HomeFreeBSD

bridge: check allow_llz_overlap before member_ifaddrs

Description

bridge: check allow_llz_overlap before member_ifaddrs

When adding a new interface to a bridge and allow_llz_overlap=0, which
is the default value, if_bridge checks if the interface has IPv6 link
local addresses assigned, and if it does, it calls in6_ifdetach() to
remove all IPv6 addresses from the interface.

This means it was possible to do this:

% ifconfig bridge1 create inet6 -ifdisabled auto_linklocal up
% ifconfig epair20 create inet6 -ifdisabled auto_linklocal up
% ifconfig bridge1 addm epair20a

... with the result that the link-local address on epair20a would be
removed, then the interface would be added to the bridge.

If member_ifaddrs=0, which is also the default value, this no longer
works:

% ifconfig bridge1 addm epair20a
ifconfig: BRDGADD epair20a: Invalid argument

This is because the member_ifaddrs check runs before allow_llz_overlap
does its thing, and returns EINVAL since the new interface has IP
addresses on it.

To restore the previous behaviour, reverse the order of these two
checks, so the IPv6 addresses are removed before we check whether
the interface has IPv6 addresses.

MFC after: 1 week
Reviewed by: kevans, kp
Approved by: kevans (mentor)
Differential Revision: https://reviews.freebsd.org/D50477

Details

Provenance
ivyAuthored on May 23 2025, 6:08 PM
Reviewer
kevans
Differential Revision
D50477: bridge: check allow_llz_overlap before member_ifaddrs
Parents
rG14ec281a09d7: namei: Remove a now-unused variable
Branches
Unknown
Tags
Unknown