openbsd/src
1
0
Fork 0
mirror of https://github.com/openbsd/src.git synced 2026-04-25 14:45:52 +00:00
Code Issues Projects Releases Wiki Activity

implement handling of the IFBIF_LOCKED flag on port interfaces.

Browse Source 
frames received by ports with LOCKED set must have an address entry
for the src mac in the fib/address cache pointing at the same
interface.
This commit is contained in:
dlg
2025-10-21 05:13:20 +00:00
parent 12634953dc
commit 402fe4fae4
1 changed files with 17 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
sys/net/if_veb.c
View File

@@ -1,4 +1,4 @@
/* $OpenBSD: if_veb.c,v 1.44 2025/10/07 07:52:46 dlg Exp $ */
/* $OpenBSD: if_veb.c,v 1.45 2025/10/21 05:13:20 dlg Exp $ */
/*
* Copyright (c) 2021 David Gwynne <dlg@openbsd.org>
@@ -64,7 +64,8 @@
#endif
/* SIOCBRDGIFFLGS, SIOCBRDGIFFLGS */
#define VEB_IFBIF_FLAGS (IFBIF_LEARNING|IFBIF_DISCOVER|IFBIF_BLOCKNONIP)
#define VEB_IFBIF_FLAGS \
(IFBIF_LOCKED|IFBIF_LEARNING|IFBIF_DISCOVER|IFBIF_BLOCKNONIP)
struct veb_rule {
TAILQ_ENTRY(veb_rule) vr_entry;
@@ -1176,6 +1177,17 @@ veb_port_input(struct ifnet *ifp0, struct mbuf *m, uint64_t dst, void *brport,
eh = mtod(m, struct ether_header *);
src = ether_addr_to_e64((struct ether_addr *)eh->ether_shost);
if (ISSET(p->p_bif_flags, IFBIF_LOCKED)) {
struct veb_port *rp;
smr_read_enter();
rp = etherbridge_resolve(&sc->sc_eb, src);
smr_read_leave();
if (rp != p)
goto drop;
}
/* Is this a MAC Bridge component Reserved address? */
if (ETH64_IS_8021_RSVD(dst)) {
if (!ISSET(ifp->if_flags, IFF_LINK0)) {
@@ -2089,6 +2101,9 @@ veb_port_set_flags(struct veb_softc *sc, struct ifbreq *ifbr)
if (ISSET(ifbr->ifbr_ifsflags, ~VEB_IFBIF_FLAGS))
return (EINVAL);
if (ISSET(ifbr->ifbr_ifsflags, IFBIF_LOCKED) &&
ISSET(ifbr->ifbr_ifsflags, IFBIF_LEARNING|IFBIF_DISCOVER))
return (EINVAL);
p = veb_port_get(sc, ifbr->ifbr_ifsname);
if (p == NULL)