2 * Neighbour Discovery for IPv6
3 * Linux INET6 implementation
6 * Pedro Roque <roque@di.fc.ul.pt>
7 * Mike Shaver <shaver@ingenia.com>
9 * This program is free software; you can redistribute it and/or
10 * modify it under the terms of the GNU General Public License
11 * as published by the Free Software Foundation; either version
12 * 2 of the License, or (at your option) any later version.
18 * Alexey I. Froloff : RFC6106 (DNSSL) support
19 * Pierre Ynard : export userland ND options
20 * through netlink (RDNSS support)
21 * Lars Fenneberg : fixed MTU setting on receipt
23 * Janos Farkas : kmalloc failure checks
24 * Alexey Kuznetsov : state machine reworked
25 * and moved to net/core.
26 * Pekka Savola : RFC2461 validation
27 * YOSHIFUJI Hideaki @USAGI : Verify ND options properly
30 #define pr_fmt(fmt) "ICMPv6: " fmt
32 #include <linux/module.h>
33 #include <linux/errno.h>
34 #include <linux/types.h>
35 #include <linux/socket.h>
36 #include <linux/sockios.h>
37 #include <linux/sched.h>
38 #include <linux/net.h>
39 #include <linux/in6.h>
40 #include <linux/route.h>
41 #include <linux/init.h>
42 #include <linux/rcupdate.h>
43 #include <linux/slab.h>
45 #include <linux/sysctl.h>
48 #include <linux/if_addr.h>
49 #include <linux/if_arp.h>
50 #include <linux/ipv6.h>
51 #include <linux/icmpv6.h>
52 #include <linux/jhash.h>
58 #include <net/protocol.h>
59 #include <net/ndisc.h>
60 #include <net/ip6_route.h>
61 #include <net/addrconf.h>
64 #include <net/netlink.h>
65 #include <linux/rtnetlink.h>
68 #include <net/ip6_checksum.h>
69 #include <net/inet_common.h>
70 #include <linux/proc_fs.h>
72 #include <linux/netfilter.h>
73 #include <linux/netfilter_ipv6.h>
75 /* Set to 3 to get tracing... */
78 #define ND_PRINTK(val, level, fmt, ...) \
80 if (val <= ND_DEBUG) \
81 net_##level##_ratelimited(fmt, ##__VA_ARGS__); \
84 static u32 ndisc_hash(const void *pkey,
85 const struct net_device *dev,
87 static int ndisc_constructor(struct neighbour *neigh);
88 static void ndisc_solicit(struct neighbour *neigh, struct sk_buff *skb);
89 static void ndisc_error_report(struct neighbour *neigh, struct sk_buff *skb);
90 static int pndisc_constructor(struct pneigh_entry *n);
91 static void pndisc_destructor(struct pneigh_entry *n);
92 static void pndisc_redo(struct sk_buff *skb);
94 static const struct neigh_ops ndisc_generic_ops = {
96 .solicit = ndisc_solicit,
97 .error_report = ndisc_error_report,
98 .output = neigh_resolve_output,
99 .connected_output = neigh_connected_output,
102 static const struct neigh_ops ndisc_hh_ops = {
104 .solicit = ndisc_solicit,
105 .error_report = ndisc_error_report,
106 .output = neigh_resolve_output,
107 .connected_output = neigh_resolve_output,
111 static const struct neigh_ops ndisc_direct_ops = {
113 .output = neigh_direct_output,
114 .connected_output = neigh_direct_output,
117 struct neigh_table nd_tbl = {
119 .key_len = sizeof(struct in6_addr),
121 .constructor = ndisc_constructor,
122 .pconstructor = pndisc_constructor,
123 .pdestructor = pndisc_destructor,
124 .proxy_redo = pndisc_redo,
128 .base_reachable_time = ND_REACHABLE_TIME,
129 .retrans_time = ND_RETRANS_TIMER,
130 .gc_staletime = 60 * HZ,
131 .reachable_time = ND_REACHABLE_TIME,
132 .delay_probe_time = 5 * HZ,
133 .queue_len_bytes = 64*1024,
136 .anycast_delay = 1 * HZ,
137 .proxy_delay = (8 * HZ) / 10,
140 .gc_interval = 30 * HZ,
146 static u8 *ndisc_fill_addr_option(u8 *opt, int type, void *data,
147 struct net_device *dev)
149 int pad = ndisc_addr_option_pad(dev->type);
150 int data_len = dev->addr_len;
151 int space = ndisc_opt_addr_space(dev);
156 memset(opt + 2, 0, pad);
160 memcpy(opt+2, data, data_len);
163 if ((space -= data_len) > 0)
164 memset(opt, 0, space);
168 static struct nd_opt_hdr *ndisc_next_option(struct nd_opt_hdr *cur,
169 struct nd_opt_hdr *end)
172 if (!cur || !end || cur >= end)
174 type = cur->nd_opt_type;
176 cur = ((void *)cur) + (cur->nd_opt_len << 3);
177 } while(cur < end && cur->nd_opt_type != type);
178 return cur <= end && cur->nd_opt_type == type ? cur : NULL;
181 static inline int ndisc_is_useropt(struct nd_opt_hdr *opt)
183 return opt->nd_opt_type == ND_OPT_RDNSS ||
184 opt->nd_opt_type == ND_OPT_DNSSL;
187 static struct nd_opt_hdr *ndisc_next_useropt(struct nd_opt_hdr *cur,
188 struct nd_opt_hdr *end)
190 if (!cur || !end || cur >= end)
193 cur = ((void *)cur) + (cur->nd_opt_len << 3);
194 } while(cur < end && !ndisc_is_useropt(cur));
195 return cur <= end && ndisc_is_useropt(cur) ? cur : NULL;
198 struct ndisc_options *ndisc_parse_options(u8 *opt, int opt_len,
199 struct ndisc_options *ndopts)
201 struct nd_opt_hdr *nd_opt = (struct nd_opt_hdr *)opt;
203 if (!nd_opt || opt_len < 0 || !ndopts)
205 memset(ndopts, 0, sizeof(*ndopts));
208 if (opt_len < sizeof(struct nd_opt_hdr))
210 l = nd_opt->nd_opt_len << 3;
211 if (opt_len < l || l == 0)
213 switch (nd_opt->nd_opt_type) {
214 case ND_OPT_SOURCE_LL_ADDR:
215 case ND_OPT_TARGET_LL_ADDR:
217 case ND_OPT_REDIRECT_HDR:
218 if (ndopts->nd_opt_array[nd_opt->nd_opt_type]) {
220 "%s: duplicated ND6 option found: type=%d\n",
221 __func__, nd_opt->nd_opt_type);
223 ndopts->nd_opt_array[nd_opt->nd_opt_type] = nd_opt;
226 case ND_OPT_PREFIX_INFO:
227 ndopts->nd_opts_pi_end = nd_opt;
228 if (!ndopts->nd_opt_array[nd_opt->nd_opt_type])
