2 * Neighbour Discovery for IPv6
3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
7 * Mike Shaver <shaver@ingenia.com>
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License
11 * as published by the Free Software Foundation; either version
12 * 2 of the License, or (at your option) any later version.
18 * Lars Fenneberg : fixed MTU setting on receipt
21 * Janos Farkas : kmalloc failure checks
22 * Alexey Kuznetsov : state machine reworked
23 * and moved to net/core.
24 * Pekka Savola : RFC2461 validation
25 * YOSHIFUJI Hideaki @USAGI : Verify ND options properly
28 /* Set to 3 to get tracing... */
31 #define ND_PRINTK(fmt, args...) do { if (net_ratelimit()) { printk(fmt, ## args); } } while(0)
32 #define ND_NOPRINTK(x...) do { ; } while(0)
33 #define ND_PRINTK0 ND_PRINTK
34 #define ND_PRINTK1 ND_NOPRINTK
35 #define ND_PRINTK2 ND_NOPRINTK
36 #define ND_PRINTK3 ND_NOPRINTK
39 #define ND_PRINTK1 ND_PRINTK
43 #define ND_PRINTK2 ND_PRINTK
47 #define ND_PRINTK3 ND_PRINTK
50 #include <linux/module.h>
51 #include <linux/errno.h>
52 #include <linux/types.h>
53 #include <linux/socket.h>
54 #include <linux/sockios.h>
55 #include <linux/sched.h>
56 #include <linux/net.h>
57 #include <linux/in6.h>
58 #include <linux/route.h>
59 #include <linux/init.h>
60 #include <linux/rcupdate.h>
62 #include <linux/sysctl.h>
65 #include <linux/if_addr.h>
66 #include <linux/if_arp.h>
67 #include <linux/ipv6.h>
68 #include <linux/icmpv6.h>
69 #include <linux/jhash.h>
75 #include <net/protocol.h>
76 #include <net/ndisc.h>
77 #include <net/ip6_route.h>
78 #include <net/addrconf.h>
82 #include <net/ip6_checksum.h>
83 #include <linux/proc_fs.h>
85 #include <linux/netfilter.h>
86 #include <linux/netfilter_ipv6.h>
88 static struct socket *ndisc_socket;
90 static u32 ndisc_hash(const void *pkey, const struct net_device *dev);
91 static int ndisc_constructor(struct neighbour *neigh);
92 static void ndisc_solicit(struct neighbour *neigh, struct sk_buff *skb);
93 static void ndisc_error_report(struct neighbour *neigh, struct sk_buff *skb);
94 static int pndisc_constructor(struct pneigh_entry *n);
95 static void pndisc_destructor(struct pneigh_entry *n);
96 static void pndisc_redo(struct sk_buff *skb);
98 static struct neigh_ops ndisc_generic_ops = {
100 .solicit = ndisc_solicit,
101 .error_report = ndisc_error_report,
102 .output = neigh_resolve_output,
103 .connected_output = neigh_connected_output,
104 .hh_output = dev_queue_xmit,
105 .queue_xmit = dev_queue_xmit,
108 static struct neigh_ops ndisc_hh_ops = {
110 .solicit = ndisc_solicit,
111 .error_report = ndisc_error_report,
112 .output = neigh_resolve_output,
113 .connected_output = neigh_resolve_output,
114 .hh_output = dev_queue_xmit,
115 .queue_xmit = dev_queue_xmit,
119 static struct neigh_ops ndisc_direct_ops = {
121 .output = dev_queue_xmit,
122 .connected_output = dev_queue_xmit,
123 .hh_output = dev_queue_xmit,
124 .queue_xmit = dev_queue_xmit,
127 struct neigh_table nd_tbl = {
129 .entry_size = sizeof(struct neighbour) + sizeof(struct in6_addr),
130 .key_len = sizeof(struct in6_addr),
132 .constructor = ndisc_constructor,
133 .pconstructor = pndisc_constructor,
134 .pdestructor = pndisc_destructor,
135 .proxy_redo = pndisc_redo,
139 .base_reachable_time = 30 * HZ,
140 .retrans_time = 1 * HZ,
141 .gc_staletime = 60 * HZ,
142 .reachable_time = 30 * HZ,
143 .delay_probe_time = 5 * HZ,
147 .anycast_delay = 1 * HZ,
148 .proxy_delay = (8 * HZ) / 10,
151 .gc_interval = 30 * HZ,
158 struct ndisc_options {
159 struct nd_opt_hdr *nd_opt_array[__ND_OPT_ARRAY_MAX];
160 #ifdef CONFIG_IPV6_ROUTE_INFO
161 struct nd_opt_hdr *nd_opts_ri;
162 struct nd_opt_hdr *nd_opts_ri_end;
166 #define nd_opts_src_lladdr nd_opt_array[ND_OPT_SOURCE_LL_ADDR]
167 #define nd_opts_tgt_lladdr nd_opt_array[ND_OPT_TARGET_LL_ADDR]
168 #define nd_opts_pi nd_opt_array[ND_OPT_PREFIX_INFO]
169 #define nd_opts_pi_end nd_opt_array[__ND_OPT_PREFIX_INFO_END]
170 #define nd_opts_rh nd_opt_array[ND_OPT_REDIRECT_HDR]
171 #define nd_opts_mtu nd_opt_array[ND_OPT_MTU]
173 #define NDISC_OPT_SPACE(len) (((len)+2+7)&~7)
176 * Return the padding between the option length and the start of the
177 * link addr. Currently only IP-over-InfiniBand needs this, although
178 * if RFC 3831 IPv6-over-Fibre Channel is ever implemented it may
179 * also need a pad of 2.
