diff mbox series

[v5,5/7] can: netlink: add interface for CAN-FD Transmitter Delay Compensation (TDC)

Message ID 20210815033248.98111-6-mailhol.vincent@wanadoo.fr
State New
Headers show
Series [v5,1/7] can: netlink: allow user to turn off unsupported features | expand

Commit Message

Vincent MAILHOL Aug. 15, 2021, 3:32 a.m. UTC
Add the netlink interface for TDC parameters of struct can_tdc_const
and can_tdc.

Contrary to the can_bittiming(_const) structures for which there is
just a single IFLA_CAN(_DATA)_BITTMING(_CONST) entry per structure,
here, we create a nested entry IFLA_CAN_TDC. Within this nested entry,
additional IFLA_CAN_TDC_TDC* entries are added for each of the TDC
parameters of the newly introduced struct can_tdc_const and struct
can_tdc.

For struct can_tdc_const, these are:
        IFLA_CAN_TDC_TDCV_MIN
        IFLA_CAN_TDC_TDCV_MAX
        IFLA_CAN_TDC_TDCO_MIN
        IFLA_CAN_TDC_TDCO_MAX
        IFLA_CAN_TDC_TDCF_MIN
        IFLA_CAN_TDC_TDCF_MAX

For struct can_tdc, these are:
        IFLA_CAN_TDC_TDCV
        IFLA_CAN_TDC_TDCO
        IFLA_CAN_TDC_TDCF

This is done so that changes can be applied in the future to the
structures without breaking the netlink interface.

All the new parameters are defined as u32. This arbitrary choice is
done to mimic the other bittiming values with are also all of type
u32. An u16 would have been sufficient to hold the TDC values.

This patch completes below series (c.f. [1]):
  - commit 289ea9e4ae59 ("can: add new CAN FD bittiming parameters:
    Transmitter Delay Compensation (TDC)")
  - commit c25cc7993243 ("can: bittiming: add calculation for CAN FD
    Transmitter Delay Compensation (TDC)")

[1] https://lore.kernel.org/linux-can/20210224002008.4158-1-mailhol.vincent@wanadoo.fr/T/#t

Signed-off-by: Vincent Mailhol <mailhol.vincent@wanadoo.fr>
---
 drivers/net/can/dev/netlink.c    | 202 ++++++++++++++++++++++++++++++-
 include/uapi/linux/can/netlink.h |  29 ++++-
 2 files changed, 225 insertions(+), 6 deletions(-)

Comments

Marc Kleine-Budde Aug. 17, 2021, 7:55 p.m. UTC | #1
On 15.08.2021 12:32:46, Vincent Mailhol wrote:
> +static int can_tdc_changelink(struct net_device *dev, const struct nlattr *nla,

> +			      struct netlink_ext_ack *extack)

> +{

> +	struct nlattr *tb_tdc[IFLA_CAN_TDC_MAX + 1];

> +	struct can_priv *priv = netdev_priv(dev);

> +	struct can_tdc *tdc = &priv->tdc;

> +	const struct can_tdc_const *tdc_const = priv->tdc_const;

> +	int err;

> +

> +	if (!tdc_const || !can_tdc_is_enabled(priv))

> +		return -EOPNOTSUPP;

> +

> +	if (dev->flags & IFF_UP)

> +		return -EBUSY;

> +

> +	err = nla_parse_nested(tb_tdc, IFLA_CAN_TDC_MAX, nla,

> +			       can_tdc_policy, extack);

> +	if (err)

> +		return err;

> +

> +	if (tb_tdc[IFLA_CAN_TDC_TDCV]) {

> +		u32 tdcv = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCV]);

> +

> +		if (tdcv < tdc_const->tdcv_min || tdcv > tdc_const->tdcv_max)

> +			return -EINVAL;

> +

> +		tdc->tdcv = tdcv;


You have to assign to a temporary struct first, and set the priv->tdc
after complete validation, otherwise you end up with inconsistent
values.

