cregit-Linux how code gets into the kernel

Release 4.7 net/ipv4/netfilter/arp_tables.c

/*
 * Packet matching code for ARP packets.
 *
 * Based heavily, if not almost entirely, upon ip_tables.c framework.
 *
 * Some ARP specific bits are:
 *
 * Copyright (C) 2002 David S. Miller (davem@redhat.com)
 * Copyright (C) 2006-2009 Patrick McHardy <kaber@trash.net>
 *
 */

#define pr_fmt(fmt) KBUILD_MODNAME ": " fmt
#include <linux/kernel.h>
#include <linux/skbuff.h>
#include <linux/netdevice.h>
#include <linux/capability.h>
#include <linux/if_arp.h>
#include <linux/kmod.h>
#include <linux/vmalloc.h>
#include <linux/proc_fs.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/mutex.h>
#include <linux/err.h>
#include <net/compat.h>
#include <net/sock.h>
#include <asm/uaccess.h>

#include <linux/netfilter/x_tables.h>
#include <linux/netfilter_arp/arp_tables.h>
#include "../../netfilter/xt_repldata.h"

MODULE_LICENSE("GPL");
MODULE_AUTHOR("David S. Miller <davem@redhat.com>");
MODULE_DESCRIPTION("arptables core");


void *arpt_alloc_initial_table(const struct xt_table *info) { return xt_alloc_initial_table(arpt, ARPT); }

Contributors

PersonTokensPropCommitsCommitProp
jan engelhardtjan engelhardt20100.00%1100.00%
Total20100.00%1100.00%

EXPORT_SYMBOL_GPL(arpt_alloc_initial_table);
static inline int arp_devaddr_compare(const struct arpt_devaddr_info *ap, const char *hdr_addr, int len) { int i, ret; if (len > ARPT_DEV_ADDR_LEN_MAX) len = ARPT_DEV_ADDR_LEN_MAX; ret = 0; for (i = 0; i < len; i++) ret |= (hdr_addr[i] ^ ap->addr[i]) & ap->mask[i]; return ret != 0; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller8098.77%150.00%
jan engelhardtjan engelhardt11.23%150.00%
Total81100.00%2100.00%

/* * Unfortunately, _b and _mask are not aligned to an int (or long int) * Some arches dont care, unrolling the loop is a win on them. * For other arches, we only have a 16bit alignement. */
static unsigned long ifname_compare(const char *_a, const char *_b, const char *_mask) { #ifdef CONFIG_HAVE_EFFICIENT_UNALIGNED_ACCESS unsigned long ret = ifname_compare_aligned(_a, _b, _mask); #else unsigned long ret = 0; const u16 *a = (const u16 *)_a; const u16 *b = (const u16 *)_b; const u16 *mask = (const u16 *)_mask; int i; for (i = 0; i < IFNAMSIZ/sizeof(u16); i++) ret |= (a[i] ^ b[i]) & mask[i]; #endif return ret; }

Contributors

PersonTokensPropCommitsCommitProp
eric dumazeteric dumazet127100.00%3100.00%
Total127100.00%3100.00%

/* Returns whether packet matches rule or not. */
static inline int arp_packet_match(const struct arphdr *arphdr, struct net_device *dev, const char *indev, const char *outdev, const struct arpt_arp *arpinfo) { const char *arpptr = (char *)(arphdr + 1); const char *src_devaddr, *tgt_devaddr; __be32 src_ipaddr, tgt_ipaddr; long ret; #define FWINV(bool, invflg) ((bool) ^ !!(arpinfo->invflags & (invflg))) if (FWINV((arphdr->ar_op & arpinfo->arpop_mask) != arpinfo->arpop, ARPT_INV_ARPOP)) return 0; if (FWINV((arphdr->ar_hrd & arpinfo->arhrd_mask) != arpinfo->arhrd, ARPT_INV_ARPHRD)) return 0; if (FWINV((arphdr->ar_pro & arpinfo->arpro_mask) != arpinfo->arpro, ARPT_INV_ARPPRO)) return 0; if (FWINV((arphdr->ar_hln & arpinfo->arhln_mask) != arpinfo->arhln, ARPT_INV_ARPHLN)) return 0; src_devaddr = arpptr; arpptr += dev->addr_len; memcpy(&src_ipaddr, arpptr, sizeof(u32)); arpptr += sizeof(u32); tgt_devaddr = arpptr; arpptr += dev->addr_len; memcpy(&tgt_ipaddr, arpptr, sizeof(u32)); if (FWINV(arp_devaddr_compare(&arpinfo->src_devaddr, src_devaddr, dev->addr_len), ARPT_INV_SRCDEVADDR) || FWINV(arp_devaddr_compare(&arpinfo->tgt_devaddr, tgt_devaddr, dev->addr_len), ARPT_INV_TGTDEVADDR)) return 0; if (FWINV((src_ipaddr & arpinfo->smsk.s_addr) != arpinfo->src.s_addr, ARPT_INV_SRCIP) || FWINV(((tgt_ipaddr & arpinfo->tmsk.s_addr) != arpinfo->tgt.s_addr), ARPT_INV_TGTIP)) return 0; /* Look for ifname matches. */ ret = ifname_compare(indev, arpinfo->iniface, arpinfo->iniface_mask); if (FWINV(ret != 0, ARPT_INV_VIA_IN)) return 0; ret = ifname_compare(outdev, arpinfo->outiface, arpinfo->outiface_mask); if (FWINV(ret != 0, ARPT_INV_VIA_OUT)) return 0; return 1; #undef FWINV }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller33989.21%333.33%
antti p miettinenantti p miettinen205.26%111.11%
eric dumazeteric dumazet112.89%111.11%
jan engelhardtjan engelhardt61.58%222.22%
bart de schuymerbart de schuymer30.79%111.11%
al viroal viro10.26%111.11%
Total380100.00%9100.00%


static inline int arp_checkentry(const struct arpt_arp *arp) { if (arp->flags & ~ARPT_F_MASK) return 0; if (arp->invflags & ~ARPT_INV_MASK) return 0; return 1; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller40100.00%1100.00%
Total40100.00%1100.00%


static unsigned int arpt_error(struct sk_buff *skb, const struct xt_action_param *par) { net_err_ratelimited("arp_tables: error: '%s'\n", (const char *)par->targinfo); return NF_DROP; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller2880.00%120.00%
jan engelhardtjan engelhardt514.29%240.00%
herbert xuherbert xu12.86%120.00%
joe perchesjoe perches12.86%120.00%
Total35100.00%5100.00%


static inline const struct xt_entry_target * arpt_get_target_c(const struct arpt_entry *e) { return arpt_get_target((struct arpt_entry *)e); }

Contributors

PersonTokensPropCommitsCommitProp
jan engelhardtjan engelhardt27100.00%2100.00%
Total27100.00%2100.00%


static inline struct arpt_entry * get_entry(const void *base, unsigned int offset) { return (struct arpt_entry *)(base + offset); }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller2996.67%150.00%
jan engelhardtjan engelhardt13.33%150.00%
Total30100.00%2100.00%


static inline struct arpt_entry *arpt_next_entry(const struct arpt_entry *entry) { return (void *)entry + entry->next_offset; }

