[mirror_iproute2.git] / tc / m_xt_old.c

/*
 * m_xt.c	xtables based targets
 *		utilities mostly ripped from iptables <duh, its the linux way>
 *
 *		This program is free software; you can distribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Authors:  J Hadi Salim (hadi@cyberus.ca)
 */

/*XXX: in the future (xtables 1.4.3?) get rid of everything tagged
 * as TC_CONFIG_XT_H */

#include <sys/socket.h>
#include <netinet/in.h>
#include <arpa/inet.h>
#include <net/if.h>
#include <linux/netfilter.h>
#include <linux/netfilter_ipv4/ip_tables.h>
#include <xtables.h>
#include "utils.h"
#include "tc_util.h"
#include <linux/tc_act/tc_ipt.h>
#include <stdio.h>
#include <getopt.h>
#include <errno.h>
#include <string.h>
#include <netdb.h>
#include <stdlib.h>
#include <ctype.h>
#include <stdarg.h>
#include <limits.h>
#include <unistd.h>
#include <fcntl.h>
#include <sys/wait.h>
#ifdef TC_CONFIG_XT_H
#include "xt-internal.h"
#endif

#ifndef ALIGN
#define ALIGN(x, a)		__ALIGN_MASK(x, (typeof(x))(a)-1)
#define __ALIGN_MASK(x, mask)	(((x)+(mask))&~(mask))
#endif

static const char *pname = "tc-ipt";
static const char *tname = "mangle";
static const char *pversion = "0.2";

static const char *ipthooks[] = {
	"NF_IP_PRE_ROUTING",
	"NF_IP_LOCAL_IN",
	"NF_IP_FORWARD",
	"NF_IP_LOCAL_OUT",
	"NF_IP_POST_ROUTING",
};

static struct option original_opts[] = {
	{"jump", 1, 0, 'j'},
	{0, 0, 0, 0}
};

static struct option *opts = original_opts;
static unsigned int global_option_offset;
char *lib_dir;
const char *program_version = XTABLES_VERSION;
const char *program_name = "tc-ipt";
struct afinfo afinfo = {
	.family         = AF_INET,
	.libprefix      = "libxt_",
	.ipproto        = IPPROTO_IP,
	.kmod           = "ip_tables",
	.so_rev_target  = IPT_SO_GET_REVISION_TARGET,
};


#define OPTION_OFFSET 256

/*XXX: TC_CONFIG_XT_H */
static void free_opts(struct option *local_opts)
{
	if (local_opts != original_opts) {
		free(local_opts);
		opts = original_opts;
		global_option_offset = 0;
	}
}

/*XXX: TC_CONFIG_XT_H */
static struct option *
merge_options(struct option *oldopts, const struct option *newopts,
	      unsigned int *option_offset)
{
	struct option *merge;
	unsigned int num_old, num_new, i;

	for (num_old = 0; oldopts[num_old].name; num_old++);
	for (num_new = 0; newopts[num_new].name; num_new++);

	*option_offset = global_option_offset + OPTION_OFFSET;

	merge = malloc(sizeof(struct option) * (num_new + num_old + 1));
	memcpy(merge, oldopts, num_old * sizeof(struct option));
	for (i = 0; i < num_new; i++) {
		merge[num_old + i] = newopts[i];
		merge[num_old + i].val += *option_offset;
	}
	memset(merge + num_old + num_new, 0, sizeof(struct option));

	return merge;
}


/*XXX: TC_CONFIG_XT_H */
#ifndef TRUE
#define TRUE 1
#endif
#ifndef FALSE
#define FALSE 0
#endif

/*XXX: TC_CONFIG_XT_H */
int
check_inverse(const char option[], int *invert, int *my_optind, int argc)
{
	if (option && strcmp(option, "!") == 0) {
		if (*invert)
			exit_error(PARAMETER_PROBLEM,
				   "Multiple `!' flags not allowed");
		*invert = TRUE;
		if (my_optind != NULL) {
			++*my_optind;
			if (argc && *my_optind > argc)
				exit_error(PARAMETER_PROBLEM,
					   "no argument following `!'");
		}

		return TRUE;
	}
	return FALSE;
}

/*XXX: TC_CONFIG_XT_H */
void exit_error(enum exittype status, const char *msg, ...)
{
	va_list args;

	va_start(args, msg);
	fprintf(stderr, "%s v%s: ", pname, pversion);
	vfprintf(stderr, msg, args);
	va_end(args);
	fprintf(stderr, "\n");
	/* On error paths, make sure that we don't leak memory */
	exit(status);
}