> +	}

> +

> +	if (tb_tdc[IFLA_CAN_TDC_TDCO]) {

> +		u32 tdco = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCO]);

> +

> +		if (tdco < tdc_const->tdco_min || tdco > tdc_const->tdco_max)

> +			return -EINVAL;

> +

> +		tdc->tdco = tdco;

> +	}

> +

> +	if (tb_tdc[IFLA_CAN_TDC_TDCF]) {

> +		u32 tdcf = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCF]);

> +

> +		if (tdcf < tdc_const->tdcf_min || tdcf > tdc_const->tdcf_max)

> +			return -EINVAL;

> +

> +		tdc->tdcf = tdcf;

> +	}

> +

> +	return 0;

> +}


To reproduce (ip pseudo-code only :D ):

ip down
ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid
ip down
ip up                                   # results in tdco=0 tdcv=33 mode=manual

Marc

-- 
Pengutronix e.K.                 | Marc Kleine-Budde           |
Embedded Linux                   | https://www.pengutronix.de  |
Vertretung West/Dortmund         | Phone: +49-231-2826-924     |
Amtsgericht Hildesheim, HRA 2686 | Fax:   +49-5121-206917-5555 |
Vincent MAILHOL Aug. 18, 2021, 8:08 a.m. UTC | #2
On Wed 18 Aug 2021 at 04:55, Marc Kleine-Budde <mkl@pengutronix.de> wrote:
> On 15.08.2021 12:32:46, Vincent Mailhol wrote:

> > +static int can_tdc_changelink(struct net_device *dev, const struct nlattr *nla,

> > +                           struct netlink_ext_ack *extack)

> > +{

> > +     struct nlattr *tb_tdc[IFLA_CAN_TDC_MAX + 1];

> > +     struct can_priv *priv = netdev_priv(dev);

> > +     struct can_tdc *tdc = &priv->tdc;

> > +     const struct can_tdc_const *tdc_const = priv->tdc_const;

> > +     int err;

> > +

> > +     if (!tdc_const || !can_tdc_is_enabled(priv))

> > +             return -EOPNOTSUPP;

> > +

> > +     if (dev->flags & IFF_UP)

> > +             return -EBUSY;

> > +

> > +     err = nla_parse_nested(tb_tdc, IFLA_CAN_TDC_MAX, nla,

> > +                            can_tdc_policy, extack);

> > +     if (err)

> > +             return err;

> > +

> > +     if (tb_tdc[IFLA_CAN_TDC_TDCV]) {

> > +             u32 tdcv = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCV]);

> > +

> > +             if (tdcv < tdc_const->tdcv_min || tdcv > tdc_const->tdcv_max)

> > +                     return -EINVAL;

> > +

> > +             tdc->tdcv = tdcv;

>

> You have to assign to a temporary struct first, and set the priv->tdc

> after complete validation, otherwise you end up with inconsistent

> values.


Actually, copying the temporary structure to priv->tdc is not an
atomic operation. Here, you are only reducing the window, not
closing it.

> > +     }

> > +

> > +     if (tb_tdc[IFLA_CAN_TDC_TDCO]) {

> > +             u32 tdco = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCO]);

> > +

> > +             if (tdco < tdc_const->tdco_min || tdco > tdc_const->tdco_max)

> > +                     return -EINVAL;

> > +

> > +             tdc->tdco = tdco;

> > +     }

> > +

> > +     if (tb_tdc[IFLA_CAN_TDC_TDCF]) {

> > +             u32 tdcf = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCF]);

> > +

> > +             if (tdcf < tdc_const->tdcf_min || tdcf > tdc_const->tdcf_max)

> > +                     return -EINVAL;

> > +

> > +             tdc->tdcf = tdcf;

> > +     }

> > +

> > +     return 0;

> > +}

>

> To reproduce (ip pseudo-code only :D ):

>

> ip down

> ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid

> ip down

> ip up                                   # results in tdco=0 tdcv=33 mode=manual


I do not think that this PoC would work because, thankfully, the
netlink interface uses a mutex to prevent this issue from
occurring.

That mutex is defined in:
https://elixir.bootlin.com/linux/latest/source/net/core/rtnetlink.c#L68

Each time a netlink message is sent to the kernel, it would be
dispatched by rtnetlink_rcv_msg() which will make sure to lock
the mutex before doing so:
https://elixir.bootlin.com/linux/latest/source/net/core/rtnetlink.c#L5551

A funny note is that because the mutex is global, if you run two
ip command in a row:

| ip link set can0 type can bitrate 500000
| ip link set can1 up

the second one will wait for the first one to finish even if it
is on a different network device.

To conclude, I do not think this needs to be fixed.