Contributors

PersonTokensPropCommitsCommitProp
jan engelhardtjan engelhardt1765.38%150.00%
florian westphalflorian westphal934.62%150.00%
Total26100.00%2100.00%


unsigned int arpt_do_table(struct sk_buff *skb, const struct nf_hook_state *state, struct xt_table *table) { unsigned int hook = state->hook; static const char nulldevname[IFNAMSIZ] __attribute__((aligned(sizeof(long)))); unsigned int verdict = NF_DROP; const struct arphdr *arp; struct arpt_entry *e, **jumpstack; const char *indev, *outdev; const void *table_base; unsigned int cpu, stackidx = 0; const struct xt_table_info *private; struct xt_action_param acpar; unsigned int addend; if (!pskb_may_pull(skb, arp_hdr_len(skb->dev))) return NF_DROP; indev = state->in ? state->in->name : nulldevname; outdev = state->out ? state->out->name : nulldevname; local_bh_disable(); addend = xt_write_recseq_begin(); private = table->private; cpu = smp_processor_id(); /* * Ensure we load private-> members after we've fetched the base * pointer. */ smp_read_barrier_depends(); table_base = private->entries; jumpstack = (struct arpt_entry **)private->jumpstack[cpu]; /* No TEE support for arptables, so no need to switch to alternate * stack. All targets that reenter must return absolute verdicts. */ e = get_entry(table_base, private->hook_entry[hook]); acpar.net = state->net; acpar.in = state->in; acpar.out = state->out; acpar.hooknum = hook; acpar.family = NFPROTO_ARP; acpar.hotdrop = false; arp = arp_hdr(skb); do { const struct xt_entry_target *t; struct xt_counters *counter; if (!arp_packet_match(arp, skb->dev, indev, outdev, &e->arp)) { e = arpt_next_entry(e); continue; } counter = xt_get_this_cpu_counter(&e->counters); ADD_COUNTER(*counter, arp_hdr_len(skb->dev), 1); t = arpt_get_target_c(e); /* Standard target? */ if (!t->u.kernel.target->target) { int v; v = ((struct xt_standard_target *)t)->verdict; if (v < 0) { /* Pop from stack? */ if (v != XT_RETURN) { verdict = (unsigned int)(-v) - 1; break; } if (stackidx == 0) { e = get_entry(table_base, private->underflow[hook]); } else { e = jumpstack[--stackidx]; e = arpt_next_entry(e); } continue; } if (table_base + v != arpt_next_entry(e)) { jumpstack[stackidx++] = e; } e = get_entry(table_base, v); continue; } acpar.target = t->u.kernel.target; acpar.targinfo = t->data; verdict = t->u.kernel.target->target(skb, &acpar); /* Target might have changed stuff. */ arp = arp_hdr(skb); if (verdict == XT_CONTINUE) e = arpt_next_entry(e); else /* Verdict */ break; } while (!acpar.hotdrop); xt_write_recseq_end(addend); local_bh_enable(); if (acpar.hotdrop) return NF_DROP; else return verdict; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller30053.29%38.82%
jan engelhardtjan engelhardt8715.45%1235.29%
florian westphalflorian westphal7914.03%38.82%
eric dumazeteric dumazet305.33%411.76%
eric w. biedermaneric w. biederman162.84%25.88%
patrick mchardypatrick mchardy122.13%25.88%
rusty russellrusty russell91.60%12.94%
herbert xuherbert xu61.07%12.94%
arnaldo carvalho de meloarnaldo carvalho de melo61.07%12.94%
changli gaochangli gao61.07%12.94%
harald welteharald welte50.89%12.94%
will deaconwill deacon40.71%12.94%
stephen hemmingerstephen hemminger20.36%12.94%
pavel emelianovpavel emelianov10.18%12.94%
Total563100.00%34100.00%

/* All zeroes == unconditional rule. */
static inline bool unconditional(const struct arpt_entry *e) { static const struct arpt_arp uncond; return e->target_offset == sizeof(struct arpt_entry) && memcmp(&e->arp, &uncond, sizeof(uncond)) == 0; }

Contributors

PersonTokensPropCommitsCommitProp
florian westphalflorian westphal1531.25%120.00%
jan engelhardtjan engelhardt1531.25%120.00%
david s. millerdavid s. miller1020.83%120.00%
harald welteharald welte816.67%240.00%
Total48100.00%5100.00%


static bool find_jump_target(const struct xt_table_info *t, const struct arpt_entry *target) { struct arpt_entry *iter; xt_entry_foreach(iter, t->entries, t->size) { if (iter == target) return true; } return false; }

Contributors

PersonTokensPropCommitsCommitProp
florian westphalflorian westphal45100.00%1100.00%
Total45100.00%1100.00%

/* Figures out from what hook each rule can be called: returns 0 if * there are loops. Puts hook bitmask in comefrom. */
static int mark_source_chains(const struct xt_table_info *newinfo, unsigned int valid_hooks, void *entry0) { unsigned int hook; /* No recursion; use packet counter to save back ptrs (reset * to 0 as we leave), and comefrom to save source hook bitmask. */ for (hook = 0; hook < NF_ARP_NUMHOOKS; hook++) { unsigned int pos = newinfo->hook_entry[hook]; struct arpt_entry *e = (struct arpt_entry *)(entry0 + pos); if (!(valid_hooks & (1 << hook))) continue; /* Set initial back pointer. */ e->counters.pcnt = pos; for (;;) { const struct xt_standard_target *t = (void *)arpt_get_target_c(e); int visited = e->comefrom & (1 << hook); if (e->comefrom & (1 << NF_ARP_NUMHOOKS)) return 0; e->comefrom |= ((1 << hook) | (1 << NF_ARP_NUMHOOKS)); /* Unconditional return/END. */ if ((unconditional(e) && (strcmp(t->target.u.user.name, XT_STANDARD_TARGET) == 0) && t->verdict < 0) || visited) { unsigned int oldpos, size; if ((strcmp(t->target.u.user.name, XT_STANDARD_TARGET) == 0) && t->verdict < -NF_MAX_VERDICT - 1) return 0; /* Return: backtrack through the last * big jump. */ do { e->comefrom ^= (1<<NF_ARP_NUMHOOKS); oldpos = pos; pos = e->counters.pcnt; e->counters.pcnt = 0; /* We're at the start. */ if (pos == oldpos) goto next; e = (struct arpt_entry *) (entry0 + pos); } while (oldpos == pos + e->next_offset); /* Move along one */ size = e->next_offset; e = (struct arpt_entry *) (entry0 + pos + size); if (pos + size >= newinfo->size) return 0; e->counters.pcnt = pos; pos += size; } else { int newpos = t->verdict; if (strcmp(t->target.u.user.name, XT_STANDARD_TARGET) == 0 && newpos >= 0) { /* This a jump; chase it. */ e = (struct arpt_entry *) (entry0 + newpos); if (!find_jump_target(newinfo, e)) return 0; } else { /* ... this is a fallthru */ newpos = pos + e->next_offset; if (newpos >= newinfo->size) return 0; } e = (struct arpt_entry *) (entry0 + newpos); e->counters.pcnt = pos; pos = newpos; } } next: ; } return 1; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller33271.09%16.25%
florian westphalflorian westphal5311.35%425.00%
harald welteharald welte224.71%212.50%
patrick mchardypatrick mchardy183.85%16.25%
al viroal viro173.64%16.25%
dmitry mishindmitry mishin143.00%16.25%
jan engelhardtjan engelhardt61.28%425.00%
eric dumazeteric dumazet40.86%16.25%
pablo neira ayusopablo neira ayuso10.21%16.25%
Total467100.00%16100.00%


static inline int check_target(struct arpt_entry *e, const char *name) { struct xt_entry_target *t = arpt_get_target(e); struct xt_tgchk_param par = { .table = name, .entryinfo = e, .target = t->u.kernel.target, .targinfo = t->data, .hook_mask = e->comefrom, .family = NFPROTO_ARP, }; return xt_check_target(&par, t->u.target_size - sizeof(*t), 0, false); }

