diff options
author | Giuseppe Longo <giuseppelng@gmail.com> | 2013-09-16 10:58:16 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2013-12-30 23:50:46 +0100 |
commit | 217f021925872dcbce4187408762845ae3f6f182 (patch) | |
tree | 0f89a883da3b034494f2dac6bbce964011ce5bdc /iptables/nft.c | |
parent | 4c4bcbcd2523da740ed02021e51cb20b14fae153 (diff) |
xtables: nft-arp: implements is_same op for ARP family
The following patch implements the is_same operation
for ARP family needed for searching arp rule.
Signed-off-by: Giuseppe Longo <giuseppelng@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'iptables/nft.c')
-rw-r--r-- | iptables/nft.c | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/iptables/nft.c b/iptables/nft.c index 28c5473d..8ac43c55 100644 --- a/iptables/nft.c +++ b/iptables/nft.c @@ -2660,10 +2660,41 @@ nft_arp_rule_find(struct nft_rule_list *list, const char *chain, found = true; break; } else { + struct xt_entry_target *t_fw, *t_this; + char *targname_fw, *targname_this; + struct xtables_target *target_fw, *target_this; + /* Delete by matching rule case */ nft_rule_to_arpt_entry(r, &this); DEBUGP("comparing with... "); +#ifdef DEBUG_DEL + nft_rule_print_save(&this, r, NFT_RULE_APPEND, 0); +#endif + + if (!ops->is_same(fw, &this)) + goto next; + + t_fw = nft_arp_get_target(fw); + t_this = nft_arp_get_target(&this); + + targname_fw = t_fw->u.user.name; + targname_this = t_this->u.user.name; + + target_fw = xtables_find_target(targname_fw, XTF_TRY_LOAD); + target_this = xtables_find_target(targname_this, XTF_TRY_LOAD); + + if (target_fw != NULL && target_this != NULL) { + if (!compare_targets(target_fw, target_this)) { + DEBUGP("Different target\n"); + goto next; + } + } else { + if (strcmp(targname_fw, targname_this) != 0) { + DEBUGP("Different verdict\n"); + goto next; + } + } found = true; break; |