Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit aa45660c authored by Tomasz Bursztyka's avatar Tomasz Bursztyka Committed by Pablo Neira Ayuso
Browse files

netfilter: nf_tables: Make meta expression core functions public 



This will be useful to create network family dedicated META expression
as for NFPROTO_BRIDGE for instance.

Signed-off-by: default avatarTomasz Bursztyka <tomasz.bursztyka@linux.intel.com>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 758dbcec

include/net/netfilter/nft_meta.h

0 → 100644
+36 −0
Original line number Diff line number Diff line 
#ifndef _NFT_META_H_

#define _NFT_META_H_



struct nft_meta {

	enum nft_meta_keys	key:8;

	union {

		enum nft_registers	dreg:8;

		enum nft_registers	sreg:8;

	};

};



extern const struct nla_policy nft_meta_policy[];



int nft_meta_get_init(const struct nft_ctx *ctx,

		      const struct nft_expr *expr,

		      const struct nlattr * const tb[]);



int nft_meta_set_init(const struct nft_ctx *ctx,

		      const struct nft_expr *expr,

		      const struct nlattr * const tb[]);



int nft_meta_get_dump(struct sk_buff *skb,

		      const struct nft_expr *expr);



int nft_meta_set_dump(struct sk_buff *skb,

		      const struct nft_expr *expr);



void nft_meta_get_eval(const struct nft_expr *expr,

		       struct nft_data data[NFT_REG_MAX + 1],

		       const struct nft_pktinfo *pkt);



void nft_meta_set_eval(const struct nft_expr *expr,

		       struct nft_data data[NFT_REG_MAX + 1],

		       const struct nft_pktinfo *pkt);



#endif

net/netfilter/nft_meta.c

+25 −25
Original line number Diff line number Diff line
@@ -18,16 +18,9 @@ 
#include <net/sock.h>

#include <net/tcp_states.h> /* for TCP_TIME_WAIT */

#include <net/netfilter/nf_tables.h>

#include <net/netfilter/nft_meta.h>



struct nft_meta {

	enum nft_meta_keys	key:8;

	union {

		enum nft_registers	dreg:8;

		enum nft_registers	sreg:8;

	};

};



static void nft_meta_get_eval(const struct nft_expr *expr,

void nft_meta_get_eval(const struct nft_expr *expr,

		       struct nft_data data[NFT_REG_MAX + 1],

		       const struct nft_pktinfo *pkt)

{
@@ -140,8 +133,9 @@ static void nft_meta_get_eval(const struct nft_expr *expr, 
err:

	data[NFT_REG_VERDICT].verdict = NFT_BREAK;

}

EXPORT_SYMBOL_GPL(nft_meta_get_eval);



static void nft_meta_set_eval(const struct nft_expr *expr,

void nft_meta_set_eval(const struct nft_expr *expr,

		       struct nft_data data[NFT_REG_MAX + 1],

		       const struct nft_pktinfo *pkt)

{
@@ -163,14 +157,16 @@ static void nft_meta_set_eval(const struct nft_expr *expr, 
		WARN_ON(1);

	}

}

EXPORT_SYMBOL_GPL(nft_meta_set_eval);



static const struct nla_policy nft_meta_policy[NFTA_META_MAX + 1] = {

const struct nla_policy nft_meta_policy[NFTA_META_MAX + 1] = {

	[NFTA_META_DREG]	= { .type = NLA_U32 },

	[NFTA_META_KEY]		= { .type = NLA_U32 },

	[NFTA_META_SREG]	= { .type = NLA_U32 },

};

EXPORT_SYMBOL_GPL(nft_meta_policy);



static int nft_meta_get_init(const struct nft_ctx *ctx,

int nft_meta_get_init(const struct nft_ctx *ctx,

		      const struct nft_expr *expr,

		      const struct nlattr * const tb[])

{
@@ -215,8 +211,9 @@ static int nft_meta_get_init(const struct nft_ctx *ctx, 


	return 0;

}

EXPORT_SYMBOL_GPL(nft_meta_get_init);



static int nft_meta_set_init(const struct nft_ctx *ctx,

int nft_meta_set_init(const struct nft_ctx *ctx,

		      const struct nft_expr *expr,

		      const struct nlattr * const tb[])

{
@@ -240,8 +237,9 @@ static int nft_meta_set_init(const struct nft_ctx *ctx, 


	return 0;

}

EXPORT_SYMBOL_GPL(nft_meta_set_init);



static int nft_meta_get_dump(struct sk_buff *skb,

int nft_meta_get_dump(struct sk_buff *skb,

		      const struct nft_expr *expr)

{

	const struct nft_meta *priv = nft_expr_priv(expr);
@@ -255,8 +253,9 @@ static int nft_meta_get_dump(struct sk_buff *skb, 
nla_put_failure:

	return -1;

}

EXPORT_SYMBOL_GPL(nft_meta_get_dump);



static int nft_meta_set_dump(struct sk_buff *skb,

int nft_meta_set_dump(struct sk_buff *skb,

		      const struct nft_expr *expr)

{

	const struct nft_meta *priv = nft_expr_priv(expr);
@@ -271,6 +270,7 @@ static int nft_meta_set_dump(struct sk_buff *skb, 
nla_put_failure:

	return -1;

}

EXPORT_SYMBOL_GPL(nft_meta_set_dump);



static struct nft_expr_type nft_meta_type;

static const struct nft_expr_ops nft_meta_get_ops = {