Yours sincerely,
Vincent
Marc Kleine-Budde Aug. 18, 2021, 8:19 a.m. UTC | #3
On 18.08.2021 17:08:51, Vincent MAILHOL wrote:
> On Wed 18 Aug 2021 at 04:55, Marc Kleine-Budde <mkl@pengutronix.de> wrote:

> > On 15.08.2021 12:32:46, Vincent Mailhol wrote:

> > > +static int can_tdc_changelink(struct net_device *dev, const struct nlattr *nla,

> > > +                           struct netlink_ext_ack *extack)

> > > +{

> > > +     struct nlattr *tb_tdc[IFLA_CAN_TDC_MAX + 1];

> > > +     struct can_priv *priv = netdev_priv(dev);

> > > +     struct can_tdc *tdc = &priv->tdc;

> > > +     const struct can_tdc_const *tdc_const = priv->tdc_const;

> > > +     int err;

> > > +

> > > +     if (!tdc_const || !can_tdc_is_enabled(priv))

> > > +             return -EOPNOTSUPP;

> > > +

> > > +     if (dev->flags & IFF_UP)

> > > +             return -EBUSY;

> > > +

> > > +     err = nla_parse_nested(tb_tdc, IFLA_CAN_TDC_MAX, nla,

> > > +                            can_tdc_policy, extack);

> > > +     if (err)

> > > +             return err;

> > > +

> > > +     if (tb_tdc[IFLA_CAN_TDC_TDCV]) {

> > > +             u32 tdcv = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCV]);

> > > +

> > > +             if (tdcv < tdc_const->tdcv_min || tdcv > tdc_const->tdcv_max)

> > > +                     return -EINVAL;

> > > +

> > > +             tdc->tdcv = tdcv;

> >

> > You have to assign to a temporary struct first, and set the priv->tdc

> > after complete validation, otherwise you end up with inconsistent

> > values.

> 

> Actually, copying the temporary structure to priv->tdc is not an

> atomic operation. Here, you are only reducing the window, not

> closing it.


It's not a race I'm fixing.

> 

> > > +     }

> > > +

> > > +     if (tb_tdc[IFLA_CAN_TDC_TDCO]) {

> > > +             u32 tdco = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCO]);

> > > +

> > > +             if (tdco < tdc_const->tdco_min || tdco > tdc_const->tdco_max)

> > > +                     return -EINVAL;

> > > +

> > > +             tdc->tdco = tdco;

> > > +     }

> > > +

> > > +     if (tb_tdc[IFLA_CAN_TDC_TDCF]) {

> > > +             u32 tdcf = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCF]);

> > > +

> > > +             if (tdcf < tdc_const->tdcf_min || tdcf > tdc_const->tdcf_max)

> > > +                     return -EINVAL;

> > > +

> > > +             tdc->tdcf = tdcf;

> > > +     }

> > > +

> > > +     return 0;

> > > +}

> >

> > To reproduce (ip pseudo-code only :D ):

> >

> > ip down

> > ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid

> > ip down

> > ip up                                   # results in tdco=0 tdcv=33 mode=manual

> 

> I do not think that this PoC would work because, thankfully, the

> netlink interface uses a mutex to prevent this issue from

> occurring.


It works, I've tested it :)

> That mutex is defined in:

> https://elixir.bootlin.com/linux/latest/source/net/core/rtnetlink.c#L68

> 

> Each time a netlink message is sent to the kernel, it would be

> dispatched by rtnetlink_rcv_msg() which will make sure to lock

> the mutex before doing so:

> https://elixir.bootlin.com/linux/latest/source/net/core/rtnetlink.c#L5551

> 

> A funny note is that because the mutex is global, if you run two

> ip command in a row:

> 

> | ip link set can0 type can bitrate 500000

> | ip link set can1 up

> 

> the second one will wait for the first one to finish even if it

> is on a different network device.

> 

> To conclude, I do not think this needs to be fixed.


It's not a race. Consider this command:

| ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid

tdcv is checked first and valid, then it's assigned to the priv->tdc.
tdco is checked second and invalid, then can_tdc_changelink() returns -EINVAL.

tdc ends up being half set :(

So the setting of tdc is inconsistent and when you do a "ip down" "ip
up" then it results in a tdco=0 tdcv=33 mode=manual.

