10f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson/* Library which manipulates firewall rules. Version $Revision$ */ 2e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 3e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Architecture of firewall rules is as follows: 4e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * 5e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Chains go INPUT, FORWARD, OUTPUT then user chains. 6e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Each user chain starts with an ERROR node. 7e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * Every chain ends with an unconditional jump: a RETURN for user chains, 8e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * and a POLICY for built-ins. 9e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher */ 10e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 113ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte/* (C) 1999 Paul ``Rusty'' Russell - Placed under the GNU GPL (See 12a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer * COPYING for details). 13aae69bed019826ddec93f761514652a93d871e49Harald Welte * (C) 2000-2004 by the Netfilter Core Team <coreteam@netfilter.org> 143ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * 15fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * 2003-Jun-20: Harald Welte <laforge@netfilter.org>: 163ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte * - Reimplementation of chain cache to use offsets instead of entries 17fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * 2003-Jun-23: Harald Welte <laforge@netfilter.org>: 180113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte * - performance optimization, sponsored by Astaro AG (http://www.astaro.com/) 19fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte * don't rebuild the chain cache after every operation, instead fix it 20a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer * up after a ruleset change. 21aae69bed019826ddec93f761514652a93d871e49Harald Welte * 2004-Aug-18: Harald Welte <laforge@netfilter.org>: 22a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer * - further performance work: total reimplementation of libiptc. 23aae69bed019826ddec93f761514652a93d871e49Harald Welte * - libiptc now has a real internal (linked-list) represntation of the 24aae69bed019826ddec93f761514652a93d871e49Harald Welte * ruleset and a parser/compiler from/to this internal representation 25aae69bed019826ddec93f761514652a93d871e49Harald Welte * - again sponsored by Astaro AG (http://www.astaro.com/) 26c9477d0dcd01af5d1ee6c95c757a8c814fb3be63Jesper Dangaard Brouer * 27c9477d0dcd01af5d1ee6c95c757a8c814fb3be63Jesper Dangaard Brouer * 2008-Jan+Jul: Jesper Dangaard Brouer <hawk@comx.dk> 28c9477d0dcd01af5d1ee6c95c757a8c814fb3be63Jesper Dangaard Brouer * - performance work: speedup chain list "name" searching. 29c9477d0dcd01af5d1ee6c95c757a8c814fb3be63Jesper Dangaard Brouer * - performance work: speedup initial ruleset parsing. 30c9477d0dcd01af5d1ee6c95c757a8c814fb3be63Jesper Dangaard Brouer * - sponsored by ComX Networks A/S (http://www.comx.dk/) 313ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte */ 32c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski#include <unistd.h> 33c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski#include <fcntl.h> 3415920d160760535e51a57b3834eba45257cfa6d8Harald Welte#include <sys/types.h> 3515920d160760535e51a57b3834eba45257cfa6d8Harald Welte#include <sys/socket.h> 36d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek#include <stdbool.h> 378b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt#include <xtables.h> 38de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt#include <libiptc/xtcshared.h> 397cd002826d0f329620cb738bc4dc4760ef5e084aStephane Ouellette 40aae69bed019826ddec93f761514652a93d871e49Harald Welte#include "linux_list.h" 41aae69bed019826ddec93f761514652a93d871e49Harald Welte 42aae69bed019826ddec93f761514652a93d871e49Harald Welte//#define IPTC_DEBUG2 1 43aae69bed019826ddec93f761514652a93d871e49Harald Welte 44aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 45aae69bed019826ddec93f761514652a93d871e49Harald Welte#include <fcntl.h> 46aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP(x, args...) fprintf(stderr, "%s: " x, __FUNCTION__, ## args) 47aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP_C(x, args...) fprintf(stderr, x, ## args) 48aae69bed019826ddec93f761514652a93d871e49Harald Welte#else 49aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP(x, args...) 50aae69bed019826ddec93f761514652a93d871e49Harald Welte#define DEBUGP_C(x, args...) 51aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 52aae69bed019826ddec93f761514652a93d871e49Harald Welte 5301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 5401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define debug(x, args...) fprintf(stderr, x, ## args) 5501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#else 5601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define debug(x, args...) 5701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 5801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 59e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void *iptc_fn = NULL; 60e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 610b63936140032deac44072951451bdf47b54296aPatrick McHardystatic const char *hooknames[] = { 620b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_PRE_ROUTING] = "PREROUTING", 630b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_LOCAL_IN] = "INPUT", 640b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_FORWARD] = "FORWARD", 650b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_LOCAL_OUT] = "OUTPUT", 660b63936140032deac44072951451bdf47b54296aPatrick McHardy [HOOK_POST_ROUTING] = "POSTROUTING", 67e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 68e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 69aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Convenience structures */ 7072000dcfdc0b0f26ccf52f7b877221bb008a7869Elliott Hughes#undef ipt_error_target /* uapi includes this already. */ 71aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct ipt_error_target 72aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 73aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY_TARGET t; 74aae69bed019826ddec93f761514652a93d871e49Harald Welte char error[TABLE_MAXNAMELEN]; 75aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 76aae69bed019826ddec93f761514652a93d871e49Harald Welte 77aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct chain_head; 78aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct rule_head; 79aae69bed019826ddec93f761514652a93d871e49Harald Welte 80e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstruct counter_map 81e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 82e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher enum { 83e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher COUNTER_MAP_NOMAP, 84e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher COUNTER_MAP_NORMAL_MAP, 851cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte COUNTER_MAP_ZEROED, 861cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte COUNTER_MAP_SET 87e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } maptype; 88e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int mappos; 89e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 90e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 91aae69bed019826ddec93f761514652a93d871e49Harald Welteenum iptcc_rule_type { 92aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_STANDARD, /* standard target (ACCEPT, ...) */ 93aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_MODULE, /* extension module (SNAT, ...) */ 94aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_FALLTHROUGH, /* fallthrough rule */ 95aae69bed019826ddec93f761514652a93d871e49Harald Welte IPTCC_R_JUMP, /* jump to other chain */ 96aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 97aae69bed019826ddec93f761514652a93d871e49Harald Welte 98aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct rule_head 99e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 100aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head list; 101aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *chain; 102aae69bed019826ddec93f761514652a93d871e49Harald Welte struct counter_map counter_map; 103aae69bed019826ddec93f761514652a93d871e49Harald Welte 104aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int index; /* index (needed for counter_map) */ 105aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset; /* offset in rule blob */ 106aae69bed019826ddec93f761514652a93d871e49Harald Welte 107aae69bed019826ddec93f761514652a93d871e49Harald Welte enum iptcc_rule_type type; 108aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *jump; /* jump target, if IPTCC_R_JUMP */ 109aae69bed019826ddec93f761514652a93d871e49Harald Welte 110aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int size; /* size of entry data */ 111aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY entry[0]; 112e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher}; 113e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 114aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct chain_head 11530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 116aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head list; 11779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell char name[TABLE_MAXNAMELEN]; 118aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int hooknum; /* hook number+1 if builtin */ 119aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int references; /* how many jumps reference us */ 120aae69bed019826ddec93f761514652a93d871e49Harald Welte int verdict; /* verdict if builtin */ 121aae69bed019826ddec93f761514652a93d871e49Harald Welte 122aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_COUNTERS counters; /* per-chain counters */ 123aae69bed019826ddec93f761514652a93d871e49Harald Welte struct counter_map counter_map; 124aae69bed019826ddec93f761514652a93d871e49Harald Welte 125aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num_rules; /* number of rules in list */ 126aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head rules; /* list of rules */ 127aae69bed019826ddec93f761514652a93d871e49Harald Welte 128aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int index; /* index (needed for jump resolval) */ 129aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int head_offset; /* offset in rule blob */ 130aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int foot_index; /* index (needed for counter_map) */ 131aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int foot_offset; /* offset in rule blob */ 13230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell}; 13330fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1341639fe86579f86f5f6a954a9b0adde2e16ad1980Jan Engelhardtstruct xtc_handle { 135175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt int sockfd; 136aae69bed019826ddec93f761514652a93d871e49Harald Welte int changed; /* Have changes been made? */ 137aae69bed019826ddec93f761514652a93d871e49Harald Welte 138aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head chains; 139a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 140aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *chain_iterator_cur; 141aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *rule_iterator_cur; 142aae69bed019826ddec93f761514652a93d871e49Harald Welte 14348bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer unsigned int num_chains; /* number of user defined chains */ 14448bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer 14501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head **chain_index; /* array for fast chain list access*/ 14601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int chain_index_sz;/* size of chain index array */ 14701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 1484bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer int sorted_offsets; /* if chains are received sorted from kernel, 1494bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * then the offsets are also sorted. Says if its 1504bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * possible to bsearch offsets using chain_index. 1514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 1524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 15379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_GETINFO info; 154aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_GET_ENTRIES *entries; 155aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 156e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1574bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerenum bsearch_type { 1584bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_NAME, /* Binary search after chain name */ 1594bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_OFFSET, /* Binary search based on offset */ 1604bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer}; 1614bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 162aae69bed019826ddec93f761514652a93d871e49Harald Welte/* allocate a new chain head for the cache */ 163aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head *iptcc_alloc_chain_head(const char *name, int hooknum) 164aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 165aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = malloc(sizeof(*c)); 166aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) 167aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 168aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(c, 0, sizeof(*c)); 169aae69bed019826ddec93f761514652a93d871e49Harald Welte 170aae69bed019826ddec93f761514652a93d871e49Harald Welte strncpy(c->name, name, TABLE_MAXNAMELEN); 171aae69bed019826ddec93f761514652a93d871e49Harald Welte c->hooknum = hooknum; 172aae69bed019826ddec93f761514652a93d871e49Harald Welte INIT_LIST_HEAD(&c->rules); 173e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 174aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 175aae69bed019826ddec93f761514652a93d871e49Harald Welte} 17630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 177aae69bed019826ddec93f761514652a93d871e49Harald Welte/* allocate and initialize a new rule for the cache */ 178aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct rule_head *iptcc_alloc_rule(struct chain_head *c, unsigned int size) 179aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 180aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r = malloc(sizeof(*r)+size); 181aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!r) 182aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 183aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(r, 0, sizeof(*r)); 18430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 185aae69bed019826ddec93f761514652a93d871e49Harald Welte r->chain = c; 186aae69bed019826ddec93f761514652a93d871e49Harald Welte r->size = size; 187175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell 188aae69bed019826ddec93f761514652a93d871e49Harald Welte return r; 189aae69bed019826ddec93f761514652a93d871e49Harald Welte} 190e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 191aae69bed019826ddec93f761514652a93d871e49Harald Welte/* notify us that the ruleset has been modified by the user */ 192910939897ea0cb9be2729a98c60a92e807aad5c3Jesper Dangaard Brouerstatic inline void 193fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtset_changed(struct xtc_handle *h) 194175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell{ 195175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell h->changed = 1; 196175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell} 197175f64177743e5a417e98d483ef995bf7151f3bcRusty Russell 198380ba5f3074a16fbaa8869d9594962d58b5f8608Harald Welte#ifdef IPTC_DEBUG 199fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void do_check(struct xtc_handle *h, unsigned int line); 200849779c4adf8dd65c83fffb65e6b7898df2a55c6Rusty Russell#define CHECK(h) do { if (!getenv("IPTC_NO_CHECK")) do_check((h), __LINE__); } while(0) 20130fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#else 20230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#define CHECK(h) 20330fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell#endif 204e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 205aae69bed019826ddec93f761514652a93d871e49Harald Welte 206aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 207aae69bed019826ddec93f761514652a93d871e49Harald Welte * iptc blob utility functions (iptcb_*) 208aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 209aae69bed019826ddec93f761514652a93d871e49Harald Welte 210e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 211aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcb_get_number(const STRUCT_ENTRY *i, 21279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *seek, 213e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int *pos) 214e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 215e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (i == seek) 216e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 217e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher (*pos)++; 218e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 219e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 220e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 221aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline int 222aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcb_get_entry_n(STRUCT_ENTRY *i, 223aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int number, 224aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int *pos, 225aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY **pe) 226aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 227aae69bed019826ddec93f761514652a93d871e49Harald Welte if (*pos == number) { 228aae69bed019826ddec93f761514652a93d871e49Harald Welte *pe = i; 229aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 230aae69bed019826ddec93f761514652a93d871e49Harald Welte } 231aae69bed019826ddec93f761514652a93d871e49Harald Welte (*pos)++; 232aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 233aae69bed019826ddec93f761514652a93d871e49Harald Welte} 234aae69bed019826ddec93f761514652a93d871e49Harald Welte 235aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline STRUCT_ENTRY * 236fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_get_entry(struct xtc_handle *h, unsigned int offset) 237aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 238aae69bed019826ddec93f761514652a93d871e49Harald Welte return (STRUCT_ENTRY *)((char *)h->entries->entrytable + offset); 239aae69bed019826ddec93f761514652a93d871e49Harald Welte} 240aae69bed019826ddec93f761514652a93d871e49Harald Welte 241e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic unsigned int 242fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_entry2index(struct xtc_handle *const h, const STRUCT_ENTRY *seek) 243e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 244e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int pos = 0; 245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 246aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ENTRY_ITERATE(h->entries->entrytable, h->entries->size, 247aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcb_get_number, seek, &pos) == 0) { 248a28d495285ad7dd9f286d63958cf20d74eec6bcbMartin Josefsson fprintf(stderr, "ERROR: offset %u not an entry!\n", 249aae69bed019826ddec93f761514652a93d871e49Harald Welte (unsigned int)((char *)seek - (char *)h->entries->entrytable)); 250e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher abort(); 251e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 252e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return pos; 253e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 254e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 255aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline STRUCT_ENTRY * 256fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_offset2entry(struct xtc_handle *h, unsigned int offset) 257e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 258aae69bed019826ddec93f761514652a93d871e49Harald Welte return (STRUCT_ENTRY *) ((void *)h->entries->entrytable+offset); 259aae69bed019826ddec93f761514652a93d871e49Harald Welte} 260aae69bed019826ddec93f761514652a93d871e49Harald Welte 261aae69bed019826ddec93f761514652a93d871e49Harald Welte 262aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned long 263fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_entry2offset(struct xtc_handle *const h, const STRUCT_ENTRY *e) 264aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 265aae69bed019826ddec93f761514652a93d871e49Harald Welte return (void *)e - (void *)h->entries->entrytable; 266aae69bed019826ddec93f761514652a93d871e49Harald Welte} 267aae69bed019826ddec93f761514652a93d871e49Harald Welte 268aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned int 269fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_offset2index(struct xtc_handle *const h, unsigned int offset) 270aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 271aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcb_entry2index(h, iptcb_offset2entry(h, offset)); 272aae69bed019826ddec93f761514652a93d871e49Harald Welte} 273aae69bed019826ddec93f761514652a93d871e49Harald Welte 274aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns 0 if not hook entry, else hooknumber + 1 */ 275aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic inline unsigned int 276fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcb_ent_is_hook_entry(STRUCT_ENTRY *e, struct xtc_handle *h) 277aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 278aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int i; 279aae69bed019826ddec93f761514652a93d871e49Harald Welte 280aae69bed019826ddec93f761514652a93d871e49Harald Welte for (i = 0; i < NUMHOOKS; i++) { 281aae69bed019826ddec93f761514652a93d871e49Harald Welte if ((h->info.valid_hooks & (1 << i)) 282aae69bed019826ddec93f761514652a93d871e49Harald Welte && iptcb_get_entry(h, h->info.hook_entry[i]) == e) 283aae69bed019826ddec93f761514652a93d871e49Harald Welte return i+1; 284aae69bed019826ddec93f761514652a93d871e49Harald Welte } 285aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 286aae69bed019826ddec93f761514652a93d871e49Harald Welte} 287aae69bed019826ddec93f761514652a93d871e49Harald Welte 288aae69bed019826ddec93f761514652a93d871e49Harald Welte 289aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 29001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * Chain index (cache utility) functions 29101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer ********************************************************************** 29201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * The chain index is an array with pointers into the chain list, with 29301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * CHAIN_INDEX_BUCKET_LEN spacing. This facilitates the ability to 29401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * speedup chain list searching, by find a more optimal starting 29501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * points when searching the linked list. 29601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 29701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * The starting point can be found fast by using a binary search of 29801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain index. Thus, reducing the previous search complexity of 29901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * O(n) to O(log(n/k) + k) where k is CHAIN_INDEX_BUCKET_LEN. 30001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 30101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * A nice property of the chain index, is that the "bucket" list 30201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * length is max CHAIN_INDEX_BUCKET_LEN (when just build, inserts will 30301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * change this). Oppose to hashing, where the "bucket" list length can 30401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * vary a lot. 30501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 30601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifndef CHAIN_INDEX_BUCKET_LEN 30701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define CHAIN_INDEX_BUCKET_LEN 40 30801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 30901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 31001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Another nice property of the chain index is that inserting/creating 31101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * chains in chain list don't change the correctness of the chain 31201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index, it only causes longer lists in the buckets. 31301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 31401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * To mitigate the performance penalty of longer bucket lists and the 31501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * penalty of rebuilding, the chain index is rebuild only when 31601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * CHAIN_INDEX_INSERT_MAX chains has been added. 31701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 31801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifndef CHAIN_INDEX_INSERT_MAX 31901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#define CHAIN_INDEX_INSERT_MAX 355 32001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 32101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 32201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic inline unsigned int iptcc_is_builtin(struct chain_head *c); 32301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 32401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Use binary search in the chain index array, to find a chain_head 32501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * pointer closest to the place of the searched name element. 32601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 32701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * Notes that, binary search (obviously) requires that the chain list 32801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is sorted by name. 3294bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * 3304bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * The not so obvious: The chain index array, is actually both sorted 3314bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * by name and offset, at the same time!. This is only true because, 3324bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * chain are stored sorted in the kernel (as we pushed it in sorted). 