Contributors

PersonTokensPropCommitsCommitProp
jan engelhardtjan engelhardt4445.83%333.33%
patrick mchardypatrick mchardy3839.58%222.22%
david s. millerdavid s. miller1010.42%111.11%
harald welteharald welte22.08%111.11%
pablo neira ayusopablo neira ayuso11.04%111.11%
rusty russellrusty russell11.04%111.11%
Total96100.00%9100.00%


static inline int find_check_entry(struct arpt_entry *e, const char *name, unsigned int size) { struct xt_entry_target *t; struct xt_target *target; unsigned long pcnt; int ret; pcnt = xt_percpu_counter_alloc(); if (IS_ERR_VALUE(pcnt)) return -ENOMEM; e->counters.pcnt = pcnt; t = arpt_get_target(e); target = xt_request_find_target(NFPROTO_ARP, t->u.user.name, t->u.user.revision); if (IS_ERR(target)) { ret = PTR_ERR(target); goto out; } t->u.kernel.target = target; ret = check_target(e, name); if (ret) goto err; return 0; err: module_put(t->u.kernel.target->me); out: xt_percpu_counter_free(e->counters.pcnt); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy11668.64%222.22%
florian westphalflorian westphal2514.79%111.11%
pablo neira ayusopablo neira ayuso127.10%111.11%
david s. millerdavid s. miller127.10%111.11%
jan engelhardtjan engelhardt42.37%444.44%
Total169100.00%9100.00%


static bool check_underflow(const struct arpt_entry *e) { const struct xt_entry_target *t; unsigned int verdict; if (!unconditional(e)) return false; t = arpt_get_target_c(e); if (strcmp(t->u.user.name, XT_STANDARD_TARGET) != 0) return false; verdict = ((struct xt_standard_target *)t)->verdict; verdict = -verdict - 1; return verdict == NF_DROP || verdict == NF_ACCEPT; }

Contributors

PersonTokensPropCommitsCommitProp
jan engelhardtjan engelhardt89100.00%3100.00%
Total89100.00%3100.00%


static inline int check_entry_size_and_hooks(struct arpt_entry *e, struct xt_table_info *newinfo, const unsigned char *base, const unsigned char *limit, const unsigned int *hook_entries, const unsigned int *underflows, unsigned int valid_hooks) { unsigned int h; int err; if ((unsigned long)e % __alignof__(struct arpt_entry) != 0 || (unsigned char *)e + sizeof(struct arpt_entry) >= limit || (unsigned char *)e + e->next_offset > limit) return -EINVAL; if (e->next_offset < sizeof(struct arpt_entry) + sizeof(struct xt_entry_target)) return -EINVAL; if (!arp_checkentry(&e->arp)) return -EINVAL; err = xt_check_entry_offsets(e, e->elems, e->target_offset, e->next_offset); if (err) return err; /* Check hooks & underflows */ for (h = 0; h < NF_ARP_NUMHOOKS; h++) { if (!(valid_hooks & (1 << h))) continue; if ((unsigned char *)e - base == hook_entries[h]) newinfo->hook_entry[h] = hook_entries[h]; if ((unsigned char *)e - base == underflows[h]) { if (!check_underflow(e)) return -EINVAL; newinfo->underflow[h] = underflows[h]; } } /* Clear counters and comefrom */ e->counters = ((struct xt_counters) { 0, 0 }); e->comefrom = 0; return 0; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller19868.51%19.09%
florian westphalflorian westphal5719.72%436.36%
jan engelhardtjan engelhardt3211.07%545.45%
harald welteharald welte20.69%19.09%
Total289100.00%11100.00%


static inline void cleanup_entry(struct arpt_entry *e) { struct xt_tgdtor_param par; struct xt_entry_target *t; t = arpt_get_target(e); par.target = t->u.kernel.target; par.targinfo = t->data; par.family = NFPROTO_ARP; if (par.target->destroy != NULL) par.target->destroy(&par); module_put(par.target->me); xt_percpu_counter_free(e->counters.pcnt); }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller4447.83%112.50%
jan engelhardtjan engelhardt3538.04%450.00%
florian westphalflorian westphal99.78%112.50%
patrick mchardypatrick mchardy33.26%112.50%
rusty russellrusty russell11.09%112.50%
Total92100.00%8100.00%

/* Checks and translates the user-supplied table segment (held in * newinfo). */
static int translate_table(struct xt_table_info *newinfo, void *entry0, const struct arpt_replace *repl) { struct arpt_entry *iter; unsigned int i; int ret = 0; newinfo->size = repl->size; newinfo->number = repl->num_entries; /* Init all hooks to impossible value. */ for (i = 0; i < NF_ARP_NUMHOOKS; i++) { newinfo->hook_entry[i] = 0xFFFFFFFF; newinfo->underflow[i] = 0xFFFFFFFF; } i = 0; /* Walk through entries, checking offsets. */ xt_entry_foreach(iter, entry0, newinfo->size) { ret = check_entry_size_and_hooks(iter, newinfo, entry0, entry0 + repl->size, repl->hook_entry, repl->underflow, repl->valid_hooks); if (ret != 0) break; ++i; if (strcmp(arpt_get_target(iter)->u.user.name, XT_ERROR_TARGET) == 0) ++newinfo->stacksize; } if (ret != 0) return ret; if (i != repl->num_entries) return -EINVAL; /* Check hooks all assigned */ for (i = 0; i < NF_ARP_NUMHOOKS; i++) { /* Only hooks which are valid */ if (!(repl->valid_hooks & (1 << i))) continue; if (newinfo->hook_entry[i] == 0xFFFFFFFF) return -EINVAL; if (newinfo->underflow[i] == 0xFFFFFFFF) return -EINVAL; } if (!mark_source_chains(newinfo, repl->valid_hooks, entry0)) return -ELOOP; /* Finally, each sanity check must pass */ i = 0; xt_entry_foreach(iter, entry0, newinfo->size) { ret = find_check_entry(iter, repl->name, repl->size); if (ret != 0) break; ++i; } if (ret != 0) { xt_entry_foreach(iter, entry0, newinfo->size) { if (i-- == 0) break; cleanup_entry(iter); } return ret; } return ret; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller18453.64%19.09%
jan engelhardtjan engelhardt9828.57%436.36%
florian westphalflorian westphal257.29%19.09%
dmitry mishindmitry mishin226.41%19.09%
eric dumazeteric dumazet61.75%19.09%
pablo neira ayusopablo neira ayuso51.46%19.09%
harald welteharald welte20.58%19.09%
patrick mchardypatrick mchardy10.29%19.09%
Total343100.00%11100.00%


static void get_counters(const struct xt_table_info *t, struct xt_counters counters[]) { struct arpt_entry *iter; unsigned int cpu; unsigned int i; for_each_possible_cpu(cpu) { seqcount_t *s = &per_cpu(xt_recseq, cpu); i = 0; xt_entry_foreach(iter, t->entries, t->size) { struct xt_counters *tmp; u64 bcnt, pcnt; unsigned int start; tmp = xt_get_per_cpu_counter(&iter->counters, cpu); do { start = read_seqcount_begin(s); bcnt = tmp->bcnt; pcnt = tmp->pcnt; } while (read_seqcount_retry(s, start)); ADD_COUNTER(counters[i], bcnt, pcnt); ++i; } } }