Marc

-- 
Pengutronix e.K.                 | Marc Kleine-Budde           |
Embedded Linux                   | https://www.pengutronix.de  |
Vertretung West/Dortmund         | Phone: +49-231-2826-924     |
Amtsgericht Hildesheim, HRA 2686 | Fax:   +49-5121-206917-5555 |
Vincent MAILHOL Aug. 18, 2021, 8:37 a.m. UTC | #4
On Wed. 18 Aug 2021 à 17:19, Marc Kleine-Budde <mkl@pengutronix.de> wrote:
> On 18.08.2021 17:08:51, Vincent MAILHOL wrote:

> > On Wed 18 Aug 2021 at 04:55, Marc Kleine-Budde <mkl@pengutronix.de> wrote:

> > > On 15.08.2021 12:32:46, Vincent Mailhol wrote:

> > > > +static int can_tdc_changelink(struct net_device *dev, const struct nlattr *nla,

> > > > +                           struct netlink_ext_ack *extack)

> > > > +{

> > > > +     struct nlattr *tb_tdc[IFLA_CAN_TDC_MAX + 1];

> > > > +     struct can_priv *priv = netdev_priv(dev);

> > > > +     struct can_tdc *tdc = &priv->tdc;

> > > > +     const struct can_tdc_const *tdc_const = priv->tdc_const;

> > > > +     int err;

> > > > +

> > > > +     if (!tdc_const || !can_tdc_is_enabled(priv))

> > > > +             return -EOPNOTSUPP;

> > > > +

> > > > +     if (dev->flags & IFF_UP)

> > > > +             return -EBUSY;

> > > > +

> > > > +     err = nla_parse_nested(tb_tdc, IFLA_CAN_TDC_MAX, nla,

> > > > +                            can_tdc_policy, extack);

> > > > +     if (err)

> > > > +             return err;

> > > > +

> > > > +     if (tb_tdc[IFLA_CAN_TDC_TDCV]) {

> > > > +             u32 tdcv = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCV]);

> > > > +

> > > > +             if (tdcv < tdc_const->tdcv_min || tdcv > tdc_const->tdcv_max)

> > > > +                     return -EINVAL;

> > > > +

> > > > +             tdc->tdcv = tdcv;

> > >

> > > You have to assign to a temporary struct first, and set the priv->tdc

> > > after complete validation, otherwise you end up with inconsistent

> > > values.

> >

> > Actually, copying the temporary structure to priv->tdc is not an

> > atomic operation. Here, you are only reducing the window, not

> > closing it.

>

> It's not a race I'm fixing.

>

> >

> > > > +     }

> > > > +

> > > > +     if (tb_tdc[IFLA_CAN_TDC_TDCO]) {

> > > > +             u32 tdco = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCO]);

> > > > +

> > > > +             if (tdco < tdc_const->tdco_min || tdco > tdc_const->tdco_max)

> > > > +                     return -EINVAL;

> > > > +

> > > > +             tdc->tdco = tdco;

> > > > +     }

> > > > +

> > > > +     if (tb_tdc[IFLA_CAN_TDC_TDCF]) {

> > > > +             u32 tdcf = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCF]);

> > > > +

> > > > +             if (tdcf < tdc_const->tdcf_min || tdcf > tdc_const->tdcf_max)

> > > > +                     return -EINVAL;

> > > > +

> > > > +             tdc->tdcf = tdcf;

> > > > +     }

> > > > +

> > > > +     return 0;

> > > > +}

> > >

> > > To reproduce (ip pseudo-code only :D ):

> > >

> > > ip down

> > > ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid

> > > ip down

> > > ip up                                   # results in tdco=0 tdcv=33 mode=manual

> >

> > I do not think that this PoC would work because, thankfully, the

> > netlink interface uses a mutex to prevent this issue from

> > occurring.

>

> It works, I've tested it :)

>

> > That mutex is defined in:

> > https://elixir.bootlin.com/linux/latest/source/net/core/rtnetlink.c#L68

> >

> > Each time a netlink message is sent to the kernel, it would be

> > dispatched by rtnetlink_rcv_msg() which will make sure to lock

> > the mutex before doing so:

> > https://elixir.bootlin.com/linux/latest/source/net/core/rtnetlink.c#L5551

> >

> > A funny note is that because the mutex is global, if you run two

> > ip command in a row:

> >

> > | ip link set can0 type can bitrate 500000

> > | ip link set can1 up

> >

> > the second one will wait for the first one to finish even if it

> > is on a different network device.

> >

> > To conclude, I do not think this needs to be fixed.

>

> It's not a race. Consider this command:

>

> | ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid

>

> tdcv is checked first and valid, then it's assigned to the priv->tdc.

> tdco is checked second and invalid, then can_tdc_changelink() returns -EINVAL.

>

> tdc ends up being half set :(

>

> So the setting of tdc is inconsistent and when you do a "ip down" "ip

> up" then it results in a tdco=0 tdcv=33 mode=manual.


