libiptc.c revision 1c9015b2cb483678f153121255e10ec0bbfde3e6
10f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson/* Library which manipulates firewall rules. Version $Revision$ */ 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Architecture of firewall rules is as follows: 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 5e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Chains go INPUT, FORWARD, OUTPUT then user chains. 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Each user chain starts with an ERROR node. 7e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Every chain ends with an unconditional jump: a RETURN for user chains, 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * and a POLICY for built-ins. 9e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher */ 10e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 113ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte/* (C) 1999 Paul ``Rusty'' Russell - Placed under the GNU GPL (See 123ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * COPYING for details). 13aae69bed019826ddec93f761514652a93d871e49Harald Welte * (C) 2000-2004 by the Netfilter Core Team <coreteam@netfilter.org> 143ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * 15fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * 2003-Jun-20: Harald Welte <laforge@netfilter.org>: 163ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * - Reimplementation of chain cache to use offsets instead of entries 17fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * 2003-Jun-23: Harald Welte <laforge@netfilter.org>: 180113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte * - performance optimization, sponsored by Astaro AG (http://www.astaro.com/) 19fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * don't rebuild the chain cache after every operation, instead fix it 20fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * up after a ruleset change. 21aae69bed019826ddec93f761514652a93d871e49Harald Welte * 2004-Aug-18: Harald Welte <laforge@netfilter.org>: 22aae69bed019826ddec93f761514652a93d871e49Harald Welte * - futher performance work: total reimplementation of libiptc. 23aae69bed019826ddec93f761514652a93d871e49Harald Welte * - libiptc now has a real internal (linked-list) represntation of the 24aae69bed019826ddec93f761514652a93d871e49Harald Welte * ruleset and a parser/compiler from/to this internal representation 25aae69bed019826ddec93f761514652a93d871e49Harald Welte * - again sponsored by Astaro AG (http://www.astaro.com/) 263ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte */ 2715920d160760535e51a57b3834eba45257cfa6d8Harald Welte#include <sys/types.h> 2815920d160760535e51a57b3834eba45257cfa6d8Harald Welte#include <sys/socket.h> 298b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt#include <xtables.h> 307cd002826d0f329620cb738bc4dc4760ef5e084aStephane Ouellette 31aae69bed019826ddec93f761514652a93d871e49Harald Welte#include "linux_list.h" 32aae69bed019826ddec93f761514652a93d871e49Harald Welte 33aae69bed019826ddec93f761514652a93d871e49Harald Welte//#define IPTC_DEBUG2 1 34aae69bed019826ddec93f761514652a93d871e49Harald Welte 35aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 36aae69bed019826ddec93f761514652a93d871e49Harald Welte#include <fcntl.h> 37aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP(x, args...) fprintf(stderr, "%s: " x, __FUNCTION__, ## args) 38aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP_C(x, args...) fprintf(stderr, x, ## args) 39aae69bed019826ddec93f761514652a93d871e49Harald Welte#else 40aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP(x, args...) 41aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP_C(x, args...) 42aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 43aae69bed019826ddec93f761514652a93d871e49Harald Welte 4401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 4501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define debug(x, args...) fprintf(stderr, x, ## args) 4601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#else 4701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define debug(x, args...) 4801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 4901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int sockfd = -1; 51664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Patesstatic int sockfd_use = 0; 52e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void *iptc_fn = NULL; 53e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 540b63936140032deac44072951451bdf47b54296aPatrick McHardystatic const char *hooknames[] = { 550b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_PRE_ROUTING] = "PREROUTING", 560b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_LOCAL_IN] = "INPUT", 570b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_FORWARD] = "FORWARD", 580b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_LOCAL_OUT] = "OUTPUT", 590b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_POST_ROUTING] = "POSTROUTING", 6010758b743d6aa076ebe2c3e8f855e73826841e71Rusty Russell#ifdef HOOK_DROPPING 610b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_DROPPING] = "DROPPING" 6210758b743d6aa076ebe2c3e8f855e73826841e71Rusty Russell#endif 63e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 64e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 65aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Convenience structures */ 66aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct ipt_error_target 67aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 68aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY_TARGET t; 69aae69bed019826ddec93f761514652a93d871e49Harald Welte char error[TABLE_MAXNAMELEN]; 70aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 71aae69bed019826ddec93f761514652a93d871e49Harald Welte 72aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct chain_head; 73aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct rule_head; 74aae69bed019826ddec93f761514652a93d871e49Harald Welte 75e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct counter_map 76e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 77e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher enum { 78e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher COUNTER_MAP_NOMAP, 79e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher COUNTER_MAP_NORMAL_MAP, 801cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte COUNTER_MAP_ZEROED, 811cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte COUNTER_MAP_SET 82e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } maptype; 83e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int mappos; 84e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 85e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 86aae69bed019826ddec93f761514652a93d871e49Harald Welteenum iptcc_rule_type { 87aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_STANDARD, /* standard target (ACCEPT, ...) */ 88aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_MODULE, /* extension module (SNAT, ...) */ 89aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_FALLTHROUGH, /* fallthrough rule */ 90aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_JUMP, /* jump to other chain */ 91aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 92aae69bed019826ddec93f761514652a93d871e49Harald Welte 93aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct rule_head 94e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 95aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head list; 96aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *chain; 97aae69bed019826ddec93f761514652a93d871e49Harald Welte struct counter_map counter_map; 98aae69bed019826ddec93f761514652a93d871e49Harald Welte 99aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int index; /* index (needed for counter_map) */ 100aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset; /* offset in rule blob */ 101aae69bed019826ddec93f761514652a93d871e49Harald Welte 102aae69bed019826ddec93f761514652a93d871e49Harald Welte enum iptcc_rule_type type; 103aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *jump; /* jump target, if IPTCC_R_JUMP */ 104aae69bed019826ddec93f761514652a93d871e49Harald Welte 105aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int size; /* size of entry data */ 106aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY entry[0]; 107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 108e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 109aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct chain_head 11030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 111aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head list; 11279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell char name[TABLE_MAXNAMELEN]; 113aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int hooknum; /* hook number+1 if builtin */ 114aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int references; /* how many jumps reference us */ 115aae69bed019826ddec93f761514652a93d871e49Harald Welte int verdict; /* verdict if builtin */ 116aae69bed019826ddec93f761514652a93d871e49Harald Welte 117aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_COUNTERS counters; /* per-chain counters */ 118aae69bed019826ddec93f761514652a93d871e49Harald Welte struct counter_map counter_map; 119aae69bed019826ddec93f761514652a93d871e49Harald Welte 120aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num_rules; /* number of rules in list */ 121aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head rules; /* list of rules */ 122aae69bed019826ddec93f761514652a93d871e49Harald Welte 123aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int index; /* index (needed for jump resolval) */ 124aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int head_offset; /* offset in rule blob */ 125aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int foot_index; /* index (needed for counter_map) */ 126aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int foot_offset; /* offset in rule blob */ 12730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell}; 12830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 12979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellSTRUCT_TC_HANDLE 130e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 131aae69bed019826ddec93f761514652a93d871e49Harald Welte int changed; /* Have changes been made? */ 132aae69bed019826ddec93f761514652a93d871e49Harald Welte 133aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head chains; 134aae69bed019826ddec93f761514652a93d871e49Harald Welte 135aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *chain_iterator_cur; 136aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *rule_iterator_cur; 137aae69bed019826ddec93f761514652a93d871e49Harald Welte 13848bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer unsigned int num_chains; /* number of user defined chains */ 13948bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer 14001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head **chain_index; /* array for fast chain list access*/ 14101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int chain_index_sz;/* size of chain index array */ 14201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 1434bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer int sorted_offsets; /* if chains are received sorted from kernel, 1444bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * then the offsets are also sorted. Says if its 1454bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * possible to bsearch offsets using chain_index. 1464bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 1474bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 14879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_GETINFO info; 149aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_GET_ENTRIES *entries; 150aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 151e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerenum bsearch_type { 1534bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_NAME, /* Binary search after chain name */ 1544bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_OFFSET, /* Binary search based on offset */ 1554bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer}; 1564bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 157aae69bed019826ddec93f761514652a93d871e49Harald Welte/* allocate a new chain head for the cache */ 158aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head *iptcc_alloc_chain_head(const char *name, int hooknum) 159aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 160aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = malloc(sizeof(*c)); 161aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) 162aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 163aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(c, 0, sizeof(*c)); 164aae69bed019826ddec93f761514652a93d871e49Harald Welte 165aae69bed019826ddec93f761514652a93d871e49Harald Welte strncpy(c->name, name, TABLE_MAXNAMELEN); 166aae69bed019826ddec93f761514652a93d871e49Harald Welte c->hooknum = hooknum; 167aae69bed019826ddec93f761514652a93d871e49Harald Welte INIT_LIST_HEAD(&c->rules); 168e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 169aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 170aae69bed019826ddec93f761514652a93d871e49Harald Welte} 17130fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 172aae69bed019826ddec93f761514652a93d871e49Harald Welte/* allocate and initialize a new rule for the cache */ 173aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct rule_head *iptcc_alloc_rule(struct chain_head *c, unsigned int size) 174aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 175aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r = malloc(sizeof(*r)+size); 176aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!r) 177aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 178aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(r, 0, sizeof(*r)); 17930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 180aae69bed019826ddec93f761514652a93d871e49Harald Welte r->chain = c; 181aae69bed019826ddec93f761514652a93d871e49Harald Welte r->size = size; 182175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell 183aae69bed019826ddec93f761514652a93d871e49Harald Welte return r; 184aae69bed019826ddec93f761514652a93d871e49Harald Welte} 185e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 186aae69bed019826ddec93f761514652a93d871e49Harald Welte/* notify us that the ruleset has been modified by the user */ 187910939897ea0cb9be2729a98c60a92e807aad5c3Jesper Dangaard Brouerstatic inline void 188fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtset_changed(struct xtc_handle *h) 189175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell{ 190175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell h->changed = 1; 191175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell} 192175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell 193380ba5f3074a16fbaa8869d9594962d58b5f8608Harald Welte#ifdef IPTC_DEBUG 194fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void do_check(struct xtc_handle *h, unsigned int line); 195849779c4adf8dd65c83fffb65e6b7898df2a55c6Rusty Russell#define CHECK(h) do { if (!getenv("IPTC_NO_CHECK")) do_check((h), __LINE__); } while(0) 19630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#else 19730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#define CHECK(h) 19830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#endif 199e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 200aae69bed019826ddec93f761514652a93d871e49Harald Welte 201aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 202aae69bed019826ddec93f761514652a93d871e49Harald Welte * iptc blob utility functions (iptcb_*) 203aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 204aae69bed019826ddec93f761514652a93d871e49Harald Welte 205e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 206aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcb_get_number(const STRUCT_ENTRY *i, 20779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *seek, 208e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int *pos) 209e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (i == seek) 211e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 212e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher (*pos)++; 213e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 214e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 215e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 216aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline int 217aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcb_get_entry_n(STRUCT_ENTRY *i, 218aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int number, 219aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int *pos, 220aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY **pe) 221aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 222aae69bed019826ddec93f761514652a93d871e49Harald Welte if (*pos == number) { 223aae69bed019826ddec93f761514652a93d871e49Harald Welte *pe = i; 224aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 225aae69bed019826ddec93f761514652a93d871e49Harald Welte } 226aae69bed019826ddec93f761514652a93d871e49Harald Welte (*pos)++; 227aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 228aae69bed019826ddec93f761514652a93d871e49Harald Welte} 229aae69bed019826ddec93f761514652a93d871e49Harald Welte 230aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline STRUCT_ENTRY * 231fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_get_entry(struct xtc_handle *h, unsigned int offset) 232aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 233aae69bed019826ddec93f761514652a93d871e49Harald Welte return (STRUCT_ENTRY *)((char *)h->entries->entrytable + offset); 234aae69bed019826ddec93f761514652a93d871e49Harald Welte} 235aae69bed019826ddec93f761514652a93d871e49Harald Welte 236e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic unsigned int 237fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_entry2index(struct xtc_handle *const h, const STRUCT_ENTRY *seek) 238e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 239e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int pos = 0; 240e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 241aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ENTRY_ITERATE(h->entries->entrytable, h->entries->size, 242aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcb_get_number, seek, &pos) == 0) { 243a28d495285ad7dd9f286d63958cf20d74eec6bcbMartin Josefsson fprintf(stderr, "ERROR: offset %u not an entry!\n", 244aae69bed019826ddec93f761514652a93d871e49Harald Welte (unsigned int)((char *)seek - (char *)h->entries->entrytable)); 245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher abort(); 246e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 247e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return pos; 248e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 249e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 250aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline STRUCT_ENTRY * 251fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_offset2entry(struct xtc_handle *h, unsigned int offset) 252e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 253aae69bed019826ddec93f761514652a93d871e49Harald Welte return (STRUCT_ENTRY *) ((void *)h->entries->entrytable+offset); 254aae69bed019826ddec93f761514652a93d871e49Harald Welte} 255aae69bed019826ddec93f761514652a93d871e49Harald Welte 256aae69bed019826ddec93f761514652a93d871e49Harald Welte 257aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned long 258fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_entry2offset(struct xtc_handle *const h, const STRUCT_ENTRY *e) 259aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 260aae69bed019826ddec93f761514652a93d871e49Harald Welte return (void *)e - (void *)h->entries->entrytable; 261aae69bed019826ddec93f761514652a93d871e49Harald Welte} 262aae69bed019826ddec93f761514652a93d871e49Harald Welte 263aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned int 264fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_offset2index(struct xtc_handle *const h, unsigned int offset) 265aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 266aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcb_entry2index(h, iptcb_offset2entry(h, offset)); 267aae69bed019826ddec93f761514652a93d871e49Harald Welte} 268aae69bed019826ddec93f761514652a93d871e49Harald Welte 269aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns 0 if not hook entry, else hooknumber + 1 */ 270aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned int 271fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_ent_is_hook_entry(STRUCT_ENTRY *e, struct xtc_handle *h) 272aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 273aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int i; 274aae69bed019826ddec93f761514652a93d871e49Harald Welte 275aae69bed019826ddec93f761514652a93d871e49Harald Welte for (i = 0; i < NUMHOOKS; i++) { 276aae69bed019826ddec93f761514652a93d871e49Harald Welte if ((h->info.valid_hooks & (1 << i)) 277aae69bed019826ddec93f761514652a93d871e49Harald Welte && iptcb_get_entry(h, h->info.hook_entry[i]) == e) 278aae69bed019826ddec93f761514652a93d871e49Harald Welte return i+1; 279aae69bed019826ddec93f761514652a93d871e49Harald Welte } 280aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 281aae69bed019826ddec93f761514652a93d871e49Harald Welte} 282aae69bed019826ddec93f761514652a93d871e49Harald Welte 283aae69bed019826ddec93f761514652a93d871e49Harald Welte 284aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 28501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * Chain index (cache utility) functions 28601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer ********************************************************************** 28701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * The chain index is an array with pointers into the chain list, with 28801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * CHAIN_INDEX_BUCKET_LEN spacing. This facilitates the ability to 28901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * speedup chain list searching, by find a more optimal starting 29001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * points when searching the linked list. 29101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 29201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * The starting point can be found fast by using a binary search of 29301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain index. Thus, reducing the previous search complexity of 29401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * O(n) to O(log(n/k) + k) where k is CHAIN_INDEX_BUCKET_LEN. 29501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 29601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * A nice property of the chain index, is that the "bucket" list 29701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * length is max CHAIN_INDEX_BUCKET_LEN (when just build, inserts will 29801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * change this). Oppose to hashing, where the "bucket" list length can 29901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * vary a lot. 30001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 30101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifndef CHAIN_INDEX_BUCKET_LEN 30201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define CHAIN_INDEX_BUCKET_LEN 40 30301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 30401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 30501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Another nice property of the chain index is that inserting/creating 30601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * chains in chain list don't change the correctness of the chain 30701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index, it only causes longer lists in the buckets. 30801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 30901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * To mitigate the performance penalty of longer bucket lists and the 31001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * penalty of rebuilding, the chain index is rebuild only when 31101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * CHAIN_INDEX_INSERT_MAX chains has been added. 31201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 31301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifndef CHAIN_INDEX_INSERT_MAX 31401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define CHAIN_INDEX_INSERT_MAX 355 31501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 31601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 31701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic inline unsigned int iptcc_is_builtin(struct chain_head *c); 31801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 31901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Use binary search in the chain index array, to find a chain_head 32001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * pointer closest to the place of the searched name element. 32101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 32201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * Notes that, binary search (obviously) requires that the chain list 32301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is sorted by name. 3244bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * 3254bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * The not so obvious: The chain index array, is actually both sorted 3264bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * by name and offset, at the same time!. This is only true because, 3274bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * chain are stored sorted in the kernel (as we pushed it in sorted). 