libiptc.c revision 0eee3009e7015b82a46b2eccad91f759d75ec4df
10f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson/* Library which manipulates firewall rules. Version $Revision$ */ 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Architecture of firewall rules is as follows: 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 5e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Chains go INPUT, FORWARD, OUTPUT then user chains. 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Each user chain starts with an ERROR node. 7e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Every chain ends with an unconditional jump: a RETURN for user chains, 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * and a POLICY for built-ins. 9e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher */ 10e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 113ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte/* (C) 1999 Paul ``Rusty'' Russell - Placed under the GNU GPL (See 123ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * COPYING for details). 13aae69bed019826ddec93f761514652a93d871e49Harald Welte * (C) 2000-2004 by the Netfilter Core Team <coreteam@netfilter.org> 143ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * 15fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * 2003-Jun-20: Harald Welte <laforge@netfilter.org>: 163ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * - Reimplementation of chain cache to use offsets instead of entries 17fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * 2003-Jun-23: Harald Welte <laforge@netfilter.org>: 180113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte * - performance optimization, sponsored by Astaro AG (http://www.astaro.com/) 19fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * don't rebuild the chain cache after every operation, instead fix it 20fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * up after a ruleset change. 21aae69bed019826ddec93f761514652a93d871e49Harald Welte * 2004-Aug-18: Harald Welte <laforge@netfilter.org>: 22aae69bed019826ddec93f761514652a93d871e49Harald Welte * - futher performance work: total reimplementation of libiptc. 23aae69bed019826ddec93f761514652a93d871e49Harald Welte * - libiptc now has a real internal (linked-list) represntation of the 24aae69bed019826ddec93f761514652a93d871e49Harald Welte * ruleset and a parser/compiler from/to this internal representation 25aae69bed019826ddec93f761514652a93d871e49Harald Welte * - again sponsored by Astaro AG (http://www.astaro.com/) 263ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte */ 2715920d160760535e51a57b3834eba45257cfa6d8Harald Welte#include <sys/types.h> 2815920d160760535e51a57b3834eba45257cfa6d8Harald Welte#include <sys/socket.h> 298b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt#include <xtables.h> 307cd002826d0f329620cb738bc4dc4760ef5e084aStephane Ouellette 31aae69bed019826ddec93f761514652a93d871e49Harald Welte#include "linux_list.h" 32aae69bed019826ddec93f761514652a93d871e49Harald Welte 33aae69bed019826ddec93f761514652a93d871e49Harald Welte//#define IPTC_DEBUG2 1 34aae69bed019826ddec93f761514652a93d871e49Harald Welte 35aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 36aae69bed019826ddec93f761514652a93d871e49Harald Welte#include <fcntl.h> 37aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP(x, args...) fprintf(stderr, "%s: " x, __FUNCTION__, ## args) 38aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP_C(x, args...) fprintf(stderr, x, ## args) 39aae69bed019826ddec93f761514652a93d871e49Harald Welte#else 40aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP(x, args...) 41aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP_C(x, args...) 42aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 43aae69bed019826ddec93f761514652a93d871e49Harald Welte 4401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 4501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define debug(x, args...) fprintf(stderr, x, ## args) 4601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#else 4701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define debug(x, args...) 4801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 4901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void *iptc_fn = NULL; 51e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 520b63936140032deac44072951451bdf47b54296aPatrick McHardystatic const char *hooknames[] = { 530b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_PRE_ROUTING] = "PREROUTING", 540b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_LOCAL_IN] = "INPUT", 550b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_FORWARD] = "FORWARD", 560b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_LOCAL_OUT] = "OUTPUT", 570b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_POST_ROUTING] = "POSTROUTING", 5810758b743d6aa076ebe2c3e8f855e73826841e71Rusty Russell#ifdef HOOK_DROPPING 590b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_DROPPING] = "DROPPING" 6010758b743d6aa076ebe2c3e8f855e73826841e71Rusty Russell#endif 61e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 62e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 63aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Convenience structures */ 64aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct ipt_error_target 65aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 66aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY_TARGET t; 67aae69bed019826ddec93f761514652a93d871e49Harald Welte char error[TABLE_MAXNAMELEN]; 68aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 69aae69bed019826ddec93f761514652a93d871e49Harald Welte 70aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct chain_head; 71aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct rule_head; 72aae69bed019826ddec93f761514652a93d871e49Harald Welte 73e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct counter_map 74e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 75e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher enum { 76e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher COUNTER_MAP_NOMAP, 77e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher COUNTER_MAP_NORMAL_MAP, 781cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte COUNTER_MAP_ZEROED, 791cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte COUNTER_MAP_SET 80e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } maptype; 81e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int mappos; 82e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 83e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 84aae69bed019826ddec93f761514652a93d871e49Harald Welteenum iptcc_rule_type { 85aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_STANDARD, /* standard target (ACCEPT, ...) */ 86aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_MODULE, /* extension module (SNAT, ...) */ 87aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_FALLTHROUGH, /* fallthrough rule */ 88aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_JUMP, /* jump to other chain */ 89aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 90aae69bed019826ddec93f761514652a93d871e49Harald Welte 91aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct rule_head 92e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 93aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head list; 94aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *chain; 95aae69bed019826ddec93f761514652a93d871e49Harald Welte struct counter_map counter_map; 96aae69bed019826ddec93f761514652a93d871e49Harald Welte 97aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int index; /* index (needed for counter_map) */ 98aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset; /* offset in rule blob */ 99aae69bed019826ddec93f761514652a93d871e49Harald Welte 100aae69bed019826ddec93f761514652a93d871e49Harald Welte enum iptcc_rule_type type; 101aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *jump; /* jump target, if IPTCC_R_JUMP */ 102aae69bed019826ddec93f761514652a93d871e49Harald Welte 103aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int size; /* size of entry data */ 104aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY entry[0]; 105e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 106e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 107aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct chain_head 10830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 109aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head list; 11079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell char name[TABLE_MAXNAMELEN]; 111aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int hooknum; /* hook number+1 if builtin */ 112aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int references; /* how many jumps reference us */ 113aae69bed019826ddec93f761514652a93d871e49Harald Welte int verdict; /* verdict if builtin */ 114aae69bed019826ddec93f761514652a93d871e49Harald Welte 115aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_COUNTERS counters; /* per-chain counters */ 116aae69bed019826ddec93f761514652a93d871e49Harald Welte struct counter_map counter_map; 117aae69bed019826ddec93f761514652a93d871e49Harald Welte 118aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num_rules; /* number of rules in list */ 119aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head rules; /* list of rules */ 120aae69bed019826ddec93f761514652a93d871e49Harald Welte 121aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int index; /* index (needed for jump resolval) */ 122aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int head_offset; /* offset in rule blob */ 123aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int foot_index; /* index (needed for counter_map) */ 124aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int foot_offset; /* offset in rule blob */ 12530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell}; 12630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 12779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellSTRUCT_TC_HANDLE 128e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 129175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt int sockfd; 130aae69bed019826ddec93f761514652a93d871e49Harald Welte int changed; /* Have changes been made? */ 131aae69bed019826ddec93f761514652a93d871e49Harald Welte 132aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head chains; 133aae69bed019826ddec93f761514652a93d871e49Harald Welte 134aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *chain_iterator_cur; 135aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *rule_iterator_cur; 136aae69bed019826ddec93f761514652a93d871e49Harald Welte 13748bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer unsigned int num_chains; /* number of user defined chains */ 13848bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer 13901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head **chain_index; /* array for fast chain list access*/ 14001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int chain_index_sz;/* size of chain index array */ 14101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 1424bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer int sorted_offsets; /* if chains are received sorted from kernel, 1434bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * then the offsets are also sorted. Says if its 1444bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * possible to bsearch offsets using chain_index. 1454bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 1464bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 14779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_GETINFO info; 148aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_GET_ENTRIES *entries; 149aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 150e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerenum bsearch_type { 1524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_NAME, /* Binary search after chain name */ 1534bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_OFFSET, /* Binary search based on offset */ 1544bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer}; 1554bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 156aae69bed019826ddec93f761514652a93d871e49Harald Welte/* allocate a new chain head for the cache */ 157aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head *iptcc_alloc_chain_head(const char *name, int hooknum) 158aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 159aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = malloc(sizeof(*c)); 160aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) 161aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 162aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(c, 0, sizeof(*c)); 163aae69bed019826ddec93f761514652a93d871e49Harald Welte 164aae69bed019826ddec93f761514652a93d871e49Harald Welte strncpy(c->name, name, TABLE_MAXNAMELEN); 165aae69bed019826ddec93f761514652a93d871e49Harald Welte c->hooknum = hooknum; 166aae69bed019826ddec93f761514652a93d871e49Harald Welte INIT_LIST_HEAD(&c->rules); 167e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 168aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 169aae69bed019826ddec93f761514652a93d871e49Harald Welte} 17030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 171aae69bed019826ddec93f761514652a93d871e49Harald Welte/* allocate and initialize a new rule for the cache */ 172aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct rule_head *iptcc_alloc_rule(struct chain_head *c, unsigned int size) 173aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 174aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r = malloc(sizeof(*r)+size); 175aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!r) 176aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 177aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(r, 0, sizeof(*r)); 17830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 179aae69bed019826ddec93f761514652a93d871e49Harald Welte r->chain = c; 180aae69bed019826ddec93f761514652a93d871e49Harald Welte r->size = size; 181175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell 182aae69bed019826ddec93f761514652a93d871e49Harald Welte return r; 183aae69bed019826ddec93f761514652a93d871e49Harald Welte} 184e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 185aae69bed019826ddec93f761514652a93d871e49Harald Welte/* notify us that the ruleset has been modified by the user */ 186910939897ea0cb9be2729a98c60a92e807aad5c3Jesper Dangaard Brouerstatic inline void 187fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtset_changed(struct xtc_handle *h) 188175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell{ 189175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell h->changed = 1; 190175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell} 191175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell 192380ba5f3074a16fbaa8869d9594962d58b5f8608Harald Welte#ifdef IPTC_DEBUG 193fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void do_check(struct xtc_handle *h, unsigned int line); 194849779c4adf8dd65c83fffb65e6b7898df2a55c6Rusty Russell#define CHECK(h) do { if (!getenv("IPTC_NO_CHECK")) do_check((h), __LINE__); } while(0) 19530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#else 19630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#define CHECK(h) 19730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#endif 198e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 199aae69bed019826ddec93f761514652a93d871e49Harald Welte 200aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 201aae69bed019826ddec93f761514652a93d871e49Harald Welte * iptc blob utility functions (iptcb_*) 202aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 203aae69bed019826ddec93f761514652a93d871e49Harald Welte 204e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 205aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcb_get_number(const STRUCT_ENTRY *i, 20679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *seek, 207e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int *pos) 208e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 209e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (i == seek) 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 211e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher (*pos)++; 212e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 213e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 214e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 215aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline int 216aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcb_get_entry_n(STRUCT_ENTRY *i, 217aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int number, 218aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int *pos, 219aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY **pe) 220aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 221aae69bed019826ddec93f761514652a93d871e49Harald Welte if (*pos == number) { 222aae69bed019826ddec93f761514652a93d871e49Harald Welte *pe = i; 223aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 224aae69bed019826ddec93f761514652a93d871e49Harald Welte } 225aae69bed019826ddec93f761514652a93d871e49Harald Welte (*pos)++; 226aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 227aae69bed019826ddec93f761514652a93d871e49Harald Welte} 228aae69bed019826ddec93f761514652a93d871e49Harald Welte 229aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline STRUCT_ENTRY * 230fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_get_entry(struct xtc_handle *h, unsigned int offset) 231aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 232aae69bed019826ddec93f761514652a93d871e49Harald Welte return (STRUCT_ENTRY *)((char *)h->entries->entrytable + offset); 233aae69bed019826ddec93f761514652a93d871e49Harald Welte} 234aae69bed019826ddec93f761514652a93d871e49Harald Welte 235e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic unsigned int 236fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_entry2index(struct xtc_handle *const h, const STRUCT_ENTRY *seek) 237e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 238e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int pos = 0; 239e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 240aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ENTRY_ITERATE(h->entries->entrytable, h->entries->size, 241aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcb_get_number, seek, &pos) == 0) { 242a28d495285ad7dd9f286d63958cf20d74eec6bcbMartin Josefsson fprintf(stderr, "ERROR: offset %u not an entry!\n", 243aae69bed019826ddec93f761514652a93d871e49Harald Welte (unsigned int)((char *)seek - (char *)h->entries->entrytable)); 244e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher abort(); 245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 246e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return pos; 247e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 248e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 249aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline STRUCT_ENTRY * 250fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_offset2entry(struct xtc_handle *h, unsigned int offset) 251e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 252aae69bed019826ddec93f761514652a93d871e49Harald Welte return (STRUCT_ENTRY *) ((void *)h->entries->entrytable+offset); 253aae69bed019826ddec93f761514652a93d871e49Harald Welte} 254aae69bed019826ddec93f761514652a93d871e49Harald Welte 255aae69bed019826ddec93f761514652a93d871e49Harald Welte 256aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned long 257fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_entry2offset(struct xtc_handle *const h, const STRUCT_ENTRY *e) 258aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 259aae69bed019826ddec93f761514652a93d871e49Harald Welte return (void *)e - (void *)h->entries->entrytable; 260aae69bed019826ddec93f761514652a93d871e49Harald Welte} 261aae69bed019826ddec93f761514652a93d871e49Harald Welte 262aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned int 263fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_offset2index(struct xtc_handle *const h, unsigned int offset) 264aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 265aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcb_entry2index(h, iptcb_offset2entry(h, offset)); 266aae69bed019826ddec93f761514652a93d871e49Harald Welte} 267aae69bed019826ddec93f761514652a93d871e49Harald Welte 268aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns 0 if not hook entry, else hooknumber + 1 */ 269aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned int 270fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_ent_is_hook_entry(STRUCT_ENTRY *e, struct xtc_handle *h) 271aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 272aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int i; 273aae69bed019826ddec93f761514652a93d871e49Harald Welte 274aae69bed019826ddec93f761514652a93d871e49Harald Welte for (i = 0; i < NUMHOOKS; i++) { 275aae69bed019826ddec93f761514652a93d871e49Harald Welte if ((h->info.valid_hooks & (1 << i)) 276aae69bed019826ddec93f761514652a93d871e49Harald Welte && iptcb_get_entry(h, h->info.hook_entry[i]) == e) 277aae69bed019826ddec93f761514652a93d871e49Harald Welte return i+1; 278aae69bed019826ddec93f761514652a93d871e49Harald Welte } 279aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 280aae69bed019826ddec93f761514652a93d871e49Harald Welte} 281aae69bed019826ddec93f761514652a93d871e49Harald Welte 282aae69bed019826ddec93f761514652a93d871e49Harald Welte 283aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 28401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * Chain index (cache utility) functions 28501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer ********************************************************************** 28601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * The chain index is an array with pointers into the chain list, with 28701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * CHAIN_INDEX_BUCKET_LEN spacing. This facilitates the ability to 28801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * speedup chain list searching, by find a more optimal starting 28901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * points when searching the linked list. 29001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 29101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * The starting point can be found fast by using a binary search of 29201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain index. Thus, reducing the previous search complexity of 29301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * O(n) to O(log(n/k) + k) where k is CHAIN_INDEX_BUCKET_LEN. 29401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 29501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * A nice property of the chain index, is that the "bucket" list 29601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * length is max CHAIN_INDEX_BUCKET_LEN (when just build, inserts will 29701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * change this). Oppose to hashing, where the "bucket" list length can 29801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * vary a lot. 29901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 30001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifndef CHAIN_INDEX_BUCKET_LEN 30101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define CHAIN_INDEX_BUCKET_LEN 40 30201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 30301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 30401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Another nice property of the chain index is that inserting/creating 30501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * chains in chain list don't change the correctness of the chain 30601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index, it only causes longer lists in the buckets. 30701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 30801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * To mitigate the performance penalty of longer bucket lists and the 30901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * penalty of rebuilding, the chain index is rebuild only when 31001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * CHAIN_INDEX_INSERT_MAX chains has been added. 31101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 31201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifndef CHAIN_INDEX_INSERT_MAX 31301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define CHAIN_INDEX_INSERT_MAX 355 31401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 31501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 31601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic inline unsigned int iptcc_is_builtin(struct chain_head *c); 31701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 31801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Use binary search in the chain index array, to find a chain_head 31901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * pointer closest to the place of the searched name element. 32001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 32101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * Notes that, binary search (obviously) requires that the chain list 32201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is sorted by name. 3234bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * 3244bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * The not so obvious: The chain index array, is actually both sorted 3254bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * by name and offset, at the same time!. This is only true because, 3264bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * chain are stored sorted in the kernel (as we pushed it in sorted). 