My bad. Now I understand the issue.
I was confused because tdco=111 is in the valid range of my driver...
I will squash your patch.

Actually, I think that there is one more thing which needs to be
fixed: If can_tdc_changelink() fails (e.g. value out of range),
the CAN_CTRLMODE_TDC_AUTO or CAN_CTRLMODE_TDC_MANUAL would still
be set, meaning that can_tdc_is_enabled() would return true. So I
will add a "fail" branch to clear the flags.


Yours sincerely,
Vincent
Marc Kleine-Budde Aug. 18, 2021, 8:43 a.m. UTC | #5
On 18.08.2021 17:37:17, Vincent MAILHOL wrote:
> > It's not a race. Consider this command:

> >

> > | ip up tdc-mode manual tdco 111 tdcv 33  # 111 is out of range, 33 is valid

> >

> > tdcv is checked first and valid, then it's assigned to the priv->tdc.

> > tdco is checked second and invalid, then can_tdc_changelink() returns -EINVAL.

> >

> > tdc ends up being half set :(

> >

> > So the setting of tdc is inconsistent and when you do a "ip down" "ip

> > up" then it results in a tdco=0 tdcv=33 mode=manual.

> 

> My bad. Now I understand the issue.

> I was confused because tdco=111 is in the valid range of my driver...


:D

> I will squash your patch.

> 

> Actually, I think that there is one more thing which needs to be

> fixed: If can_tdc_changelink() fails (e.g. value out of range),

> the CAN_CTRLMODE_TDC_AUTO or CAN_CTRLMODE_TDC_MANUAL would still

> be set, meaning that can_tdc_is_enabled() would return true. So I

> will add a "fail" branch to clear the flags.


Ok.

regard,
Marc

-- 
Pengutronix e.K.                 | Marc Kleine-Budde           |
Embedded Linux                   | https://www.pengutronix.de  |
Vertretung West/Dortmund         | Phone: +49-231-2826-924     |
Amtsgericht Hildesheim, HRA 2686 | Fax:   +49-5121-206917-5555 |
diff mbox series

Patch

diff --git a/drivers/net/can/dev/netlink.c b/drivers/net/can/dev/netlink.c
index 80425636049d..f05745c96b9c 100644
--- a/drivers/net/can/dev/netlink.c
+++ b/drivers/net/can/dev/netlink.c
@@ -2,6 +2,7 @@ 
 /* Copyright (C) 2005 Marc Kleine-Budde, Pengutronix
  * Copyright (C) 2006 Andrey Volkov, Varma Electronics
  * Copyright (C) 2008-2009 Wolfgang Grandegger <wg@grandegger.com>
+ * Copyright (C) 2021 Vincent Mailhol <mailhol.vincent@wanadoo.fr>
  */
 
 #include <linux/can/dev.h>
@@ -19,6 +20,19 @@  static const struct nla_policy can_policy[IFLA_CAN_MAX + 1] = {
 	[IFLA_CAN_DATA_BITTIMING] = { .len = sizeof(struct can_bittiming) },
 	[IFLA_CAN_DATA_BITTIMING_CONST]	= { .len = sizeof(struct can_bittiming_const) },
 	[IFLA_CAN_TERMINATION] = { .type = NLA_U16 },
+	[IFLA_CAN_TDC] = { .type = NLA_NESTED },
+};
+
+static const struct nla_policy can_tdc_policy[IFLA_CAN_TDC_MAX + 1] = {
+	[IFLA_CAN_TDC_TDCV_MIN] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCV_MAX] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCO_MIN] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCO_MAX] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCF_MIN] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCF_MAX] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCV] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCO] = { .type = NLA_U32 },
+	[IFLA_CAN_TDC_TDCF] = { .type = NLA_U32 },
 };
 
 static int can_validate(struct nlattr *tb[], struct nlattr *data[],
@@ -30,6 +44,7 @@  static int can_validate(struct nlattr *tb[], struct nlattr *data[],
 	 * - nominal/arbitration bittiming
 	 * - data bittiming
 	 * - control mode with CAN_CTRLMODE_FD set
+	 * - TDC parameters are coherent (details below)
 	 */
 
 	if (!data)
@@ -37,8 +52,43 @@  static int can_validate(struct nlattr *tb[], struct nlattr *data[],
 
 	if (data[IFLA_CAN_CTRLMODE]) {
 		struct can_ctrlmode *cm = nla_data(data[IFLA_CAN_CTRLMODE]);
+		u32 tdc_flags = cm->flags & CAN_CTRLMODE_TDC_MASK;
 
