summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
* add quote from Thoureau to documentationPablo Neira Ayuso2010-10-101-0/+4
| | | | | | I like this quote. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* doxygen documentationPablo Neira Ayuso2010-09-086-144/+405
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* examples: put examples files into specific directoriesPablo Neira Ayuso2010-09-0816-52/+62
| | | | | | | put examples files into specific directories according to the Netlink bus they work with. And minor update in the readme file Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add missing .gitignore file to m4/ directoryPablo Neira Ayuso2010-09-081-0/+2
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* skip PortID and sequence checking if zeroPablo Neira Ayuso2010-09-081-4/+13
| | | | | | | | | If the portID/sequence number that we specify is zero, we skip the sequence tracking. This is useful if we use the same socket to listen to events and to send commands and receive their result. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* build: add notice on how to update library API versionPablo Neira Ayuso2010-07-151-3/+19
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* examples: fix byte-order in nfct-eventPablo Neira Ayuso2010-07-101-8/+11
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* examples: fix rtnl-set-linkPablo Neira Ayuso2010-07-101-9/+12
| | | | | | | This patch fixes the example that allows to set up/down the network interface. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* socket: remove mnl_socket_sendmsg() and mnl_socket_recvmsg()Pablo Neira Ayuso2010-06-252-32/+0
| | | | | | | | These functions are too simple wrappers that bloat the library. We can use mnl_socket_get_fd() to obtain the file descriptor and invoke message-oriented system call instead. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* nlmsg: use size_t instead of int for several input parametersPablo Neira Ayuso2010-05-172-8/+8
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add nfct-event examplePablo Neira Ayuso2010-05-092-1/+248
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix rtnl-link-dump3.cPablo Neira Ayuso2010-05-091-1/+1
| | | | | | | commit a5f25889216411ad7492047fafe6de03b8408440 introduced a minor problem in this example. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* relax mnl_attr_type_valid() checkings and change errno valuePablo Neira Ayuso2010-05-098-41/+37
| | | | | | | | This patch relaxes strict attribute checkings in the example files. I have also changed the errno value, now it's EOPNOTSUPP instead of EINVAL. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* change errno values for mnl_cb_run[2]()Pablo Neira Ayuso2010-05-071-3/+6
| | | | | | | | | | | | | This patch changes the errno value of mnl_cb_run[2]() in the following two cases: * Invalid expected portID: ESRCH. * Invalid sequence number: EPROTO. I didn't find any better generic errno value. EINVAL is reserved for malformed messages, to avoid confusions. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* statify function in nf-queue.c examplePablo Neira Ayuso2010-05-041-1/+2
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add nf-queue.c example file for nfnetlink_queuePablo Neira Ayuso2010-05-032-1/+257
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add licensing terms of example filesPablo Neira Ayuso2010-05-038-0/+48
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add helpers to nest attributesPablo Neira Ayuso2010-04-302-0/+36
| | | | | | Based on code from Jozsef Kadlecsik and its ipset-5 implementation. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add rtnl-route-add.c to examplesPablo Neira Ayuso2010-04-232-0/+98
| | | | | | | Heavily based on an example from Alejandro Castaño. Untested. Signed-off-by: Alejandro Castaño <alecastanyo@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* remove references to 'generic' in header filePablo Neira Ayuso2010-04-221-3/+3
| | | | | | | The term 'Generic' is used in GeNetlink, we don't want any confusion with it. Better remove it. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix lots of compilation warnings in example filesPablo Neira Ayuso2010-04-227-23/+19
| | | | | | They have been spotted by -Wall -Wextra Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add -Wextra -Wall for example filesPablo Neira Ayuso2010-04-222-1/+1
| | | | | | AM_CFLAGS=-fPIC -Wall -Wextra -Wno-unused-parameter Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix warning in mnl_cb_run2()Pablo Neira Ayuso2010-04-221-3/+3
| | | | | | | callback.c: In function ‘mnl_cb_run2’: callback.c:106: warning: pointer targets in passing argument 2 of ‘mnl_nlmsg_next’ differ in signednes Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* remove redudant alignment in mnl_nlmsg_size()Pablo Neira Ayuso2010-04-221-1/+1
| | | | | | MNL_NLMSG_HDRLEN already provides the aligned size of the netlink header. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* use size_t to indicate the buffer size in mnl_cb_run*()Pablo Neira Ayuso2010-04-222-4/+4
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* review data types for input parameters of mnl_attr_*() functionsPablo Neira Ayuso2010-04-222-22/+23
| | | | | | | | | | This patch includes the following changes: * use uint16_t for attribute types in mnl_attr_put_*() function * use uint16_t for maximun type in mnl_attr_type_valid(...) * use size_t for attribute size validation in mnl_attr_validate2(...) * use unsigned int for offset in mnl_attr_parse(...) instead of int Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix mnl_attr_parse()Jozsef Kadlecsik2010-04-221-1/+1
| | | | | | | | | | mnl_attr_parse does not take into account the length of the netlink message header and the offset. Thus when validating attributes, it goes over the end of the real attribute stream and catches invalid data areas. Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org