/*XXX: TC_CONFIG_XT_H */
static void set_revision(char *name, u_int8_t revision)
{
	/* Old kernel sources don't have ".revision" field,
	*  but we stole a byte from name. */
	name[IPT_FUNCTION_MAXNAMELEN - 2] = '\0';
	name[IPT_FUNCTION_MAXNAMELEN - 1] = revision;
}

/*
 * we may need to check for version mismatch
*/
int
build_st(struct xtables_target *target, struct xt_entry_target *t)
{

	size_t size =
		    XT_ALIGN(sizeof(struct xt_entry_target)) + target->size;

	if (t == NULL) {
		target->t = fw_calloc(1, size);
		target->t->u.target_size = size;
		strcpy(target->t->u.user.name, target->name);
		set_revision(target->t->u.user.name, target->revision);

		if (target->init != NULL)
			target->init(target->t);
	} else {
		target->t = t;
	}
	return 0;

}

inline void set_lib_dir(void)
{

	lib_dir = getenv("XTABLES_LIBDIR");
	if (!lib_dir) {
		lib_dir = getenv("IPTABLES_LIB_DIR");
		if (lib_dir)
			fprintf(stderr, "using deprecated IPTABLES_LIB_DIR\n");
	}
	if (lib_dir == NULL)
		lib_dir = XT_LIB_DIR;

}

static int parse_ipt(struct action_util *a, int *argc_p,
		     char ***argv_p, int tca_id, struct nlmsghdr *n)
{
	struct xtables_target *m = NULL;
	struct ipt_entry fw;
	struct rtattr *tail;
	int c;
	int rargc = *argc_p;
	char **argv = *argv_p;
	int argc = 0, iargc = 0;
	char k[FILTER_NAMESZ];
	int size = 0;
	int iok = 0, ok = 0;
	__u32 hook = 0, index = 0;

	set_lib_dir();

	{
		int i;

		for (i = 0; i < rargc; i++) {
			if (!argv[i] || strcmp(argv[i], "action") == 0)
				break;
		}
		iargc = argc = i;
	}

	if (argc <= 2) {
		fprintf(stderr, "bad arguments to ipt %d vs %d\n", argc, rargc);
		return -1;
	}

	while (1) {
		c = getopt_long(argc, argv, "j:", opts, NULL);
		if (c == -1)
			break;
		switch (c) {
		case 'j':
			m = find_target(optarg, TRY_LOAD);
			if (m != NULL) {

				if (build_st(m, NULL) < 0) {
					printf(" %s error\n", m->name);
					return -1;
				}
				opts =
				    merge_options(opts, m->extra_opts,
						  &m->option_offset);
			} else {
				fprintf(stderr, " failed to find target %s\n\n", optarg);
				return -1;
			}
			ok++;
			break;

		default:
			memset(&fw, 0, sizeof(fw));
			if (m) {
				m->parse(c - m->option_offset, argv, 0,
					 &m->tflags, NULL, &m->t);
			} else {
				fprintf(stderr, " failed to find target %s\n\n", optarg);
				return -1;

			}
			ok++;
			break;

		}
	}

	if (iargc > optind) {
		if (matches(argv[optind], "index") == 0) {
			if (get_u32(&index, argv[optind + 1], 10)) {
				fprintf(stderr, "Illegal \"index\"\n");
				free_opts(opts);
				return -1;
			}
			iok++;

			optind += 2;
		}
	}

	if (!ok && !iok) {
		fprintf(stderr, " ipt Parser BAD!! (%s)\n", *argv);
		return -1;
	}

	/* check that we passed the correct parameters to the target */
	if (m)
		m->final_check(m->tflags);