229 ndopts->nd_opt_array[nd_opt->nd_opt_type] = nd_opt;
231 #ifdef CONFIG_IPV6_ROUTE_INFO
232 case ND_OPT_ROUTE_INFO:
233 ndopts->nd_opts_ri_end = nd_opt;
234 if (!ndopts->nd_opts_ri)
235 ndopts->nd_opts_ri = nd_opt;
239 if (ndisc_is_useropt(nd_opt)) {
240 ndopts->nd_useropts_end = nd_opt;
241 if (!ndopts->nd_useropts)
242 ndopts->nd_useropts = nd_opt;
245 * Unknown options must be silently ignored,
246 * to accommodate future extension to the
250 "%s: ignored unsupported option; type=%d, len=%d\n",
257 nd_opt = ((void *)nd_opt) + l;
262 int ndisc_mc_map(const struct in6_addr *addr, char *buf, struct net_device *dev, int dir)
266 case ARPHRD_IEEE802: /* Not sure. Check it later. --ANK */
268 ipv6_eth_mc_map(addr, buf);
271 ipv6_arcnet_mc_map(addr, buf);
273 case ARPHRD_INFINIBAND:
274 ipv6_ib_mc_map(addr, dev->broadcast, buf);
277 return ipv6_ipgre_mc_map(addr, dev->broadcast, buf);
280 memcpy(buf, dev->broadcast, dev->addr_len);
287 EXPORT_SYMBOL(ndisc_mc_map);
289 static u32 ndisc_hash(const void *pkey,
290 const struct net_device *dev,
293 return ndisc_hashfn(pkey, dev, hash_rnd);
296 static int ndisc_constructor(struct neighbour *neigh)
298 struct in6_addr *addr = (struct in6_addr*)&neigh->primary_key;
299 struct net_device *dev = neigh->dev;
300 struct inet6_dev *in6_dev;
301 struct neigh_parms *parms;
302 bool is_multicast = ipv6_addr_is_multicast(addr);
304 in6_dev = in6_dev_get(dev);
305 if (in6_dev == NULL) {
309 parms = in6_dev->nd_parms;
310 __neigh_parms_put(neigh->parms);
311 neigh->parms = neigh_parms_clone(parms);
313 neigh->type = is_multicast ? RTN_MULTICAST : RTN_UNICAST;
314 if (!dev->header_ops) {
315 neigh->nud_state = NUD_NOARP;
316 neigh->ops = &ndisc_direct_ops;
317 neigh->output = neigh_direct_output;
320 neigh->nud_state = NUD_NOARP;
321 ndisc_mc_map(addr, neigh->ha, dev, 1);
322 } else if (dev->flags&(IFF_NOARP|IFF_LOOPBACK)) {
323 neigh->nud_state = NUD_NOARP;
324 memcpy(neigh->ha, dev->dev_addr, dev->addr_len);
325 if (dev->flags&IFF_LOOPBACK)
326 neigh->type = RTN_LOCAL;
327 } else if (dev->flags&IFF_POINTOPOINT) {
328 neigh->nud_state = NUD_NOARP;
329 memcpy(neigh->ha, dev->broadcast, dev->addr_len);
331 if (dev->header_ops->cache)
332 neigh->ops = &ndisc_hh_ops;
334 neigh->ops = &ndisc_generic_ops;
335 if (neigh->nud_state&NUD_VALID)
336 neigh->output = neigh->ops->connected_output;
338 neigh->output = neigh->ops->output;
340 in6_dev_put(in6_dev);
344 static int pndisc_constructor(struct pneigh_entry *n)
346 struct in6_addr *addr = (struct in6_addr*)&n->key;
347 struct in6_addr maddr;
348 struct net_device *dev = n->dev;
350 if (dev == NULL || __in6_dev_get(dev) == NULL)
352 addrconf_addr_solict_mult(addr, &maddr);
353 ipv6_dev_mc_inc(dev, &maddr);
357 static void pndisc_destructor(struct pneigh_entry *n)
359 struct in6_addr *addr = (struct in6_addr*)&n->key;
360 struct in6_addr maddr;
361 struct net_device *dev = n->dev;
363 if (dev == NULL || __in6_dev_get(dev) == NULL)
365 addrconf_addr_solict_mult(addr, &maddr);
366 ipv6_dev_mc_dec(dev, &maddr);
369 static struct sk_buff *ndisc_alloc_skb(struct net_device *dev,
372 int hlen = LL_RESERVED_SPACE(dev);
373 int tlen = dev->needed_tailroom;
374 struct sock *sk = dev_net(dev)->ipv6.ndisc_sk;
378 skb = sock_alloc_send_skb(sk,
379 hlen + sizeof(struct ipv6hdr) + len + tlen,
382 ND_PRINTK(0, err, "ndisc: %s failed to allocate an skb, err=%d\n",
387 skb->protocol = htons(ETH_P_IPV6);
390 skb_reserve(skb, hlen + sizeof(struct ipv6hdr));
391 skb_reset_transport_header(skb);
396 static void ip6_nd_hdr(struct sk_buff *skb,
397 const struct in6_addr *saddr,
398 const struct in6_addr *daddr,
399 int hop_limit, int len)
403 skb_push(skb, sizeof(*hdr));
404 skb_reset_network_header(skb);
407 ip6_flow_hdr(hdr, 0, 0);
409 hdr->payload_len = htons(len);
410 hdr->nexthdr = IPPROTO_ICMPV6;
411 hdr->hop_limit = hop_limit;
417 static struct sk_buff *ndisc_build_skb(struct net_device *dev,
418 const struct in6_addr *daddr,
419 const struct in6_addr *saddr,
420 struct icmp6hdr *icmp6h,
421 const struct in6_addr *target,
424 struct net *net = dev_net(dev);
425 struct sock *sk = net->ipv6.ndisc_sk;
427 struct icmp6hdr *hdr;
435 len = sizeof(struct icmp6hdr) + (target ? sizeof(*target) : 0);
437 optlen += ndisc_opt_addr_space(dev);
439 skb = ndisc_alloc_skb(dev, len + optlen);
443 skb_put(skb, len + optlen);
445 hdr = (struct icmp6hdr *)skb_transport_header(skb);
446 memcpy(hdr, icmp6h, sizeof(*hdr));
448 opt = skb_transport_header(skb) + sizeof(struct icmp6hdr);
450 *(struct in6_addr *)opt = *target;
451 opt += sizeof(*target);
455 ndisc_fill_addr_option(opt, llinfo, dev->dev_addr, dev);
457 hdr->icmp6_cksum = csum_ipv6_magic(saddr, daddr, skb->len,
462 ip6_nd_hdr(skb, saddr, daddr, inet6_sk(sk)->hop_limit, skb->len);
467 static void ndisc_send_skb(struct sk_buff *skb,
468 const struct in6_addr *daddr,
469 const struct in6_addr *saddr,
470 struct icmp6hdr *icmp6h)
473 struct dst_entry *dst;
474 struct net *net = dev_net(skb->dev);
475 struct sock *sk = net->ipv6.ndisc_sk;
476 struct inet6_dev *idev;
480 type = icmp6h->icmp6_type;
482 icmpv6_flow_init(sk, &fl6, type, saddr, daddr, skb->dev->ifindex);
483 dst = icmp6_dst_alloc(skb->dev, &fl6);
489 skb_dst_set(skb, dst);
492 idev = __in6_dev_get(dst->dev);
