cregit-Linux how code gets into the kernel

Release 4.11 net/netfilter/nf_tables_netdev.c

Directory: net/netfilter
/*
 * Copyright (c) 2015 Pablo Neira Ayuso <pablo@netfilter.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/init.h>
#include <linux/module.h>
#include <linux/netdevice.h>
#include <net/netfilter/nf_tables.h>
#include <linux/ip.h>
#include <linux/ipv6.h>
#include <net/netfilter/nf_tables_ipv4.h>
#include <net/netfilter/nf_tables_ipv6.h>


static unsigned int nft_do_chain_netdev(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { struct nft_pktinfo pkt; switch (skb->protocol) { case htons(ETH_P_IP): nft_set_pktinfo_ipv4_validate(&pkt, skb, state); break; case htons(ETH_P_IPV6): nft_set_pktinfo_ipv6_validate(&pkt, skb, state); break; default: nft_set_pktinfo_unspec(&pkt, skb, state); break; } return nft_do_chain(&pkt, priv); }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso8696.63%480.00%
Eric W. Biedermann33.37%120.00%
Total89100.00%5100.00%

static struct nft_af_info nft_af_netdev __read_mostly = { .family = NFPROTO_NETDEV, .nhooks = NF_NETDEV_NUMHOOKS, .owner = THIS_MODULE, .flags = NFT_AF_NEEDS_DEV, .nops = 1, .hooks = { [NF_NETDEV_INGRESS] = nft_do_chain_netdev, }, };
static int nf_tables_netdev_init_net(struct net *net) { net->nft.netdev = kmalloc(sizeof(struct nft_af_info), GFP_KERNEL); if (net->nft.netdev == NULL) return -ENOMEM; memcpy(net->nft.netdev, &nft_af_netdev, sizeof(nft_af_netdev)); if (nft_register_afinfo(net, net->nft.netdev) < 0) goto err; return 0; err: kfree(net->nft.netdev); return -ENOMEM; }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso95100.00%1100.00%
Total95100.00%1100.00%


static void nf_tables_netdev_exit_net(struct net *net) { nft_unregister_afinfo(net, net->nft.netdev); kfree(net->nft.netdev); }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso31100.00%2100.00%
Total31100.00%2100.00%

static struct pernet_operations nf_tables_netdev_net_ops = { .init = nf_tables_netdev_init_net, .exit = nf_tables_netdev_exit_net, }; static const struct nf_chain_type nft_filter_chain_netdev = { .name = "filter", .type = NFT_CHAIN_T_DEFAULT, .family = NFPROTO_NETDEV, .owner = THIS_MODULE, .hook_mask = (1 << NF_NETDEV_INGRESS), };
static void nft_netdev_event(unsigned long event, struct net_device *dev, struct nft_ctx *ctx) { struct nft_base_chain *basechain = nft_base_chain(ctx->chain); switch (event) { case NETDEV_UNREGISTER: if (strcmp(basechain->dev_name, dev->name) != 0) return; __nft_release_basechain(ctx); break; case NETDEV_CHANGENAME: if (dev->ifindex != basechain->ops[0].dev->ifindex) return; strncpy(basechain->dev_name, dev->name, IFNAMSIZ); break; } }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso98100.00%2100.00%
Total98100.00%2100.00%


static int nf_tables_netdev_event(struct notifier_block *this, unsigned long event, void *ptr) { struct net_device *dev = netdev_notifier_info_to_dev(ptr); struct nft_af_info *afi; struct nft_table *table; struct nft_chain *chain, *nr; struct nft_ctx ctx = { .net = dev_net(dev), }; if (event != NETDEV_UNREGISTER && event != NETDEV_CHANGENAME) return NOTIFY_DONE; nfnl_lock(NFNL_SUBSYS_NFTABLES); list_for_each_entry(afi, &dev_net(dev)->nft.af_info, list) { ctx.afi = afi; if (afi->family != NFPROTO_NETDEV) continue; list_for_each_entry(table, &afi->tables, list) { ctx.table = table; list_for_each_entry_safe(chain, nr, &table->chains, list) { if (!(chain->flags & NFT_BASE_CHAIN)) continue; ctx.chain = chain; nft_netdev_event(event, dev, &ctx); } } } nfnl_unlock(NFNL_SUBSYS_NFTABLES); return NOTIFY_DONE; }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso168100.00%2100.00%
Total168100.00%2100.00%

static struct notifier_block nf_tables_netdev_notifier = { .notifier_call = nf_tables_netdev_event, };
static int __init nf_tables_netdev_init(void) { int ret; ret = nft_register_chain_type(&nft_filter_chain_netdev); if (ret) return ret; ret = register_pernet_subsys(&nf_tables_netdev_net_ops); if (ret) goto err1; ret = register_netdevice_notifier(&nf_tables_netdev_notifier); if (ret) goto err2; return 0; err2: unregister_pernet_subsys(&nf_tables_netdev_net_ops); err1: nft_unregister_chain_type(&nft_filter_chain_netdev); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso4253.16%360.00%
Gao Feng3746.84%240.00%
Total79100.00%5100.00%


static void __exit nf_tables_netdev_exit(void) { unregister_netdevice_notifier(&nf_tables_netdev_notifier); unregister_pernet_subsys(&nf_tables_netdev_net_ops); nft_unregister_chain_type(&nft_filter_chain_netdev); }

Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso27100.00%2100.00%
Total27100.00%2100.00%

module_init(nf_tables_netdev_init); module_exit(nf_tables_netdev_exit); MODULE_LICENSE("GPL"); MODULE_AUTHOR("Pablo Neira Ayuso <pablo@netfilter.org>"); MODULE_ALIAS_NFT_FAMILY(5); /* NFPROTO_NETDEV */

Overall Contributors

PersonTokensPropCommitsCommitProp
Pablo Neira Ayuso70894.65%872.73%
Gao Feng374.95%218.18%
Eric W. Biedermann30.40%19.09%
Total748100.00%11100.00%
Directory: net/netfilter
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
Created with cregit.