3334bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * 33401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 33501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic struct list_head * 3364bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer__iptcc_bsearch_chain_index(const char *name, unsigned int offset, 337fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt unsigned int *idx, struct xtc_handle *handle, 3384bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer enum bsearch_type type) 33901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 34001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int pos, end; 34101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res; 34201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 34301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_pos; 34401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos=&handle->chains; 34501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 34601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Check for empty array, e.g. no user defined chains */ 34701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index_sz == 0) { 34801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("WARNING: handle->chain_index_sz == 0\n"); 34901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 35001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 35101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 35201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Init */ 35301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer end = handle->chain_index_sz; 35401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = end / 2; 35501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 3564bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("bsearch Find chain:%s (pos:%d end:%d) (offset:%d)\n", 3574bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer name, pos, end, offset); 35801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 35901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Loop */ 36001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer loop: 36101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!handle->chain_index[pos]) { 36201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer fprintf(stderr, "ERROR: NULL pointer chain_index[%d]\n", pos); 36301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return &handle->chains; /* Be safe, return orig start pos */ 36401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 36501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 3664bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("bsearch Index[%d] name:%s ", 3674bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos, handle->chain_index[pos]->name); 3684bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 3694bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Support for different compare functions */ 3704bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer switch (type) { 3714bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_NAME: 3724bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = strcmp(name, handle->chain_index[pos]->name); 3734bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3744bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_OFFSET: 3754bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("head_offset:[%d] foot_offset:[%d] ", 3764bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer handle->chain_index[pos]->head_offset, 3774bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer handle->chain_index[pos]->foot_offset); 3784bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = offset - handle->chain_index[pos]->head_offset; 3794bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3804bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer default: 3814bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer fprintf(stderr, "ERROR: %d not a valid bsearch type\n", 3824bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer type); 3834bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer abort(); 3844bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 3854bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 3864bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("res:%d ", res); 3874bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 3884bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 38901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[pos]->list; 390dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt *idx = pos; 39101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 39201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res == 0) { /* Found element, by direct hit */ 39301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Direct hit pos:%d end:%d\n", pos, end); 39401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 39501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else if (res < 0) { /* Too far, jump back */ 39601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer end = pos; 39701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = pos / 2; 39801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 39901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: First element of array */ 40001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (end == 0) { 40101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Reached first array elem (end%d)\n",end); 40201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 40301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 40401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("jump back to pos:%d (end:%d)\n", pos, end); 40501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer goto loop; 40696d0d0130a9a08803406c5c18681903446088ebfJiri Popelka } else { /* res > 0; Not far enough, jump forward */ 40701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 40801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: Last element of array */ 40901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (pos == handle->chain_index_sz-1) { 41001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] Last array elem (end:%d)\n", end); 41101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 41201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 41301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 41401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Exit case: Next index less, thus elem in this list section */ 4154bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer switch (type) { 4164bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_NAME: 4174bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = strcmp(name, handle->chain_index[pos+1]->name); 4184bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 4194bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer case BSEARCH_OFFSET: 4204bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer res = offset - handle->chain_index[pos+1]->head_offset; 4214bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer break; 4224bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 4234bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 42401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res < 0) { 42501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("[found] closest list (end:%d)\n", end); 42601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 42701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 42801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 42901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer pos = (pos+end)/2; 43001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("jump forward to pos:%d (end:%d)\n", pos, end); 43101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer goto loop; 43201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 43301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 43401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 4354bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer/* Wrapper for string chain name based bsearch */ 4364bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerstatic struct list_head * 4374bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Broueriptcc_bsearch_chain_index(const char *name, unsigned int *idx, 438fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *handle) 4394bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer{ 4404bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer return __iptcc_bsearch_chain_index(name, 0, idx, handle, BSEARCH_NAME); 4414bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer} 4424bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4434bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4444bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer/* Wrapper for offset chain based bsearch */ 4454bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouerstatic struct list_head * 4464bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Broueriptcc_bsearch_chain_offset(unsigned int offset, unsigned int *idx, 447fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *handle) 4484bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer{ 4494bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer struct list_head *pos; 4504bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4514bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* If chains were not received sorted from kernel, then the 4524bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * offset bsearch is not possible. 4534bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 4544bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer if (!handle->sorted_offsets) 4554bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos = handle->chains.next; 4564bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer else 4574bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer pos = __iptcc_bsearch_chain_index(NULL, offset, idx, handle, 4584bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer BSEARCH_OFFSET); 4594bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer return pos; 4604bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer} 4614bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 4624bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 46301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 46401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Trivial linear search of chain index. Function used for verifying 46501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer the output of bsearch function */ 46601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouerstatic struct list_head * 467fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_linearly_search_chain_index(const char *name, struct xtc_handle *handle) 46801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 46901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=0; 47001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res=0; 47101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_pos; 47301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chains; 47401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index_sz) 47601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[0]->list; 47701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 47801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Linearly walk of chain index array */ 47901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 48001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer for (i=0; i < handle->chain_index_sz; i++) { 48101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->chain_index[i]) { 48201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer res = strcmp(handle->chain_index[i]->name, name); 48301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res > 0) 48401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; // One step too far 48501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_pos = &handle->chain_index[i]->list; 48601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res == 0) 48701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; // Direct hit 48801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 48901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 49001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 49101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return list_pos; 49201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 49301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 49401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 495fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_alloc(struct xtc_handle *h) 49601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 49701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int list_length = CHAIN_INDEX_BUCKET_LEN; 49801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int array_elems; 49901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int array_mem; 50001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Allocate memory for the chain index array */ 50201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_elems = (h->num_chains / list_length) + 50301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer (h->num_chains % list_length ? 1 : 0); 50401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_mem = sizeof(h->chain_index) * array_elems; 50501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Alloc Chain index, elems:%d mem:%d bytes\n", 50701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer array_elems, array_mem); 50801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 50901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index = malloc(array_mem); 5100eee3009e7015b82a46b2eccad91f759d75ec4dfJan Engelhardt if (h->chain_index == NULL && array_mem > 0) { 51101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = 0; 51201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 51301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 51401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer memset(h->chain_index, 0, array_mem); 51501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = array_elems; 51601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 51701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 51801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 51901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 520fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_index_free(struct xtc_handle *h) 52101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 52201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index_sz = 0; 52301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer free(h->chain_index); 52401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 52501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 52701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 528fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_index_dump(struct xtc_handle *h) 52901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 53001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i = 0; 53101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 53201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Dump: contents of chain index array */ 53301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer for (i=0; i < h->chain_index_sz; i++) { 53401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (h->chain_index[i]) { 53501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer fprintf(stderr, "Chain index[%d].name: %s\n", 53601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer i, h->chain_index[i]->name); 53701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 53801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 53901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 54001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 54101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 54201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Build the chain index */ 543fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_build(struct xtc_handle *h) 54401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 54501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int list_length = CHAIN_INDEX_BUCKET_LEN; 54601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int chains = 0; 54701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int cindex = 0; 54801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c; 54901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Build up the chain index array here */ 55101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Building chain index\n"); 55201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Number of user defined chains:%d bucket_sz:%d array_sz:%d\n", 55401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->num_chains, list_length, h->chain_index_sz); 55501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (h->chain_index_sz == 0) 55701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 55801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 55901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each_entry(c, &h->chains, list) { 56001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 56101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Issue: The index array needs to start after the 56201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * builtin chains, as they are not sorted */ 56301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!iptcc_is_builtin(c)) { 56401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer cindex=chains / list_length; 56501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 56601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Safe guard, break out on array limit, this 56701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is useful if chains are added and array is 56801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * rebuild, without realloc of memory. */ 56901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (cindex >= h->chain_index_sz) 57001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 57101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 57201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((chains % list_length)== 0) { 57301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("\nIndex[%d] Chains:", cindex); 57401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index[cindex] = c; 57501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer chains++; 57701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 57801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("%s, ", c->name); 57901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 58001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("\n"); 58101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 58201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 58301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 58401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 585fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_rebuild(struct xtc_handle *h) 58601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 58701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("REBUILD chain index array\n"); 58801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_free(h); 58901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((iptcc_chain_index_alloc(h)) < 0) 59001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 59101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_build(h); 59201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 1; 59301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 59401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 59501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/* Delete chain (pointer) from index array. Removing an element from 59601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain list only affects the chain index array, if the chain 59701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index points-to/uses that list pointer. 59801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * 59901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * There are different strategies, the simple and safe is to rebuild 60001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the chain index every time. The more advanced is to update the 60101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * array index to point to the next element, but that requires some 60292dc4f6e0efeb55b1635790147b3dcac327f308fVille Skyttä * house keeping and boundary checks. The advanced is implemented, as 60301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * the simple approach behaves badly when all chains are deleted 60401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * because list_for_each processing will always hit the first chain 60501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index, thus causing a rebuild for every chain. 60601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 607fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_chain_index_delete_chain(struct chain_head *c, struct xtc_handle *h) 60801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer{ 6097d91a2accc92d13bb32bf881831e9c9a8b4d7734Jan Engelhardt struct list_head *index_ptr, *next; 61001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c2; 611dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int idx, idx2; 61201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 613dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt index_ptr = iptcc_bsearch_chain_index(c->name, &idx, h); 61401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Del chain[%s] c->list:%p index_ptr:%p\n", 61601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer c->name, &c->list, index_ptr); 61701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 61801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Save the next pointer */ 61901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer next = c->list.next; 62001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_del(&c->list); 62101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 62201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (index_ptr == &c->list) { /* Chain used as index ptr */ 62301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 62401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* See if its possible to avoid a rebuild, by shifting 62501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * to next pointer. Its possible if the next pointer 62601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * is located in the same index bucket. 62701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 62801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer c2 = list_entry(next, struct chain_head, list); 6297d91a2accc92d13bb32bf881831e9c9a8b4d7734Jan Engelhardt iptcc_bsearch_chain_index(c2->name, &idx2, h); 630dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt if (idx != idx2) { 63101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Rebuild needed */ 63201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return iptcc_chain_index_rebuild(h); 63301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } else { 63401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Avoiding rebuild */ 63501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Update cindex[%d] with next ptr name:[%s]\n", 636dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt idx, c2->name); 637dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt h->chain_index[idx]=c2; 63801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 63901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 64001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 64101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return 0; 64201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer} 64301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 64401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 64501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer/********************************************************************** 646aae69bed019826ddec93f761514652a93d871e49Harald Welte * iptc cache utility functions (iptcc_*) 647aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 648aae69bed019826ddec93f761514652a93d871e49Harald Welte 649aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Is the given chain builtin (1) or user-defined (0) */ 650910939897ea0cb9be2729a98c60a92e807aad5c3Jesper Dangaard Brouerstatic inline unsigned int iptcc_is_builtin(struct chain_head *c) 651aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 652aae69bed019826ddec93f761514652a93d871e49Harald Welte return (c->hooknum ? 