	{
		struct tcmsg *t = NLMSG_DATA(n);

		if (t->tcm_parent != TC_H_ROOT
		    && t->tcm_parent == TC_H_MAJ(TC_H_INGRESS)) {
			hook = NF_IP_PRE_ROUTING;
		} else {
			hook = NF_IP_POST_ROUTING;
		}
	}

	tail = addattr_nest(n, MAX_MSG, tca_id);
	fprintf(stdout, "tablename: %s hook: %s\n ", tname, ipthooks[hook]);
	fprintf(stdout, "\ttarget: ");

	if (m)
		m->print(NULL, m->t, 0);
	fprintf(stdout, " index %d\n", index);

	if (strlen(tname) > 16) {
		size = 16;
		k[15] = 0;
	} else {
		size = 1 + strlen(tname);
	}
	strncpy(k, tname, size);

	addattr_l(n, MAX_MSG, TCA_IPT_TABLE, k, size);
	addattr_l(n, MAX_MSG, TCA_IPT_HOOK, &hook, 4);
	addattr_l(n, MAX_MSG, TCA_IPT_INDEX, &index, 4);
	if (m)
		addattr_l(n, MAX_MSG, TCA_IPT_TARG, m->t, m->t->u.target_size);
	addattr_nest_end(n, tail);

	argc -= optind;
	argv += optind;
	*argc_p = rargc - iargc;
	*argv_p = argv;

	optind = 0;
	free_opts(opts);
	/* Clear flags if target will be used again */
        m->tflags = 0;
        m->used = 0;
	/* Free allocated memory */
	if (m->t)
	    free(m->t);


	return 0;

}

static int
print_ipt(struct action_util *au, FILE * f, struct rtattr *arg)
{
	struct rtattr *tb[TCA_IPT_MAX + 1];
	struct xt_entry_target *t = NULL;
	struct xtables_target *m;
	__u32 hook;

	if (arg == NULL)
		return -1;

	set_lib_dir();

	parse_rtattr_nested(tb, TCA_IPT_MAX, arg);

	if (tb[TCA_IPT_TABLE] == NULL) {
		fprintf(stderr, "Missing ipt table name, assuming mangle\n");
	} else {
		fprintf(f, "tablename: %s ",
			rta_getattr_str(tb[TCA_IPT_TABLE]));
	}

	if (tb[TCA_IPT_HOOK] == NULL) {
		fprintf(stderr, "Missing ipt hook name\n");
		return -1;
	}

	if (tb[TCA_IPT_TARG] == NULL) {
		fprintf(stderr, "Missing ipt target parameters\n");
		return -1;
	}

	hook = rta_getattr_u32(tb[TCA_IPT_HOOK]);
	fprintf(f, " hook: %s\n", ipthooks[hook]);

	t = RTA_DATA(tb[TCA_IPT_TARG]);
	m = find_target(t->u.user.name, TRY_LOAD);
	if (m != NULL) {
		if (build_st(m, t) < 0) {
			fprintf(stderr, " %s error\n", m->name);
			return -1;
		}

		opts =
			merge_options(opts, m->extra_opts,
				      &m->option_offset);
	} else {
		fprintf(stderr, " failed to find target %s\n\n",
			t->u.user.name);
		return -1;
	}
	fprintf(f, "\ttarget ");
	m->print(NULL, m->t, 0);
	if (tb[TCA_IPT_INDEX] == NULL) {
		fprintf(f, " [NULL ipt target index ]\n");
	} else {
		__u32 index;

		index = rta_getattr_u32(tb[TCA_IPT_INDEX]);
		fprintf(f, "\n\tindex %u", index);
	}

	if (tb[TCA_IPT_CNT]) {
		struct tc_cnt *c  = RTA_DATA(tb[TCA_IPT_CNT]);

		fprintf(f, " ref %d bind %d", c->refcnt, c->bindcnt);
	}
	if (show_stats) {
		if (tb[TCA_IPT_TM]) {
			struct tcf_t *tm = RTA_DATA(tb[TCA_IPT_TM]);

			print_tm(f, tm);
		}
	}
	fprintf(f, "\n");

	free_opts(opts);