3284bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * 32901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 33001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic struct list_head * 3314bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer__iptcc_bsearch_chain_index(const char *name, unsigned int offset, 332fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt unsigned int *idx, struct xtc_handle *handle, 3334bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer enum bsearch_type type) 33401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 33501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int pos, end; 33601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res; 33701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 33801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_pos; 33901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos=&handle->chains; 34001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 34101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Check for empty array, e.g. no user defined chains */ 34201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index_sz == 0) { 34301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("WARNING: handle->chain_index_sz == 0\n"); 34401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 34501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 34601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 34701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Init */ 34801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer end = handle->chain_index_sz; 34901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = end / 2; 35001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 3514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("bsearch Find chain:%s (pos:%d end:%d) (offset:%d)\n", 3524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer name, pos, end, offset); 35301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 35401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Loop */ 35501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer loop: 35601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!handle->chain_index[pos]) { 35701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer fprintf(stderr, "ERROR: NULL pointer chain_index[%d]\n", pos); 35801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return &handle->chains; /* Be safe, return orig start pos */ 35901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 36001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 3614bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("bsearch Index[%d] name:%s ", 3624bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos, handle->chain_index[pos]->name); 3634bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 3644bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Support for different compare functions */ 3654bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer switch (type) { 3664bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_NAME: 3674bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = strcmp(name, handle->chain_index[pos]->name); 3684bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3694bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_OFFSET: 3704bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("head_offset:[%d] foot_offset:[%d] ", 3714bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer handle->chain_index[pos]->head_offset, 3724bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer handle->chain_index[pos]->foot_offset); 3734bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = offset - handle->chain_index[pos]->head_offset; 3744bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3754bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer default: 3764bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer fprintf(stderr, "ERROR: %d not a valid bsearch type\n", 3774bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer type); 3784bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer abort(); 3794bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3804bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 3814bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("res:%d ", res); 3824bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 3834bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 38401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[pos]->list; 385dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt *idx = pos; 38601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 38701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res == 0) { /* Found element, by direct hit */ 38801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Direct hit pos:%d end:%d\n", pos, end); 38901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 39001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else if (res < 0) { /* Too far, jump back */ 39101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer end = pos; 39201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = pos / 2; 39301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 39401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: First element of array */ 39501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (end == 0) { 39601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Reached first array elem (end%d)\n",end); 39701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 39801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 39901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("jump back to pos:%d (end:%d)\n", pos, end); 40001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer goto loop; 40101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else if (res > 0 ){ /* Not far enough, jump forward */ 40201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 40301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: Last element of array */ 40401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (pos == handle->chain_index_sz-1) { 40501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Last array elem (end:%d)\n", end); 40601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 40701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 40801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 40901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: Next index less, thus elem in this list section */ 4104bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer switch (type) { 4114bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_NAME: 4124bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = strcmp(name, handle->chain_index[pos+1]->name); 4134bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 4144bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_OFFSET: 4154bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = offset - handle->chain_index[pos+1]->head_offset; 4164bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 4174bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 4184bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 41901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res < 0) { 42001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] closest list (end:%d)\n", end); 42101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 42201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 42301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 42401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = (pos+end)/2; 42501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("jump forward to pos:%d (end:%d)\n", pos, end); 42601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer goto loop; 42701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 42801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 42901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 43001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 43101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 4324bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer/* Wrapper for string chain name based bsearch */ 4334bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerstatic struct list_head * 4344bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Broueriptcc_bsearch_chain_index(const char *name, unsigned int *idx, 435fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *handle) 4364bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer{ 4374bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer return __iptcc_bsearch_chain_index(name, 0, idx, handle, BSEARCH_NAME); 4384bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer} 4394bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4404bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4414bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer/* Wrapper for offset chain based bsearch */ 4424bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerstatic struct list_head * 4434bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Broueriptcc_bsearch_chain_offset(unsigned int offset, unsigned int *idx, 444fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *handle) 4454bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer{ 4464bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer struct list_head *pos; 4474bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4484bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* If chains were not received sorted from kernel, then the 4494bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * offset bsearch is not possible. 4504bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 4514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer if (!handle->sorted_offsets) 4524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos = handle->chains.next; 4534bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer else 4544bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos = __iptcc_bsearch_chain_index(NULL, offset, idx, handle, 4554bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_OFFSET); 4564bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer return pos; 4574bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer} 4584bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4594bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 46001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 46101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Trivial linear search of chain index. Function used for verifying 46201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer the output of bsearch function */ 46301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic struct list_head * 464fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_linearly_search_chain_index(const char *name, struct xtc_handle *handle) 46501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 46601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=0; 46701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res=0; 46801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 46901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_pos; 47001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chains; 47101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index_sz) 47301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[0]->list; 47401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Linearly walk of chain index array */ 47601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer for (i=0; i < handle->chain_index_sz; i++) { 47801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index[i]) { 47901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer res = strcmp(handle->chain_index[i]->name, name); 48001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res > 0) 48101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; // One step too far 48201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[i]->list; 48301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res == 0) 48401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; // Direct hit 48501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 48601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 48701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 48801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 48901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 49001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 49101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 492fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_alloc(struct xtc_handle *h) 49301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 49401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int list_length = CHAIN_INDEX_BUCKET_LEN; 49501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int array_elems; 49601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int array_mem; 49701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 49801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Allocate memory for the chain index array */ 49901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_elems = (h->num_chains / list_length) + 50001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer (h->num_chains % list_length ? 1 : 0); 50101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_mem = sizeof(h->chain_index) * array_elems; 50201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Alloc Chain index, elems:%d mem:%d bytes\n", 50401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_elems, array_mem); 50501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index = malloc(array_mem); 50701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!h->chain_index) { 50801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = 0; 50901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 51001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 51101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer memset(h->chain_index, 0, array_mem); 51201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = array_elems; 51301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 51401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 51501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 51601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 517fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_index_free(struct xtc_handle *h) 51801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 51901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = 0; 52001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer free(h->chain_index); 52101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 52201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 525fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_index_dump(struct xtc_handle *h) 52601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 52701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i = 0; 52801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Dump: contents of chain index array */ 53001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer for (i=0; i < h->chain_index_sz; i++) { 53101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (h->chain_index[i]) { 53201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer fprintf(stderr, "Chain index[%d].name: %s\n", 53301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer i, h->chain_index[i]->name); 53401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 53501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 53601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 53701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 53801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 53901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Build the chain index */ 540fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_build(struct xtc_handle *h) 54101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 54201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int list_length = CHAIN_INDEX_BUCKET_LEN; 54301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int chains = 0; 54401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int cindex = 0; 54501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c; 54601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 54701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Build up the chain index array here */ 54801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Building chain index\n"); 54901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Number of user defined chains:%d bucket_sz:%d array_sz:%d\n", 55101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->num_chains, list_length, h->chain_index_sz); 55201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (h->chain_index_sz == 0) 55401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 55501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each_entry(c, &h->chains, list) { 55701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Issue: The index array needs to start after the 55901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * builtin chains, as they are not sorted */ 56001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!iptcc_is_builtin(c)) { 56101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer cindex=chains / list_length; 56201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 56301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Safe guard, break out on array limit, this 56401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is useful if chains are added and array is 56501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * rebuild, without realloc of memory. */ 56601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (cindex >= h->chain_index_sz) 56701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 56801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 56901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((chains % list_length)== 0) { 57001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("\nIndex[%d] Chains:", cindex); 57101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index[cindex] = c; 57201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer chains++; 57401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("%s, ", c->name); 57601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("\n"); 57801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 57901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 58001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 58101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 582fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_rebuild(struct xtc_handle *h) 58301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 58401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("REBUILD chain index array\n"); 58501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_free(h); 58601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((iptcc_chain_index_alloc(h)) < 0) 58701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 58801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_build(h); 58901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 59001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 59101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 59201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Delete chain (pointer) from index array. Removing an element from 59301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain list only affects the chain index array, if the chain 59401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index points-to/uses that list pointer. 59501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 59601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * There are different strategies, the simple and safe is to rebuild 59701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain index every time. The more advanced is to update the 59801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * array index to point to the next element, but that requires some 59901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * house keeping and boundry checks. The advanced is implemented, as 60001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the simple approach behaves badly when all chains are deleted 60101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * because list_for_each processing will always hit the first chain 60201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index, thus causing a rebuild for every chain. 60301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 604fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_delete_chain(struct chain_head *c, struct xtc_handle *h) 60501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 60601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *index_ptr, *index_ptr2, *next; 60701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c2; 608dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int idx, idx2; 60901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 610dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt index_ptr = iptcc_bsearch_chain_index(c->name, &idx, h); 61101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Del chain[%s] c->list:%p index_ptr:%p\n", 61301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer c->name, &c->list, index_ptr); 61401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Save the next pointer */ 61601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer next = c->list.next; 61701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_del(&c->list); 61801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (index_ptr == &c->list) { /* Chain used as index ptr */ 62001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 62101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* See if its possible to avoid a rebuild, by shifting 62201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * to next pointer. Its possible if the next pointer 62301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is located in the same index bucket. 62401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 62501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer c2 = list_entry(next, struct chain_head, list); 626dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt index_ptr2 = iptcc_bsearch_chain_index(c2->name, &idx2, h); 627dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt if (idx != idx2) { 62801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Rebuild needed */ 62901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return iptcc_chain_index_rebuild(h); 63001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else { 63101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Avoiding rebuild */ 63201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Update cindex[%d] with next ptr name:[%s]\n", 633dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt idx, c2->name); 634dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt h->chain_index[idx]=c2; 63501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 63601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 63701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 63801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 63901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 64001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 64101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 64201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/********************************************************************** 643aae69bed019826ddec93f761514652a93d871e49Harald Welte * iptc cache utility functions (iptcc_*) 644aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 645aae69bed019826ddec93f761514652a93d871e49Harald Welte 646aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Is the given chain builtin (1) or user-defined (0) */ 647910939897ea0cb9be2729a98c60a92e807aad5c3Jesper Dangaard Brouerstatic inline unsigned int iptcc_is_builtin(struct chain_head *c) 648aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 649aae69bed019826ddec93f761514652a93d871e49Harald Welte return (c->hooknum ? 