130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* 230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * ebtables 330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * 430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * Authors: 530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * Bart De Schuymer <bdschuym@pandora.be> 630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * 730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * ebtables.c,v 2.0, April, 2002 830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * 912e1f28cce28271eb109a5bae818a804f0c3bb27Christopher Ferris * This code is strongly inspired by the iptables code which is 1030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * Copyright (C) 1999 Paul `Rusty' Russell & Michael J. Neuling 1130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng */ 1230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 1330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#ifndef _UAPI__LINUX_BRIDGE_EFF_H 1430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define _UAPI__LINUX_BRIDGE_EFF_H 15ccfaccd726a369b7df72e251710755233d176e5aChristopher Ferris#include <linux/types.h> 16ccfaccd726a369b7df72e251710755233d176e5aChristopher Ferris#include <linux/if.h> 1730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#include <linux/netfilter_bridge.h> 1830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 1930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_TABLE_MAXNAMELEN 32 2030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_CHAIN_MAXNAMELEN EBT_TABLE_MAXNAMELEN 2130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_FUNCTION_MAXNAMELEN EBT_TABLE_MAXNAMELEN 2230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 2330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* verdicts >0 are "branches" */ 2430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_ACCEPT -1 2530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_DROP -2 2630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_CONTINUE -3 2730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_RETURN -4 2830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define NUM_STANDARD_TARGETS 4 2930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* ebtables target modules store the verdict inside an int. We can 3030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * reclaim a part of this int for backwards compatible extensions. 3130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * The 4 lsb are more than enough to store the verdict. */ 3230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_VERDICT_BITS 0x0000000F 3330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 3430692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct xt_match; 3530692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct xt_target; 3630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 3730692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_counter { 38ccfaccd726a369b7df72e251710755233d176e5aChristopher Ferris __u64 pcnt; 39ccfaccd726a369b7df72e251710755233d176e5aChristopher Ferris __u64 bcnt; 4030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 4130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 4230692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_replace { 4330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char name[EBT_TABLE_MAXNAMELEN]; 4430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int valid_hooks; 4530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* nr of rules in the table */ 4630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int nentries; 4730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* total size of the entries */ 4830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int entries_size; 4930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* start of the chains */ 5030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_entries __user *hook_entry[NF_BR_NUMHOOKS]; 5130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* nr of counters userspace expects back */ 5230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int num_counters; 5330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* where the kernel will put the old counters */ 5430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_counter __user *counters; 5530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char __user *entries; 5630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 5730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 5830692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_replace_kernel { 5930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char name[EBT_TABLE_MAXNAMELEN]; 6030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int valid_hooks; 6130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* nr of rules in the table */ 6230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int nentries; 6330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* total size of the entries */ 6430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int entries_size; 6530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* start of the chains */ 6630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_entries *hook_entry[NF_BR_NUMHOOKS]; 6730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* nr of counters userspace expects back */ 6830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int num_counters; 6930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* where the kernel will put the old counters */ 7030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_counter *counters; 7130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char *entries; 7230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 7330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 7430692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_entries { 7530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* this field is always set to zero 7630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * See EBT_ENTRY_OR_ENTRIES. 7730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * Must be same size as ebt_entry.bitmask */ 7830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int distinguisher; 7930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* the chain name */ 8030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char name[EBT_CHAIN_MAXNAMELEN]; 8130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* counter offset for this chain */ 8230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int counter_offset; 8330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* one standard (accept, drop, return) per hook */ 8430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng int policy; 8530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* nr. of entries */ 8630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int nentries; 8730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* entry list */ 8830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char data[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); 8930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 9030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 9130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* used for the bitmask of struct ebt_entry */ 9230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 9330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* This is a hack to make a difference between an ebt_entry struct and an 9430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * ebt_entries struct when traversing the entries from start to end. 9530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * Using this simplifies the code a lot, while still being able to use 9630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * ebt_entries. 9730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * Contrary, iptables doesn't use something like ebt_entries and therefore uses 9830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * different techniques for naming the policy and such. So, iptables doesn't 9930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * need a hack like this. 10030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng */ 10130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_ENTRY_OR_ENTRIES 0x01 10230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* these are the normal masks */ 10330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_NOPROTO 0x02 10430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_802_3 0x04 10530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SOURCEMAC 0x08 10630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_DESTMAC 0x10 10730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_F_MASK (EBT_NOPROTO | EBT_802_3 | EBT_SOURCEMAC | EBT_DESTMAC \ 10830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng | EBT_ENTRY_OR_ENTRIES) 10930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 11030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_IPROTO 0x01 11130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_IIN 0x02 11230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_IOUT 0x04 11330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_ISOURCE 0x8 11430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_IDEST 0x10 11530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_ILOGICALIN 0x20 11630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_ILOGICALOUT 0x40 11730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_INV_MASK (EBT_IPROTO | EBT_IIN | EBT_IOUT | EBT_ILOGICALIN \ 11830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng | EBT_ILOGICALOUT | EBT_ISOURCE | EBT_IDEST) 11930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 12030692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_entry_match { 12130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng union { 12230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char name[EBT_FUNCTION_MAXNAMELEN]; 12330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct xt_match *match; 12430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } u; 12530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* size of data */ 12630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int match_size; 12730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char data[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); 12830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 12930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 13030692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_entry_watcher { 13130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng union { 13230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char