493 IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUT, skb->len);
495 err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL, dst->dev,
498 ICMP6MSGOUT_INC_STATS(net, idev, type);
499 ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTMSGS);
506 * Send a Neighbour Discover packet
508 static void __ndisc_send(struct net_device *dev,
509 const struct in6_addr *daddr,
510 const struct in6_addr *saddr,
511 struct icmp6hdr *icmp6h, const struct in6_addr *target,
516 skb = ndisc_build_skb(dev, daddr, saddr, icmp6h, target, llinfo);
520 ndisc_send_skb(skb, daddr, saddr, icmp6h);
523 static void ndisc_send_na(struct net_device *dev, struct neighbour *neigh,
524 const struct in6_addr *daddr,
525 const struct in6_addr *solicited_addr,
526 bool router, bool solicited, bool override, bool inc_opt)
528 struct in6_addr tmpaddr;
529 struct inet6_ifaddr *ifp;
530 const struct in6_addr *src_addr;
531 struct icmp6hdr icmp6h = {
532 .icmp6_type = NDISC_NEIGHBOUR_ADVERTISEMENT,
535 /* for anycast or proxy, solicited_addr != src_addr */
536 ifp = ipv6_get_ifaddr(dev_net(dev), solicited_addr, dev, 1);
538 src_addr = solicited_addr;
539 if (ifp->flags & IFA_F_OPTIMISTIC)
541 inc_opt |= ifp->idev->cnf.force_tllao;
544 if (ipv6_dev_get_saddr(dev_net(dev), dev, daddr,
545 inet6_sk(dev_net(dev)->ipv6.ndisc_sk)->srcprefs,
551 icmp6h.icmp6_router = router;
552 icmp6h.icmp6_solicited = solicited;
553 icmp6h.icmp6_override = override;
555 __ndisc_send(dev, daddr, src_addr, &icmp6h, solicited_addr,
556 inc_opt ? ND_OPT_TARGET_LL_ADDR : 0);
559 static void ndisc_send_unsol_na(struct net_device *dev)
561 struct inet6_dev *idev;
562 struct inet6_ifaddr *ifa;
564 idev = in6_dev_get(dev);
568 read_lock_bh(&idev->lock);
569 list_for_each_entry(ifa, &idev->addr_list, if_list) {
570 ndisc_send_na(dev, NULL, &in6addr_linklocal_allnodes, &ifa->addr,
571 /*router=*/ !!idev->cnf.forwarding,
572 /*solicited=*/ false, /*override=*/ true,
575 read_unlock_bh(&idev->lock);
580 void ndisc_send_ns(struct net_device *dev, struct neighbour *neigh,
581 const struct in6_addr *solicit,
582 const struct in6_addr *daddr, const struct in6_addr *saddr)
584 struct in6_addr addr_buf;
585 struct icmp6hdr icmp6h = {
586 .icmp6_type = NDISC_NEIGHBOUR_SOLICITATION,
590 if (ipv6_get_lladdr(dev, &addr_buf,
591 (IFA_F_TENTATIVE|IFA_F_OPTIMISTIC)))
596 __ndisc_send(dev, daddr, saddr, &icmp6h, solicit,
597 !ipv6_addr_any(saddr) ? ND_OPT_SOURCE_LL_ADDR : 0);
600 void ndisc_send_rs(struct net_device *dev, const struct in6_addr *saddr,
601 const struct in6_addr *daddr)
603 struct icmp6hdr icmp6h = {
604 .icmp6_type = NDISC_ROUTER_SOLICITATION,
606 int send_sllao = dev->addr_len;
608 #ifdef CONFIG_IPV6_OPTIMISTIC_DAD
610 * According to section 2.2 of RFC 4429, we must not
611 * send router solicitations with a sllao from
612 * optimistic addresses, but we may send the solicitation
613 * if we don't include the sllao. So here we check
614 * if our address is optimistic, and if so, we
615 * suppress the inclusion of the sllao.
618 struct inet6_ifaddr *ifp = ipv6_get_ifaddr(dev_net(dev), saddr,
621 if (ifp->flags & IFA_F_OPTIMISTIC) {
630 __ndisc_send(dev, daddr, saddr, &icmp6h, NULL,
631 send_sllao ? ND_OPT_SOURCE_LL_ADDR : 0);
635 static void ndisc_error_report(struct neighbour *neigh, struct sk_buff *skb)
638 * "The sender MUST return an ICMP
639 * destination unreachable"
641 dst_link_failure(skb);
645 /* Called with locked neigh: either read or both */
647 static void ndisc_solicit(struct neighbour *neigh, struct sk_buff *skb)
649 struct in6_addr *saddr = NULL;
650 struct in6_addr mcaddr;
651 struct net_device *dev = neigh->dev;
652 struct in6_addr *target = (struct in6_addr *)&neigh->primary_key;
653 int probes = atomic_read(&neigh->probes);
655 if (skb && ipv6_chk_addr(dev_net(dev), &ipv6_hdr(skb)->saddr, dev, 1))
656 saddr = &ipv6_hdr(skb)->saddr;
658 if ((probes -= neigh->parms->ucast_probes) < 0) {
659 if (!(neigh->nud_state & NUD_VALID)) {
661 "%s: trying to ucast probe in NUD_INVALID: %pI6\n",
664 ndisc_send_ns(dev, neigh, target, target, saddr);
665 } else if ((probes -= neigh->parms->app_probes) < 0) {
670 addrconf_addr_solict_mult(target, &mcaddr);
671 ndisc_send_ns(dev, NULL, target, &mcaddr, saddr);
675 static int pndisc_is_router(const void *pkey,
676 struct net_device *dev)
678 struct pneigh_entry *n;
681 read_lock_bh(&nd_tbl.lock);
682 n = __pneigh_lookup(&nd_tbl, dev_net(dev), pkey, dev);
684 ret = !!(n->flags & NTF_ROUTER);
685 read_unlock_bh(&nd_tbl.lock);
690 static void ndisc_recv_ns(struct sk_buff *skb)
692 struct nd_msg *msg = (struct nd_msg *)skb_transport_header(skb);
693 const struct in6_addr *saddr = &ipv6_hdr(skb)->saddr;
694 const struct in6_addr *daddr = &ipv6_hdr(skb)->daddr;
696 u32 ndoptlen = skb->tail - (skb->transport_header +
697 offsetof(struct nd_msg, opt));
698 struct ndisc_options ndopts;
699 struct net_device *dev = skb->dev;
700 struct inet6_ifaddr *ifp;
701 struct inet6_dev *idev = NULL;
702 struct neighbour *neigh;
703 int dad = ipv6_addr_any(saddr);
707 if (skb->len < sizeof(struct nd_msg)) {
708 ND_PRINTK(2, warn, "NS: packet too short\n");
712 if (ipv6_addr_is_multicast(&msg->target)) {
713 ND_PRINTK(2, warn, "NS: multicast target address\n");
719 * DAD has to be destined for solicited node multicast address.
