diff options
author | Florian Westphal <fw@strlen.de> | 2016-03-02 13:56:43 +0100 |
---|---|---|
committer | Florian Westphal <fw@strlen.de> | 2016-03-02 13:56:43 +0100 |
commit | 45e5e4e92a2c882b22e95a807026611612d57729 (patch) | |
tree | 7033161bdc8b1ccb910d830fc58af0b257604b28 /src/exthdr.c | |
parent | 3bfe9a0323df8e23fa5150b88282cc7b4a6379f0 (diff) |
netlink_delinearize: handle extension header templates with odd sizes
This enables nft to display
frag frag-off 33
... by considering a mask during binop postprocess in case
the initial template lookup done when the exthdr expression was
created did not yield a match.
In the above example, kernel netlink data specifies 16bits,
but the frag field is only 13bits wide.
We use the implicit binop mask to re-do the template lookup with
corrected offset and size information.
Signed-off-by: Florian Westphal <fw@strlen.de>
Acked-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'src/exthdr.c')
-rw-r--r-- | src/exthdr.c | 31 |
1 files changed, 31 insertions, 0 deletions
diff --git a/src/exthdr.c b/src/exthdr.c index 512de0ae..f392cffe 100644 --- a/src/exthdr.c +++ b/src/exthdr.c @@ -102,6 +102,37 @@ void exthdr_init_raw(struct expr *expr, uint8_t type, } } +static unsigned int mask_length(const struct expr *mask) +{ + unsigned long off = mpz_scan1(mask->value, 0); + + return mpz_scan0(mask->value, off + 1); +} + +bool exthdr_find_template(struct expr *expr, const struct expr *mask, unsigned int *shift) +{ + unsigned int off, mask_offset, mask_len; + + if (expr->exthdr.tmpl != &exthdr_unknown_template) + return false; + + mask_offset = mpz_scan1(mask->value, 0); + mask_len = mask_length(mask); + + off = expr->exthdr.offset; + off += round_up(mask->len, BITS_PER_BYTE) - mask_len; + + exthdr_init_raw(expr, expr->exthdr.desc->type, + off, mask_len - mask_offset); + + /* still failed to find a template... Bug. */ + if (expr->exthdr.tmpl == &exthdr_unknown_template) + return false; + + *shift = mask_offset; + return true; +} + #define HDR_TEMPLATE(__name, __dtype, __type, __member) \ PROTO_HDR_TEMPLATE(__name, __dtype, \ BYTEORDER_BIG_ENDIAN, \ |