/* * (C) 2012 by Pablo Neira Ayuso * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published * by the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This code has been sponsored by Sophos Astaro */ #include "internal.h" #include "expr_ops.h" #include #include #include #include #include #include #include #include #include #include #include "linux_list.h" struct nft_rule_expr *nft_rule_expr_alloc(const char *name) { struct nft_rule_expr *expr; struct expr_ops *ops; ops = nft_expr_ops_lookup(name); if (ops == NULL) return NULL; expr = calloc(1, sizeof(struct nft_rule_expr) + ops->alloc_len); if (expr == NULL) return NULL; /* Manually set expression name attribute */ expr->flags |= (1 << NFT_RULE_EXPR_ATTR_NAME); expr->ops = ops; return expr; } EXPORT_SYMBOL(nft_rule_expr_alloc); void nft_rule_expr_free(struct nft_rule_expr *expr) { xfree(expr); } EXPORT_SYMBOL(nft_rule_expr_free); bool nft_rule_expr_is_set(const struct nft_rule_expr *expr, uint16_t type) { return expr->flags & (1 << type); } EXPORT_SYMBOL(nft_rule_expr_is_set); void nft_rule_expr_set(struct nft_rule_expr *expr, uint16_t type, const void *data, uint32_t data_len) { switch(type) { case NFT_RULE_EXPR_ATTR_NAME: /* cannot be modified */ return; default: if (expr->ops->set(expr, type, data, data_len) < 0) return; } expr->flags |= (1 << type); } EXPORT_SYMBOL(nft_rule_expr_set); void nft_rule_expr_set_u8(struct nft_rule_expr *expr, uint16_t type, uint8_t data) { nft_rule_expr_set(expr, type, &data, sizeof(uint8_t)); } EXPORT_SYMBOL(nft_rule_expr_set_u8); void nft_rule_expr_set_u16(struct nft_rule_expr *expr, uint16_t type, uint16_t data) { nft_rule_expr_set(expr, type, &data, sizeof(uint16_t)); } EXPORT_SYMBOL(nft_rule_expr_set_u16); void nft_rule_expr_set_u32(struct nft_rule_expr *expr, uint16_t type, uint32_t data) { nft_rule_expr_set(expr, type, &data, sizeof(uint32_t)); } EXPORT_SYMBOL(nft_rule_expr_set_u32); void nft_rule_expr_set_u64(struct nft_rule_expr *expr, uint16_t type, uint64_t data) { nft_rule_expr_set(expr, type, &data, sizeof(uint64_t)); } EXPORT_SYMBOL(nft_rule_expr_set_u64); void nft_rule_expr_set_str(struct nft_rule_expr *expr, uint16_t type, const char *str) { nft_rule_expr_set(expr, type, str, strlen(str)+1); } EXPORT_SYMBOL(nft_rule_expr_set_str); const void *nft_rule_expr_get(const struct nft_rule_expr *expr, uint16_t type, uint32_t *data_len) { const void *ret; if (!(expr->flags & (1 << type))) return NULL; switch(type) { case NFT_RULE_EXPR_ATTR_NAME: ret = expr->ops->name; break; default: ret = expr->ops->get(expr, type, data_len); break; } return ret; } EXPORT_SYMBOL(nft_rule_expr_get); uint8_t nft_rule_expr_get_u8(const struct nft_rule_expr *expr, uint16_t type) { const void *data; uint32_t data_len; data = nft_rule_expr_get(expr, type, &data_len); if (data == NULL) return 0; if (data_len != sizeof(uint8_t)) return 0; return *((uint8_t *)data); } EXPORT_SYMBOL(nft_rule_expr_get_u8); uint16_t nft_rule_expr_get_u16(const struct nft_rule_expr *expr, uint16_t type) { const void *data; uint32_t data_len; data = nft_rule_expr_get(expr, type, &data_len); if (data == NULL) return 0; if (data_len != sizeof(uint16_t)) return 0; return *((uint16_t *)data); } EXPORT_SYMBOL(nft_rule_expr_get_u16); uint32_t nft_rule_expr_get_u32(const struct nft_rule_expr *expr, uint16_t type) { const void *data; uint32_t data_len; data = nft_rule_expr_get(expr, type, &data_len); if (data == NULL) return 0; if (data_len != sizeof(uint32_t)) return 0; return *((uint32_t *)data); } EXPORT_SYMBOL(nft_rule_expr_get_u32); uint64_t nft_rule_expr_get_u64(const struct nft_rule_expr *expr, uint16_t type) { const void *data; uint32_t data_len; data = nft_rule_expr_get(expr, type, &data_len); if (data == NULL) return 0; if (data_len != sizeof(uint64_t)) return 0; return *((uint64_t *)data); } EXPORT_SYMBOL(nft_rule_expr_get_u64); const char *nft_rule_expr_get_str(const struct nft_rule_expr *expr, uint16_t type) { uint32_t data_len; return (const char *)nft_rule_expr_get(expr, type, &data_len); } EXPORT_SYMBOL(nft_rule_expr_get_str); void nft_rule_expr_build_payload(struct nlmsghdr *nlh, struct nft_rule_expr *expr) { struct nlattr *nest1, *nest2; nest1 = mnl_attr_nest_start(nlh, NFTA_LIST_ELEM); mnl_attr_put_strz(nlh, NFTA_EXPR_NAME, expr->ops->name); nest2 = mnl_attr_nest_start(nlh, NFTA_EXPR_DATA); expr->ops->build(nlh, expr); mnl_attr_nest_end(nlh, nest2); mnl_attr_nest_end(nlh, nest1); } EXPORT_SYMBOL(nft_rule_expr_build_payload); int nft_rule_expr_snprintf(char *buf, size_t size, struct nft_rule_expr *expr, uint32_t type, uint32_t flags) { int ret; unsigned int offset = 0, len = size; ret = expr->ops->snprintf(buf+offset, len, type, flags, expr); SNPRINTF_BUFFER_SIZE(ret, size, len, offset); return offset; } EXPORT_SYMBOL(nft_rule_expr_snprintf);