Contributors

PersonTokensPropCommitsCommitProp
eric dumazeteric dumazet5339.26%436.36%
jan engelhardtjan engelhardt3122.96%218.18%
david s. millerdavid s. miller2216.30%19.09%
florian westphalflorian westphal2014.81%218.18%
stephen hemmingerstephen hemminger75.19%19.09%
harald welteharald welte21.48%19.09%
Total135100.00%11100.00%


static struct xt_counters *alloc_counters(const struct xt_table *table) { unsigned int countersize; struct xt_counters *counters; const struct xt_table_info *private = table->private; /* We need atomic snapshot of counters: rest doesn't change * (other than comefrom, which userspace doesn't care * about). */ countersize = sizeof(struct xt_counters) * private->number; counters = vzalloc(countersize); if (counters == NULL) return ERR_PTR(-ENOMEM); get_counters(private, counters); return counters; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller4559.21%112.50%
harald welteharald welte1114.47%112.50%
patrick mchardypatrick mchardy810.53%112.50%
stephen hemmingerstephen hemminger810.53%225.00%
jan engelhardtjan engelhardt33.95%225.00%
eric dumazeteric dumazet11.32%112.50%
Total76100.00%8100.00%


static int copy_entries_to_user(unsigned int total_size, const struct xt_table *table, void __user *userptr) { unsigned int off, num; const struct arpt_entry *e; struct xt_counters *counters; struct xt_table_info *private = table->private; int ret = 0; void *loc_cpu_entry; counters = alloc_counters(table); if (IS_ERR(counters)) return PTR_ERR(counters); loc_cpu_entry = private->entries; /* ... then copy entire thing ... */ if (copy_to_user(userptr, loc_cpu_entry, total_size) != 0) { ret = -EFAULT; goto free_counters; } /* FIXME: use iterator macros --RR */ /* ... then go back and fix counters and names */ for (off = 0, num = 0; off < total_size; off += e->next_offset, num++){ const struct xt_entry_target *t; e = (struct arpt_entry *)(loc_cpu_entry + off); if (copy_to_user(userptr + off + offsetof(struct arpt_entry, counters), &counters[num], sizeof(counters[num])) != 0) { ret = -EFAULT; goto free_counters; } t = arpt_get_target_c(e); if (copy_to_user(userptr + off + e->target_offset + offsetof(struct xt_entry_target, u.user.name), t->u.kernel.target->name, strlen(t->u.kernel.target->name)+1) != 0) { ret = -EFAULT; goto free_counters; } } free_counters: vfree(counters); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller18667.88%116.67%
patrick mchardypatrick mchardy7226.28%116.67%
eric dumazeteric dumazet93.28%116.67%
jan engelhardtjan engelhardt72.55%350.00%
Total274100.00%6100.00%

#ifdef CONFIG_COMPAT
static void compat_standard_from_user(void *dst, const void *src) { int v = *(compat_int_t *)src; if (v > 0) v += xt_compat_calc_jump(NFPROTO_ARP, v); memcpy(dst, &v, sizeof(v)); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy5196.23%250.00%
jan engelhardtjan engelhardt23.77%250.00%
Total53100.00%4100.00%


static int compat_standard_to_user(void __user *dst, const void *src) { compat_int_t cv = *(int *)src; if (cv > 0) cv -= xt_compat_calc_jump(NFPROTO_ARP, cv); return copy_to_user(dst, &cv, sizeof(cv)) ? -EFAULT : 0; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy5896.67%250.00%
jan engelhardtjan engelhardt23.33%250.00%
Total60100.00%4100.00%


static int compat_calc_entry(const struct arpt_entry *e, const struct xt_table_info *info, const void *base, struct xt_table_info *newinfo) { const struct xt_entry_target *t; unsigned int entry_offset; int off, i, ret; off = sizeof(struct arpt_entry) - sizeof(struct compat_arpt_entry); entry_offset = (void *)e - base; t = arpt_get_target_c(e); off += xt_compat_target_offset(t->u.kernel.target); newinfo->size -= off; ret = xt_compat_add_offset(NFPROTO_ARP, entry_offset, off); if (ret) return ret; for (i = 0; i < NF_ARP_NUMHOOKS; i++) { if (info->hook_entry[i] && (e < (struct arpt_entry *)(base + info->hook_entry[i]))) newinfo->hook_entry[i] -= off; if (info->underflow[i] && (e < (struct arpt_entry *)(base + info->underflow[i]))) newinfo->underflow[i] -= off; } return 0; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy20197.10%240.00%
jan engelhardtjan engelhardt62.90%360.00%
Total207100.00%5100.00%


static int compat_table_info(const struct xt_table_info *info, struct xt_table_info *newinfo) { struct arpt_entry *iter; const void *loc_cpu_entry; int ret; if (!newinfo || !info) return -EINVAL; /* we dont care about newinfo->entries */ memcpy(newinfo, info, offsetof(struct xt_table_info, entries)); newinfo->initial_entries = 0; loc_cpu_entry = info->entries; xt_compat_init_offsets(NFPROTO_ARP, info->number); xt_entry_foreach(iter, loc_cpu_entry, info->size) { ret = compat_calc_entry(iter, info, loc_cpu_entry, newinfo); if (ret != 0) return ret; } return 0; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy7263.16%228.57%
jan engelhardtjan engelhardt3127.19%228.57%
eric dumazeteric dumazet108.77%228.57%
florian westphalflorian westphal10.88%114.29%
Total114100.00%7100.00%

#endif
static int get_info(struct net *net, void __user *user, const int *len, int compat) { char name[XT_TABLE_MAXNAMELEN]; struct xt_table *t; int ret; if (*len != sizeof(struct arpt_getinfo)) return -EINVAL; if (copy_from_user(name, user, sizeof(name)) != 0) return -EFAULT; name[XT_TABLE_MAXNAMELEN-1] = '\0'; #ifdef CONFIG_COMPAT if (compat) xt_compat_lock(NFPROTO_ARP); #endif t = try_then_request_module(xt_find_table_lock(net, NFPROTO_ARP, name), "arptable_%s", name); if (!IS_ERR_OR_NULL(t)) { struct arpt_getinfo info; const struct xt_table_info *private = t->private; #ifdef CONFIG_COMPAT struct xt_table_info tmp; if (compat) { ret = compat_table_info(private, &tmp); xt_compat_flush_offsets(NFPROTO_ARP); private = &tmp; } #endif memset(&info, 0, sizeof(info)); info.valid_hooks = t->valid_hooks; memcpy(info.hook_entry, private->hook_entry, sizeof(info.hook_entry)); memcpy(info.underflow, private->underflow, sizeof(info.underflow)); info.num_entries = private->number; info.size = private->size; strcpy(info.name, name); if (copy_to_user(user, &info, *len) != 0) ret = -EFAULT; else ret = 0; xt_table_unlock(t); module_put(t->me); } else ret = t ? PTR_ERR(t) : -ENOENT; #ifdef CONFIG_COMPAT if (compat) xt_compat_unlock(NFPROTO_ARP); #endif return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy20262.73%211.76%
david s. millerdavid s. miller4413.66%15.88%
harald welteharald welte3410.56%211.76%
vasiliy kulikovvasiliy kulikov134.04%15.88%
alexey dobriyanalexey dobriyan113.42%317.65%
jan engelhardtjan engelhardt92.80%529.41%
eric dumazeteric dumazet72.17%15.88%
al viroal viro10.31%15.88%
hideaki yoshifujihideaki yoshifuji10.31%15.88%
Total322100.00%17100.00%