	return 0;
}

struct action_util ipt_action_util = {
	.id = "ipt",
	.parse_aopt = parse_ipt,
	.print_aopt = print_ipt,
};
Commit	Line	Data
63c7d26f JHS	1	/*
63c7d26f JHS	2	* m_xt.c xtables based targets
3d0b7439	3	* utilities mostly ripped from iptables <duh, its the linux way>
63c7d26f JHS	4	*
	5	* This program is free software; you can distribute it and/or
	6	* modify it under the terms of the GNU General Public License
	7	* as published by the Free Software Foundation; either version
	8	* 2 of the License, or (at your option) any later version.
	9	*
	10	* Authors: J Hadi Salim (hadi@cyberus.ca)
	11	*/
	12
	13	/*XXX: in the future (xtables 1.4.3?) get rid of everything tagged
	14	* as TC_CONFIG_XT_H */
	15
63c7d26f JHS	16	#include <sys/socket.h>
	17	#include <netinet/in.h>
	18	#include <arpa/inet.h>
	19	#include <net/if.h>
	20	#include <linux/netfilter.h>
	21	#include <linux/netfilter_ipv4/ip_tables.h>
	22	#include <xtables.h>
	23	#include "utils.h"
	24	#include "tc_util.h"
	25	#include <linux/tc_act/tc_ipt.h>
	26	#include <stdio.h>
63c7d26f JHS	27	#include <getopt.h>
	28	#include <errno.h>
	29	#include <string.h>
	30	#include <netdb.h>
	31	#include <stdlib.h>
	32	#include <ctype.h>
	33	#include <stdarg.h>
	34	#include <limits.h>
	35	#include <unistd.h>
	36	#include <fcntl.h>
	37	#include <sys/wait.h>
	38	#ifdef TC_CONFIG_XT_H
	39	#include "xt-internal.h"
	40	#endif
	41
edaaa11e	42	#ifndef ALIGN
32a121cb SH	43	#define ALIGN(x, a) __ALIGN_MASK(x, (typeof(x))(a)-1)
32a121cb SH	44	#define __ALIGN_MASK(x, mask) (((x)+(mask))&~(mask))
edaaa11e SH	45	#endif
edaaa11e SH	46
63c7d26f JHS	47	static const char *pname = "tc-ipt";
	48	static const char *tname = "mangle";
	49	static const char *pversion = "0.2";
	50
	51	static const char *ipthooks[] = {
	52	"NF_IP_PRE_ROUTING",
	53	"NF_IP_LOCAL_IN",
	54	"NF_IP_FORWARD",
	55	"NF_IP_LOCAL_OUT",
	56	"NF_IP_POST_ROUTING",
	57	};
	58
	59	static struct option original_opts[] = {
	60	{"jump", 1, 0, 'j'},
	61	{0, 0, 0, 0}
	62	};
	63
	64	static struct option *opts = original_opts;
32a121cb	65	static unsigned int global_option_offset;
63c7d26f JHS	66	char *lib_dir;
	67	const char *program_version = XTABLES_VERSION;
	68	const char *program_name = "tc-ipt";
	69	struct afinfo afinfo = {
	70	.family = AF_INET,
	71	.libprefix = "libxt_",
	72	.ipproto = IPPROTO_IP,
	73	.kmod = "ip_tables",
	74	.so_rev_target = IPT_SO_GET_REVISION_TARGET,
	75	};
	76
	77
	78	#define OPTION_OFFSET 256
	79
	80	/XXX: TC_CONFIG_XT_H /
	81	static void free_opts(struct option *local_opts)
	82	{
	83	if (local_opts != original_opts) {
	84	free(local_opts);
	85	opts = original_opts;
	86	global_option_offset = 0;
	87	}
	88	}
	89
	90	/XXX: TC_CONFIG_XT_H /
	91	static struct option *
	92	merge_options(struct option oldopts, const struct option newopts,
	93	unsigned int *option_offset)
	94	{
	95	struct option *merge;
	96	unsigned int num_old, num_new, i;
	97
32a121cb SH	98	for (num_old = 0; oldopts[num_old].name; num_old++);