3274bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * 32801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 32901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic struct list_head * 3304bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer__iptcc_bsearch_chain_index(const char *name, unsigned int offset, 331fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt unsigned int *idx, struct xtc_handle *handle, 3324bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer enum bsearch_type type) 33301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 33401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int pos, end; 33501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res; 33601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 33701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_pos; 33801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos=&handle->chains; 33901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 34001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Check for empty array, e.g. no user defined chains */ 34101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index_sz == 0) { 34201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("WARNING: handle->chain_index_sz == 0\n"); 34301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 34401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 34501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 34601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Init */ 34701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer end = handle->chain_index_sz; 34801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = end / 2; 34901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 3504bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("bsearch Find chain:%s (pos:%d end:%d) (offset:%d)\n", 3514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer name, pos, end, offset); 35201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 35301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Loop */ 35401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer loop: 35501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!handle->chain_index[pos]) { 35601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer fprintf(stderr, "ERROR: NULL pointer chain_index[%d]\n", pos); 35701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return &handle->chains; /* Be safe, return orig start pos */ 35801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 35901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 3604bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("bsearch Index[%d] name:%s ", 3614bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos, handle->chain_index[pos]->name); 3624bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 3634bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Support for different compare functions */ 3644bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer switch (type) { 3654bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_NAME: 3664bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = strcmp(name, handle->chain_index[pos]->name); 3674bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3684bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_OFFSET: 3694bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("head_offset:[%d] foot_offset:[%d] ", 3704bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer handle->chain_index[pos]->head_offset, 3714bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer handle->chain_index[pos]->foot_offset); 3724bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = offset - handle->chain_index[pos]->head_offset; 3734bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3744bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer default: 3754bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer fprintf(stderr, "ERROR: %d not a valid bsearch type\n", 3764bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer type); 3774bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer abort(); 3784bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3794bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 3804bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("res:%d ", res); 3814bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 3824bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 38301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[pos]->list; 384dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt *idx = pos; 38501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 38601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res == 0) { /* Found element, by direct hit */ 38701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Direct hit pos:%d end:%d\n", pos, end); 38801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 38901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else if (res < 0) { /* Too far, jump back */ 39001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer end = pos; 39101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = pos / 2; 39201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 39301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: First element of array */ 39401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (end == 0) { 39501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Reached first array elem (end%d)\n",end); 39601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 39701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 39801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("jump back to pos:%d (end:%d)\n", pos, end); 39901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer goto loop; 40001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else if (res > 0 ){ /* Not far enough, jump forward */ 40101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 40201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: Last element of array */ 40301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (pos == handle->chain_index_sz-1) { 40401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Last array elem (end:%d)\n", end); 40501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 40601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 40701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 40801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: Next index less, thus elem in this list section */ 4094bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer switch (type) { 4104bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_NAME: 4114bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = strcmp(name, handle->chain_index[pos+1]->name); 4124bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 4134bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_OFFSET: 4144bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = offset - handle->chain_index[pos+1]->head_offset; 4154bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 4164bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 4174bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 41801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res < 0) { 41901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] closest list (end:%d)\n", end); 42001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 42101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 42201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 42301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = (pos+end)/2; 42401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("jump forward to pos:%d (end:%d)\n", pos, end); 42501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer goto loop; 42601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 42701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 42801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 42901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 43001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 4314bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer/* Wrapper for string chain name based bsearch */ 4324bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerstatic struct list_head * 4334bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Broueriptcc_bsearch_chain_index(const char *name, unsigned int *idx, 434fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *handle) 4354bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer{ 4364bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer return __iptcc_bsearch_chain_index(name, 0, idx, handle, BSEARCH_NAME); 4374bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer} 4384bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4394bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4404bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer/* Wrapper for offset chain based bsearch */ 4414bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerstatic struct list_head * 4424bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Broueriptcc_bsearch_chain_offset(unsigned int offset, unsigned int *idx, 443fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *handle) 4444bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer{ 4454bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer struct list_head *pos; 4464bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4474bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* If chains were not received sorted from kernel, then the 4484bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * offset bsearch is not possible. 4494bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 4504bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer if (!handle->sorted_offsets) 4514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos = handle->chains.next; 4524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer else 4534bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos = __iptcc_bsearch_chain_index(NULL, offset, idx, handle, 4544bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_OFFSET); 4554bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer return pos; 4564bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer} 4574bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4584bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 45901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 46001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Trivial linear search of chain index. Function used for verifying 46101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer the output of bsearch function */ 46201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic struct list_head * 463fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_linearly_search_chain_index(const char *name, struct xtc_handle *handle) 46401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 46501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=0; 46601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res=0; 46701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 46801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_pos; 46901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chains; 47001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index_sz) 47201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[0]->list; 47301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Linearly walk of chain index array */ 47501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer for (i=0; i < handle->chain_index_sz; i++) { 47701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index[i]) { 47801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer res = strcmp(handle->chain_index[i]->name, name); 47901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res > 0) 48001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; // One step too far 48101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[i]->list; 48201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res == 0) 48301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; // Direct hit 48401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 48501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 48601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 48701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 48801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 48901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 49001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 491fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_alloc(struct xtc_handle *h) 49201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 49301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int list_length = CHAIN_INDEX_BUCKET_LEN; 49401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int array_elems; 49501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int array_mem; 49601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 49701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Allocate memory for the chain index array */ 49801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_elems = (h->num_chains / list_length) + 49901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer (h->num_chains % list_length ? 1 : 0); 50001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_mem = sizeof(h->chain_index) * array_elems; 50101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Alloc Chain index, elems:%d mem:%d bytes\n", 50301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_elems, array_mem); 50401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index = malloc(array_mem); 5060eee3009e7015b82a46b2eccad91f759d75ec4dfJan Engelhardt if (h->chain_index == NULL && array_mem > 0) { 50701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = 0; 50801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 50901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 51001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer memset(h->chain_index, 0, array_mem); 51101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = array_elems; 51201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 51301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 51401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 51501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 516fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_index_free(struct xtc_handle *h) 51701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 51801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = 0; 51901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer free(h->chain_index); 52001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 52101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 524fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_index_dump(struct xtc_handle *h) 52501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 52601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i = 0; 52701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Dump: contents of chain index array */ 52901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer for (i=0; i < h->chain_index_sz; i++) { 53001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (h->chain_index[i]) { 53101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer fprintf(stderr, "Chain index[%d].name: %s\n", 53201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer i, h->chain_index[i]->name); 53301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 53401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 53501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 53601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 53701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 53801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Build the chain index */ 539fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_build(struct xtc_handle *h) 54001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 54101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int list_length = CHAIN_INDEX_BUCKET_LEN; 54201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int chains = 0; 54301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int cindex = 0; 54401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c; 54501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 54601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Build up the chain index array here */ 54701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Building chain index\n"); 54801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 54901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Number of user defined chains:%d bucket_sz:%d array_sz:%d\n", 55001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->num_chains, list_length, h->chain_index_sz); 55101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (h->chain_index_sz == 0) 55301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 55401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each_entry(c, &h->chains, list) { 55601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Issue: The index array needs to start after the 55801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * builtin chains, as they are not sorted */ 55901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!iptcc_is_builtin(c)) { 56001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer cindex=chains / list_length; 56101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 56201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Safe guard, break out on array limit, this 56301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is useful if chains are added and array is 56401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * rebuild, without realloc of memory. */ 56501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (cindex >= h->chain_index_sz) 56601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 56701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 56801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((chains % list_length)== 0) { 56901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("\nIndex[%d] Chains:", cindex); 57001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index[cindex] = c; 57101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer chains++; 57301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("%s, ", c->name); 57501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("\n"); 57701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 57801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 57901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 58001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 581fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_rebuild(struct xtc_handle *h) 58201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 58301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("REBUILD chain index array\n"); 58401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_free(h); 58501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((iptcc_chain_index_alloc(h)) < 0) 58601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 58701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_build(h); 58801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 58901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 59001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 59101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Delete chain (pointer) from index array. Removing an element from 59201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain list only affects the chain index array, if the chain 59301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index points-to/uses that list pointer. 59401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 59501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * There are different strategies, the simple and safe is to rebuild 59601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain index every time. The more advanced is to update the 59701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * array index to point to the next element, but that requires some 59801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * house keeping and boundry checks. The advanced is implemented, as 59901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the simple approach behaves badly when all chains are deleted 60001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * because list_for_each processing will always hit the first chain 60101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index, thus causing a rebuild for every chain. 60201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 603fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_delete_chain(struct chain_head *c, struct xtc_handle *h) 60401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 60501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *index_ptr, *index_ptr2, *next; 60601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c2; 607dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int idx, idx2; 60801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 609dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt index_ptr = iptcc_bsearch_chain_index(c->name, &idx, h); 61001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Del chain[%s] c->list:%p index_ptr:%p\n", 61201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer c->name, &c->list, index_ptr); 61301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Save the next pointer */ 61501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer next = c->list.next; 61601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_del(&c->list); 61701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (index_ptr == &c->list) { /* Chain used as index ptr */ 61901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 62001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* See if its possible to avoid a rebuild, by shifting 62101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * to next pointer. Its possible if the next pointer 62201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is located in the same index bucket. 62301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 62401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer c2 = list_entry(next, struct chain_head, list); 625dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt index_ptr2 = iptcc_bsearch_chain_index(c2->name, &idx2, h); 626dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt if (idx != idx2) { 62701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Rebuild needed */ 62801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return iptcc_chain_index_rebuild(h); 62901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else { 63001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Avoiding rebuild */ 63101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Update cindex[%d] with next ptr name:[%s]\n", 632dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt idx, c2->name); 633dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt h->chain_index[idx]=c2; 63401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 63501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 63601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 63701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 63801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 63901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 64001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 64101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/********************************************************************** 642aae69bed019826ddec93f761514652a93d871e49Harald Welte * iptc cache utility functions (iptcc_*) 643aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 644aae69bed019826ddec93f761514652a93d871e49Harald Welte 645aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Is the given chain builtin (1) or user-defined (0) */ 646910939897ea0cb9be2729a98c60a92e807aad5c3Jesper Dangaard Brouerstatic inline unsigned int iptcc_is_builtin(struct chain_head *c) 647aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 648aae69bed019826ddec93f761514652a93d871e49Harald Welte return (c->hooknum ? 