Release 4.8 net/sched/act_ipt.c

Directory: net/sched
/*
 * net/sched/act_ipt.c          iptables target interface
 *
 *TODO: Add other tables. For now we only support the ipv4 table targets
 *
 *              This program is free software; you can redistribute it and/or
 *              modify it under the terms of the GNU General Public License
 *              as published by the Free Software Foundation; either version
 *              2 of the License, or (at your option) any later version.
 *
 * Copyright:   Jamal Hadi Salim (2002-13)
 */

#include <linux/types.h>
#include <linux/kernel.h>
#include <linux/string.h>
#include <linux/errno.h>
#include <linux/skbuff.h>
#include <linux/rtnetlink.h>
#include <linux/module.h>
#include <linux/init.h>
#include <linux/slab.h>
#include <net/netlink.h>
#include <net/pkt_sched.h>
#include <linux/tc_act/tc_ipt.h>
#include <net/tc_act/tc_ipt.h>

#include <linux/netfilter_ipv4/ip_tables.h>



#define IPT_TAB_MASK     15


static int ipt_net_id;

static struct tc_action_ops act_ipt_ops;


static int xt_net_id;

static struct tc_action_ops act_xt_ops;



static int ipt_init_target(struct xt_entry_target *t, char *table,
			   unsigned int hook)
{
	struct xt_tgchk_param par;
	struct xt_target *target;
	int ret = 0;

	target = xt_request_find_target(AF_INET, t->u.user.name,
					t->u.user.revision);
	if (IS_ERR(target))
		return PTR_ERR(target);

	t->u.kernel.target = target;
	par.table     = table;
	par.entryinfo = NULL;
	par.target    = target;
	par.targinfo  = t->data;
	par.hook_mask = hook;
	par.family    = NFPROTO_IPV4;

	ret = xt_check_target(&par, t->u.target_size - sizeof(*t), 0, false);
	if (ret < 0) {
		module_put(t->u.kernel.target->me);
		return ret;
	}
	return 0;
}

Contributors
Person Tokens Prop Commits CommitProp
jan engelhardt jan engelhardt 63 37.50% 6 50.00%
jamal hadi salim jamal hadi salim 54 32.14% 1 8.33%
patrick mchardy patrick mchardy 29 17.26% 3 25.00%
rusty russell rusty russell 20 11.90% 1 8.33%
harald welte harald welte 2 1.19% 1 8.33%
Total 168 100.00% 12 100.00%



static void ipt_destroy_target(struct xt_entry_target *t)
{
	struct xt_tgdtor_param par = {
		.target   = t->u.kernel.target,
		.targinfo = t->data,
		.family   = NFPROTO_IPV4,
        };
	if (par.target->destroy != NULL)
		par.target->destroy(&par);
	module_put(par.target->me);
}

Contributors
Person Tokens Prop Commits CommitProp
patrick mchardy patrick mchardy 36 52.17% 3 50.00%
jan engelhardt jan engelhardt 28 40.58% 2 33.33%
phil sutter phil sutter 5 7.25% 1 16.67%
Total 69 100.00% 6 100.00%



static void tcf_ipt_release(struct tc_action *a, int bind)
{
	struct tcf_ipt *ipt = to_ipt(a);
	ipt_destroy_target(ipt->tcfi_t);
	kfree(ipt->tcfi_tname);
	kfree(ipt->tcfi_t);
}

Contributors
Person Tokens Prop Commits CommitProp
patrick mchardy patrick mchardy 26 57.78% 2 40.00%
americo wang americo wang 13 28.89% 2 40.00%
david s. miller david s. miller 6 13.33% 1 20.00%
Total 45 100.00% 5 100.00%


static const struct nla_policy ipt_policy[TCA_IPT_MAX + 1] = {
	[TCA_IPT_TABLE]	= { .type = NLA_STRING, .len = IFNAMSIZ },
	[TCA_IPT_HOOK]	= { .type = NLA_U32 },
	[TCA_IPT_INDEX]	= { .type = NLA_U32 },
	[TCA_IPT_TARG]	= { .len = sizeof(struct xt_entry_target) },
};



static int __tcf_ipt_init(struct tc_action_net *tn, struct nlattr *nla,
			  struct nlattr *est, struct tc_action **a,
			  const struct tc_action_ops *ops, int ovr, int bind)
{
	struct nlattr *tb[TCA_IPT_MAX + 1];
	struct tcf_ipt *ipt;
	struct xt_entry_target *td, *t;
	char *tname;
	bool exists = false;
	int ret = 0, err;
	u32 hook = 0;
	u32 index = 0;

	if (nla == NULL)
		return -EINVAL;

	err = nla_parse_nested(tb, TCA_IPT_MAX, nla, ipt_policy);
	if (err < 0)
		return err;

	if (tb[TCA_IPT_INDEX] != NULL)
		index = nla_get_u32(tb[TCA_IPT_INDEX]);

	exists = tcf_hash_check(tn, index, a, bind);
	if (exists && bind)
		return 0;

	if (tb[TCA_IPT_HOOK] == NULL || tb[TCA_IPT_TARG] == NULL) {
		if (exists)
			tcf_hash_release(*a, bind);
		return -EINVAL;
	}