1 : 0); 653aae69bed019826ddec93f761514652a93d871e49Harald Welte} 654aae69bed019826ddec93f761514652a93d871e49Harald Welte 655aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Get a specific rule within a chain */ 656aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct rule_head *iptcc_get_rule_num(struct chain_head *c, 657aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int rulenum) 658aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 659aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 660aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num = 0; 661aae69bed019826ddec93f761514652a93d871e49Harald Welte 662aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 663aae69bed019826ddec93f761514652a93d871e49Harald Welte num++; 664aae69bed019826ddec93f761514652a93d871e49Harald Welte if (num == rulenum) 665aae69bed019826ddec93f761514652a93d871e49Harald Welte return r; 666aae69bed019826ddec93f761514652a93d871e49Harald Welte } 667aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 668aae69bed019826ddec93f761514652a93d871e49Harald Welte} 669aae69bed019826ddec93f761514652a93d871e49Harald Welte 670a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson/* Get a specific rule within a chain backwards */ 671a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefssonstatic struct rule_head *iptcc_get_rule_num_reverse(struct chain_head *c, 672a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson unsigned int rulenum) 673a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson{ 674a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson struct rule_head *r; 675a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson unsigned int num = 0; 676a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson 677a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson list_for_each_entry_reverse(r, &c->rules, list) { 678a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson num++; 679a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (num == rulenum) 680a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson return r; 681a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } 682a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson return NULL; 683a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson} 684a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson 685aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns chain head if found, otherwise NULL. */ 686aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head * 687fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_find_chain_by_offset(struct xtc_handle *handle, unsigned int offset) 688aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 689aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head *pos; 6904bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer struct list_head *list_start_pos; 6914bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer unsigned int i; 692aae69bed019826ddec93f761514652a93d871e49Harald Welte 693aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&handle->chains)) 694aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 695aae69bed019826ddec93f761514652a93d871e49Harald Welte 6964bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Find a smart place to start the search */ 6974bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_offset(offset, &i, handle); 6984bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 6994bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Note that iptcc_bsearch_chain_offset() skips builtin 7004bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * chains, but this function is only used for finding jump 7014bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * targets, and a buildin chain is not a valid jump target */ 7024bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 7034bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("Offset:[%u] starting search at index:[%u]\n", offset, i); 7044bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer// list_for_each(pos, &handle->chains) { 7054bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer list_for_each(pos, list_start_pos->prev) { 706aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = list_entry(pos, struct chain_head, list); 7074bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("."); 7084bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer if (offset >= c->head_offset && offset <= c->foot_offset) { 7094bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("Offset search found chain:[%s]\n", c->name); 710aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 7114bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 712aae69bed019826ddec93f761514652a93d871e49Harald Welte } 713aae69bed019826ddec93f761514652a93d871e49Harald Welte 714aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 715aae69bed019826ddec93f761514652a93d871e49Harald Welte} 71601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 717aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns chain head if found, otherwise NULL. */ 718aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic struct chain_head * 719fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_find_label(const char *name, struct xtc_handle *handle) 720aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 721aae69bed019826ddec93f761514652a93d871e49Harald Welte struct list_head *pos; 72201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_start_pos; 72301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=0; 72401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer int res; 725aae69bed019826ddec93f761514652a93d871e49Harald Welte 726aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&handle->chains)) 727aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 728aae69bed019826ddec93f761514652a93d871e49Harald Welte 72901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* First look at builtin chains */ 730aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each(pos, &handle->chains) { 731aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = list_entry(pos, struct chain_head, list); 73201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (!iptcc_is_builtin(c)) 73301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 734aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!strcmp(c->name, name)) 735aae69bed019826ddec93f761514652a93d871e49Harald Welte return c; 736aae69bed019826ddec93f761514652a93d871e49Harald Welte } 737aae69bed019826ddec93f761514652a93d871e49Harald Welte 73801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Find a smart place to start the search via chain index */ 73901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer //list_start_pos = iptcc_linearly_search_chain_index(name, handle); 74001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_index(name, &i, handle); 74101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 74201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handel if bsearch bails out early */ 74301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos == &handle->chains) { 74401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = pos; 74501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 74601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#ifdef DEBUG 74701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer else { 74801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Verify result of bsearch against linearly index search */ 74901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *test_pos; 75001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *test_c, *tmp_c; 75101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer test_pos = iptcc_linearly_search_chain_index(name, handle); 75201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos != test_pos) { 75301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("BUG in chain_index search\n"); 75401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer test_c=list_entry(test_pos, struct chain_head,list); 75501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer tmp_c =list_entry(list_start_pos,struct chain_head,list); 75601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Verify search found:\n"); 75701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Chain:%s\n", test_c->name); 75801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("BSearch found:\n"); 75901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Chain:%s\n", tmp_c->name); 76001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer exit(42); 76101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 76201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 76301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer#endif 76401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 76501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Initial/special case, no user defined chains */ 76601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (handle->num_chains == 0) 76701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 76801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 76901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Start searching through the chain list */ 77001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each(pos, list_start_pos->prev) { 77101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct chain_head *c = list_entry(pos, struct chain_head, list); 77201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer res = strcmp(c->name, name); 77301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("List search name:%s == %s res:%d\n", name, c->name, res); 77401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res==0) 77501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return c; 77601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 77701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* We can stop earlier as we know list is sorted */ 77801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (res>0 && !iptcc_is_builtin(c)) { /* Walked too far*/ 77901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug(" Not in list, walked too far, sorted list\n"); 78001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 78101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 78301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Stop on wrap around, if list head is reached */ 78401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (pos == &handle->chains) { 78501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Stop, list head reached\n"); 78601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return NULL; 78701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 78901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 79001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("List search NOT found name:%s\n", name); 791aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 792aae69bed019826ddec93f761514652a93d871e49Harald Welte} 793aae69bed019826ddec93f761514652a93d871e49Harald Welte 794aae69bed019826ddec93f761514652a93d871e49Harald Welte/* called when rule is to be removed from cache */ 795aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void iptcc_delete_rule(struct rule_head *r) 796aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 797aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("deleting rule %p (offset %u)\n", r, r->offset); 798aae69bed019826ddec93f761514652a93d871e49Harald Welte /* clean up reference count of called chain */ 799aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type == IPTCC_R_JUMP 800aae69bed019826ddec93f761514652a93d871e49Harald Welte && r->jump) 801aae69bed019826ddec93f761514652a93d871e49Harald Welte r->jump->references--; 802aae69bed019826ddec93f761514652a93d871e49Harald Welte 803aae69bed019826ddec93f761514652a93d871e49Harald Welte list_del(&r->list); 804aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 805aae69bed019826ddec93f761514652a93d871e49Harald Welte} 806aae69bed019826ddec93f761514652a93d871e49Harald Welte 807aae69bed019826ddec93f761514652a93d871e49Harald Welte 808aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 809aae69bed019826ddec93f761514652a93d871e49Harald Welte * RULESET PARSER (blob -> cache) 810aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 811aae69bed019826ddec93f761514652a93d871e49Harald Welte 812aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Delete policy rule of previous chain, since cache doesn't contain 813aae69bed019826ddec93f761514652a93d871e49Harald Welte * chain policy rules. 814aae69bed019826ddec93f761514652a93d871e49Harald Welte * WARNING: This function has ugly design and relies on a lot of context, only 815aae69bed019826ddec93f761514652a93d871e49Harald Welte * to be called from specific places within the parser */ 816fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int __iptcc_p_del_policy(struct xtc_handle *h, unsigned int num) 817aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 81851651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt const unsigned char *data; 81951651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt 820aae69bed019826ddec93f761514652a93d871e49Harald Welte if (h->chain_iterator_cur) { 821aae69bed019826ddec93f761514652a93d871e49Harald Welte /* policy rule is last rule */ 822aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *pr = (struct rule_head *) 823aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->rules.prev; 824aae69bed019826ddec93f761514652a93d871e49Harald Welte 825aae69bed019826ddec93f761514652a93d871e49Harald Welte /* save verdict */ 82651651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt data = GET_TARGET(pr->entry)->data; 82751651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt h->chain_iterator_cur->verdict = *(const int *)data; 828aae69bed019826ddec93f761514652a93d871e49Harald Welte 829aae69bed019826ddec93f761514652a93d871e49Harald Welte /* save counter and counter_map information */ 830a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer h->chain_iterator_cur->counter_map.maptype = 8317c4d668c9c2ee007c82063b7fc784cbbf46b2ec4Jan Engelhardt COUNTER_MAP_ZEROED; 832aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->counter_map.mappos = num-1; 833a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer memcpy(&h->chain_iterator_cur->counters, &pr->entry->counters, 834aae69bed019826ddec93f761514652a93d871e49Harald Welte sizeof(h->chain_iterator_cur->counters)); 835aae69bed019826ddec93f761514652a93d871e49Harald Welte 836aae69bed019826ddec93f761514652a93d871e49Harald Welte /* foot_offset points to verdict rule */ 837aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->foot_index = num; 838aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur->foot_offset = pr->offset; 839aae69bed019826ddec93f761514652a93d871e49Harald Welte 840aae69bed019826ddec93f761514652a93d871e49Harald Welte /* delete rule from cache */ 841aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(pr); 8428d1b38a064d146c77eb8fc951717663e1a713cfcMartin Josefsson h->chain_iterator_cur->num_rules--; 843aae69bed019826ddec93f761514652a93d871e49Harald Welte 844e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 845e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 846e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 847e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 848e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 849ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte/* alphabetically insert a chain into the list */ 8507cd15e367cc81c839ef2ca061d201c46ca1deb7cChristoph Paaschstatic void iptc_insert_chain(struct xtc_handle *h, struct chain_head *c) 851ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte{ 852ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte struct chain_head *tmp; 85301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer struct list_head *list_start_pos; 85401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer unsigned int i=1; 85501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 85601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Find a smart place to start the insert search */ 85701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = iptcc_bsearch_chain_index(c->name, &i, h); 85801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 85901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handle the case, where chain.name is smaller than index[0] */ 86001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (i==0 && strcmp(c->name, h->chain_index[0]->name) <= 0) { 86101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer h->chain_index[0] = c; /* Update chain index head */ 86201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = h->chains.next; 86301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Update chain_index[0] with %s\n", c->name); 86401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 86501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 86601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Handel if bsearch bails out early */ 86701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (list_start_pos == &h->chains) { 86801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_start_pos = h->chains.next; 86901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 870ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 8719d3ed77341361674994f584ff69a61f31a342739Olaf Rempel /* sort only user defined chains */ 8729d3ed77341361674994f584ff69a61f31a342739Olaf Rempel if (!c->hooknum) { 87301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer list_for_each_entry(tmp, list_start_pos->prev, list) { 874feca0578a5d035122b4b7cdb8d44d6cca819f35cRobert de Barth if (!tmp->hooknum && strcmp(c->name, tmp->name) <= 0) { 8759d3ed77341361674994f584ff69a61f31a342739Olaf Rempel list_add(&c->list, tmp->list.prev); 8769d3ed77341361674994f584ff69a61f31a342739Olaf Rempel return; 8779d3ed77341361674994f584ff69a61f31a342739Olaf Rempel } 87801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 87901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Stop if list head is reached */ 88001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (&tmp->list == &h->chains) { 88101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Insert, list head reached add to tail\n"); 88201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer break; 88301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 884ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte } 885ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte } 886ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 887ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte /* survived till end of list: add at tail */ 888ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte list_add_tail(&c->list, &h->chains); 889ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte} 890ec30b6c4d3ebb09d2c05e44f3904428893ef13bdHarald Welte 891aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Another ugly helper function split out of cache_add_entry to make it less 892aae69bed019826ddec93f761514652a93d871e49Harald Welte * spaghetti code */ 893fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void __iptcc_p_add_chain(struct xtc_handle *h, struct chain_head *c, 894aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset, unsigned int *num) 895e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 8961336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer struct list_head *tail = h->chains.prev; 8971336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer struct chain_head *ctail; 8981336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer 899aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_del_policy(h, *num); 900e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 901aae69bed019826ddec93f761514652a93d871e49Harald Welte c->head_offset = offset; 902aae69bed019826ddec93f761514652a93d871e49Harald Welte c->index = *num; 903e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 9041336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer /* Chains from kernel are already sorted, as they are inserted 9051336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * sorted. But there exists an issue when shifting to 1.4.0 9061336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * from an older version, as old versions allow last created 9071336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer * chain to be unsorted. 9081336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer */ 9091336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer if (iptcc_is_builtin(c)) /* Only user defined chains are sorted*/ 9101336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer list_add_tail(&c->list, &h->chains); 9111336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer else { 9121336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer ctail = list_entry(tail, struct chain_head, list); 9134bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 914526d3e138635e33773d1ca16477052a04f53f5bdJesper Dangaard Brouer if (strcmp(c->name, ctail->name) > 0 || 915526d3e138635e33773d1ca16477052a04f53f5bdJesper Dangaard Brouer iptcc_is_builtin(ctail)) 9161336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer list_add_tail(&c->list, &h->chains);/* Already sorted*/ 9174bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer else { 9181336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer iptc_insert_chain(h, c);/* Was not sorted */ 9194bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 9204bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Notice, if chains were not received sorted 9214bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * from kernel, then an offset bsearch is no 9224bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer * longer valid. 9234bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer */ 9244bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer h->sorted_offsets = 0; 9254bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 9264bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer debug("NOTICE: chain:[%s] was NOT sorted(ctail:%s)\n", 9274bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer c->name, ctail->name); 9284bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer } 9291336451ead58d608618ff5b0a251d132b73f9866Jesper Dangaard Brouer } 930d8cb787ab44e9d2de4fd3b04fcaa370c9918fc5dJesper Dangaard Brouer 931aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur = c; 932e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 933e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 934aae69bed019826ddec93f761514652a93d871e49Harald Welte/* main parser function: add an entry from the blob to the cache */ 935a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouerstatic int cache_add_entry(STRUCT_ENTRY *e, 936a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer struct xtc_handle *h, 937aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY **prev, 938aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int *num) 939e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 940aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int builtin; 941aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset = (char *)e - (char *)h->entries->entrytable; 942aae69bed019826ddec93f761514652a93d871e49Harald Welte 943aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("entering..."); 944aae69bed019826ddec93f761514652a93d871e49Harald Welte 945aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Last entry ("policy rule"). End it.*/ 946aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcb_entry2offset(h,e) + e->next_offset == h->entries->size) { 947aae69bed019826ddec93f761514652a93d871e49Harald Welte /* This is the ERROR node at the end of the chain */ 948aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u: end of table:\n", *num, offset); 949aae69bed019826ddec93f761514652a93d871e49Harald Welte 950aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_del_policy(h, *num); 951aae69bed019826ddec93f761514652a93d871e49Harald Welte 952aae69bed019826ddec93f761514652a93d871e49Harald Welte h->chain_iterator_cur = NULL; 953aae69bed019826ddec93f761514652a93d871e49Harald Welte goto out_inc; 954aae69bed019826ddec93f761514652a93d871e49Harald Welte } 955aae69bed019826ddec93f761514652a93d871e49Harald Welte 956aae69bed019826ddec93f761514652a93d871e49Harald Welte /* We know this is the start of a new chain if it's an ERROR 957aae69bed019826ddec93f761514652a93d871e49Harald Welte * target, or a hook entry point */ 958aae69bed019826ddec93f761514652a93d871e49Harald Welte 959aae69bed019826ddec93f761514652a93d871e49Harald Welte if (strcmp(GET_TARGET(e)->u.user.name, ERROR_TARGET) == 0) { 960a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer struct chain_head *c = 961aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_alloc_chain_head((const char *)GET_TARGET(e)->data, 0); 962a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer DEBUGP_C("%u:%u:new userdefined chain %s: %p\n", *num, offset, 963aae69bed019826ddec93f761514652a93d871e49Harald Welte (char *)c->name, c); 964aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 965aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = -ENOMEM; 966aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 967aae69bed019826ddec93f761514652a93d871e49Harald Welte } 96848bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer h->num_chains++; /* New user defined chain */ 969aae69bed019826ddec93f761514652a93d871e49Harald Welte 970aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_add_chain(h, c, offset, num); 971aae69bed019826ddec93f761514652a93d871e49Harald Welte 972aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if ((builtin = iptcb_ent_is_hook_entry(e, h)) != 0) { 973aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = 974a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer iptcc_alloc_chain_head((char *)hooknames[builtin-1], 975aae69bed019826ddec93f761514652a93d871e49Harald Welte builtin); 976a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer DEBUGP_C("%u:%u new builtin chain: %p (rules=%p)\n", 977aae69bed019826ddec93f761514652a93d871e49Harald Welte *num, offset, c, &c->rules); 978aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 979aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = -ENOMEM; 980aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 981aae69bed019826ddec93f761514652a93d871e49Harald Welte } 982aae69bed019826ddec93f761514652a93d871e49Harald Welte 983aae69bed019826ddec93f761514652a93d871e49Harald Welte c->hooknum = builtin; 984aae69bed019826ddec93f761514652a93d871e49Harald Welte 985aae69bed019826ddec93f761514652a93d871e49Harald Welte __iptcc_p_add_chain(h, c, offset, num); 986aae69bed019826ddec93f761514652a93d871e49Harald Welte 987aae69bed019826ddec93f761514652a93d871e49Harald Welte /* FIXME: this is ugly. */ 988aae69bed019826ddec93f761514652a93d871e49Harald Welte goto new_rule; 989aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 990aae69bed019826ddec93f761514652a93d871e49Harald Welte /* has to be normal rule */ 991aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 992aae69bed019826ddec93f761514652a93d871e49Harald Weltenew_rule: 993aae69bed019826ddec93f761514652a93d871e49Harald Welte 994a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer if (!