181 static int ndisc_addr_option_pad(unsigned short type)
184 case ARPHRD_INFINIBAND: return 2;
189 static inline int ndisc_opt_addr_space(struct net_device *dev)
191 return NDISC_OPT_SPACE(dev->addr_len + ndisc_addr_option_pad(dev->type));
194 static u8 *ndisc_fill_addr_option(u8 *opt, int type, void *data, int data_len,
195 unsigned short addr_type)
197 int space = NDISC_OPT_SPACE(data_len);
198 int pad = ndisc_addr_option_pad(addr_type);
203 memset(opt + 2, 0, pad);
207 memcpy(opt+2, data, data_len);
210 if ((space -= data_len) > 0)
211 memset(opt, 0, space);
215 static struct nd_opt_hdr *ndisc_next_option(struct nd_opt_hdr *cur,
216 struct nd_opt_hdr *end)
219 if (!cur || !end || cur >= end)
221 type = cur->nd_opt_type;
223 cur = ((void *)cur) + (cur->nd_opt_len << 3);
224 } while(cur < end && cur->nd_opt_type != type);
225 return (cur <= end && cur->nd_opt_type == type ? cur : NULL);
228 static struct ndisc_options *ndisc_parse_options(u8 *opt, int opt_len,
229 struct ndisc_options *ndopts)
231 struct nd_opt_hdr *nd_opt = (struct nd_opt_hdr *)opt;
233 if (!nd_opt || opt_len < 0 || !ndopts)
235 memset(ndopts, 0, sizeof(*ndopts));
238 if (opt_len < sizeof(struct nd_opt_hdr))
240 l = nd_opt->nd_opt_len << 3;
241 if (opt_len < l || l == 0)
243 switch (nd_opt->nd_opt_type) {
244 case ND_OPT_SOURCE_LL_ADDR:
245 case ND_OPT_TARGET_LL_ADDR:
247 case ND_OPT_REDIRECT_HDR:
248 if (ndopts->nd_opt_array[nd_opt->nd_opt_type]) {
249 ND_PRINTK2(KERN_WARNING
250 "%s(): duplicated ND6 option found: type=%d\n",
252 nd_opt->nd_opt_type);
254 ndopts->nd_opt_array[nd_opt->nd_opt_type] = nd_opt;
257 case ND_OPT_PREFIX_INFO:
258 ndopts->nd_opts_pi_end = nd_opt;
259 if (ndopts->nd_opt_array[nd_opt->nd_opt_type] == 0)
260 ndopts->nd_opt_array[nd_opt->nd_opt_type] = nd_opt;
262 #ifdef CONFIG_IPV6_ROUTE_INFO
263 case ND_OPT_ROUTE_INFO:
264 ndopts->nd_opts_ri_end = nd_opt;
265 if (!ndopts->nd_opts_ri)
266 ndopts->nd_opts_ri = nd_opt;
271 * Unknown options must be silently ignored,
272 * to accommodate future extension to the protocol.
274 ND_PRINTK2(KERN_NOTICE
275 "%s(): ignored unsupported option; type=%d, len=%d\n",
277 nd_opt->nd_opt_type, nd_opt->nd_opt_len);
280 nd_opt = ((void *)nd_opt) + l;
285 static inline u8 *ndisc_opt_addr_data(struct nd_opt_hdr *p,
286 struct net_device *dev)
288 u8 *lladdr = (u8 *)(p + 1);
289 int lladdrlen = p->nd_opt_len << 3;
290 int prepad = ndisc_addr_option_pad(dev->type);
291 if (lladdrlen != NDISC_OPT_SPACE(dev->addr_len + prepad))
293 return (lladdr + prepad);
296 int ndisc_mc_map(struct in6_addr *addr, char *buf, struct net_device *dev, int dir)
300 case ARPHRD_IEEE802: /* Not sure. Check it later. --ANK */
302 ipv6_eth_mc_map(addr, buf);
304 case ARPHRD_IEEE802_TR:
305 ipv6_tr_mc_map(addr,buf);
308 ipv6_arcnet_mc_map(addr, buf);
310 case ARPHRD_INFINIBAND:
311 ipv6_ib_mc_map(addr, buf);
315 memcpy(buf, dev->broadcast, dev->addr_len);
322 static u32 ndisc_hash(const void *pkey, const struct net_device *dev)
324 const u32 *p32 = pkey;
328 for (i = 0; i < (sizeof(struct in6_addr) / sizeof(u32)); i++)
331 return jhash_2words(addr_hash, dev->ifindex, nd_tbl.hash_rnd);
334 static int ndisc_constructor(struct neighbour *neigh)
336 struct in6_addr *addr = (struct in6_addr*)&neigh->primary_key;
337 struct net_device *dev = neigh->dev;
338 struct inet6_dev *in6_dev;
339 struct neigh_parms *parms;
340 int is_multicast = ipv6_addr_is_multicast(addr);
343 in6_dev = in6_dev_get(dev);
344 if (in6_dev == NULL) {
349 parms = in6_dev->nd_parms;
350 __neigh_parms_put(neigh->parms);
351 neigh->parms = neigh_parms_clone(parms);
354 neigh->type = is_multicast ? RTN_MULTICAST : RTN_UNICAST;
355 if (dev->hard_header == NULL) {
356 neigh->nud_state = NUD_NOARP;
357 neigh->ops = &ndisc_direct_ops;
358 neigh->output = neigh->ops->queue_xmit;
361 neigh->nud_state = NUD_NOARP;
362 ndisc_mc_map(addr, neigh->ha, dev, 1);
363 } else if (dev->flags&(IFF_NOARP|IFF_LOOPBACK)) {
364 neigh->nud_state = NUD_NOARP;
365 memcpy(neigh->ha, dev->dev_addr, dev->addr_len);
366 if (dev->flags&IFF_LOOPBACK)
367 neigh->type = RTN_LOCAL;
368 } else if (dev->flags&IFF_POINTOPOINT) {
369 neigh->nud_state = NUD_NOARP;
370 memcpy(neigh->ha, dev->broadcast, dev->addr_len);
372 if (dev->hard_header_cache)
373 neigh->ops = &ndisc_hh_ops;
375 neigh->ops = &ndisc_generic_ops;
376 if (neigh->nud_state&NUD_VALID)
377 neigh->output = neigh->ops->connected_output;
379 neigh->output = neigh->ops->output;
381 in6_dev_put(in6_dev);
385 static int pndisc_constructor(struct pneigh_entry *n)
387 struct in6_addr *addr = (struct in6_addr*)&n->key;
388 struct in6_addr maddr;
389 struct net_device *dev = n->dev;
391 if (dev == NULL || __in6_dev_get(dev) == NULL)
393 addrconf_addr_solict_mult(addr, &maddr);
394 ipv6_dev_mc_inc(dev, &maddr);