1 : 0); 649aae69bed019826ddec93f761514652a93d871e49Harald Welte} 650aae69bed019826ddec93f761514652a93d871e49Harald Welte 651aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Get a specific rule within a chain */ 652aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct rule_head *iptcc_get_rule_num(struct chain_head *c, 653aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int rulenum) 654aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 655aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 656aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num = 0; 657aae69bed019826ddec93f761514652a93d871e49Harald Welte 658aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 659aae69bed019826ddec93f761514652a93d871e49Harald Welte num++; 660aae69bed019826ddec93f761514652a93d871e49Harald Welte if (num == rulenum) 661aae69bed019826ddec93f761514652a93d871e49Harald Welte return r; 662aae69bed019826ddec93f761514652a93d871e49Harald Welte } 663aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 664aae69bed019826ddec93f761514652a93d871e49Harald Welte} 665aae69bed019826ddec93f761514652a93d871e49Harald Welte 666a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson/* Get a specific rule within a chain backwards */ 667a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefssonstatic struct rule_head *iptcc_get_rule_num_reverse(struct chain_head *c, 668a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson unsigned int rulenum) 669a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson{ 670a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson struct rule_head *r; 671a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson unsigned int num = 0; 672a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson 673a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson list_for_each_entry_reverse(r, &c->rules, list) { 674a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson num++; 675a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (num == rulenum) 676a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson return r; 677a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } 678a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson return NULL; 679a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson} 680a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson 681aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns chain head if found, otherwise NULL. */ 682aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head * 683fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_find_chain_by_offset(struct xtc_handle *handle, unsigned int offset) 684aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 685aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head *pos; 6864bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer struct list_head *list_start_pos; 6874bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer unsigned int i; 688aae69bed019826ddec93f761514652a93d871e49Harald Welte 689aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&handle->chains)) 690aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 691aae69bed019826ddec93f761514652a93d871e49Harald Welte 6924bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Find a smart place to start the search */ 6934bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_offset(offset, &i, handle); 6944bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 6954bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Note that iptcc_bsearch_chain_offset() skips builtin 6964bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * chains, but this function is only used for finding jump 6974bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * targets, and a buildin chain is not a valid jump target */ 6984bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 6994bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("Offset:[%u] starting search at index:[%u]\n", offset, i); 7004bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer// list_for_each(pos, &handle->chains) { 7014bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer list_for_each(pos, list_start_pos->prev) { 702aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = list_entry(pos, struct chain_head, list); 7034bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("."); 7044bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer if (offset >= c->head_offset && offset <= c->foot_offset) { 7054bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("Offset search found chain:[%s]\n", c->name); 706aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 7074bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 708aae69bed019826ddec93f761514652a93d871e49Harald Welte } 709aae69bed019826ddec93f761514652a93d871e49Harald Welte 710aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 711aae69bed019826ddec93f761514652a93d871e49Harald Welte} 71201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 713aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns chain head if found, otherwise NULL. */ 714aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head * 715fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_find_label(const char *name, struct xtc_handle *handle) 716aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 717aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head *pos; 71801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_start_pos; 71901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=0; 72001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res; 721aae69bed019826ddec93f761514652a93d871e49Harald Welte 722aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&handle->chains)) 723aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 724aae69bed019826ddec93f761514652a93d871e49Harald Welte 72501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* First look at builtin chains */ 726aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each(pos, &handle->chains) { 727aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = list_entry(pos, struct chain_head, list); 72801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!iptcc_is_builtin(c)) 72901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 730aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!strcmp(c->name, name)) 731aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 732aae69bed019826ddec93f761514652a93d871e49Harald Welte } 733aae69bed019826ddec93f761514652a93d871e49Harald Welte 73401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Find a smart place to start the search via chain index */ 73501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer //list_start_pos = iptcc_linearly_search_chain_index(name, handle); 73601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_index(name, &i, handle); 73701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 73801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handel if bsearch bails out early */ 73901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos == &handle->chains) { 74001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = pos; 74101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 74201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 74301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer else { 74401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Verify result of bsearch against linearly index search */ 74501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *test_pos; 74601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *test_c, *tmp_c; 74701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer test_pos = iptcc_linearly_search_chain_index(name, handle); 74801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos != test_pos) { 74901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("BUG in chain_index search\n"); 75001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer test_c=list_entry(test_pos, struct chain_head,list); 75101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer tmp_c =list_entry(list_start_pos,struct chain_head,list); 75201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Verify search found:\n"); 75301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Chain:%s\n", test_c->name); 75401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("BSearch found:\n"); 75501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Chain:%s\n", tmp_c->name); 75601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer exit(42); 75701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 75801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 75901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 76001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 76101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Initial/special case, no user defined chains */ 76201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->num_chains == 0) 76301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 76401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 76501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Start searching through the chain list */ 76601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each(pos, list_start_pos->prev) { 76701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c = list_entry(pos, struct chain_head, list); 76801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer res = strcmp(c->name, name); 76901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("List search name:%s == %s res:%d\n", name, c->name, res); 77001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res==0) 77101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return c; 77201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 77301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* We can stop earlier as we know list is sorted */ 77401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res>0 && !iptcc_is_builtin(c)) { /* Walked too far*/ 77501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Not in list, walked too far, sorted list\n"); 77601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 77701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 77801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 77901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Stop on wrap around, if list head is reached */ 78001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (pos == &handle->chains) { 78101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Stop, list head reached\n"); 78201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 78301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 78601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("List search NOT found name:%s\n", name); 787aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 788aae69bed019826ddec93f761514652a93d871e49Harald Welte} 789aae69bed019826ddec93f761514652a93d871e49Harald Welte 790aae69bed019826ddec93f761514652a93d871e49Harald Welte/* called when rule is to be removed from cache */ 791aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void iptcc_delete_rule(struct rule_head *r) 792aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 793aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("deleting rule %p (offset %u)\n", r, r->offset); 794aae69bed019826ddec93f761514652a93d871e49Harald Welte /* clean up reference count of called chain */ 795aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type == IPTCC_R_JUMP 796aae69bed019826ddec93f761514652a93d871e49Harald Welte && r->jump) 797aae69bed019826ddec93f761514652a93d871e49Harald Welte r->jump->references--; 798aae69bed019826ddec93f761514652a93d871e49Harald Welte 799aae69bed019826ddec93f761514652a93d871e49Harald Welte list_del(&r->list); 800aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 801aae69bed019826ddec93f761514652a93d871e49Harald Welte} 802aae69bed019826ddec93f761514652a93d871e49Harald Welte 803aae69bed019826ddec93f761514652a93d871e49Harald Welte 804aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 805aae69bed019826ddec93f761514652a93d871e49Harald Welte * RULESET PARSER (blob -> cache) 806aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 807aae69bed019826ddec93f761514652a93d871e49Harald Welte 808aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Delete policy rule of previous chain, since cache doesn't contain 809aae69bed019826ddec93f761514652a93d871e49Harald Welte * chain policy rules. 810aae69bed019826ddec93f761514652a93d871e49Harald Welte * WARNING: This function has ugly design and relies on a lot of context, only 811aae69bed019826ddec93f761514652a93d871e49Harald Welte * to be called from specific places within the parser */ 812fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int __iptcc_p_del_policy(struct xtc_handle *h, unsigned int num) 813aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 814aae69bed019826ddec93f761514652a93d871e49Harald Welte if (h->chain_iterator_cur) { 815aae69bed019826ddec93f761514652a93d871e49Harald Welte /* policy rule is last rule */ 816aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *pr = (struct rule_head *) 817aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->rules.prev; 818aae69bed019826ddec93f761514652a93d871e49Harald Welte 819aae69bed019826ddec93f761514652a93d871e49Harald Welte /* save verdict */ 820aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->verdict = 821aae69bed019826ddec93f761514652a93d871e49Harald Welte *(int *)GET_TARGET(pr->entry)->data; 822aae69bed019826ddec93f761514652a93d871e49Harald Welte 823aae69bed019826ddec93f761514652a93d871e49Harald Welte /* save counter and counter_map information */ 824aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->counter_map.maptype = 825aae69bed019826ddec93f761514652a93d871e49Harald Welte COUNTER_MAP_NORMAL_MAP; 826aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->counter_map.mappos = num-1; 827aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&h->chain_iterator_cur->counters, &pr->entry->counters, 828aae69bed019826ddec93f761514652a93d871e49Harald Welte sizeof(h->chain_iterator_cur->counters)); 829aae69bed019826ddec93f761514652a93d871e49Harald Welte 830aae69bed019826ddec93f761514652a93d871e49Harald Welte /* foot_offset points to verdict rule */ 831aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->foot_index = num; 832aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->foot_offset = pr->offset; 833aae69bed019826ddec93f761514652a93d871e49Harald Welte 834aae69bed019826ddec93f761514652a93d871e49Harald Welte /* delete rule from cache */ 835aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(pr); 8368d1b38a064d146c77eb8fc951717663e1a713cfcMartin Josefsson h->chain_iterator_cur->num_rules--; 837aae69bed019826ddec93f761514652a93d871e49Harald Welte 838e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 839e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 840e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 841e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 842e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 843ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte/* alphabetically insert a chain into the list */ 844fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic inline void iptc_insert_chain(struct xtc_handle *h, struct chain_head *c) 845ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte{ 846ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte struct chain_head *tmp; 84701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_start_pos; 84801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=1; 84901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 85001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Find a smart place to start the insert search */ 85101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_index(c->name, &i, h); 85201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 85301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handle the case, where chain.name is smaller than index[0] */ 85401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (i==0 && strcmp(c->name, h->chain_index[0]->name) <= 0) { 85501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index[0] = c; /* Update chain index head */ 85601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = h->chains.next; 85701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Update chain_index[0] with %s\n", c->name); 85801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 85901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 86001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handel if bsearch bails out early */ 86101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos == &h->chains) { 86201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = h->chains.next; 86301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 864ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 8659d3ed77341361674994f584ff69a61f31a342739Olaf Rempel /* sort only user defined chains */ 8669d3ed77341361674994f584ff69a61f31a342739Olaf Rempel if (!c->hooknum) { 86701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each_entry(tmp, list_start_pos->prev, list) { 868feca0578a5d035122b4b7cdb8d44d6cca819f35cRobert de Barth if (!tmp->hooknum && strcmp(c->name, tmp->name) <= 0) { 8699d3ed77341361674994f584ff69a61f31a342739Olaf Rempel list_add(&c->list, tmp->list.prev); 8709d3ed77341361674994f584ff69a61f31a342739Olaf Rempel return; 8719d3ed77341361674994f584ff69a61f31a342739Olaf Rempel } 87201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 87301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Stop if list head is reached */ 87401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (&tmp->list == &h->chains) { 87501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Insert, list head reached add to tail\n"); 87601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 87701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 878ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte } 879ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte } 880ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 881ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte /* survived till end of list: add at tail */ 882ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte list_add_tail(&c->list, &h->chains); 883ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte} 884ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 885aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Another ugly helper function split out of cache_add_entry to make it less 886aae69bed019826ddec93f761514652a93d871e49Harald Welte * spaghetti code */ 887fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void __iptcc_p_add_chain(struct xtc_handle *h, struct chain_head *c, 888aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset, unsigned int *num) 889e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 8901336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer struct list_head *tail = h->chains.prev; 8911336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer struct chain_head *ctail; 8921336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer 893aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_del_policy(h, *num); 894e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 895aae69bed019826ddec93f761514652a93d871e49Harald Welte c->head_offset = offset; 896aae69bed019826ddec93f761514652a93d871e49Harald Welte c->index = *num; 897e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 8981336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer /* Chains from kernel are already sorted, as they are inserted 8991336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * sorted. But there exists an issue when shifting to 1.4.0 9001336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * from an older version, as old versions allow last created 9011336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * chain to be unsorted. 9021336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer */ 9031336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer if (iptcc_is_builtin(c)) /* Only user defined chains are sorted*/ 9041336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer list_add_tail(&c->list, &h->chains); 9051336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer else { 9061336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer ctail = list_entry(tail, struct chain_head, list); 9074bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 908526d3e138635e33773d1ca16477052a04f53f5bdJesper Dangaard Brouer if (strcmp(c->name, ctail->name) > 0 || 909526d3e138635e33773d1ca16477052a04f53f5bdJesper Dangaard Brouer iptcc_is_builtin(ctail)) 9101336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer list_add_tail(&c->list, &h->chains);/* Already sorted*/ 9114bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer else { 9121336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer iptc_insert_chain(h, c);/* Was not sorted */ 9134bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 9144bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Notice, if chains were not received sorted 9154bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * from kernel, then an offset bsearch is no 9164bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * longer valid. 9174bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 9184bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer h->sorted_offsets = 0; 9194bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 9204bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("NOTICE: chain:[%s] was NOT sorted(ctail:%s)\n", 9214bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer c->name, ctail->name); 9224bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 9231336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer } 924d8cb787ab44e9d2de4fd3b04fcaa370c9918fc5dJesper Dangaard Brouer 925aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur = c; 926e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 927e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 928aae69bed019826ddec93f761514652a93d871e49Harald Welte/* main parser function: add an entry from the blob to the cache */ 929aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic int cache_add_entry(STRUCT_ENTRY *e, 930fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h, 931aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY **prev, 932aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int *num) 933e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 934aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int builtin; 935aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset = (char *)e - (char *)h->entries->entrytable; 936aae69bed019826ddec93f761514652a93d871e49Harald Welte 937aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("entering..."); 938aae69bed019826ddec93f761514652a93d871e49Harald Welte 939aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Last entry ("policy rule"). End it.*/ 940aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcb_entry2offset(h,e) + e->next_offset == h->entries->size) { 941aae69bed019826ddec93f761514652a93d871e49Harald Welte /* This is the ERROR node at the end of the chain */ 942aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u: end of table:\n", *num, offset); 943aae69bed019826ddec93f761514652a93d871e49Harald Welte 944aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_del_policy(h, *num); 945aae69bed019826ddec93f761514652a93d871e49Harald Welte 946aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur = NULL; 947aae69bed019826ddec93f761514652a93d871e49Harald Welte goto out_inc; 948aae69bed019826ddec93f761514652a93d871e49Harald Welte } 949aae69bed019826ddec93f761514652a93d871e49Harald Welte 950aae69bed019826ddec93f761514652a93d871e49Harald Welte /* We know this is the start of a new chain if it's an ERROR 951aae69bed019826ddec93f761514652a93d871e49Harald Welte * target, or a hook entry point */ 952aae69bed019826ddec93f761514652a93d871e49Harald Welte 953aae69bed019826ddec93f761514652a93d871e49Harald Welte if (strcmp(GET_TARGET(e)->u.user.name, ERROR_TARGET) == 0) { 954aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = 955aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_alloc_chain_head((const char *)GET_TARGET(e)->data, 0); 956aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u:new userdefined chain %s: %p\n", *num, offset, 957aae69bed019826ddec93f761514652a93d871e49Harald Welte (char *)c->name, c); 958aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 959aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = -ENOMEM; 960aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 961aae69bed019826ddec93f761514652a93d871e49Harald Welte } 96248bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer h->num_chains++; /* New user defined chain */ 963aae69bed019826ddec93f761514652a93d871e49Harald Welte 964aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_add_chain(h, c, offset, num); 965aae69bed019826ddec93f761514652a93d871e49Harald Welte 966aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if ((builtin = iptcb_ent_is_hook_entry(e, h)) != 0) { 967aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = 968aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_alloc_chain_head((char *)hooknames[builtin-1], 969aae69bed019826ddec93f761514652a93d871e49Harald Welte builtin); 970aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u new builtin chain: %p (rules=%p)\n", 971aae69bed019826ddec93f761514652a93d871e49Harald Welte *num, offset, c, &c->rules); 972aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 973aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = -ENOMEM; 974aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 975aae69bed019826ddec93f761514652a93d871e49Harald Welte } 976aae69bed019826ddec93f761514652a93d871e49Harald Welte 977aae69bed019826ddec93f761514652a93d871e49Harald Welte c->hooknum = builtin; 978aae69bed019826ddec93f761514652a93d871e49Harald Welte 979aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_add_chain(h, c, offset, num); 980aae69bed019826ddec93f761514652a93d871e49Harald Welte 981aae69bed019826ddec93f761514652a93d871e49Harald Welte /* FIXME: this is ugly. */ 982aae69bed019826ddec93f761514652a93d871e49Harald Welte goto new_rule; 983aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 984aae69bed019826ddec93f761514652a93d871e49Harald Welte /* has to be normal rule */ 985aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 986aae69bed019826ddec93f761514652a93d871e49Harald Weltenew_rule: 987aae69bed019826ddec93f761514652a93d871e49Harald Welte 988aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(h->chain_iterator_cur, 989aae69bed019826ddec93f761514652a93d871e49Harald Welte e->next_offset))) { 990aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 991aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 992aae69bed019826ddec93f761514652a93d871e49Harald Welte } 993aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u normal rule: %p: ", *num, offset, r); 994aae69bed019826ddec93f761514652a93d871e49Harald Welte 995aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index = *num; 996aae69bed019826ddec93f761514652a93d871e49Harald Welte r->offset = offset; 997aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 998aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_NORMAL_MAP; 999aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos = r->index; 1000aae69bed019826ddec93f761514652a93d871e49Harald Welte 1001aae69bed019826ddec93f761514652a93d871e49Harald Welte /* handling of jumps, etc. */ 1002aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!strcmp(GET_TARGET(e)->u.user.name, STANDARD_TARGET)) { 1003aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1004aae69bed019826ddec93f761514652a93d871e49Harald Welte 1005aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(e); 1006aae69bed019826ddec93f761514652a93d871e49Harald Welte if (t->target.u.target_size 1007aae69bed019826ddec93f761514652a93d871e49Harald Welte != ALIGN(sizeof(STRUCT_STANDARD_TARGET))) { 1008aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = EINVAL; 1009aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 1010aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1011aae69bed019826ddec93f761514652a93d871e49Harald Welte 1012aae69bed019826ddec93f761514652a93d871e49Harald Welte if (t->verdict < 0) { 1013aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("standard, verdict=%d\n", t->verdict); 1014aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_STANDARD; 1015aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if (t->verdict == r->offset+e->next_offset) { 1016aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("fallthrough\n"); 1017aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_FALLTHROUGH; 1018aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 1019aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("jump, target=%u\n", t->verdict); 1020aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_JUMP; 1021aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Jump target fixup has to be deferred 1022aae69bed019826ddec93f761514652a93d871e49Harald Welte * until second pass, since we migh not 1023aae69bed019826ddec93f761514652a93d871e49Harald Welte * yet have parsed the target */ 1024aae69bed019826ddec93f761514652a93d871e49Harald Welte } 102552c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson } else { 102652c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson DEBUGP_C("module, target=%s\n", GET_TARGET(e)->u.user.name); 102752c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson r->type = IPTCC_R_MODULE; 1028aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1029aae69bed019826ddec93f761514652a93d871e49Harald Welte 1030aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add_tail(&r->list, &h->chain_iterator_cur->rules); 10318d1b38a064d146c77eb8fc951717663e1a713cfcMartin Josefsson h->chain_iterator_cur->num_rules++; 1032aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1033aae69bed019826ddec93f761514652a93d871e49Harald Welteout_inc: 1034aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1035aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1036e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1037e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1038aae69bed019826ddec93f761514652a93d871e49Harald Welte 1039aae69bed019826ddec93f761514652a93d871e49Harald Welte/* parse an iptables blob into it's pieces */ 1040fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int parse_table(struct xtc_handle *h) 1041e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1042aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *prev; 1043aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num = 0; 1044aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1045aae69bed019826ddec93f761514652a93d871e49Harald Welte 10464bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Assume that chains offsets are sorted, this verified during 10474bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer parsing of ruleset (in __iptcc_p_add_chain())*/ 10484bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer h->sorted_offsets = 1; 10494bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 1050aae69bed019826ddec93f761514652a93d871e49Harald Welte /* First pass: over ruleset blob */ 1051aae69bed019826ddec93f761514652a93d871e49Harald Welte ENTRY_ITERATE(h->entries->entrytable, h->entries->size, 1052aae69bed019826ddec93f761514652a93d871e49Harald Welte cache_add_entry, h, &prev, &num); 1053aae69bed019826ddec93f761514652a93d871e49Harald Welte 105401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Build the chain index, used for chain list search speedup */ 105501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((iptcc_chain_index_alloc(h)) < 0) 105601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 105701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_build(h); 105801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 1059aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Second pass: fixup parsed data from first pass */ 1060aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1061aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1062aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1063dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt struct chain_head *lc; 1064aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1065aae69bed019826ddec93f761514652a93d871e49Harald Welte 1066aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type != IPTCC_R_JUMP) 1067aae69bed019826ddec93f761514652a93d871e49Harald Welte continue; 1068aae69bed019826ddec93f761514652a93d871e49Harald Welte 1069aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1070dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt lc = iptcc_find_chain_by_offset(h, t->verdict); 1071dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt if (!lc) 1072aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 1073dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt r->jump = lc; 1074dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt lc->references++; 1075aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1076aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1077aae69bed019826ddec93f761514652a93d871e49Harald Welte 1078aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 10790113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 10809e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte 1081aae69bed019826ddec93f761514652a93d871e49Harald Welte 1082aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 1083aae69bed019826ddec93f761514652a93d871e49Harald Welte * RULESET COMPILATION (cache -> blob) 1084aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 1085aae69bed019826ddec93f761514652a93d871e49Harald Welte 1086aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Convenience structures */ 1087aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_start{ 1088aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY e; 1089aae69bed019826ddec93f761514652a93d871e49Harald Welte struct ipt_error_target name; 1090aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1091aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_START_SIZE (sizeof(STRUCT_ENTRY) + \ 1092aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target))) 1093aae69bed019826ddec93f761514652a93d871e49Harald Welte 1094aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_foot { 1095aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY e; 1096aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET target; 1097aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1098aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_FOOT_SIZE (sizeof(STRUCT_ENTRY) + \ 1099aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(STRUCT_STANDARD_TARGET))) 1100aae69bed019826ddec93f761514652a93d871e49Harald Welte 1101aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_error { 1102aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY entry; 1103aae69bed019826ddec93f761514652a93d871e49Harald Welte struct ipt_error_target target; 1104aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1105aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_ERROR_SIZE (sizeof(STRUCT_ENTRY) + \ 1106aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target))) 1107aae69bed019826ddec93f761514652a93d871e49Harald Welte 1108aae69bed019826ddec93f761514652a93d871e49Harald Welte 1109aae69bed019826ddec93f761514652a93d871e49Harald Welte 1110aae69bed019826ddec93f761514652a93d871e49Harald Welte/* compile rule from cache into blob */ 1111fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic inline int iptcc_compile_rule (struct xtc_handle *h, STRUCT_REPLACE *repl, struct rule_head *r) 11120113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1113aae69bed019826ddec93f761514652a93d871e49Harald Welte /* handle jumps */ 1114aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type == IPTCC_R_JUMP) { 1115aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1116aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1117aae69bed019826ddec93f761514652a93d871e49Harald Welte /* memset for memcmp convenience on delete/replace */ 1118aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(t->target.u.user.name, 0, FUNCTION_MAXNAMELEN); 1119aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(t->target.u.user.name, STANDARD_TARGET); 1120aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Jumps can only happen to builtin chains, so we 1121aae69bed019826ddec93f761514652a93d871e49Harald Welte * can safely assume that they always have a header */ 1122aae69bed019826ddec93f761514652a93d871e49Harald Welte t->verdict = r->jump->head_offset + IPTCB_CHAIN_START_SIZE; 1123aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if (r->type == IPTCC_R_FALLTHROUGH) { 1124aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1125aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1126aae69bed019826ddec93f761514652a93d871e49Harald Welte t->verdict = r->offset + r->size; 1127aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1128aae69bed019826ddec93f761514652a93d871e49Harald Welte 1129aae69bed019826ddec93f761514652a93d871e49Harald Welte /* copy entry from cache to blob */ 1130aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy((char *)repl->entries+r->offset, r->entry, r->size); 1131aae69bed019826ddec93f761514652a93d871e49Harald Welte 1132aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1133e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1135aae69bed019826ddec93f761514652a93d871e49Harald Welte/* compile chain from cache into blob */ 1136fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_chain(struct xtc_handle *h, STRUCT_REPLACE *repl, struct chain_head *c) 11373ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte{ 1138aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret; 1139aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1140aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_start *head; 1141aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_foot *foot; 1142aae69bed019826ddec93f761514652a93d871e49Harald Welte 1143aae69bed019826ddec93f761514652a93d871e49Harald Welte /* only user-defined chains have heaer */ 1144aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 1145aae69bed019826ddec93f761514652a93d871e49Harald Welte /* put chain header in place */ 1146aae69bed019826ddec93f761514652a93d871e49Harald Welte head = (void *)repl->entries + c->head_offset; 1147aae69bed019826ddec93f761514652a93d871e49Harald Welte head->e.target_offset = sizeof(STRUCT_ENTRY); 1148aae69bed019826ddec93f761514652a93d871e49Harald Welte head->e.next_offset = IPTCB_CHAIN_START_SIZE; 1149aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(head->name.t.u.user.name, ERROR_TARGET); 1150aae69bed019826ddec93f761514652a93d871e49Harald Welte head->name.t.u.target_size = 1151aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target)); 1152aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(head->name.error, c->name); 1153aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 1154aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->hook_entry[c->hooknum-1] = c->head_offset; 1155aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->underflow[c->hooknum-1] = c->foot_offset; 1156aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1157aae69bed019826ddec93f761514652a93d871e49Harald Welte 1158aae69bed019826ddec93f761514652a93d871e49Harald Welte /* iterate over rules */ 1159aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1160aae69bed019826ddec93f761514652a93d871e49Harald Welte ret = iptcc_compile_rule(h, repl, r); 1161aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1162aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 1163aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1164aae69bed019826ddec93f761514652a93d871e49Harald Welte 1165aae69bed019826ddec93f761514652a93d871e49Harald Welte /* put chain footer in place */ 1166aae69bed019826ddec93f761514652a93d871e49Harald Welte foot = (void *)repl->entries + c->foot_offset; 1167aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->e.target_offset = sizeof(STRUCT_ENTRY); 1168aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->e.next_offset = IPTCB_CHAIN_FOOT_SIZE; 1169aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(foot->target.target.u.user.name, STANDARD_TARGET); 1170aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.target.u.target_size = 1171aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(STRUCT_STANDARD_TARGET)); 1172aae69bed019826ddec93f761514652a93d871e49Harald Welte /* builtin targets have verdict, others return */ 1173aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcc_is_builtin(c)) 1174aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.verdict = c->verdict; 1175aae69bed019826ddec93f761514652a93d871e49Harald Welte else 1176aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.verdict = RETURN; 1177aae69bed019826ddec93f761514652a93d871e49Harald Welte /* set policy-counters */ 1178aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&foot->e.counters, &c->counters, sizeof(STRUCT_COUNTERS)); 1179aae69bed019826ddec93f761514652a93d871e49Harald Welte 1180aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 11813ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte} 11823ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1183aae69bed019826ddec93f761514652a93d871e49Harald Welte/* calculate offset and number for every rule in the cache */ 1184fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_chain_offsets(struct xtc_handle *h, struct chain_head *c, 1185efa8fc2123a2a9fc229ab471edd2b2688ce1da3aHarald Welte unsigned int *offset, unsigned int *num) 11863ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte{ 1187aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1188aae69bed019826ddec93f761514652a93d871e49Harald Welte 1189aae69bed019826ddec93f761514652a93d871e49Harald Welte c->head_offset = *offset; 1190aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("%s: chain_head %u, offset=%u\n", c->name, *num, *offset); 1191aae69bed019826ddec93f761514652a93d871e49Harald Welte 1192aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 1193aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Chain has header */ 1194aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += sizeof(STRUCT_ENTRY) 1195aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(struct ipt_error_target)); 1196aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1197aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1198aae69bed019826ddec93f761514652a93d871e49Harald Welte 1199aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1200aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("rule %u, offset=%u, index=%u\n", *num, *offset, *num); 1201aae69bed019826ddec93f761514652a93d871e49Harald Welte r->offset = *offset; 1202aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index = *num; 1203aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += r->size; 1204aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1205aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1206aae69bed019826ddec93f761514652a93d871e49Harald Welte 1207aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("%s; chain_foot %u, offset=%u, index=%u\n", c->name, *num, 1208aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset, *num); 1209aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_offset = *offset; 1210aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index = *num; 1211aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += sizeof(STRUCT_ENTRY) 1212aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(STRUCT_STANDARD_TARGET)); 1213aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1214aae69bed019826ddec93f761514652a93d871e49Harald Welte 1215aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 12163ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte} 12173ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1218aae69bed019826ddec93f761514652a93d871e49Harald Welte/* put the pieces back together again */ 1219fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_table_prep(struct xtc_handle *h, unsigned int *size) 1220aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1221aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1222aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset = 0, num = 0; 1223aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret = 0; 12243ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1225aae69bed019826ddec93f761514652a93d871e49Harald Welte /* First pass: calculate offset for every rule */ 1226aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1227aae69bed019826ddec93f761514652a93d871e49Harald Welte ret = iptcc_compile_chain_offsets(h, c, &offset, &num); 1228aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1229aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 1230aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1231aae69bed019826ddec93f761514652a93d871e49Harald Welte 1232aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Append one error rule at end of chain */ 1233aae69bed019826ddec93f761514652a93d871e49Harald Welte num++; 1234aae69bed019826ddec93f761514652a93d871e49Harald Welte offset += sizeof(STRUCT_ENTRY) 1235aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(struct ipt_error_target)); 1236aae69bed019826ddec93f761514652a93d871e49Harald Welte 1237aae69bed019826ddec93f761514652a93d871e49Harald Welte /* ruleset size is now in offset */ 1238aae69bed019826ddec93f761514652a93d871e49Harald Welte *size = offset; 1239aae69bed019826ddec93f761514652a93d871e49Harald Welte return num; 1240aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1241aae69bed019826ddec93f761514652a93d871e49Harald Welte 1242fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_table(struct xtc_handle *h, STRUCT_REPLACE *repl) 12430113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1244aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1245aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_error *error; 12460113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1247aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Second pass: copy from cache to offsets, fill in jumps */ 1248aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1249aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret = iptcc_compile_chain(h, repl, c); 1250aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1251aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 12520113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 12530113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1254aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Append error rule at end of chain */ 1255aae69bed019826ddec93f761514652a93d871e49Harald Welte error = (void *)repl->entries + repl->size - IPTCB_CHAIN_ERROR_SIZE; 1256aae69bed019826ddec93f761514652a93d871e49Harald Welte error->entry.target_offset = sizeof(STRUCT_ENTRY); 1257aae69bed019826ddec93f761514652a93d871e49Harald Welte error->entry.next_offset = IPTCB_CHAIN_ERROR_SIZE; 1258aae69bed019826ddec93f761514652a93d871e49Harald Welte error->target.t.u.user.target_size = 1259aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target)); 1260aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy((char *)&error->target.t.u.user.name, ERROR_TARGET); 1261aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy((char *)&error->target.error, "ERROR"); 1262aae69bed019826ddec93f761514652a93d871e49Harald Welte 1263aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 12640113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1265e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1266aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 1267aae69bed019826ddec93f761514652a93d871e49Harald Welte * EXTERNAL API (operates on cache only) 1268aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 1269aae69bed019826ddec93f761514652a93d871e49Harald Welte 1270e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Allocate handle of given size */ 1271fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic struct xtc_handle * 12720113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Weltealloc_handle(const char *tablename, unsigned int size, unsigned int num_rules) 1273e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1274e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher size_t len; 1275fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h; 1276e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1277aae69bed019826ddec93f761514652a93d871e49Harald Welte len = sizeof(STRUCT_TC_HANDLE) + size; 1278e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1279aae69bed019826ddec93f761514652a93d871e49Harald Welte h = malloc(sizeof(STRUCT_TC_HANDLE)); 1280aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!h) { 1281e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 1282e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1283e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1284aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(h, 0, sizeof(*h)); 1285aae69bed019826ddec93f761514652a93d871e49Harald Welte INIT_LIST_HEAD(&h->chains); 1286e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher strcpy(h->info.name, tablename); 1287aae69bed019826ddec93f761514652a93d871e49Harald Welte 12880371c0c5eb17c81e8dd44c4aa31b58318e9b7b72Harald Welte h->entries = malloc(sizeof(STRUCT_GET_ENTRIES) + size); 1289aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!h->entries) 1290aae69bed019826ddec93f761514652a93d871e49Harald Welte goto out_free_handle; 1291aae69bed019826ddec93f761514652a93d871e49Harald Welte 1292aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(h->entries->name, tablename); 12930371c0c5eb17c81e8dd44c4aa31b58318e9b7b72Harald Welte h->entries->size = size; 1294e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1295e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 1296aae69bed019826ddec93f761514652a93d871e49Harald Welte 1297aae69bed019826ddec93f761514652a93d871e49Harald Welteout_free_handle: 1298aae69bed019826ddec93f761514652a93d871e49Harald Welte free(h); 1299aae69bed019826ddec93f761514652a93d871e49Harald Welte 1300aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1301e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1302e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1303aae69bed019826ddec93f761514652a93d871e49Harald Welte 1304fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstruct xtc_handle * 130579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_INIT(const char *tablename) 1306e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1307fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h; 130879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_GETINFO info; 1309efa8fc2123a2a9fc229ab471edd2b2688ce1da3aHarald Welte unsigned int tmp; 1310e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher socklen_t s; 1311175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt int sockfd; 1312e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 131379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_INIT; 1314e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1315841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson if (strlen(tablename) >= TABLE_MAXNAMELEN) { 1316841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson errno = EINVAL; 1317841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson return NULL; 1318841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson } 1319175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt 1320175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt sockfd = socket(TC_AF, SOCK_RAW, IPPROTO_RAW); 1321175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt if (sockfd < 0) 1322175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt return NULL; 1323175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt 13242f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardyretry: 1325e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher s = sizeof(info); 1326841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1327e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher strcpy(info.name, tablename); 1328664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (getsockopt(sockfd, TC_IPPROTO, SO_GET_INFO, &info, &s) < 0) { 1329175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt close(sockfd); 1330e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1331664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1332e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1333aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("valid_hooks=0x%08x, num_entries=%u, size=%u\n", 1334aae69bed019826ddec93f761514652a93d871e49Harald Welte info.valid_hooks, info.num_entries, info.size); 1335aae69bed019826ddec93f761514652a93d871e49Harald Welte 13360113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte if ((h = alloc_handle(info.name, info.size, info.num_entries)) 1337841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson == NULL) { 1338175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt close(sockfd); 