(r = iptcc_alloc_rule(h->chain_iterator_cur, 995aae69bed019826ddec93f761514652a93d871e49Harald Welte e->next_offset))) { 996aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 997aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 998aae69bed019826ddec93f761514652a93d871e49Harald Welte } 999aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%u:%u normal rule: %p: ", *num, offset, r); 1000aae69bed019826ddec93f761514652a93d871e49Harald Welte 1001aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index = *num; 1002aae69bed019826ddec93f761514652a93d871e49Harald Welte r->offset = offset; 1003aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1004aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_NORMAL_MAP; 1005aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos = r->index; 1006aae69bed019826ddec93f761514652a93d871e49Harald Welte 1007aae69bed019826ddec93f761514652a93d871e49Harald Welte /* handling of jumps, etc. */ 1008aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!strcmp(GET_TARGET(e)->u.user.name, STANDARD_TARGET)) { 1009aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1010aae69bed019826ddec93f761514652a93d871e49Harald Welte 1011aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(e); 1012aae69bed019826ddec93f761514652a93d871e49Harald Welte if (t->target.u.target_size 1013aae69bed019826ddec93f761514652a93d871e49Harald Welte != ALIGN(sizeof(STRUCT_STANDARD_TARGET))) { 1014aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = EINVAL; 10151a7732f965c2b09e526eeca8a551538fbdc099efFranz Flasch free(r); 1016aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 1017aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1018aae69bed019826ddec93f761514652a93d871e49Harald Welte 1019aae69bed019826ddec93f761514652a93d871e49Harald Welte if (t->verdict < 0) { 1020aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("standard, verdict=%d\n", t->verdict); 1021aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_STANDARD; 1022aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if (t->verdict == r->offset+e->next_offset) { 1023aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("fallthrough\n"); 1024aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_FALLTHROUGH; 1025aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 1026aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("jump, target=%u\n", t->verdict); 1027aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_JUMP; 1028aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Jump target fixup has to be deferred 1029aae69bed019826ddec93f761514652a93d871e49Harald Welte * until second pass, since we migh not 1030aae69bed019826ddec93f761514652a93d871e49Harald Welte * yet have parsed the target */ 1031aae69bed019826ddec93f761514652a93d871e49Harald Welte } 103252c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson } else { 103352c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson DEBUGP_C("module, target=%s\n", GET_TARGET(e)->u.user.name); 103452c380208a87191a8c25608d2c501c0dc32aa9adMartin Josefsson r->type = IPTCC_R_MODULE; 1035aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1036aae69bed019826ddec93f761514652a93d871e49Harald Welte 1037aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add_tail(&r->list, &h->chain_iterator_cur->rules); 10388d1b38a064d146c77eb8fc951717663e1a713cfcMartin Josefsson h->chain_iterator_cur->num_rules++; 1039aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1040aae69bed019826ddec93f761514652a93d871e49Harald Welteout_inc: 1041aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1042aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1043e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1044e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1045aae69bed019826ddec93f761514652a93d871e49Harald Welte 1046aae69bed019826ddec93f761514652a93d871e49Harald Welte/* parse an iptables blob into it's pieces */ 1047fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int parse_table(struct xtc_handle *h) 1048e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1049aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *prev; 1050aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int num = 0; 1051aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1052aae69bed019826ddec93f761514652a93d871e49Harald Welte 10534bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer /* Assume that chains offsets are sorted, this verified during 10544bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer parsing of ruleset (in __iptcc_p_add_chain())*/ 10554bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer h->sorted_offsets = 1; 10564bae3f1001028ee283a5e1fcea4a561b0068f95dJesper Dangaard Brouer 1057aae69bed019826ddec93f761514652a93d871e49Harald Welte /* First pass: over ruleset blob */ 1058aae69bed019826ddec93f761514652a93d871e49Harald Welte ENTRY_ITERATE(h->entries->entrytable, h->entries->size, 1059aae69bed019826ddec93f761514652a93d871e49Harald Welte cache_add_entry, h, &prev, &num); 1060aae69bed019826ddec93f761514652a93d871e49Harald Welte 106101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Build the chain index, used for chain list search speedup */ 106201444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if ((iptcc_chain_index_alloc(h)) < 0) 106301444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer return -ENOMEM; 106401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer iptcc_chain_index_build(h); 106501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 1066aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Second pass: fixup parsed data from first pass */ 1067aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1068aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1069aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1070dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt struct chain_head *lc; 1071aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1072aae69bed019826ddec93f761514652a93d871e49Harald Welte 1073aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type != IPTCC_R_JUMP) 1074aae69bed019826ddec93f761514652a93d871e49Harald Welte continue; 1075aae69bed019826ddec93f761514652a93d871e49Harald Welte 1076aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1077dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt lc = iptcc_find_chain_by_offset(h, t->verdict); 1078dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt if (!lc) 1079aae69bed019826ddec93f761514652a93d871e49Harald Welte return -1; 1080dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt r->jump = lc; 1081dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt lc->references++; 1082aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1083aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1084aae69bed019826ddec93f761514652a93d871e49Harald Welte 1085aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 10860113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 10879e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte 1088aae69bed019826ddec93f761514652a93d871e49Harald Welte 1089aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 1090aae69bed019826ddec93f761514652a93d871e49Harald Welte * RULESET COMPILATION (cache -> blob) 1091aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 1092aae69bed019826ddec93f761514652a93d871e49Harald Welte 1093aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Convenience structures */ 1094aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_start{ 1095aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY e; 10969cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt struct xt_error_target name; 1097aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1098aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_START_SIZE (sizeof(STRUCT_ENTRY) + \ 10999cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt ALIGN(sizeof(struct xt_error_target))) 1100aae69bed019826ddec93f761514652a93d871e49Harald Welte 1101aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_foot { 1102aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY e; 1103aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET target; 1104aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1105aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_FOOT_SIZE (sizeof(STRUCT_ENTRY) + \ 1106aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(STRUCT_STANDARD_TARGET))) 1107aae69bed019826ddec93f761514652a93d871e49Harald Welte 1108aae69bed019826ddec93f761514652a93d871e49Harald Weltestruct iptcb_chain_error { 1109aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY entry; 11109cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt struct xt_error_target target; 1111aae69bed019826ddec93f761514652a93d871e49Harald Welte}; 1112aae69bed019826ddec93f761514652a93d871e49Harald Welte#define IPTCB_CHAIN_ERROR_SIZE (sizeof(STRUCT_ENTRY) + \ 11139cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt ALIGN(sizeof(struct xt_error_target))) 1114aae69bed019826ddec93f761514652a93d871e49Harald Welte 1115aae69bed019826ddec93f761514652a93d871e49Harald Welte 1116aae69bed019826ddec93f761514652a93d871e49Harald Welte 1117aae69bed019826ddec93f761514652a93d871e49Harald Welte/* compile rule from cache into blob */ 1118fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic inline int iptcc_compile_rule (struct xtc_handle *h, STRUCT_REPLACE *repl, struct rule_head *r) 11190113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1120aae69bed019826ddec93f761514652a93d871e49Harald Welte /* handle jumps */ 1121aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->type == IPTCC_R_JUMP) { 1122aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1123aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1124aae69bed019826ddec93f761514652a93d871e49Harald Welte /* memset for memcmp convenience on delete/replace */ 1125aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(t->target.u.user.name, 0, FUNCTION_MAXNAMELEN); 1126aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(t->target.u.user.name, STANDARD_TARGET); 1127aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Jumps can only happen to builtin chains, so we 1128aae69bed019826ddec93f761514652a93d871e49Harald Welte * can safely assume that they always have a header */ 1129aae69bed019826ddec93f761514652a93d871e49Harald Welte t->verdict = r->jump->head_offset + IPTCB_CHAIN_START_SIZE; 1130aae69bed019826ddec93f761514652a93d871e49Harald Welte } else if (r->type == IPTCC_R_FALLTHROUGH) { 1131aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_STANDARD_TARGET *t; 1132aae69bed019826ddec93f761514652a93d871e49Harald Welte t = (STRUCT_STANDARD_TARGET *)GET_TARGET(r->entry); 1133aae69bed019826ddec93f761514652a93d871e49Harald Welte t->verdict = r->offset + r->size; 1134aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1135a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 1136aae69bed019826ddec93f761514652a93d871e49Harald Welte /* copy entry from cache to blob */ 1137aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy((char *)repl->entries+r->offset, r->entry, r->size); 1138aae69bed019826ddec93f761514652a93d871e49Harald Welte 1139aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1140e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1141e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1142aae69bed019826ddec93f761514652a93d871e49Harald Welte/* compile chain from cache into blob */ 1143fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_chain(struct xtc_handle *h, STRUCT_REPLACE *repl, struct chain_head *c) 11443ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte{ 1145aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret; 1146aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1147aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_start *head; 1148aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_foot *foot; 1149aae69bed019826ddec93f761514652a93d871e49Harald Welte 1150aae69bed019826ddec93f761514652a93d871e49Harald Welte /* only user-defined chains have heaer */ 1151aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 1152aae69bed019826ddec93f761514652a93d871e49Harald Welte /* put chain header in place */ 1153aae69bed019826ddec93f761514652a93d871e49Harald Welte head = (void *)repl->entries + c->head_offset; 1154aae69bed019826ddec93f761514652a93d871e49Harald Welte head->e.target_offset = sizeof(STRUCT_ENTRY); 1155aae69bed019826ddec93f761514652a93d871e49Harald Welte head->e.next_offset = IPTCB_CHAIN_START_SIZE; 11569cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt strcpy(head->name.target.u.user.name, ERROR_TARGET); 11579cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt head->name.target.u.target_size = 11589cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt ALIGN(sizeof(struct xt_error_target)); 11599cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt strcpy(head->name.errorname, c->name); 1160aae69bed019826ddec93f761514652a93d871e49Harald Welte } else { 1161a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer repl->hook_entry[c->hooknum-1] = c->head_offset; 1162aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->underflow[c->hooknum-1] = c->foot_offset; 1163aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1164aae69bed019826ddec93f761514652a93d871e49Harald Welte 1165aae69bed019826ddec93f761514652a93d871e49Harald Welte /* iterate over rules */ 1166aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1167aae69bed019826ddec93f761514652a93d871e49Harald Welte ret = iptcc_compile_rule(h, repl, r); 1168aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1169aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 1170aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1171aae69bed019826ddec93f761514652a93d871e49Harald Welte 1172aae69bed019826ddec93f761514652a93d871e49Harald Welte /* put chain footer in place */ 1173aae69bed019826ddec93f761514652a93d871e49Harald Welte foot = (void *)repl->entries + c->foot_offset; 1174aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->e.target_offset = sizeof(STRUCT_ENTRY); 1175aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->e.next_offset = IPTCB_CHAIN_FOOT_SIZE; 1176aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(foot->target.target.u.user.name, STANDARD_TARGET); 1177aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.target.u.target_size = 1178aae69bed019826ddec93f761514652a93d871e49Harald Welte ALIGN(sizeof(STRUCT_STANDARD_TARGET)); 1179aae69bed019826ddec93f761514652a93d871e49Harald Welte /* builtin targets have verdict, others return */ 1180aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcc_is_builtin(c)) 1181aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.verdict = c->verdict; 1182aae69bed019826ddec93f761514652a93d871e49Harald Welte else 1183aae69bed019826ddec93f761514652a93d871e49Harald Welte foot->target.verdict = RETURN; 1184aae69bed019826ddec93f761514652a93d871e49Harald Welte /* set policy-counters */ 1185aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&foot->e.counters, &c->counters, sizeof(STRUCT_COUNTERS)); 1186aae69bed019826ddec93f761514652a93d871e49Harald Welte 1187aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 11883ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte} 11893ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1190aae69bed019826ddec93f761514652a93d871e49Harald Welte/* calculate offset and number for every rule in the cache */ 1191fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_chain_offsets(struct xtc_handle *h, struct chain_head *c, 1192efa8fc2123a2a9fc229ab471edd2b2688ce1da3aHarald Welte unsigned int *offset, unsigned int *num) 11933ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte{ 1194aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1195aae69bed019826ddec93f761514652a93d871e49Harald Welte 1196aae69bed019826ddec93f761514652a93d871e49Harald Welte c->head_offset = *offset; 1197aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("%s: chain_head %u, offset=%u\n", c->name, *num, *offset); 1198aae69bed019826ddec93f761514652a93d871e49Harald Welte 1199aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 1200aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Chain has header */ 1201a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer *offset += sizeof(STRUCT_ENTRY) 12029cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt + ALIGN(sizeof(struct xt_error_target)); 1203aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1204aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1205aae69bed019826ddec93f761514652a93d871e49Harald Welte 1206aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 1207aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("rule %u, offset=%u, index=%u\n", *num, *offset, *num); 1208aae69bed019826ddec93f761514652a93d871e49Harald Welte r->offset = *offset; 1209aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index = *num; 1210aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += r->size; 1211aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1212aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1213aae69bed019826ddec93f761514652a93d871e49Harald Welte 1214a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer DEBUGP("%s; chain_foot %u, offset=%u, index=%u\n", c->name, *num, 1215aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset, *num); 1216aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_offset = *offset; 1217aae69bed019826ddec93f761514652a93d871e49Harald Welte c->foot_index = *num; 1218aae69bed019826ddec93f761514652a93d871e49Harald Welte *offset += sizeof(STRUCT_ENTRY) 1219aae69bed019826ddec93f761514652a93d871e49Harald Welte + ALIGN(sizeof(STRUCT_STANDARD_TARGET)); 1220aae69bed019826ddec93f761514652a93d871e49Harald Welte (*num)++; 1221aae69bed019826ddec93f761514652a93d871e49Harald Welte 1222aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 12233ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte} 12243ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1225aae69bed019826ddec93f761514652a93d871e49Harald Welte/* put the pieces back together again */ 1226fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_table_prep(struct xtc_handle *h, unsigned int *size) 1227aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1228aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1229aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int offset = 0, num = 0; 1230aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret = 0; 12313ea8f40262386e6b1445a617841f28702fe74d9dHarald Welte 1232aae69bed019826ddec93f761514652a93d871e49Harald Welte /* First pass: calculate offset for every rule */ 1233aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1234aae69bed019826ddec93f761514652a93d871e49Harald Welte ret = iptcc_compile_chain_offsets(h, c, &offset, &num); 1235aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1236aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 1237aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1238aae69bed019826ddec93f761514652a93d871e49Harald Welte 1239aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Append one error rule at end of chain */ 1240aae69bed019826ddec93f761514652a93d871e49Harald Welte num++; 1241aae69bed019826ddec93f761514652a93d871e49Harald Welte offset += sizeof(STRUCT_ENTRY) 12429cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt + ALIGN(sizeof(struct xt_error_target)); 1243aae69bed019826ddec93f761514652a93d871e49Harald Welte 1244aae69bed019826ddec93f761514652a93d871e49Harald Welte /* ruleset size is now in offset */ 1245aae69bed019826ddec93f761514652a93d871e49Harald Welte *size = offset; 1246aae69bed019826ddec93f761514652a93d871e49Harald Welte return num; 1247aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1248aae69bed019826ddec93f761514652a93d871e49Harald Welte 1249fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int iptcc_compile_table(struct xtc_handle *h, STRUCT_REPLACE *repl) 12500113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1251aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1252aae69bed019826ddec93f761514652a93d871e49Harald Welte struct iptcb_chain_error *error; 12530113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1254aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Second pass: copy from cache to offsets, fill in jumps */ 1255aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(c, &h->chains, list) { 1256aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret = iptcc_compile_chain(h, repl, c); 1257aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) 1258aae69bed019826ddec93f761514652a93d871e49Harald Welte return ret; 12590113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 12600113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1261aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Append error rule at end of chain */ 1262aae69bed019826ddec93f761514652a93d871e49Harald Welte error = (void *)repl->entries + repl->size - IPTCB_CHAIN_ERROR_SIZE; 1263aae69bed019826ddec93f761514652a93d871e49Harald Welte error->entry.target_offset = sizeof(STRUCT_ENTRY); 1264aae69bed019826ddec93f761514652a93d871e49Harald Welte error->entry.next_offset = IPTCB_CHAIN_ERROR_SIZE; 12659cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt error->target.target.u.user.target_size = 12669cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt ALIGN(sizeof(struct xt_error_target)); 12679cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt strcpy((char *)&error->target.target.u.user.name, ERROR_TARGET); 12689cf67deb62f127902e686c48b951861bf848d0abJan Engelhardt strcpy((char *)&error->target.errorname, "ERROR"); 1269aae69bed019826ddec93f761514652a93d871e49Harald Welte 1270aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 12710113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1272e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1273aae69bed019826ddec93f761514652a93d871e49Harald Welte/********************************************************************** 1274aae69bed019826ddec93f761514652a93d871e49Harald Welte * EXTERNAL API (operates on cache only) 1275aae69bed019826ddec93f761514652a93d871e49Harald Welte **********************************************************************/ 1276aae69bed019826ddec93f761514652a93d871e49Harald Welte 1277e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Allocate handle of given size */ 1278fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic struct xtc_handle * 12790113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Weltealloc_handle(const char *tablename, unsigned int size, unsigned int num_rules) 1280e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1281fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h; 1282e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 12831639fe86579f86f5f6a954a9b0adde2e16ad1980Jan Engelhardt h = malloc(sizeof(*h)); 1284aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!h) { 1285e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 1286e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1287e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1288aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(h, 0, sizeof(*h)); 1289aae69bed019826ddec93f761514652a93d871e49Harald Welte INIT_LIST_HEAD(&h->chains); 1290e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher strcpy(h->info.name, tablename); 1291aae69bed019826ddec93f761514652a93d871e49Harald Welte 12920371c0c5eb17c81e8dd44c4aa31b58318e9b7b72Harald Welte h->entries = malloc(sizeof(STRUCT_GET_ENTRIES) + size); 1293aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!h->entries) 1294aae69bed019826ddec93f761514652a93d871e49Harald Welte goto out_free_handle; 1295aae69bed019826ddec93f761514652a93d871e49Harald Welte 1296aae69bed019826ddec93f761514652a93d871e49Harald Welte strcpy(h->entries->name, tablename); 12970371c0c5eb17c81e8dd44c4aa31b58318e9b7b72Harald Welte h->entries->size = size; 1298e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1299e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 1300aae69bed019826ddec93f761514652a93d871e49Harald Welte 1301aae69bed019826ddec93f761514652a93d871e49Harald Welteout_free_handle: 1302aae69bed019826ddec93f761514652a93d871e49Harald Welte free(h); 1303aae69bed019826ddec93f761514652a93d871e49Harald Welte 1304aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1305e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1306e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1307aae69bed019826ddec93f761514652a93d871e49Harald Welte 1308fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstruct xtc_handle * 130979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_INIT(const char *tablename) 1310e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1311fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardt struct xtc_handle *h; 131279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_GETINFO info; 1313efa8fc2123a2a9fc229ab471edd2b2688ce1da3aHarald Welte unsigned int tmp; 1314e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher socklen_t s; 1315175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt int sockfd; 1316e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 13178db1044ba608a78035bbf89007aab6b6d8ff6f68Miguel GAIOretry: 131879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_INIT; 1319e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1320841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson if (strlen(tablename) >= TABLE_MAXNAMELEN) { 1321841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson errno = EINVAL; 1322841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson return NULL; 1323841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson } 1324175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt 1325175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt sockfd = socket(TC_AF, SOCK_RAW, IPPROTO_RAW); 1326175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt if (sockfd < 0) 1327175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt return NULL; 1328175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt 1329c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski if (fcntl(sockfd, F_SETFD, FD_CLOEXEC) == -1) { 1330c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski fprintf(stderr, "Could not set close on exec: %s\n", 1331c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski strerror(errno)); 1332c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski abort(); 1333c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski } 1334c0aa38e22e8a09fcb1898ad0e042eaf6314d2d42Maciej Żenczykowski 1335e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher s = sizeof(info); 1336841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1337e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher strcpy(info.name, tablename); 1338664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates if (getsockopt(sockfd, TC_IPPROTO, SO_GET_INFO, &info, &s) < 0) { 1339175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt close(sockfd); 1340e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1341664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates } 1342e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1343aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("valid_hooks=0x%08x, num_entries=%u, size=%u\n", 1344aae69bed019826ddec93f761514652a93d871e49Harald Welte info.valid_hooks, info.num_entries, info.size); 1345aae69bed019826ddec93f761514652a93d871e49Harald Welte 13460113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte if ((h = alloc_handle(info.name, info.size, info.num_entries)) 1347841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson == NULL) { 1348175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt close(sockfd); 1349e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return NULL; 