398 static void pndisc_destructor(struct pneigh_entry *n)
400 struct in6_addr *addr = (struct in6_addr*)&n->key;
401 struct in6_addr maddr;
402 struct net_device *dev = n->dev;
404 if (dev == NULL || __in6_dev_get(dev) == NULL)
406 addrconf_addr_solict_mult(addr, &maddr);
407 ipv6_dev_mc_dec(dev, &maddr);
411 * Send a Neighbour Advertisement
414 static inline void ndisc_flow_init(struct flowi *fl, u8 type,
415 struct in6_addr *saddr, struct in6_addr *daddr,
418 memset(fl, 0, sizeof(*fl));
419 ipv6_addr_copy(&fl->fl6_src, saddr);
420 ipv6_addr_copy(&fl->fl6_dst, daddr);
421 fl->proto = IPPROTO_ICMPV6;
422 fl->fl_icmp_type = type;
423 fl->fl_icmp_code = 0;
425 security_sk_classify_flow(ndisc_socket->sk, fl);
428 static void ndisc_send_na(struct net_device *dev, struct neighbour *neigh,
429 struct in6_addr *daddr, struct in6_addr *solicited_addr,
430 int router, int solicited, int override, int inc_opt)
432 struct in6_addr tmpaddr;
433 struct inet6_ifaddr *ifp;
434 struct inet6_dev *idev;
436 struct dst_entry* dst;
437 struct sock *sk = ndisc_socket->sk;
438 struct in6_addr *src_addr;
444 len = sizeof(struct icmp6hdr) + sizeof(struct in6_addr);
446 /* for anycast or proxy, solicited_addr != src_addr */
447 ifp = ipv6_get_ifaddr(solicited_addr, dev, 1);
449 src_addr = solicited_addr;
452 if (ipv6_dev_get_saddr(dev, daddr, &tmpaddr))
457 ndisc_flow_init(&fl, NDISC_NEIGHBOUR_ADVERTISEMENT, src_addr, daddr,
460 dst = ndisc_dst_alloc(dev, neigh, daddr, ip6_output);
464 err = xfrm_lookup(&dst, &fl, NULL, 0);
470 len += ndisc_opt_addr_space(dev);
475 skb = sock_alloc_send_skb(sk, MAX_HEADER + len + LL_RESERVED_SPACE(dev),
480 "ICMPv6 NA: %s() failed to allocate an skb.\n",
486 skb_reserve(skb, LL_RESERVED_SPACE(dev));
487 ip6_nd_hdr(sk, skb, dev, src_addr, daddr, IPPROTO_ICMPV6, len);
489 msg = (struct nd_msg *)skb_put(skb, len);
490 skb->h.raw = (unsigned char*)msg;
492 msg->icmph.icmp6_type = NDISC_NEIGHBOUR_ADVERTISEMENT;
493 msg->icmph.icmp6_code = 0;
494 msg->icmph.icmp6_cksum = 0;
496 msg->icmph.icmp6_unused = 0;
497 msg->icmph.icmp6_router = router;
498 msg->icmph.icmp6_solicited = solicited;
499 msg->icmph.icmp6_override = !!override;
501 /* Set the target address. */
502 ipv6_addr_copy(&msg->target, solicited_addr);
505 ndisc_fill_addr_option(msg->opt, ND_OPT_TARGET_LL_ADDR, dev->dev_addr,
506 dev->addr_len, dev->type);
509 msg->icmph.icmp6_cksum = csum_ipv6_magic(src_addr, daddr, len,
511 csum_partial((__u8 *) msg,
515 idev = in6_dev_get(dst->dev);
516 IP6_INC_STATS(IPSTATS_MIB_OUTREQUESTS);
517 err = NF_HOOK(PF_INET6, NF_IP6_LOCAL_OUT, skb, NULL, dst->dev, dst_output);
519 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTNEIGHBORADVERTISEMENTS);
520 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTMSGS);
523 if (likely(idev != NULL))
527 void ndisc_send_ns(struct net_device *dev, struct neighbour *neigh,
528 struct in6_addr *solicit,
529 struct in6_addr *daddr, struct in6_addr *saddr)
532 struct dst_entry* dst;
533 struct inet6_dev *idev;
534 struct sock *sk = ndisc_socket->sk;
537 struct in6_addr addr_buf;
543 if (ipv6_get_lladdr(dev, &addr_buf))
548 ndisc_flow_init(&fl, NDISC_NEIGHBOUR_SOLICITATION, saddr, daddr,
551 dst = ndisc_dst_alloc(dev, neigh, daddr, ip6_output);
555 err = xfrm_lookup(&dst, &fl, NULL, 0);
559 len = sizeof(struct icmp6hdr) + sizeof(struct in6_addr);
560 send_llinfo = dev->addr_len && !ipv6_addr_any(saddr);
562 len += ndisc_opt_addr_space(dev);
564 skb = sock_alloc_send_skb(sk, MAX_HEADER + len + LL_RESERVED_SPACE(dev),
568 "ICMPv6 NA: %s() failed to allocate an skb.\n",
574 skb_reserve(skb, LL_RESERVED_SPACE(dev));
575 ip6_nd_hdr(sk, skb, dev, saddr, daddr, IPPROTO_ICMPV6, len);
577 msg = (struct nd_msg *)skb_put(skb, len);
578 skb->h.raw = (unsigned char*)msg;
579 msg->icmph.icmp6_type = NDISC_NEIGHBOUR_SOLICITATION;
580 msg->icmph.icmp6_code = 0;
581 msg->icmph.icmp6_cksum = 0;
582 msg->icmph.icmp6_unused = 0;
584 /* Set the target address. */
585 ipv6_addr_copy(&msg->target, solicit);
588 ndisc_fill_addr_option(msg->opt, ND_OPT_SOURCE_LL_ADDR, dev->dev_addr,
589 dev->addr_len, dev->type);
592 msg->icmph.icmp6_cksum = csum_ipv6_magic(&skb->nh.ipv6h->saddr,
595 csum_partial((__u8 *) msg,
599 idev = in6_dev_get(dst->dev);
600 IP6_INC_STATS(IPSTATS_MIB_OUTREQUESTS);
601 err = NF_HOOK(PF_INET6, NF_IP6_LOCAL_OUT, skb, NULL, dst->dev, dst_output);
603 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTNEIGHBORSOLICITS);
604 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTMSGS);
607 if (likely(idev != NULL))
611 void ndisc_send_rs(struct net_device *dev, struct in6_addr *saddr,
612 struct in6_addr *daddr)
615 struct dst_entry* dst;
616 struct inet6_dev *idev;
617 struct sock *sk = ndisc_socket->sk;
619 struct icmp6hdr *hdr;
624 ndisc_flow_init(&fl, NDISC_ROUTER_SOLICITATION, saddr, daddr,
