net: macsec: PN wrap callback

Allow to call macsec_pn_wrapped from hardware drivers to notify when a
PN rolls over. Some drivers might used an interrupt to implement this.

Signed-off-by: Antoine Tenart <antoine.tenart@bootlin.com>
Signed-off-by: David S. Miller <davem@davemloft.net>

diff --git a/drivers/net/macsec.c b/drivers/net/macsec.c
index e515919e8687f86ccae6a1d5c2fe6fadf4920ae4..45bfd99f17fa9f6adae6a2e25fc821b23c8c8df4 100644 (file)
--- a/drivers/net/macsec.c
+++ b/drivers/net/macsec.c
@@ -424,6 +424,23 @@ static struct macsec_eth_header *macsec_ethhdr(struct sk_buff *skb)
        return (struct macsec_eth_header *)skb_mac_header(skb);
 }
 
+static void __macsec_pn_wrapped(struct macsec_secy *secy,
+                               struct macsec_tx_sa *tx_sa)
+{
+       pr_debug("PN wrapped, transitioning to !oper\n");
+       tx_sa->active = false;
+       if (secy->protect_frames)
+               secy->operational = false;
+}
+
+void macsec_pn_wrapped(struct macsec_secy *secy, struct macsec_tx_sa *tx_sa)
+{
+       spin_lock_bh(&tx_sa->lock);
+       __macsec_pn_wrapped(secy, tx_sa);
+       spin_unlock_bh(&tx_sa->lock);
+}
+EXPORT_SYMBOL_GPL(macsec_pn_wrapped);
+
 static u32 tx_sa_update_pn(struct macsec_tx_sa *tx_sa, struct macsec_secy *secy)
 {
        u32 pn;
@@ -432,12 +449,8 @@ static u32 tx_sa_update_pn(struct macsec_tx_sa *tx_sa, struct macsec_secy *secy)
        pn = tx_sa->next_pn;
 
        tx_sa->next_pn++;
-       if (tx_sa->next_pn == 0) {
-               pr_debug("PN wrapped, transitioning to !oper\n");
-               tx_sa->active = false;
-               if (secy->protect_frames)
-                       secy->operational = false;
-       }
+       if (tx_sa->next_pn == 0)
+               __macsec_pn_wrapped(secy, tx_sa);
        spin_unlock_bh(&tx_sa->lock);
 
        return pn;

diff --git a/include/net/macsec.h b/include/net/macsec.h
index 16e7e5061178e80ba1b42cd7458916caccf95208..92e43db8b5667362977102fa399e450813153922 100644 (file)
--- a/include/net/macsec.h
+++ b/include/net/macsec.h
@@ -219,4 +219,6 @@ struct macsec_ops {
        int (*mdo_del_txsa)(struct macsec_context *ctx);
 };
 
+void macsec_pn_wrapped(struct macsec_secy *secy, struct macsec_tx_sa *tx_sa);
+
 #endif /* _NET_MACSEC_H_ */