]>
git.proxmox.com Git - mirror_ubuntu-bionic-kernel.git/blob - include/linux/filter.h
2 * Linux Socket Filter Data Structures
5 #ifndef __LINUX_FILTER_H__
6 #define __LINUX_FILTER_H__
8 #include <linux/compiler.h>
9 #include <linux/types.h>
12 #include <linux/atomic.h>
13 #include <linux/compat.h>
17 * Current version of the filter code architecture.
19 #define BPF_MAJOR_VERSION 1
20 #define BPF_MINOR_VERSION 1
23 * Try and keep these values and structures similar to BSD, especially
24 * the BPF code definitions which need to match so you can share filters
27 struct sock_filter
{ /* Filter block */
28 __u16 code
; /* Actual filter code */
29 __u8 jt
; /* Jump true */
30 __u8 jf
; /* Jump false */
31 __u32 k
; /* Generic multiuse field */
34 struct sock_fprog
{ /* Required for SO_ATTACH_FILTER. */
35 unsigned short len
; /* Number of filter blocks */
36 struct sock_filter __user
*filter
;
43 #define BPF_CLASS(code) ((code) & 0x07)
54 #define BPF_SIZE(code) ((code) & 0x18)
58 #define BPF_MODE(code) ((code) & 0xe0)
67 #define BPF_OP(code) ((code) & 0xf0)
82 #define BPF_SRC(code) ((code) & 0x08)
86 /* ret - BPF_K and BPF_X also apply */
87 #define BPF_RVAL(code) ((code) & 0x18)
91 #define BPF_MISCOP(code) ((code) & 0xf8)
96 #define BPF_MAXINSNS 4096
100 * Macros for filter block array initializers.
103 #define BPF_STMT(code, k) { (unsigned short)(code), 0, 0, k }
106 #define BPF_JUMP(code, k, jt, jf) { (unsigned short)(code), jt, jf, k }
110 * Number of scratch memory words for: BPF_ST and BPF_STX
112 #define BPF_MEMWORDS 16
114 /* RATIONALE. Negative offsets are invalid in BPF.
115 We use them to reference ancillary data.
116 Unlike introduction new instructions, it does not break
117 existing compilers/optimizers.
119 #define SKF_AD_OFF (-0x1000)
120 #define SKF_AD_PROTOCOL 0
121 #define SKF_AD_PKTTYPE 4
122 #define SKF_AD_IFINDEX 8
123 #define SKF_AD_NLATTR 12
124 #define SKF_AD_NLATTR_NEST 16
125 #define SKF_AD_MARK 20
126 #define SKF_AD_QUEUE 24
127 #define SKF_AD_HATYPE 28
128 #define SKF_AD_RXHASH 32
129 #define SKF_AD_CPU 36
130 #define SKF_AD_ALU_XOR_X 40
131 #define SKF_AD_MAX 44
132 #define SKF_NET_OFF (-0x100000)
133 #define SKF_LL_OFF (-0x200000)
139 * A struct sock_filter is architecture independent.
141 struct compat_sock_fprog
{
143 compat_uptr_t filter
; /* struct sock_filter * */
153 unsigned int len
; /* Number of filter blocks */
154 unsigned int (*bpf_func
)(const struct sk_buff
*skb
,
155 const struct sock_filter
*filter
);
157 struct sock_filter insns
[0];
160 static inline unsigned int sk_filter_len(const struct sk_filter
*fp
)
162 return fp
->len
* sizeof(struct sock_filter
) + sizeof(*fp
);
165 extern int sk_filter(struct sock
*sk
, struct sk_buff
*skb
);
166 extern unsigned int sk_run_filter(const struct sk_buff
*skb
,
167 const struct sock_filter
*filter
);
168 extern int sk_unattached_filter_create(struct sk_filter
**pfp
,
169 struct sock_fprog
*fprog
);
170 extern void sk_unattached_filter_destroy(struct sk_filter
*fp
);
171 extern int sk_attach_filter(struct sock_fprog
*fprog
, struct sock
*sk
);
172 extern int sk_detach_filter(struct sock
*sk
);
173 extern int sk_chk_filter(struct sock_filter
*filter
, unsigned int flen
);
175 #ifdef CONFIG_BPF_JIT
176 extern void bpf_jit_compile(struct sk_filter
*fp
);
177 extern void bpf_jit_free(struct sk_filter
*fp
);
178 #define SK_RUN_FILTER(FILTER, SKB) (*FILTER->bpf_func)(SKB, FILTER->insns)
180 static inline void bpf_jit_compile(struct sk_filter
*fp
)
183 static inline void bpf_jit_free(struct sk_filter
*fp
)
186 #define SK_RUN_FILTER(FILTER, SKB) sk_run_filter(SKB, FILTER->insns)
240 BPF_S_ANC_NLATTR_NEST
,
247 BPF_S_ANC_SECCOMP_LD_W
,
250 #endif /* __KERNEL__ */
252 #endif /* __LINUX_FILTER_H__ */