1350841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson } 1351e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1352e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Initialize current state */ 1353175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt h->sockfd = sockfd; 1354e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher h->info = info; 13550113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1356aae69bed019826ddec93f761514652a93d871e49Harald Welte h->entries->size = h->info.size; 1357e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 135879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell tmp = sizeof(STRUCT_GET_ENTRIES) + h->info.size; 1359e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1360175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt if (getsockopt(h->sockfd, TC_IPPROTO, SO_GET_ENTRIES, h->entries, 1361aae69bed019826ddec93f761514652a93d871e49Harald Welte &tmp) < 0) 1362aae69bed019826ddec93f761514652a93d871e49Harald Welte goto error; 1363aae69bed019826ddec93f761514652a93d871e49Harald Welte 1364aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 1365aae69bed019826ddec93f761514652a93d871e49Harald Welte { 1366a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer int fd = open("/tmp/libiptc-so_get_entries.blob", 13676028d4aa2df564f4f50cbaab96e5fdaa83996933Mike Frysinger O_CREAT|O_WRONLY, 0644); 1368aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 1369aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, h->entries, tmp); 1370aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 1371aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1372e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1373aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 1374aae69bed019826ddec93f761514652a93d871e49Harald Welte 1375aae69bed019826ddec93f761514652a93d871e49Harald Welte if (parse_table(h) < 0) 1376aae69bed019826ddec93f761514652a93d871e49Harald Welte goto error; 13777e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 1378e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(h); 1379e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return h; 1380aae69bed019826ddec93f761514652a93d871e49Harald Welteerror: 13811c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt TC_FREE(h); 13822f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy /* A different process changed the ruleset size, retry */ 13832f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy if (errno == EAGAIN) 13842f93205b375ee9f5a383f8041749a9b989012dd0Patrick McHardy goto retry; 1385aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1386e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1387e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1388841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefssonvoid 13891c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FREE(struct xtc_handle *h) 1390841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson{ 1391aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c, *tmp; 1392aae69bed019826ddec93f761514652a93d871e49Harald Welte 1393664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_FREE; 1394175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt close(h->sockfd); 1395aae69bed019826ddec93f761514652a93d871e49Harald Welte 13961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_for_each_entry_safe(c, tmp, &h->chains, list) { 1397aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *rtmp; 1398aae69bed019826ddec93f761514652a93d871e49Harald Welte 1399aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry_safe(r, rtmp, &c->rules, list) { 1400aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 1401aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1402aae69bed019826ddec93f761514652a93d871e49Harald Welte 1403aae69bed019826ddec93f761514652a93d871e49Harald Welte free(c); 1404aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1405aae69bed019826ddec93f761514652a93d871e49Harald Welte 14061c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_free(h); 1407aae69bed019826ddec93f761514652a93d871e49Harald Welte 14081c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt free(h->entries); 14091c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt free(h); 1410841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson} 1411841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 1412e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 141379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellprint_match(const STRUCT_ENTRY_MATCH *m) 1414e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1415228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell printf("Match name: `%s'\n", m->u.user.name); 1416e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1417e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1418e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1419fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic int dump_entry(STRUCT_ENTRY *e, struct xtc_handle *const handle); 1420a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 1421e6869a8f59d779ff4d5a0984c86d80db7078496Marc Bouchervoid 1422fd1873110f8e57be578df17fc9d03536b10f4f73Jan EngelhardtTC_DUMP_ENTRIES(struct xtc_handle *const handle) 1423e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1424664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_DUMP_ENTRIES; 1425e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(handle); 142697fb2f1579f0794377db1dca7c5bb07fade1a0dcPatrick McHardy 1427e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell printf("libiptc v%s. %u bytes.\n", 14288b7c64d6ba156a99008fcd810cba874c73294333Jan Engelhardt XTABLES_VERSION, handle->entries->size); 1429e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher printf("Table `%s'\n", handle->info.name); 1430d73af64b9d28a5b0309104232c848e8ca8ab6956Jan Engelhardt printf("Hooks: pre/in/fwd/out/post = %x/%x/%x/%x/%x\n", 143167088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_PRE_ROUTING], 143267088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_LOCAL_IN], 143367088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_FORWARD], 143467088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_LOCAL_OUT], 143567088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.hook_entry[HOOK_POST_ROUTING]); 1436d73af64b9d28a5b0309104232c848e8ca8ab6956Jan Engelhardt printf("Underflows: pre/in/fwd/out/post = %x/%x/%x/%x/%x\n", 143767088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_PRE_ROUTING], 143867088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_LOCAL_IN], 143967088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_FORWARD], 144067088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_LOCAL_OUT], 144167088e73ce7707229c56987868f112051defca5aRusty Russell handle->info.underflow[HOOK_POST_ROUTING]); 1442e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1443aae69bed019826ddec93f761514652a93d871e49Harald Welte ENTRY_ITERATE(handle->entries->entrytable, handle->entries->size, 144479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell dump_entry, handle); 14450113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1446e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1447e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Does this chain exist? */ 1448fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtint TC_IS_CHAIN(const char *chain, struct xtc_handle *const handle) 1449e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1450664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_IS_CHAIN; 1451aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_find_label(chain, handle) != NULL; 1452e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1453e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1454fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtstatic void iptcc_chain_iterator_advance(struct xtc_handle *handle) 1455aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1456aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c = handle->chain_iterator_cur; 1457aae69bed019826ddec93f761514652a93d871e49Harald Welte 1458aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c->list.next == &handle->chains) 1459aae69bed019826ddec93f761514652a93d871e49Harald Welte handle->chain_iterator_cur = NULL; 1460aae69bed019826ddec93f761514652a93d871e49Harald Welte else 1461a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer handle->chain_iterator_cur = 1462aae69bed019826ddec93f761514652a93d871e49Harald Welte list_entry(c->list.next, struct chain_head, list); 1463aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1464e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 146530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Iterator functions to run through the chains. */ 1466e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 14671c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FIRST_CHAIN(struct xtc_handle *handle) 1468e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 14691c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct chain_head *c = list_entry(handle->chains.next, 1470aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head, list); 1471aae69bed019826ddec93f761514652a93d871e49Harald Welte 1472aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_FIRST_CHAIN; 1473aae69bed019826ddec93f761514652a93d871e49Harald Welte 1474aae69bed019826ddec93f761514652a93d871e49Harald Welte 14751c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (list_empty(&handle->chains)) { 1476aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": no chains\n"); 14770113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return NULL; 1478aae69bed019826ddec93f761514652a93d871e49Harald Welte } 14790113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 14801c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->chain_iterator_cur = c; 14811c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 148230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1483aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": returning `%s'\n", c->name); 1484aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->name; 148530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 148630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 148730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Iterator functions to run through the chains. Returns NULL at end. */ 148830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russellconst char * 14891c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NEXT_CHAIN(struct xtc_handle *handle) 149030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 14911c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct chain_head *c = handle->chain_iterator_cur; 1492aae69bed019826ddec93f761514652a93d871e49Harald Welte 1493aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NEXT_CHAIN; 149430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1495aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1496aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": no more chains\n"); 149730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1498aae69bed019826ddec93f761514652a93d871e49Harald Welte } 149930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 15001c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 1501a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 1502aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP(": returning `%s'\n", c->name); 1503aae69bed019826ddec93f761514652a93d871e49Harald Welte return c->name; 150430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 150530fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 150630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Get first rule in the given chain: NULL for empty chain. */ 150779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellconst STRUCT_ENTRY * 15081c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FIRST_RULE(const char *chain, struct xtc_handle *handle) 150930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 1510aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1511aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1512aae69bed019826ddec93f761514652a93d871e49Harald Welte 1513aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_FIRST_RULE; 151430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1515aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("first rule(%s): ", chain); 1516aae69bed019826ddec93f761514652a93d871e49Harald Welte 15171c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 151830fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell if (!c) { 151930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell errno = ENOENT; 152030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1521e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1522e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 152330fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell /* Empty chain: single return/policy rule */ 1524aae69bed019826ddec93f761514652a93d871e49Harald Welte if (list_empty(&c->rules)) { 1525aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("no rules, returning NULL\n"); 152630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1527aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1528aae69bed019826ddec93f761514652a93d871e49Harald Welte 1529aae69bed019826ddec93f761514652a93d871e49Harald Welte r = list_entry(c->rules.next, struct rule_head, list); 15301c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = r; 1531aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("%p\n", r); 153230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1533aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 1534e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1535e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 153630fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell/* Returns NULL when rules run out. */ 153779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellconst STRUCT_ENTRY * 15381c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_NEXT_RULE(const STRUCT_ENTRY *prev, struct xtc_handle *handle) 153930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell{ 1540aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1541aae69bed019826ddec93f761514652a93d871e49Harald Welte 1542664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_NEXT_RULE; 15431c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt DEBUGP("rule_iterator_cur=%p...", handle->rule_iterator_cur); 1544aae69bed019826ddec93f761514652a93d871e49Harald Welte 15451c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (handle->rule_iterator_cur == NULL) { 1546aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("returning NULL\n"); 154730fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell return NULL; 1548aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1549a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 1550a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer r = list_entry(handle->rule_iterator_cur->list.next, 1551aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head, list); 155230fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1553aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_NEXT_RULE; 1554aae69bed019826ddec93f761514652a93d871e49Harald Welte 1555a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer DEBUGP_C("next=%p, head=%p...", &r->list, 15561c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt &handle->rule_iterator_cur->chain->rules); 1557aae69bed019826ddec93f761514652a93d871e49Harald Welte 15581c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (&r->list == &handle->rule_iterator_cur->chain->rules) { 15591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = NULL; 1560aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("finished, returning NULL\n"); 1561aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1562aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1563aae69bed019826ddec93f761514652a93d871e49Harald Welte 15641c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->rule_iterator_cur = r; 1565aae69bed019826ddec93f761514652a93d871e49Harald Welte 1566aae69bed019826ddec93f761514652a93d871e49Harald Welte /* NOTE: prev is without any influence ! */ 1567aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("returning rule %p\n", r); 1568aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->entry; 156930fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell} 157030fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell 1571aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns a pointer to the target name of this position. */ 157233690a1aec0b6309ff90066ca56285b6e43013f2Jan Engelhardtstatic const char *standard_target_map(int verdict) 1573e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1574aae69bed019826ddec93f761514652a93d871e49Harald Welte switch (verdict) { 1575aae69bed019826ddec93f761514652a93d871e49Harald Welte case RETURN: 157679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell return LABEL_RETURN; 1577aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1578aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_ACCEPT-1: 157979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell return LABEL_ACCEPT; 1580aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1581aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_DROP-1: 1582aae69bed019826ddec93f761514652a93d871e49Harald Welte return LABEL_DROP; 1583aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1584aae69bed019826ddec93f761514652a93d871e49Harald Welte case -NF_QUEUE-1: 1585aae69bed019826ddec93f761514652a93d871e49Harald Welte return LABEL_QUEUE; 1586aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1587aae69bed019826ddec93f761514652a93d871e49Harald Welte default: 1588aae69bed019826ddec93f761514652a93d871e49Harald Welte fprintf(stderr, "ERROR: %d not a valid target)\n", 1589aae69bed019826ddec93f761514652a93d871e49Harald Welte verdict); 1590aae69bed019826ddec93f761514652a93d871e49Harald Welte abort(); 1591aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1592e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1593aae69bed019826ddec93f761514652a93d871e49Harald Welte /* not reached */ 1594aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1595e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1596e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1597aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Returns a pointer to the target name of this position. */ 1598aae69bed019826ddec93f761514652a93d871e49Harald Welteconst char *TC_GET_TARGET(const STRUCT_ENTRY *ce, 15991c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1600e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1601aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = (STRUCT_ENTRY *)ce; 1602e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell struct rule_head *r = container_of(e, struct rule_head, entry[0]); 160351651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt const unsigned char *data; 1604e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1605aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_TARGET; 16060113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1607aae69bed019826ddec93f761514652a93d871e49Harald Welte switch(r->type) { 1608aae69bed019826ddec93f761514652a93d871e49Harald Welte int spos; 1609aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_FALLTHROUGH: 1610aae69bed019826ddec93f761514652a93d871e49Harald Welte return ""; 1611aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1612aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_JUMP: 1613aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("r=%p, jump=%p, name=`%s'\n", r, r->jump, r->jump->name); 1614aae69bed019826ddec93f761514652a93d871e49Harald Welte return r->jump->name; 1615aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1616aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_STANDARD: 161751651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt data = GET_TARGET(e)->data; 161851651b64fffc58d4f58d005fa7dc0d9669147c57Jan Engelhardt spos = *(const int *)data; 1619aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("r=%p, spos=%d'\n", r, spos); 1620aae69bed019826ddec93f761514652a93d871e49Harald Welte return standard_target_map(spos); 1621aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 1622aae69bed019826ddec93f761514652a93d871e49Harald Welte case IPTCC_R_MODULE: 1623aae69bed019826ddec93f761514652a93d871e49Harald Welte return GET_TARGET(e)->u.user.name; 1624aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 16250113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 1626aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 1627aae69bed019826ddec93f761514652a93d871e49Harald Welte} 1628aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Is this a built-in chain? Actually returns hook + 1. */ 1629aae69bed019826ddec93f761514652a93d871e49Harald Welteint 1630fd1873110f8e57be578df17fc9d03536b10f4f73Jan EngelhardtTC_BUILTIN(const char *chain, struct xtc_handle *const handle) 1631aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 1632aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1633a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 1634aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_BUILTIN; 16350113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1636aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_find_label(chain, handle); 1637aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1638aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 1639b0f3d2d7261be3fe256a66abcc237241fea43a02Martin Josefsson return 0; 16400113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 16410113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1642aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_is_builtin(c); 16430113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 16440113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1645aae69bed019826ddec93f761514652a93d871e49Harald Welte/* Get the policy of a given built-in chain */ 1646aae69bed019826ddec93f761514652a93d871e49Harald Welteconst char * 1647aae69bed019826ddec93f761514652a93d871e49Harald WelteTC_GET_POLICY(const char *chain, 1648aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_COUNTERS *counters, 16491c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 16500113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte{ 1651aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 16520113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1653aae69bed019826ddec93f761514652a93d871e49Harald Welte iptc_fn = TC_GET_POLICY; 1654fbc85236a6140918ab1d0fb0e07e2d72da46ce45Harald Welte 1655aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("called for chain %s\n", chain); 16560113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 16571c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt c = iptcc_find_label(chain, handle); 1658aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 1659aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 1660aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 16610113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 16620113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1663aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) 1664aae69bed019826ddec93f761514652a93d871e49Harald Welte return NULL; 16650113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1666aae69bed019826ddec93f761514652a93d871e49Harald Welte *counters = c->counters; 16670113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1668aae69bed019826ddec93f761514652a93d871e49Harald Welte return standard_target_map(c->verdict); 16690113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte} 1670e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1671e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 1672aae69bed019826ddec93f761514652a93d871e49Harald Welteiptcc_standard_map(struct rule_head *r, int verdict) 1673e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1674aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = r->entry; 167579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_STANDARD_TARGET *t; 1676e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 167779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell t = (STRUCT_STANDARD_TARGET *)GET_TARGET(e); 1678e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 167967088e73ce7707229c56987868f112051defca5aRusty Russell if (t->target.u.target_size 16808c700900e2a0cf87d7917cb62578583a60ad1210Philip Blundell != ALIGN(sizeof(STRUCT_STANDARD_TARGET))) { 1681e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 1682e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1683e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1684e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* memset for memcmp convenience on delete/replace */ 168579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell memset(t->target.u.user.name, 0, FUNCTION_MAXNAMELEN); 168679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell strcpy(t->target.u.user.name, STANDARD_TARGET); 1687e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher t->verdict = verdict; 1688e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1689aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_STANDARD; 1690aae69bed019826ddec93f761514652a93d871e49Harald Welte 1691e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1692e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 16937e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 1694e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic int 1695fd1873110f8e57be578df17fc9d03536b10f4f73Jan Engelhardtiptcc_map_target(struct xtc_handle *const handle, 1696aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r) 1697e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1698aae69bed019826ddec93f761514652a93d871e49Harald Welte STRUCT_ENTRY *e = r->entry; 16990113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte STRUCT_ENTRY_TARGET *t = GET_TARGET(e); 1700e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1701e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's empty (=> fall through) */ 1702aae69bed019826ddec93f761514652a93d871e49Harald Welte if (strcmp(t->u.user.name, "") == 0) { 1703aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_FALLTHROUGH; 1704aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1705aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1706e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's a standard target name... */ 170779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_ACCEPT) == 0) 1708aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_ACCEPT - 1); 170979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_DROP) == 0) 1710aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_DROP - 1); 171167088e73ce7707229c56987868f112051defca5aRusty Russell else if (strcmp(t->u.user.name, LABEL_QUEUE) == 0) 1712aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, -NF_QUEUE - 1); 171379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(t->u.user.name, LABEL_RETURN) == 0) 1714aae69bed019826ddec93f761514652a93d871e49Harald Welte return iptcc_standard_map(r, RETURN); 171579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (TC_BUILTIN(t->u.user.name, handle)) { 1716e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Can't jump to builtins. */ 1717e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 1718e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1719e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } else { 1720e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Maybe it's an existing chain name. */ 1721aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1722aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("trying to find chain `%s': ", t->u.user.name); 1723aae69bed019826ddec93f761514652a93d871e49Harald Welte 1724aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_find_label(t->u.user.name, handle); 1725aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c) { 1726aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("found!