721 if (dad && !ipv6_addr_is_solict_mult(daddr)) {
722 ND_PRINTK(2, warn, "NS: bad DAD packet (wrong destination)\n");
726 if (!ndisc_parse_options(msg->opt, ndoptlen, &ndopts)) {
727 ND_PRINTK(2, warn, "NS: invalid ND options\n");
731 if (ndopts.nd_opts_src_lladdr) {
732 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_src_lladdr, dev);
735 "NS: invalid link-layer address length\n");
740 * If the IP source address is the unspecified address,
741 * there MUST NOT be source link-layer address option
746 "NS: bad DAD packet (link-layer address option)\n");
751 inc = ipv6_addr_is_multicast(daddr);
753 ifp = ipv6_get_ifaddr(dev_net(dev), &msg->target, dev, 1);
756 if (ifp->flags & (IFA_F_TENTATIVE|IFA_F_OPTIMISTIC)) {
759 * We are colliding with another node
761 * so fail our DAD process
763 addrconf_dad_failure(ifp);
767 * This is not a dad solicitation.
768 * If we are an optimistic node,
770 * Otherwise, we should ignore it.
772 if (!(ifp->flags & IFA_F_OPTIMISTIC))
779 struct net *net = dev_net(dev);
781 idev = in6_dev_get(dev);
783 /* XXX: count this drop? */
787 if (ipv6_chk_acast_addr(net, dev, &msg->target) ||
788 (idev->cnf.forwarding &&
789 (net->ipv6.devconf_all->proxy_ndp || idev->cnf.proxy_ndp) &&
790 (is_router = pndisc_is_router(&msg->target, dev)) >= 0)) {
791 if (!(NEIGH_CB(skb)->flags & LOCALLY_ENQUEUED) &&
792 skb->pkt_type != PACKET_HOST &&
794 idev->nd_parms->proxy_delay != 0) {
796 * for anycast or proxy,
797 * sender should delay its response
798 * by a random time between 0 and
799 * MAX_ANYCAST_DELAY_TIME seconds.
800 * (RFC2461) -- yoshfuji
802 struct sk_buff *n = skb_clone(skb, GFP_ATOMIC);
804 pneigh_enqueue(&nd_tbl, idev->nd_parms, n);
812 is_router = idev->cnf.forwarding;
815 ndisc_send_na(dev, NULL, &in6addr_linklocal_allnodes, &msg->target,
816 !!is_router, false, (ifp != NULL), true);
821 NEIGH_CACHE_STAT_INC(&nd_tbl, rcv_probes_mcast);
823 NEIGH_CACHE_STAT_INC(&nd_tbl, rcv_probes_ucast);
826 * update / create cache entry
827 * for the source address
829 neigh = __neigh_lookup(&nd_tbl, saddr, dev,
830 !inc || lladdr || !dev->addr_len);
832 neigh_update(neigh, lladdr, NUD_STALE,
833 NEIGH_UPDATE_F_WEAK_OVERRIDE|
834 NEIGH_UPDATE_F_OVERRIDE);
835 if (neigh || !dev->header_ops) {
836 ndisc_send_na(dev, neigh, saddr, &msg->target,
838 true, (ifp != NULL && inc), inc);
840 neigh_release(neigh);
850 static void ndisc_recv_na(struct sk_buff *skb)
852 struct nd_msg *msg = (struct nd_msg *)skb_transport_header(skb);
853 const struct in6_addr *saddr = &ipv6_hdr(skb)->saddr;
854 const struct in6_addr *daddr = &ipv6_hdr(skb)->daddr;
856 u32 ndoptlen = skb->tail - (skb->transport_header +
857 offsetof(struct nd_msg, opt));
858 struct ndisc_options ndopts;
859 struct net_device *dev = skb->dev;
860 struct inet6_ifaddr *ifp;
861 struct neighbour *neigh;
863 if (skb->len < sizeof(struct nd_msg)) {
864 ND_PRINTK(2, warn, "NA: packet too short\n");
868 if (ipv6_addr_is_multicast(&msg->target)) {
869 ND_PRINTK(2, warn, "NA: target address is multicast\n");
873 if (ipv6_addr_is_multicast(daddr) &&
874 msg->icmph.icmp6_solicited) {
875 ND_PRINTK(2, warn, "NA: solicited NA is multicasted\n");
879 if (!ndisc_parse_options(msg->opt, ndoptlen, &ndopts)) {
880 ND_PRINTK(2, warn, "NS: invalid ND option\n");
883 if (ndopts.nd_opts_tgt_lladdr) {
884 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_tgt_lladdr, dev);
887 "NA: invalid link-layer address length\n");
891 ifp = ipv6_get_ifaddr(dev_net(dev), &msg->target, dev, 1);
893 if (skb->pkt_type != PACKET_LOOPBACK
894 && (ifp->flags & IFA_F_TENTATIVE)) {
895 addrconf_dad_failure(ifp);
898 /* What should we make now? The advertisement
899 is invalid, but ndisc specs say nothing
900 about it. It could be misconfiguration, or
901 an smart proxy agent tries to help us :-)
903 We should not print the error if NA has been
904 received from loopback - it is just our own
905 unsolicited advertisement.