 		is_can_fd = cm->flags & cm->mask & CAN_CTRLMODE_FD;
+
+		/* CAN_CTRLMODE_TDC_{AUTO,MANUAL} are mutually exclusive */
+		if (tdc_flags == CAN_CTRLMODE_TDC_MASK)
+			return -EOPNOTSUPP;
+		/* If one of the CAN_CTRLMODE_TDC_* flag is set then
+		 * TDC must be set and vice-versa
+		 */
+		if (!!tdc_flags != !!data[IFLA_CAN_TDC])
+			return -EOPNOTSUPP;
+		/* If providing TDC parameters, at least TDCO is
+		 * needed. TDCV is needed if and only if
+		 * CAN_CTRLMODE_TDC_MANUAL is set
+		 */
+		if (data[IFLA_CAN_TDC]) {
+			struct nlattr *tb_tdc[IFLA_CAN_TDC_MAX + 1];
+			int err;
+
+			err = nla_parse_nested(tb_tdc, IFLA_CAN_TDC_MAX,
+					       data[IFLA_CAN_TDC],
+					       can_tdc_policy, extack);
+			if (err)
+				return err;
+
+			if (tb_tdc[IFLA_CAN_TDC_TDCV]) {
+				if (tdc_flags & CAN_CTRLMODE_TDC_AUTO)
+					return -EOPNOTSUPP;
+			} else {
+				if (tdc_flags & CAN_CTRLMODE_TDC_MANUAL)
+					return -EOPNOTSUPP;
+			}
+
+			if (!tb_tdc[IFLA_CAN_TDC_TDCO])
+				return -EOPNOTSUPP;
+		}
 	}
 
 	if (is_can_fd) {
@@ -46,7 +96,7 @@  static int can_validate(struct nlattr *tb[], struct nlattr *data[],
 			return -EOPNOTSUPP;
 	}
 
-	if (data[IFLA_CAN_DATA_BITTIMING]) {
+	if (data[IFLA_CAN_DATA_BITTIMING] || data[IFLA_CAN_TDC]) {
 		if (!is_can_fd)
 			return -EOPNOTSUPP;
 	}
@@ -54,11 +104,62 @@  static int can_validate(struct nlattr *tb[], struct nlattr *data[],
 	return 0;
 }
 
+static int can_tdc_changelink(struct net_device *dev, const struct nlattr *nla,
+			      struct netlink_ext_ack *extack)
+{
+	struct nlattr *tb_tdc[IFLA_CAN_TDC_MAX + 1];
+	struct can_priv *priv = netdev_priv(dev);
+	struct can_tdc *tdc = &priv->tdc;
+	const struct can_tdc_const *tdc_const = priv->tdc_const;
+	int err;
+
+	if (!tdc_const || !can_tdc_is_enabled(priv))
+		return -EOPNOTSUPP;
+
+	if (dev->flags & IFF_UP)
+		return -EBUSY;
+
+	err = nla_parse_nested(tb_tdc, IFLA_CAN_TDC_MAX, nla,
+			       can_tdc_policy, extack);
+	if (err)
+		return err;
+
+	if (tb_tdc[IFLA_CAN_TDC_TDCV]) {
+		u32 tdcv = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCV]);
+
+		if (tdcv < tdc_const->tdcv_min || tdcv > tdc_const->tdcv_max)
+			return -EINVAL;
+
+		tdc->tdcv = tdcv;
+	}
+
+	if (tb_tdc[IFLA_CAN_TDC_TDCO]) {
+		u32 tdco = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCO]);
+
+		if (tdco < tdc_const->tdco_min || tdco > tdc_const->tdco_max)
+			return -EINVAL;
+
+		tdc->tdco = tdco;
+	}
+
+	if (tb_tdc[IFLA_CAN_TDC_TDCF]) {
+		u32 tdcf = nla_get_u32(tb_tdc[IFLA_CAN_TDC_TDCF]);
+
+		if (tdcf < tdc_const->tdcf_min || tdcf > tdc_const->tdcf_max)
+			return -EINVAL;
+
+		tdc->tdcf = tdcf;
+	}
+
+	return 0;
+}
+
 static int can_changelink(struct net_device *dev, struct nlattr *tb[],
 			  struct nlattr *data[],
 			  struct netlink_ext_ack *extack)
 {
 	struct can_priv *priv = netdev_priv(dev);
+	u32 tdc_mask = 0;
 	int err;
 
