cregit-Linux how code gets into the kernel

Release 4.8 net/sched/cls_flower.c

Directory: net/sched
/*
 * net/sched/cls_flower.c               Flower classifier
 *
 * Copyright (c) 2015 Jiri Pirko <jiri@resnulli.us>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License as published by
 * the Free Software Foundation; either version 2 of the License, or
 * (at your option) any later version.
 */

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/rhashtable.h>

#include <linux/if_ether.h>
#include <linux/in6.h>
#include <linux/ip.h>

#include <net/sch_generic.h>
#include <net/pkt_cls.h>
#include <net/ip.h>
#include <net/flow_dissector.h>


struct fl_flow_key {
	
int	indev_ifindex;
	
struct flow_dissector_key_control control;
	
struct flow_dissector_key_basic basic;
	
struct flow_dissector_key_eth_addrs eth;
	
struct flow_dissector_key_addrs ipaddrs;
	union {
		
struct flow_dissector_key_ipv4_addrs ipv4;
		
struct flow_dissector_key_ipv6_addrs ipv6;
	};
	
struct flow_dissector_key_ports tp;
} __aligned(BITS_PER_LONG / 8); /* Ensure that we can do comparisons as longs. */


struct fl_flow_mask_range {
	
unsigned short int start;
	
unsigned short int end;
};


struct fl_flow_mask {
	
struct fl_flow_key key;
	
struct fl_flow_mask_range range;
	
struct rcu_head	rcu;
};


struct cls_fl_head {
	
struct rhashtable ht;
	
struct fl_flow_mask mask;
	
struct flow_dissector dissector;
	
u32 hgen;
	
bool mask_assigned;
	
struct list_head filters;
	
struct rhashtable_params ht_params;
	
struct rcu_head rcu;
};


struct cls_fl_filter {
	
struct rhash_head ht_node;
	
struct fl_flow_key mkey;
	
struct tcf_exts exts;
	
struct tcf_result res;
	
struct fl_flow_key key;
	
struct list_head list;
	
u32 handle;
	
u32 flags;
	
struct rcu_head	rcu;
};


static unsigned short int fl_mask_range(const struct fl_flow_mask *mask) { return mask->range.end - mask->range.start; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko27100.00%1100.00%
Total27100.00%1100.00%


static void fl_mask_update_range(struct fl_flow_mask *mask) { const u8 *bytes = (const u8 *) &mask->key; size_t size = sizeof(mask->key); size_t i, first = 0, last = size - 1; for (i = 0; i < sizeof(mask->key); i++) { if (bytes[i]) { if (!first && i) first = i; last = i; } } mask->range.start = rounddown(first, sizeof(long)); mask->range.end = roundup(last + 1, sizeof(long)); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko127100.00%1100.00%
Total127100.00%1100.00%


static void *fl_key_get_start(struct fl_flow_key *key, const struct fl_flow_mask *mask) { return (u8 *) key + mask->range.start; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko31100.00%1100.00%
Total31100.00%1100.00%


static void fl_set_masked_key(struct fl_flow_key *mkey, struct fl_flow_key *key, struct fl_flow_mask *mask) { const long *lkey = fl_key_get_start(key, mask); const long *lmask = fl_key_get_start(&mask->key, mask); long *lmkey = fl_key_get_start(mkey, mask); int i; for (i = 0; i < fl_mask_range(mask); i += sizeof(long)) *lmkey++ = *lkey++ & *lmask++; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko94100.00%1100.00%
Total94100.00%1100.00%


static void fl_clear_masked_range(struct fl_flow_key *key, struct fl_flow_mask *mask) { memset(fl_key_get_start(key, mask), 0, fl_mask_range(mask)); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko33100.00%1100.00%
Total33100.00%1100.00%


static int fl_classify(struct sk_buff *skb, const struct tcf_proto *tp, struct tcf_result *res) { struct cls_fl_head *head = rcu_dereference_bh(tp->root); struct cls_fl_filter *f; struct fl_flow_key skb_key; struct fl_flow_key skb_mkey; if (!atomic_read(&head->ht.nelems)) return -1; fl_clear_masked_range(&skb_key, &head->mask); skb_key.indev_ifindex = skb->skb_iif; /* skb_flow_dissect() does not set n_proto in case an unknown protocol, * so do it rather here. */ skb_key.basic.n_proto = skb->protocol; skb_flow_dissect(skb, &head->dissector, &skb_key, 0); fl_set_masked_key(&skb_mkey, &skb_key, &head->mask); f = rhashtable_lookup_fast(&head->ht, fl_key_get_start(&skb_mkey, &head->mask), head->ht_params); if (f && !tc_skip_sw(f->flags)) { *res = f->res; return tcf_exts_exec(skb, &f->exts, res); } return -1; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko15985.48%125.00%
amir vadaiamir vadai2513.44%250.00%
tom herberttom herbert21.08%125.00%
Total186100.00%4100.00%