1339e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1340841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson } 1341e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1342e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Initialize current state */ 1343175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt h->sockfd = sockfd; 1344e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->info = info; 13450113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1346aae69bed019826ddec93f761514652a93d871e49Harald Welte h->entries->size = h->info.size; 1347e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 134879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell tmp = sizeof(STRUCT_GET_ENTRIES) + h->info.size; 1349e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1350175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt if (getsockopt(h->sockfd, TC_IPPROTO, SO_GET_ENTRIES, h->entries, 1351aae69bed019826ddec93f761514652a93d871e49Harald Welte &tmp) < 0) 1352aae69bed019826ddec93f761514652a93d871e49Harald Welte goto error; 1353aae69bed019826ddec93f761514652a93d871e49Harald Welte 1354aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 1355aae69bed019826ddec93f761514652a93d871e49Harald Welte { 1356aae69bed019826ddec93f761514652a93d871e49Harald Welte int fd = open("/tmp/libiptc-so_get_entries.blob", 1357aae69bed019826ddec93f761514652a93d871e49Harald Welte O_CREAT|O_WRONLY); 1358aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 1359aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, h->entries, tmp); 1360aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 1361aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1362e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1363aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 1364aae69bed019826ddec93f761514652a93d871e49Harald Welte 1365aae69bed019826ddec93f761514652a93d871e49Harald Welte if (parse_table(h) < 0) 1366aae69bed019826ddec93f761514652a93d871e49Harald Welte goto error; 13677e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 1368e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(h); 1369e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 1370aae69bed019826ddec93f761514652a93d871e49Harald Welteerror: 13711c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt TC_FREE(h); 13722f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy /* A different process changed the ruleset size, retry */ 13732f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy if (errno == EAGAIN) 13742f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy goto retry; 1375aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1376e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1377e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1378841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefssonvoid 13791c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FREE(struct xtc_handle *h) 1380841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson{ 1381aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c, *tmp; 1382aae69bed019826ddec93f761514652a93d871e49Harald Welte 1383664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_FREE; 1384175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt close(h->sockfd); 1385aae69bed019826ddec93f761514652a93d871e49Harald Welte 13861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_for_each_entry_safe(c, tmp, &h->chains, list) { 1387aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *rtmp; 1388aae69bed019826ddec93f761514652a93d871e49Harald Welte 1389aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry_safe(r, rtmp, &c->rules, list) { 1390aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 1391aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1392aae69bed019826ddec93f761514652a93d871e49Harald Welte 1393aae69bed019826ddec93f761514652a93d871e49Harald Welte free(c); 1394aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1395aae69bed019826ddec93f761514652a93d871e49Harald Welte 13961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_free(h); 1397aae69bed019826ddec93f761514652a93d871e49Harald Welte 13981c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt free(h->entries); 13991c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt free(h); 1400841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson} 1401841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1402e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 140379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellprint_match(const STRUCT_ENTRY_MATCH *m) 1404e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1405228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell printf("Match name: `%s'\n", m->u.user.name); 1406e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1407e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1408e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1409fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int dump_entry(STRUCT_ENTRY *e, struct xtc_handle *const handle); 141079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell 1411e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid 1412fd1873110f8e57be578df17fc9d03536b10f4f73Jan EngelhardtTC_DUMP_ENTRIES(struct xtc_handle *const handle) 1413e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1414664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_DUMP_ENTRIES; 1415e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(handle); 141697fb2f1579f0794377db1dca7c5bb07fade1a0dcPatrick McHardy 1417e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell printf("libiptc v%s. %u bytes.\n", 14188b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt XTABLES_VERSION, handle->entries->size); 1419e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("Table `%s'\n", handle->info.name); 1420d73af64b9d28a5b0309104232c848e8ca8ab6956Jan Engelhardt printf("Hooks: pre/in/fwd/out/post = %x/%x/%x/%x/%x\n", 142167088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_PRE_ROUTING], 142267088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_LOCAL_IN], 142367088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_FORWARD], 142467088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_LOCAL_OUT], 142567088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_POST_ROUTING]); 1426d73af64b9d28a5b0309104232c848e8ca8ab6956Jan Engelhardt printf("Underflows: pre/in/fwd/out/post = %x/%x/%x/%x/%x\n", 142767088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_PRE_ROUTING], 142867088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_LOCAL_IN], 142967088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_FORWARD], 143067088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_LOCAL_OUT], 143167088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_POST_ROUTING]); 1432e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1433aae69bed019826ddec93f761514652a93d871e49Harald Welte ENTRY_ITERATE(handle->entries->entrytable, handle->entries->size, 143479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell dump_entry, handle); 14350113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1436e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1437e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Does this chain exist? */ 1438fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtint TC_IS_CHAIN(const char *chain, struct xtc_handle *const handle) 1439e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1440664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_IS_CHAIN; 1441aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_find_label(chain, handle) != NULL; 1442e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1443e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1444fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_iterator_advance(struct xtc_handle *handle) 1445aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1446aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = handle->chain_iterator_cur; 1447aae69bed019826ddec93f761514652a93d871e49Harald Welte 1448aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c->list.next == &handle->chains) 1449aae69bed019826ddec93f761514652a93d871e49Harald Welte handle->chain_iterator_cur = NULL; 1450aae69bed019826ddec93f761514652a93d871e49Harald Welte else 1451aae69bed019826ddec93f761514652a93d871e49Harald Welte handle->chain_iterator_cur = 1452aae69bed019826ddec93f761514652a93d871e49Harald Welte list_entry(c->list.next, struct chain_head, list); 1453aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1454e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 145530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Iterator functions to run through the chains. */ 1456e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 14571c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FIRST_CHAIN(struct xtc_handle *handle) 1458e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 14591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct chain_head *c = list_entry(handle->chains.next, 1460aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head, list); 1461aae69bed019826ddec93f761514652a93d871e49Harald Welte 1462aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_FIRST_CHAIN; 1463aae69bed019826ddec93f761514652a93d871e49Harald Welte 1464aae69bed019826ddec93f761514652a93d871e49Harald Welte 14651c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (list_empty(&handle->chains)) { 1466aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": no chains\n"); 14670113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return NULL; 1468aae69bed019826ddec93f761514652a93d871e49Harald Welte } 14690113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 14701c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->chain_iterator_cur = c; 14711c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 147230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1473aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": returning `%s'\n", c->name); 1474aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->name; 147530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 147630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 147730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Iterator functions to run through the chains. Returns NULL at end. */ 147830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russellconst char * 14791c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NEXT_CHAIN(struct xtc_handle *handle) 148030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 14811c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct chain_head *c = handle->chain_iterator_cur; 1482aae69bed019826ddec93f761514652a93d871e49Harald Welte 1483aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NEXT_CHAIN; 148430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1485aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1486aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": no more chains\n"); 148730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1488aae69bed019826ddec93f761514652a93d871e49Harald Welte } 148930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 14901c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 1491aae69bed019826ddec93f761514652a93d871e49Harald Welte 1492aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": returning `%s'\n", c->name); 1493aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->name; 149430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 149530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 149630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Get first rule in the given chain: NULL for empty chain. */ 149779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellconst STRUCT_ENTRY * 14981c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FIRST_RULE(const char *chain, struct xtc_handle *handle) 149930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 1500aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1501aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1502aae69bed019826ddec93f761514652a93d871e49Harald Welte 1503aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_FIRST_RULE; 150430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1505aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("first rule(%s): ", chain); 1506aae69bed019826ddec93f761514652a93d871e49Harald Welte 15071c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 150830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell if (!c) { 150930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell errno = ENOENT; 151030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1511e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1512e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 151330fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell /* Empty chain: single return/policy rule */ 1514aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&c->rules)) { 1515aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("no rules, returning NULL\n"); 151630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1517aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1518aae69bed019826ddec93f761514652a93d871e49Harald Welte 1519aae69bed019826ddec93f761514652a93d871e49Harald Welte r = list_entry(c->rules.next, struct rule_head, list); 15201c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = r; 1521aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%p\n", r); 152230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1523aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 1524e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1525e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 152630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Returns NULL when rules run out. */ 152779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellconst STRUCT_ENTRY * 15281c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NEXT_RULE(const STRUCT_ENTRY *prev, struct xtc_handle *handle) 152930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 1530aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1531aae69bed019826ddec93f761514652a93d871e49Harald Welte 1532664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_NEXT_RULE; 15331c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt DEBUGP("rule_iterator_cur=%p...", handle->rule_iterator_cur); 1534aae69bed019826ddec93f761514652a93d871e49Harald Welte 15351c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (handle->rule_iterator_cur == NULL) { 1536aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("returning NULL\n"); 153730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1538aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1539aae69bed019826ddec93f761514652a93d871e49Harald Welte 15401c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt r = list_entry(handle->rule_iterator_cur->list.next, 1541aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head, list); 154230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1543aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NEXT_RULE; 1544aae69bed019826ddec93f761514652a93d871e49Harald Welte 1545aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("next=%p, head=%p...", &r->list, 15461c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt &handle->rule_iterator_cur->chain->rules); 1547aae69bed019826ddec93f761514652a93d871e49Harald Welte 15481c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (&r->list == &handle->rule_iterator_cur->chain->rules) { 15491c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = NULL; 1550aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("finished, returning NULL\n"); 1551aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1552aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1553aae69bed019826ddec93f761514652a93d871e49Harald Welte 15541c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = r; 1555aae69bed019826ddec93f761514652a93d871e49Harald Welte 1556aae69bed019826ddec93f761514652a93d871e49Harald Welte /* NOTE: prev is without any influence ! */ 1557aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("returning rule %p\n", r); 1558aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 155930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 156030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1561e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* How many rules in this chain? */ 156233690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic unsigned int 15631c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NUM_RULES(const char *chain, struct xtc_handle *handle) 1564e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1565aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1566aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NUM_RULES; 15671c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 1568aae69bed019826ddec93f761514652a93d871e49Harald Welte 15691c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1570aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1571e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1572e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return (unsigned int)-1; 1573e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1574aae69bed019826ddec93f761514652a93d871e49Harald Welte 1575aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->num_rules; 1576e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1577e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 157833690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic const STRUCT_ENTRY * 15791c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_GET_RULE(const char *chain, unsigned int n, struct xtc_handle *handle) 1580e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1581aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1582aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1583aae69bed019826ddec93f761514652a93d871e49Harald Welte 1584aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_RULE; 1585e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 15861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 1587aae69bed019826ddec93f761514652a93d871e49Harald Welte 15881c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1589aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1590e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1591e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1592e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1593e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1594aae69bed019826ddec93f761514652a93d871e49Harald Welte r = iptcc_get_rule_num(c, n); 1595aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!r) 1596aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1597aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 1598e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1599e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1600aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns a pointer to the target name of this position. */ 160133690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic const char *standard_target_map(int verdict) 1602e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1603aae69bed019826ddec93f761514652a93d871e49Harald Welte switch (verdict) { 1604aae69bed019826ddec93f761514652a93d871e49Harald Welte case RETURN: 160579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell return LABEL_RETURN; 1606aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1607aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_ACCEPT-1: 160879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell return LABEL_ACCEPT; 1609aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1610aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_DROP-1: 1611aae69bed019826ddec93f761514652a93d871e49Harald Welte return LABEL_DROP; 1612aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1613aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_QUEUE-1: 1614aae69bed019826ddec93f761514652a93d871e49Harald Welte return LABEL_QUEUE; 1615aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1616aae69bed019826ddec93f761514652a93d871e49Harald Welte default: 1617aae69bed019826ddec93f761514652a93d871e49Harald Welte fprintf(stderr, "ERROR: %d not a valid target)\n", 1618aae69bed019826ddec93f761514652a93d871e49Harald Welte verdict); 1619aae69bed019826ddec93f761514652a93d871e49Harald Welte abort(); 1620aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1621e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1622aae69bed019826ddec93f761514652a93d871e49Harald Welte /* not reached */ 1623aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1624e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1625e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1626aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns a pointer to the target name of this position. */ 1627aae69bed019826ddec93f761514652a93d871e49Harald Welteconst char *TC_GET_TARGET(const STRUCT_ENTRY *ce, 16281c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1629e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1630aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = (STRUCT_ENTRY *)ce; 1631e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell struct rule_head *r = container_of(e, struct rule_head, entry[0]); 1632e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1633aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_TARGET; 16340113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1635aae69bed019826ddec93f761514652a93d871e49Harald Welte switch(r->type) { 1636aae69bed019826ddec93f761514652a93d871e49Harald Welte int spos; 1637aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_FALLTHROUGH: 1638aae69bed019826ddec93f761514652a93d871e49Harald Welte return ""; 1639aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1640aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_JUMP: 1641aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("r=%p, jump=%p, name=`%s'\n", r, r->jump, r->jump->name); 1642aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->jump->name; 1643aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1644aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_STANDARD: 1645aae69bed019826ddec93f761514652a93d871e49Harald Welte spos = *(int *)GET_TARGET(e)->data; 1646aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("r=%p, spos=%d'\n", r, spos); 1647aae69bed019826ddec93f761514652a93d871e49Harald Welte return standard_target_map(spos); 1648aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1649aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_MODULE: 1650aae69bed019826ddec93f761514652a93d871e49Harald Welte return GET_TARGET(e)->u.user.name; 1651aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 16520113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 1653aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1654aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1655aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Is this a built-in chain? Actually returns hook + 1. */ 1656aae69bed019826ddec93f761514652a93d871e49Harald Welteint 1657fd1873110f8e57be578df17fc9d03536b10f4f73Jan EngelhardtTC_BUILTIN(const char *chain, struct xtc_handle *const handle) 1658aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1659aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1660aae69bed019826ddec93f761514652a93d871e49Harald Welte 1661aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_BUILTIN; 16620113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1663aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_find_label(chain, handle); 1664aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1665aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 1666b0f3d2d7261be3fe256a66abcc237241fea43a02Martin Josefsson return 0; 16670113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 16680113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1669aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_is_builtin(c); 16700113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 16710113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1672aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Get the policy of a given built-in chain */ 1673aae69bed019826ddec93f761514652a93d871e49Harald Welteconst char * 1674aae69bed019826ddec93f761514652a93d871e49Harald WelteTC_GET_POLICY(const char *chain, 1675aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_COUNTERS *counters, 16761c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 16770113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1678aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 16790113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1680aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_POLICY; 1681fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte 1682aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("called for chain %s\n", chain); 16830113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 16841c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1685aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1686aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 1687aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 16880113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 16890113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1690aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) 1691aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 16920113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1693aae69bed019826ddec93f761514652a93d871e49Harald Welte *counters = c->counters; 16940113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1695aae69bed019826ddec93f761514652a93d871e49Harald Welte return standard_target_map(c->verdict); 16960113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1697e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1698e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 