907 if (skb->pkt_type != PACKET_LOOPBACK)
909 "NA: someone advertises our address %pI6 on %s!\n",
910 &ifp->addr, ifp->idev->dev->name);
914 neigh = neigh_lookup(&nd_tbl, &msg->target, dev);
917 u8 old_flags = neigh->flags;
918 struct net *net = dev_net(dev);
920 if (neigh->nud_state & NUD_FAILED)
924 * Don't update the neighbor cache entry on a proxy NA from
925 * ourselves because either the proxied node is off link or it
926 * has already sent a NA to us.
928 if (lladdr && !memcmp(lladdr, dev->dev_addr, dev->addr_len) &&
929 net->ipv6.devconf_all->forwarding && net->ipv6.devconf_all->proxy_ndp &&
930 pneigh_lookup(&nd_tbl, net, &msg->target, dev, 0)) {
931 /* XXX: idev->cnf.proxy_ndp */
935 neigh_update(neigh, lladdr,
936 msg->icmph.icmp6_solicited ? NUD_REACHABLE : NUD_STALE,
937 NEIGH_UPDATE_F_WEAK_OVERRIDE|
938 (msg->icmph.icmp6_override ? NEIGH_UPDATE_F_OVERRIDE : 0)|
939 NEIGH_UPDATE_F_OVERRIDE_ISROUTER|
940 (msg->icmph.icmp6_router ? NEIGH_UPDATE_F_ISROUTER : 0));
942 if ((old_flags & ~neigh->flags) & NTF_ROUTER) {
944 * Change: router to host
947 rt = rt6_get_dflt_router(saddr, dev);
953 neigh_release(neigh);
957 static void ndisc_recv_rs(struct sk_buff *skb)
959 struct rs_msg *rs_msg = (struct rs_msg *)skb_transport_header(skb);
960 unsigned long ndoptlen = skb->len - sizeof(*rs_msg);
961 struct neighbour *neigh;
962 struct inet6_dev *idev;
963 const struct in6_addr *saddr = &ipv6_hdr(skb)->saddr;
964 struct ndisc_options ndopts;
967 if (skb->len < sizeof(*rs_msg))
970 idev = __in6_dev_get(skb->dev);
972 ND_PRINTK(1, err, "RS: can't find in6 device\n");
976 /* Don't accept RS if we're not in router mode */
977 if (!idev->cnf.forwarding)
981 * Don't update NCE if src = ::;
982 * this implies that the source node has no ip address assigned yet.
984 if (ipv6_addr_any(saddr))
987 /* Parse ND options */
988 if (!ndisc_parse_options(rs_msg->opt, ndoptlen, &ndopts)) {
989 ND_PRINTK(2, notice, "NS: invalid ND option, ignored\n");
993 if (ndopts.nd_opts_src_lladdr) {
994 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_src_lladdr,
1000 neigh = __neigh_lookup(&nd_tbl, saddr, skb->dev, 1);
1002 neigh_update(neigh, lladdr, NUD_STALE,
1003 NEIGH_UPDATE_F_WEAK_OVERRIDE|
1004 NEIGH_UPDATE_F_OVERRIDE|
1005 NEIGH_UPDATE_F_OVERRIDE_ISROUTER);
1006 neigh_release(neigh);
1012 static void ndisc_ra_useropt(struct sk_buff *ra, struct nd_opt_hdr *opt)
1014 struct icmp6hdr *icmp6h = (struct icmp6hdr *)skb_transport_header(ra);
1015 struct sk_buff *skb;
1016 struct nlmsghdr *nlh;
1017 struct nduseroptmsg *ndmsg;
1018 struct net *net = dev_net(ra->dev);
1020 int base_size = NLMSG_ALIGN(sizeof(struct nduseroptmsg)
1021 + (opt->nd_opt_len << 3));
1022 size_t msg_size = base_size + nla_total_size(sizeof(struct in6_addr));
1024 skb = nlmsg_new(msg_size, GFP_ATOMIC);
1030 nlh = nlmsg_put(skb, 0, 0, RTM_NEWNDUSEROPT, base_size, 0);
1032 goto nla_put_failure;
1035 ndmsg = nlmsg_data(nlh);
1036 ndmsg->nduseropt_family = AF_INET6;
1037 ndmsg->nduseropt_ifindex = ra->dev->ifindex;
1038 ndmsg->nduseropt_icmp_type = icmp6h->icmp6_type;
1039 ndmsg->nduseropt_icmp_code = icmp6h->icmp6_code;
1040 ndmsg->nduseropt_opts_len = opt->nd_opt_len << 3;
1042 memcpy(ndmsg + 1, opt, opt->nd_opt_len << 3);
1044 if (nla_put(skb, NDUSEROPT_SRCADDR, sizeof(struct in6_addr),
1045 &ipv6_hdr(ra)->saddr))
1046 goto nla_put_failure;
1047 nlmsg_end(skb, nlh);
1049 rtnl_notify(skb, net, 0, RTNLGRP_ND_USEROPT, NULL, GFP_ATOMIC);
1056 rtnl_set_sk_err(net, RTNLGRP_ND_USEROPT, err);
1059 static void ndisc_router_discovery(struct sk_buff *skb)
1061 struct ra_msg *ra_msg = (struct ra_msg *)skb_transport_header(skb);
1062 struct neighbour *neigh = NULL;
1063 struct inet6_dev *in6_dev;
1064 struct rt6_info *rt = NULL;
1066 struct ndisc_options ndopts;
1068 unsigned int pref = 0;
1070 __u8 * opt = (__u8 *)(ra_msg + 1);
1072 optlen = (skb->tail - skb->transport_header) - sizeof(struct ra_msg);
1074 if (!(ipv6_addr_type(&ipv6_hdr(skb)->saddr) & IPV6_ADDR_LINKLOCAL)) {
1075 ND_PRINTK(2, warn, "RA: source address is not link-local\n");
1079 ND_PRINTK(2, warn, "RA: packet too short\n");
1083 #ifdef CONFIG_IPV6_NDISC_NODETYPE
1084 if (skb->ndisc_nodetype == NDISC_NODETYPE_HOST) {
1085 ND_PRINTK(2, warn, "RA: from host or unauthorized router\n");
1091 * set the RA_RECV flag in the interface
1094 in6_dev = __in6_dev_get(skb->dev);
1095 if (in6_dev == NULL) {
1096 ND_PRINTK(0, err, "RA: can't find inet6 device for %s\n",
1101 if (!ndisc_parse_options(opt, optlen, &ndopts)) {
1102 ND_PRINTK(2, warn, "RA: invalid ND options\n");
1106 if (!ipv6_accept_ra(in6_dev))
1107 goto skip_linkparms;
1109 #ifdef CONFIG_IPV6_NDISC_NODETYPE
1110 /* skip link-specific parameters from interior routers */
1111 if (skb->ndisc_nodetype == NDISC_NODETYPE_NODEFAULT)
1112 goto skip_linkparms;
1115 if (in6_dev->if_flags & IF_RS_SENT) {
1117 * flag that an RA was received after an RS was sent
1118 * out on this interface.