static int fl_init(struct tcf_proto *tp) { struct cls_fl_head *head; head = kzalloc(sizeof(*head), GFP_KERNEL); if (!head) return -ENOBUFS; INIT_LIST_HEAD_RCU(&head->filters); rcu_assign_pointer(tp->root, head); return 0; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko58100.00%1100.00%
Total58100.00%1100.00%


static void fl_destroy_filter(struct rcu_head *head) { struct cls_fl_filter *f = container_of(head, struct cls_fl_filter, rcu); tcf_exts_destroy(&f->exts); kfree(f); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko39100.00%1100.00%
Total39100.00%1100.00%


static void fl_hw_destroy_filter(struct tcf_proto *tp, unsigned long cookie) { struct net_device *dev = tp->q->dev_queue->dev; struct tc_cls_flower_offload offload = {0}; struct tc_to_netdev tc; if (!tc_should_offload(dev, tp, 0)) return; offload.command = TC_CLSFLOWER_DESTROY; offload.cookie = cookie; tc.type = TC_SETUP_CLSFLOWER; tc.cls_flower = &offload; dev->netdev_ops->ndo_setup_tc(dev, tp->q->handle, tp->protocol, &tc); }

Contributors

PersonTokensPropCommitsCommitProp
amir vadaiamir vadai9898.00%266.67%
daniel borkmanndaniel borkmann22.00%133.33%
Total100100.00%3100.00%


static int fl_hw_replace_filter(struct tcf_proto *tp, struct flow_dissector *dissector, struct fl_flow_key *mask, struct fl_flow_key *key, struct tcf_exts *actions, unsigned long cookie, u32 flags) { struct net_device *dev = tp->q->dev_queue->dev; struct tc_cls_flower_offload offload = {0}; struct tc_to_netdev tc; int err; if (!tc_should_offload(dev, tp, flags)) return tc_skip_sw(flags) ? -EINVAL : 0; offload.command = TC_CLSFLOWER_REPLACE; offload.cookie = cookie; offload.dissector = dissector; offload.mask = mask; offload.key = key; offload.exts = actions; tc.type = TC_SETUP_CLSFLOWER; tc.cls_flower = &offload; err = dev->netdev_ops->ndo_setup_tc(dev, tp->q->handle, tp->protocol, &tc); if (tc_skip_sw(flags)) return err; return 0; }

Contributors

PersonTokensPropCommitsCommitProp
amir vadaiamir vadai17398.86%375.00%
daniel borkmanndaniel borkmann21.14%125.00%
Total175100.00%4100.00%


static void fl_hw_update_stats(struct tcf_proto *tp, struct cls_fl_filter *f) { struct net_device *dev = tp->q->dev_queue->dev; struct tc_cls_flower_offload offload = {0}; struct tc_to_netdev tc; if (!tc_should_offload(dev, tp, 0)) return; offload.command = TC_CLSFLOWER_STATS; offload.cookie = (unsigned long)f; offload.exts = &f->exts; tc.type = TC_SETUP_CLSFLOWER; tc.cls_flower = &offload; dev->netdev_ops->ndo_setup_tc(dev, tp->q->handle, tp->protocol, &tc); }