32a121cb SH	99	for (num_new = 0; newopts[num_new].name; num_new++);
63c7d26f JHS	100
	101	*option_offset = global_option_offset + OPTION_OFFSET;
	102
32a121cb SH	103	merge = malloc(sizeof(struct option) * (num_new + num_old + 1));
32a121cb SH	104	memcpy(merge, oldopts, num_old * sizeof(struct option));
63c7d26f JHS	105	for (i = 0; i < num_new; i++) {
	106	merge[num_old + i] = newopts[i];
	107	merge[num_old + i].val += *option_offset;
	108	}
32a121cb	109	memset(merge + num_old + num_new, 0, sizeof(struct option));
63c7d26f JHS	110
	111	return merge;
	112	}
	113
	114
	115	/XXX: TC_CONFIG_XT_H /
	116	#ifndef TRUE
	117	#define TRUE 1
	118	#endif
	119	#ifndef FALSE
	120	#define FALSE 0
	121	#endif
	122
	123	/XXX: TC_CONFIG_XT_H /
	124	int
	125	check_inverse(const char option[], int invert, int my_optind, int argc)
	126	{
32a121cb SH	127	if (option && strcmp(option, "!") == 0) {
	128	if (*invert)
	129	exit_error(PARAMETER_PROBLEM,
	130	"Multiple `!' flags not allowed");
	131	*invert = TRUE;
	132	if (my_optind != NULL) {
	133	++*my_optind;
	134	if (argc && *my_optind > argc)
	135	exit_error(PARAMETER_PROBLEM,
	136	"no argument following `!'");
	137	}
	138
	139	return TRUE;
	140	}
	141	return FALSE;
63c7d26f JHS	142	}
	143
	144	/XXX: TC_CONFIG_XT_H /
	145	void exit_error(enum exittype status, const char *msg, ...)
	146	{
32a121cb SH	147	va_list args;
	148
	149	va_start(args, msg);
	150	fprintf(stderr, "%s v%s: ", pname, pversion);
	151	vfprintf(stderr, msg, args);
	152	va_end(args);
	153	fprintf(stderr, "\n");
	154	/* On error paths, make sure that we don't leak memory */
	155	exit(status);
63c7d26f JHS	156	}
	157
	158	/XXX: TC_CONFIG_XT_H /
	159	static void set_revision(char *name, u_int8_t revision)
	160	{
	161	/* Old kernel sources don't have ".revision" field,
	162	* but we stole a byte from name. */
	163	name[IPT_FUNCTION_MAXNAMELEN - 2] = '\0';
	164	name[IPT_FUNCTION_MAXNAMELEN - 1] = revision;
	165	}
	166
	167	/*
	168	* we may need to check for version mismatch
	169	*/
	170	int
	171	build_st(struct xtables_target target, struct xt_entry_target t)
	172	{
	173
	174	size_t size =
32a121cb	175	XT_ALIGN(sizeof(struct xt_entry_target)) + target->size;
63c7d26f	176
32a121cb	177	if (t == NULL) {
63c7d26f JHS	178	target->t = fw_calloc(1, size);
	179	target->t->u.target_size = size;
	180	strcpy(target->t->u.user.name, target->name);
	181	set_revision(target->t->u.user.name, target->revision);
	182
	183	if (target->init != NULL)
	184	target->init(target->t);
	185	} else {
	186	target->t = t;
	187	}
	188	return 0;
	189
	190	}
	191
	192	inline void set_lib_dir(void)
	193	{
	194
	195	lib_dir = getenv("XTABLES_LIBDIR");
	196	if (!lib_dir) {
	197	lib_dir = getenv("IPTABLES_LIB_DIR");
	198	if (lib_dir)
32a121cb	199	fprintf(stderr, "using deprecated IPTABLES_LIB_DIR\n");
63c7d26f JHS	200	}
	201	if (lib_dir == NULL)
	202	lib_dir = XT_LIB_DIR;
	203
	204	}
	205
32a121cb	206	static int parse_ipt(struct action_util a, int argc_p,
63c7d26f JHS	207	char **argv_p, int tca_id, struct nlmsghdr n)