 	/* We need synchronization with dev->stop() */
@@ -138,7 +239,11 @@  static int can_changelink(struct net_device *dev, struct nlattr *tb[],
 			dev->mtu = CAN_MTU;
 			memset(&priv->data_bittiming, 0,
 			       sizeof(priv->data_bittiming));
+			memset(&priv->tdc, 0, sizeof(priv->tdc));
+			priv->ctrlmode &= ~CAN_CTRLMODE_TDC_MASK;
 		}
+
+		tdc_mask = cm->mask & CAN_CTRLMODE_TDC_MASK;
 	}
 
 	if (data[IFLA_CAN_RESTART_MS]) {
@@ -189,8 +294,6 @@  static int can_changelink(struct net_device *dev, struct nlattr *tb[],
 
 		memcpy(&priv->data_bittiming, &dbt, sizeof(dbt));
 
-		can_calc_tdco(dev);
-
 		if (priv->do_set_data_bittiming) {
 			/* Finally, set the bit-timing registers */
 			err = priv->do_set_data_bittiming(dev);
@@ -223,9 +326,52 @@  static int can_changelink(struct net_device *dev, struct nlattr *tb[],
 		priv->termination = termval;
 	}
 
+	if (data[IFLA_CAN_TDC]) {
+		/* Use the provided TDC parameters */
+		err = can_tdc_changelink(dev, data[IFLA_CAN_TDC], extack);
+		if (err)
+			return err;
+	} else if (!tdc_mask) {
+		/* Both TDC parameters and flags not provided: do calculation */
+		can_calc_tdco(dev);
+	} /* else: both CAN_CTRLMODE_TDC_{AUTO,MANUAL} are explicitly
+	   * turned off. TDC is disabled: do nothing
+	   */
+
 	return 0;
 }
 
+static size_t can_tdc_get_size(const struct net_device *dev)
+{
+	struct can_priv *priv = netdev_priv(dev);
+	size_t size;
+
+	if (!priv->tdc_const)
+		return 0;
+
+	size = nla_total_size(0);			/* nest IFLA_CAN_TDC */
+	if (priv->ctrlmode_supported & CAN_CTRLMODE_TDC_MANUAL) {
+		size += nla_total_size(sizeof(u32));	/* IFLA_CAN_TDCV_MIN */
+		size += nla_total_size(sizeof(u32));	/* IFLA_CAN_TDCV_MAX */
+	}
+	size += nla_total_size(sizeof(u32));		/* IFLA_CAN_TDCO_MIN */
+	size += nla_total_size(sizeof(u32));		/* IFLA_CAN_TDCO_MAX */
+	if (priv->tdc_const->tdcf_max) {
+		size += nla_total_size(sizeof(u32));	/* IFLA_CAN_TDCF_MIN */
+		size += nla_total_size(sizeof(u32));	/* IFLA_CAN_TDCF_MAX */
+	}
+
+	if (can_tdc_is_enabled(priv)) {
+		if (priv->ctrlmode & CAN_CTRLMODE_TDC_MANUAL)
+			size += nla_total_size(sizeof(u32));	/* IFLA_CAN_TDCV */
+		size += nla_total_size(sizeof(u32));		/* IFLA_CAN_TDCO */
+		if (priv->tdc_const->tdcf_max)
+			size += nla_total_size(sizeof(u32));	/* IFLA_CAN_TDCF */
+	}
+
+	return size;
+}
+
 static size_t can_get_size(const struct net_device *dev)
 {
 	struct can_priv *priv = netdev_priv(dev);
@@ -257,10 +403,56 @@  static size_t can_get_size(const struct net_device *dev)
 		size += nla_total_size(sizeof(*priv->data_bitrate_const) *
 				       priv->data_bitrate_const_cnt);
 	size += sizeof(priv->bitrate_max);			/* IFLA_CAN_BITRATE_MAX */
+	size += can_tdc_get_size(dev);				/* IFLA_CAN_TDC */
 