1699aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcc_standard_map(struct rule_head *r, int verdict) 1700e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1701aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = r->entry; 170279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_STANDARD_TARGET *t; 1703e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 170479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell t = (STRUCT_STANDARD_TARGET *)GET_TARGET(e); 1705e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 170667088e73ce7707229c56987868f112051defca5aRusty Russell if (t->target.u.target_size 17078c700900e2a0cf87d7917cb62578583a60ad1210Philip Blundell != ALIGN(sizeof(STRUCT_STANDARD_TARGET))) { 1708e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 1709e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1710e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1711e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* memset for memcmp convenience on delete/replace */ 171279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell memset(t->target.u.user.name, 0, FUNCTION_MAXNAMELEN); 171379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell strcpy(t->target.u.user.name, STANDARD_TARGET); 1714e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher t->verdict = verdict; 1715e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1716aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_STANDARD; 1717aae69bed019826ddec93f761514652a93d871e49Harald Welte 1718e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1719e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 17207e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 1721e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 1722fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_map_target(struct xtc_handle *const handle, 1723aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r) 1724e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1725aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = r->entry; 17260113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte STRUCT_ENTRY_TARGET *t = GET_TARGET(e); 1727e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1728e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's empty (=> fall through) */ 1729aae69bed019826ddec93f761514652a93d871e49Harald Welte if (strcmp(t->u.user.name, "") == 0) { 1730aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_FALLTHROUGH; 1731aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1732aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1733e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's a standard target name... */ 173479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_ACCEPT) == 0) 1735aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_ACCEPT - 1); 173679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_DROP) == 0) 1737aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_DROP - 1); 173867088e73ce7707229c56987868f112051defca5aRusty Russell else if (strcmp(t->u.user.name, LABEL_QUEUE) == 0) 1739aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_QUEUE - 1); 174079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_RETURN) == 0) 1741aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, RETURN); 174279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (TC_BUILTIN(t->u.user.name, handle)) { 1743e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Can't jump to builtins. */ 1744e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 1745e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1746e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else { 1747e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's an existing chain name. */ 1748aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1749aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("trying to find chain `%s': ", t->u.user.name); 1750aae69bed019826ddec93f761514652a93d871e49Harald Welte 1751aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_find_label(t->u.user.name, handle); 1752aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c) { 1753aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("found!\n"); 1754aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_JUMP; 1755aae69bed019826ddec93f761514652a93d871e49Harald Welte r->jump = c; 1756aae69bed019826ddec93f761514652a93d871e49Harald Welte c->references++; 1757aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1758aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1759aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("not found :(\n"); 1760e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1761e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1762e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Must be a module? If not, kernel will reject... */ 17633aef54dce4f9bbe0b466478fd33a1d3131efbbb8Rusty Russell /* memset to all 0 for your memcmp convenience: don't clear version */ 1764228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell memset(t->u.user.name + strlen(t->u.user.name), 1765e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 0, 17663aef54dce4f9bbe0b466478fd33a1d3131efbbb8Rusty Russell FUNCTION_MAXNAMELEN - 1 - strlen(t->u.user.name)); 1767733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell r->type = IPTCC_R_MODULE; 1768aae69bed019826ddec93f761514652a93d871e49Harald Welte set_changed(handle); 1769aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1770e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1771e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 17720113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Insert the entry `fw' in chain `chain' into position `rulenum'. */ 1773e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 177479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_INSERT_ENTRY(const IPT_CHAINLABEL chain, 177579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 177679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 17771c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1778e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1779aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1780eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson struct rule_head *r; 1781eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson struct list_head *prev; 1782e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 178379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_INSERT_ENTRY; 1784aae69bed019826ddec93f761514652a93d871e49Harald Welte 17851c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1786e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1787e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1788e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1789e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1790eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson /* first rulenum index = 0 1791eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson first c->num_rules index = 1 */ 1792eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson if (rulenum > c->num_rules) { 1793e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = E2BIG; 1794e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1795e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1796e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1797631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson /* If we are inserting at the end just take advantage of the 1798631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson double linked list, insert will happen before the entry 1799631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson prev points to. */ 1800631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson if (rulenum == c->num_rules) { 1801eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson prev = &c->rules; 1802a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else if (rulenum + 1 <= c->num_rules/2) { 1803631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson r = iptcc_get_rule_num(c, rulenum + 1); 1804a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson prev = &r->list; 1805a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else { 1806a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 1807631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson prev = &r->list; 1808631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson } 1809eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson 1810aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1811aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1812aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1813aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1814aae69bed019826ddec93f761514652a93d871e49Harald Welte 1815aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1816aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1817aae69bed019826ddec93f761514652a93d871e49Harald Welte 18181c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1819aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 18200113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1821aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1822aae69bed019826ddec93f761514652a93d871e49Harald Welte 1823eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson list_add_tail(&r->list, prev); 1824aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules++; 1825aae69bed019826ddec93f761514652a93d871e49Harald Welte 18261c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 1827e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1828aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1829e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1830e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1831e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Atomically replace rule `rulenum' in `chain' with `fw'. */ 1832e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 183379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_REPLACE_ENTRY(const IPT_CHAINLABEL chain, 183479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 183579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 18361c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1837e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1838aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1839aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *old; 1840e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 184179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_REPLACE_ENTRY; 1842e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18431c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1844e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1845e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1846e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1847e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18480f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson if (rulenum >= c->num_rules) { 1849e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = E2BIG; 1850e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1851e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1852e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18530f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson /* Take advantage of the double linked list if possible. */ 18540f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson if (rulenum + 1 <= c->num_rules/2) { 18550f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson old = iptcc_get_rule_num(c, rulenum + 1); 18560f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson } else { 18570f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson old = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 18580f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson } 18590f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson 1860aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1861aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1862e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1863aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1864aae69bed019826ddec93f761514652a93d871e49Harald Welte 1865aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1866aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1867e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18681c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1869aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 18700113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1871aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1872aae69bed019826ddec93f761514652a93d871e49Harald Welte 1873aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add(&r->list, &old->list); 1874aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(old); 18750113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 18761c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 1877aae69bed019826ddec93f761514652a93d871e49Harald Welte 1878aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1879e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1880e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18810113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Append entry `fw' to chain `chain'. Equivalent to insert with 1882e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher rulenum = length of chain. */ 1883e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 188479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_APPEND_ENTRY(const IPT_CHAINLABEL chain, 188579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 18861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1887e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1888aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1889aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1890e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 189179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_APPEND_ENTRY; 18921c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1893aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("unable to find chain `%s'\n", chain); 1894e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1895e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1896e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1897e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1898aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1899aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("unable to allocate rule for chain `%s'\n", chain); 1900aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1901aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1902aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1903aae69bed019826ddec93f761514652a93d871e49Harald Welte 1904aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1905aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1906aae69bed019826ddec93f761514652a93d871e49Harald Welte 19071c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 190812009531e6a96a62ee398eb0ab3e9ec0b3b57701Martin Josefsson DEBUGP("unable to map target of rule for chain `%s'\n", chain); 1909aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 19100113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1911aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1912aae69bed019826ddec93f761514652a93d871e49Harald Welte 1913aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add_tail(&r->list, &c->rules); 1914aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules++; 1915aae69bed019826ddec93f761514652a93d871e49Harald Welte 19161c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 19170113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1918aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1919e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1920e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1921e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 192279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellmatch_different(const STRUCT_ENTRY_MATCH *a, 1923edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell const unsigned char *a_elems, 1924edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell const unsigned char *b_elems, 1925edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned char **maskptr) 1926e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 192779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY_MATCH *b; 1928edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned int i; 1929e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1930e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Offset of b is the same as a. */ 193130fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell b = (void *)b_elems + ((unsigned char *)a - a_elems); 1932e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1933228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell if (a->u.match_size != b->u.match_size) 1934e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1935e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1936228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell if (strcmp(a->u.user.name, b->u.user.name) != 0) 1937e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1938e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 193973ef09b21573ddb17ff75e5fd06fd4b52ec8ea40Rusty Russell *maskptr += ALIGN(sizeof(*a)); 1940edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell 194173ef09b21573ddb17ff75e5fd06fd4b52ec8ea40Rusty Russell for (i = 0; i < a->u.match_size - ALIGN(sizeof(*a)); i++) 1942edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell if (((a->data[i] ^ b->data[i]) & (*maskptr)[i]) != 0) 1943edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell return 1; 1944edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell *maskptr += i; 1945edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell return 0; 1946edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell} 1947edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell 1948edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russellstatic inline int 1949733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russelltarget_same(struct rule_head *a, struct rule_head *b,const unsigned char *mask) 1950edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell{ 1951edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned int i; 1952733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell STRUCT_ENTRY_TARGET *ta, *tb; 1953e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1954733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (a->type != b->type) 1955733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1956733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1957733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell ta = GET_TARGET(a->entry); 1958733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell tb = GET_TARGET(b->entry); 1959733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1960733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell switch (a->type) { 1961733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_FALLTHROUGH: 1962733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 1963733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_JUMP: 1964733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return a->jump == b->jump; 1965733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_STANDARD: 1966733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return ((STRUCT_STANDARD_TARGET *)ta)->verdict 1967733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell == ((STRUCT_STANDARD_TARGET *)tb)->verdict; 1968733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_MODULE: 1969733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (ta->u.target_size != tb->u.target_size) 1970733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1971733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (strcmp(ta->u.user.name, tb->u.user.name) != 0) 1972733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1973733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1974733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell for (i = 0; i < ta->u.target_size - sizeof(*ta); i++) 1975daade4452715cbd1feea05d5231c5e38e3b0b98bRusty Russell if (((ta->data[i] ^ tb->data[i]) & mask[i]) != 0) 1976733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1977733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 1978733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell default: 1979733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell fprintf(stderr, "ERROR: bad type %i\n", a->type); 1980733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell abort(); 1981733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell } 1982e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1983e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1984733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russellstatic unsigned char * 198579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellis_same(const STRUCT_ENTRY *a, 198679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *b, 198779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned char *matchmask); 1988e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 19890113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Delete the first rule in `chain' which matches `fw'. */ 1990e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 199179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_DELETE_ENTRY(const IPT_CHAINLABEL chain, 199279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *origfw, 199379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned char *matchmask, 19941c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1995e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1996aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1997e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell struct rule_head *r, *i; 1998e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 199979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_ENTRY; 20001c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2001e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2002e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2003e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2004e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2005e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell /* Create a rule_head from origfw. */ 2006e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell r = iptcc_alloc_rule(c, origfw->next_offset); 2007e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell if (!r) { 20080113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = ENOMEM; 20090113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 20100113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 20110113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2012e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell memcpy(r->entry, origfw, origfw->next_offset); 2013e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell r->counter_map.maptype = COUNTER_MAP_NOMAP; 20141c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 2015e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell DEBUGP("unable to map target of rule for chain `%s'\n", chain); 2016e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell free(r); 2017e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell return 0; 201804a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer } else { 201904a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer /* iptcc_map_target increment target chain references 202004a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer * since this is a fake rule only used for matching 202104a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer * the chain references count is decremented again. 