1120 in6_dev->if_flags |= IF_RA_RCVD;
1124 * Remember the managed/otherconf flags from most recently
1125 * received RA message (RFC 2462) -- yoshfuji
1127 in6_dev->if_flags = (in6_dev->if_flags & ~(IF_RA_MANAGED |
1129 (ra_msg->icmph.icmp6_addrconf_managed ?
1130 IF_RA_MANAGED : 0) |
1131 (ra_msg->icmph.icmp6_addrconf_other ?
1132 IF_RA_OTHERCONF : 0);
1134 if (!in6_dev->cnf.accept_ra_defrtr)
1137 if (ipv6_chk_addr(dev_net(in6_dev->dev), &ipv6_hdr(skb)->saddr, NULL, 0))
1140 lifetime = ntohs(ra_msg->icmph.icmp6_rt_lifetime);
1142 #ifdef CONFIG_IPV6_ROUTER_PREF
1143 pref = ra_msg->icmph.icmp6_router_pref;
1144 /* 10b is handled as if it were 00b (medium) */
1145 if (pref == ICMPV6_ROUTER_PREF_INVALID ||
1146 !in6_dev->cnf.accept_ra_rtr_pref)
1147 pref = ICMPV6_ROUTER_PREF_MEDIUM;
1150 rt = rt6_get_dflt_router(&ipv6_hdr(skb)->saddr, skb->dev);
1153 neigh = dst_neigh_lookup(&rt->dst, &ipv6_hdr(skb)->saddr);
1156 "RA: %s got default router without neighbour\n",
1162 if (rt && lifetime == 0) {
1167 if (rt == NULL && lifetime) {
1168 ND_PRINTK(3, dbg, "RA: adding default router\n");
1170 rt = rt6_add_dflt_router(&ipv6_hdr(skb)->saddr, skb->dev, pref);
1173 "RA: %s failed to add default route\n",
1178 neigh = dst_neigh_lookup(&rt->dst, &ipv6_hdr(skb)->saddr);
1179 if (neigh == NULL) {
1181 "RA: %s got default router without neighbour\n",
1186 neigh->flags |= NTF_ROUTER;
1188 rt->rt6i_flags = (rt->rt6i_flags & ~RTF_PREF_MASK) | RTF_PREF(pref);
1192 rt6_set_expires(rt, jiffies + (HZ * lifetime));
1193 if (ra_msg->icmph.icmp6_hop_limit) {
1194 in6_dev->cnf.hop_limit = ra_msg->icmph.icmp6_hop_limit;
1196 dst_metric_set(&rt->dst, RTAX_HOPLIMIT,
1197 ra_msg->icmph.icmp6_hop_limit);
1203 * Update Reachable Time and Retrans Timer
1206 if (in6_dev->nd_parms) {
1207 unsigned long rtime = ntohl(ra_msg->retrans_timer);
1209 if (rtime && rtime/1000 < MAX_SCHEDULE_TIMEOUT/HZ) {
1210 rtime = (rtime*HZ)/1000;
1213 in6_dev->nd_parms->retrans_time = rtime;
1214 in6_dev->tstamp = jiffies;
1215 inet6_ifinfo_notify(RTM_NEWLINK, in6_dev);
1218 rtime = ntohl(ra_msg->reachable_time);
1219 if (rtime && rtime/1000 < MAX_SCHEDULE_TIMEOUT/(3*HZ)) {
1220 rtime = (rtime*HZ)/1000;
1225 if (rtime != in6_dev->nd_parms->base_reachable_time) {
1226 in6_dev->nd_parms->base_reachable_time = rtime;
1227 in6_dev->nd_parms->gc_staletime = 3 * rtime;
1228 in6_dev->nd_parms->reachable_time = neigh_rand_reach_time(rtime);
1229 in6_dev->tstamp = jiffies;
1230 inet6_ifinfo_notify(RTM_NEWLINK, in6_dev);
1242 neigh = __neigh_lookup(&nd_tbl, &ipv6_hdr(skb)->saddr,
1246 if (ndopts.nd_opts_src_lladdr) {
1247 lladdr = ndisc_opt_addr_data(ndopts.nd_opts_src_lladdr,
1251 "RA: invalid link-layer address length\n");
1255 neigh_update(neigh, lladdr, NUD_STALE,
1256 NEIGH_UPDATE_F_WEAK_OVERRIDE|
1257 NEIGH_UPDATE_F_OVERRIDE|
1258 NEIGH_UPDATE_F_OVERRIDE_ISROUTER|
1259 NEIGH_UPDATE_F_ISROUTER);
1262 if (!ipv6_accept_ra(in6_dev))
1265 #ifdef CONFIG_IPV6_ROUTE_INFO
1266 if (ipv6_chk_addr(dev_net(in6_dev->dev), &ipv6_hdr(skb)->saddr, NULL, 0))
1267 goto skip_routeinfo;
1269 if (in6_dev->cnf.accept_ra_rtr_pref && ndopts.nd_opts_ri) {
1270 struct nd_opt_hdr *p;
1271 for (p = ndopts.nd_opts_ri;
1273 p = ndisc_next_option(p, ndopts.nd_opts_ri_end)) {
1274 struct route_info *ri = (struct route_info *)p;
1275 #ifdef CONFIG_IPV6_NDISC_NODETYPE
1276 if (skb->ndisc_nodetype == NDISC_NODETYPE_NODEFAULT &&
1277 ri->prefix_len == 0)
1280 if (ri->prefix_len > in6_dev->cnf.accept_ra_rt_info_max_plen)
1282 rt6_route_rcv(skb->dev, (u8*)p, (p->nd_opt_len) << 3,
1283 &ipv6_hdr(skb)->saddr);
1290 #ifdef CONFIG_IPV6_NDISC_NODETYPE
1291 /* skip link-specific ndopts from interior routers */
1292 if (skb->ndisc_nodetype == NDISC_NODETYPE_NODEFAULT)
1296 if (in6_dev->cnf.accept_ra_pinfo && ndopts.nd_opts_pi) {
1297 struct nd_opt_hdr *p;
1298 for (p = ndopts.nd_opts_pi;
1300 p = ndisc_next_option(p, ndopts.nd_opts_pi_end)) {
1301 addrconf_prefix_rcv(skb->dev, (u8 *)p,
1302 (p->nd_opt_len) << 3,
