2 * test/set flag bits stored in conntrack extension area.
4 * (C) 2013 Astaro GmbH & Co KG
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <linux/export.h>
12 #include <linux/types.h>
14 #include <net/netfilter/nf_conntrack_ecache.h>
15 #include <net/netfilter/nf_conntrack_labels.h>
17 static spinlock_t nf_connlabels_lock
;
19 int nf_connlabel_set(struct nf_conn
*ct
, u16 bit
)
21 struct nf_conn_labels
*labels
= nf_ct_labels_find(ct
);
23 if (!labels
|| BIT_WORD(bit
) >= labels
->words
)
26 if (test_bit(bit
, labels
->bits
))
29 if (!test_and_set_bit(bit
, labels
->bits
))
30 nf_conntrack_event_cache(IPCT_LABEL
, ct
);
34 EXPORT_SYMBOL_GPL(nf_connlabel_set
);
36 static int replace_u32(u32
*address
, u32 mask
, u32
new)
42 tmp
= (old
& mask
) ^ new;
45 } while (cmpxchg(address
, old
, tmp
) != old
);
50 int nf_connlabels_replace(struct nf_conn
*ct
,
52 const u32
*mask
, unsigned int words32
)
54 struct nf_conn_labels
*labels
;
59 labels
= nf_ct_labels_find(ct
);
63 size
= labels
->words
* sizeof(long);
64 if (size
< (words32
* sizeof(u32
)))
65 words32
= size
/ sizeof(u32
);
67 dst
= (u32
*) labels
->bits
;
68 for (i
= 0; i
< words32
; i
++)
69 changed
|= replace_u32(&dst
[i
], mask
? ~mask
[i
] : 0, data
[i
]);
72 for (i
= words32
; i
< size
; i
++) /* pad */
73 replace_u32(&dst
[i
], 0, 0);
76 nf_conntrack_event_cache(IPCT_LABEL
, ct
);
79 EXPORT_SYMBOL_GPL(nf_connlabels_replace
);
81 int nf_connlabels_get(struct net
*net
, unsigned int bits
)
85 words
= BIT_WORD(bits
) + 1;
86 if (words
> NF_CT_LABELS_MAX_SIZE
/ sizeof(long))
89 spin_lock(&nf_connlabels_lock
);
90 net
->ct
.labels_used
++;
91 if (words
> net
->ct
.label_words
)
92 net
->ct
.label_words
= words
;
93 spin_unlock(&nf_connlabels_lock
);
97 EXPORT_SYMBOL_GPL(nf_connlabels_get
);
99 void nf_connlabels_put(struct net
*net
)
101 spin_lock(&nf_connlabels_lock
);
102 net
->ct
.labels_used
--;
103 if (net
->ct
.labels_used
== 0)
104 net
->ct
.label_words
= 0;
105 spin_unlock(&nf_connlabels_lock
);
107 EXPORT_SYMBOL_GPL(nf_connlabels_put
);
109 static struct nf_ct_ext_type labels_extend __read_mostly
= {
110 .len
= sizeof(struct nf_conn_labels
),
111 .align
= __alignof__(struct nf_conn_labels
),
112 .id
= NF_CT_EXT_LABELS
,
115 int nf_conntrack_labels_init(void)
117 BUILD_BUG_ON(NF_CT_LABELS_MAX_SIZE
/ sizeof(long) >= U8_MAX
);
119 spin_lock_init(&nf_connlabels_lock
);
120 return nf_ct_extend_register(&labels_extend
);
123 void nf_conntrack_labels_fini(void)
125 nf_ct_extend_unregister(&labels_extend
);