202204a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer */ 202304a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer if (r->type == IPTCC_R_JUMP 202404a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer && r->jump) 202504a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer r->jump->references--; 2026e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell } 2027fe53707285c250c6bb1e434ea6f8271cf061c67bHarald Welte 2028e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell list_for_each_entry(i, &c->rules, list) { 2029733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell unsigned char *mask; 2030733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2031733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell mask = is_same(r->entry, i->entry, matchmask); 2032733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (!mask) 2033733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell continue; 2034733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2035733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (!target_same(r, i, mask)) 2036733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell continue; 2037733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2038733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell /* If we are about to delete the rule that is the 2039733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell * current iterator, move rule iterator back. next 2040733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell * pointer will then point to real next node */ 20411c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (i == handle->rule_iterator_cur) { 20421c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = 20431c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_entry(handle->rule_iterator_cur->list.prev, 2044733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell struct rule_head, list); 2045733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell } 2046fe53707285c250c6bb1e434ea6f8271cf061c67bHarald Welte 2047733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell c->num_rules--; 2048733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell iptcc_delete_rule(i); 20492a5dbbb883fb0cc8a122b47a5d8e08ef3e6ff5bcMartin Josefsson 20501c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2051733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell free(r); 2052733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 2053e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2054e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2055e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell free(r); 2056e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2057e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 20587e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell} 2059aae69bed019826ddec93f761514652a93d871e49Harald Welte 2060e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2061e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Delete the rule in position `rulenum' in `chain'. */ 2062e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 206379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_DELETE_NUM_ENTRY(const IPT_CHAINLABEL chain, 206479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 20651c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2066e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2067aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2068aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2069e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 207079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_NUM_ENTRY; 2071aae69bed019826ddec93f761514652a93d871e49Harald Welte 20721c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2073e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2074e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2075e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2076e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2077a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (rulenum >= c->num_rules) { 2078631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson errno = E2BIG; 2079631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson return 0; 2080631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson } 2081631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson 2082631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson /* Take advantage of the double linked list if possible. */ 2083a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (rulenum + 1 <= c->num_rules/2) { 2084a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num(c, rulenum + 1); 2085a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else { 2086a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 2087e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2088e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2089aae69bed019826ddec93f761514652a93d871e49Harald Welte /* If we are about to delete the rule that is the current 2090aae69bed019826ddec93f761514652a93d871e49Harald Welte * iterator, move rule iterator back. next pointer will then 2091aae69bed019826ddec93f761514652a93d871e49Harald Welte * point to real next node */ 20921c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (r == handle->rule_iterator_cur) { 20931c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = 20941c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_entry(handle->rule_iterator_cur->list.prev, 2095aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head, list); 20960113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 2097e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2098aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules--; 2099aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(r); 2100aae69bed019826ddec93f761514652a93d871e49Harald Welte 21011c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 21022a5dbbb883fb0cc8a122b47a5d8e08ef3e6ff5bcMartin Josefsson 2103aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2104e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2105e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2106e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Flushes the entries in the given chain (ie. empties chain). */ 2107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 21081c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FLUSH_ENTRIES(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2109e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2110aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2111aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *tmp; 2112e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21130113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte iptc_fn = TC_FLUSH_ENTRIES; 21141c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2115e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2116e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2117e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2118e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2119aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry_safe(r, tmp, &c->rules, list) { 2120aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(r); 2121aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2122aae69bed019826ddec93f761514652a93d871e49Harald Welte 2123aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules = 0; 2124aae69bed019826ddec93f761514652a93d871e49Harald Welte 21251c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2126aae69bed019826ddec93f761514652a93d871e49Harald Welte 2127aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2128e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2129e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2130e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Zeroes the counters in a chain. */ 2131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 21321c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_ZERO_ENTRIES(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2133e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2134aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2135aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21367e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 2137664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_ZERO_ENTRIES; 21381c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2139e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2140e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2141e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2142e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2143e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay if (c->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2144e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay c->counter_map.maptype = COUNTER_MAP_ZEROED; 2145e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay 2146aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 2147aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2148aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_ZEROED; 2149e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2150aae69bed019826ddec93f761514652a93d871e49Harald Welte 21511c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2152e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2153e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2154e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2155e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21561cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteSTRUCT_COUNTERS * 21571cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_READ_COUNTER(const IPT_CHAINLABEL chain, 21581cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 21591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 21601cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2161aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2162aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21631cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21641cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_READ_COUNTER; 21651cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte CHECK(*handle); 21661cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21671c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 21681cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 21691cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return NULL; 21701cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 21711cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2172aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 21730113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 21740113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return NULL; 21750113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 21760113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2177aae69bed019826ddec93f761514652a93d871e49Harald Welte return &r->entry[0].counters; 21781cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 21791cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21801cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welteint 21811cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_ZERO_COUNTER(const IPT_CHAINLABEL chain, 21821cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 21831c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 21841cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2185aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2186aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21871cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21881cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_ZERO_COUNTER; 21891c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 21901cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21911c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 21921cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 21931cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 0; 21941cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 21951cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2196aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 21970113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 21980113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 21990113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 22000113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2201aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2202aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_ZEROED; 22031cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22041c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 22051cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22061cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 1; 22071cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22081cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22091cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welteint 22101cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_SET_COUNTER(const IPT_CHAINLABEL chain, 22111cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 22121cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_COUNTERS *counters, 22131c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 22141cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2215aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2216aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 22171cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_ENTRY *e; 22181cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22191cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_SET_COUNTER; 22201c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 22211cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22221c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 22231cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 22241cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 0; 22251cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 22260113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2227aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 22280113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 22290113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 22300113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 22310113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2232aae69bed019826ddec93f761514652a93d871e49Harald Welte e = r->entry; 2233aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 22340113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 22350113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte memcpy(&e->counters, counters, sizeof(STRUCT_COUNTERS)); 22361cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22371c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 22381cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22391cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 1; 22401cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22411cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2242e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Creates a new chain. */ 2243e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* To create a chain, create two rules: error node and unconditional 2244e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * return. */ 2245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 22461c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_CREATE_CHAIN(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2247e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2248aae69bed019826ddec93f761514652a93d871e49Harald Welte static struct chain_head *c; 22491f23d3c2544f4329b31804392abc4eff434ba308Patrick McHardy int capacity; 22501f23d3c2544f4329b31804392abc4eff434ba308Patrick McHardy int exceeded; 2251e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 225279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_CREATE_CHAIN; 2253e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2254e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* find_label doesn't cover built-in targets: DROP, ACCEPT, 2255e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher QUEUE, RETURN. */ 22561c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (iptcc_find_label(chain, handle) 225779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_DROP) == 0 225879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_ACCEPT) == 0 225967088e73ce7707229c56987868f112051defca5aRusty Russell || strcmp(chain, LABEL_QUEUE) == 0 226079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_RETURN) == 0) { 2261aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Chain `%s' already exists\n", chain); 2262e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EEXIST; 2263e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2264e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2265e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 226679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strlen(chain)+1 > sizeof(IPT_CHAINLABEL)) { 2267aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Chain name `%s' too long\n", chain); 2268e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2269e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2270e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2271e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2272aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_alloc_chain_head(chain, 0); 2273aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 2274aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Cannot allocate memory for chain `%s'\n", chain); 2275aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 2276aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 2277e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2278aae69bed019826ddec93f761514652a93d871e49Harald Welte } 22791c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->num_chains++; /* New user defined chain */ 2280e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2281aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Creating chain `%s'\n", chain); 22821c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptc_insert_chain(handle, c); /* Insert sorted */ 2283e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 228401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Inserting chains don't change the correctness of the chain 228501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index (except if its smaller than index[0], but that 228601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * handled by iptc_insert_chain). It only causes longer lists 228701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * in the buckets. Thus, only rebuild chain index when the 228801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * capacity is exceed with CHAIN_INDEX_INSERT_MAX chains. 228901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 22901c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt capacity = handle->chain_index_sz * CHAIN_INDEX_BUCKET_LEN; 22911c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt exceeded = handle->num_chains - capacity; 229201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (exceeded > CHAIN_INDEX_INSERT_MAX) { 229301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Capacity(%d) exceeded(%d) rebuild (chains:%d)\n", 22941c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt capacity, exceeded, handle->num_chains); 22951c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_rebuild(handle); 229601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 229701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 22981c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2299e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2300aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2301e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2302e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2303e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Get the number of references to this chain. */ 2304e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 230579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_GET_REFERENCES(unsigned int *ref, const IPT_CHAINLABEL chain, 23061c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2307e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2308aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2309e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2310664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_GET_REFERENCES; 23111c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2312e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2313e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2314e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2315e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2316aae69bed019826ddec93f761514652a93d871e49Harald Welte *ref = c->references; 2317aae69bed019826ddec93f761514652a93d871e49Harald Welte 2318e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2319e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2320e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2321e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Deletes a chain. */ 2322e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 23231c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_DELETE_CHAIN(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2324e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2325e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int references; 2326aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 23277e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 232879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_CHAIN; 2329e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23301c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2331aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot find chain `%s'\n", chain); 2332aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 2333aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 2334aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2335aae69bed019826ddec93f761514652a93d871e49Harald Welte 23361c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (TC_BUILTIN(chain, handle)) { 2337aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot remove builtin chain `%s'\n", chain); 2338e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2339e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2340e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2341e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2342aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!TC_GET_REFERENCES(&references, chain, handle)) { 2343aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot get references on chain `%s'\n", chain); 2344e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2345e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2346e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2347aae69bed019826ddec93f761514652a93d871e49Harald Welte if (references > 0) { 2348aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' still has references\n", chain); 2349aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = EMLINK; 2350e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2351e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2352e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2353aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c->num_rules) { 2354aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' is not empty\n", chain); 2355e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOTEMPTY; 2356e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2357e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2358e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2359aae69bed019826ddec93f761514652a93d871e49Harald Welte /* If we are about to delete the chain that is the current 236048bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer * iterator, move chain iterator forward. */ 23611c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (c == handle->chain_iterator_cur) 23621c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 2363aae69bed019826ddec93f761514652a93d871e49Harald Welte 23641c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->num_chains--; /* One user defined chain deleted */ 236548bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer 236601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer //list_del(&c->list); /* Done in iptcc_chain_index_delete_chain() */ 23671c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_delete_chain(c, handle); 236801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer free(c); 236901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 2370aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' deleted\n", chain); 23710113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 23721c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2373aae69bed019826ddec93f761514652a93d871e49Harald Welte 2374aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2375e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2376e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2377e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Renames a chain. */ 237879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellint TC_RENAME_CHAIN(const IPT_CHAINLABEL oldname, 237979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const IPT_CHAINLABEL newname, 23801c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2381e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2382aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 238379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_RENAME_CHAIN; 2384e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23851de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte /* find_label doesn't cover built-in targets: DROP, ACCEPT, 23861de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte QUEUE, RETURN. */ 23871c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (iptcc_find_label(newname, handle) 238879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_DROP) == 0 238979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_ACCEPT) == 0 23901de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte || strcmp(newname, LABEL_QUEUE) == 0 239179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_RETURN) == 0) { 2392e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EEXIST; 2393e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2394e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2395e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(oldname, handle)) 23971c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt || TC_BUILTIN(oldname, handle)) { 2398e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2399e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2400e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2401e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 240279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strlen(newname)+1 > sizeof(IPT_CHAINLABEL)) { 2403e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2404e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2405e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2406e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2407aae69bed019826ddec93f761514652a93d871e49Harald Welte strncpy(c->name, newname, sizeof(IPT_CHAINLABEL)); 2408aae69bed019826ddec93f761514652a93d871e49Harald Welte 24091c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 24100113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2411e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2412e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2413e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2414e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Sets the policy on a built-in chain. */ 2415e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 241679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_SET_POLICY(const IPT_CHAINLABEL chain, 241779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const IPT_CHAINLABEL policy, 24181cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_COUNTERS *counters, 24191c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2420e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2421aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2422e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 242379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_SET_POLICY; 2424aae69bed019826ddec93f761514652a93d871e49Harald Welte 24251c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2426aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot find chain `%s'\n", chain); 2427c8264991454b5e77279830736f80ea3153b6f814Marc Boucher errno = ENOENT; 2428e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2429aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2430e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2431aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 2432aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot set policy of userdefinedchain `%s'\n", chain); 2433aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 24349e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte return 0; 24359e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte } 24369e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte 243779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strcmp(policy, LABEL_ACCEPT) == 0) 2438aae69bed019826ddec93f761514652a93d871e49Harald Welte c->verdict = -NF_ACCEPT - 1; 243979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(policy, LABEL_DROP) == 0) 2440aae69bed019826ddec93f761514652a93d871e49Harald Welte c->verdict = -NF_DROP - 1; 2441e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else { 2442e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2443e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2444e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 24451cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 24461cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte if (counters) { 24471cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte /* set byte and packet counters */ 2448aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&c->counters, counters, sizeof(STRUCT_COUNTERS)); 2449aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.maptype = COUNTER_MAP_SET; 24501cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } else { 2451aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.maptype = COUNTER_MAP_NOMAP; 24521cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 24531cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 24541c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2455e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2456e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2457e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2458e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2459e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Without this, on gcc 2.7.2.3, we get: 246079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell libiptc.c: In function `TC_COMMIT': 2461e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher libiptc.c:833: fixed or forbidden register was spilled. 