1303 ndopts.nd_opts_src_lladdr != NULL);
1307 if (ndopts.nd_opts_mtu) {
1311 memcpy(&n, ((u8*)(ndopts.nd_opts_mtu+1))+2, sizeof(mtu));
1314 if (mtu < IPV6_MIN_MTU || mtu > skb->dev->mtu) {
1315 ND_PRINTK(2, warn, "RA: invalid mtu: %d\n", mtu);
1316 } else if (in6_dev->cnf.mtu6 != mtu) {
1317 in6_dev->cnf.mtu6 = mtu;
1320 dst_metric_set(&rt->dst, RTAX_MTU, mtu);
1322 rt6_mtu_change(skb->dev, mtu);
1326 if (ndopts.nd_useropts) {
1327 struct nd_opt_hdr *p;
1328 for (p = ndopts.nd_useropts;
1330 p = ndisc_next_useropt(p, ndopts.nd_useropts_end)) {
1331 ndisc_ra_useropt(skb, p);
1335 if (ndopts.nd_opts_tgt_lladdr || ndopts.nd_opts_rh) {
1336 ND_PRINTK(2, warn, "RA: invalid RA options\n");
1341 neigh_release(neigh);
1344 static void ndisc_redirect_rcv(struct sk_buff *skb)
1347 struct ndisc_options ndopts;
1348 struct rd_msg *msg = (struct rd_msg *)skb_transport_header(skb);
1349 u32 ndoptlen = skb->tail - (skb->transport_header +
1350 offsetof(struct rd_msg, opt));
1352 #ifdef CONFIG_IPV6_NDISC_NODETYPE
1353 switch (skb->ndisc_nodetype) {
1354 case NDISC_NODETYPE_HOST:
1355 case NDISC_NODETYPE_NODEFAULT:
1357 "Redirect: from host or unauthorized router\n");
1362 if (!(ipv6_addr_type(&ipv6_hdr(skb)->saddr) & IPV6_ADDR_LINKLOCAL)) {
1364 "Redirect: source address is not link-local\n");
1368 if (!ndisc_parse_options(msg->opt, ndoptlen, &ndopts))
1371 if (!ndopts.nd_opts_rh)
1374 hdr = (u8 *)ndopts.nd_opts_rh;
1376 if (!pskb_pull(skb, hdr - skb_transport_header(skb)))
1379 icmpv6_notify(skb, NDISC_REDIRECT, 0, 0);
1382 static u8 *ndisc_fill_redirect_hdr_option(u8 *opt, struct sk_buff *orig_skb,
1386 *(opt++) = ND_OPT_REDIRECT_HDR;
1387 *(opt++) = (rd_len >> 3);
1390 memcpy(opt, ipv6_hdr(orig_skb), rd_len - 8);
1392 return opt + rd_len - 8;
1395 void ndisc_send_redirect(struct sk_buff *skb, const struct in6_addr *target)
1397 struct net_device *dev = skb->dev;
1398 struct net *net = dev_net(dev);
1399 struct sock *sk = net->ipv6.ndisc_sk;
1401 struct inet_peer *peer;
1402 struct sk_buff *buff;
1404 struct in6_addr saddr_buf;
1405 struct rt6_info *rt;
1406 struct dst_entry *dst;
1407 struct inet6_dev *idev;
1412 u8 ha_buf[MAX_ADDR_LEN], *ha = NULL;
1415 if (ipv6_get_lladdr(dev, &saddr_buf, IFA_F_TENTATIVE)) {
1416 ND_PRINTK(2, warn, "Redirect: no link-local address on %s\n",
1421 if (!ipv6_addr_equal(&ipv6_hdr(skb)->daddr, target) &&
1422 ipv6_addr_type(target) != (IPV6_ADDR_UNICAST|IPV6_ADDR_LINKLOCAL)) {
1424 "Redirect: target address is not link-local unicast\n");
1428 icmpv6_flow_init(sk, &fl6, NDISC_REDIRECT,
1429 &saddr_buf, &ipv6_hdr(skb)->saddr, dev->ifindex);
1431 dst = ip6_route_output(net, NULL, &fl6);
1436 dst = xfrm_lookup(net, dst, flowi6_to_flowi(&fl6), NULL, 0);
1440 rt = (struct rt6_info *) dst;
1442 if (rt->rt6i_flags & RTF_GATEWAY) {
1444 "Redirect: destination is not a neighbour\n");
1447 peer = inet_getpeer_v6(net->ipv6.peers, &rt->rt6i_dst.addr, 1);
1448 ret = inet_peer_xrlim_allow(peer, 1*HZ);
1454 if (dev->addr_len) {
1455 struct neighbour *neigh = dst_neigh_lookup(skb_dst(skb), target);
1458 "Redirect: no neigh for target address\n");
1462 read_lock_bh(&neigh->lock);
1463 if (neigh->nud_state & NUD_VALID) {
1464 memcpy(ha_buf, neigh->ha, dev->addr_len);
1465 read_unlock_bh(&neigh->lock);
1467 optlen += ndisc_opt_addr_space(dev);
1469 read_unlock_bh(&neigh->lock);
1471 neigh_release(neigh);
1474 rd_len = min_t(unsigned int,
1475 IPV6_MIN_MTU - sizeof(struct ipv6hdr) - sizeof(*msg) - optlen,
1480 buff = ndisc_alloc_skb(dev, sizeof(*msg) + optlen);
1484 skb_put(buff, sizeof(*msg) + optlen);
1485 msg = (struct rd_msg *)icmp6_hdr(buff);
1487 memset(&msg->icmph, 0, sizeof(struct icmp6hdr));
1488 msg->icmph.icmp6_type = NDISC_REDIRECT;
1491 * copy target and destination addresses
1494 msg->target = *target;
1495 msg->dest = ipv6_hdr(skb)->daddr;
1500 * include target_address option
1504 opt = ndisc_fill_addr_option(opt, ND_OPT_TARGET_LL_ADDR, ha, dev);
1507 * build redirect option and copy skb over to the new packet.