\n"); 1727aae69bed019826ddec93f761514652a93d871e49Harald Welte r->type = IPTCC_R_JUMP; 1728aae69bed019826ddec93f761514652a93d871e49Harald Welte r->jump = c; 1729aae69bed019826ddec93f761514652a93d871e49Harald Welte c->references++; 1730aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1731aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1732aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("not found :(\n"); 1733e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1734e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1735e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Must be a module? If not, kernel will reject... */ 17363aef54dce4f9bbe0b466478fd33a1d3131efbbb8Rusty Russell /* memset to all 0 for your memcmp convenience: don't clear version */ 1737228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell memset(t->u.user.name + strlen(t->u.user.name), 1738e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 0, 17393aef54dce4f9bbe0b466478fd33a1d3131efbbb8Rusty Russell FUNCTION_MAXNAMELEN - 1 - strlen(t->u.user.name)); 1740733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell r->type = IPTCC_R_MODULE; 1741aae69bed019826ddec93f761514652a93d871e49Harald Welte set_changed(handle); 1742aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1743e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1744e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 17450113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Insert the entry `fw' in chain `chain' into position `rulenum'. */ 1746e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 174779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_INSERT_ENTRY(const IPT_CHAINLABEL chain, 174879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 174979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 17501c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1751e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1752aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1753eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson struct rule_head *r; 1754eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson struct list_head *prev; 1755e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 175679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_INSERT_ENTRY; 1757aae69bed019826ddec93f761514652a93d871e49Harald Welte 17581c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1759e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1760e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1761e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1762e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1763eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson /* first rulenum index = 0 1764eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson first c->num_rules index = 1 */ 1765eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson if (rulenum > c->num_rules) { 1766e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = E2BIG; 1767e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1768e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1769e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1770631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson /* If we are inserting at the end just take advantage of the 1771631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson double linked list, insert will happen before the entry 1772631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson prev points to. */ 1773631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson if (rulenum == c->num_rules) { 1774eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson prev = &c->rules; 1775a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else if (rulenum + 1 <= c->num_rules/2) { 1776631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson r = iptcc_get_rule_num(c, rulenum + 1); 1777a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson prev = &r->list; 1778a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else { 1779a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 1780631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson prev = &r->list; 1781631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson } 1782eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson 1783aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1784aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1785aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1786aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1787aae69bed019826ddec93f761514652a93d871e49Harald Welte 1788aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1789aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1790aae69bed019826ddec93f761514652a93d871e49Harald Welte 17911c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1792aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 17930113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1794aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1795aae69bed019826ddec93f761514652a93d871e49Harald Welte 1796eb066cc4fb75a616400eaf38dfa31c052c76cf5cMartin Josefsson list_add_tail(&r->list, prev); 1797aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules++; 1798aae69bed019826ddec93f761514652a93d871e49Harald Welte 17991c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 1800e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1801aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1802e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1803e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1804e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Atomically replace rule `rulenum' in `chain' with `fw'. */ 1805e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 180679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_REPLACE_ENTRY(const IPT_CHAINLABEL chain, 180779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 180879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 18091c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1810e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1811aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1812aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *old; 1813e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 181479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_REPLACE_ENTRY; 1815e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18161c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1817e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1818e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1819e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1820e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18210f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson if (rulenum >= c->num_rules) { 1822e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = E2BIG; 1823e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1824e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1825e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18260f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson /* Take advantage of the double linked list if possible. */ 18270f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson if (rulenum + 1 <= c->num_rules/2) { 18280f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson old = iptcc_get_rule_num(c, rulenum + 1); 18290f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson } else { 18300f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson old = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 18310f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson } 18320f9b8b158bb71b96c6b2908f5bf7bb9670ff4eb0Martin Josefsson 1833aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1834aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1835e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1836aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1837aae69bed019826ddec93f761514652a93d871e49Harald Welte 1838aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1839aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1840e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18411c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1842aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 18430113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1844aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1845aae69bed019826ddec93f761514652a93d871e49Harald Welte 1846aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add(&r->list, &old->list); 1847aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(old); 18480113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 18491c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 1850aae69bed019826ddec93f761514652a93d871e49Harald Welte 1851aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1852e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1853e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 18540113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte/* Append entry `fw' to chain `chain'. Equivalent to insert with 1855e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher rulenum = length of chain. */ 1856e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 185779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_APPEND_ENTRY(const IPT_CHAINLABEL chain, 185879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *e, 18591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 1860e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1861aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1862aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 1863e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 186479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_APPEND_ENTRY; 18651c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1866aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("unable to find chain `%s'\n", chain); 1867e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1868e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1869e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1870e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1871aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_alloc_rule(c, e->next_offset))) { 1872aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("unable to allocate rule for chain `%s'\n", chain); 1873aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 1874aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 1875aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1876aae69bed019826ddec93f761514652a93d871e49Harald Welte 1877aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(r->entry, e, e->next_offset); 1878aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 1879aae69bed019826ddec93f761514652a93d871e49Harald Welte 18801c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 188112009531e6a96a62ee398eb0ab3e9ec0b3b57701Martin Josefsson DEBUGP("unable to map target of rule for chain `%s'\n", chain); 1882aae69bed019826ddec93f761514652a93d871e49Harald Welte free(r); 18830113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 1884aae69bed019826ddec93f761514652a93d871e49Harald Welte } 1885aae69bed019826ddec93f761514652a93d871e49Harald Welte 1886aae69bed019826ddec93f761514652a93d871e49Harald Welte list_add_tail(&r->list, &c->rules); 1887aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules++; 1888aae69bed019826ddec93f761514652a93d871e49Harald Welte 18891c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 18900113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1891aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 1892e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1893e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1894e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic inline int 189579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellmatch_different(const STRUCT_ENTRY_MATCH *a, 1896edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell const unsigned char *a_elems, 1897edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell const unsigned char *b_elems, 1898edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned char **maskptr) 1899e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 190079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY_MATCH *b; 1901edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned int i; 1902e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1903e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Offset of b is the same as a. */ 190430fd6e5d45e6013f4df10a226787c7a9f49369c1Rusty Russell b = (void *)b_elems + ((unsigned char *)a - a_elems); 1905e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1906228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell if (a->u.match_size != b->u.match_size) 1907e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1908e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1909228e98dd6303af11925235af4cf3c3ec450f3f41Rusty Russell if (strcmp(a->u.user.name, b->u.user.name) != 0) 1910e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 1911e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 191273ef09b21573ddb17ff75e5fd06fd4b52ec8ea40Rusty Russell *maskptr += ALIGN(sizeof(*a)); 1913edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell 191473ef09b21573ddb17ff75e5fd06fd4b52ec8ea40Rusty Russell for (i = 0; i < a->u.match_size - ALIGN(sizeof(*a)); i++) 1915edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell if (((a->data[i] ^ b->data[i]) & (*maskptr)[i]) != 0) 1916edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell return 1; 1917edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell *maskptr += i; 1918edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell return 0; 1919edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell} 1920edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell 1921edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russellstatic inline int 1922733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russelltarget_same(struct rule_head *a, struct rule_head *b,const unsigned char *mask) 1923edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell{ 1924edf14cf4b5edb148d7473f067d95e7bd1316900bRusty Russell unsigned int i; 1925733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell STRUCT_ENTRY_TARGET *ta, *tb; 1926e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1927733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (a->type != b->type) 1928733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1929733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1930733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell ta = GET_TARGET(a->entry); 1931733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell tb = GET_TARGET(b->entry); 1932733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1933733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell switch (a->type) { 1934733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_FALLTHROUGH: 1935733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 1936733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_JUMP: 1937733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return a->jump == b->jump; 1938733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_STANDARD: 1939733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return ((STRUCT_STANDARD_TARGET *)ta)->verdict 1940733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell == ((STRUCT_STANDARD_TARGET *)tb)->verdict; 1941733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell case IPTCC_R_MODULE: 1942733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (ta->u.target_size != tb->u.target_size) 1943733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1944733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (strcmp(ta->u.user.name, tb->u.user.name) != 0) 1945733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1946733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 1947733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell for (i = 0; i < ta->u.target_size - sizeof(*ta); i++) 1948daade4452715cbd1feea05d5231c5e38e3b0b98bRusty Russell if (((ta->data[i] ^ tb->data[i]) & mask[i]) != 0) 1949733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 0; 1950733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 1951733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell default: 1952733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell fprintf(stderr, "ERROR: bad type %i\n", a->type); 1953733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell abort(); 1954733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell } 1955e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 1956e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1957733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russellstatic unsigned char * 195879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellis_same(const STRUCT_ENTRY *a, 195979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_ENTRY *b, 196079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned char *matchmask); 1961e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1962d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek 1963d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek/* find the first rule in `chain' which matches `fw' and remove it unless dry_run is set */ 1964d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanekstatic int delete_entry(const IPT_CHAINLABEL chain, const STRUCT_ENTRY *origfw, 1965d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek unsigned char *matchmask, struct xtc_handle *handle, 1966d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek bool dry_run) 1967e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 1968aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 1969e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell struct rule_head *r, *i; 1970e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 197179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_ENTRY; 19721c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 1973e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 1974e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 1975e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 1976e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 1977e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell /* Create a rule_head from origfw. */ 1978e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell r = iptcc_alloc_rule(c, origfw->next_offset); 1979e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell if (!r) { 19800113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = ENOMEM; 19810113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 19820113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 19830113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 1984e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell memcpy(r->entry, origfw, origfw->next_offset); 1985e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell r->counter_map.maptype = COUNTER_MAP_NOMAP; 19861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!iptcc_map_target(handle, r)) { 1987e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell DEBUGP("unable to map target of rule for chain `%s'\n", chain); 1988e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell free(r); 1989e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell return 0; 199004a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer } else { 199104a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer /* iptcc_map_target increment target chain references 199204a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer * since this is a fake rule only used for matching 1993a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer * the chain references count is decremented again. 199404a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer */ 199504a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer if (r->type == IPTCC_R_JUMP 199604a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer && r->jump) 199704a1e4cabd185d7a93bea1ece276343044d9ecd4Patrick McHardyJesper Brouer r->jump->references--; 1998e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell } 1999fe53707285c250c6bb1e434ea6f8271cf061c67bHarald Welte 2000e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell list_for_each_entry(i, &c->rules, list) { 2001733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell unsigned char *mask; 2002733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2003733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell mask = is_same(r->entry, i->entry, matchmask); 2004733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (!mask) 2005733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell continue; 2006733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2007733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell if (!target_same(r, i, mask)) 2008733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell continue; 2009733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell 2010d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek /* if we are just doing a dry run, we simply skip the rest */ 201161b8f7ecb64b3b6fe04d2a6ad9598f66e42ceea8Franz Flasch if (dry_run){ 201261b8f7ecb64b3b6fe04d2a6ad9598f66e42ceea8Franz Flasch free(r); 2013d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek return 1; 201461b8f7ecb64b3b6fe04d2a6ad9598f66e42ceea8Franz Flasch } 2015d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek 2016733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell /* If we are about to delete the rule that is the 2017733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell * current iterator, move rule iterator back. next 2018733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell * pointer will then point to real next node */ 20191c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (i == handle->rule_iterator_cur) { 2020a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer handle->rule_iterator_cur = 20211c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_entry(handle->rule_iterator_cur->list.prev, 2022733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell struct rule_head, list); 2023733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell } 2024fe53707285c250c6bb1e434ea6f8271cf061c67bHarald Welte 2025733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell c->num_rules--; 2026733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell iptcc_delete_rule(i); 20272a5dbbb883fb0cc8a122b47a5d8e08ef3e6ff5bcMartin Josefsson 20281c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2029733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell free(r); 2030733e54b8250576d6a1e0ab5621ef5b144abdf018Rusty Russell return 1; 2031e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2032e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2033e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell free(r); 2034e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2035e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 20367e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell} 2037aae69bed019826ddec93f761514652a93d871e49Harald Welte 2038d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek/* check whether a specified rule is present */ 2039d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanekint TC_CHECK_ENTRY(const IPT_CHAINLABEL chain, const STRUCT_ENTRY *origfw, 2040d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek unsigned char *matchmask, struct xtc_handle *handle) 2041d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek{ 2042d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek /* do a dry-run delete to find out whether a matching rule exists */ 2043d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek return delete_entry(chain, origfw, matchmask, handle, true); 2044d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek} 2045d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek 2046d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek/* Delete the first rule in `chain' which matches `fw'. */ 2047d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanekint TC_DELETE_ENTRY(const IPT_CHAINLABEL chain, const STRUCT_ENTRY *origfw, 2048d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek unsigned char *matchmask, struct xtc_handle *handle) 2049d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek{ 2050d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek return delete_entry(chain, origfw, matchmask, handle, false); 2051d59b9db031abee37a9aa9776662dd15370faabf4Stefan Tomanek} 2052e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2053e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Delete the rule in position `rulenum' in `chain'. */ 2054e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 205579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_DELETE_NUM_ENTRY(const IPT_CHAINLABEL chain, 205679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell unsigned int rulenum, 20571c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2058e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2059aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2060aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2061e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 