	208	{
	209	struct xtables_target *m = NULL;
	210	struct ipt_entry fw;
	211	struct rtattr *tail;
	212	int c;
	213	int rargc = *argc_p;
	214	char *argv = argv_p;
	215	int argc = 0, iargc = 0;
b317557f	216	char k[FILTER_NAMESZ];
63c7d26f JHS	217	int size = 0;
	218	int iok = 0, ok = 0;
	219	__u32 hook = 0, index = 0;
63c7d26f JHS	220
	221	set_lib_dir();
	222
	223	{
	224	int i;
32a121cb	225
63c7d26f	226	for (i = 0; i < rargc; i++) {
6f1940da	227	if (!argv[i] \|\| strcmp(argv[i], "action") == 0)
63c7d26f	228	break;
63c7d26f JHS	229	}
	230	iargc = argc = i;
	231	}
	232
	233	if (argc <= 2) {
32a121cb	234	fprintf(stderr, "bad arguments to ipt %d vs %d\n", argc, rargc);
63c7d26f JHS	235	return -1;
	236	}
	237
	238	while (1) {
	239	c = getopt_long(argc, argv, "j:", opts, NULL);
	240	if (c == -1)
	241	break;
	242	switch (c) {
	243	case 'j':
	244	m = find_target(optarg, TRY_LOAD);
32a121cb	245	if (m != NULL) {
63c7d26f	246
32a121cb SH	247	if (build_st(m, NULL) < 0) {
32a121cb SH	248	printf(" %s error\n", m->name);
63c7d26f JHS	249	return -1;
	250	}
	251	opts =
	252	merge_options(opts, m->extra_opts,
	253	&m->option_offset);
	254	} else {
32a121cb	255	fprintf(stderr, " failed to find target %s\n\n", optarg);
63c7d26f JHS	256	return -1;
	257	}
	258	ok++;
	259	break;
	260
	261	default:
32a121cb	262	memset(&fw, 0, sizeof(fw));
63c7d26f JHS	263	if (m) {
	264	m->parse(c - m->option_offset, argv, 0,
	265	&m->tflags, NULL, &m->t);
	266	} else {
32a121cb	267	fprintf(stderr, " failed to find target %s\n\n", optarg);
63c7d26f JHS	268	return -1;
	269
	270	}
	271	ok++;
	272	break;
	273
	274	}
	275	}
	276
	277	if (iargc > optind) {
	278	if (matches(argv[optind], "index") == 0) {
	279	if (get_u32(&index, argv[optind + 1], 10)) {
	280	fprintf(stderr, "Illegal \"index\"\n");
	281	free_opts(opts);
	282	return -1;
	283	}
	284	iok++;
	285
	286	optind += 2;
	287	}
	288	}
	289
	290	if (!ok && !iok) {
32a121cb	291	fprintf(stderr, " ipt Parser BAD!! (%s)\n", *argv);
63c7d26f JHS	292	return -1;
	293	}
	294
	295	/* check that we passed the correct parameters to the target */
	296	if (m)
	297	m->final_check(m->tflags);
	298
	299	{
	300	struct tcmsg *t = NLMSG_DATA(n);
32a121cb	301
63c7d26f JHS	302	if (t->tcm_parent != TC_H_ROOT
	303	&& t->tcm_parent == TC_H_MAJ(TC_H_INGRESS)) {
	304	hook = NF_IP_PRE_ROUTING;
	305	} else {
	306	hook = NF_IP_POST_ROUTING;
	307	}
	308	}
	309
c14f9d92	310	tail = addattr_nest(n, MAX_MSG, tca_id);
63c7d26f JHS	311	fprintf(stdout, "tablename: %s hook: %s\n ", tname, ipthooks[hook]);
	312	fprintf(stdout, "\ttarget: ");
	313
	314	if (m)
	315	m->print(NULL, m->t, 0);
	316	fprintf(stdout, " index %d\n", index);
	317
	318	if (strlen(tname) > 16) {
	319	size = 16;
	320	k[15] = 0;
	321	} else {
	322	size = 1 + strlen(tname);
	323	}
	324	strncpy(k, tname, size);
	325
	326	addattr_l(n, MAX_MSG, TCA_IPT_TABLE, k, size);
	327	addattr_l(n, MAX_MSG, TCA_IPT_HOOK, &hook, 4);
	328	addattr_l(n, MAX_MSG, TCA_IPT_INDEX, &index, 4);
	329	if (m)