static int get_entries(struct net *net, struct arpt_get_entries __user *uptr, const int *len) { int ret; struct arpt_get_entries get; struct xt_table *t; if (*len < sizeof(get)) return -EINVAL; if (copy_from_user(&get, uptr, sizeof(get)) != 0) return -EFAULT; if (*len != sizeof(struct arpt_get_entries) + get.size) return -EINVAL; get.name[sizeof(get.name) - 1] = '\0'; t = xt_find_table_lock(net, NFPROTO_ARP, get.name); if (!IS_ERR_OR_NULL(t)) { const struct xt_table_info *private = t->private; if (get.size == private->size) ret = copy_entries_to_user(private->size, t, uptr->entrytable); else ret = -EAGAIN; module_put(t->me); xt_table_unlock(t); } else ret = t ? PTR_ERR(t) : -ENOENT; return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy10252.04%215.38%
david s. millerdavid s. miller4321.94%17.69%
pablo neira ayusopablo neira ayuso168.16%17.69%
eric dumazeteric dumazet136.63%17.69%
kirill korotaevkirill korotaev105.10%17.69%
alexey dobriyanalexey dobriyan73.57%215.38%
jan engelhardtjan engelhardt42.04%430.77%
hideaki yoshifujihideaki yoshifuji10.51%17.69%
Total196100.00%13100.00%


static int __do_replace(struct net *net, const char *name, unsigned int valid_hooks, struct xt_table_info *newinfo, unsigned int num_counters, void __user *counters_ptr) { int ret; struct xt_table *t; struct xt_table_info *oldinfo; struct xt_counters *counters; void *loc_cpu_old_entry; struct arpt_entry *iter; ret = 0; counters = vzalloc(num_counters * sizeof(struct xt_counters)); if (!counters) { ret = -ENOMEM; goto out; } t = try_then_request_module(xt_find_table_lock(net, NFPROTO_ARP, name), "arptable_%s", name); if (IS_ERR_OR_NULL(t)) { ret = t ? PTR_ERR(t) : -ENOENT; goto free_newinfo_counters_untrans; } /* You lied! */ if (valid_hooks != t->valid_hooks) { ret = -EINVAL; goto put_module; } oldinfo = xt_replace_table(t, num_counters, newinfo, &ret); if (!oldinfo) goto put_module; /* Update module usage count based on number of rules */ if ((oldinfo->number > oldinfo->initial_entries) || (newinfo->number <= oldinfo->initial_entries)) module_put(t->me); if ((oldinfo->number > oldinfo->initial_entries) && (newinfo->number <= oldinfo->initial_entries)) module_put(t->me); /* Get the old counters, and synchronize with replace */ get_counters(oldinfo, counters); /* Decrease module usage counts and free resource */ loc_cpu_old_entry = oldinfo->entries; xt_entry_foreach(iter, loc_cpu_old_entry, oldinfo->size) cleanup_entry(iter); xt_free_table_info(oldinfo); if (copy_to_user(counters_ptr, counters, sizeof(struct xt_counters) * num_counters) != 0) { /* Silent error, can't fail, new table is already in place */ net_warn_ratelimited("arptables: counters copy to user failed while replacing table\n"); } vfree(counters); xt_table_unlock(t); return ret; put_module: module_put(t->me); xt_table_unlock(t); free_newinfo_counters_untrans: vfree(counters); out: return ret; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller17752.99%15.88%
patrick mchardypatrick mchardy6519.46%15.88%
harald welteharald welte339.88%211.76%
christoph hellwigchristoph hellwig175.09%15.88%
jan engelhardtjan engelhardt154.49%423.53%
thomas grafthomas graf72.10%15.88%
alexey dobriyanalexey dobriyan72.10%211.76%
rusty russellrusty russell61.80%15.88%
eric dumazeteric dumazet51.50%211.76%
stephen hemmingerstephen hemminger10.30%15.88%
hideaki yoshifujihideaki yoshifuji10.30%15.88%
Total334100.00%17100.00%


static int do_replace(struct net *net, const void __user *user, unsigned int len) { int ret; struct arpt_replace tmp; struct xt_table_info *newinfo; void *loc_cpu_entry; struct arpt_entry *iter; if (copy_from_user(&tmp, user, sizeof(tmp)) != 0) return -EFAULT; /* overflow check */ if (tmp.num_counters >= INT_MAX / sizeof(struct xt_counters)) return -ENOMEM; if (tmp.num_counters == 0) return -EINVAL; tmp.name[sizeof(tmp.name)-1] = 0; newinfo = xt_alloc_table_info(tmp.size); if (!newinfo) return -ENOMEM; loc_cpu_entry = newinfo->entries; if (copy_from_user(loc_cpu_entry, user + sizeof(tmp), tmp.size) != 0) { ret = -EFAULT; goto free_newinfo; } ret = translate_table(newinfo, loc_cpu_entry, &tmp); if (ret != 0) goto free_newinfo; ret = __do_replace(net, tmp.name, tmp.valid_hooks, newinfo, tmp.num_counters, tmp.counters); if (ret) goto free_newinfo_untrans; return 0; free_newinfo_untrans: xt_entry_foreach(iter, loc_cpu_entry, newinfo->size) cleanup_entry(iter); free_newinfo: xt_free_table_info(newinfo); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy19177.96%110.00%
vasiliy kulikovvasiliy kulikov166.53%110.00%
jan engelhardtjan engelhardt156.12%440.00%
dave jonesdave jones124.90%110.00%
alexey dobriyanalexey dobriyan72.86%110.00%
david s. millerdavid s. miller31.22%110.00%
eric dumazeteric dumazet10.41%110.00%
Total245100.00%10100.00%


static int do_add_counters(struct net *net, const void __user *user, unsigned int len, int compat) { unsigned int i; struct xt_counters_info tmp; struct xt_counters *paddc; struct xt_table *t; const struct xt_table_info *private; int ret = 0; struct arpt_entry *iter; unsigned int addend; paddc = xt_copy_counters_from_user(user, len, &tmp, compat); if (IS_ERR(paddc)) return PTR_ERR(paddc); t = xt_find_table_lock(net, NFPROTO_ARP, tmp.name); if (IS_ERR_OR_NULL(t)) { ret = t ? PTR_ERR(t) : -ENOENT; goto free; } local_bh_disable(); private = t->private; if (private->number != tmp.num_counters) { ret = -EINVAL; goto unlock_up_free; } i = 0; addend = xt_write_recseq_begin(); xt_entry_foreach(iter, private->entries, private->size) { struct xt_counters *tmp; tmp = xt_get_this_cpu_counter(&iter->counters); ADD_COUNTER(*tmp, paddc[i].bcnt, paddc[i].pcnt); ++i; } xt_write_recseq_end(addend); unlock_up_free: local_bh_enable(); xt_table_unlock(t); module_put(t->me); free: vfree(paddc); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy15463.11%16.25%
jan engelhardtjan engelhardt3413.93%637.50%
florian westphalflorian westphal3012.30%318.75%
eric dumazeteric dumazet104.10%16.25%
stephen hemmingerstephen hemminger83.28%212.50%
alexey dobriyanalexey dobriyan72.87%212.50%
hideaki yoshifujihideaki yoshifuji10.41%16.25%
Total244100.00%16100.00%