627 dst = ndisc_dst_alloc(dev, NULL, daddr, ip6_output);
631 err = xfrm_lookup(&dst, &fl, NULL, 0);
635 len = sizeof(struct icmp6hdr);
637 len += ndisc_opt_addr_space(dev);
639 skb = sock_alloc_send_skb(sk, MAX_HEADER + len + LL_RESERVED_SPACE(dev),
643 "ICMPv6 RS: %s() failed to allocate an skb.\n",
649 skb_reserve(skb, LL_RESERVED_SPACE(dev));
650 ip6_nd_hdr(sk, skb, dev, saddr, daddr, IPPROTO_ICMPV6, len);
652 hdr = (struct icmp6hdr *)skb_put(skb, len);
653 skb->h.raw = (unsigned char*)hdr;
654 hdr->icmp6_type = NDISC_ROUTER_SOLICITATION;
656 hdr->icmp6_cksum = 0;
657 hdr->icmp6_unused = 0;
659 opt = (u8*) (hdr + 1);
662 ndisc_fill_addr_option(opt, ND_OPT_SOURCE_LL_ADDR, dev->dev_addr,
663 dev->addr_len, dev->type);
666 hdr->icmp6_cksum = csum_ipv6_magic(&skb->nh.ipv6h->saddr, daddr, len,
668 csum_partial((__u8 *) hdr, len, 0));
672 idev = in6_dev_get(dst->dev);
673 IP6_INC_STATS(IPSTATS_MIB_OUTREQUESTS);
674 err = NF_HOOK(PF_INET6, NF_IP6_LOCAL_OUT, skb, NULL, dst->dev, dst_output);
676 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTROUTERSOLICITS);
677 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTMSGS);
680 if (likely(idev != NULL))
685 static void ndisc_error_report(struct neighbour *neigh, struct sk_buff *skb)
688 * "The sender MUST return an ICMP
689 * destination unreachable"
691 dst_link_failure(skb);
695 /* Called with locked neigh: either read or both */
697 static void ndisc_solicit(struct neighbour *neigh, struct sk_buff *skb)
699 struct in6_addr *saddr = NULL;
700 struct in6_addr mcaddr;
701 struct net_device *dev = neigh->dev;
702 struct in6_addr *target = (struct in6_addr *)&neigh->primary_key;
703 int probes = atomic_read(&neigh->probes);
705 if (skb && ipv6_chk_addr(&skb->nh.ipv6h->saddr, dev, 1))
706 saddr = &skb->nh.ipv6h->saddr;
708 if ((probes -= neigh->parms->ucast_probes) < 0) {
709 if (!(neigh->nud_state & NUD_VALID)) {
710 ND_PRINTK1(KERN_DEBUG
711 "%s(): trying to ucast probe in NUD_INVALID: "
716 ndisc_send_ns(dev, neigh, target, target, saddr);
717 } else if ((probes -= neigh->parms->app_probes) < 0) {
722 addrconf_addr_solict_mult(target, &mcaddr);
723 ndisc_send_ns(dev, NULL, target, &mcaddr, saddr);
727 static void ndisc_recv_ns(struct sk_buff *skb)
729 struct nd_msg *msg = (struct nd_msg *)skb->h.raw;
730 struct in6_addr *saddr = &skb->nh.ipv6h->saddr;
731 struct in6_addr *daddr = &skb->nh.ipv6h->daddr;
733 u32 ndoptlen = skb->tail - msg->opt;
734 struct ndisc_options ndopts;
735 struct net_device *dev = skb->dev;
736 struct inet6_ifaddr *ifp;
737 struct inet6_dev *idev = NULL;
738 struct neighbour *neigh;
739 int dad = ipv6_addr_any(saddr);
742 if (ipv6_addr_is_multicast(&msg->target)) {
743 ND_PRINTK2(KERN_WARNING
744 "ICMPv6 NS: multicast target address");
750 * DAD has to be destined for solicited node multicast address.
753 !(daddr->s6_addr32[0] == htonl(0xff020000) &&
754 daddr->s6_addr32[1] == htonl(0x00000000) &&
755 daddr->s6_addr32[2] == htonl(0x00000001) &&
756 daddr->s6_addr [12] == 0xff )) {
757 ND_PRINTK2(KERN_WARNING
758 "ICMPv6 NS: bad DAD packet (wrong destination)\n");
762 if (!ndisc_parse_options(msg->opt, ndoptlen, &ndopts)) {
763 ND_PRINTK2(KERN_WARNING
764 "ICMPv6 NS: invalid ND options\n");
768 if (ndopts.nd_opts_src_lladdr) {
769 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_src_lladdr, dev);
771 ND_PRINTK2(KERN_WARNING
772 "ICMPv6 NS: invalid link-layer address length\n");
777 * If the IP source address is the unspecified address,
778 * there MUST NOT be source link-layer address option
782 ND_PRINTK2(KERN_WARNING
783 "ICMPv6 NS: bad DAD packet (link-layer address option)\n");
788 inc = ipv6_addr_is_multicast(daddr);
790 if ((ifp = ipv6_get_ifaddr(&msg->target, dev, 1)) != NULL) {
791 if (ifp->flags & IFA_F_TENTATIVE) {
792 /* Address is tentative. If the source
793 is unspecified address, it is someone
794 does DAD, otherwise we ignore solicitations
795 until DAD timer expires.
799 if (dev->type == ARPHRD_IEEE802_TR) {
800 unsigned char *sadr = skb->mac.raw;
801 if (((sadr[8] ^ dev->dev_addr[0]) & 0x7f) == 0 &&
802 sadr[9] == dev->dev_addr[1] &&
803 sadr[10] == dev->dev_addr[2] &&
804 sadr[11] == dev->dev_addr[3] &&
805 sadr[12] == dev->dev_addr[4] &&
806 sadr[13] == dev->dev_addr[5]) {
807 /* looped-back to us */
811 addrconf_dad_failure(ifp);
817 idev = in6_dev_get(dev);
819 /* XXX: count this drop? */
823 if (ipv6_chk_acast_addr(dev, &msg->target) ||
824 (idev->cnf.forwarding &&
825 pneigh_lookup(&nd_tbl, &msg->target, dev, 0))) {
826 if (!(NEIGH_CB(skb)->flags & LOCALLY_ENQUEUED) &&
827 skb->pkt_type != PACKET_HOST &&
829 idev->nd_parms->proxy_delay != 0) {
831 * for anycast or proxy,
832 * sender should delay its response
833 * by a random time between 0 and
834 * MAX_ANYCAST_DELAY_TIME seconds.