1511 opt = ndisc_fill_redirect_hdr_option(opt, skb, rd_len);
1513 msg->icmph.icmp6_cksum = csum_ipv6_magic(&saddr_buf, &ipv6_hdr(skb)->saddr,
1514 buff->len, IPPROTO_ICMPV6,
1515 csum_partial(msg, buff->len, 0));
1517 ip6_nd_hdr(buff, &saddr_buf, &ipv6_hdr(skb)->saddr,
1518 inet6_sk(sk)->hop_limit, buff->len);
1520 skb_dst_set(buff, dst);
1522 idev = __in6_dev_get(dst->dev);
1523 IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUT, skb->len);
1524 err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, buff, NULL, dst->dev,
1527 ICMP6MSGOUT_INC_STATS(net, idev, NDISC_REDIRECT);
1528 ICMP6_INC_STATS(net, idev, ICMP6_MIB_OUTMSGS);
1538 static void pndisc_redo(struct sk_buff *skb)
1544 int ndisc_rcv(struct sk_buff *skb)
1548 if (skb_linearize(skb))
1551 msg = (struct nd_msg *)skb_transport_header(skb);
1553 __skb_push(skb, skb->data - skb_transport_header(skb));
1555 if (ipv6_hdr(skb)->hop_limit != 255) {
1556 ND_PRINTK(2, warn, "NDISC: invalid hop-limit: %d\n",
1557 ipv6_hdr(skb)->hop_limit);
1561 if (msg->icmph.icmp6_code != 0) {
1562 ND_PRINTK(2, warn, "NDISC: invalid ICMPv6 code: %d\n",
1563 msg->icmph.icmp6_code);
1567 memset(NEIGH_CB(skb), 0, sizeof(struct neighbour_cb));
1569 switch (msg->icmph.icmp6_type) {
1570 case NDISC_NEIGHBOUR_SOLICITATION:
1574 case NDISC_NEIGHBOUR_ADVERTISEMENT:
1578 case NDISC_ROUTER_SOLICITATION:
1582 case NDISC_ROUTER_ADVERTISEMENT:
1583 ndisc_router_discovery(skb);
1586 case NDISC_REDIRECT:
1587 ndisc_redirect_rcv(skb);
1594 static int ndisc_netdev_event(struct notifier_block *this, unsigned long event, void *ptr)
1596 struct net_device *dev = ptr;
1597 struct net *net = dev_net(dev);
1598 struct inet6_dev *idev;
1601 case NETDEV_CHANGEADDR:
1602 neigh_changeaddr(&nd_tbl, dev);
1603 fib6_run_gc(~0UL, net);
1604 idev = in6_dev_get(dev);
1607 if (idev->cnf.ndisc_notify)
1608 ndisc_send_unsol_na(dev);
1612 neigh_ifdown(&nd_tbl, dev);
1613 fib6_run_gc(~0UL, net);
1615 case NETDEV_NOTIFY_PEERS:
1616 ndisc_send_unsol_na(dev);
1625 static struct notifier_block ndisc_netdev_notifier = {
1626 .notifier_call = ndisc_netdev_event,
1629 #ifdef CONFIG_SYSCTL
1630 static void ndisc_warn_deprecated_sysctl(struct ctl_table *ctl,
1631 const char *func, const char *dev_name)
1633 static char warncomm[TASK_COMM_LEN];
1635 if (strcmp(warncomm, current->comm) && warned < 5) {
1636 strcpy(warncomm, current->comm);
1637 pr_warn("process `%s' is using deprecated sysctl (%s) net.ipv6.neigh.%s.%s - use net.ipv6.neigh.%s.%s_ms instead\n",
1639 dev_name, ctl->procname,
1640 dev_name, ctl->procname);
1645 int ndisc_ifinfo_sysctl_change(struct ctl_table *ctl, int write, void __user *buffer, size_t *lenp, loff_t *ppos)
1647 struct net_device *dev = ctl->extra1;
1648 struct inet6_dev *idev;
1651 if ((strcmp(ctl->procname, "retrans_time") == 0) ||
1652 (strcmp(ctl->procname, "base_reachable_time") == 0))
1653 ndisc_warn_deprecated_sysctl(ctl, "syscall", dev ? dev->name : "default");
1655 if (strcmp(ctl->procname, "retrans_time") == 0)
1656 ret = proc_dointvec(ctl, write, buffer, lenp, ppos);
1658 else if (strcmp(ctl->procname, "base_reachable_time") == 0)
1659 ret = proc_dointvec_jiffies(ctl, write,
1660 buffer, lenp, ppos);
1662 else if ((strcmp(ctl->procname, "retrans_time_ms") == 0) ||
1663 (strcmp(ctl->procname, "base_reachable_time_ms") == 0))
1664 ret = proc_dointvec_ms_jiffies(ctl, write,
1665 buffer, lenp, ppos);
1669 if (write && ret == 0 && dev && (idev = in6_dev_get(dev)) != NULL) {
1670 if (ctl->data == &idev->nd_parms->base_reachable_time)
1671 idev->nd_parms->reachable_time = neigh_rand_reach_time(idev->nd_parms->base_reachable_time);
1672 idev->tstamp = jiffies;
1673 inet6_ifinfo_notify(RTM_NEWLINK, idev);
1682 static int __net_init ndisc_net_init(struct net *net)
1684 struct ipv6_pinfo *np;
1688 err = inet_ctl_sock_create(&sk, PF_INET6,
1689 SOCK_RAW, IPPROTO_ICMPV6, net);
1692 "NDISC: Failed to initialize the control socket (err %d)\n",
1697 net->ipv6.ndisc_sk = sk;
1700 np->hop_limit = 255;
1701 /* Do not loopback ndisc messages */
1707 static void __net_exit ndisc_net_exit(struct net *net)
1709 inet_ctl_sock_destroy(net->ipv6.ndisc_sk);
1712 static struct pernet_operations ndisc_net_ops = {
1713 .init = ndisc_net_init,
1714 .exit = ndisc_net_exit,
1717 int __init ndisc_init(void)
1721 err = register_pernet_subsys(&ndisc_net_ops);
1725 * Initialize the neighbour table
1727 neigh_table_init(&nd_tbl);
1729 #ifdef CONFIG_SYSCTL
1730 err = neigh_sysctl_register(NULL, &nd_tbl.parms, "ipv6",
1731 &ndisc_ifinfo_sysctl_change);
1733 goto out_unregister_pernet;
1735 err = register_netdevice_notifier(&ndisc_netdev_notifier);
1737 goto out_unregister_sysctl;
1741 out_unregister_sysctl:
1742 #ifdef CONFIG_SYSCTL
1743 neigh_sysctl_unregister(&nd_tbl.parms);
1744 out_unregister_pernet:
1746 unregister_pernet_subsys(&ndisc_net_ops);
1750 void ndisc_cleanup(void)
1752 unregister_netdevice_notifier(&ndisc_netdev_notifier);
1753 #ifdef CONFIG_SYSCTL
1754 neigh_sysctl_unregister(&nd_tbl.parms);
1756 neigh_table_clear(&nd_tbl);
1757 unregister_pernet_subsys(&ndisc_net_ops);