Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 5f158939 authored by Arturo Borrero's avatar Arturo Borrero Committed by Pablo Neira Ayuso
Browse files

netfilter: nft_compat: add support for arptables extensions 



This patch adds support to arptables extensions from nft_compat.

Signed-off-by: default avatarArturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent d752c364

net/netfilter/nft_compat.c

+9 −0
Original line number Diff line number Diff line
@@ -20,6 +20,7 @@ 
#include <linux/netfilter_ipv4/ip_tables.h>

#include <linux/netfilter_ipv6/ip6_tables.h>

#include <linux/netfilter_bridge/ebtables.h>

#include <linux/netfilter_arp/arp_tables.h>

#include <net/netfilter/nf_tables.h>



static int nft_compat_chain_validate_dependency(const char *tablename,
@@ -42,6 +43,7 @@ union nft_entry { 
	struct ipt_entry e4;

	struct ip6t_entry e6;

	struct ebt_entry ebt;

	struct arpt_entry arp;

};



static inline void
@@ -140,6 +142,8 @@ nft_target_set_tgchk_param(struct xt_tgchk_param *par, 
		entry->ebt.ethproto = proto;

		entry->ebt.invflags = inv ? EBT_IPROTO : 0;

		break;

	case NFPROTO_ARP:

		break;

	}

	par->entryinfo	= entry;

	par->target	= target;
@@ -351,6 +355,8 @@ nft_match_set_mtchk_param(struct xt_mtchk_param *par, const struct nft_ctx *ctx, 
		entry->ebt.ethproto = proto;

		entry->ebt.invflags = inv ? EBT_IPROTO : 0;

		break;

	case NFPROTO_ARP:

		break;

	}

	par->entryinfo	= entry;

	par->match	= match;
@@ -537,6 +543,9 @@ nfnl_compat_get(struct sock *nfnl, struct sk_buff *skb, 
	case NFPROTO_BRIDGE:

		fmt = "ebt_%s";

		break;

	case NFPROTO_ARP:

		fmt = "arpt_%s";

		break;

	default:

		pr_err("nft_compat: unsupported protocol %d\n",

			nfmsg->nfgen_family);