835 * (RFC2461) -- yoshfuji
837 struct sk_buff *n = skb_clone(skb, GFP_ATOMIC);
839 pneigh_enqueue(&nd_tbl, idev->nd_parms, n);
847 struct in6_addr maddr;
849 ipv6_addr_all_nodes(&maddr);
850 ndisc_send_na(dev, NULL, &maddr, &msg->target,
851 idev->cnf.forwarding, 0, (ifp != NULL), 1);
856 NEIGH_CACHE_STAT_INC(&nd_tbl, rcv_probes_mcast);
858 NEIGH_CACHE_STAT_INC(&nd_tbl, rcv_probes_ucast);
861 * update / create cache entry
862 * for the source address
864 neigh = __neigh_lookup(&nd_tbl, saddr, dev,
865 !inc || lladdr || !dev->addr_len);
867 neigh_update(neigh, lladdr, NUD_STALE,
868 NEIGH_UPDATE_F_WEAK_OVERRIDE|
869 NEIGH_UPDATE_F_OVERRIDE);
870 if (neigh || !dev->hard_header) {
871 ndisc_send_na(dev, neigh, saddr, &msg->target,
872 idev->cnf.forwarding,
873 1, (ifp != NULL && inc), inc);
875 neigh_release(neigh);
887 static void ndisc_recv_na(struct sk_buff *skb)
889 struct nd_msg *msg = (struct nd_msg *)skb->h.raw;
890 struct in6_addr *saddr = &skb->nh.ipv6h->saddr;
891 struct in6_addr *daddr = &skb->nh.ipv6h->daddr;
893 u32 ndoptlen = skb->tail - msg->opt;
894 struct ndisc_options ndopts;
895 struct net_device *dev = skb->dev;
896 struct inet6_ifaddr *ifp;
897 struct neighbour *neigh;
899 if (skb->len < sizeof(struct nd_msg)) {
900 ND_PRINTK2(KERN_WARNING
901 "ICMPv6 NA: packet too short\n");
905 if (ipv6_addr_is_multicast(&msg->target)) {
906 ND_PRINTK2(KERN_WARNING
907 "ICMPv6 NA: target address is multicast.\n");
911 if (ipv6_addr_is_multicast(daddr) &&
912 msg->icmph.icmp6_solicited) {
913 ND_PRINTK2(KERN_WARNING
914 "ICMPv6 NA: solicited NA is multicasted.\n");
918 if (!ndisc_parse_options(msg->opt, ndoptlen, &ndopts)) {
919 ND_PRINTK2(KERN_WARNING
920 "ICMPv6 NS: invalid ND option\n");
923 if (ndopts.nd_opts_tgt_lladdr) {
924 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_tgt_lladdr, dev);
926 ND_PRINTK2(KERN_WARNING
927 "ICMPv6 NA: invalid link-layer address length\n");
931 if ((ifp = ipv6_get_ifaddr(&msg->target, dev, 1))) {
932 if (ifp->flags & IFA_F_TENTATIVE) {
933 addrconf_dad_failure(ifp);
936 /* What should we make now? The advertisement
937 is invalid, but ndisc specs say nothing
938 about it. It could be misconfiguration, or
939 an smart proxy agent tries to help us :-)
941 ND_PRINTK1(KERN_WARNING
942 "ICMPv6 NA: someone advertises our address on %s!\n",
943 ifp->idev->dev->name);
947 neigh = neigh_lookup(&nd_tbl, &msg->target, dev);
950 u8 old_flags = neigh->flags;
952 if (neigh->nud_state & NUD_FAILED)
956 * Don't update the neighbor cache entry on a proxy NA from
957 * ourselves because either the proxied node is off link or it
958 * has already sent a NA to us.
960 if (lladdr && !memcmp(lladdr, dev->dev_addr, dev->addr_len) &&
961 pneigh_lookup(&nd_tbl, &msg->target, dev, 0))
964 neigh_update(neigh, lladdr,
965 msg->icmph.icmp6_solicited ? NUD_REACHABLE : NUD_STALE,
966 NEIGH_UPDATE_F_WEAK_OVERRIDE|
967 (msg->icmph.icmp6_override ? NEIGH_UPDATE_F_OVERRIDE : 0)|
968 NEIGH_UPDATE_F_OVERRIDE_ISROUTER|
969 (msg->icmph.icmp6_router ? NEIGH_UPDATE_F_ISROUTER : 0));
971 if ((old_flags & ~neigh->flags) & NTF_ROUTER) {
973 * Change: router to host
976 rt = rt6_get_dflt_router(saddr, dev);
982 neigh_release(neigh);
986 static void ndisc_recv_rs(struct sk_buff *skb)
988 struct rs_msg *rs_msg = (struct rs_msg *) skb->h.raw;
989 unsigned long ndoptlen = skb->len - sizeof(*rs_msg);
990 struct neighbour *neigh;
991 struct inet6_dev *idev;
992 struct in6_addr *saddr = &skb->nh.ipv6h->saddr;
993 struct ndisc_options ndopts;
996 if (skb->len < sizeof(*rs_msg))
999 idev = in6_dev_get(skb->dev);
1001 if (net_ratelimit())
1002 ND_PRINTK1("ICMP6 RS: can't find in6 device\n");
1006 /* Don't accept RS if we're not in router mode */
1007 if (!idev->cnf.forwarding)
1011 * Don't update NCE if src = ::;
1012 * this implies that the source node has no ip address assigned yet.
1014 if (ipv6_addr_any(saddr))
1017 /* Parse ND options */
1018 if (!ndisc_parse_options(rs_msg->opt, ndoptlen, &ndopts)) {
1019 if (net_ratelimit())
1020 ND_PRINTK2("ICMP6 NS: invalid ND option, ignored\n");
1024 if (ndopts.nd_opts_src_lladdr) {
1025 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_src_lladdr,
1031 neigh = __neigh_lookup(&nd_tbl, saddr, skb->dev, 1);
1033 neigh_update(neigh, lladdr, NUD_STALE,
1034 NEIGH_UPDATE_F_WEAK_OVERRIDE|
1035 NEIGH_UPDATE_F_OVERRIDE|
1036 NEIGH_UPDATE_F_OVERRIDE_ISROUTER);
1037 neigh_release(neigh);
1043 static void ndisc_router_discovery(struct sk_buff *skb)
1045 struct ra_msg *ra_msg = (struct ra_msg *) skb->h.raw;
1046 struct neighbour *neigh = NULL;
1047 struct inet6_dev *in6_dev;
1048 struct rt6_info *rt = NULL;
1050 struct ndisc_options ndopts;
1052 unsigned int pref = 0;
1054 __u8 * opt = (__u8 *)(ra_msg + 1);
1056 optlen = (skb->tail - skb->h.raw) - sizeof(struct ra_msg);
1058 if (!(ipv6_addr_type(&skb->nh.ipv6h->saddr) & IPV6_ADDR_LINKLOCAL)) {
1059 ND_PRINTK2(KERN_WARNING
1060 "ICMPv6 RA: source address is not link-local.\n");
1064 ND_PRINTK2(KERN_WARNING
1065 "ICMPv6 RA: packet too short\n");
1070 * set the RA_RECV flag in the interface
1073 in6_dev = in6_dev_get(skb->dev);
1074 if (in6_dev == NULL) {
1076 "ICMPv6 RA: can't find inet6 device for %s.\n",
1080 if (in6_dev->cnf.forwarding || !in6_dev->cnf.accept_ra) {
1081 in6_dev_put(in6_dev);
1085 if (!ndisc_parse_options(opt, optlen, &ndopts)) {
1086 in6_dev_put(in6_dev);
1087 ND_PRINTK2(KERN_WARNING
1088 "ICMP6 RA: invalid ND options\n");
1092 if (in6_dev->if_flags & IF_RS_SENT) {
1094 * flag that an RA was received after an RS was sent
1095 * out on this interface.