1 : 0); 650aae69bed019826ddec93f761514652a93d871e49Harald Welte} 651aae69bed019826ddec93f761514652a93d871e49Harald Welte 652aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Get a specific rule within a chain */ 653aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct rule_head *iptcc_get_rule_num(struct chain_head *c, 654aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int rulenum) 655aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 656aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 657aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num = 0; 658aae69bed019826ddec93f761514652a93d871e49Harald Welte 659aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 660aae69bed019826ddec93f761514652a93d871e49Harald Welte num++; 661aae69bed019826ddec93f761514652a93d871e49Harald Welte if (num == rulenum) 662aae69bed019826ddec93f761514652a93d871e49Harald Welte return r; 663aae69bed019826ddec93f761514652a93d871e49Harald Welte } 664aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 665aae69bed019826ddec93f761514652a93d871e49Harald Welte} 666aae69bed019826ddec93f761514652a93d871e49Harald Welte 667a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson/* Get a specific rule within a chain backwards */ 668a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefssonstatic struct rule_head *iptcc_get_rule_num_reverse(struct chain_head *c, 669a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson unsigned int rulenum) 670a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson{ 671a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson struct rule_head *r; 672a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson unsigned int num = 0; 673a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson 674a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson list_for_each_entry_reverse(r, &c->rules, list) { 675a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson num++; 676a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (num == rulenum) 677a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson return r; 678a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } 679a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson return NULL; 680a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson} 681a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson 682aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns chain head if found, otherwise NULL. */ 683aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head * 684fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_find_chain_by_offset(struct xtc_handle *handle, unsigned int offset) 685aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 686aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head *pos; 6874bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer struct list_head *list_start_pos; 6884bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer unsigned int i; 689aae69bed019826ddec93f761514652a93d871e49Harald Welte 690aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&handle->chains)) 691aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 692aae69bed019826ddec93f761514652a93d871e49Harald Welte 6934bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Find a smart place to start the search */ 6944bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_offset(offset, &i, handle); 6954bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 6964bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Note that iptcc_bsearch_chain_offset() skips builtin 6974bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * chains, but this function is only used for finding jump 6984bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * targets, and a buildin chain is not a valid jump target */ 6994bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 7004bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("Offset:[%u] starting search at index:[%u]\n", offset, i); 7014bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer// list_for_each(pos, &handle->chains) { 7024bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer list_for_each(pos, list_start_pos->prev) { 703aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = list_entry(pos, struct chain_head, list); 7044bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("."); 7054bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer if (offset >= c->head_offset && offset <= c->foot_offset) { 7064bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("Offset search found chain:[%s]\n", c->name); 707aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 7084bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 709aae69bed019826ddec93f761514652a93d871e49Harald Welte } 710aae69bed019826ddec93f761514652a93d871e49Harald Welte 711aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 712aae69bed019826ddec93f761514652a93d871e49Harald Welte} 71301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 714aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns chain head if found, otherwise NULL. */ 715aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head * 716fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_find_label(const char *name, struct xtc_handle *handle) 717aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 718aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head *pos; 71901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_start_pos; 72001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=0; 72101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res; 722aae69bed019826ddec93f761514652a93d871e49Harald Welte 723aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&handle->chains)) 724aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 725aae69bed019826ddec93f761514652a93d871e49Harald Welte 72601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* First look at builtin chains */ 727aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each(pos, &handle->chains) { 728aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = list_entry(pos, struct chain_head, list); 72901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!iptcc_is_builtin(c)) 73001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 731aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!strcmp(c->name, name)) 732aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 733aae69bed019826ddec93f761514652a93d871e49Harald Welte } 734aae69bed019826ddec93f761514652a93d871e49Harald Welte 73501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Find a smart place to start the search via chain index */ 73601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer //list_start_pos = iptcc_linearly_search_chain_index(name, handle); 73701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_index(name, &i, handle); 73801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 73901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handel if bsearch bails out early */ 74001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos == &handle->chains) { 74101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = pos; 74201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 74301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 74401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer else { 74501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Verify result of bsearch against linearly index search */ 74601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *test_pos; 74701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *test_c, *tmp_c; 74801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer test_pos = iptcc_linearly_search_chain_index(name, handle); 74901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos != test_pos) { 75001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("BUG in chain_index search\n"); 75101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer test_c=list_entry(test_pos, struct chain_head,list); 75201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer tmp_c =list_entry(list_start_pos,struct chain_head,list); 75301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Verify search found:\n"); 75401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Chain:%s\n", test_c->name); 75501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("BSearch found:\n"); 75601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Chain:%s\n", tmp_c->name); 75701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer exit(42); 75801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 75901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 76001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 76101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 76201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Initial/special case, no user defined chains */ 76301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->num_chains == 0) 76401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 76501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 76601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Start searching through the chain list */ 76701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each(pos, list_start_pos->prev) { 76801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c = list_entry(pos, struct chain_head, list); 76901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer res = strcmp(c->name, name); 77001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("List search name:%s == %s res:%d\n", name, c->name, res); 77101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res==0) 77201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return c; 77301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 77401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* We can stop earlier as we know list is sorted */ 77501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res>0 && !iptcc_is_builtin(c)) { /* Walked too far*/ 77601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Not in list, walked too far, sorted list\n"); 77701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 77801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 77901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 78001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Stop on wrap around, if list head is reached */ 78101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (pos == &handle->chains) { 78201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Stop, list head reached\n"); 78301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 78401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 78701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("List search NOT found name:%s\n", name); 788aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 789aae69bed019826ddec93f761514652a93d871e49Harald Welte} 790aae69bed019826ddec93f761514652a93d871e49Harald Welte 791aae69bed019826ddec93f761514652a93d871e49Harald Welte/* called when rule is to be removed from cache */ 792aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void iptcc_delete_rule(struct rule_head *r) 793aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 794aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("deleting rule %p (offset %u)\n", r, r->offset); 795aae69bed019826ddec93f761514652a93d871e49Harald Welte /* clean up reference count of called chain */ 796aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type == IPTCC_R_JUMP 797aae69bed019826ddec93f761514652a93d871e49Harald Welte && r->jump) 798aae69bed019826ddec93f761514652a93d871e49Harald Welte r->jump->references--; 799aae69bed019826ddec93f761514652a93d871e49Harald Welte 800aae69bed019826ddec93f761514652a93d871e49Harald Welte list_del(&r->list); 801aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 802aae69bed019826ddec93f761514652a93d871e49Harald Welte} 803aae69bed019826ddec93f761514652a93d871e49Harald Welte 804aae69bed019826ddec93f761514652a93d871e49Harald Welte 805aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 806aae69bed019826ddec93f761514652a93d871e49Harald Welte * RULESET PARSER (blob -> cache) 807aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 808aae69bed019826ddec93f761514652a93d871e49Harald Welte 809aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Delete policy rule of previous chain, since cache doesn't contain 810aae69bed019826ddec93f761514652a93d871e49Harald Welte * chain policy rules. 811aae69bed019826ddec93f761514652a93d871e49Harald Welte * WARNING: This function has ugly design and relies on a lot of context, only 812aae69bed019826ddec93f761514652a93d871e49Harald Welte * to be called from specific places within the parser */ 813fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int __iptcc_p_del_policy(struct xtc_handle *h, unsigned int num) 814aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 815aae69bed019826ddec93f761514652a93d871e49Harald Welte if (h->chain_iterator_cur) { 816aae69bed019826ddec93f761514652a93d871e49Harald Welte /* policy rule is last rule */ 817aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *pr = (struct rule_head *) 818aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->rules.prev; 819aae69bed019826ddec93f761514652a93d871e49Harald Welte 820aae69bed019826ddec93f761514652a93d871e49Harald Welte /* save verdict */ 821aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->verdict = 822aae69bed019826ddec93f761514652a93d871e49Harald Welte *(int *)GET_TARGET(pr->entry)->data; 823aae69bed019826ddec93f761514652a93d871e49Harald Welte 824aae69bed019826ddec93f761514652a93d871e49Harald Welte /* save counter and counter_map information */ 825aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->counter_map.maptype = 826aae69bed019826ddec93f761514652a93d871e49Harald Welte COUNTER_MAP_NORMAL_MAP; 827aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->counter_map.mappos = num-1; 828aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&h->chain_iterator_cur->counters, &pr->entry->counters, 829aae69bed019826ddec93f761514652a93d871e49Harald Welte sizeof(h->chain_iterator_cur->counters)); 830aae69bed019826ddec93f761514652a93d871e49Harald Welte 831aae69bed019826ddec93f761514652a93d871e49Harald Welte /* foot_offset points to verdict rule */ 832aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->foot_index = num; 833aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->foot_offset = pr->offset; 834aae69bed019826ddec93f761514652a93d871e49Harald Welte 835aae69bed019826ddec93f761514652a93d871e49Harald Welte /* delete rule from cache */ 836aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(pr); 8378d1b38a064d146c77eb8fc951717663e1a713cfcMartin Josefsson h->chain_iterator_cur->num_rules--; 838aae69bed019826ddec93f761514652a93d871e49Harald Welte 839e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 840e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 841e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 842e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 843e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 844ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte/* alphabetically insert a chain into the list */ 845fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic inline void iptc_insert_chain(struct xtc_handle *h, struct chain_head *c) 846ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte{ 847ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte struct chain_head *tmp; 84801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_start_pos; 84901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=1; 85001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 85101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Find a smart place to start the insert search */ 85201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_index(c->name, &i, h); 85301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 85401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handle the case, where chain.name is smaller than index[0] */ 85501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (i==0 && strcmp(c->name, h->chain_index[0]->name) <= 0) { 85601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index[0] = c; /* Update chain index head */ 85701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = h->chains.next; 85801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Update chain_index[0] with %s\n", c->name); 85901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 86001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 86101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handel if bsearch bails out early */ 86201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos == &h->chains) { 86301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = h->chains.next; 86401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 865ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 8669d3ed77341361674994f584ff69a61f31a342739Olaf Rempel /* sort only user defined chains */ 8679d3ed77341361674994f584ff69a61f31a342739Olaf Rempel if (!c->hooknum) { 86801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each_entry(tmp, list_start_pos->prev, list) { 869feca0578a5d035122b4b7cdb8d44d6cca819f35cRobert de Barth if (!tmp->hooknum && strcmp(c->name, tmp->name) <= 0) { 8709d3ed77341361674994f584ff69a61f31a342739Olaf Rempel list_add(&c->list, tmp->list.prev); 8719d3ed77341361674994f584ff69a61f31a342739Olaf Rempel return; 8729d3ed77341361674994f584ff69a61f31a342739Olaf Rempel } 87301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 87401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Stop if list head is reached */ 87501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (&tmp->list == &h->chains) { 87601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Insert, list head reached add to tail\n"); 87701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 87801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 879ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte } 880ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte } 881ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 882ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte /* survived till end of list: add at tail */ 883ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte list_add_tail(&c->list, &h->chains); 884ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte} 885ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 886aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Another ugly helper function split out of cache_add_entry to make it less 887aae69bed019826ddec93f761514652a93d871e49Harald Welte * spaghetti code */ 888fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void __iptcc_p_add_chain(struct xtc_handle *h, struct chain_head *c, 889aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset, unsigned int *num) 890e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 8911336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer struct list_head *tail = h->chains.prev; 8921336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer struct chain_head *ctail; 8931336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer 894aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_del_policy(h, *num); 895e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 896aae69bed019826ddec93f761514652a93d871e49Harald Welte c->head_offset = offset; 897aae69bed019826ddec93f761514652a93d871e49Harald Welte c->index = *num; 898e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 8991336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer /* Chains from kernel are already sorted, as they are inserted 9001336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * sorted. But there exists an issue when shifting to 1.4.0 9011336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * from an older version, as old versions allow last created 9021336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * chain to be unsorted. 9031336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer */ 9041336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer if (iptcc_is_builtin(c)) /* Only user defined chains are sorted*/ 9051336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer list_add_tail(&c->list, &h->chains); 9061336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer else { 9071336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer ctail = list_entry(tail, struct chain_head, list); 9084bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 909526d3e138635e33773d1ca16477052a04f53f5bdJesper Dangaard Brouer if (strcmp(c->name, ctail->name) > 0 || 910526d3e138635e33773d1ca16477052a04f53f5bdJesper Dangaard Brouer iptcc_is_builtin(ctail)) 9111336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer list_add_tail(&c->list, &h->chains);/* Already sorted*/ 9124bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer else { 9131336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer iptc_insert_chain(h, c);/* Was not sorted */ 9144bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 9154bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Notice, if chains were not received sorted 9164bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * from kernel, then an offset bsearch is no 9174bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * longer valid. 9184bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 9194bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer h->sorted_offsets = 0; 9204bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 9214bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("NOTICE: chain:[%s] was NOT sorted(ctail:%s)\n", 9224bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer c->name, ctail->name); 9234bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 9241336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer } 925d8cb787ab44e9d2de4fd3b04fcaa370c9918fc5dJesper Dangaard Brouer 926aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur = c; 927e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 928e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 929aae69bed019826ddec93f761514652a93d871e49Harald Welte/* main parser function: add an entry from the blob to the cache */ 930aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic int cache_add_entry(STRUCT_ENTRY *e, 931fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h, 932aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY **prev, 933aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int *num) 934e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 935aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int builtin; 936aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset = (char *)e - (char *)h->entries->entrytable; 937aae69bed019826ddec93f761514652a93d871e49Harald Welte 938aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("entering..."); 939aae69bed019826ddec93f761514652a93d871e49Harald Welte 940aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Last entry ("policy rule"). End it.*/ 941aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcb_entry2offset(h,e) + e->next_offset == h->entries->size) { 942aae69bed019826ddec93f761514652a93d871e49Harald Welte /* This is the ERROR node at the end of the chain */ 943aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u: end of table:\n", *num, offset); 944aae69bed019826ddec93f761514652a93d871e49Harald Welte 945aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_del_policy(h, *num); 946aae69bed019826ddec93f761514652a93d871e49Harald Welte 947aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur = NULL; 948aae69bed019826ddec93f761514652a93d871e49Harald Welte goto out_inc; 949aae69bed019826ddec93f761514652a93d871e49Harald Welte } 950aae69bed019826ddec93f761514652a93d871e49Harald Welte 951aae69bed019826ddec93f761514652a93d871e49Harald Welte /* We know this is the start of a new chain if it's an ERROR 952aae69bed019826ddec93f761514652a93d871e49Harald Welte * target, or a hook entry point */ 953aae69bed019826ddec93f761514652a93d871e49Harald Welte 954aae69bed019826ddec93f761514652a93d871e49Harald Welte if (strcmp(GET_TARGET(e)->u.user.name, ERROR_TARGET) == 0) { 955aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = 956aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_alloc_chain_head((const char *)GET_TARGET(e)->data, 0); 957aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u:new userdefined chain %s: %p\n", *num, offset, 958aae69bed019826ddec93f761514652a93d871e49Harald Welte (char *)c->name, c); 959aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 960aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = -ENOMEM; 961aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 962aae69bed019826ddec93f761514652a93d871e49Harald Welte } 96348bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer h->num_chains++; /* New user defined chain */ 964aae69bed019826ddec93f761514652a93d871e49Harald Welte 965aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_add_chain(h, c, offset, num); 966aae69bed019826ddec93f761514652a93d871e49Harald Welte 967aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if ((builtin = iptcb_ent_is_hook_entry(e, h)) != 0) { 968aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = 969aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_alloc_chain_head((char *)hooknames[builtin-1], 970aae69bed019826ddec93f761514652a93d871e49Harald Welte builtin); 971aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u new builtin chain: %p (rules=%p)\n", 972aae69bed019826ddec93f761514652a93d871e49Harald Welte *num, offset, c, &c->rules); 973aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 974aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = -ENOMEM; 975aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 976aae69bed019826ddec93f761514652a93d871e49Harald Welte } 977aae69bed019826ddec93f761514652a93d871e49Harald Welte 978aae69bed019826ddec93f761514652a93d871e49Harald Welte c->hooknum = builtin; 979aae69bed019826ddec93f761514652a93d871e49Harald Welte 980aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_add_chain(h, c, offset, num); 981aae69bed019826ddec93f761514652a93d871e49Harald Welte 982aae69bed019826ddec93f761514652a93d871e49Harald Welte /* FIXME: this is ugly. */ 983aae69bed019826ddec93f761514652a93d871e49Harald Welte goto new_rule; 984aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 985aae69bed019826ddec93f761514652a93d871e49Harald Welte /* has to be normal rule */ 986aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 987aae69bed019826ddec93f761514652a93d871e49Harald Weltenew_rule: 988aae69bed019826ddec93f761514652a93d871e49Harald Welte 989aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(h->chain_iterator_cur, 990aae69bed019826ddec93f761514652a93d871e49Harald Welte e->next_offset))) { 991aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 992aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 993aae69bed019826ddec93f761514652a93d871e49Harald Welte } 994aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u normal rule: %p: ", *num, offset, r); 995aae69bed019826ddec93f761514652a93d871e49Harald Welte 996aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index = *num; 997aae69bed019826ddec93f761514652a93d871e49Harald Welte r->offset = offset; 998aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 999aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_NORMAL_MAP; 1000aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos = r->index; 1001aae69bed019826ddec93f761514652a93d871e49Harald Welte 1002aae69bed019826ddec93f761514652a93d871e49Harald Welte /* handling of jumps, etc. */ 1003aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!strcmp(GET_TARGET(e)->u.user.name, STANDARD_TARGET)) { 1004aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1005aae69bed019826ddec93f761514652a93d871e49Harald Welte 1006aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(e); 1007aae69bed019826ddec93f761514652a93d871e49Harald Welte if (t->target.u.target_size 1008aae69bed019826ddec93f761514652a93d871e49Harald Welte != ALIGN(sizeof(STRUCT_STANDARD_TARGET))) { 1009aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = EINVAL; 1010aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 1011aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1012aae69bed019826ddec93f761514652a93d871e49Harald Welte 1013aae69bed019826ddec93f761514652a93d871e49Harald