	330	addattr_l(n, MAX_MSG, TCA_IPT_TARG, m->t, m->t->u.target_size);
c14f9d92	331	addattr_nest_end(n, tail);
63c7d26f JHS	332
	333	argc -= optind;
	334	argv += optind;
	335	*argc_p = rargc - iargc;
	336	*argv_p = argv;
	337
	338	optind = 0;
	339	free_opts(opts);
	340	/* Clear flags if target will be used again */
32a121cb SH	341	m->tflags = 0;
32a121cb SH	342	m->used = 0;
63c7d26f	343	/* Free allocated memory */
32a121cb SH	344	if (m->t)
32a121cb SH	345	free(m->t);
63c7d26f JHS	346
	347
	348	return 0;
	349
	350	}
	351
	352	static int
32a121cb	353	print_ipt(struct action_util au, FILE f, struct rtattr *arg)
63c7d26f JHS	354	{
	355	struct rtattr *tb[TCA_IPT_MAX + 1];
	356	struct xt_entry_target *t = NULL;
d5ddb441 SH	357	struct xtables_target *m;
d5ddb441 SH	358	__u32 hook;
63c7d26f JHS	359
	360	if (arg == NULL)
	361	return -1;
	362
	363	set_lib_dir();
	364
	365	parse_rtattr_nested(tb, TCA_IPT_MAX, arg);
	366
	367	if (tb[TCA_IPT_TABLE] == NULL) {
d5ddb441	368	fprintf(stderr, "Missing ipt table name, assuming mangle\n");
63c7d26f JHS	369	} else {
63c7d26f JHS	370	fprintf(f, "tablename: %s ",
ff24746c	371	rta_getattr_str(tb[TCA_IPT_TABLE]));
63c7d26f JHS	372	}
	373
	374	if (tb[TCA_IPT_HOOK] == NULL) {
d5ddb441	375	fprintf(stderr, "Missing ipt hook name\n");
63c7d26f	376	return -1;
63c7d26f JHS	377	}
	378
	379	if (tb[TCA_IPT_TARG] == NULL) {
d5ddb441	380	fprintf(stderr, "Missing ipt target parameters\n");
63c7d26f	381	return -1;
d5ddb441	382	}
32a121cb	383
d5ddb441 SH	384	hook = rta_getattr_u32(tb[TCA_IPT_HOOK]);
d5ddb441 SH	385	fprintf(f, " hook: %s\n", ipthooks[hook]);
63c7d26f	386
d5ddb441 SH	387	t = RTA_DATA(tb[TCA_IPT_TARG]);
	388	m = find_target(t->u.user.name, TRY_LOAD);
	389	if (m != NULL) {
	390	if (build_st(m, t) < 0) {
	391	fprintf(stderr, " %s error\n", m->name);
63c7d26f JHS	392	return -1;
63c7d26f JHS	393	}
32a121cb	394
d5ddb441 SH	395	opts =
	396	merge_options(opts, m->extra_opts,
	397	&m->option_offset);
	398	} else {
	399	fprintf(stderr, " failed to find target %s\n\n",
	400	t->u.user.name);
	401	return -1;
	402	}
	403	fprintf(f, "\ttarget ");
	404	m->print(NULL, m->t, 0);
	405	if (tb[TCA_IPT_INDEX] == NULL) {
	406	fprintf(f, " [NULL ipt target index ]\n");
	407	} else {
	408	__u32 index;
63c7d26f	409
d5ddb441 SH	410	index = rta_getattr_u32(tb[TCA_IPT_INDEX]);
	411	fprintf(f, "\n\tindex %u", index);
	412	}
32a121cb	413
d5ddb441 SH	414	if (tb[TCA_IPT_CNT]) {
d5ddb441 SH	415	struct tc_cnt *c = RTA_DATA(tb[TCA_IPT_CNT]);
32a121cb	416
d5ddb441 SH	417	fprintf(f, " ref %d bind %d", c->refcnt, c->bindcnt);
	418	}
	419	if (show_stats) {
	420	if (tb[TCA_IPT_TM]) {
	421	struct tcf_t *tm = RTA_DATA(tb[TCA_IPT_TM]);
63c7d26f	422
d5ddb441 SH	423	print_tm(f, tm);
d5ddb441 SH	424	}
63c7d26f	425	}
d5ddb441 SH	426	fprintf(f, "\n");
d5ddb441 SH	427
63c7d26f JHS	428	free_opts(opts);
	429
	430	return 0;
	431	}
	432
	433	struct action_util ipt_action_util = {
32a121cb SH	434	.id = "ipt",
	435	.parse_aopt = parse_ipt,
	436	.print_aopt = print_ipt,
63c7d26f	437	};