1097 in6_dev->if_flags |= IF_RA_RCVD;
1101 * Remember the managed/otherconf flags from most recently
1102 * received RA message (RFC 2462) -- yoshfuji
1104 in6_dev->if_flags = (in6_dev->if_flags & ~(IF_RA_MANAGED |
1106 (ra_msg->icmph.icmp6_addrconf_managed ?
1107 IF_RA_MANAGED : 0) |
1108 (ra_msg->icmph.icmp6_addrconf_other ?
1109 IF_RA_OTHERCONF : 0);
1111 if (!in6_dev->cnf.accept_ra_defrtr)
1114 lifetime = ntohs(ra_msg->icmph.icmp6_rt_lifetime);
1116 #ifdef CONFIG_IPV6_ROUTER_PREF
1117 pref = ra_msg->icmph.icmp6_router_pref;
1118 /* 10b is handled as if it were 00b (medium) */
1119 if (pref == ICMPV6_ROUTER_PREF_INVALID ||
1120 in6_dev->cnf.accept_ra_rtr_pref)
1121 pref = ICMPV6_ROUTER_PREF_MEDIUM;
1124 rt = rt6_get_dflt_router(&skb->nh.ipv6h->saddr, skb->dev);
1127 neigh = rt->rt6i_nexthop;
1129 if (rt && lifetime == 0) {
1135 if (rt == NULL && lifetime) {
1136 ND_PRINTK3(KERN_DEBUG
1137 "ICMPv6 RA: adding default router.\n");
1139 rt = rt6_add_dflt_router(&skb->nh.ipv6h->saddr, skb->dev, pref);
1142 "ICMPv6 RA: %s() failed to add default route.\n",
1144 in6_dev_put(in6_dev);
1148 neigh = rt->rt6i_nexthop;
1149 if (neigh == NULL) {
1151 "ICMPv6 RA: %s() got default router without neighbour.\n",
1153 dst_release(&rt->u.dst);
1154 in6_dev_put(in6_dev);
1157 neigh->flags |= NTF_ROUTER;
1159 rt->rt6i_flags |= (rt->rt6i_flags & ~RTF_PREF_MASK) | RTF_PREF(pref);
1163 rt->rt6i_expires = jiffies + (HZ * lifetime);
1165 if (ra_msg->icmph.icmp6_hop_limit) {
1166 in6_dev->cnf.hop_limit = ra_msg->icmph.icmp6_hop_limit;
1168 rt->u.dst.metrics[RTAX_HOPLIMIT-1] = ra_msg->icmph.icmp6_hop_limit;
1174 * Update Reachable Time and Retrans Timer
1177 if (in6_dev->nd_parms) {
1178 unsigned long rtime = ntohl(ra_msg->retrans_timer);
1180 if (rtime && rtime/1000 < MAX_SCHEDULE_TIMEOUT/HZ) {
1181 rtime = (rtime*HZ)/1000;
1184 in6_dev->nd_parms->retrans_time = rtime;
1185 in6_dev->tstamp = jiffies;
1186 inet6_ifinfo_notify(RTM_NEWLINK, in6_dev);
1189 rtime = ntohl(ra_msg->reachable_time);
1190 if (rtime && rtime/1000 < MAX_SCHEDULE_TIMEOUT/(3*HZ)) {
1191 rtime = (rtime*HZ)/1000;
1196 if (rtime != in6_dev->nd_parms->base_reachable_time) {
1197 in6_dev->nd_parms->base_reachable_time = rtime;
1198 in6_dev->nd_parms->gc_staletime = 3 * rtime;
1199 in6_dev->nd_parms->reachable_time = neigh_rand_reach_time(rtime);
1200 in6_dev->tstamp = jiffies;
1201 inet6_ifinfo_notify(RTM_NEWLINK, in6_dev);
1211 neigh = __neigh_lookup(&nd_tbl, &skb->nh.ipv6h->saddr,
1215 if (ndopts.nd_opts_src_lladdr) {
1216 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_src_lladdr,
1219 ND_PRINTK2(KERN_WARNING
1220 "ICMPv6 RA: invalid link-layer address length\n");
1224 neigh_update(neigh, lladdr, NUD_STALE,
1225 NEIGH_UPDATE_F_WEAK_OVERRIDE|
1226 NEIGH_UPDATE_F_OVERRIDE|
1227 NEIGH_UPDATE_F_OVERRIDE_ISROUTER|
1228 NEIGH_UPDATE_F_ISROUTER);
1231 #ifdef CONFIG_IPV6_ROUTE_INFO
1232 if (in6_dev->cnf.accept_ra_rtr_pref && ndopts.nd_opts_ri) {
1233 struct nd_opt_hdr *p;
1234 for (p = ndopts.nd_opts_ri;
1236 p = ndisc_next_option(p, ndopts.nd_opts_ri_end)) {
1237 if (((struct route_info *)p)->prefix_len > in6_dev->cnf.accept_ra_rt_info_max_plen)
1239 rt6_route_rcv(skb->dev, (u8*)p, (p->nd_opt_len) << 3,
1240 &skb->nh.ipv6h->saddr);
1245 if (in6_dev->cnf.accept_ra_pinfo && ndopts.nd_opts_pi) {
1246 struct nd_opt_hdr *p;
1247 for (p = ndopts.nd_opts_pi;
1249 p = ndisc_next_option(p, ndopts.nd_opts_pi_end)) {
1250 addrconf_prefix_rcv(skb->dev, (u8*)p, (p->nd_opt_len) << 3);
1254 if (ndopts.nd_opts_mtu) {
1257 memcpy(&mtu, ((u8*)(ndopts.nd_opts_mtu+1))+2, sizeof(mtu));
1260 if (mtu < IPV6_MIN_MTU || mtu > skb->dev->mtu) {
1261 ND_PRINTK2(KERN_WARNING
1262 "ICMPv6 RA: invalid mtu: %d\n",
1264 } else if (in6_dev->cnf.mtu6 != mtu) {
1265 in6_dev->cnf.mtu6 = mtu;
1268 rt->u.dst.metrics[RTAX_MTU-1] = mtu;
1270 rt6_mtu_change(skb->dev, mtu);
1274 if (ndopts.nd_opts_tgt_lladdr || ndopts.nd_opts_rh) {
1275 ND_PRINTK2(KERN_WARNING
1276 "ICMPv6 RA: invalid RA options");
1280 dst_release(&rt->u.dst);
1282 neigh_release(neigh);
1283 in6_dev_put(in6_dev);
1286 static void ndisc_redirect_rcv(struct sk_buff *skb)
1288 struct inet6_dev *in6_dev;
1289 struct icmp6hdr *icmph;
1290 struct in6_addr *dest;
1291 struct in6_addr *target; /* new first hop to destination */
1292 struct neighbour *neigh;
1294 struct ndisc_options ndopts;
1298 if (!(ipv6_addr_type(&skb->nh.ipv6h->saddr) & IPV6_ADDR_LINKLOCAL)) {
1299 ND_PRINTK2(KERN_WARNING
1300 "ICMPv6 Redirect: source address is not link-local.\n");
1304 optlen = skb->tail - skb->h.raw;
1305 optlen -= sizeof(struct icmp6hdr) + 2 * sizeof(struct in6_addr);
1308 ND_PRINTK2(KERN_WARNING
1309 "ICMPv6 Redirect: packet too short\n");
1313 icmph = (struct icmp6hdr *) skb->h.raw;
1314 target = (struct in6_addr *) (icmph + 1);
1317 if (ipv6_addr_is_multicast(dest)) {
1318 ND_PRINTK2(KERN_WARNING
1319 "ICMPv6 Redirect: destination address is multicast.\n");
1323 if (ipv6_addr_equal(dest, target)) {
1325 } else if (!(ipv6_addr_type(target) & IPV6_ADDR_LINKLOCAL)) {
1326 ND_PRINTK2(KERN_WARNING
1327 "ICMPv6 Redirect: target address is not link-local.\n");
1331 in6_dev = in6_dev_get(skb->dev);
1334 if (in6_dev->cnf.forwarding || !in6_dev->cnf.accept_redirects) {
1335 in6_dev_put(in6_dev);
1340 * The IP source address of the Redirect MUST be the same as the current
1341 * first-hop router for the specified ICMP Destination Address.