 	return size;
 }
 
+static int can_tdc_fill_info(struct sk_buff *skb, const struct net_device *dev)
+{
+	struct nlattr *nest;
+	struct can_priv *priv = netdev_priv(dev);
+	struct can_tdc *tdc = &priv->tdc;
+	const struct can_tdc_const *tdc_const = priv->tdc_const;
+
+	if (!tdc_const)
+		return 0;
+
+	nest = nla_nest_start(skb, IFLA_CAN_TDC);
+	if (!nest)
+		return -EMSGSIZE;
+
+	if (priv->ctrlmode_supported & CAN_CTRLMODE_TDC_MANUAL &&
+	    (nla_put_u32(skb, IFLA_CAN_TDC_TDCV_MIN, tdc_const->tdcv_min) ||
+	     nla_put_u32(skb, IFLA_CAN_TDC_TDCV_MAX, tdc_const->tdcv_max)))
+		goto err_cancel;
+	if (nla_put_u32(skb, IFLA_CAN_TDC_TDCO_MIN, tdc_const->tdco_min) ||
+	    nla_put_u32(skb, IFLA_CAN_TDC_TDCO_MAX, tdc_const->tdco_max))
+		goto err_cancel;
+	if (tdc_const->tdcf_max &&
+	    (nla_put_u32(skb, IFLA_CAN_TDC_TDCF_MIN, tdc_const->tdcf_min) ||
+	     nla_put_u32(skb, IFLA_CAN_TDC_TDCF_MAX, tdc_const->tdcf_max)))
+		goto err_cancel;
+
+	if (can_tdc_is_enabled(priv)) {
+		if (priv->ctrlmode & CAN_CTRLMODE_TDC_MANUAL &&
+		    nla_put_u32(skb, IFLA_CAN_TDC_TDCV, tdc->tdcv))
+			goto err_cancel;
+		if (nla_put_u32(skb, IFLA_CAN_TDC_TDCO, tdc->tdco))
+			goto err_cancel;
+		if (tdc_const->tdcf_max &&
+		    nla_put_u32(skb, IFLA_CAN_TDC_TDCF, tdc->tdcf))
+			goto err_cancel;
+	}
+
+	nla_nest_end(skb, nest);
+	return 0;
+
+err_cancel:
+	nla_nest_cancel(skb, nest);
+	return -EMSGSIZE;
+}
+
 static int can_fill_info(struct sk_buff *skb, const struct net_device *dev)
 {
 	struct can_priv *priv = netdev_priv(dev);
@@ -318,7 +510,9 @@  static int can_fill_info(struct sk_buff *skb, const struct net_device *dev)
 
 	    (nla_put(skb, IFLA_CAN_BITRATE_MAX,
 		     sizeof(priv->bitrate_max),
-		     &priv->bitrate_max))
+		     &priv->bitrate_max)) ||
+
+	    (can_tdc_fill_info(skb, dev))
 	    )
 
 		return -EMSGSIZE;
diff --git a/include/uapi/linux/can/netlink.h b/include/uapi/linux/can/netlink.h
index 004cd09a7d49..75b85c60efb2 100644
--- a/include/uapi/linux/can/netlink.h
+++ b/include/uapi/linux/can/netlink.h
@@ -136,10 +136,35 @@  enum {
 	IFLA_CAN_BITRATE_CONST,
 	IFLA_CAN_DATA_BITRATE_CONST,
 	IFLA_CAN_BITRATE_MAX,
-	__IFLA_CAN_MAX
+	IFLA_CAN_TDC,
+
+	/* add new constants above here */
+	__IFLA_CAN_MAX,
+	IFLA_CAN_MAX = __IFLA_CAN_MAX - 1
 };
 
-#define IFLA_CAN_MAX	(__IFLA_CAN_MAX - 1)
+/*
+ * CAN FD Transmitter Delay Compensation (TDC)
+ *
+ * Please refer to struct can_tdc_const and can_tdc in
+ * include/linux/can/bittiming.h for further details.
+ */
+enum {
+	IFLA_CAN_TDC_UNSPEC,
+	IFLA_CAN_TDC_TDCV_MIN,	/* u32 */
+	IFLA_CAN_TDC_TDCV_MAX,	/* u32 */
+	IFLA_CAN_TDC_TDCO_MIN,	/* u32 */
+	IFLA_CAN_TDC_TDCO_MAX,	/* u32 */
+	IFLA_CAN_TDC_TDCF_MIN,	/* u32 */
+	IFLA_CAN_TDC_TDCF_MAX,	/* u32 */
+	IFLA_CAN_TDC_TDCV,	/* u32 */
+	IFLA_CAN_TDC_TDCO,	/* u32 */
+	IFLA_CAN_TDC_TDCF,	/* u32 */
+
+	/* add new constants above here */
+	__IFLA_CAN_TDC,
+	IFLA_CAN_TDC_MAX = __IFLA_CAN_TDC - 1
+};
 
 /* u16 termination range: 1..65535 Ohms */
 #define CAN_TERMINATION_DISABLED 0