187 lines · c
1// SPDX-License-Identifier: GPL-2.02/* Copyright (C) 2021, Intel Corporation. */3 4#include "ice_virtchnl_allowlist.h"5 6/* Purpose of this file is to share functionality to allowlist or denylist7 * opcodes used in PF <-> VF communication. Group of opcodes:8 * - default -> should be always allowed after creating VF,9 * default_allowlist_opcodes10 * - opcodes needed by VF to work correctly, but not associated with caps ->11 * should be allowed after successful VF resources allocation,12 * working_allowlist_opcodes13 * - opcodes needed by VF when caps are activated14 *15 * Caps that don't use new opcodes (no opcodes should be allowed):16 * - VIRTCHNL_VF_OFFLOAD_WB_ON_ITR17 * - VIRTCHNL_VF_OFFLOAD_CRC18 * - VIRTCHNL_VF_OFFLOAD_RX_POLLING19 * - VIRTCHNL_VF_OFFLOAD_RSS_PCTYPE_V220 * - VIRTCHNL_VF_OFFLOAD_ENCAP21 * - VIRTCHNL_VF_OFFLOAD_ENCAP_CSUM22 * - VIRTCHNL_VF_OFFLOAD_RX_ENCAP_CSUM23 * - VIRTCHNL_VF_OFFLOAD_USO24 */25 26/* default opcodes to communicate with VF */27static const u32 default_allowlist_opcodes[] = {28 VIRTCHNL_OP_GET_VF_RESOURCES, VIRTCHNL_OP_VERSION, VIRTCHNL_OP_RESET_VF,29};30 31/* opcodes supported after successful VIRTCHNL_OP_GET_VF_RESOURCES */32static const u32 working_allowlist_opcodes[] = {33 VIRTCHNL_OP_CONFIG_TX_QUEUE, VIRTCHNL_OP_CONFIG_RX_QUEUE,34 VIRTCHNL_OP_CONFIG_VSI_QUEUES, VIRTCHNL_OP_CONFIG_IRQ_MAP,35 VIRTCHNL_OP_ENABLE_QUEUES, VIRTCHNL_OP_DISABLE_QUEUES,36 VIRTCHNL_OP_GET_STATS, VIRTCHNL_OP_EVENT,37};38 39/* VIRTCHNL_VF_OFFLOAD_L2 */40static const u32 l2_allowlist_opcodes[] = {41 VIRTCHNL_OP_ADD_ETH_ADDR, VIRTCHNL_OP_DEL_ETH_ADDR,42 VIRTCHNL_OP_CONFIG_PROMISCUOUS_MODE,43};44 45/* VIRTCHNL_VF_OFFLOAD_REQ_QUEUES */46static const u32 req_queues_allowlist_opcodes[] = {47 VIRTCHNL_OP_REQUEST_QUEUES,48};49 50/* VIRTCHNL_VF_OFFLOAD_VLAN */51static const u32 vlan_allowlist_opcodes[] = {52 VIRTCHNL_OP_ADD_VLAN, VIRTCHNL_OP_DEL_VLAN,53 VIRTCHNL_OP_ENABLE_VLAN_STRIPPING, VIRTCHNL_OP_DISABLE_VLAN_STRIPPING,54};55 56/* VIRTCHNL_VF_OFFLOAD_VLAN_V2 */57static const u32 vlan_v2_allowlist_opcodes[] = {58 VIRTCHNL_OP_GET_OFFLOAD_VLAN_V2_CAPS, VIRTCHNL_OP_ADD_VLAN_V2,59 VIRTCHNL_OP_DEL_VLAN_V2, VIRTCHNL_OP_ENABLE_VLAN_STRIPPING_V2,60 VIRTCHNL_OP_DISABLE_VLAN_STRIPPING_V2,61 VIRTCHNL_OP_ENABLE_VLAN_INSERTION_V2,62 VIRTCHNL_OP_DISABLE_VLAN_INSERTION_V2,63};64 65/* VIRTCHNL_VF_OFFLOAD_RSS_PF */66static const u32 rss_pf_allowlist_opcodes[] = {67 VIRTCHNL_OP_CONFIG_RSS_KEY, VIRTCHNL_OP_CONFIG_RSS_LUT,68 VIRTCHNL_OP_GET_RSS_HENA_CAPS, VIRTCHNL_OP_SET_RSS_HENA,69 VIRTCHNL_OP_CONFIG_RSS_HFUNC,70};71 72/* VIRTCHNL_VF_OFFLOAD_RX_FLEX_DESC */73static const u32 rx_flex_desc_allowlist_opcodes[] = {74 VIRTCHNL_OP_GET_SUPPORTED_RXDIDS,75};76 77/* VIRTCHNL_VF_OFFLOAD_ADV_RSS_PF */78static const u32 adv_rss_pf_allowlist_opcodes[] = {79 VIRTCHNL_OP_ADD_RSS_CFG, VIRTCHNL_OP_DEL_RSS_CFG,80};81 82/* VIRTCHNL_VF_OFFLOAD_FDIR_PF */83static const u32 fdir_pf_allowlist_opcodes[] = {84 VIRTCHNL_OP_ADD_FDIR_FILTER, VIRTCHNL_OP_DEL_FDIR_FILTER,85};86 87struct allowlist_opcode_info {88 const u32 *opcodes;89 size_t size;90};91 92#define BIT_INDEX(caps) (HWEIGHT((caps) - 