#ifdef CONFIG_COMPAT struct compat_arpt_replace { char name[XT_TABLE_MAXNAMELEN]; u32 valid_hooks; u32 num_entries; u32 size; u32 hook_entry[NF_ARP_NUMHOOKS]; u32 underflow[NF_ARP_NUMHOOKS]; u32 num_counters; compat_uptr_t counters; struct compat_arpt_entry entries[0]; };
static inline void compat_release_entry(struct compat_arpt_entry *e) { struct xt_entry_target *t; t = compat_arpt_get_target(e); module_put(t->u.kernel.target->me); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy3594.59%133.33%
jan engelhardtjan engelhardt25.41%266.67%
Total37100.00%3100.00%


static int check_compat_entry_size_and_hooks(struct compat_arpt_entry *e, struct xt_table_info *newinfo, unsigned int *size, const unsigned char *base, const unsigned char *limit) { struct xt_entry_target *t; struct xt_target *target; unsigned int entry_offset; int ret, off; if ((unsigned long)e % __alignof__(struct compat_arpt_entry) != 0 || (unsigned char *)e + sizeof(struct compat_arpt_entry) >= limit || (unsigned char *)e + e->next_offset > limit) return -EINVAL; if (e->next_offset < sizeof(struct compat_arpt_entry) + sizeof(struct compat_xt_entry_target)) return -EINVAL; if (!arp_checkentry(&e->arp)) return -EINVAL; ret = xt_compat_check_entry_offsets(e, e->elems, e->target_offset, e->next_offset); if (ret) return ret; off = sizeof(struct arpt_entry) - sizeof(struct compat_arpt_entry); entry_offset = (void *)e - (void *)base; t = compat_arpt_get_target(e); target = xt_request_find_target(NFPROTO_ARP, t->u.user.name, t->u.user.revision); if (IS_ERR(target)) { ret = PTR_ERR(target); goto out; } t->u.kernel.target = target; off += xt_compat_target_offset(target); *size += off; ret = xt_compat_add_offset(NFPROTO_ARP, entry_offset, off); if (ret) goto release_target; return 0; release_target: module_put(t->u.kernel.target->me); out: return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy25684.49%111.11%
florian westphalflorian westphal4113.53%444.44%
jan engelhardtjan engelhardt61.98%444.44%
Total303100.00%9100.00%


static void compat_copy_entry_from_user(struct compat_arpt_entry *e, void **dstptr, unsigned int *size, struct xt_table_info *newinfo, unsigned char *base) { struct xt_entry_target *t; struct xt_target *target; struct arpt_entry *de; unsigned int origsize; int h; origsize = *size; de = (struct arpt_entry *)*dstptr; memcpy(de, e, sizeof(struct arpt_entry)); memcpy(&de->counters, &e->counters, sizeof(e->counters)); *dstptr += sizeof(struct arpt_entry); *size += sizeof(struct arpt_entry) - sizeof(struct compat_arpt_entry); de->target_offset = e->target_offset - (origsize - *size); t = compat_arpt_get_target(e); target = t->u.kernel.target; xt_compat_target_from_user(t, dstptr, size); de->next_offset = e->next_offset - (origsize - *size); for (h = 0; h < NF_ARP_NUMHOOKS; h++) { if ((unsigned char *)de - base < newinfo->hook_entry[h]) newinfo->hook_entry[h] -= origsize - *size; if ((unsigned char *)de - base < newinfo->underflow[h]) newinfo->underflow[h] -= origsize - *size; } }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy25499.22%133.33%
florian westphalflorian westphal10.39%133.33%
jan engelhardtjan engelhardt10.39%133.33%
Total256100.00%3100.00%


static int translate_compat_table(struct xt_table_info **pinfo, void **pentry0, const struct compat_arpt_replace *compatr) { unsigned int i, j; struct xt_table_info *newinfo, *info; void *pos, *entry0, *entry1; struct compat_arpt_entry *iter0; struct arpt_replace repl; unsigned int size; int ret = 0; info = *pinfo; entry0 = *pentry0; size = compatr->size; info->number = compatr->num_entries; j = 0; xt_compat_lock(NFPROTO_ARP); xt_compat_init_offsets(NFPROTO_ARP, compatr->num_entries); /* Walk through entries, checking offsets. */ xt_entry_foreach(iter0, entry0, compatr->size) { ret = check_compat_entry_size_and_hooks(iter0, info, &size, entry0, entry0 + compatr->size); if (ret != 0) goto out_unlock; ++j; } ret = -EINVAL; if (j != compatr->num_entries) goto out_unlock; ret = -ENOMEM; newinfo = xt_alloc_table_info(size); if (!newinfo) goto out_unlock; newinfo->number = compatr->num_entries; for (i = 0; i < NF_ARP_NUMHOOKS; i++) { newinfo->hook_entry[i] = info->hook_entry[i]; newinfo->underflow[i] = info->underflow[i]; } entry1 = newinfo->entries; pos = entry1; size = compatr->size; xt_entry_foreach(iter0, entry0, compatr->size) compat_copy_entry_from_user(iter0, &pos, &size, newinfo, entry1); /* all module references in entry0 are now gone */ xt_compat_flush_offsets(NFPROTO_ARP); xt_compat_unlock(NFPROTO_ARP); memcpy(&repl, compatr, sizeof(*compatr)); for (i = 0; i < NF_ARP_NUMHOOKS; i++) { repl.hook_entry[i] = newinfo->hook_entry[i]; repl.underflow[i] = newinfo->underflow[i]; } repl.num_counters = 0; repl.counters = NULL; repl.size = newinfo->size; ret = translate_table(newinfo, entry1, &repl); if (ret) goto free_newinfo; *pinfo = newinfo; *pentry0 = entry1; xt_free_table_info(info); return 0; free_newinfo: xt_free_table_info(newinfo); return ret; out_unlock: xt_compat_flush_offsets(NFPROTO_ARP); xt_compat_unlock(NFPROTO_ARP); xt_entry_foreach(iter0, entry0, compatr->size) { if (j-- == 0) break; compat_release_entry(iter0); } return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy26458.80%111.11%
florian westphalflorian westphal12126.95%444.44%
jan engelhardtjan engelhardt5812.92%333.33%
eric dumazeteric dumazet61.34%111.11%
Total449100.00%9100.00%


static int compat_do_replace(struct net *net, void __user *user, unsigned int len) { int ret; struct compat_arpt_replace tmp; struct xt_table_info *newinfo; void *loc_cpu_entry; struct arpt_entry *iter; if (copy_from_user(&tmp, user, sizeof(tmp)) != 0) return -EFAULT; /* overflow check */ if (tmp.num_counters >= INT_MAX / sizeof(struct xt_counters)) return -ENOMEM; if (tmp.num_counters == 0) return -EINVAL; tmp.name[sizeof(tmp.name)-1] = 0; newinfo = xt_alloc_table_info(tmp.size); if (!newinfo) return -ENOMEM; loc_cpu_entry = newinfo->entries; if (copy_from_user(loc_cpu_entry, user + sizeof(tmp), tmp.size) != 0) { ret = -EFAULT; goto free_newinfo; } ret = translate_compat_table(&newinfo, &loc_cpu_entry, &tmp); if (ret != 0) goto free_newinfo; ret = __do_replace(net, tmp.name, tmp.valid_hooks, newinfo, tmp.num_counters, compat_ptr(tmp.counters)); if (ret) goto free_newinfo_untrans; return 0; free_newinfo_untrans: xt_entry_foreach(iter, loc_cpu_entry, newinfo->size) cleanup_entry(iter); free_newinfo: xt_free_table_info(newinfo); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy20080.32%114.29%
vasiliy kulikovvasiliy kulikov166.43%114.29%
jan engelhardtjan engelhardt135.22%228.57%
dave jonesdave jones124.82%114.29%
alexey dobriyanalexey dobriyan72.81%114.29%
florian westphalflorian westphal10.40%114.29%
Total249100.00%7100.00%


static int compat_do_arpt_set_ctl(struct sock *sk, int cmd, void __user *user, unsigned int len) { int ret; if (!ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) return -EPERM; switch (cmd) { case ARPT_SO_SET_REPLACE: ret = compat_do_replace(sock_net(sk), user, len); break; case ARPT_SO_SET_ADD_COUNTERS: ret = do_add_counters(sock_net(sk), user, len, 1); break; default: ret = -EINVAL; } return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy8081.63%125.00%
eric w. biedermaneric w. biederman88.16%125.00%
hideaki yoshifujihideaki yoshifuji66.12%125.00%
alexey dobriyanalexey dobriyan44.08%125.00%
Total98100.00%4100.00%