1344 if (!ndisc_parse_options((u8*)(dest + 1), optlen, &ndopts)) {
1345 ND_PRINTK2(KERN_WARNING
1346 "ICMPv6 Redirect: invalid ND options\n");
1347 in6_dev_put(in6_dev);
1350 if (ndopts.nd_opts_tgt_lladdr) {
1351 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_tgt_lladdr,
1354 ND_PRINTK2(KERN_WARNING
1355 "ICMPv6 Redirect: invalid link-layer address length\n");
1356 in6_dev_put(in6_dev);
1361 neigh = __neigh_lookup(&nd_tbl, target, skb->dev, 1);
1363 rt6_redirect(dest, &skb->nh.ipv6h->daddr,
1364 &skb->nh.ipv6h->saddr, neigh, lladdr,
1366 neigh_release(neigh);
1368 in6_dev_put(in6_dev);
1371 void ndisc_send_redirect(struct sk_buff *skb, struct neighbour *neigh,
1372 struct in6_addr *target)
1374 struct sock *sk = ndisc_socket->sk;
1375 int len = sizeof(struct icmp6hdr) + 2 * sizeof(struct in6_addr);
1376 struct sk_buff *buff;
1377 struct icmp6hdr *icmph;
1378 struct in6_addr saddr_buf;
1379 struct in6_addr *addrp;
1380 struct net_device *dev;
1381 struct rt6_info *rt;
1382 struct dst_entry *dst;
1383 struct inet6_dev *idev;
1389 u8 ha_buf[MAX_ADDR_LEN], *ha = NULL;
1393 if (ipv6_get_lladdr(dev, &saddr_buf)) {
1394 ND_PRINTK2(KERN_WARNING
1395 "ICMPv6 Redirect: no link-local address on %s\n",
1400 ndisc_flow_init(&fl, NDISC_REDIRECT, &saddr_buf, &skb->nh.ipv6h->saddr,
1403 dst = ip6_route_output(NULL, &fl);
1407 err = xfrm_lookup(&dst, &fl, NULL, 0);
1411 rt = (struct rt6_info *) dst;
1413 if (rt->rt6i_flags & RTF_GATEWAY) {
1414 ND_PRINTK2(KERN_WARNING
1415 "ICMPv6 Redirect: destination is not a neighbour.\n");
1419 if (!xrlim_allow(dst, 1*HZ)) {
1424 if (dev->addr_len) {
1425 read_lock_bh(&neigh->lock);
1426 if (neigh->nud_state & NUD_VALID) {
1427 memcpy(ha_buf, neigh->ha, dev->addr_len);
1428 read_unlock_bh(&neigh->lock);
1430 len += ndisc_opt_addr_space(dev);
1432 read_unlock_bh(&neigh->lock);
1435 rd_len = min_t(unsigned int,
1436 IPV6_MIN_MTU-sizeof(struct ipv6hdr)-len, skb->len + 8);
1440 buff = sock_alloc_send_skb(sk, MAX_HEADER + len + LL_RESERVED_SPACE(dev),
1444 "ICMPv6 Redirect: %s() failed to allocate an skb.\n",
1452 skb_reserve(buff, LL_RESERVED_SPACE(dev));
1453 ip6_nd_hdr(sk, buff, dev, &saddr_buf, &skb->nh.ipv6h->saddr,
1454 IPPROTO_ICMPV6, len);
1456 icmph = (struct icmp6hdr *)skb_put(buff, len);
1457 buff->h.raw = (unsigned char*)icmph;
1459 memset(icmph, 0, sizeof(struct icmp6hdr));
1460 icmph->icmp6_type = NDISC_REDIRECT;
1463 * copy target and destination addresses
1466 addrp = (struct in6_addr *)(icmph + 1);
1467 ipv6_addr_copy(addrp, target);
1469 ipv6_addr_copy(addrp, &skb->nh.ipv6h->daddr);
1471 opt = (u8*) (addrp + 1);
1474 * include target_address option
1478 opt = ndisc_fill_addr_option(opt, ND_OPT_TARGET_LL_ADDR, ha,
1479 dev->addr_len, dev->type);
1482 * build redirect option and copy skb over to the new packet.