1))93#define ALLOW_ITEM(caps, list) \94 [BIT_INDEX(caps)] = { \95 .opcodes = list, \96 .size = ARRAY_SIZE(list) \97 }98static const struct allowlist_opcode_info allowlist_opcodes[] = {99 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_L2, l2_allowlist_opcodes),100 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_REQ_QUEUES, req_queues_allowlist_opcodes),101 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_VLAN, vlan_allowlist_opcodes),102 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_RSS_PF, rss_pf_allowlist_opcodes),103 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_RX_FLEX_DESC, rx_flex_desc_allowlist_opcodes),104 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_ADV_RSS_PF, adv_rss_pf_allowlist_opcodes),105 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_FDIR_PF, fdir_pf_allowlist_opcodes),106 ALLOW_ITEM(VIRTCHNL_VF_OFFLOAD_VLAN_V2, vlan_v2_allowlist_opcodes),107};108 109/**110 * ice_vc_is_opcode_allowed - check if this opcode is allowed on this VF111 * @vf: pointer to VF structure112 * @opcode: virtchnl opcode113 *114 * Return true if message is allowed on this VF115 */116bool ice_vc_is_opcode_allowed(struct ice_vf *vf, u32 opcode)117{118 if (opcode >= VIRTCHNL_OP_MAX)119 return false;120 121 return test_bit(opcode, vf->opcodes_allowlist);122}123 124/**125 * ice_vc_allowlist_opcodes - allowlist selected opcodes126 * @vf: pointer to VF structure127 * @opcodes: array of opocodes to allowlist128 * @size: size of opcodes array129 *130 * Function should be called to allowlist opcodes on VF.131 */132static void133ice_vc_allowlist_opcodes(struct ice_vf *vf, const u32 *opcodes, size_t size)134{135 unsigned int i;136 137 for (i = 0; i < size; i++)138 set_bit(opcodes[i], vf->opcodes_allowlist);139}140 141/**142 * ice_vc_clear_allowlist - clear all allowlist opcodes143 * @vf: pointer to VF structure144 */145static void ice_vc_clear_allowlist(struct ice_vf *vf)146{147 bitmap_zero(vf->opcodes_allowlist, VIRTCHNL_OP_MAX);148}149 150/**151 * ice_vc_set_default_allowlist - allowlist default opcodes for VF152 * @vf: pointer to VF structure153 */154void ice_vc_set_default_allowlist(struct ice_vf *vf)155{156 ice_vc_clear_allowlist(vf);157 ice_vc_allowlist_opcodes(vf, default_allowlist_opcodes,158 ARRAY_SIZE(default_allowlist_opcodes));159}160 161/**162 * ice_vc_set_working_allowlist - allowlist opcodes needed to by VF to work163 * @vf: pointer to VF structure164 *165 * allowlist opcodes that aren't associated with specific caps, but166 * are needed by VF to work.167 */168void ice_vc_set_working_allowlist(struct ice_vf *vf)169{170 ice_vc_allowlist_opcodes(vf, working_allowlist_opcodes,171 ARRAY_SIZE(working_allowlist_opcodes));172}173 174/**175 * ice_vc_set_caps_allowlist - allowlist VF opcodes according caps176 * @vf: pointer to VF structure177 */178void ice_vc_set_caps_allowlist(struct ice_vf *vf)179{180 unsigned long caps = vf->driver_caps;181 unsigned int i;182 183 for_each_set_bit(i, &caps, ARRAY_SIZE(allowlist_opcodes))184 ice_vc_allowlist_opcodes(vf, allowlist_opcodes[i].opcodes,185 allowlist_opcodes[i].size);186}187