[mirror_ubuntu-artful-kernel.git] / net / bridge / netfilter / nft_meta_bridge.c

/*
 * Copyright (c) 2014 Intel Corporation
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 */

#include <linux/kernel.h>
#include <linux/init.h>
#include <linux/module.h>
#include <linux/netlink.h>
#include <linux/netfilter.h>
#include <linux/netfilter/nf_tables.h>
#include <net/netfilter/nf_tables.h>
#include <net/netfilter/nft_meta.h>

#include "../br_private.h"

static void nft_meta_bridge_get_eval(const struct nft_expr *expr,
				     struct nft_regs *regs,
				     const struct nft_pktinfo *pkt)
{
	const struct nft_meta *priv = nft_expr_priv(expr);
	const struct net_device *in = nft_in(pkt), *out = nft_out(pkt);
	u32 *dest = &regs->data[priv->dreg];
	const struct net_bridge_port *p;

	switch (priv->key) {
	case NFT_META_BRI_IIFNAME:
		if (in == NULL || (p = br_port_get_rcu(in)) == NULL)
			goto err;
		break;
	case NFT_META_BRI_OIFNAME:
		if (out == NULL || (p = br_port_get_rcu(out)) == NULL)
			goto err;
		break;
	default:
		goto out;
	}

	strncpy((char *)dest, p->br->dev->name, IFNAMSIZ);
	return;
out:
	return nft_meta_get_eval(expr, regs, pkt);
err:
	regs->verdict.code = NFT_BREAK;
}

static int nft_meta_bridge_get_init(const struct nft_ctx *ctx,
				    const struct nft_expr *expr,
				    const struct nlattr * const tb[])
{
	struct nft_meta *priv = nft_expr_priv(expr);
	unsigned int len;

	priv->key = ntohl(nla_get_be32(tb[NFTA_META_KEY]));
	switch (priv->key) {
	case NFT_META_BRI_IIFNAME:
	case NFT_META_BRI_OIFNAME:
		len = IFNAMSIZ;
		break;
	default:
		return nft_meta_get_init(ctx, expr, tb);
	}

	priv->dreg = nft_parse_register(tb[NFTA_META_DREG]);
	return nft_validate_register_store(ctx, priv->dreg, NULL,
					   NFT_DATA_VALUE, len);
}

static struct nft_expr_type nft_meta_bridge_type;
static const struct nft_expr_ops nft_meta_bridge_get_ops = {
	.type		= &nft_meta_bridge_type,
	.size		= NFT_EXPR_SIZE(sizeof(struct nft_meta)),
	.eval		= nft_meta_bridge_get_eval,
	.init		= nft_meta_bridge_get_init,
	.dump		= nft_meta_get_dump,
};

static const struct nft_expr_ops nft_meta_bridge_set_ops = {
	.type		= &nft_meta_bridge_type,
	.size		= NFT_EXPR_SIZE(sizeof(struct nft_meta)),
	.eval		= nft_meta_set_eval,
	.init		= nft_meta_set_init,
	.destroy	= nft_meta_set_destroy,
	.dump		= nft_meta_set_dump,
	.validate	= nft_meta_set_validate,
};

static const struct nft_expr_ops *
nft_meta_bridge_select_ops(const struct nft_ctx *ctx,
			   const struct nlattr * const tb[])
{
	if (tb[NFTA_META_KEY] == NULL)
		return ERR_PTR(-EINVAL);

	if (tb[NFTA_META_DREG] && tb[NFTA_META_SREG])
		return ERR_PTR(-EINVAL);

	if (tb[NFTA_META_DREG])
		return &nft_meta_bridge_get_ops;

	if (tb[NFTA_META_SREG])
		return &nft_meta_bridge_set_ops;

	return ERR_PTR(-EINVAL);
}

static struct nft_expr_type nft_meta_bridge_type __read_mostly = {
	.family         = NFPROTO_BRIDGE,
	.name           = "meta",
	.select_ops     = &nft_meta_bridge_select_ops,
	.policy         = nft_meta_policy,
	.maxattr        = NFTA_META_MAX,
	.owner          = THIS_MODULE,
};

static int __init nft_meta_bridge_module_init(void)
{
	return nft_register_expr(&nft_meta_bridge_type);
}

static void __exit nft_meta_bridge_module_exit(void)
{
	nft_unregister_expr(&nft_meta_bridge_type);
}

module_init(nft_meta_bridge_module_init);
module_exit(nft_meta_bridge_module_exit);