* add mnl_nlmsg_fprintf() function for debugging purposesPablo Neira Ayuso2010-04-193-13/+20
| | | | | | This function is still quite preliminary, comments welcome! Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix for mnl_attr_for_each_nested()Jozsef Kadlecsik2010-04-161-2/+2
| | | | | Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* update socket helper documentationPablo Neira Ayuso2010-04-121-5/+6
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* minor update in README (library is around 30KB here, not 20KB)Pablo Neira Ayuso2010-04-121-1/+1
|
* remove mnl_nlmsg_get_len() functionPablo Neira Ayuso2010-04-1210-30/+14
| | | | | | | | | Remove mnl_nlmsg_get_len() since it returns a field of a structure that is public (struct nlmsghdr). We can directly access the header fields and they are not likely to change in the future (at least for this version of Netlink I think). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* remove bogus casting in mnl_nlmsg_get_payload_tail()Pablo Neira Ayuso2010-04-121-1/+1
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* improve documentation of netlink message helpersPablo Neira Ayuso2010-04-121-21/+55
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* review documentation on netlink attribute helpersPablo Neira Ayuso2010-04-121-32/+68
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add new README filePablo Neira Ayuso2010-04-081-8/+22
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* more consistency name issues: rename get_data*() to get_payload*()Pablo Neira Ayuso2010-04-0510-31/+31
| | | | | | This includes renaming get_tail() to get_payload_tail() Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* xPablo Neira Ayuso2010-04-051-1/+5
|
* rename mnl_nlmsg_payload_size() to mnl_nlmsg_get_payload_len() for consistencyPablo Neira Ayuso2010-04-052-4/+4
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* rename msg.c to nlmsg.cPablo Neira Ayuso2010-04-052-1/+4
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* rename mnl_attr_type_ok() by mnl_attr_type_valid() for consistencyPablo Neira Ayuso2010-04-058-23/+23
| | | | | | | better to rename this function since its return value is not similar to other _ok() functions, for consistency. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix warning in compilation due to different signessPablo Neira Ayuso2010-04-052-4/+10
| | | | | | | | | | | msg.c: In function ‘mnl_nlmsg_ok’: msg.c:136: warning: comparison between signed and unsigned msg.c:138: warning: comparison between signed and unsigned attr.c: In function ‘mnl_attr_ok’: attr.c:79: warning: comparison between signed and unsigned Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add -Wextra to spot more errors in compilationPablo Neira Ayuso2010-04-041-1/+1
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* remove bogus checking in mnl_attr_validate() and mnl_attr_validate2()Pablo Neira Ayuso2010-04-041-2/+2
| | | | | | | | | attr.c: In function ‘mnl_attr_validate’: attr.c:189: warning: comparison of unsigned expression < 0 is always false attr.c: In function ‘mnl_attr_validate2’: attr.c:210: warning: comparison of unsigned expression < 0 is always false Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* rename mnl_attr_type_invalid() by mnl_attr_type_ok()Pablo Neira Ayuso2010-04-048-20/+22
| | | | | | And include the prototype in libmnl.h, since it was missing Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* remove mnl_align() as it's been replaced by MNL_ALIGN()Pablo Neira Ayuso2010-04-043-25/+12
| | | | | | | | We remove mnl_align() since it has been replaced by the macro MNL_ALIGN(). The macro allows its use in static arrays and such. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* check source of the netlink message and fix sequence tracking logicPablo Neira Ayuso2010-04-0410-25/+55
| | | | | | | | | | | | This patch changes the callback handlers to include netlink portID checking. Thus, we avoid that any malicious process can spoof messages. If portid, sequence number of the message is != 0, we check if the message is what we expect. This allows to use the same netlink channel for dumps (portid, seq != 0) and event-based notifications (portid, seq == 0). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add validation infrastructure and rework attribute parsingPablo Neira Ayuso2010-04-039-75/+617
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch includes the new validation infrastructure which is decoupled from the attribute parsing. It is composed of: - mnl_attr_type_invalid: that allows to check if the attribute type is valid (ie. the type is not higher than WXYZ_MAX). - mnl_attr_validate: that allows to validate that there's enough room for the attribute data. The patch includes the rework of the attribute parsers. Now, you don't have to use an array of pointer to store the result of the parsing, you can use whatever data structure instead. The prototype as it follows: typedef int (*mnl_attr_cb_t)(const struct nlattr *attr, void *data); extern int mnl_attr_parse(const struct nlmsghdr *nlh, int offset, mnl_attr_cb_t cb, void *data) There are three versions of rtnl-link-dump.c that show how attribute parsing can be done now. Probably that many examples are not good idea, I may remove some of them from the tree in the future. This patch also merges mnl_attr_parse_at_offset into mnl_attr_parse. This patch modifies MNL_ALIGN so that we can use it in static arrays (the use of mnl_align() is not allowed in compilation time to initialize an array field). I have added the mnl_attr_for_each() macro and I have changed mnl_attr_for_each_nested() to declare the length variable internally. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* revert abcaad6b65ed368c13c353ed71619332f76d9c2aPablo Neira Ayuso2010-04-034-16/+0
| | | | it's deeply broken 8-)
* check portid of received messages in examplesPablo Neira Ayuso2010-04-034-0/+16
| | | | | | | netlink is not connection-oriented, we have to check the origin of the message. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>