cregit-Linux how code gets into the kernel

Release 4.8 net/ipv4/netfilter/nf_tables_ipv4.c

/*
 * Copyright (c) 2008 Patrick McHardy <kaber@trash.net>
 * Copyright (c) 2012-2013 Pablo Neira Ayuso <pablo@netfilter.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * Development of this code funded by Astaro AG (http://www.astaro.com/)
 */

#include <linux/init.h>
#include <linux/module.h>
#include <linux/ip.h>
#include <linux/netfilter_ipv4.h>
#include <net/netfilter/nf_tables.h>
#include <net/net_namespace.h>
#include <net/ip.h>
#include <net/netfilter/nf_tables_ipv4.h>


static unsigned int nft_do_chain_ipv4(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { struct nft_pktinfo pkt; nft_set_pktinfo_ipv4(&pkt, skb, state); return nft_do_chain(&pkt, priv); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy3577.78%350.00%
pablo neira ayusopablo neira ayuso48.89%116.67%
eric w. biedermaneric w. biederman36.67%116.67%
david s. millerdavid s. miller36.67%116.67%
Total45100.00%6100.00%


static unsigned int nft_ipv4_output(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { if (unlikely(skb->len < sizeof(struct iphdr) || ip_hdr(skb)->ihl < sizeof(struct iphdr) / 4)) { if (net_ratelimit()) pr_info("nf_tables_ipv4: ignoring short SOCK_RAW " "packet\n"); return NF_ACCEPT; } return nft_do_chain_ipv4(priv, skb, state); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy7292.31%250.00%
eric w. biedermaneric w. biederman33.85%125.00%
david s. millerdavid s. miller33.85%125.00%
Total78100.00%4100.00%

struct nft_af_info nft_af_ipv4 __read_mostly = { .family = NFPROTO_IPV4, .nhooks = NF_INET_NUMHOOKS, .owner = THIS_MODULE, .nops = 1, .hooks = { [NF_INET_LOCAL_IN] = nft_do_chain_ipv4, [NF_INET_LOCAL_OUT] = nft_ipv4_output, [NF_INET_FORWARD] = nft_do_chain_ipv4, [NF_INET_PRE_ROUTING] = nft_do_chain_ipv4, [NF_INET_POST_ROUTING] = nft_do_chain_ipv4, }, }; EXPORT_SYMBOL_GPL(nft_af_ipv4);
static int nf_tables_ipv4_init_net(struct net *net) { net->nft.ipv4 = kmalloc(sizeof(struct nft_af_info), GFP_KERNEL); if (net->nft.ipv4 == NULL) return -ENOMEM; memcpy(net->nft.ipv4, &nft_af_ipv4, sizeof(nft_af_ipv4)); if (nft_register_afinfo(net, net->nft.ipv4) < 0) goto err; return 0; err: kfree(net->nft.ipv4); return -ENOMEM; }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso95100.00%1100.00%
Total95100.00%1100.00%


static void nf_tables_ipv4_exit_net(struct net *net) { nft_unregister_afinfo(net, net->nft.ipv4); kfree(net->nft.ipv4); }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso31100.00%2100.00%
Total31100.00%2100.00%

static struct pernet_operations nf_tables_ipv4_net_ops = { .init = nf_tables_ipv4_init_net, .exit = nf_tables_ipv4_exit_net, }; static const struct nf_chain_type filter_ipv4 = { .name = "filter", .type = NFT_CHAIN_T_DEFAULT, .family = NFPROTO_IPV4, .owner = THIS_MODULE, .hook_mask = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_FORWARD) | (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_POST_ROUTING), };
static int __init nf_tables_ipv4_init(void) { int ret; nft_register_chain_type(&filter_ipv4); ret = register_pernet_subsys(&nf_tables_ipv4_net_ops); if (ret < 0) nft_unregister_chain_type(&filter_ipv4); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso2868.29%375.00%
patrick mchardypatrick mchardy1331.71%125.00%
Total41100.00%4100.00%


static void __exit nf_tables_ipv4_exit(void) { unregister_pernet_subsys(&nf_tables_ipv4_net_ops); nft_unregister_chain_type(&filter_ipv4); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy1361.90%133.33%
pablo neira ayusopablo neira ayuso838.10%266.67%
Total21100.00%3100.00%

module_init(nf_tables_ipv4_init); module_exit(nf_tables_ipv4_exit); MODULE_LICENSE("GPL"); MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>"); MODULE_ALIAS_NFT_FAMILY(AF_INET);

Overall Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy25450.20%853.33%
pablo neira ayusopablo neira ayuso24047.43%533.33%
eric w. biedermaneric w. biederman61.19%16.67%
david s. millerdavid s. miller61.19%16.67%
Total506100.00%15100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.