Welte if (t->verdict < 0) { 1014aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("standard, verdict=%d\n", t->verdict); 1015aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_STANDARD; 1016aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if (t->verdict == r->offset+e->next_offset) { 1017aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("fallthrough\n"); 1018aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_FALLTHROUGH; 1019aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 1020aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("jump, target=%u\n", t->verdict); 1021aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_JUMP; 1022aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Jump target fixup has to be deferred 1023aae69bed019826ddec93f761514652a93d871e49Harald Welte * until second pass, since we migh not 1024aae69bed019826ddec93f761514652a93d871e49Harald Welte * yet have parsed the target */ 1025aae69bed019826ddec93f761514652a93d871e49Harald Welte } 102652c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson } else { 102752c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson DEBUGP_C("module, target=%s\n", GET_TARGET(e)->u.user.name); 102852c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson r->type = IPTCC_R_MODULE; 1029aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1030aae69bed019826ddec93f761514652a93d871e49Harald Welte 1031aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add_tail(&r->list, &h->chain_iterator_cur->rules); 10328d1b38a064d146c77eb8fc951717663e1a713cfcMartin Josefsson h->chain_iterator_cur->num_rules++; 1033aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1034aae69bed019826ddec93f761514652a93d871e49Harald Welteout_inc: 1035aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1036aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1037e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1038e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1039aae69bed019826ddec93f761514652a93d871e49Harald Welte 1040aae69bed019826ddec93f761514652a93d871e49Harald Welte/* parse an iptables blob into it's pieces */ 1041fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int parse_table(struct xtc_handle *h) 1042e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1043aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *prev; 1044aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num = 0; 1045aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1046aae69bed019826ddec93f761514652a93d871e49Harald Welte 10474bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Assume that chains offsets are sorted, this verified during 10484bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer parsing of ruleset (in __iptcc_p_add_chain())*/ 10494bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer h->sorted_offsets = 1; 10504bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 1051aae69bed019826ddec93f761514652a93d871e49Harald Welte /* First pass: over ruleset blob */ 1052aae69bed019826ddec93f761514652a93d871e49Harald Welte ENTRY_ITERATE(h->entries->entrytable, h->entries->size, 1053aae69bed019826ddec93f761514652a93d871e49Harald Welte cache_add_entry, h, &prev, &num); 1054aae69bed019826ddec93f761514652a93d871e49Harald Welte 105501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Build the chain index, used for chain list search speedup */ 105601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((iptcc_chain_index_alloc(h)) < 0) 105701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 105801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_build(h); 105901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 1060aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Second pass: fixup parsed data from first pass */ 1061aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1062aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1063aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1064dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt struct chain_head *lc; 1065aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1066aae69bed019826ddec93f761514652a93d871e49Harald Welte 1067aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type != IPTCC_R_JUMP) 1068aae69bed019826ddec93f761514652a93d871e49Harald Welte continue; 1069aae69bed019826ddec93f761514652a93d871e49Harald Welte 1070aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1071dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt lc = iptcc_find_chain_by_offset(h, t->verdict); 1072dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt if (!lc) 1073aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 1074dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt r->jump = lc; 1075dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt lc->references++; 1076aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1077aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1078aae69bed019826ddec93f761514652a93d871e49Harald Welte 1079aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 10800113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 10819e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte 1082aae69bed019826ddec93f761514652a93d871e49Harald Welte 1083aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 1084aae69bed019826ddec93f761514652a93d871e49Harald Welte * RULESET COMPILATION (cache -> blob) 1085aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 1086aae69bed019826ddec93f761514652a93d871e49Harald Welte 1087aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Convenience structures */ 1088aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_start{ 1089aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY e; 1090aae69bed019826ddec93f761514652a93d871e49Harald Welte struct ipt_error_target name; 1091aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1092aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_START_SIZE (sizeof(STRUCT_ENTRY) + \ 1093aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target))) 1094aae69bed019826ddec93f761514652a93d871e49Harald Welte 1095aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_foot { 1096aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY e; 1097aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET target; 1098aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1099aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_FOOT_SIZE (sizeof(STRUCT_ENTRY) + \ 1100aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(STRUCT_STANDARD_TARGET))) 1101aae69bed019826ddec93f761514652a93d871e49Harald Welte 1102aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_error { 1103aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY entry; 1104aae69bed019826ddec93f761514652a93d871e49Harald Welte struct ipt_error_target target; 1105aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1106aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_ERROR_SIZE (sizeof(STRUCT_ENTRY) + \ 1107aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target))) 1108aae69bed019826ddec93f761514652a93d871e49Harald Welte 1109aae69bed019826ddec93f761514652a93d871e49Harald Welte 1110aae69bed019826ddec93f761514652a93d871e49Harald Welte 1111aae69bed019826ddec93f761514652a93d871e49Harald Welte/* compile rule from cache into blob */ 1112fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic inline int iptcc_compile_rule (struct xtc_handle *h, STRUCT_REPLACE *repl, struct rule_head *r) 11130113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1114aae69bed019826ddec93f761514652a93d871e49Harald Welte /* handle jumps */ 1115aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type == IPTCC_R_JUMP) { 1116aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1117aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1118aae69bed019826ddec93f761514652a93d871e49Harald Welte /* memset for memcmp convenience on delete/replace */ 1119aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(t->target.u.user.name, 0, FUNCTION_MAXNAMELEN); 1120aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(t->target.u.user.name, STANDARD_TARGET); 1121aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Jumps can only happen to builtin chains, so we 1122aae69bed019826ddec93f761514652a93d871e49Harald Welte * can safely assume that they always have a header */ 1123aae69bed019826ddec93f761514652a93d871e49Harald Welte t->verdict = r->jump->head_offset + IPTCB_CHAIN_START_SIZE; 1124aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if (r->type == IPTCC_R_FALLTHROUGH) { 1125aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1126aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1127aae69bed019826ddec93f761514652a93d871e49Harald Welte t->verdict = r->offset + r->size; 1128aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1129aae69bed019826ddec93f761514652a93d871e49Harald Welte 1130aae69bed019826ddec93f761514652a93d871e49Harald Welte /* copy entry from cache to blob */ 1131aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy((char *)repl->entries+r->offset, r->entry, r->size); 1132aae69bed019826ddec93f761514652a93d871e49Harald Welte 1133aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1135e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1136aae69bed019826ddec93f761514652a93d871e49Harald Welte/* compile chain from cache into blob */ 1137fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_chain(struct xtc_handle *h, STRUCT_REPLACE *repl, struct chain_head *c) 11383ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte{ 1139aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret; 1140aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1141aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_start *head; 1142aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_foot *foot; 1143aae69bed019826ddec93f761514652a93d871e49Harald Welte 1144aae69bed019826ddec93f761514652a93d871e49Harald Welte /* only user-defined chains have heaer */ 1145aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 1146aae69bed019826ddec93f761514652a93d871e49Harald Welte /* put chain header in place */ 1147aae69bed019826ddec93f761514652a93d871e49Harald Welte head = (void *)repl->entries + c->head_offset; 1148aae69bed019826ddec93f761514652a93d871e49Harald Welte head->e.target_offset = sizeof(STRUCT_ENTRY); 1149aae69bed019826ddec93f761514652a93d871e49Harald Welte head->e.next_offset = IPTCB_CHAIN_START_SIZE; 1150aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(head->name.t.u.user.name, ERROR_TARGET); 1151aae69bed019826ddec93f761514652a93d871e49Harald Welte head->name.t.u.target_size = 1152aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target)); 1153aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(head->name.error, c->name); 1154aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 1155aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->hook_entry[c->hooknum-1] = c->head_offset; 1156aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->underflow[c->hooknum-1] = c->foot_offset; 1157aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1158aae69bed019826ddec93f761514652a93d871e49Harald Welte 1159aae69bed019826ddec93f761514652a93d871e49Harald Welte /* iterate over rules */ 1160aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1161aae69bed019826ddec93f761514652a93d871e49Harald Welte ret = iptcc_compile_rule(h, repl, r); 1162aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1163aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 1164aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1165aae69bed019826ddec93f761514652a93d871e49Harald Welte 1166aae69bed019826ddec93f761514652a93d871e49Harald Welte /* put chain footer in place */ 1167aae69bed019826ddec93f761514652a93d871e49Harald Welte foot = (void *)repl->entries + c->foot_offset; 1168aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->e.target_offset = sizeof(STRUCT_ENTRY); 1169aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->e.next_offset = IPTCB_CHAIN_FOOT_SIZE; 1170aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(foot->target.target.u.user.name, STANDARD_TARGET); 1171aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.target.u.target_size = 1172aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(STRUCT_STANDARD_TARGET)); 1173aae69bed019826ddec93f761514652a93d871e49Harald Welte /* builtin targets have verdict, others return */ 1174aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcc_is_builtin(c)) 1175aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.verdict = c->verdict; 1176aae69bed019826ddec93f761514652a93d871e49Harald Welte else 1177aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.verdict = RETURN; 1178aae69bed019826ddec93f761514652a93d871e49Harald Welte /* set policy-counters */ 1179aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&foot->e.counters, &c->counters, sizeof(STRUCT_COUNTERS)); 1180aae69bed019826ddec93f761514652a93d871e49Harald Welte 1181aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 11823ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte} 11833ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1184aae69bed019826ddec93f761514652a93d871e49Harald Welte/* calculate offset and number for every rule in the cache */ 1185fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_chain_offsets(struct xtc_handle *h, struct chain_head *c, 1186efa8fc2123a2a9fc229ab471edd2b2688ce1da3aHarald Welte unsigned int *offset, unsigned int *num) 11873ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte{ 1188aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1189aae69bed019826ddec93f761514652a93d871e49Harald Welte 1190aae69bed019826ddec93f761514652a93d871e49Harald Welte c->head_offset = *offset; 1191aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("%s: chain_head %u, offset=%u\n", c->name, *num, *offset); 1192aae69bed019826ddec93f761514652a93d871e49Harald Welte 1193aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 1194aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Chain has header */ 1195aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += sizeof(STRUCT_ENTRY) 1196aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(struct ipt_error_target)); 1197aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1198aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1199aae69bed019826ddec93f761514652a93d871e49Harald Welte 1200aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1201aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("rule %u, offset=%u, index=%u\n", *num, *offset, *num); 1202aae69bed019826ddec93f761514652a93d871e49Harald Welte r->offset = *offset; 1203aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index = *num; 1204aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += r->size; 1205aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1206aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1207aae69bed019826ddec93f761514652a93d871e49Harald Welte 1208aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("%s; chain_foot %u, offset=%u, index=%u\n", c->name, *num, 1209aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset, *num); 1210aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_offset = *offset; 1211aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index = *num; 1212aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += sizeof(STRUCT_ENTRY) 1213aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(STRUCT_STANDARD_TARGET)); 1214aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1215aae69bed019826ddec93f761514652a93d871e49Harald Welte 1216aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 12173ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte} 12183ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1219aae69bed019826ddec93f761514652a93d871e49Harald Welte/* put the pieces back together again */ 1220fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_table_prep(struct xtc_handle *h, unsigned int *size) 1221aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1222aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1223aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset = 0, num = 0; 1224aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret = 0; 12253ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1226aae69bed019826ddec93f761514652a93d871e49Harald Welte /* First pass: calculate offset for every rule */ 1227aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1228aae69bed019826ddec93f761514652a93d871e49Harald Welte ret = iptcc_compile_chain_offsets(h, c, &offset, &num); 1229aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1230aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 1231aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1232aae69bed019826ddec93f761514652a93d871e49Harald Welte 1233aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Append one error rule at end of chain */ 1234aae69bed019826ddec93f761514652a93d871e49Harald Welte num++; 1235aae69bed019826ddec93f761514652a93d871e49Harald Welte offset += sizeof(STRUCT_ENTRY) 1236aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(struct ipt_error_target)); 1237aae69bed019826ddec93f761514652a93d871e49Harald Welte 1238aae69bed019826ddec93f761514652a93d871e49Harald Welte /* ruleset size is now in offset */ 1239aae69bed019826ddec93f761514652a93d871e49Harald Welte *size = offset; 1240aae69bed019826ddec93f761514652a93d871e49Harald Welte return num; 1241aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1242aae69bed019826ddec93f761514652a93d871e49Harald Welte 1243fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_table(struct xtc_handle *h, STRUCT_REPLACE *repl) 12440113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1245aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1246aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_error *error; 12470113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1248aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Second pass: copy from cache to offsets, fill in jumps */ 1249aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1250aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret = iptcc_compile_chain(h, repl, c); 1251aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1252aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 12530113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 12540113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1255aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Append error rule at end of chain */ 1256aae69bed019826ddec93f761514652a93d871e49Harald Welte error = (void *)repl->entries + repl->size - IPTCB_CHAIN_ERROR_SIZE; 1257aae69bed019826ddec93f761514652a93d871e49Harald Welte error->entry.target_offset = sizeof(STRUCT_ENTRY); 1258aae69bed019826ddec93f761514652a93d871e49Harald Welte error->entry.next_offset = IPTCB_CHAIN_ERROR_SIZE; 1259aae69bed019826ddec93f761514652a93d871e49Harald Welte error->target.t.u.user.target_size = 1260aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(struct ipt_error_target)); 1261aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy((char *)&error->target.t.u.user.name, ERROR_TARGET); 1262aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy((char *)&error->target.error, "ERROR"); 1263aae69bed019826ddec93f761514652a93d871e49Harald Welte 1264aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 12650113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1266e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1267aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 1268aae69bed019826ddec93f761514652a93d871e49Harald Welte * EXTERNAL API (operates on cache only) 1269aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 1270aae69bed019826ddec93f761514652a93d871e49Harald Welte 1271e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Allocate handle of given size */ 1272fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic struct xtc_handle * 12730113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Weltealloc_handle(const char *tablename, unsigned int size, unsigned int num_rules) 1274e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1275e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher size_t len; 1276fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h; 1277e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1278aae69bed019826ddec93f761514652a93d871e49Harald Welte len = sizeof(STRUCT_TC_HANDLE) + size; 1279e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1280aae69bed019826ddec93f761514652a93d871e49Harald Welte h = malloc(sizeof(STRUCT_TC_HANDLE)); 1281aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!h) { 1282e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 1283e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1284e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1285aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(h, 0, sizeof(*h)); 1286aae69bed019826ddec93f761514652a93d871e49Harald Welte INIT_LIST_HEAD(&h->chains); 1287e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher strcpy(h->info.name, tablename); 1288aae69bed019826ddec93f761514652a93d871e49Harald Welte 12890371c0c5eb17c81e8dd44c4aa31b58318e9b7b72Harald Welte h->entries = malloc(sizeof(STRUCT_GET_ENTRIES) + size); 1290aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!h->entries) 1291aae69bed019826ddec93f761514652a93d871e49Harald Welte goto out_free_handle; 1292aae69bed019826ddec93f761514652a93d871e49Harald Welte 1293aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(h->entries->name, tablename); 12940371c0c5eb17c81e8dd44c4aa31b58318e9b7b72Harald Welte h->entries->size = size; 1295e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1296e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 1297aae69bed019826ddec93f761514652a93d871e49Harald Welte 1298aae69bed019826ddec93f761514652a93d871e49Harald Welteout_free_handle: 1299aae69bed019826ddec93f761514652a93d871e49Harald Welte free(h); 1300aae69bed019826ddec93f761514652a93d871e49Harald Welte 1301aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1302e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1303e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1304aae69bed019826ddec93f761514652a93d871e49Harald Welte 1305fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstruct xtc_handle * 130679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_INIT(const char *tablename) 1307e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1308fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h; 130979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_GETINFO info; 1310efa8fc2123a2a9fc229ab471edd2b2688ce1da3aHarald Welte unsigned int tmp; 1311e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher socklen_t s; 1312e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 131379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_INIT; 1314e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1315841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson if (strlen(tablename) >= TABLE_MAXNAMELEN) { 1316841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson errno = EINVAL; 1317841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson return NULL; 1318841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson } 1319841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1320664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (sockfd_use == 0) { 1321664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates sockfd = socket(TC_AF, SOCK_RAW, IPPROTO_RAW); 1322664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (sockfd < 0) 1323664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates return NULL; 1324664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1325664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates sockfd_use++; 13262f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardyretry: 1327e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher s = sizeof(info); 1328841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1329e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher strcpy(info.name, tablename); 1330664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (getsockopt(sockfd, TC_IPPROTO, SO_GET_INFO, &info, &s) < 0) { 1331664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (--sockfd_use == 0) { 1332664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates close(sockfd); 1333664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates sockfd = -1; 1334664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1335e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1336664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1337e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1338aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("valid_hooks=0x%08x, num_entries=%u, size=%u\n", 1339aae69bed019826ddec93f761514652a93d871e49Harald Welte info.valid_hooks, info.num_entries, info.size); 1340aae69bed019826ddec93f761514652a93d871e49Harald Welte 13410113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte if ((h = alloc_handle(info.name, info.size, info.num_entries)) 1342841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson == NULL) { 1343664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (--sockfd_use == 0) { 1344664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates close(sockfd); 1345664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates sockfd = -1; 1346664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1347e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1348841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson } 1349e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1350e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Initialize current state */ 1351e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->info = info; 13520113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1353aae69bed019826ddec93f761514652a93d871e49Harald Welte h->entries->size = h->info.size; 1354e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 135579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell tmp = sizeof(STRUCT_GET_ENTRIES) + h->info.size; 1356e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1357aae69bed019826ddec93f761514652a93d871e49Harald