1486 *(opt++) = ND_OPT_REDIRECT_HDR;
1487 *(opt++) = (rd_len >> 3);
1490 memcpy(opt, skb->nh.ipv6h, rd_len - 8);
1492 icmph->icmp6_cksum = csum_ipv6_magic(&saddr_buf, &skb->nh.ipv6h->saddr,
1493 len, IPPROTO_ICMPV6,
1494 csum_partial((u8 *) icmph, len, 0));
1497 idev = in6_dev_get(dst->dev);
1498 IP6_INC_STATS(IPSTATS_MIB_OUTREQUESTS);
1499 err = NF_HOOK(PF_INET6, NF_IP6_LOCAL_OUT, buff, NULL, dst->dev, dst_output);
1501 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTREDIRECTS);
1502 ICMP6_INC_STATS(idev, ICMP6_MIB_OUTMSGS);
1505 if (likely(idev != NULL))
1509 static void pndisc_redo(struct sk_buff *skb)
1515 int ndisc_rcv(struct sk_buff *skb)
1519 if (!pskb_may_pull(skb, skb->len))
1522 msg = (struct nd_msg *) skb->h.raw;
1524 __skb_push(skb, skb->data-skb->h.raw);
1526 if (skb->nh.ipv6h->hop_limit != 255) {
1527 ND_PRINTK2(KERN_WARNING
1528 "ICMPv6 NDISC: invalid hop-limit: %d\n",
1529 skb->nh.ipv6h->hop_limit);
1533 if (msg->icmph.icmp6_code != 0) {
1534 ND_PRINTK2(KERN_WARNING
1535 "ICMPv6 NDISC: invalid ICMPv6 code: %d\n",
1536 msg->icmph.icmp6_code);
1540 memset(NEIGH_CB(skb), 0, sizeof(struct neighbour_cb));
1542 switch (msg->icmph.icmp6_type) {
1543 case NDISC_NEIGHBOUR_SOLICITATION:
1547 case NDISC_NEIGHBOUR_ADVERTISEMENT:
1551 case NDISC_ROUTER_SOLICITATION:
1555 case NDISC_ROUTER_ADVERTISEMENT:
1556 ndisc_router_discovery(skb);
1559 case NDISC_REDIRECT:
1560 ndisc_redirect_rcv(skb);
1567 static int ndisc_netdev_event(struct notifier_block *this, unsigned long event, void *ptr)
1569 struct net_device *dev = ptr;
1572 case NETDEV_CHANGEADDR:
1573 neigh_changeaddr(&nd_tbl, dev);
1577 neigh_ifdown(&nd_tbl, dev);
1587 static struct notifier_block ndisc_netdev_notifier = {
1588 .notifier_call = ndisc_netdev_event,
1591 #ifdef CONFIG_SYSCTL
1592 static void ndisc_warn_deprecated_sysctl(struct ctl_table *ctl,
1593 const char *func, const char *dev_name)
1595 static char warncomm[TASK_COMM_LEN];
1597 if (strcmp(warncomm, current->comm) && warned < 5) {
1598 strcpy(warncomm, current->comm);
1600 "process `%s' is using deprecated sysctl (%s) "
1601 "net.ipv6.neigh.%s.%s; "
1602 "Use net.ipv6.neigh.%s.%s_ms "
1605 dev_name, ctl->procname,
1606 dev_name, ctl->procname);
1611 int ndisc_ifinfo_sysctl_change(struct ctl_table *ctl, int write, struct file * filp, void __user *buffer, size_t *lenp, loff_t *ppos)
1613 struct net_device *dev = ctl->extra1;
1614 struct inet6_dev *idev;
1617 if (ctl->ctl_name == NET_NEIGH_RETRANS_TIME ||
1618 ctl->ctl_name == NET_NEIGH_REACHABLE_TIME)
1619 ndisc_warn_deprecated_sysctl(ctl, "syscall", dev ? dev->name : "default");
1621 switch (ctl->ctl_name) {
1622 case NET_NEIGH_RETRANS_TIME:
1623 ret = proc_dointvec(ctl, write, filp, buffer, lenp, ppos);
1625 case NET_NEIGH_REACHABLE_TIME:
1626 ret = proc_dointvec_jiffies(ctl, write,
1627 filp, buffer, lenp, ppos);
1629 case NET_NEIGH_RETRANS_TIME_MS:
1630 case NET_NEIGH_REACHABLE_TIME_MS:
1631 ret = proc_dointvec_ms_jiffies(ctl, write,
1632 filp, buffer, lenp, ppos);
1638 if (write && ret == 0 && dev && (idev = in6_dev_get(dev)) != NULL) {
1639 if (ctl->ctl_name == NET_NEIGH_REACHABLE_TIME ||
1640 ctl->ctl_name == NET_NEIGH_REACHABLE_TIME_MS)
1641 idev->nd_parms->reachable_time = neigh_rand_reach_time(idev->nd_parms->base_reachable_time);
1642 idev->tstamp = jiffies;
1643 inet6_ifinfo_notify(RTM_NEWLINK, idev);
1649 static int ndisc_ifinfo_sysctl_strategy(ctl_table *ctl, int __user *name,
1650 int nlen, void __user *oldval,
1651 size_t __user *oldlenp,
1652 void __user *newval, size_t newlen,
1655 struct net_device *dev = ctl->extra1;
1656 struct inet6_dev *idev;
1659 if (ctl->ctl_name == NET_NEIGH_RETRANS_TIME ||
1660 ctl->ctl_name == NET_NEIGH_REACHABLE_TIME)
1661 ndisc_warn_deprecated_sysctl(ctl, "procfs", dev ? dev->name : "default");
1663 switch (ctl->ctl_name) {
1664 case NET_NEIGH_REACHABLE_TIME:
1665 ret = sysctl_jiffies(ctl, name, nlen,
1666 oldval, oldlenp, newval, newlen,
1669 case NET_NEIGH_RETRANS_TIME_MS:
1670 case NET_NEIGH_REACHABLE_TIME_MS:
1671 ret = sysctl_ms_jiffies(ctl, name, nlen,
1672 oldval, oldlenp, newval, newlen,
1679 if (newval && newlen && ret > 0 &&
1680 dev && (idev = in6_dev_get(dev)) != NULL) {
1681 if (ctl->ctl_name == NET_NEIGH_REACHABLE_TIME ||
1682 ctl->ctl_name == NET_NEIGH_REACHABLE_TIME_MS)
1683 idev->nd_parms->reachable_time = neigh_rand_reach_time(idev->nd_parms->base_reachable_time);
1684 idev->tstamp = jiffies;
1685 inet6_ifinfo_notify(RTM_NEWLINK, idev);
1694 int __init ndisc_init(struct net_proto_family *ops)
1696 struct ipv6_pinfo *np;
1700 err = sock_create_kern(PF_INET6, SOCK_RAW, IPPROTO_ICMPV6, &ndisc_socket);
1703 "ICMPv6 NDISC: Failed to initialize the control socket (err %d).\n",
1705 ndisc_socket = NULL; /* For safety. */
1709 sk = ndisc_socket->sk;
1711 sk->sk_allocation = GFP_ATOMIC;
1712 np->hop_limit = 255;
1713 /* Do not loopback ndisc messages */
1715 sk->sk_prot->unhash(sk);
1718 * Initialize the neighbour table
1721 neigh_table_init(&nd_tbl);
1723 #ifdef CONFIG_SYSCTL
1724 neigh_sysctl_register(NULL, &nd_tbl.parms, NET_IPV6, NET_IPV6_NEIGH,
1726 &ndisc_ifinfo_sysctl_change,
1727 &ndisc_ifinfo_sysctl_strategy);
1730 register_netdevice_notifier(&ndisc_netdev_notifier);
1734 void ndisc_cleanup(void)
1736 #ifdef CONFIG_SYSCTL
1737 neigh_sysctl_unregister(&nd_tbl.parms);
1739 neigh_table_clear(&nd_tbl);
1740 sock_release(ndisc_socket);
1741 ndisc_socket = NULL; /* For safety. */