static int compat_copy_entry_to_user(struct arpt_entry *e, void __user **dstptr, compat_uint_t *size, struct xt_counters *counters, unsigned int i) { struct xt_entry_target *t; struct compat_arpt_entry __user *ce; u_int16_t target_offset, next_offset; compat_uint_t origsize; int ret; origsize = *size; ce = (struct compat_arpt_entry __user *)*dstptr; if (copy_to_user(ce, e, sizeof(struct arpt_entry)) != 0 || copy_to_user(&ce->counters, &counters[i], sizeof(counters[i])) != 0) return -EFAULT; *dstptr += sizeof(struct compat_arpt_entry); *size -= sizeof(struct arpt_entry) - sizeof(struct compat_arpt_entry); target_offset = e->target_offset - (origsize - *size); t = arpt_get_target(e); ret = xt_compat_target_to_user(t, dstptr, size); if (ret) return ret; next_offset = e->next_offset - (origsize - *size); if (put_user(target_offset, &ce->target_offset) != 0 || put_user(next_offset, &ce->next_offset) != 0) return -EFAULT; return 0; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy20190.95%133.33%
jan engelhardtjan engelhardt209.05%266.67%
Total221100.00%3100.00%


static int compat_copy_entries_to_user(unsigned int total_size, struct xt_table *table, void __user *userptr) { struct xt_counters *counters; const struct xt_table_info *private = table->private; void __user *pos; unsigned int size; int ret = 0; unsigned int i = 0; struct arpt_entry *iter; counters = alloc_counters(table); if (IS_ERR(counters)) return PTR_ERR(counters); pos = userptr; size = total_size; xt_entry_foreach(iter, private->entries, total_size) { ret = compat_copy_entry_to_user(iter, &pos, &size, counters, i++); if (ret != 0) break; } vfree(counters); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy9471.76%114.29%
jan engelhardtjan engelhardt2519.08%457.14%
david s. millerdavid s. miller118.40%114.29%
florian westphalflorian westphal10.76%114.29%
Total131100.00%7100.00%

struct compat_arpt_get_entries { char name[XT_TABLE_MAXNAMELEN]; compat_uint_t size; struct compat_arpt_entry entrytable[0]; };
static int compat_get_entries(struct net *net, struct compat_arpt_get_entries __user *uptr, int *len) { int ret; struct compat_arpt_get_entries get; struct xt_table *t; if (*len < sizeof(get)) return -EINVAL; if (copy_from_user(&get, uptr, sizeof(get)) != 0) return -EFAULT; if (*len != sizeof(struct compat_arpt_get_entries) + get.size) return -EINVAL; get.name[sizeof(get.name) - 1] = '\0'; xt_compat_lock(NFPROTO_ARP); t = xt_find_table_lock(net, NFPROTO_ARP, get.name); if (!IS_ERR_OR_NULL(t)) { const struct xt_table_info *private = t->private; struct xt_table_info info; ret = compat_table_info(private, &info); if (!ret && get.size == info.size) { ret = compat_copy_entries_to_user(private->size, t, uptr->entrytable); } else if (!ret) ret = -EAGAIN; xt_compat_flush_offsets(NFPROTO_ARP); module_put(t->me); xt_table_unlock(t); } else ret = t ? PTR_ERR(t) : -ENOENT; xt_compat_unlock(NFPROTO_ARP); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy11950.85%323.08%
david s. millerdavid s. miller6929.49%17.69%
pablo neira ayusopablo neira ayuso166.84%17.69%
harald welteharald welte156.41%17.69%
alexey dobriyanalexey dobriyan72.99%215.38%
jan engelhardtjan engelhardt62.56%323.08%
hideaki yoshifujihideaki yoshifuji10.43%17.69%
al viroal viro10.43%17.69%
Total234100.00%13100.00%

static int do_arpt_get_ctl(struct sock *, int, void __user *, int *);
static int compat_do_arpt_get_ctl(struct sock *sk, int cmd, void __user *user, int *len) { int ret; if (!ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) return -EPERM; switch (cmd) { case ARPT_SO_GET_INFO: ret = get_info(sock_net(sk), user, len, 1); break; case ARPT_SO_GET_ENTRIES: ret = compat_get_entries(sock_net(sk), user, len); break; default: ret = do_arpt_get_ctl(sk, cmd, user, len); } return ret; }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy6763.21%112.50%
david s. millerdavid s. miller1514.15%112.50%
eric w. biedermaneric w. biederman87.55%112.50%
hideaki yoshifujihideaki yoshifuji65.66%112.50%
harald welteharald welte54.72%225.00%
alexey dobriyanalexey dobriyan43.77%112.50%
eric dumazeteric dumazet10.94%112.50%
Total106100.00%8100.00%

#endif
static int do_arpt_set_ctl(struct sock *sk, int cmd, void __user *user, unsigned int len) { int ret; if (!ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) return -EPERM; switch (cmd) { case ARPT_SO_SET_REPLACE: ret = do_replace(sock_net(sk), user, len); break; case ARPT_SO_SET_ADD_COUNTERS: ret = do_add_counters(sock_net(sk), user, len, 0); break; default: ret = -EINVAL; } return ret; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller7778.57%116.67%
eric w. biedermaneric w. biederman88.16%116.67%
hideaki yoshifujihideaki yoshifuji66.12%116.67%
alexey dobriyanalexey dobriyan44.08%116.67%
patrick mchardypatrick mchardy22.04%116.67%
al viroal viro11.02%116.67%
Total98100.00%6100.00%


static int do_arpt_get_ctl(struct sock *sk, int cmd, void __user *user, int *len) { int ret; if (!ns_capable(sock_net(sk)->user_ns, CAP_NET_ADMIN)) return -EPERM; switch (cmd) { case ARPT_SO_GET_INFO: ret = get_info(sock_net(sk), user, len, 0); break; case ARPT_SO_GET_ENTRIES: ret = get_entries(sock_net(sk), user, len); break; case ARPT_SO_GET_REVISION_TARGET: { struct xt_get_revision rev; if (*len != sizeof(rev)) { ret = -EINVAL; break; } if (copy_from_user(&rev, user, sizeof(rev)) != 0) { ret = -EFAULT; break; } rev.name[sizeof(rev.name)-1] = 0; try_then_request_module(xt_find_revision(NFPROTO_ARP, rev.name, rev.revision, 1, &ret), "arpt_%s", rev.name); break; } default: ret = -EINVAL; } return ret; }

Contributors

PersonTokensPropCommitsCommitProp
harald welteharald welte8041.24%216.67%
david s. millerdavid s. miller7438.14%18.33%
vasiliy kulikovvasiliy kulikov168.25%18.33%
eric w. biedermaneric w. biederman84.12%18.33%
hideaki yoshifujihideaki yoshifuji63.09%18.33%
alexey dobriyanalexey dobriyan42.06%18.33%
patrick mchardypatrick mchardy42.06%325.00%
jan engelhardtjan engelhardt10.52%18.33%
al viroal viro10.52%18.33%
Total194100.00%12100.00%


static void __arpt_unregister_table(struct xt_table *table) { struct xt_table_info *private; void *loc_cpu_entry; struct module *table_owner = table->me; struct arpt_entry *iter; private = xt_unregister_table(table); /* Decrease module usage counts and free resources */ loc_cpu_entry = private->entries; xt_entry_foreach(iter, loc_cpu_entry, private->size) cleanup_entry(iter); if (private->number > private->initial_entries) module_put(table_owner); xt_free_table_info(private); }