Welte if (getsockopt(sockfd, TC_IPPROTO, SO_GET_ENTRIES, h->entries, 1358aae69bed019826ddec93f761514652a93d871e49Harald Welte &tmp) < 0) 1359aae69bed019826ddec93f761514652a93d871e49Harald Welte goto error; 1360aae69bed019826ddec93f761514652a93d871e49Harald Welte 1361aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 1362aae69bed019826ddec93f761514652a93d871e49Harald Welte { 1363aae69bed019826ddec93f761514652a93d871e49Harald Welte int fd = open("/tmp/libiptc-so_get_entries.blob", 1364aae69bed019826ddec93f761514652a93d871e49Harald Welte O_CREAT|O_WRONLY); 1365aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 1366aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, h->entries, tmp); 1367aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 1368aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1369e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1370aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 1371aae69bed019826ddec93f761514652a93d871e49Harald Welte 1372aae69bed019826ddec93f761514652a93d871e49Harald Welte if (parse_table(h) < 0) 1373aae69bed019826ddec93f761514652a93d871e49Harald Welte goto error; 13747e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 1375e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(h); 1376e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 1377aae69bed019826ddec93f761514652a93d871e49Harald Welteerror: 13781c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt TC_FREE(h); 13792f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy /* A different process changed the ruleset size, retry */ 13802f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy if (errno == EAGAIN) 13812f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy goto retry; 1382aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1383e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1384e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1385841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefssonvoid 13861c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FREE(struct xtc_handle *h) 1387841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson{ 1388aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c, *tmp; 1389aae69bed019826ddec93f761514652a93d871e49Harald Welte 1390664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_FREE; 1391664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (--sockfd_use == 0) { 1392664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates close(sockfd); 1393664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates sockfd = -1; 1394664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1395aae69bed019826ddec93f761514652a93d871e49Harald Welte 13961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_for_each_entry_safe(c, tmp, &h->chains, list) { 1397aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *rtmp; 1398aae69bed019826ddec93f761514652a93d871e49Harald Welte 1399aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry_safe(r, rtmp, &c->rules, list) { 1400aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 1401aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1402aae69bed019826ddec93f761514652a93d871e49Harald Welte 1403aae69bed019826ddec93f761514652a93d871e49Harald Welte free(c); 1404aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1405aae69bed019826ddec93f761514652a93d871e49Harald Welte 14061c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_free(h); 1407aae69bed019826ddec93f761514652a93d871e49Harald Welte 14081c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt free(h->entries); 14091c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt free(h); 1410841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson} 1411841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1412e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 141379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellprint_match(const STRUCT_ENTRY_MATCH *m) 1414e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1415228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell printf("Match name: `%s'\n", m->u.user.name); 1416e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1417e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1418e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1419fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int dump_entry(STRUCT_ENTRY *e, struct xtc_handle *const handle); 142079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell 1421e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid 1422fd1873110f8e57be578df17fc9d03536b10f4f73Jan EngelhardtTC_DUMP_ENTRIES(struct xtc_handle *const handle) 1423e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1424664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_DUMP_ENTRIES; 1425e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(handle); 142697fb2f1579f0794377db1dca7c5bb07fade1a0dcPatrick McHardy 1427e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell printf("libiptc v%s. %u bytes.\n", 14288b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt XTABLES_VERSION, handle->entries->size); 1429e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("Table `%s'\n", handle->info.name); 1430e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("Hooks: pre/in/fwd/out/post = %u/%u/%u/%u/%u\n", 143167088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_PRE_ROUTING], 143267088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_LOCAL_IN], 143367088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_FORWARD], 143467088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_LOCAL_OUT], 143567088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_POST_ROUTING]); 1436e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("Underflows: pre/in/fwd/out/post = %u/%u/%u/%u/%u\n", 143767088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_PRE_ROUTING], 143867088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_LOCAL_IN], 143967088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_FORWARD], 144067088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_LOCAL_OUT], 144167088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_POST_ROUTING]); 1442e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1443aae69bed019826ddec93f761514652a93d871e49Harald Welte ENTRY_ITERATE(handle->entries->entrytable, handle->entries->size, 144479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell dump_entry, handle); 14450113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1446e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1447e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Does this chain exist? */ 1448fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtint TC_IS_CHAIN(const char *chain, struct xtc_handle *const handle) 1449e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1450664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_IS_CHAIN; 1451aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_find_label(chain, handle) != NULL; 1452e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1453e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1454fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_iterator_advance(struct xtc_handle *handle) 1455aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1456aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = handle->chain_iterator_cur; 1457aae69bed019826ddec93f761514652a93d871e49Harald Welte 1458aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c->list.next == &handle->chains) 1459aae69bed019826ddec93f761514652a93d871e49Harald Welte handle->chain_iterator_cur = NULL; 1460aae69bed019826ddec93f761514652a93d871e49Harald Welte else 1461aae69bed019826ddec93f761514652a93d871e49Harald Welte handle->chain_iterator_cur = 1462aae69bed019826ddec93f761514652a93d871e49Harald Welte list_entry(c->list.next, struct chain_head, list); 1463aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1464e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 146530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Iterator functions to run through the chains. */ 1466e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 14671c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FIRST_CHAIN(struct xtc_handle *handle) 1468e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 14691c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct chain_head *c = list_entry(handle->chains.next, 1470aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head, list); 1471aae69bed019826ddec93f761514652a93d871e49Harald Welte 1472aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_FIRST_CHAIN; 1473aae69bed019826ddec93f761514652a93d871e49Harald Welte 1474aae69bed019826ddec93f761514652a93d871e49Harald Welte 14751c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (list_empty(&handle->chains)) { 1476aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": no chains\n"); 14770113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return NULL; 1478aae69bed019826ddec93f761514652a93d871e49Harald Welte } 14790113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 14801c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->chain_iterator_cur = c; 14811c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 148230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1483aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": returning `%s'\n", c->name); 1484aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->name; 148530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 148630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 148730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Iterator functions to run through the chains. Returns NULL at end. */ 148830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russellconst char * 14891c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NEXT_CHAIN(struct xtc_handle *handle) 149030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 14911c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct chain_head *c = handle->chain_iterator_cur; 1492aae69bed019826ddec93f761514652a93d871e49Harald Welte 1493aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NEXT_CHAIN; 149430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1495aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1496aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": no more chains\n"); 149730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1498aae69bed019826ddec93f761514652a93d871e49Harald Welte } 149930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 15001c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 1501aae69bed019826ddec93f761514652a93d871e49Harald Welte 1502aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": returning `%s'\n", c->name); 1503aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->name; 150430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 150530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 150630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Get first rule in the given chain: NULL for empty chain. */ 150779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellconst STRUCT_ENTRY * 15081c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FIRST_RULE(const char *chain, struct xtc_handle *handle) 150930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 1510aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1511aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1512aae69bed019826ddec93f761514652a93d871e49Harald Welte 1513aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_FIRST_RULE; 151430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1515aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("first rule(%s): ", chain); 1516aae69bed019826ddec93f761514652a93d871e49Harald Welte 15171c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 151830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell if (!c) { 151930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell errno = ENOENT; 152030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1521e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1522e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 152330fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell /* Empty chain: single return/policy rule */ 1524aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&c->rules)) { 1525aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("no rules, returning NULL\n"); 152630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1527aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1528aae69bed019826ddec93f761514652a93d871e49Harald Welte 1529aae69bed019826ddec93f761514652a93d871e49Harald Welte r = list_entry(c->rules.next, struct rule_head, list); 15301c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = r; 1531aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%p\n", r); 153230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1533aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 1534e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1535e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 153630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Returns NULL when rules run out. */ 153779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellconst STRUCT_ENTRY * 15381c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NEXT_RULE(const STRUCT_ENTRY *prev, struct xtc_handle *handle) 153930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 1540aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1541aae69bed019826ddec93f761514652a93d871e49Harald Welte 1542664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_NEXT_RULE; 15431c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt DEBUGP("rule_iterator_cur=%p...", handle->rule_iterator_cur); 1544aae69bed019826ddec93f761514652a93d871e49Harald Welte 15451c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (handle->rule_iterator_cur == NULL) { 1546aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("returning NULL\n"); 154730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1548aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1549aae69bed019826ddec93f761514652a93d871e49Harald Welte 15501c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt r = list_entry(handle->rule_iterator_cur->list.next, 1551aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head, list); 155230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1553aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NEXT_RULE; 1554aae69bed019826ddec93f761514652a93d871e49Harald Welte 1555aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("next=%p, head=%p...", &r->list, 15561c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt &handle->rule_iterator_cur->chain->rules); 1557aae69bed019826ddec93f761514652a93d871e49Harald Welte 15581c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (&r->list == &handle->rule_iterator_cur->chain->rules) { 15591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = NULL; 1560aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("finished, returning NULL\n"); 1561aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1562aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1563aae69bed019826ddec93f761514652a93d871e49Harald Welte 15641c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = r; 1565aae69bed019826ddec93f761514652a93d871e49Harald Welte 1566aae69bed019826ddec93f761514652a93d871e49Harald Welte /* NOTE: prev is without any influence ! */ 1567aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("returning rule %p\n", r); 1568aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 156930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 157030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1571e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* How many rules in this chain? */ 157233690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic unsigned int 15731c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NUM_RULES(const char *chain, struct xtc_handle *handle) 1574e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1575aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1576aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NUM_RULES; 15771c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 1578aae69bed019826ddec93f761514652a93d871e49Harald Welte 15791c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1580aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1581e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1582e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return (unsigned int)-1; 1583e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1584aae69bed019826ddec93f761514652a93d871e49Harald Welte 1585aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->num_rules; 1586e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1587e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 158833690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic const STRUCT_ENTRY * 15891c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_GET_RULE(const char *chain, unsigned int n, struct xtc_handle *handle) 1590e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1591aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1592aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1593aae69bed019826ddec93f761514652a93d871e49Harald Welte 1594aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_RULE; 1595e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 15961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 1597aae69bed019826ddec93f761514652a93d871e49Harald Welte 15981c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1599aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1600e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1601e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1602e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1603e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1604aae69bed019826ddec93f761514652a93d871e49Harald Welte r = iptcc_get_rule_num(c, n); 1605aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!r) 1606aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1607aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 1608e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1609e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1610aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns a pointer to the target name of this position. */ 161133690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic const char *standard_target_map(int verdict) 1612e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1613aae69bed019826ddec93f761514652a93d871e49Harald Welte switch (verdict) { 1614aae69bed019826ddec93f761514652a93d871e49Harald Welte case RETURN: 161579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell return LABEL_RETURN; 1616aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1617aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_ACCEPT-1: 161879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell return LABEL_ACCEPT; 1619aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1620aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_DROP-1: 1621aae69bed019826ddec93f761514652a93d871e49Harald Welte return LABEL_DROP; 1622aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1623aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_QUEUE-1: 1624aae69bed019826ddec93f761514652a93d871e49Harald Welte return LABEL_QUEUE; 1625aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1626aae69bed019826ddec93f761514652a93d871e49Harald Welte default: 1627aae69bed019826ddec93f761514652a93d871e49Harald Welte fprintf(stderr, "ERROR: %d not a valid target)\n", 1628aae69bed019826ddec93f761514652a93d871e49Harald Welte verdict); 1629aae69bed019826ddec93f761514652a93d871e49Harald Welte abort(); 1630aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1631e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1632aae69bed019826ddec93f761514652a93d871e49Harald Welte /* not reached */ 1633aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1634e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1635e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1636aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns a pointer to the target name of this position. */ 1637aae69bed019826ddec93f761514652a93d871e49Harald Welteconst char *TC_GET_TARGET(const STRUCT_ENTRY *ce, 16381c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1639e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1640aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = (STRUCT_ENTRY *)ce; 1641e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell struct rule_head *r = container_of(e, struct rule_head, entry[0]); 1642e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1643aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_TARGET; 16440113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1645aae69bed019826ddec93f761514652a93d871e49Harald Welte switch(r->type) { 1646aae69bed019826ddec93f761514652a93d871e49Harald Welte int spos; 1647aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_FALLTHROUGH: 1648aae69bed019826ddec93f761514652a93d871e49Harald Welte return ""; 1649aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1650aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_JUMP: 1651aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("r=%p, jump=%p, name=`%s'\n", r, r->jump, r->jump->name); 1652aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->jump->name; 1653aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1654aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_STANDARD: 1655aae69bed019826ddec93f761514652a93d871e49Harald Welte spos = *(int *)GET_TARGET(e)->data; 1656aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("r=%p, spos=%d'\n", r, spos); 1657aae69bed019826ddec93f761514652a93d871e49Harald Welte return standard_target_map(spos); 1658aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1659aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_MODULE: 1660aae69bed019826ddec93f761514652a93d871e49Harald Welte return GET_TARGET(e)->u.user.name; 1661aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 16620113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 1663aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1664aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1665aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Is this a built-in chain? Actually returns hook + 1. */ 1666aae69bed019826ddec93f761514652a93d871e49Harald Welteint 1667fd1873110f8e57be578df17fc9d03536b10f4f73Jan EngelhardtTC_BUILTIN(const char *chain, struct xtc_handle *const handle) 1668aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1669aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1670aae69bed019826ddec93f761514652a93d871e49Harald Welte 1671aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_BUILTIN; 16720113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1673aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_find_label(chain, handle); 1674aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1675aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 1676b0f3d2d7261be3fe256a66abcc237241fea43a02Martin Josefsson return 0; 16770113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 16780113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1679aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_is_builtin(c); 16800113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 16810113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1682aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Get the policy of a given built-in chain */ 1683aae69bed019826ddec93f761514652a93d871e49Harald Welteconst char * 1684aae69bed019826ddec93f761514652a93d871e49Harald WelteTC_GET_POLICY(const char *chain, 1685aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_COUNTERS *counters, 16861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 16870113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1688aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 16890113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1690aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_POLICY; 1691fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte 1692aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("called for chain %s\n", chain); 16930113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 16941c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1695aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1696aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 1697aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 16980113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 16990113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1700aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) 1701aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 17020113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1703aae69bed019826ddec93f761514652a93d871e49Harald Welte *counters = c->counters; 17040113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1705aae69bed019826ddec93f761514652a93d871e49Harald Welte return standard_target_map(c->verdict); 17060113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1707e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1708e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 1709aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcc_standard_map(struct rule_head *r, int verdict) 1710e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1711aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = r->entry; 171279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_STANDARD_TARGET *t; 1713e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 171479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell t = (STRUCT_STANDARD_TARGET *)GET_TARGET(e); 1715e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 171667088e73ce7707229c56987868f112051defca5aRusty Russell if (t->target.u.target_size 17178c700900e2a0cf87d7917cb62578583a60ad1210Philip Blundell != ALIGN(sizeof(STRUCT_STANDARD_TARGET))) { 1718e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 1719e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1720e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1721e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* memset for memcmp convenience on delete/replace */ 172279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell memset(t->target.u.user.name, 0, FUNCTION_MAXNAMELEN); 172379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell strcpy(t->target.u.user.name, STANDARD_TARGET); 1724e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher t->verdict = verdict; 1725e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1726aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_STANDARD; 1727aae69bed019826ddec93f761514652a93d871e49Harald Welte 1728e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1729e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 17307e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 1731e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 1732fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_map_target(struct xtc_handle *const handle, 1733aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r) 1734e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1735aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = r->entry; 17360113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte STRUCT_ENTRY_TARGET *t = GET_TARGET(e); 1737e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1738e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's empty (=> fall through) */ 1739aae69bed019826ddec93f761514652a93d871e49Harald Welte if (strcmp(t->u.user.name, "") == 0) { 1740aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_FALLTHROUGH; 1741aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1742aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1743e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's a standard target name... */ 174479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_ACCEPT) == 0) 1745aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_ACCEPT - 1); 174679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_DROP) == 0) 1747aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_DROP - 1); 174867088e73ce7707229c56987868f112051defca5aRusty Russell else if (strcmp(t->u.user.name, LABEL_QUEUE) == 0) 1749aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_QUEUE - 1); 175079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_RETURN) == 0) 1751aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, RETURN); 175279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (TC_BUILTIN(t->u.user.name, handle)) { 1753e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Can't jump to builtins. */ 1754e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 1755e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1756e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else { 1757e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's an existing chain name. */ 1758aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1759aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("trying to find chain `%s': ", t->u.user.name); 1760aae69bed019826ddec93f761514652a93d871e49Harald Welte 1761aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_find_label(t->u.user.name, handle); 1762aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c) { 1763aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("found!