Contributors

PersonTokensPropCommitsCommitProp
amir vadaiamir vadai11298.25%150.00%
daniel borkmanndaniel borkmann21.75%150.00%
Total114100.00%2100.00%


static bool fl_destroy(struct tcf_proto *tp, bool force) { struct cls_fl_head *head = rtnl_dereference(tp->root); struct cls_fl_filter *f, *next; if (!force && !list_empty(&head->filters)) return false; list_for_each_entry_safe(f, next, &head->filters, list) { fl_hw_destroy_filter(tp, (unsigned long)f); list_del_rcu(&f->list); call_rcu(&f->rcu, fl_destroy_filter); } RCU_INIT_POINTER(tp->root, NULL); if (head->mask_assigned) rhashtable_destroy(&head->ht); kfree_rcu(head, rcu); return true; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko11491.20%133.33%
amir vadaiamir vadai118.80%266.67%
Total125100.00%3100.00%


static unsigned long fl_get(struct tcf_proto *tp, u32 handle) { struct cls_fl_head *head = rtnl_dereference(tp->root); struct cls_fl_filter *f; list_for_each_entry(f, &head->filters, list) if (f->handle == handle) return (unsigned long) f; return 0; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko58100.00%1100.00%
Total58100.00%1100.00%

static const struct nla_policy fl_policy[TCA_FLOWER_MAX + 1] = { [TCA_FLOWER_UNSPEC] = { .type = NLA_UNSPEC }, [TCA_FLOWER_CLASSID] = { .type = NLA_U32 }, [TCA_FLOWER_INDEV] = { .type = NLA_STRING, .len = IFNAMSIZ }, [TCA_FLOWER_KEY_ETH_DST] = { .len = ETH_ALEN }, [TCA_FLOWER_KEY_ETH_DST_MASK] = { .len = ETH_ALEN }, [TCA_FLOWER_KEY_ETH_SRC] = { .len = ETH_ALEN }, [TCA_FLOWER_KEY_ETH_SRC_MASK] = { .len = ETH_ALEN }, [TCA_FLOWER_KEY_ETH_TYPE] = { .type = NLA_U16 }, [TCA_FLOWER_KEY_IP_PROTO] = { .type = NLA_U8 }, [TCA_FLOWER_KEY_IPV4_SRC] = { .type = NLA_U32 }, [TCA_FLOWER_KEY_IPV4_SRC_MASK] = { .type = NLA_U32 }, [TCA_FLOWER_KEY_IPV4_DST] = { .type = NLA_U32 }, [TCA_FLOWER_KEY_IPV4_DST_MASK] = { .type = NLA_U32 }, [TCA_FLOWER_KEY_IPV6_SRC] = { .len = sizeof(struct in6_addr) }, [TCA_FLOWER_KEY_IPV6_SRC_MASK] = { .len = sizeof(struct in6_addr) }, [TCA_FLOWER_KEY_IPV6_DST] = { .len = sizeof(struct in6_addr) }, [TCA_FLOWER_KEY_IPV6_DST_MASK] = { .len = sizeof(struct in6_addr) }, [TCA_FLOWER_KEY_TCP_SRC] = { .type = NLA_U16 }, [TCA_FLOWER_KEY_TCP_DST] = { .type = NLA_U16 }, [TCA_FLOWER_KEY_UDP_SRC] = { .type = NLA_U16 }, [TCA_FLOWER_KEY_UDP_DST] = { .type = NLA_U16 }, };
static void fl_set_key_val(struct nlattr **tb, void *val, int val_type, void *mask, int mask_type, int len) { if (!tb[val_type]) return; memcpy(val, nla_data(tb[val_type]), len); if (mask_type == TCA_FLOWER_UNSPEC || !tb[mask_type]) memset(mask, 0xff, len); else memcpy(mask, nla_data(tb[mask_type]), len); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko90100.00%1100.00%
Total90100.00%1100.00%


