cregit-Linux how code gets into the kernel

Release 4.14 net/netfilter/xt_bpf.c

Directory: net/netfilter
/* Xtables module to match packets using a BPF filter.
 * Copyright 2013 Google Inc.
 * Written by Willem de Bruijn <willemb@google.com>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 */

#include <linux/module.h>
#include <linux/syscalls.h>
#include <linux/skbuff.h>
#include <linux/filter.h>
#include <linux/bpf.h>

#include <linux/netfilter/xt_bpf.h>
#include <linux/netfilter/x_tables.h>

MODULE_AUTHOR("Willem de Bruijn <willemb@google.com>");
MODULE_DESCRIPTION("Xtables: BPF filter match");
MODULE_LICENSE("GPL");
MODULE_ALIAS("ipt_bpf");
MODULE_ALIAS("ip6t_bpf");


static int __bpf_mt_check_bytecode(struct sock_filter *insns, __u16 len, struct bpf_prog **ret) { struct sock_fprog_kern program; program.len = len; program.filter = insns; if (bpf_prog_create(ret, &program)) { pr_info("bpf: check failed: parse error\n"); return -EINVAL; } return 0; }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn5896.67%250.00%
Daniel Borkmann11.67%125.00%
Alexei Starovoitov11.67%125.00%
Total60100.00%4100.00%


static int __bpf_mt_check_fd(int fd, struct bpf_prog **ret) { struct bpf_prog *prog; prog = bpf_prog_get_type(fd, BPF_PROG_TYPE_SOCKET_FILTER); if (IS_ERR(prog)) return PTR_ERR(prog); *ret = prog; return 0; }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn50100.00%1100.00%
Total50100.00%1100.00%


static int __bpf_mt_check_path(const char *path, struct bpf_prog **ret) { mm_segment_t oldfs = get_fs(); int retval, fd; set_fs(KERNEL_DS); fd = bpf_obj_get_user(path); set_fs(oldfs); if (fd < 0) return fd; retval = __bpf_mt_check_fd(fd, ret); sys_close(fd); return retval; }

Contributors

PersonTokensPropCommitsCommitProp
Shmulik Ladkani71100.00%1100.00%
Total71100.00%1100.00%


static int bpf_mt_check(const struct xt_mtchk_param *par) { struct xt_bpf_info *info = par->matchinfo; return __bpf_mt_check_bytecode(info->bpf_program, info->bpf_program_num_elem, &info->filter); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn38100.00%1100.00%
Total38100.00%1100.00%


static int bpf_mt_check_v1(const struct xt_mtchk_param *par) { struct xt_bpf_info_v1 *info = par->matchinfo; if (info->mode == XT_BPF_MODE_BYTECODE) return __bpf_mt_check_bytecode(info->bpf_program, info->bpf_program_num_elem, &info->filter); else if (info->mode == XT_BPF_MODE_FD_ELF) return __bpf_mt_check_fd(info->fd, &info->filter); else if (info->mode == XT_BPF_MODE_PATH_PINNED) return __bpf_mt_check_path(info->path, &info->filter); else return -EINVAL; }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn7477.89%150.00%
Shmulik Ladkani2122.11%150.00%
Total95100.00%2100.00%


static bool bpf_mt(const struct sk_buff *skb, struct xt_action_param *par) { const struct xt_bpf_info *info = par->matchinfo; return BPF_PROG_RUN(info->filter, skb); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn3697.30%150.00%
Alexei Starovoitov12.70%150.00%
Total37100.00%2100.00%


static bool bpf_mt_v1(const struct sk_buff *skb, struct xt_action_param *par) { const struct xt_bpf_info_v1 *info = par->matchinfo; return !!bpf_prog_run_save_cb(info->filter, (struct sk_buff *) skb); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn44100.00%1100.00%
Total44100.00%1100.00%


static void bpf_mt_destroy(const struct xt_mtdtor_param *par) { const struct xt_bpf_info *info = par->matchinfo; bpf_prog_destroy(info->filter); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn2896.55%150.00%
Alexei Starovoitov13.45%150.00%
Total29100.00%2100.00%


static void bpf_mt_destroy_v1(const struct xt_mtdtor_param *par) { const struct xt_bpf_info_v1 *info = par->matchinfo; bpf_prog_destroy(info->filter); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn29100.00%1100.00%
Total29100.00%1100.00%

static struct xt_match bpf_mt_reg[] __read_mostly = { { .name = "bpf", .revision = 0, .family = NFPROTO_UNSPEC, .checkentry = bpf_mt_check, .match = bpf_mt, .destroy = bpf_mt_destroy, .matchsize = sizeof(struct xt_bpf_info), .usersize = offsetof(struct xt_bpf_info, filter), .me = THIS_MODULE, }, { .name = "bpf", .revision = 1, .family = NFPROTO_UNSPEC, .checkentry = bpf_mt_check_v1, .match = bpf_mt_v1, .destroy = bpf_mt_destroy_v1, .matchsize = sizeof(struct xt_bpf_info_v1), .usersize = offsetof(struct xt_bpf_info_v1, filter), .me = THIS_MODULE, }, };
static int __init bpf_mt_init(void) { return xt_register_matches(bpf_mt_reg, ARRAY_SIZE(bpf_mt_reg)); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn20100.00%2100.00%
Total20100.00%2100.00%


static void __exit bpf_mt_exit(void) { xt_unregister_matches(bpf_mt_reg, ARRAY_SIZE(bpf_mt_reg)); }

Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn19100.00%2100.00%
Total19100.00%2100.00%

module_init(bpf_mt_init); module_exit(bpf_mt_exit);

Overall Contributors

PersonTokensPropCommitsCommitProp
Willem de Bruijn57385.27%350.00%
Shmulik Ladkani9514.14%116.67%
Alexei Starovoitov30.45%116.67%
Daniel Borkmann10.15%116.67%
Total672100.00%6100.00%
Directory: net/netfilter
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
Created with cregit.