\n"); 1764aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_JUMP; 1765aae69bed019826ddec93f761514652a93d871e49Harald Welte r->jump = c; 1766aae69bed019826ddec93f761514652a93d871e49Harald Welte c->references++; 1767aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1768aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1769aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("not found :(\n"); 1770e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1771e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1772e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Must be a module? If not, kernel will reject... */ 17733aef54dce4f9bbe0b466478fd33a1d3131efbbb8Rusty Russell /* memset to all 0 for your memcmp convenience: don't clear version */ 1774228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell memset(t->u.user.name + strlen(t->u.user.name), 1775e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 0, 17763aef54dce4f9bbe0b466478fd33a1d3131efbbb8Rusty Russell FUNCTION_MAXNAMELEN - 1 - strlen(t->u.user.name)); 1777733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell r->type = IPTCC_R_MODULE; 1778aae69bed019826ddec93f761514652a93d871e49Harald Welte set_changed(handle); 1779aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1780e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1781e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 17820113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Insert the entry `fw' in chain `chain' into position `rulenum'. */ 1783e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 178479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_INSERT_ENTRY(const IPT_CHAINLABEL chain, 178579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 178679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 17871c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1788e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1789aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1790eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson struct rule_head *r; 1791eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson struct list_head *prev; 1792e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 179379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_INSERT_ENTRY; 1794aae69bed019826ddec93f761514652a93d871e49Harald Welte 17951c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1796e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1797e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1798e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1799e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1800eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson /* first rulenum index = 0 1801eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson first c->num_rules index = 1 */ 1802eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson if (rulenum > c->num_rules) { 1803e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = E2BIG; 1804e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1805e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1806e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1807631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson /* If we are inserting at the end just take advantage of the 1808631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson double linked list, insert will happen before the entry 1809631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson prev points to. */ 1810631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson if (rulenum == c->num_rules) { 1811eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson prev = &c->rules; 1812a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else if (rulenum + 1 <= c->num_rules/2) { 1813631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson r = iptcc_get_rule_num(c, rulenum + 1); 1814a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson prev = &r->list; 1815a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else { 1816a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 1817631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson prev = &r->list; 1818631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson } 1819eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson 1820aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1821aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1822aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1823aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1824aae69bed019826ddec93f761514652a93d871e49Harald Welte 1825aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1826aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1827aae69bed019826ddec93f761514652a93d871e49Harald Welte 18281c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1829aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 18300113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1831aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1832aae69bed019826ddec93f761514652a93d871e49Harald Welte 1833eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson list_add_tail(&r->list, prev); 1834aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules++; 1835aae69bed019826ddec93f761514652a93d871e49Harald Welte 18361c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 1837e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1838aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1839e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1840e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1841e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Atomically replace rule `rulenum' in `chain' with `fw'. */ 1842e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 184379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_REPLACE_ENTRY(const IPT_CHAINLABEL chain, 184479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 184579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 18461c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1847e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1848aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1849aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *old; 1850e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 185179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_REPLACE_ENTRY; 1852e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18531c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1854e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1855e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1856e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1857e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18580f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson if (rulenum >= c->num_rules) { 1859e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = E2BIG; 1860e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1861e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1862e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18630f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson /* Take advantage of the double linked list if possible. */ 18640f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson if (rulenum + 1 <= c->num_rules/2) { 18650f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson old = iptcc_get_rule_num(c, rulenum + 1); 18660f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson } else { 18670f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson old = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 18680f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson } 18690f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson 1870aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1871aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1872e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1873aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1874aae69bed019826ddec93f761514652a93d871e49Harald Welte 1875aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1876aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1877e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18781c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1879aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 18800113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1881aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1882aae69bed019826ddec93f761514652a93d871e49Harald Welte 1883aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add(&r->list, &old->list); 1884aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(old); 18850113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 18861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 1887aae69bed019826ddec93f761514652a93d871e49Harald Welte 1888aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1889e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1890e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18910113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Append entry `fw' to chain `chain'. Equivalent to insert with 1892e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher rulenum = length of chain. */ 1893e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 189479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_APPEND_ENTRY(const IPT_CHAINLABEL chain, 189579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 18961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1897e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1898aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1899aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1900e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 190179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_APPEND_ENTRY; 19021c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1903aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("unable to find chain `%s'\n", chain); 1904e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1905e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1906e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1907e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1908aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1909aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("unable to allocate rule for chain `%s'\n", chain); 1910aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1911aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1912aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1913aae69bed019826ddec93f761514652a93d871e49Harald Welte 1914aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1915aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1916aae69bed019826ddec93f761514652a93d871e49Harald Welte 19171c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 191812009531e6a96a62ee398eb0ab3e9ec0b3b57701Martin Josefsson DEBUGP("unable to map target of rule for chain `%s'\n", chain); 1919aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 19200113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1921aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1922aae69bed019826ddec93f761514652a93d871e49Harald Welte 1923aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add_tail(&r->list, &c->rules); 1924aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules++; 1925aae69bed019826ddec93f761514652a93d871e49Harald Welte 19261c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 19270113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1928aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1929e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1930e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1931e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 193279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellmatch_different(const STRUCT_ENTRY_MATCH *a, 1933edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell const unsigned char *a_elems, 1934edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell const unsigned char *b_elems, 1935edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned char **maskptr) 1936e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 193779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY_MATCH *b; 1938edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned int i; 1939e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1940e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Offset of b is the same as a. */ 194130fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell b = (void *)b_elems + ((unsigned char *)a - a_elems); 1942e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1943228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell if (a->u.match_size != b->u.match_size) 1944e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1945e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1946228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell if (strcmp(a->u.user.name, b->u.user.name) != 0) 1947e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1948e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 194973ef09b21573ddb17ff75e5fd06fd4b52ec8ea40Rusty Russell *maskptr += ALIGN(sizeof(*a)); 1950edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell 195173ef09b21573ddb17ff75e5fd06fd4b52ec8ea40Rusty Russell for (i = 0; i < a->u.match_size - ALIGN(sizeof(*a)); i++) 1952edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell if (((a->data[i] ^ b->data[i]) & (*maskptr)[i]) != 0) 1953edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell return 1; 1954edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell *maskptr += i; 1955edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell return 0; 1956edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell} 1957edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell 1958edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russellstatic inline int 1959733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russelltarget_same(struct rule_head *a, struct rule_head *b,const unsigned char *mask) 1960edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell{ 1961edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned int i; 1962733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell STRUCT_ENTRY_TARGET *ta, *tb; 1963e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1964733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (a->type != b->type) 1965733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1966733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1967733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell ta = GET_TARGET(a->entry); 1968733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell tb = GET_TARGET(b->entry); 1969733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1970733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell switch (a->type) { 1971733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_FALLTHROUGH: 1972733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 1973733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_JUMP: 1974733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return a->jump == b->jump; 1975733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_STANDARD: 1976733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return ((STRUCT_STANDARD_TARGET *)ta)->verdict 1977733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell == ((STRUCT_STANDARD_TARGET *)tb)->verdict; 1978733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_MODULE: 1979733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (ta->u.target_size != tb->u.target_size) 1980733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1981733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (strcmp(ta->u.user.name, tb->u.user.name) != 0) 1982733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1983733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1984733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell for (i = 0; i < ta->u.target_size - sizeof(*ta); i++) 1985daade4452715cbd1feea05d5231c5e38e3b0b98bRusty Russell if (((ta->data[i] ^ tb->data[i]) & mask[i]) != 0) 1986733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1987733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 1988733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell default: 1989733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell fprintf(stderr, "ERROR: bad type %i\n", a->type); 1990733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell abort(); 1991733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell } 1992e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1993e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1994733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russellstatic unsigned char * 199579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellis_same(const STRUCT_ENTRY *a, 199679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *b, 199779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned char *matchmask); 1998e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 19990113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Delete the first rule in `chain' which matches `fw'. */ 2000e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 200179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_DELETE_ENTRY(const IPT_CHAINLABEL chain, 200279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *origfw, 200379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned char *matchmask, 20041c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2005e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2006aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2007e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell struct rule_head *r, *i; 2008e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 200979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_ENTRY; 20101c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2011e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2012e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2013e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2014e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2015e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell /* Create a rule_head from origfw. */ 2016e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell r = iptcc_alloc_rule(c, origfw->next_offset); 2017e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell if (!r) { 20180113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = ENOMEM; 20190113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 20200113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 20210113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2022e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell memcpy(r->entry, origfw, origfw->next_offset); 2023e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell r->counter_map.maptype = COUNTER_MAP_NOMAP; 20241c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 2025e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell DEBUGP("unable to map target of rule for chain `%s'\n", chain); 2026e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell free(r); 2027e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell return 0; 202804a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer } else { 202904a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer /* iptcc_map_target increment target chain references 203004a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer * since this is a fake rule only used for matching 203104a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer * the chain references count is decremented again. 