206279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_NUM_ENTRY; 2063aae69bed019826ddec93f761514652a93d871e49Harald Welte 20641c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2065e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2066e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2067e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2068e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2069a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (rulenum >= c->num_rules) { 2070631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson errno = E2BIG; 2071631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson return 0; 2072631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson } 2073631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson 2074631f3619b7fb597f5e1c8f61c7178d64be7c144fMartin Josefsson /* Take advantage of the double linked list if possible. */ 2075a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson if (rulenum + 1 <= c->num_rules/2) { 2076a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num(c, rulenum + 1); 2077a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson } else { 2078a5616dcfafd33fa46a03a8c270e5e09b2fba7cb1Martin Josefsson r = iptcc_get_rule_num_reverse(c, c->num_rules - rulenum); 2079e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2080e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2081aae69bed019826ddec93f761514652a93d871e49Harald Welte /* If we are about to delete the rule that is the current 2082aae69bed019826ddec93f761514652a93d871e49Harald Welte * iterator, move rule iterator back. next pointer will then 2083aae69bed019826ddec93f761514652a93d871e49Harald Welte * point to real next node */ 20841c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (r == handle->rule_iterator_cur) { 2085a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer handle->rule_iterator_cur = 20861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_entry(handle->rule_iterator_cur->list.prev, 2087aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head, list); 20880113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 2089e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2090aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules--; 2091aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(r); 2092aae69bed019826ddec93f761514652a93d871e49Harald Welte 20931c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 20942a5dbbb883fb0cc8a122b47a5d8e08ef3e6ff5bcMartin Josefsson 2095aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2096e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2097e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2098e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Flushes the entries in the given chain (ie. empties chain). */ 2099e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 21001c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_FLUSH_ENTRIES(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2101e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2102aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2103aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r, *tmp; 2104e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21050113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte iptc_fn = TC_FLUSH_ENTRIES; 21061c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2107e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2108e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2109e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2110e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2111aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry_safe(r, tmp, &c->rules, list) { 2112aae69bed019826ddec93f761514652a93d871e49Harald Welte iptcc_delete_rule(r); 2113aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2114aae69bed019826ddec93f761514652a93d871e49Harald Welte 2115aae69bed019826ddec93f761514652a93d871e49Harald Welte c->num_rules = 0; 2116aae69bed019826ddec93f761514652a93d871e49Harald Welte 21171c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2118aae69bed019826ddec93f761514652a93d871e49Harald Welte 2119aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2120e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2121e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2122e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Zeroes the counters in a chain. */ 2123e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 21241c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_ZERO_ENTRIES(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2125e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2126aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2127aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21287e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 2129664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_ZERO_ENTRIES; 21301c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2131e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2132e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2133e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2134e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2135e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay if (c->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2136e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay c->counter_map.maptype = COUNTER_MAP_ZEROED; 2137e5bd1d779fab33353c1dc2d2fa49db639dcebd38Andy Gay 2138aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 2139aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2140aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_ZEROED; 2141e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2142aae69bed019826ddec93f761514652a93d871e49Harald Welte 21431c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2144e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2145e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2146e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2147e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 21481cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteSTRUCT_COUNTERS * 21491cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_READ_COUNTER(const IPT_CHAINLABEL chain, 21501cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 21511c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 21521cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2153aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2154aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 21551cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21561cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_READ_COUNTER; 21571cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte CHECK(*handle); 21581cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 21601cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 21611cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return NULL; 21621cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 21631cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2164aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 21650113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 21660113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return NULL; 21670113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 21680113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2169aae69bed019826ddec93f761514652a93d871e49Harald Welte return &r->entry[0].counters; 21701cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 21711cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21721cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welteint 21731cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_ZERO_COUNTER(const IPT_CHAINLABEL chain, 21741cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 21751c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 21761cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2177aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2178aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2179a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer 21801cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_ZERO_COUNTER; 21811c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 21821cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21831c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 21841cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 21851cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 0; 21861cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 21871cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2188aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 21890113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 21900113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 21910113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 21920113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2193aae69bed019826ddec93f761514652a93d871e49Harald Welte if (r->counter_map.maptype == COUNTER_MAP_NORMAL_MAP) 2194aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_ZEROED; 21951cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21961c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 21971cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 21981cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 1; 21991cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22001cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2201a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouerint 22021cef74d943055668b5e356eebea877fdaa1ce3e0Harald WelteTC_SET_COUNTER(const IPT_CHAINLABEL chain, 22031cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte unsigned int rulenum, 22041cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_COUNTERS *counters, 22051c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 22061cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte{ 2207aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2208aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 22091cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_ENTRY *e; 22101cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22111cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte iptc_fn = TC_SET_COUNTER; 22121c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt CHECK(handle); 22131cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22141c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 22151cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte errno = ENOENT; 22161cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 0; 22171cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 22180113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2219aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!(r = iptcc_get_rule_num(c, rulenum))) { 22200113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte errno = E2BIG; 22210113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte return 0; 22220113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte } 22230113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2224aae69bed019826ddec93f761514652a93d871e49Harald Welte e = r->entry; 2225aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.maptype = COUNTER_MAP_SET; 22260113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 22270113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte memcpy(&e->counters, counters, sizeof(STRUCT_COUNTERS)); 22281cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22291c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 22301cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 22311cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte return 1; 22321cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte} 22331cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2234e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Creates a new chain. */ 2235e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* To create a chain, create two rules: error node and unconditional 2236e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher * return. */ 2237e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 22381c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_CREATE_CHAIN(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2239e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2240aae69bed019826ddec93f761514652a93d871e49Harald Welte static struct chain_head *c; 22411f23d3c2544f4329b31804392abc4eff434ba308Patrick McHardy int capacity; 22421f23d3c2544f4329b31804392abc4eff434ba308Patrick McHardy int exceeded; 2243e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 224479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_CREATE_CHAIN; 2245e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2246e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* find_label doesn't cover built-in targets: DROP, ACCEPT, 2247e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher QUEUE, RETURN. */ 22481c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (iptcc_find_label(chain, handle) 224979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_DROP) == 0 225079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_ACCEPT) == 0 225167088e73ce7707229c56987868f112051defca5aRusty Russell || strcmp(chain, LABEL_QUEUE) == 0 225279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(chain, LABEL_RETURN) == 0) { 2253aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Chain `%s' already exists\n", chain); 2254e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EEXIST; 2255e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2256e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2257e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 225879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strlen(chain)+1 > sizeof(IPT_CHAINLABEL)) { 2259aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Chain name `%s' too long\n", chain); 2260e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2261e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2262e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2263e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2264aae69bed019826ddec93f761514652a93d871e49Harald Welte c = iptcc_alloc_chain_head(chain, 0); 2265aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!c) { 2266aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Cannot allocate memory for chain `%s'\n", chain); 2267aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 2268aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 2269e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2270aae69bed019826ddec93f761514652a93d871e49Harald Welte } 22711c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->num_chains++; /* New user defined chain */ 2272e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2273aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("Creating chain `%s'\n", chain); 22741c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptc_insert_chain(handle, c); /* Insert sorted */ 2275e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 227601444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer /* Inserting chains don't change the correctness of the chain 227701444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * index (except if its smaller than index[0], but that 227801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * handled by iptc_insert_chain). It only causes longer lists 227901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * in the buckets. Thus, only rebuild chain index when the 228001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer * capacity is exceed with CHAIN_INDEX_INSERT_MAX chains. 228101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer */ 22821c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt capacity = handle->chain_index_sz * CHAIN_INDEX_BUCKET_LEN; 22831c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt exceeded = handle->num_chains - capacity; 228401444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer if (exceeded > CHAIN_INDEX_INSERT_MAX) { 228501444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer debug("Capacity(%d) exceeded(%d) rebuild (chains:%d)\n", 22861c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt capacity, exceeded, handle->num_chains); 22871c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_rebuild(handle); 228801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer } 228901444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 22901c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2291e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2292aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2293e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2294e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2295e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Get the number of references to this chain. */ 2296e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 229779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_GET_REFERENCES(unsigned int *ref, const IPT_CHAINLABEL chain, 22981c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2299e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2300aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2301e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2302664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_GET_REFERENCES; 23031c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2304e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2305e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2306e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2307e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2308aae69bed019826ddec93f761514652a93d871e49Harald Welte *ref = c->references; 2309aae69bed019826ddec93f761514652a93d871e49Harald Welte 2310e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2311e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2312e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2313e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Deletes a chain. */ 2314e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 23151c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_DELETE_CHAIN(const IPT_CHAINLABEL chain, struct xtc_handle *handle) 2316e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2317e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int references; 2318aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 23197e53bf9c2a697abdb6f1385557338423a86612a3Rusty Russell 232079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_DELETE_CHAIN; 2321e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23221c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2323aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot find chain `%s'\n", chain); 2324aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 2325aae69bed019826ddec93f761514652a93d871e49Harald Welte return 0; 2326aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2327aae69bed019826ddec93f761514652a93d871e49Harald Welte 23281c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (TC_BUILTIN(chain, handle)) { 2329aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot remove builtin chain `%s'\n", chain); 2330e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2331e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2332e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2333e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2334aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!TC_GET_REFERENCES(&references, chain, handle)) { 2335aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot get references on chain `%s'\n", chain); 2336e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2337e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2338e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2339aae69bed019826ddec93f761514652a93d871e49Harald Welte if (references > 0) { 2340aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' still has references\n", chain); 2341aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = EMLINK; 2342e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2343e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2344e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2345aae69bed019826ddec93f761514652a93d871e49Harald Welte if (c->num_rules) { 2346aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' is not empty\n", chain); 2347e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOTEMPTY; 2348e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2349e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2350e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2351aae69bed019826ddec93f761514652a93d871e49Harald Welte /* If we are about to delete the chain that is the current 235248bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer * iterator, move chain iterator forward. */ 23531c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (c == handle->chain_iterator_cur) 23541c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_iterator_advance(handle); 2355aae69bed019826ddec93f761514652a93d871e49Harald Welte 23561c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt handle->num_chains--; /* One user defined chain deleted */ 235748bde40e73b45ad134d32cde88b779fe509faf64Jesper Dangaard Brouer 235801444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer //list_del(&c->list); /* Done in iptcc_chain_index_delete_chain() */ 23591c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt iptcc_chain_index_delete_chain(c, handle); 236001444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer free(c); 236101444da4cb70417d2dc2643e2d48c70de7ff8e96Jesper Dangaard Brouer 2362aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("chain `%s' deleted\n", chain); 23630113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 23641c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2365aae69bed019826ddec93f761514652a93d871e49Harald Welte 2366aae69bed019826ddec93f761514652a93d871e49Harald Welte return 1; 2367e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2368e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2369e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Renames a chain. */ 237079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellint TC_RENAME_CHAIN(const IPT_CHAINLABEL oldname, 237179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const IPT_CHAINLABEL newname, 23721c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2373e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2374aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 237579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_RENAME_CHAIN; 2376e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23771de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte /* find_label doesn't cover built-in targets: DROP, ACCEPT, 23781de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte QUEUE, RETURN. */ 23791c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (iptcc_find_label(newname, handle) 238079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_DROP) == 0 238179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_ACCEPT) == 0 23821de804642d4c8e9c71b7e225a1528fff15fa7faaHarald Welte || strcmp(newname, LABEL_QUEUE) == 0 238379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell || strcmp(newname, LABEL_RETURN) == 0) { 2384e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EEXIST; 2385e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2386e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2387e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 23881c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(oldname, handle)) 23891c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt || TC_BUILTIN(oldname, handle)) { 2390e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOENT; 2391e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2392e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2393e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 239479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strlen(newname)+1 > sizeof(IPT_CHAINLABEL)) { 2395e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2396e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2397e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2398e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 239964ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer /* This only unlinks "c" from the list, thus no free(c) */ 240064ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer iptcc_chain_index_delete_chain(c, handle); 240164ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer 240264ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer /* Change the name of the chain */ 2403aae69bed019826ddec93f761514652a93d871e49Harald Welte strncpy(c->name, newname, sizeof(IPT_CHAINLABEL)); 240464ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer 240564ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer /* Insert sorted into to list again */ 240664ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer iptc_insert_chain(handle, c); 240764ff47cde38e48b621883947fd61b9b1357f9451Jesper Dangaard Brouer 24081c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 24090113fe75ff05e09e6f3d251534d9ae32e9aa717cHarald Welte 2410e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2411e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2412e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2413e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Sets the policy on a built-in chain. */ 2414e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 241579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_SET_POLICY(const IPT_CHAINLABEL chain, 241679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const IPT_CHAINLABEL policy, 24171cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte STRUCT_COUNTERS *counters, 24181c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt struct xtc_handle *handle) 2419e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2420aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2421e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 242279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell iptc_fn = TC_SET_POLICY; 2423aae69bed019826ddec93f761514652a93d871e49Harald Welte 24241c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!