cregit-Linux how code gets into the kernel

Release 4.8 net/ipv6/netfilter/nf_tables_ipv6.c

/*
 * Copyright (c) 2008 Patrick McHardy <kaber@trash.net>
 * Copyright (c) 2012-2013 Pablo Neira Ayuso <pablo@netfilter.org>
 *
 * This program is free software; you can redistribute it and/or modify
 * it under the terms of the GNU General Public License version 2 as
 * published by the Free Software Foundation.
 *
 * Development of this code funded by Astaro AG (http://www.astaro.com/)
 */

#include <linux/init.h>
#include <linux/module.h>
#include <linux/ipv6.h>
#include <linux/netfilter_ipv6.h>
#include <net/netfilter/nf_tables.h>
#include <net/netfilter/nf_tables_ipv6.h>


static unsigned int nft_do_chain_ipv6(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { struct nft_pktinfo pkt; /* malformed packet, drop it */ if (nft_set_pktinfo_ipv6(&pkt, skb, state) < 0) return NF_DROP; return nft_do_chain(&pkt, priv); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy4381.13%350.00%
pablo neira ayusopablo neira ayuso47.55%116.67%
david s. millerdavid s. miller35.66%116.67%
eric w. biedermaneric w. biederman35.66%116.67%
Total53100.00%6100.00%


static unsigned int nft_ipv6_output(void *priv, struct sk_buff *skb, const struct nf_hook_state *state) { if (unlikely(skb->len < sizeof(struct ipv6hdr))) { if (net_ratelimit()) pr_info("nf_tables_ipv6: ignoring short SOCK_RAW " "packet\n"); return NF_ACCEPT; } return nft_do_chain_ipv6(priv, skb, state); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy5790.48%250.00%
david s. millerdavid s. miller34.76%125.00%
eric w. biedermaneric w. biederman34.76%125.00%
Total63100.00%4100.00%

struct nft_af_info nft_af_ipv6 __read_mostly = { .family = NFPROTO_IPV6, .nhooks = NF_INET_NUMHOOKS, .owner = THIS_MODULE, .nops = 1, .hooks = { [NF_INET_LOCAL_IN] = nft_do_chain_ipv6, [NF_INET_LOCAL_OUT] = nft_ipv6_output, [NF_INET_FORWARD] = nft_do_chain_ipv6, [NF_INET_PRE_ROUTING] = nft_do_chain_ipv6, [NF_INET_POST_ROUTING] = nft_do_chain_ipv6, }, }; EXPORT_SYMBOL_GPL(nft_af_ipv6);
static int nf_tables_ipv6_init_net(struct net *net) { net->nft.ipv6 = kmalloc(sizeof(struct nft_af_info), GFP_KERNEL); if (net->nft.ipv6 == NULL) return -ENOMEM; memcpy(net->nft.ipv6, &nft_af_ipv6, sizeof(nft_af_ipv6)); if (nft_register_afinfo(net, net->nft.ipv6) < 0) goto err; return 0; err: kfree(net->nft.ipv6); return -ENOMEM; }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso95100.00%1100.00%
Total95100.00%1100.00%


static void nf_tables_ipv6_exit_net(struct net *net) { nft_unregister_afinfo(net, net->nft.ipv6); kfree(net->nft.ipv6); }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso31100.00%2100.00%
Total31100.00%2100.00%

static struct pernet_operations nf_tables_ipv6_net_ops = { .init = nf_tables_ipv6_init_net, .exit = nf_tables_ipv6_exit_net, }; static const struct nf_chain_type filter_ipv6 = { .name = "filter", .type = NFT_CHAIN_T_DEFAULT, .family = NFPROTO_IPV6, .owner = THIS_MODULE, .hook_mask = (1 << NF_INET_LOCAL_IN) | (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_FORWARD) | (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_POST_ROUTING), };
static int __init nf_tables_ipv6_init(void) { int ret; nft_register_chain_type(&filter_ipv6); ret = register_pernet_subsys(&nf_tables_ipv6_net_ops); if (ret < 0) nft_unregister_chain_type(&filter_ipv6); return ret; }

Contributors

PersonTokensPropCommitsCommitProp
pablo neira ayusopablo neira ayuso2868.29%375.00%
patrick mchardypatrick mchardy1331.71%125.00%
Total41100.00%4100.00%


static void __exit nf_tables_ipv6_exit(void) { unregister_pernet_subsys(&nf_tables_ipv6_net_ops); nft_unregister_chain_type(&filter_ipv6); }

Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy1361.90%133.33%
pablo neira ayusopablo neira ayuso838.10%266.67%
Total21100.00%3100.00%

module_init(nf_tables_ipv6_init); module_exit(nf_tables_ipv6_exit); MODULE_LICENSE("GPL"); MODULE_AUTHOR("Patrick McHardy <kaber@trash.net>"); MODULE_ALIAS_NFT_FAMILY(AF_INET6);

Overall Contributors

PersonTokensPropCommitsCommitProp
patrick mchardypatrick mchardy24449.49%853.33%
pablo neira ayusopablo neira ayuso23748.07%533.33%
david s. millerdavid s. miller61.22%16.67%
eric w. biedermaneric w. biederman61.22%16.67%
Total493100.00%15100.00%
Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.