Contributors

PersonTokensPropCommitsCommitProp
florian westphalflorian westphal81100.00%1100.00%
Total81100.00%1100.00%


int arpt_register_table(struct net *net, const struct xt_table *table, const struct arpt_replace *repl, const struct nf_hook_ops *ops, struct xt_table **res) { int ret; struct xt_table_info *newinfo; struct xt_table_info bootstrap = {0}; void *loc_cpu_entry; struct xt_table *new_table; newinfo = xt_alloc_table_info(repl->size); if (!newinfo) return -ENOMEM; loc_cpu_entry = newinfo->entries; memcpy(loc_cpu_entry, repl->entries, repl->size); ret = translate_table(newinfo, loc_cpu_entry, repl); if (ret != 0) goto out_free; new_table = xt_register_table(net, table, &bootstrap, newinfo); if (IS_ERR(new_table)) { ret = PTR_ERR(new_table); goto out_free; } /* set res now, will see skbs right after nf_register_net_hooks */ WRITE_ONCE(*res, new_table); ret = nf_register_net_hooks(net, ops, hweight32(table->valid_hooks)); if (ret != 0) { __arpt_unregister_table(new_table); *res = NULL; } return ret; out_free: xt_free_table_info(newinfo); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller7335.61%17.69%
florian westphalflorian westphal5928.78%215.38%
alexey dobriyanalexey dobriyan3617.56%430.77%
harald welteharald welte199.27%215.38%
eric dumazeteric dumazet125.85%17.69%
patrick mchardypatrick mchardy41.95%17.69%
jan engelhardtjan engelhardt20.98%215.38%
Total205100.00%13100.00%


void arpt_unregister_table(struct net *net, struct xt_table *table, const struct nf_hook_ops *ops) { nf_unregister_net_hooks(net, ops, hweight32(table->valid_hooks)); __arpt_unregister_table(table); }

Contributors

PersonTokensPropCommitsCommitProp
florian westphalflorian westphal2050.00%228.57%
david s. millerdavid s. miller1435.00%114.29%
alexey dobriyanalexey dobriyan37.50%114.29%
jan engelhardtjan engelhardt25.00%228.57%
eric dumazeteric dumazet12.50%114.29%
Total40100.00%7100.00%

/* The built-in targets: standard (NULL) and error. */ static struct xt_target arpt_builtin_tg[] __read_mostly = { { .name = XT_STANDARD_TARGET, .targetsize = sizeof(int), .family = NFPROTO_ARP, #ifdef CONFIG_COMPAT .compatsize = sizeof(compat_int_t), .compat_from_user = compat_standard_from_user, .compat_to_user = compat_standard_to_user, #endif }, { .name = XT_ERROR_TARGET, .target = arpt_error, .targetsize = XT_FUNCTION_MAXNAMELEN, .family = NFPROTO_ARP, }, }; static struct nf_sockopt_ops arpt_sockopts = { .pf = PF_INET, .set_optmin = ARPT_BASE_CTL, .set_optmax = ARPT_SO_SET_MAX+1, .set = do_arpt_set_ctl, #ifdef CONFIG_COMPAT .compat_set = compat_do_arpt_set_ctl, #endif .get_optmin = ARPT_BASE_CTL, .get_optmax = ARPT_SO_GET_MAX+1, .get = do_arpt_get_ctl, #ifdef CONFIG_COMPAT .compat_get = compat_do_arpt_get_ctl, #endif .owner = THIS_MODULE, };
static int __net_init arp_tables_net_init(struct net *net) { return xt_proto_init(net, NFPROTO_ARP); }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan1995.00%150.00%
jan engelhardtjan engelhardt15.00%150.00%
Total20100.00%2100.00%


static void __net_exit arp_tables_net_exit(struct net *net) { xt_proto_fini(net, NFPROTO_ARP); }

Contributors

PersonTokensPropCommitsCommitProp
alexey dobriyanalexey dobriyan1894.74%150.00%
jan engelhardtjan engelhardt15.26%150.00%
Total19100.00%2100.00%

static struct pernet_operations arp_tables_net_ops = { .init = arp_tables_net_init, .exit = arp_tables_net_exit, };
static int __init arp_tables_init(void) { int ret; ret = register_pernet_subsys(&arp_tables_net_ops); if (ret < 0) goto err1; /* No one else will be downing sem now, so we won't sleep */ ret = xt_register_targets(arpt_builtin_tg, ARRAY_SIZE(arpt_builtin_tg)); if (ret < 0) goto err2; /* Register setsockopt */ ret = nf_register_sockopt(&arpt_sockopts); if (ret < 0) goto err4; pr_info("arp_tables: (C) 2002 David S. Miller\n"); return 0; err4: xt_unregister_targets(arpt_builtin_tg, ARRAY_SIZE(arpt_builtin_tg)); err2: unregister_pernet_subsys(&arp_tables_net_ops); err1: return ret; }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller4140.20%114.29%
patrick mchardypatrick mchardy3938.24%114.29%
jan engelhardtjan engelhardt1312.75%114.29%
alexey dobriyanalexey dobriyan65.88%114.29%
lucas de marchilucas de marchi10.98%114.29%
bastian stenderbastian stender10.98%114.29%
andrew mortonandrew morton10.98%114.29%
Total102100.00%7100.00%


static void __exit arp_tables_fini(void) { nf_unregister_sockopt(&arpt_sockopts); xt_unregister_targets(arpt_builtin_tg, ARRAY_SIZE(arpt_builtin_tg)); unregister_pernet_subsys(&arp_tables_net_ops); }

Contributors

PersonTokensPropCommitsCommitProp
david s. millerdavid s. miller1754.84%120.00%
jan engelhardtjan engelhardt619.35%120.00%
patrick mchardypatrick mchardy412.90%120.00%
alexey dobriyanalexey dobriyan39.68%120.00%
andrew mortonandrew morton13.23%120.00%
Total31100.00%5100.00%

EXPORT_SYMBOL(arpt_register_table); EXPORT_SYMBOL(arpt_unregister_table); EXPORT_SYMBOL(arpt_do_table); module_init(arp_tables_init); module_exit(arp_tables_fini);

Overall Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy309636.55%1712.88%
david s. millerdavid s. miller261530.87%53.79%
jan engelhardtjan engelhardt8309.80%3123.48%
florian westphalflorian westphal7398.72%2015.15%
eric dumazeteric dumazet3073.62%107.58%
harald welteharald welte2593.06%43.03%
alexey dobriyanalexey dobriyan1742.05%75.30%
vasiliy kulikovvasiliy kulikov610.72%21.52%
pablo neira ayusopablo neira ayuso590.70%43.03%
eric w. biedermaneric w. biederman480.57%32.27%
dmitry mishindmitry mishin360.42%10.76%
art haasart haas320.38%10.76%
hideaki yoshifujihideaki yoshifuji290.34%21.52%
stephen hemmingerstephen hemminger260.31%21.52%
dave jonesdave jones240.28%10.76%
al viroal viro220.26%32.27%
antti p miettinenantti p miettinen200.24%10.76%
rusty russellrusty russell170.20%32.27%
christoph hellwigchristoph hellwig170.20%10.76%
kirill korotaevkirill korotaev100.12%10.76%
herbert xuherbert xu70.08%10.76%
thomas grafthomas graf70.08%10.76%
changli gaochangli gao60.07%10.76%
arnaldo carvalho de meloarnaldo carvalho de melo60.07%10.76%
neil hormanneil horman50.06%10.76%
will deaconwill deacon40.05%10.76%
andrew mortonandrew morton40.05%10.76%
randy dunlaprandy dunlap30.04%10.76%
bart de schuymerbart de schuymer30.04%10.76%
lucas de marchilucas de marchi20.02%10.76%
joe perchesjoe perches10.01%10.76%
pavel emelianovpavel emelianov10.01%10.76%
bastian stenderbastian stender10.01%10.76%
Total8471100.00%132100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
{% endraw %}