static int fl_set_key(struct net *net, struct nlattr **tb, struct fl_flow_key *key, struct fl_flow_key *mask) { #ifdef CONFIG_NET_CLS_IND if (tb[TCA_FLOWER_INDEV]) { int err = tcf_change_indev(net, tb[TCA_FLOWER_INDEV]); if (err < 0) return err; key->indev_ifindex = err; mask->indev_ifindex = 0xffffffff; } #endif fl_set_key_val(tb, key->eth.dst, TCA_FLOWER_KEY_ETH_DST, mask->eth.dst, TCA_FLOWER_KEY_ETH_DST_MASK, sizeof(key->eth.dst)); fl_set_key_val(tb, key->eth.src, TCA_FLOWER_KEY_ETH_SRC, mask->eth.src, TCA_FLOWER_KEY_ETH_SRC_MASK, sizeof(key->eth.src)); fl_set_key_val(tb, &key->basic.n_proto, TCA_FLOWER_KEY_ETH_TYPE, &mask->basic.n_proto, TCA_FLOWER_UNSPEC, sizeof(key->basic.n_proto)); if (key->basic.n_proto == htons(ETH_P_IP) || key->basic.n_proto == htons(ETH_P_IPV6)) { fl_set_key_val(tb, &key->basic.ip_proto, TCA_FLOWER_KEY_IP_PROTO, &mask->basic.ip_proto, TCA_FLOWER_UNSPEC, sizeof(key->basic.ip_proto)); } if (tb[TCA_FLOWER_KEY_IPV4_SRC] || tb[TCA_FLOWER_KEY_IPV4_DST]) { key->control.addr_type = FLOW_DISSECTOR_KEY_IPV4_ADDRS; fl_set_key_val(tb, &key->ipv4.src, TCA_FLOWER_KEY_IPV4_SRC, &mask->ipv4.src, TCA_FLOWER_KEY_IPV4_SRC_MASK, sizeof(key->ipv4.src)); fl_set_key_val(tb, &key->ipv4.dst, TCA_FLOWER_KEY_IPV4_DST, &mask->ipv4.dst, TCA_FLOWER_KEY_IPV4_DST_MASK, sizeof(key->ipv4.dst)); } else if (tb[TCA_FLOWER_KEY_IPV6_SRC] || tb[TCA_FLOWER_KEY_IPV6_DST]) { key->control.addr_type = FLOW_DISSECTOR_KEY_IPV6_ADDRS; fl_set_key_val(tb, &key->ipv6.src, TCA_FLOWER_KEY_IPV6_SRC, &mask->ipv6.src, TCA_FLOWER_KEY_IPV6_SRC_MASK, sizeof(key->ipv6.src)); fl_set_key_val(tb, &key->ipv6.dst, TCA_FLOWER_KEY_IPV6_DST, &mask->ipv6.dst, TCA_FLOWER_KEY_IPV6_DST_MASK, sizeof(key->ipv6.dst)); } if (key->basic.ip_proto == IPPROTO_TCP) { fl_set_key_val(tb, &key->tp.src, TCA_FLOWER_KEY_TCP_SRC, &mask->tp.src, TCA_FLOWER_UNSPEC, sizeof(key->tp.src)); fl_set_key_val(tb, &key->tp.dst, TCA_FLOWER_KEY_TCP_DST, &mask->tp.dst, TCA_FLOWER_UNSPEC, sizeof(key->tp.dst)); } else if (key->basic.ip_proto == IPPROTO_UDP) { fl_set_key_val(tb, &key->tp.src, TCA_FLOWER_KEY_UDP_SRC, &mask->tp.src, TCA_FLOWER_UNSPEC, sizeof(key->tp.src)); fl_set_key_val(tb, &key->tp.dst, TCA_FLOWER_KEY_UDP_DST, &mask->tp.dst, TCA_FLOWER_UNSPEC, sizeof(key->tp.dst)); } return 0; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko51492.78%125.00%
jamal hadi salimjamal hadi salim264.69%125.00%
brian haleybrian haley81.44%125.00%
tom herberttom herbert61.08%125.00%
Total554100.00%4100.00%


static bool fl_mask_eq(struct fl_flow_mask *mask1, struct fl_flow_mask *mask2) { const long *lmask1 = fl_key_get_start(&mask1->key, mask1); const long *lmask2 = fl_key_get_start(&mask2->key, mask2); return !memcmp(&mask1->range, &mask2->range, sizeof(mask1->range)) && !memcmp(lmask1, lmask2, fl_mask_range(mask1)); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko81100.00%1100.00%
Total81100.00%1100.00%

static const struct rhashtable_params fl_ht_params = { .key_offset = offsetof(struct cls_fl_filter, mkey), /* base offset */ .head_offset = offsetof(struct cls_fl_filter, ht_node), .automatic_shrinking = true, };
static int fl_init_hashtable(struct cls_fl_head *head, struct fl_flow_mask *mask) { head->ht_params = fl_ht_params; head->ht_params.key_len = fl_mask_range(mask); head->ht_params.key_offset += mask->range.start; return rhashtable_init(&head->ht, &head->ht_params); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko59100.00%1100.00%
Total59100.00%1100.00%