203204a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer */ 203304a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer if (r->type == IPTCC_R_JUMP 203404a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer && r->jump) 203504a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer r->jump->references--; 2036e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell } 2037fe53707285c250c6bb1e434ea6f8271cf061c67bHarald Welte 2038e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell list_for_each_entry(i, &c->rules, list) { 2039733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell unsigned char *mask; 2040733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2041733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell mask = is_same(r->entry, i->entry, matchmask); 2042733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (!mask) 2043733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell continue; 2044733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2045733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (!target_same(r, i, mask)) 2046733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell continue; 2047733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2048733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell /* If we are about to delete the rule that is the 2049733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell * current iterator, move rule iterator back. next 2050733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell * pointer will then point to real next node */ 20511c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (i == handle->rule_iterator_cur) { 20521c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = 20531c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_entry(handle->rule_iterator_cur->list.prev, 2054733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell struct rule_head, list); 2055733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell } 2056fe53707285c250c6bb1e434ea6f8271cf061c67bHarald Welte 2057733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell c->num_rules--; 2058733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell iptcc_delete_rule(i); 20592a5dbbb883fb0cc8a122b47a5d8e08ef3e6ff5bcMartin Josefsson 20601c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2061733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell free(r); 2062733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 2063e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2064e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2065e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell free(r); 2066e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2067e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 20687e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell} 2069aae69bed019826ddec93f761514652a93d871e49Harald Welte 2070e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2071e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Delete the rule in position `rulenum' in `chain'. */ 2072e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 207379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_DELETE_NUM_ENTRY(const IPT_CHAINLABEL chain, 207479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 20751c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2076e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2077aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2078aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2079e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 208079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_NUM_ENTRY; 2081aae69bed019826ddec93f761514652a93d871e49Harald Welte 20821c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2083e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2084e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2085e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2086e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2087a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (rulenum >= c->num_rules) { 2088631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson errno = E2BIG; 2089631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson return 0; 2090631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson } 2091631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson 2092631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson /* Take advantage of the double linked list if possible. */ 2093a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (rulenum + 1 <= c->num_rules/2) { 2094a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num(c, rulenum + 1); 2095a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else { 2096a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 2097e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2098e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2099aae69bed019826ddec93f761514652a93d871e49Harald Welte /* If we are about to delete the rule that is the current 2100aae69bed019826ddec93f761514652a93d871e49Harald Welte * iterator, move rule iterator back. next pointer will then 2101aae69bed019826ddec93f761514652a93d871e49Harald Welte * point to real next node */ 21021c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (r == handle->rule_iterator_cur) { 21031c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = 21041c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_entry(handle->rule_iterator_cur->list.prev, 2105aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head, list); 21060113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 2107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2108aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules--; 2109aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(r); 2110aae69bed019826ddec93f761514652a93d871e49Harald Welte 21111c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 21122a5dbbb883fb0cc8a122b47a5d8e08ef3e6ff5bcMartin Josefsson 2113aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2114e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2115e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2116e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Check the packet `fw' on chain `chain'. Returns the verdict, or 2117e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher NULL and sets errno. */ 2118e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 211979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_CHECK_PACKET(const IPT_CHAINLABEL chain, 212079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_ENTRY *entry, 21211c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2122e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2123664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_CHECK_PACKET; 2124e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOSYS; 2125e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 2126e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2127e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2128e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Flushes the entries in the given chain (ie. empties chain). */ 2129e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 21301c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FLUSH_ENTRIES(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2132aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2133aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *tmp; 2134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21350113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte iptc_fn = TC_FLUSH_ENTRIES; 21361c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2137e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2138e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2139e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2140e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2141aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry_safe(r, tmp, &c->rules, list) { 2142aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(r); 2143aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2144aae69bed019826ddec93f761514652a93d871e49Harald Welte 2145aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules = 0; 2146aae69bed019826ddec93f761514652a93d871e49Harald Welte 21471c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2148aae69bed019826ddec93f761514652a93d871e49Harald Welte 2149aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2150e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2151e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2152e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Zeroes the counters in a chain. */ 2153e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 21541c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_ZERO_ENTRIES(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2155e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2156aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2157aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21587e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 2159664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_ZERO_ENTRIES; 21601c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2161e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2162e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2163e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2164e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2165e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay if (c->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2166e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay c->counter_map.maptype = COUNTER_MAP_ZEROED; 2167e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay 2168aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 2169aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2170aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_ZEROED; 2171e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2172aae69bed019826ddec93f761514652a93d871e49Harald Welte 21731c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2174e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2175e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2176e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2177e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21781cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteSTRUCT_COUNTERS * 21791cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_READ_COUNTER(const IPT_CHAINLABEL chain, 21801cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 21811c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 21821cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2183aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2184aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21851cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21861cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_READ_COUNTER; 21871cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte CHECK(*handle); 21881cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21891c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 21901cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 21911cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return NULL; 21921cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 21931cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2194aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 21950113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 21960113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return NULL; 21970113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 21980113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2199aae69bed019826ddec93f761514652a93d871e49Harald Welte return &r->entry[0].counters; 22001cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22011cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22021cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welteint 22031cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_ZERO_COUNTER(const IPT_CHAINLABEL chain, 22041cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 22051c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 22061cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2207aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2208aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 22091cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22101cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_ZERO_COUNTER; 22111c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 22121cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22131c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 22141cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 22151cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 0; 22161cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 22171cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2218aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 22190113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 22200113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 22210113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 22220113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2223aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2224aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_ZEROED; 22251cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22261c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 22271cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22281cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 1; 22291cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22301cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22311cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welteint 22321cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_SET_COUNTER(const IPT_CHAINLABEL chain, 22331cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 22341cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_COUNTERS *counters, 22351c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 22361cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2237aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2238aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 22391cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_ENTRY *e; 22401cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22411cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_SET_COUNTER; 22421c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 22431cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22441c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 22451cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 22461cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 0; 22471cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 22480113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2249aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 22500113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 22510113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 22520113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 22530113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2254aae69bed019826ddec93f761514652a93d871e49Harald Welte e = r->entry; 2255aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 22560113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 22570113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte memcpy(&e->counters, counters, sizeof(STRUCT_COUNTERS)); 22581cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 22601cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22611cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 1; 22621cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22631cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2264e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Creates a new chain. */ 2265e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* To create a chain, create two rules: error node and unconditional 2266e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * return. */ 2267e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 22681c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_CREATE_CHAIN(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2269e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2270aae69bed019826ddec93f761514652a93d871e49Harald Welte static struct chain_head *c; 22711f23d3c2544f4329b31804392abc4eff434ba308Patrick McHardy int capacity; 22721f23d3c2544f4329b31804392abc4eff434ba308Patrick McHardy int exceeded; 2273e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 227479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_CREATE_CHAIN; 2275e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2276e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* find_label doesn't cover built-in targets: DROP, ACCEPT, 2277e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher QUEUE, RETURN. */ 22781c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (iptcc_find_label(chain, handle) 227979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_DROP) == 0 228079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_ACCEPT) == 0 228167088e73ce7707229c56987868f112051defca5aRusty Russell || strcmp(chain, LABEL_QUEUE) == 0 228279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_RETURN) == 0) { 2283aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Chain `%s' already exists\n", chain); 2284e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EEXIST; 2285e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2286e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2287e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 228879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strlen(chain)+1 > sizeof(IPT_CHAINLABEL)) { 2289aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Chain name `%s' too long\n", chain); 2290e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2291e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2292e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2293e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2294aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_alloc_chain_head(chain, 0); 2295aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 2296aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Cannot allocate memory for chain `%s'\n", chain); 2297aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 2298aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 2299e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2300aae69bed019826ddec93f761514652a93d871e49Harald Welte } 23011c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->num_chains++; /* New user defined chain */ 2302e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2303aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Creating chain `%s'\n", chain); 23041c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptc_insert_chain(handle, c); /* Insert sorted */ 2305e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 230601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Inserting chains don't change the correctness of the chain 230701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index (except if its smaller than index[0], but that 230801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * handled by iptc_insert_chain). It only causes longer lists 230901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * in the buckets. Thus, only rebuild chain index when the 231001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * capacity is exceed with CHAIN_INDEX_INSERT_MAX chains. 231101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 23121c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt capacity = handle->chain_index_sz * CHAIN_INDEX_BUCKET_LEN; 23131c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt exceeded = handle->num_chains - capacity; 231401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (exceeded > CHAIN_INDEX_INSERT_MAX) { 231501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Capacity(%d) exceeded(%d) rebuild (chains:%d)\n", 23161c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt capacity, exceeded, handle->num_chains); 23171c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_rebuild(handle); 231801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 231901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 23201c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2321e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2322aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2323e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2324e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2325e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Get the number of references to this chain. */ 2326e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 232779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_GET_REFERENCES(unsigned int *ref, const IPT_CHAINLABEL chain, 23281c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2329e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2330aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2331e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2332664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_GET_REFERENCES; 23331c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2334e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2335e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2336e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2337e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2338aae69bed019826ddec93f761514652a93d871e49Harald Welte *ref = c->references; 2339aae69bed019826ddec93f761514652a93d871e49Harald Welte 2340e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2341e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2342e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2343e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Deletes a chain. */ 2344e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 23451c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_DELETE_CHAIN(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2346e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2347e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int references; 2348aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 23497e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 235079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_CHAIN; 2351e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23521c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2353aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot find chain `%s'\n", chain); 2354aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 2355aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 2356aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2357aae69bed019826ddec93f761514652a93d871e49Harald Welte 23581c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (TC_BUILTIN(chain, handle)) { 2359aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot remove builtin chain `%s'\n", chain); 2360e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2361e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2362e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2363e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2364aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!TC_GET_REFERENCES(&references, chain, handle)) { 2365aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot get references on chain `%s'\n", chain); 2366e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2367e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2368e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2369aae69bed019826ddec93f761514652a93d871e49Harald Welte if (references > 0) { 2370aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' still has references\n", chain); 2371aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = EMLINK; 2372e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2373e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2374e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2375aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c->num_rules) { 2376aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' is not empty\n", chain); 2377e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOTEMPTY; 2378e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2379e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2380e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2381aae69bed019826ddec93f761514652a93d871e49Harald Welte /* If we are about to delete the chain that is the current 238248bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer * iterator, move chain iterator forward. */ 23831c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (c == handle->chain_iterator_cur) 23841c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 2385aae69bed019826ddec93f761514652a93d871e49Harald Welte 23861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->num_chains--; /* One user defined chain deleted */ 238748bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer 238801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer //list_del(&c->list); /* Done in iptcc_chain_index_delete_chain() */ 23891c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_delete_chain(c, handle); 239001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer free(c); 239101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 2392aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' deleted\n", chain); 23930113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 23941c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2395aae69bed019826ddec93f761514652a93d871e49Harald Welte 2396aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2397e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2398e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2399e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Renames a chain. */ 240079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellint TC_RENAME_CHAIN(const IPT_CHAINLABEL oldname, 240179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const IPT_CHAINLABEL newname, 24021c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2403e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2404aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 240579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_RENAME_CHAIN; 2406e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 24071de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte /* find_label doesn't cover built-in targets: DROP, ACCEPT, 24081de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte QUEUE, RETURN. */ 24091c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (iptcc_find_label(newname, handle) 241079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_DROP) == 0 241179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_ACCEPT) == 0 24121de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte || strcmp(newname, LABEL_QUEUE) == 0 241379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_RETURN) == 0) { 2414e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EEXIST; 2415e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2416e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2417e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 24181c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(oldname, handle)) 24191c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt || TC_BUILTIN(oldname, handle)) { 2420e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2421e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2422e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2423e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 242479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strlen(newname)+1 > sizeof(IPT_CHAINLABEL)) { 2425e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2426e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2427e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2428e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2429aae69bed019826ddec93f761514652a93d871e49Harald Welte strncpy(c->name, newname, sizeof(IPT_CHAINLABEL)); 2430aae69bed019826ddec93f761514652a93d871e49Harald Welte 24311c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 24320113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2433e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2434e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2435e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2436e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Sets the policy on a built-in chain. */ 2437e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 243879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_SET_POLICY(const IPT_CHAINLABEL chain, 243979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const IPT_CHAINLABEL policy, 24401cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_COUNTERS *counters, 24411c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2442e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2443aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2444e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 244579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_SET_POLICY; 2446aae69bed019826ddec93f761514652a93d871e49Harald Welte 24471c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2448aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot find chain `%s'\n", chain); 2449c8264991454b5e77279830736f80ea3153b6f814Marc Boucher errno = ENOENT; 2450e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2451aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2452e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2453aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 2454aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot set policy of userdefinedchain `%s'\n", chain); 2455aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 24569e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte return 0; 24579e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte } 24589e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte 245979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strcmp(policy, LABEL_ACCEPT) == 0) 2460aae69bed019826ddec93f761514652a93d871e49Harald Welte c->verdict = -NF_ACCEPT - 1; 246179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(policy, LABEL_DROP) == 0) 2462aae69bed019826ddec93f761514652a93d871e49Harald Welte c->verdict = -NF_DROP - 1; 2463e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else { 2464e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2465e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2466e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 24671cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 24681cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte if (counters) { 24691cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte /* set byte and packet counters */ 2470aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&c->counters, counters, sizeof(STRUCT_COUNTERS)); 2471aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.maptype = COUNTER_MAP_SET; 24721cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } else { 2473aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.maptype = COUNTER_MAP_NOMAP; 24741cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 24751cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 24761c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2477e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2478e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2479e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2480e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2481e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Without this, on gcc 2.7.2.3, we get: 248279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell libiptc.c: In function `TC_COMMIT': 2483e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher libiptc.c:833: fixed or forbidden register was spilled. 