

	return 0;

}

net/bridge/br_stp_if.c

+17 −4
Original line number Diff line number Diff line
@@ -20,7 +20,7 @@ 




/* Port id is composed of priority and port number.

 * NB: least significant bits of priority are dropped to

 * NB: some bits of priority are dropped to

 *     make room for more ports.

 */

static inline port_id br_make_port_id(__u8 priority, __u16 port_no)
@@ -29,6 +29,8 @@ static inline port_id br_make_port_id(__u8 priority, __u16 port_no) 
		| (port_no & ((1<<BR_PORT_BITS)-1));

}



#define BR_MAX_PORT_PRIORITY ((u16)~0 >> BR_PORT_BITS)



/* called under bridge lock */

void br_init_port(struct net_bridge_port *p)

{
@@ -255,10 +257,14 @@ void br_stp_set_bridge_priority(struct net_bridge *br, u16 newprio) 
}



/* called under bridge lock */

void br_stp_set_port_priority(struct net_bridge_port *p, u8 newprio)

int br_stp_set_port_priority(struct net_bridge_port *p, unsigned long newprio)

{

	port_id new_port_id = br_make_port_id(newprio, p->port_no);

	port_id new_port_id;



	if (newprio > BR_MAX_PORT_PRIORITY)

		return -ERANGE;



	new_port_id = br_make_port_id(newprio, p->port_no);

	if (br_is_designated_port(p))

		p->designated_port = new_port_id;
@@ -269,14 +275,21 @@ void br_stp_set_port_priority(struct net_bridge_port *p, u8 newprio) 
		br_become_designated_port(p);

		br_port_state_selection(p->br);

	}



	return 0;

}



/* called under bridge lock */

void br_stp_set_path_cost(struct net_bridge_port *p, u32 path_cost)

int br_stp_set_path_cost(struct net_bridge_port *p, unsigned long path_cost)

{

	if (path_cost < BR_MIN_PATH_COST ||

	    path_cost > BR_MAX_PATH_COST)

		return -ERANGE;



	p->path_cost = path_cost;

	br_configuration_update(p->br);

	br_port_state_selection(p->br);

	return 0;

}



ssize_t br_show_bridge_id(char *buf, const struct bridge_id *id)

CRA Git | Maintained and supported by SUSTech CRA and CCSE