2462e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher This may be due to a compiler bug or to impossible asm 2463e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher statements or clauses. 2464e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher*/ 2465e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void 246679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellsubtract_counters(STRUCT_COUNTERS *answer, 246779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_COUNTERS *a, 246879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_COUNTERS *b) 2469e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2470e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher answer->pcnt = a->pcnt - b->pcnt; 2471e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher answer->bcnt = a->bcnt - b->bcnt; 2472e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2473e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2474aae69bed019826ddec93f761514652a93d871e49Harald Welte 2475dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardtstatic void counters_nomap(STRUCT_COUNTERS_INFO *newcounters, unsigned int idx) 2476aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2477dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt newcounters->counters[idx] = ((STRUCT_COUNTERS) { 0, 0}); 2478aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("NOMAP => zero\n"); 2479aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2480aae69bed019826ddec93f761514652a93d871e49Harald Welte 2481aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_normal_map(STRUCT_COUNTERS_INFO *newcounters, 2482dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt STRUCT_REPLACE *repl, unsigned int idx, 2483aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int mappos) 2484aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2485aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Original read: X. 2486aae69bed019826ddec93f761514652a93d871e49Harald Welte * Atomic read on replacement: X + Y. 2487aae69bed019826ddec93f761514652a93d871e49Harald Welte * Currently in kernel: Z. 2488aae69bed019826ddec93f761514652a93d871e49Harald Welte * Want in kernel: X + Y + Z. 2489aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in X + Y 2490aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in replacement read. 2491aae69bed019826ddec93f761514652a93d871e49Harald Welte */ 2492dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt newcounters->counters[idx] = repl->counters[mappos]; 2493aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("NORMAL_MAP => mappos %u \n", mappos); 2494aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2495aae69bed019826ddec93f761514652a93d871e49Harald Welte 2496aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_map_zeroed(STRUCT_COUNTERS_INFO *newcounters, 2497dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt STRUCT_REPLACE *repl, unsigned int idx, 2498dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int mappos, STRUCT_COUNTERS *counters) 2499aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2500aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Original read: X. 2501aae69bed019826ddec93f761514652a93d871e49Harald Welte * Atomic read on replacement: X + Y. 2502aae69bed019826ddec93f761514652a93d871e49Harald Welte * Currently in kernel: Z. 2503aae69bed019826ddec93f761514652a93d871e49Harald Welte * Want in kernel: Y + Z. 2504aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in Y. 2505aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in (replacement read - original read). 2506aae69bed019826ddec93f761514652a93d871e49Harald Welte */ 2507dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt subtract_counters(&newcounters->counters[idx], 2508aae69bed019826ddec93f761514652a93d871e49Harald Welte &repl->counters[mappos], 2509aae69bed019826ddec93f761514652a93d871e49Harald Welte counters); 2510aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("ZEROED => mappos %u\n", mappos); 2511aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2512aae69bed019826ddec93f761514652a93d871e49Harald Welte 2513aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_map_set(STRUCT_COUNTERS_INFO *newcounters, 2514dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int idx, STRUCT_COUNTERS *counters) 2515aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2516aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Want to set counter (iptables-restore) */ 2517aae69bed019826ddec93f761514652a93d871e49Harald Welte 2518dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt memcpy(&newcounters->counters[idx], counters, 2519aae69bed019826ddec93f761514652a93d871e49Harald Welte sizeof(STRUCT_COUNTERS)); 2520aae69bed019826ddec93f761514652a93d871e49Harald Welte 2521aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("SET\n"); 2522aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2523aae69bed019826ddec93f761514652a93d871e49Harald Welte 2524aae69bed019826ddec93f761514652a93d871e49Harald Welte 2525e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 25261c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_COMMIT(struct xtc_handle *handle) 2527e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2528e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Replace, then map back the counters. */ 252979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_REPLACE *repl; 253079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_COUNTERS_INFO *newcounters; 2531aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2532aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret; 2533841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson size_t counterlen; 2534aae69bed019826ddec93f761514652a93d871e49Harald Welte int new_number; 2535aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int new_size; 2536e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2537664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_COMMIT; 2538e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(*handle); 2539841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 2540e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Don't commit if nothing changed. */ 25411c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!handle->changed) 2542e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher goto finished; 2543e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 25441c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt new_number = iptcc_compile_table_prep(handle, &new_size); 2545aae69bed019826ddec93f761514652a93d871e49Harald Welte if (new_number < 0) { 2546aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 2547d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_zero; 2548aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2549aae69bed019826ddec93f761514652a93d871e49Harald Welte 2550aae69bed019826ddec93f761514652a93d871e49Harald Welte repl = malloc(sizeof(*repl) + new_size); 2551e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!repl) { 2552e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2553d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_zero; 2554e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2555ad3b4f9973ac15981b98b8fc4d364ef1ce524212Martin Josefsson memset(repl, 0, sizeof(*repl) + new_size); 2556aae69bed019826ddec93f761514652a93d871e49Harald Welte 2557e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell#if 0 2558e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell TC_DUMP_ENTRIES(*handle); 2559e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell#endif 2560e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell 2561aae69bed019826ddec93f761514652a93d871e49Harald Welte counterlen = sizeof(STRUCT_COUNTERS_INFO) 2562aae69bed019826ddec93f761514652a93d871e49Harald Welte + sizeof(STRUCT_COUNTERS) * new_number; 2563e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2564e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* These are the old counters we will get from kernel */ 256579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell repl->counters = malloc(sizeof(STRUCT_COUNTERS) 25661c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt * handle->info.num_entries); 2567e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!repl->counters) { 2568e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2569d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_repl; 2570e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2571e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* These are the counters we're going to put back, later. */ 2572e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher newcounters = malloc(counterlen); 2573e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!newcounters) { 2574e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2575d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_repl_counters; 2576e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2577aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(newcounters, 0, counterlen); 2578e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 25791c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt strcpy(repl->name, handle->info.name); 2580aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->num_entries = new_number; 2581aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->size = new_size; 2582aae69bed019826ddec93f761514652a93d871e49Harald Welte 25831c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt repl->num_counters = handle->info.num_entries; 25841c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt repl->valid_hooks = handle->info.valid_hooks; 2585aae69bed019826ddec93f761514652a93d871e49Harald Welte 2586aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("num_entries=%u, size=%u, num_counters=%u\n", 2587aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->num_entries, repl->size, repl->num_counters); 2588aae69bed019826ddec93f761514652a93d871e49Harald Welte 25891c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt ret = iptcc_compile_table(handle, repl); 2590aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) { 2591aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ret; 2592d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2593aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2594aae69bed019826ddec93f761514652a93d871e49Harald Welte 2595aae69bed019826ddec93f761514652a93d871e49Harald Welte 2596aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 2597aae69bed019826ddec93f761514652a93d871e49Harald Welte { 2598aae69bed019826ddec93f761514652a93d871e49Harald Welte int fd = open("/tmp/libiptc-so_set_replace.blob", 2599aae69bed019826ddec93f761514652a93d871e49Harald Welte O_CREAT|O_WRONLY); 2600aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 2601aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, repl, sizeof(*repl) + repl->size); 2602aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 2603aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2604aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2605aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 2606e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2607175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt ret = setsockopt(handle->sockfd, TC_IPPROTO, SO_SET_REPLACE, repl, 2608d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte sizeof(*repl) + repl->size); 2609e0865ad29d53b0d3d34b5cc8b5e023eb593172a8Patrick McHardy if (ret < 0) 2610d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2611e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2612e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Put counters back. */ 26131c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt strcpy(newcounters->name, handle->info.name); 2614aae69bed019826ddec93f761514652a93d871e49Harald Welte newcounters->num_counters = new_number; 2615aae69bed019826ddec93f761514652a93d871e49Harald Welte 26161c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_for_each_entry(c, &handle->chains, list) { 2617aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2618aae69bed019826ddec93f761514652a93d871e49Harald Welte 2619aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Builtin chains have their own counters */ 2620aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcc_is_builtin(c)) { 2621aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("counter for chain-index %u: ", c->foot_index); 2622aae69bed019826ddec93f761514652a93d871e49Harald Welte switch(c->counter_map.maptype) { 2623aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NOMAP: 2624aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_nomap(newcounters, c->foot_index); 2625aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2626aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NORMAL_MAP: 2627aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_normal_map(newcounters, repl, 2628aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index, 2629aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.mappos); 2630aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2631aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_ZEROED: 2632aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_zeroed(newcounters, repl, 2633aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index, 2634aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.mappos, 2635aae69bed019826ddec93f761514652a93d871e49Harald Welte &c->counters); 2636aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2637aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_SET: 2638aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_set(newcounters, c->foot_index, 2639aae69bed019826ddec93f761514652a93d871e49Harald Welte &c->counters); 2640aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2641aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2642aae69bed019826ddec93f761514652a93d871e49Harald Welte } 26431cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2644aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 2645aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("counter for index %u: ", r->index); 2646aae69bed019826ddec93f761514652a93d871e49Harald Welte switch (r->counter_map.maptype) { 2647aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NOMAP: 2648aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_nomap(newcounters, r->index); 2649aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2650aae69bed019826ddec93f761514652a93d871e49Harald Welte 2651aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NORMAL_MAP: 2652aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_normal_map(newcounters, repl, 2653aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index, 2654aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos); 2655aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2656aae69bed019826ddec93f761514652a93d871e49Harald Welte 2657aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_ZEROED: 2658aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_zeroed(newcounters, repl, 2659aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index, 2660aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos, 2661aae69bed019826ddec93f761514652a93d871e49Harald Welte &r->entry->counters); 2662aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2663aae69bed019826ddec93f761514652a93d871e49Harald Welte 2664aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_SET: 2665aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_set(newcounters, r->index, 2666aae69bed019826ddec93f761514652a93d871e49Harald Welte &r->entry->counters); 2667aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2668aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2669e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2670e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 267162527ce5f0ffaa5b18aa118f64c21af238ddc156Rusty Russell 2672aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 2673aae69bed019826ddec93f761514652a93d871e49Harald Welte { 2674aae69bed019826ddec93f761514652a93d871e49Harald Welte int fd = open("/tmp/libiptc-so_set_add_counters.blob", 2675aae69bed019826ddec93f761514652a93d871e49Harald Welte O_CREAT|O_WRONLY); 2676aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 2677aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, newcounters, counterlen); 2678aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 2679aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2680aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2681aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 2682aae69bed019826ddec93f761514652a93d871e49Harald Welte 2683175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt ret = setsockopt(handle->sockfd, TC_IPPROTO, SO_SET_ADD_COUNTERS, 2684d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte newcounters, counterlen); 2685e0865ad29d53b0d3d34b5cc8b5e023eb593172a8Patrick McHardy if (ret < 0) 2686d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2687e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2688e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(repl->counters); 2689e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(repl); 2690e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(newcounters); 2691e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2692d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Weltefinished: 2693e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2694d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte 2695d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_newcounters: 2696d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(newcounters); 2697d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_repl_counters: 2698d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(repl->counters); 2699d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_repl: 2700d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(repl); 2701d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_zero: 2702d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte return 0; 2703e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2704e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2705e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Translates errno numbers into more human-readable form than strerror. */ 2706e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 270779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_STRERROR(int err) 2708e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2709e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i; 2710e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct table_struct { 2711e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher void *fn; 2712e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int err; 2713e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const char *message; 2714e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } table [] = 27154ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { { TC_INIT, EPERM, "Permission denied (you must be root)" }, 271679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INIT, EINVAL, "Module is wrong version" }, 27174ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { TC_INIT, ENOENT, 27184ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte "Table does not exist (do you need to insmod?)" }, 271979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, ENOTEMPTY, "Chain is not empty" }, 272079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, EINVAL, "Can't delete built-in chain" }, 272179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, EMLINK, 2722e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Can't delete chain with references left" }, 272379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_CREATE_CHAIN, EEXIST, "Chain already exists" }, 272479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, E2BIG, "Index of insertion too big" }, 272579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_REPLACE_ENTRY, E2BIG, "Index of replacement too big" }, 272679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_NUM_ENTRY, E2BIG, "Index of deletion too big" }, 27271cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte { TC_READ_COUNTER, E2BIG, "Index of counter too big" }, 27281cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte { TC_ZERO_COUNTER, E2BIG, "Index of counter too big" }, 272979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, ELOOP, "Loop found in table" }, 273079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, EINVAL, "Target problem" }, 2731e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* ENOENT for DELETE probably means no matching rule */ 273279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_ENTRY, ENOENT, 2733c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad rule (does a matching rule exist in that chain?)" }, 273479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_SET_POLICY, ENOENT, 2735c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad built-in chain name" }, 273679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_SET_POLICY, EINVAL, 2737c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad policy name" }, 27384ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte 27394ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, 0, "Incompatible with this kernel" }, 27404ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOPROTOOPT, "iptables who? (do you need to insmod?)" }, 27414ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOSYS, "Will be implemented real soon. I promise ;)" }, 27424ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOMEM, "Memory allocation problem" }, 27434ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOENT, "No chain/target/match by that name" }, 2744e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher }; 2745e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2746e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < sizeof(table)/sizeof(struct table_struct); i++) { 2747e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if ((!table[i].fn || table[i].fn == iptc_fn) 2748e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher && table[i].err == err) 2749e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return table[i].message; 2750e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2751e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2752e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return strerror(err); 2753e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2754