diff options
author | Phil Sutter <phil@nwl.cc> | 2020-11-16 17:20:57 +0100 |
---|---|---|
committer | Phil Sutter <phil@nwl.cc> | 2021-05-17 15:07:02 +0200 |
commit | 9dc50b5b8e4416219c700331c6e301d840f6e55d (patch) | |
tree | 44d2ae242c7a2659200cfd5330e0f492e0517d0f /iptables/xtables.c | |
parent | 3664249f520308e8d9ce6238374f08ac96aedbb6 (diff) |
xshared: Merge invflags handling code
Join invflags handling between iptables, ip6tables, xtables and
arptables. Ebtables still has its own code which differs quite a bit.
In order to use a shared set_option() routine, iptables and ip6tables
need to provide a local 'invflags' variable which is 16bits wide.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'iptables/xtables.c')
-rw-r--r-- | iptables/xtables.c | 37 |
1 files changed, 0 insertions, 37 deletions
diff --git a/iptables/xtables.c b/iptables/xtables.c index 73531ca8..daa9b137 100644 --- a/iptables/xtables.c +++ b/iptables/xtables.c @@ -94,22 +94,6 @@ struct xtables_globals xtables_globals = { .compat_rev = nft_compatible_revision, }; -static const int inverse_for_options[NUMBER_OF_OPT] = -{ -/* -n */ 0, -/* -s */ IPT_INV_SRCIP, -/* -d */ IPT_INV_DSTIP, -/* -p */ XT_INV_PROTO, -/* -j */ 0, -/* -v */ 0, -/* -x */ 0, -/* -i */ IPT_INV_VIA_IN, -/* -o */ IPT_INV_VIA_OUT, -/*--line*/ 0, -/* -c */ 0, -/* -f */ IPT_INV_FRAG, -}; - #define opts xt_params->opts #define prog_name xt_params->program_name #define prog_vers xt_params->program_version @@ -238,27 +222,6 @@ xtables_exit_error(enum xtables_exittype status, const char *msg, ...) /* Christophe Burki wants `-p 6' to imply `-m tcp'. */ -static void -set_option(unsigned int *options, unsigned int option, u_int16_t *invflg, - bool invert) -{ - if (*options & option) - xtables_error(PARAMETER_PROBLEM, "multiple -%c flags not allowed", - opt2char(option)); - *options |= option; - - if (invert) { - unsigned int i; - for (i = 0; 1 << i != option; i++); - - if (!inverse_for_options[i]) - xtables_error(PARAMETER_PROBLEM, - "cannot have ! before -%c", - opt2char(option)); - *invflg |= inverse_for_options[i]; - } -} - static int add_entry(const char *chain, const char *table, |