name[EBT_FUNCTION_MAXNAMELEN]; 13330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct xt_target *watcher; 13430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } u; 13530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* size of data */ 13630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int watcher_size; 13730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char data[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); 13830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 13930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 14030692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_entry_target { 14130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng union { 14230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char name[EBT_FUNCTION_MAXNAMELEN]; 14330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct xt_target *target; 14430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } u; 14530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* size of data */ 14630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int target_size; 14730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char data[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); 14830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 14930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 15030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_STANDARD_TARGET "standard" 15130692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_standard_target { 15230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_entry_target target; 15330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng int verdict; 15430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 15530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 15630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* one entry */ 15730692c65c4174412c90e79489e98ab85c1a7412fBen Chengstruct ebt_entry { 15830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* this needs to be the first field */ 15930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int bitmask; 16030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int invflags; 16130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __be16 ethproto; 16230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* the physical in-dev */ 16330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char in[IFNAMSIZ]; 16430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* the logical in-dev */ 16530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char logical_in[IFNAMSIZ]; 16630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* the physical out-dev */ 16730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char out[IFNAMSIZ]; 16830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* the logical out-dev */ 16930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng char logical_out[IFNAMSIZ]; 17030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char sourcemac[ETH_ALEN]; 17130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char sourcemsk[ETH_ALEN]; 17230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char destmac[ETH_ALEN]; 17330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char destmsk[ETH_ALEN]; 17430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* sizeof ebt_entry + matches */ 17530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int watchers_offset; 17630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* sizeof ebt_entry + matches + watchers */ 17730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int target_offset; 17830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng /* sizeof ebt_entry + matches + watchers + target */ 17930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int next_offset; 18030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned char elems[0] __attribute__ ((aligned (__alignof__(struct ebt_replace)))); 18130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}; 18230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 18330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* {g,s}etsockopt numbers */ 18430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_BASE_CTL 128 18530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 18630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_SET_ENTRIES (EBT_BASE_CTL) 18730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_SET_COUNTERS (EBT_SO_SET_ENTRIES+1) 18830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_SET_MAX (EBT_SO_SET_COUNTERS+1) 18930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 19030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_GET_INFO (EBT_BASE_CTL) 19130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_GET_ENTRIES (EBT_SO_GET_INFO+1) 19230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_GET_INIT_INFO (EBT_SO_GET_ENTRIES+1) 19330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_GET_INIT_ENTRIES (EBT_SO_GET_INIT_INFO+1) 19430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_SO_GET_MAX (EBT_SO_GET_INIT_ENTRIES+1) 19530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 19630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 19730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng/* blatently stolen from ip_tables.h 19830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng * fn returns 0 to continue iteration */ 19930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_MATCH_ITERATE(e, fn, args...) \ 20030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng({ \ 20130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int __i; \ 20230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng int __ret = 0; \ 20330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_entry_match *__match; \ 20430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng \ 20530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng for (__i = sizeof(struct ebt_entry); \ 20630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __i < (e)->watchers_offset; \ 20730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __i += __match->match_size + \ 20830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng sizeof(struct ebt_entry_match)) { \ 20930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __match = (void *)(e) + __i; \ 21030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng \ 21130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret = fn(__match , ## args); \ 21230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__ret != 0) \ 21330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng break; \ 21430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } \ 21530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__ret == 0) { \ 21630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__i != (e)->watchers_offset) \ 21730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret = -EINVAL; \ 21830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } \ 21930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret; \ 22030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}) 22130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 22230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_WATCHER_ITERATE(e, fn, args...) \ 22330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng({ \ 22430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int __i; \ 22530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng int __ret = 0; \ 22630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_entry_watcher *__watcher; \ 22730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng \ 22830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng for (__i = e->watchers_offset; \ 22930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __i < (e)->target_offset; \ 23030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __i += __watcher->watcher_size + \ 23130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng sizeof(struct ebt_entry_watcher)) { \ 23230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __watcher = (void *)(e) + __i; \ 23330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng \ 23430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret = fn(__watcher , ## args); \ 23530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__ret != 0) \ 23630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng break; \ 23730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } \ 23830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__ret == 0) { \ 23930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__i != (e)->target_offset) \ 24030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret = -EINVAL; \ 24130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } \ 24230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret; \ 24330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}) 24430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 24530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#define EBT_ENTRY_ITERATE(entries, size, fn, args...) \ 24630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng({ \ 24730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng unsigned int __i; \ 24830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng int __ret = 0; \ 24930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng struct ebt_entry *__entry; \ 25030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng \ 25130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng for (__i = 0; __i < (size);) { \ 25230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __entry = (void *)(entries) + __i; \ 25330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret = fn(__entry , ## args); \ 25430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__ret != 0) \ 25530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng break; \ 25630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__entry->bitmask != 0) \ 25730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __i += __entry->next_offset; \ 25830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng else \ 25930692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __i += sizeof(struct ebt_entries); \ 26030692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } \ 26130692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__ret == 0) { \ 26230692c65c4174412c90e79489e98ab85c1a7412fBen Cheng if (__i != (size)) \ 26330692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret = -EINVAL; \ 26430692c65c4174412c90e79489e98ab85c1a7412fBen Cheng } \ 26530692c65c4174412c90e79489e98ab85c1a7412fBen Cheng __ret; \ 26630692c65c4174412c90e79489e98ab85c1a7412fBen Cheng}) 26730692c65c4174412c90e79489e98ab85c1a7412fBen Cheng 26830692c65c4174412c90e79489e98ab85c1a7412fBen Cheng#endif /* _UAPI__LINUX_BRIDGE_EFF_H */ 269