diff options
Diffstat (limited to 'src/rule.c')
| -rw-r--r-- | src/rule.c | 148 |
1 files changed, 96 insertions, 52 deletions
@@ -391,13 +391,23 @@ struct rule *rule_alloc(const struct location *loc, const struct handle *h) rule->location = *loc; init_list_head(&rule->list); init_list_head(&rule->stmts); + rule->refcnt = 1; if (h != NULL) rule->handle = *h; + + return rule; +} + +struct rule *rule_get(struct rule *rule) +{ + rule->refcnt++; return rule; } void rule_free(struct rule *rule) { + if (--rule->refcnt > 0) + return; stmt_list_free(&rule->stmts); handle_free(&rule->handle); xfree(rule->comment); @@ -821,6 +831,65 @@ struct cmd *cmd_alloc(enum cmd_ops op, enum cmd_obj obj, return cmd; } +void nft_cmd_expand(struct cmd *cmd) +{ + struct list_head new_cmds; + struct table *table; + struct chain *chain; + struct rule *rule; + struct set *set; + struct obj *obj; + struct cmd *new; + struct handle h; + + init_list_head(&new_cmds); + + switch (cmd->obj) { + case CMD_OBJ_TABLE: + table = cmd->table; + if (!table) + return; + + list_for_each_entry(chain, &table->chains, list) { + memset(&h, 0, sizeof(h)); + handle_merge(&h, &chain->handle); + new = cmd_alloc(CMD_ADD, CMD_OBJ_CHAIN, &h, + &chain->location, chain_get(chain)); + list_add_tail(&new->list, &new_cmds); + } + list_for_each_entry(obj, &table->objs, list) { + handle_merge(&obj->handle, &table->handle); + memset(&h, 0, sizeof(h)); + handle_merge(&h, &obj->handle); + new = cmd_alloc(CMD_ADD, obj_type_to_cmd(obj->type), &h, + &obj->location, obj_get(obj)); + list_add_tail(&new->list, &new_cmds); + } + list_for_each_entry(set, &table->sets, list) { + handle_merge(&set->handle, &table->handle); + memset(&h, 0, sizeof(h)); + handle_merge(&h, &set->handle); + new = cmd_alloc(CMD_ADD, CMD_OBJ_SET, &h, + &set->location, set_get(set)); + list_add_tail(&new->list, &new_cmds); + } + list_for_each_entry(chain, &table->chains, list) { + list_for_each_entry(rule, &chain->rules, list) { + memset(&h, 0, sizeof(h)); + handle_merge(&h, &rule->handle); + new = cmd_alloc(CMD_ADD, CMD_OBJ_RULE, &h, + &rule->location, + rule_get(rule)); + list_add_tail(&new->list, &new_cmds); + } + } + list_splice(&new_cmds, &cmd->list); + break; + default: + break; + } +} + struct export *export_alloc(uint32_t format) { struct export *export; @@ -898,19 +967,6 @@ void cmd_free(struct cmd *cmd) #include <netlink.h> -static int do_add_chain(struct netlink_ctx *ctx, const struct handle *h, - const struct location *loc, struct chain *chain, - bool excl) -{ - if (netlink_add_chain(ctx, h, loc, chain, excl) < 0) - return -1; - if (chain != NULL) { - if (netlink_add_rule_list(ctx, h, &chain->rules) < 0) - return -1; - } - return 0; -} - static int __do_add_setelems(struct netlink_ctx *ctx, const struct handle *h, struct set *set, struct expr *expr, bool excl) { @@ -954,50 +1010,15 @@ static int do_add_set(struct netlink_ctx *ctx, const struct handle *h, return 0; } -static int do_add_table(struct netlink_ctx *ctx, const struct handle *h, - const struct location *loc, struct table *table, - bool excl) -{ - struct chain *chain; - struct obj *obj; - struct set *set; - - if (netlink_add_table(ctx, h, loc, table, excl) < 0) - return -1; - if (table != NULL) { - list_for_each_entry(chain, &table->chains, list) { - if (netlink_add_chain(ctx, &chain->handle, - &chain->location, chain, - excl) < 0) - return -1; - } - list_for_each_entry(obj, &table->objs, list) { - handle_merge(&obj->handle, &table->handle); - if (netlink_add_obj(ctx, &obj->handle, obj, excl) < 0) - return -1; - } - list_for_each_entry(set, &table->sets, list) { - handle_merge(&set->handle, &table->handle); - if (do_add_set(ctx, &set->handle, set, excl) < 0) - return -1; - } - list_for_each_entry(chain, &table->chains, list) { - if (netlink_add_rule_list(ctx, h, &chain->rules) < 0) - return -1; - } - } - return 0; -} - static int do_command_add(struct netlink_ctx *ctx, struct cmd *cmd, bool excl) { switch (cmd->obj) { case CMD_OBJ_TABLE: - return do_add_table(ctx, &cmd->handle, &cmd->location, - cmd->table, excl); + return netlink_add_table(ctx, &cmd->handle, &cmd->location, + cmd->table, excl); case CMD_OBJ_CHAIN: - return do_add_chain(ctx, &cmd->handle, &cmd->location, - cmd->chain, excl); + return netlink_add_chain(ctx, &cmd->handle, &cmd->location, + cmd->chain, excl); case CMD_OBJ_RULE: return netlink_add_rule_batch(ctx, &cmd->handle, cmd->rule, NLM_F_APPEND); @@ -1156,11 +1177,21 @@ struct obj *obj_alloc(const struct location *loc) obj = xzalloc(sizeof(*obj)); if (loc != NULL) obj->location = *loc; + + obj->refcnt = 1; + return obj; +} + +struct obj *obj_get(struct obj *obj) +{ + obj->refcnt++; return obj; } void obj_free(struct obj *obj) { + if (--obj->refcnt > 0) + return; handle_free(&obj->handle); xfree(obj); } @@ -1249,6 +1280,19 @@ const char *obj_type_name(enum stmt_types type) return obj_type_name_array[type]; } +static uint32_t obj_type_cmd_array[NFT_OBJECT_MAX + 1] = { + [NFT_OBJECT_COUNTER] = CMD_OBJ_COUNTER, + [NFT_OBJECT_QUOTA] = CMD_OBJ_QUOTA, + [NFT_OBJECT_CT_HELPER] = CMD_OBJ_CT_HELPER, +}; + +uint32_t obj_type_to_cmd(uint32_t type) +{ + assert(type <= NFT_OBJECT_MAX && obj_type_cmd_array[type]); + + return obj_type_cmd_array[type]; +} + static void obj_print_declaration(const struct obj *obj, struct print_fmt_options *opts) { |