]>
git.proxmox.com Git - mirror_ubuntu-artful-kernel.git/blob - net/netfilter/xt_string.c
0ebb6ac2c8c769a2b1a19075d10dc35a1143a32a
1 /* String matching match for iptables
3 * (C) 2005 Pablo Neira Ayuso <pablo@eurodev.net>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
10 #include <linux/init.h>
11 #include <linux/module.h>
12 #include <linux/kernel.h>
13 #include <linux/skbuff.h>
14 #include <linux/netfilter/x_tables.h>
15 #include <linux/netfilter/xt_string.h>
16 #include <linux/textsearch.h>
18 MODULE_AUTHOR("Pablo Neira Ayuso <pablo@eurodev.net>");
19 MODULE_DESCRIPTION("IP tables string match module");
20 MODULE_LICENSE("GPL");
21 MODULE_ALIAS("ipt_string");
22 MODULE_ALIAS("ip6t_string");
24 static int match(const struct sk_buff
*skb
,
25 const struct net_device
*in
,
26 const struct net_device
*out
,
27 const struct xt_match
*match
,
28 const void *matchinfo
,
33 const struct xt_string_info
*conf
= matchinfo
;
34 struct ts_state state
;
36 memset(&state
, 0, sizeof(struct ts_state
));
38 return (skb_find_text((struct sk_buff
*)skb
, conf
->from_offset
,
39 conf
->to_offset
, conf
->config
, &state
)
40 != UINT_MAX
) && !conf
->invert
;
43 #define STRING_TEXT_PRIV(m) ((struct xt_string_info *) m)
45 static int checkentry(const char *tablename
,
47 const struct xt_match
*match
,
49 unsigned int matchsize
,
50 unsigned int hook_mask
)
52 struct xt_string_info
*conf
= matchinfo
;
53 struct ts_config
*ts_conf
;
55 /* Damn, can't handle this case properly with iptables... */
56 if (conf
->from_offset
> conf
->to_offset
)
59 ts_conf
= textsearch_prepare(conf
->algo
, conf
->pattern
, conf
->patlen
,
60 GFP_KERNEL
, TS_AUTOLOAD
);
64 conf
->config
= ts_conf
;
69 static void destroy(const struct xt_match
*match
, void *matchinfo
,
70 unsigned int matchsize
)
72 textsearch_destroy(STRING_TEXT_PRIV(matchinfo
)->config
);
75 static struct xt_match string_match
= {
78 .matchsize
= sizeof(struct xt_string_info
),
79 .checkentry
= checkentry
,
84 static struct xt_match string6_match
= {
87 .matchsize
= sizeof(struct xt_string_info
),
88 .checkentry
= checkentry
,
94 static int __init
xt_string_init(void)
98 ret
= xt_register_match(&string_match
);
101 ret
= xt_register_match(&string6_match
);
103 xt_unregister_match(&string_match
);
108 static void __exit
xt_string_fini(void)
110 xt_unregister_match(&string_match
);
111 xt_unregister_match(&string6_match
);
114 module_init(xt_string_init
);
115 module_exit(xt_string_fini
);