summaryrefslogtreecommitdiffstats
path: root/src
Commit message (Collapse)AuthorAgeFilesLines
* check source of the netlink message and fix sequence tracking logicPablo Neira Ayuso2010-04-042-9/+30
| | | | | | | | | | | | This patch changes the callback handlers to include netlink portID checking. Thus, we avoid that any malicious process can spoof messages. If portid, sequence number of the message is != 0, we check if the message is what we expect. This allows to use the same netlink channel for dumps (portid, seq != 0) and event-based notifications (portid, seq == 0). Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* add validation infrastructure and rework attribute parsingPablo Neira Ayuso2010-04-031-47/+141
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch includes the new validation infrastructure which is decoupled from the attribute parsing. It is composed of: - mnl_attr_type_invalid: that allows to check if the attribute type is valid (ie. the type is not higher than WXYZ_MAX). - mnl_attr_validate: that allows to validate that there's enough room for the attribute data. The patch includes the rework of the attribute parsers. Now, you don't have to use an array of pointer to store the result of the parsing, you can use whatever data structure instead. The prototype as it follows: typedef int (*mnl_attr_cb_t)(const struct nlattr *attr, void *data); extern int mnl_attr_parse(const struct nlmsghdr *nlh, int offset, mnl_attr_cb_t cb, void *data) There are three versions of rtnl-link-dump.c that show how attribute parsing can be done now. Probably that many examples are not good idea, I may remove some of them from the tree in the future. This patch also merges mnl_attr_parse_at_offset into mnl_attr_parse. This patch modifies MNL_ALIGN so that we can use it in static arrays (the use of mnl_align() is not allowed in compilation time to initialize an array field). I have added the mnl_attr_for_each() macro and I have changed mnl_attr_for_each_nested() to declare the length variable internally. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* use C99 types uintXX_t instead of POSIX u_intXX_tPablo Neira Ayuso2010-04-032-20/+20
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* constify several mnl_socket_* parameters and use size_t instead of intPablo Neira Ayuso2010-04-031-8/+8
| | | | Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix mnl_socket_bind() to support the selection of the netlink portIDPablo Neira Ayuso2010-03-281-0/+1
|
* partially revert previous commitPablo Neira Ayuso2010-03-281-2/+2
| | | | | the use of unsigned int in the number of bytes affects other message handling helper function, hold on with this.
* use `unsigned int' for number of bytes and array size in callback APIPablo Neira Ayuso2010-03-281-3/+3
|
* add COPYING filePablo Neira Ayuso2010-03-264-8/+16
| | | | | | This library is distributed under GPLv2+. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
* fix mnl_cb_run() and mnl_cb_run2() return value logicPablo Neira Ayuso2010-03-261-5/+13
|
* finish API documentationPablo Neira Ayuso2010-03-223-19/+129
| | | | | | This patch may contain errors but we can review them and fix them later, better to have it in the tree (to allow others to contribute) to keep it in my local tree.
* fix leak in mnl_socket_open()Pablo Neira Ayuso2010-03-191-1/+3
|
* initial libmnl importPablo Neira Ayuso2010-03-195-0/+808