#define FL_KEY_MEMBER_OFFSET(member) offsetof(struct fl_flow_key, member) #define FL_KEY_MEMBER_SIZE(member) (sizeof(((struct fl_flow_key *) 0)->member)) #define FL_KEY_MEMBER_END_OFFSET(member) \ (FL_KEY_MEMBER_OFFSET(member) + FL_KEY_MEMBER_SIZE(member)) #define FL_KEY_IN_RANGE(mask, member) \ (FL_KEY_MEMBER_OFFSET(member) <= (mask)->range.end && \ FL_KEY_MEMBER_END_OFFSET(member) >= (mask)->range.start) #define FL_KEY_SET(keys, cnt, id, member) \ do { \ keys[cnt].key_id = id; \ keys[cnt].offset = FL_KEY_MEMBER_OFFSET(member); \ cnt++; \ } while(0); #define FL_KEY_SET_IF_IN_RANGE(mask, keys, cnt, id, member) \ do { \ if (FL_KEY_IN_RANGE(mask, member)) \ FL_KEY_SET(keys, cnt, id, member); \ } while(0);
static void fl_init_dissector(struct cls_fl_head *head, struct fl_flow_mask *mask) { struct flow_dissector_key keys[FLOW_DISSECTOR_KEY_MAX]; size_t cnt = 0; FL_KEY_SET(keys, cnt, FLOW_DISSECTOR_KEY_CONTROL, control); FL_KEY_SET(keys, cnt, FLOW_DISSECTOR_KEY_BASIC, basic); FL_KEY_SET_IF_IN_RANGE(mask, keys, cnt, FLOW_DISSECTOR_KEY_ETH_ADDRS, eth); FL_KEY_SET_IF_IN_RANGE(mask, keys, cnt, FLOW_DISSECTOR_KEY_IPV4_ADDRS, ipv4); FL_KEY_SET_IF_IN_RANGE(mask, keys, cnt, FLOW_DISSECTOR_KEY_IPV6_ADDRS, ipv6); FL_KEY_SET_IF_IN_RANGE(mask, keys, cnt, FLOW_DISSECTOR_KEY_PORTS, tp); skb_flow_dissector_init(&head->dissector, keys, cnt); }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko10390.35%150.00%
tom herberttom herbert119.65%150.00%
Total114100.00%2100.00%


static int fl_check_assign_mask(struct cls_fl_head *head, struct fl_flow_mask *mask) { int err; if (head->mask_assigned) { if (!fl_mask_eq(&head->mask, mask)) return -EINVAL; else return 0; } /* Mask is not assigned yet. So assign it and init hashtable * according to that. */ err = fl_init_hashtable(head, mask); if (err) return err; memcpy(&head->mask, mask, sizeof(head->mask)); head->mask_assigned = true; fl_init_dissector(head, mask); return 0; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko98100.00%1100.00%
Total98100.00%1100.00%


static int fl_set_parms(struct net *net, struct tcf_proto *tp, struct cls_fl_filter *f, struct fl_flow_mask *mask, unsigned long base, struct nlattr **tb, struct nlattr *est, bool ovr) { struct tcf_exts e; int err; tcf_exts_init(&e, TCA_FLOWER_ACT, 0); err = tcf_exts_validate(net, tp, tb, est, &e, ovr); if (err < 0) return err; if (tb[TCA_FLOWER_CLASSID]) { f->res.classid = nla_get_u32(tb[TCA_FLOWER_CLASSID]); tcf_bind_filter(tp, &f->res, base); } err = fl_set_key(net, tb, &f->key, &mask->key); if (err) goto errout; fl_mask_update_range(mask); fl_set_masked_key(&f->mkey, &f->key, mask); tcf_exts_change(tp, &f->exts, &e); return 0; errout: tcf_exts_destroy(&e); return err; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko196100.00%1100.00%
Total196100.00%1100.00%


static u32 fl_grab_new_handle(struct tcf_proto *tp, struct cls_fl_head *head) { unsigned int i = 0x80000000; u32 handle; do { if (++head->hgen == 0x7FFFFFFF) head->hgen = 1; } while (--i > 0 && fl_get(tp, head->hgen)); if (unlikely(i == 0)) { pr_err("Insufficient number of handles\n"); handle = 0; } else { handle = head->hgen; } return handle; }

Contributors

PersonTokensPropCommitsCommitProp
jiri pirkojiri pirko92100.00%1100.00%
Total92100.00%1100.00%


static int fl_change(struct net *net, struct sk_buff *in_skb, struct tcf_proto *tp, unsigned long base, u32 handle, struct nlattr **tca, unsigned long *arg, bool ovr) {