2484e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher This may be due to a compiler bug or to impossible asm 2485e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher statements or clauses. 2486e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher*/ 2487e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void 248879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellsubtract_counters(STRUCT_COUNTERS *answer, 248979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_COUNTERS *a, 249079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_COUNTERS *b) 2491e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2492e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher answer->pcnt = a->pcnt - b->pcnt; 2493e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher answer->bcnt = a->bcnt - b->bcnt; 2494e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2495e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2496aae69bed019826ddec93f761514652a93d871e49Harald Welte 2497dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardtstatic void counters_nomap(STRUCT_COUNTERS_INFO *newcounters, unsigned int idx) 2498aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2499dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt newcounters->counters[idx] = ((STRUCT_COUNTERS) { 0, 0}); 2500aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("NOMAP => zero\n"); 2501aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2502aae69bed019826ddec93f761514652a93d871e49Harald Welte 2503aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_normal_map(STRUCT_COUNTERS_INFO *newcounters, 2504dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt STRUCT_REPLACE *repl, unsigned int idx, 2505aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int mappos) 2506aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2507aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Original read: X. 2508aae69bed019826ddec93f761514652a93d871e49Harald Welte * Atomic read on replacement: X + Y. 2509aae69bed019826ddec93f761514652a93d871e49Harald Welte * Currently in kernel: Z. 2510aae69bed019826ddec93f761514652a93d871e49Harald Welte * Want in kernel: X + Y + Z. 2511aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in X + Y 2512aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in replacement read. 2513aae69bed019826ddec93f761514652a93d871e49Harald Welte */ 2514dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt newcounters->counters[idx] = repl->counters[mappos]; 2515aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("NORMAL_MAP => mappos %u \n", mappos); 2516aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2517aae69bed019826ddec93f761514652a93d871e49Harald Welte 2518aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_map_zeroed(STRUCT_COUNTERS_INFO *newcounters, 2519dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt STRUCT_REPLACE *repl, unsigned int idx, 2520dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int mappos, STRUCT_COUNTERS *counters) 2521aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2522aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Original read: X. 2523aae69bed019826ddec93f761514652a93d871e49Harald Welte * Atomic read on replacement: X + Y. 2524aae69bed019826ddec93f761514652a93d871e49Harald Welte * Currently in kernel: Z. 2525aae69bed019826ddec93f761514652a93d871e49Harald Welte * Want in kernel: Y + Z. 2526aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in Y. 2527aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in (replacement read - original read). 2528aae69bed019826ddec93f761514652a93d871e49Harald Welte */ 2529dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt subtract_counters(&newcounters->counters[idx], 2530aae69bed019826ddec93f761514652a93d871e49Harald Welte &repl->counters[mappos], 2531aae69bed019826ddec93f761514652a93d871e49Harald Welte counters); 2532aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("ZEROED => mappos %u\n", mappos); 2533aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2534aae69bed019826ddec93f761514652a93d871e49Harald Welte 2535aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_map_set(STRUCT_COUNTERS_INFO *newcounters, 2536dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int idx, STRUCT_COUNTERS *counters) 2537aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2538aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Want to set counter (iptables-restore) */ 2539aae69bed019826ddec93f761514652a93d871e49Harald Welte 2540dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt memcpy(&newcounters->counters[idx], counters, 2541aae69bed019826ddec93f761514652a93d871e49Harald Welte sizeof(STRUCT_COUNTERS)); 2542aae69bed019826ddec93f761514652a93d871e49Harald Welte 2543aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("SET\n"); 2544aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2545aae69bed019826ddec93f761514652a93d871e49Harald Welte 2546aae69bed019826ddec93f761514652a93d871e49Harald Welte 2547e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 25481c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_COMMIT(struct xtc_handle *handle) 2549e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2550e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Replace, then map back the counters. */ 255179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_REPLACE *repl; 255279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_COUNTERS_INFO *newcounters; 2553aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2554aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret; 2555841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson size_t counterlen; 2556aae69bed019826ddec93f761514652a93d871e49Harald Welte int new_number; 2557aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int new_size; 2558e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2559664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_COMMIT; 2560e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(*handle); 2561841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 2562e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Don't commit if nothing changed. */ 25631c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!handle->changed) 2564e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher goto finished; 2565e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 25661c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt new_number = iptcc_compile_table_prep(handle, &new_size); 2567aae69bed019826ddec93f761514652a93d871e49Harald Welte if (new_number < 0) { 2568aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 2569d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_zero; 2570aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2571aae69bed019826ddec93f761514652a93d871e49Harald Welte 2572aae69bed019826ddec93f761514652a93d871e49Harald Welte repl = malloc(sizeof(*repl) + new_size); 2573e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!repl) { 2574e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2575d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_zero; 2576e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2577ad3b4f9973ac15981b98b8fc4d364ef1ce524212Martin Josefsson memset(repl, 0, sizeof(*repl) + new_size); 2578aae69bed019826ddec93f761514652a93d871e49Harald Welte 2579e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell#if 0 2580e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell TC_DUMP_ENTRIES(*handle); 2581e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell#endif 2582e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell 2583aae69bed019826ddec93f761514652a93d871e49Harald Welte counterlen = sizeof(STRUCT_COUNTERS_INFO) 2584aae69bed019826ddec93f761514652a93d871e49Harald Welte + sizeof(STRUCT_COUNTERS) * new_number; 2585e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2586e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* These are the old counters we will get from kernel */ 258779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell repl->counters = malloc(sizeof(STRUCT_COUNTERS) 25881c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt * handle->info.num_entries); 2589e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!repl->counters) { 2590e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2591d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_repl; 2592e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2593e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* These are the counters we're going to put back, later. */ 2594e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher newcounters = malloc(counterlen); 2595e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!newcounters) { 2596e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2597d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_repl_counters; 2598e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2599aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(newcounters, 0, counterlen); 2600e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 26011c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt strcpy(repl->name, handle->info.name); 2602aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->num_entries = new_number; 2603aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->size = new_size; 2604aae69bed019826ddec93f761514652a93d871e49Harald Welte 26051c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt repl->num_counters = handle->info.num_entries; 26061c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt repl->valid_hooks = handle->info.valid_hooks; 2607aae69bed019826ddec93f761514652a93d871e49Harald Welte 2608aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("num_entries=%u, size=%u, num_counters=%u\n", 2609aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->num_entries, repl->size, repl->num_counters); 2610aae69bed019826ddec93f761514652a93d871e49Harald Welte 26111c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt ret = iptcc_compile_table(handle, repl); 2612aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) { 2613aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ret; 2614d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2615aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2616aae69bed019826ddec93f761514652a93d871e49Harald Welte 2617aae69bed019826ddec93f761514652a93d871e49Harald Welte 2618aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 2619aae69bed019826ddec93f761514652a93d871e49Harald Welte { 2620aae69bed019826ddec93f761514652a93d871e49Harald Welte int fd = open("/tmp/libiptc-so_set_replace.blob", 2621aae69bed019826ddec93f761514652a93d871e49Harald Welte O_CREAT|O_WRONLY); 2622aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 2623aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, repl, sizeof(*repl) + repl->size); 2624aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 2625aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2626aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2627aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 2628e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2629d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte ret = setsockopt(sockfd, TC_IPPROTO, SO_SET_REPLACE, repl, 2630d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte sizeof(*repl) + repl->size); 2631e0865ad29d53b0d3d34b5cc8b5e023eb593172a8Patrick McHardy if (ret < 0) 2632d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2633e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2634e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Put counters back. */ 26351c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt strcpy(newcounters->name, handle->info.name); 2636aae69bed019826ddec93f761514652a93d871e49Harald Welte newcounters->num_counters = new_number; 2637aae69bed019826ddec93f761514652a93d871e49Harald Welte 26381c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_for_each_entry(c, &handle->chains, list) { 2639aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2640aae69bed019826ddec93f761514652a93d871e49Harald Welte 2641aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Builtin chains have their own counters */ 2642aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcc_is_builtin(c)) { 2643aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("counter for chain-index %u: ", c->foot_index); 2644aae69bed019826ddec93f761514652a93d871e49Harald Welte switch(c->counter_map.maptype) { 2645aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NOMAP: 2646aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_nomap(newcounters, c->foot_index); 2647aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2648aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NORMAL_MAP: 2649aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_normal_map(newcounters, repl, 2650aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index, 2651aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.mappos); 2652aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2653aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_ZEROED: 2654aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_zeroed(newcounters, repl, 2655aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index, 2656aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.mappos, 2657aae69bed019826ddec93f761514652a93d871e49Harald Welte &c->counters); 2658aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2659aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_SET: 2660aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_set(newcounters, c->foot_index, 2661aae69bed019826ddec93f761514652a93d871e49Harald Welte &c->counters); 2662aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2663aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2664aae69bed019826ddec93f761514652a93d871e49Harald Welte } 26651cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2666aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 2667aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("counter for index %u: ", r->index); 2668aae69bed019826ddec93f761514652a93d871e49Harald Welte switch (r->counter_map.maptype) { 2669aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NOMAP: 2670aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_nomap(newcounters, r->index); 2671aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2672aae69bed019826ddec93f761514652a93d871e49Harald Welte 2673aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NORMAL_MAP: 2674aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_normal_map(newcounters, repl, 2675aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index, 2676aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos); 2677aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2678aae69bed019826ddec93f761514652a93d871e49Harald Welte 2679aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_ZEROED: 2680aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_zeroed(newcounters, repl, 2681aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index, 2682aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos, 2683aae69bed019826ddec93f761514652a93d871e49Harald Welte &r->entry->counters); 2684aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2685aae69bed019826ddec93f761514652a93d871e49Harald Welte 2686aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_SET: 2687aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_set(newcounters, r->index, 2688aae69bed019826ddec93f761514652a93d871e49Harald Welte &r->entry->counters); 2689aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2690aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2691e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2692e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 269362527ce5f0ffaa5b18aa118f64c21af238ddc156Rusty Russell 2694aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 2695aae69bed019826ddec93f761514652a93d871e49Harald Welte { 2696aae69bed019826ddec93f761514652a93d871e49Harald Welte int fd = open("/tmp/libiptc-so_set_add_counters.blob", 2697aae69bed019826ddec93f761514652a93d871e49Harald Welte O_CREAT|O_WRONLY); 2698aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 2699aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, newcounters, counterlen); 2700aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 2701aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2702aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2703aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 2704aae69bed019826ddec93f761514652a93d871e49Harald Welte 2705d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte ret = setsockopt(sockfd, TC_IPPROTO, SO_SET_ADD_COUNTERS, 2706d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte newcounters, counterlen); 2707e0865ad29d53b0d3d34b5cc8b5e023eb593172a8Patrick McHardy if (ret < 0) 2708d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2709e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2710e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(repl->counters); 2711e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(repl); 2712e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(newcounters); 2713e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2714d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Weltefinished: 2715e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2716d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte 2717d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_newcounters: 2718d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(newcounters); 2719d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_repl_counters: 2720d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(repl->counters); 2721d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_repl: 2722d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(repl); 2723d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_zero: 2724d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte return 0; 2725e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2726e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2727e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Get raw socket. */ 2728e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 27290b63936140032deac44072951451bdf47b54296aPatrick McHardyTC_GET_RAW_SOCKET(void) 2730e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2731e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return sockfd; 2732e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2733e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2734e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Translates errno numbers into more human-readable form than strerror. */ 2735e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 273679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_STRERROR(int err) 2737e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2738e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i; 2739e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct table_struct { 2740e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher void *fn; 2741e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int err; 2742e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const char *message; 2743e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } table [] = 27444ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { { TC_INIT, EPERM, "Permission denied (you must be root)" }, 274579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INIT, EINVAL, "Module is wrong version" }, 27464ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { TC_INIT, ENOENT, 27474ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte "Table does not exist (do you need to insmod?)" }, 274879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, ENOTEMPTY, "Chain is not empty" }, 274979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, EINVAL, "Can't delete built-in chain" }, 275079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, EMLINK, 2751e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Can't delete chain with references left" }, 275279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_CREATE_CHAIN, EEXIST, "Chain already exists" }, 275379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, E2BIG, "Index of insertion too big" }, 275479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_REPLACE_ENTRY, E2BIG, "Index of replacement too big" }, 275579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_NUM_ENTRY, E2BIG, "Index of deletion too big" }, 27561cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte { TC_READ_COUNTER, E2BIG, "Index of counter too big" }, 27571cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte { TC_ZERO_COUNTER, E2BIG, "Index of counter too big" }, 275879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, ELOOP, "Loop found in table" }, 275979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, EINVAL, "Target problem" }, 2760e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* EINVAL for CHECK probably means bad interface. */ 276179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_CHECK_PACKET, EINVAL, 2762c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad arguments (does that interface exist?)" }, 27634ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { TC_CHECK_PACKET, ENOSYS, 27644ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte "Checking will most likely never get implemented" }, 2765e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* ENOENT for DELETE probably means no matching rule */ 276679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_ENTRY, ENOENT, 2767c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad rule (does a matching rule exist in that chain?)" }, 276879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_SET_POLICY, ENOENT, 2769c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad built-in chain name" }, 277079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_SET_POLICY, EINVAL, 2771c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad policy name" }, 27724ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte 27734ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, 0, "Incompatible with this kernel" }, 27744ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOPROTOOPT, "iptables who? (do you need to insmod?)" }, 27754ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOSYS, "Will be implemented real soon. I promise ;)" }, 27764ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOMEM, "Memory allocation problem" }, 27774ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOENT, "No chain/target/match by that name" }, 2778e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher }; 2779e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2780e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < sizeof(table)/sizeof(struct table_struct); i++) { 2781e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if ((!table[i].fn || table[i].fn == iptc_fn) 2782e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher && table[i].err == err) 2783e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return table[i].message; 2784e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2785e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2786e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return strerror(err); 2787e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2788