MODULE_LICENSE("GPL");
MODULE_AUTHOR("Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>");
MODULE_ALIAS_NFT_AF_EXPR(AF_BRIDGE, "meta");
Commit	Line	Data
f5efc696 TB	1	/*
	2	* Copyright (c) 2014 Intel Corporation
	3	*
	4	* This program is free software; you can redistribute it and/or modify
	5	* it under the terms of the GNU General Public License version 2 as
	6	* published by the Free Software Foundation.
	7	*
	8	*/
	9
	10	#include <linux/kernel.h>
	11	#include <linux/init.h>
	12	#include <linux/module.h>
	13	#include <linux/netlink.h>
	14	#include <linux/netfilter.h>
	15	#include <linux/netfilter/nf_tables.h>
	16	#include <net/netfilter/nf_tables.h>
	17	#include <net/netfilter/nft_meta.h>
	18
	19	#include "../br_private.h"
	20
	21	static void nft_meta_bridge_get_eval(const struct nft_expr *expr,
a55e22e9	22	struct nft_regs *regs,
f5efc696 TB	23	const struct nft_pktinfo *pkt)
	24	{
	25	const struct nft_meta *priv = nft_expr_priv(expr);
0e5a1c7e	26	const struct net_device in = nft_in(pkt), out = nft_out(pkt);
49499c3e	27	u32 *dest = &regs->data[priv->dreg];
f5efc696 TB	28	const struct net_bridge_port *p;
	29
	30	switch (priv->key) {
	31	case NFT_META_BRI_IIFNAME:
	32	if (in == NULL \|\| (p = br_port_get_rcu(in)) == NULL)
	33	goto err;
	34	break;
	35	case NFT_META_BRI_OIFNAME:
	36	if (out == NULL \|\| (p = br_port_get_rcu(out)) == NULL)
	37	goto err;
	38	break;
	39	default:
	40	goto out;
	41	}
	42
fad136ea	43	strncpy((char *)dest, p->br->dev->name, IFNAMSIZ);
f5efc696 TB	44	return;
f5efc696 TB	45	out:
a55e22e9	46	return nft_meta_get_eval(expr, regs, pkt);
f5efc696	47	err:
a55e22e9	48	regs->verdict.code = NFT_BREAK;
f5efc696 TB	49	}
	50
	51	static int nft_meta_bridge_get_init(const struct nft_ctx *ctx,
	52	const struct nft_expr *expr,
	53	const struct nlattr * const tb[])
	54	{
	55	struct nft_meta *priv = nft_expr_priv(expr);
45d9bcda	56	unsigned int len;
f5efc696 TB	57
	58	priv->key = ntohl(nla_get_be32(tb[NFTA_META_KEY]));
	59	switch (priv->key) {
	60	case NFT_META_BRI_IIFNAME:
	61	case NFT_META_BRI_OIFNAME:
45d9bcda	62	len = IFNAMSIZ;
f5efc696 TB	63	break;
	64	default:
	65	return nft_meta_get_init(ctx, expr, tb);
	66	}
	67
b1c96ed3	68	priv->dreg = nft_parse_register(tb[NFTA_META_DREG]);
27e6d201 PM	69	return nft_validate_register_store(ctx, priv->dreg, NULL,
27e6d201 PM	70	NFT_DATA_VALUE, len);
f5efc696 TB	71	}
	72
	73	static struct nft_expr_type nft_meta_bridge_type;
	74	static const struct nft_expr_ops nft_meta_bridge_get_ops = {
	75	.type = &nft_meta_bridge_type,
	76	.size = NFT_EXPR_SIZE(sizeof(struct nft_meta)),
	77	.eval = nft_meta_bridge_get_eval,
	78	.init = nft_meta_bridge_get_init,
	79	.dump = nft_meta_get_dump,
	80	};
	81
	82	static const struct nft_expr_ops nft_meta_bridge_set_ops = {
	83	.type = &nft_meta_bridge_type,
	84	.size = NFT_EXPR_SIZE(sizeof(struct nft_meta)),
	85	.eval = nft_meta_set_eval,
	86	.init = nft_meta_set_init,
e639f7ab	87	.destroy = nft_meta_set_destroy,
f5efc696	88	.dump = nft_meta_set_dump,
960fa72f	89	.validate = nft_meta_set_validate,
f5efc696 TB	90	};
	91
	92	static const struct nft_expr_ops *
	93	nft_meta_bridge_select_ops(const struct nft_ctx *ctx,
	94	const struct nlattr * const tb[])
	95	{
	96	if (tb[NFTA_META_KEY] == NULL)
	97	return ERR_PTR(-EINVAL);
	98
	99	if (tb[NFTA_META_DREG] && tb[NFTA_META_SREG])
	100	return ERR_PTR(-EINVAL);
	101
	102	if (tb[NFTA_META_DREG])
	103	return &nft_meta_bridge_get_ops;
	104
	105	if (tb[NFTA_META_SREG])
	106	return &nft_meta_bridge_set_ops;
	107
	108	return ERR_PTR(-EINVAL);
	109	}
	110
	111	static struct nft_expr_type nft_meta_bridge_type __read_mostly = {
	112	.family = NFPROTO_BRIDGE,
	113	.name = "meta",
	114	.select_ops = &nft_meta_bridge_select_ops,
	115	.policy = nft_meta_policy,
	116	.maxattr = NFTA_META_MAX,
	117	.owner = THIS_MODULE,
	118	};
	119
	120	static int __init nft_meta_bridge_module_init(void)
	121	{
	122	return nft_register_expr(&nft_meta_bridge_type);
	123	}
	124
	125	static void __exit nft_meta_bridge_module_exit(void)
	126	{
	127	nft_unregister_expr(&nft_meta_bridge_type);
	128	}
	129
	130	module_init(nft_meta_bridge_module_init);
	131	module_exit(nft_meta_bridge_module_exit);
	132
	133	MODULE_LICENSE("GPL");
	134	MODULE_AUTHOR("Tomasz Bursztyka <tomasz.bursztyka@linux.intel.com>");
	135	MODULE_ALIAS_NFT_AF_EXPR(AF_BRIDGE, "meta");