(c = iptcc_find_label(chain, handle))) { 2425aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot find chain `%s'\n", chain); 2426c8264991454b5e77279830736f80ea3153b6f814Marc Boucher errno = ENOENT; 2427e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2428aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2429e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2430aae69bed019826ddec93f761514652a93d871e49Harald Welte if (!iptcc_is_builtin(c)) { 2431aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("cannot set policy of userdefinedchain `%s'\n", chain); 2432aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOENT; 24339e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte return 0; 24349e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte } 24359e03380e9f78ae347ae4f3f041c4eca50348f2e8Harald Welte 243679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell if (strcmp(policy, LABEL_ACCEPT) == 0) 2437aae69bed019826ddec93f761514652a93d871e49Harald Welte c->verdict = -NF_ACCEPT - 1; 243879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell else if (strcmp(policy, LABEL_DROP) == 0) 2439aae69bed019826ddec93f761514652a93d871e49Harald Welte c->verdict = -NF_DROP - 1; 2440e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher else { 2441e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = EINVAL; 2442e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 0; 2443e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 24441cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 24451cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte if (counters) { 24461cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte /* set byte and packet counters */ 2447aae69bed019826ddec93f761514652a93d871e49Harald Welte memcpy(&c->counters, counters, sizeof(STRUCT_COUNTERS)); 2448aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.maptype = COUNTER_MAP_SET; 24491cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } else { 2450aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.maptype = COUNTER_MAP_NOMAP; 24511cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte } 24521cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 24531c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt set_changed(handle); 2454e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2455e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2456e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2457e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2458e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Without this, on gcc 2.7.2.3, we get: 245979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell libiptc.c: In function `TC_COMMIT': 2460e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher libiptc.c:833: fixed or forbidden register was spilled. 2461e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher This may be due to a compiler bug or to impossible asm 2462e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher statements or clauses. 2463e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher*/ 2464e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherstatic void 246579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russellsubtract_counters(STRUCT_COUNTERS *answer, 246679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_COUNTERS *a, 246779dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell const STRUCT_COUNTERS *b) 2468e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2469e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher answer->pcnt = a->pcnt - b->pcnt; 2470e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher answer->bcnt = a->bcnt - b->bcnt; 2471e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2472e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2473aae69bed019826ddec93f761514652a93d871e49Harald Welte 2474dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardtstatic void counters_nomap(STRUCT_COUNTERS_INFO *newcounters, unsigned int idx) 2475aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2476dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt newcounters->counters[idx] = ((STRUCT_COUNTERS) { 0, 0}); 2477aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("NOMAP => zero\n"); 2478aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2479aae69bed019826ddec93f761514652a93d871e49Harald Welte 2480aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_normal_map(STRUCT_COUNTERS_INFO *newcounters, 2481dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt STRUCT_REPLACE *repl, unsigned int idx, 2482aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int mappos) 2483aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2484aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Original read: X. 2485aae69bed019826ddec93f761514652a93d871e49Harald Welte * Atomic read on replacement: X + Y. 2486aae69bed019826ddec93f761514652a93d871e49Harald Welte * Currently in kernel: Z. 2487aae69bed019826ddec93f761514652a93d871e49Harald Welte * Want in kernel: X + Y + Z. 2488aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in X + Y 2489aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in replacement read. 2490aae69bed019826ddec93f761514652a93d871e49Harald Welte */ 2491dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt newcounters->counters[idx] = repl->counters[mappos]; 2492aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("NORMAL_MAP => mappos %u \n", mappos); 2493aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2494aae69bed019826ddec93f761514652a93d871e49Harald Welte 2495aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_map_zeroed(STRUCT_COUNTERS_INFO *newcounters, 2496dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt STRUCT_REPLACE *repl, unsigned int idx, 2497dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int mappos, STRUCT_COUNTERS *counters) 2498aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2499aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Original read: X. 2500aae69bed019826ddec93f761514652a93d871e49Harald Welte * Atomic read on replacement: X + Y. 2501aae69bed019826ddec93f761514652a93d871e49Harald Welte * Currently in kernel: Z. 2502aae69bed019826ddec93f761514652a93d871e49Harald Welte * Want in kernel: Y + Z. 2503aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in Y. 2504aae69bed019826ddec93f761514652a93d871e49Harald Welte * => Add in (replacement read - original read). 2505aae69bed019826ddec93f761514652a93d871e49Harald Welte */ 2506dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt subtract_counters(&newcounters->counters[idx], 2507aae69bed019826ddec93f761514652a93d871e49Harald Welte &repl->counters[mappos], 2508aae69bed019826ddec93f761514652a93d871e49Harald Welte counters); 2509aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("ZEROED => mappos %u\n", mappos); 2510aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2511aae69bed019826ddec93f761514652a93d871e49Harald Welte 2512aae69bed019826ddec93f761514652a93d871e49Harald Weltestatic void counters_map_set(STRUCT_COUNTERS_INFO *newcounters, 2513dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt unsigned int idx, STRUCT_COUNTERS *counters) 2514aae69bed019826ddec93f761514652a93d871e49Harald Welte{ 2515aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Want to set counter (iptables-restore) */ 2516aae69bed019826ddec93f761514652a93d871e49Harald Welte 2517dbb77543ad6afe29e9a1881b2d4fc212de621a55Jan Engelhardt memcpy(&newcounters->counters[idx], counters, 2518aae69bed019826ddec93f761514652a93d871e49Harald Welte sizeof(STRUCT_COUNTERS)); 2519aae69bed019826ddec93f761514652a93d871e49Harald Welte 2520aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP_C("SET\n"); 2521aae69bed019826ddec93f761514652a93d871e49Harald Welte} 2522aae69bed019826ddec93f761514652a93d871e49Harald Welte 2523aae69bed019826ddec93f761514652a93d871e49Harald Welte 2524e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherint 25251c9015b2cb483678f153121255e10ec0bbfde3e6Jan EngelhardtTC_COMMIT(struct xtc_handle *handle) 2526e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2527e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Replace, then map back the counters. */ 252879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_REPLACE *repl; 252979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell STRUCT_COUNTERS_INFO *newcounters; 2530aae69bed019826ddec93f761514652a93d871e49Harald Welte struct chain_head *c; 2531aae69bed019826ddec93f761514652a93d871e49Harald Welte int ret; 2532841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson size_t counterlen; 2533aae69bed019826ddec93f761514652a93d871e49Harald Welte int new_number; 2534aae69bed019826ddec93f761514652a93d871e49Harald Welte unsigned int new_size; 2535e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2536664c0a30b7963040da2e7a7e86dc56a0f1a829b5Derrik Pates iptc_fn = TC_COMMIT; 2537e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher CHECK(*handle); 2538841e4aed2349046eb2c0b1375139c06569a93bd0Martin Josefsson 2539e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Don't commit if nothing changed. */ 25401c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt if (!handle->changed) 2541e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher goto finished; 2542e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 25431c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt new_number = iptcc_compile_table_prep(handle, &new_size); 2544aae69bed019826ddec93f761514652a93d871e49Harald Welte if (new_number < 0) { 2545aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ENOMEM; 2546d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_zero; 2547aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2548aae69bed019826ddec93f761514652a93d871e49Harald Welte 2549aae69bed019826ddec93f761514652a93d871e49Harald Welte repl = malloc(sizeof(*repl) + new_size); 2550e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!repl) { 2551e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2552d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_zero; 2553e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2554ad3b4f9973ac15981b98b8fc4d364ef1ce524212Martin Josefsson memset(repl, 0, sizeof(*repl) + new_size); 2555aae69bed019826ddec93f761514652a93d871e49Harald Welte 2556e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell#if 0 2557e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell TC_DUMP_ENTRIES(*handle); 2558e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell#endif 2559e45c71321e77735a1d66b180f8a29bea33aeb1b0Rusty Russell 2560aae69bed019826ddec93f761514652a93d871e49Harald Welte counterlen = sizeof(STRUCT_COUNTERS_INFO) 2561aae69bed019826ddec93f761514652a93d871e49Harald Welte + sizeof(STRUCT_COUNTERS) * new_number; 2562e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2563e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* These are the old counters we will get from kernel */ 256479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell repl->counters = malloc(sizeof(STRUCT_COUNTERS) 25651c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt * handle->info.num_entries); 2566e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!repl->counters) { 2567e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2568d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_repl; 2569e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2570e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* These are the counters we're going to put back, later. */ 2571e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher newcounters = malloc(counterlen); 2572e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if (!newcounters) { 2573e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher errno = ENOMEM; 2574d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_repl_counters; 2575e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2576aae69bed019826ddec93f761514652a93d871e49Harald Welte memset(newcounters, 0, counterlen); 2577e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 25781c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt strcpy(repl->name, handle->info.name); 2579aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->num_entries = new_number; 2580aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->size = new_size; 2581aae69bed019826ddec93f761514652a93d871e49Harald Welte 25821c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt repl->num_counters = handle->info.num_entries; 25831c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt repl->valid_hooks = handle->info.valid_hooks; 2584aae69bed019826ddec93f761514652a93d871e49Harald Welte 2585aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("num_entries=%u, size=%u, num_counters=%u\n", 2586aae69bed019826ddec93f761514652a93d871e49Harald Welte repl->num_entries, repl->size, repl->num_counters); 2587aae69bed019826ddec93f761514652a93d871e49Harald Welte 25881c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt ret = iptcc_compile_table(handle, repl); 2589aae69bed019826ddec93f761514652a93d871e49Harald Welte if (ret < 0) { 2590aae69bed019826ddec93f761514652a93d871e49Harald Welte errno = ret; 2591d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2592aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2593aae69bed019826ddec93f761514652a93d871e49Harald Welte 2594aae69bed019826ddec93f761514652a93d871e49Harald Welte 2595aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 2596aae69bed019826ddec93f761514652a93d871e49Harald Welte { 2597a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer int fd = open("/tmp/libiptc-so_set_replace.blob", 25986028d4aa2df564f4f50cbaab96e5fdaa83996933Mike Frysinger O_CREAT|O_WRONLY, 0644); 2599aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 2600aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, repl, sizeof(*repl) + repl->size); 2601aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 2602aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2603aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2604aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 2605e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2606175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt ret = setsockopt(handle->sockfd, TC_IPPROTO, SO_SET_REPLACE, repl, 2607d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte sizeof(*repl) + repl->size); 2608e0865ad29d53b0d3d34b5cc8b5e023eb593172a8Patrick McHardy if (ret < 0) 2609d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2610e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2611e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* Put counters back. */ 26121c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt strcpy(newcounters->name, handle->info.name); 2613aae69bed019826ddec93f761514652a93d871e49Harald Welte newcounters->num_counters = new_number; 2614aae69bed019826ddec93f761514652a93d871e49Harald Welte 26151c9015b2cb483678f153121255e10ec0bbfde3e6Jan Engelhardt list_for_each_entry(c, &handle->chains, list) { 2616aae69bed019826ddec93f761514652a93d871e49Harald Welte struct rule_head *r; 2617aae69bed019826ddec93f761514652a93d871e49Harald Welte 2618aae69bed019826ddec93f761514652a93d871e49Harald Welte /* Builtin chains have their own counters */ 2619aae69bed019826ddec93f761514652a93d871e49Harald Welte if (iptcc_is_builtin(c)) { 2620aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("counter for chain-index %u: ", c->foot_index); 2621aae69bed019826ddec93f761514652a93d871e49Harald Welte switch(c->counter_map.maptype) { 2622aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NOMAP: 2623aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_nomap(newcounters, c->foot_index); 2624aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2625aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NORMAL_MAP: 2626aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_normal_map(newcounters, repl, 2627a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer c->foot_index, 2628aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.mappos); 2629aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2630aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_ZEROED: 2631aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_zeroed(newcounters, repl, 2632a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer c->foot_index, 2633aae69bed019826ddec93f761514652a93d871e49Harald Welte c->counter_map.mappos, 2634aae69bed019826ddec93f761514652a93d871e49Harald Welte &c->counters); 2635aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2636aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_SET: 2637aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_set(newcounters, c->foot_index, 2638aae69bed019826ddec93f761514652a93d871e49Harald Welte &c->counters); 2639aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2640aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2641aae69bed019826ddec93f761514652a93d871e49Harald Welte } 26421cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte 2643aae69bed019826ddec93f761514652a93d871e49Harald Welte list_for_each_entry(r, &c->rules, list) { 2644aae69bed019826ddec93f761514652a93d871e49Harald Welte DEBUGP("counter for index %u: ", r->index); 2645aae69bed019826ddec93f761514652a93d871e49Harald Welte switch (r->counter_map.maptype) { 2646aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NOMAP: 2647aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_nomap(newcounters, r->index); 2648aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2649aae69bed019826ddec93f761514652a93d871e49Harald Welte 2650aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_NORMAL_MAP: 2651aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_normal_map(newcounters, repl, 2652a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer r->index, 2653aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos); 2654aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2655aae69bed019826ddec93f761514652a93d871e49Harald Welte 2656aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_ZEROED: 2657aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_zeroed(newcounters, repl, 2658aae69bed019826ddec93f761514652a93d871e49Harald Welte r->index, 2659aae69bed019826ddec93f761514652a93d871e49Harald Welte r->counter_map.mappos, 2660aae69bed019826ddec93f761514652a93d871e49Harald Welte &r->entry->counters); 2661aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2662aae69bed019826ddec93f761514652a93d871e49Harald Welte 2663aae69bed019826ddec93f761514652a93d871e49Harald Welte case COUNTER_MAP_SET: 2664aae69bed019826ddec93f761514652a93d871e49Harald Welte counters_map_set(newcounters, r->index, 2665aae69bed019826ddec93f761514652a93d871e49Harald Welte &r->entry->counters); 2666aae69bed019826ddec93f761514652a93d871e49Harald Welte break; 2667aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2668e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2669e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 267062527ce5f0ffaa5b18aa118f64c21af238ddc156Rusty Russell 2671aae69bed019826ddec93f761514652a93d871e49Harald Welte#ifdef IPTC_DEBUG2 2672aae69bed019826ddec93f761514652a93d871e49Harald Welte { 2673a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer int fd = open("/tmp/libiptc-so_set_add_counters.blob", 26746028d4aa2df564f4f50cbaab96e5fdaa83996933Mike Frysinger O_CREAT|O_WRONLY, 0644); 2675aae69bed019826ddec93f761514652a93d871e49Harald Welte if (fd >= 0) { 2676aae69bed019826ddec93f761514652a93d871e49Harald Welte write(fd, newcounters, counterlen); 2677aae69bed019826ddec93f761514652a93d871e49Harald Welte close(fd); 2678aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2679aae69bed019826ddec93f761514652a93d871e49Harald Welte } 2680aae69bed019826ddec93f761514652a93d871e49Harald Welte#endif 2681aae69bed019826ddec93f761514652a93d871e49Harald Welte 2682175f451104532f3054b1824695d16a4ee1d8ea34Jan Engelhardt ret = setsockopt(handle->sockfd, TC_IPPROTO, SO_SET_ADD_COUNTERS, 2683d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte newcounters, counterlen); 2684e0865ad29d53b0d3d34b5cc8b5e023eb593172a8Patrick McHardy if (ret < 0) 2685d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte goto out_free_newcounters; 2686e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2687e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(repl->counters); 2688e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(repl); 2689e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher free(newcounters); 2690e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2691d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Weltefinished: 2692e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return 1; 2693d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte 2694d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_newcounters: 2695d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(newcounters); 2696d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_repl_counters: 2697d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(repl->counters); 2698d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_free_repl: 2699d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte free(repl); 2700d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welteout_zero: 2701d6ba6f57658ee2fee7cf763259e8a0c601479989Harald Welte return 0; 2702e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2703e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2704e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher/* Translates errno numbers into more human-readable form than strerror. */ 2705e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucherconst char * 270679dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty RussellTC_STRERROR(int err) 2707e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher{ 2708e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher unsigned int i; 2709e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher struct table_struct { 2710e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher void *fn; 2711e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher int err; 2712e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher const char *message; 2713e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } table [] = 27144ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { { TC_INIT, EPERM, "Permission denied (you must be root)" }, 271579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INIT, EINVAL, "Module is wrong version" }, 2716a9fe5b3d62e4e974e9517b23d0bf7f0f146ed11eJesper Dangaard Brouer { TC_INIT, ENOENT, 27174ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte "Table does not exist (do you need to insmod?)" }, 271879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, ENOTEMPTY, "Chain is not empty" }, 271979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, EINVAL, "Can't delete built-in chain" }, 272079dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_CHAIN, EMLINK, 2721e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher "Can't delete chain with references left" }, 272279dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_CREATE_CHAIN, EEXIST, "Chain already exists" }, 272379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, E2BIG, "Index of insertion too big" }, 272479dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_REPLACE_ENTRY, E2BIG, "Index of replacement too big" }, 272579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_NUM_ENTRY, E2BIG, "Index of deletion too big" }, 27261cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte { TC_READ_COUNTER, E2BIG, "Index of counter too big" }, 27271cef74d943055668b5e356eebea877fdaa1ce3e0Harald Welte { TC_ZERO_COUNTER, E2BIG, "Index of counter too big" }, 272879dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, ELOOP, "Loop found in table" }, 272979dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_INSERT_ENTRY, EINVAL, "Target problem" }, 2730e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher /* ENOENT for DELETE probably means no matching rule */ 273179dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_DELETE_ENTRY, ENOENT, 2732c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad rule (does a matching rule exist in that chain?)" }, 273379dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_SET_POLICY, ENOENT, 2734c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad built-in chain name" }, 273579dee0702b18c8ea1d1f7a2b1f6b29349466986bRusty Russell { TC_SET_POLICY, EINVAL, 2736c8264991454b5e77279830736f80ea3153b6f814Marc Boucher "Bad policy name" }, 27374ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte 27384ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, 0, "Incompatible with this kernel" }, 27394ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOPROTOOPT, "iptables who? (do you need to insmod?)" }, 27404ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOSYS, "Will be implemented real soon. I promise ;)" }, 27414ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOMEM, "Memory allocation problem" }, 27424ccfa630d9a588d4b852abef8bc467642427c8cfHarald Welte { NULL, ENOENT, "No chain/target/match by that name" }, 2743e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher }; 2744e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2745e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher for (i = 0; i < sizeof(table)/sizeof(struct table_struct); i++) { 2746e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher if ((!table[i].fn || table[i].fn == iptc_fn) 2747e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher && table[i].err == err) 2748e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return table[i].message; 2749e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher } 2750e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher 2751e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher return strerror(err); 2752e6869a8f59d779ff4d5a0984c86d80db7078496Marc Boucher} 2753de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt 2754de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardtconst struct xtc_ops TC_OPS = { 2755de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .commit = TC_COMMIT, 2756de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .free = TC_FREE, 2757de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .builtin = TC_BUILTIN, 2758de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .is_chain = TC_IS_CHAIN, 2759de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .flush_entries = TC_FLUSH_ENTRIES, 2760de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .create_chain = TC_CREATE_CHAIN, 2761de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .set_policy = TC_SET_POLICY, 2762de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt .strerror = TC_STRERROR, 2763de4d2d3b716d83a6d3831aaf902c5adb5d1d14c9Jan Engelhardt}; 2764