	td = (struct xt_entry_target *)nla_data(tb[TCA_IPT_TARG]);
	if (nla_len(tb[TCA_IPT_TARG]) < td->u.target_size) {
		if (exists)
			tcf_hash_release(*a, bind);
		return -EINVAL;
	}

	if (!exists) {
		ret = tcf_hash_create(tn, index, est, a, ops, bind,
				      false);
		if (ret)
			return ret;
		ret = ACT_P_CREATED;
	} else {
		if (bind)/* dont override defaults */
			return 0;
		tcf_hash_release(*a, bind);

		if (!ovr)
			return -EEXIST;
	}
	hook = nla_get_u32(tb[TCA_IPT_HOOK]);

	err = -ENOMEM;
	tname = kmalloc(IFNAMSIZ, GFP_KERNEL);
	if (unlikely(!tname))
		goto err1;
	if (tb[TCA_IPT_TABLE] == NULL ||
	    nla_strlcpy(tname, tb[TCA_IPT_TABLE], IFNAMSIZ) >= IFNAMSIZ)
		strcpy(tname, "mangle");

	t = kmemdup(td, td->u.target_size, GFP_KERNEL);
	if (unlikely(!t))
		goto err2;

	err = ipt_init_target(t, tname, hook);
	if (err < 0)
		goto err3;

	ipt = to_ipt(*a);

	spin_lock_bh(&ipt->tcf_lock);
	if (ret != ACT_P_CREATED) {
		ipt_destroy_target(ipt->tcfi_t);
		kfree(ipt->tcfi_tname);
		kfree(ipt->tcfi_t);
	}
	ipt->tcfi_tname = tname;
	ipt->tcfi_t     = t;
	ipt->tcfi_hook  = hook;
	spin_unlock_bh(&ipt->tcf_lock);
	if (ret == ACT_P_CREATED)
		tcf_hash_insert(tn, *a);
	return ret;

err3:
	kfree(t);
err2:
	kfree(tname);
err1:
	if (ret == ACT_P_CREATED)
		tcf_hash_cleanup(*a, est);
	return err;
}

Contributors
Person Tokens Prop Commits CommitProp
jamal hadi salim jamal hadi salim 257 47.50% 3 12.50%
patrick mchardy patrick mchardy 180 33.27% 7 29.17%
americo wang americo wang 56 10.35% 7 29.17%
david s. miller david s. miller 27 4.99% 1 4.17%
hiroaki shimoda hiroaki shimoda 7 1.29% 1 4.17%
eric dumazet eric dumazet 6 1.11% 2 8.33%
arnaldo carvalho de melo arnaldo carvalho de melo 3 0.55% 1 4.17%
benjamin lahaise benjamin lahaise 3 0.55% 1 4.17%
jan engelhardt jan engelhardt 2 0.37% 1 4.17%
Total 541 100.00% 24 100.00%



static int tcf_ipt_init(struct net *net, struct nlattr *nla,
			struct nlattr *est, struct tc_action **a, int ovr,
			int bind)
{
	struct tc_action_net *tn = net_generic(net, ipt_net_id);

	return __tcf_ipt_init(tn, nla, est, a, &act_ipt_ops, ovr, bind);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 64 100.00% 2 100.00%
Total 64 100.00% 2 100.00%



static int tcf_xt_init(struct net *net, struct nlattr *nla,
		       struct nlattr *est, struct tc_action **a, int ovr,
		       int bind)
{
	struct tc_action_net *tn = net_generic(net, xt_net_id);

	return __tcf_ipt_init(tn, nla, est, a, &act_xt_ops, ovr, bind);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 64 100.00% 2 100.00%
Total 64 100.00% 2 100.00%



static int tcf_ipt(struct sk_buff *skb, const struct tc_action *a,
		   struct tcf_result *res)
{
	int ret = 0, result = 0;
	struct tcf_ipt *ipt = to_ipt(a);
	struct xt_action_param par;

	if (skb_unclone(skb, GFP_ATOMIC))
		return TC_ACT_UNSPEC;

	spin_lock(&ipt->tcf_lock);

	tcf_lastuse_update(&ipt->tcf_tm);
	bstats_update(&ipt->tcf_bstats, skb);

	/* yes, we have to worry about both in and out dev
         * worry later - danger - this API seems to have changed
         * from earlier kernels
         */
	par.net	     = dev_net(skb->dev);
	par.in       = skb->dev;
	par.out      = NULL;
	par.hooknum  = ipt->tcfi_hook;
	par.target   = ipt->tcfi_t->u.kernel.target;
	par.targinfo = ipt->tcfi_t->data;
	par.family   = NFPROTO_IPV4;
	ret = par.target->target(skb, &par);

	switch (ret) {
	case NF_ACCEPT:
		result = TC_ACT_OK;
		break;
	case NF_DROP:
		result = TC_ACT_SHOT;
		ipt->tcf_qstats.drops++;
		break;
	case XT_CONTINUE:
		result = TC_ACT_PIPE;
		break;
	default:
		net_notice_ratelimited("tc filter: Bogus netfilter code %d assume ACCEPT\n",
				       ret);
		result = TC_ACT_OK;
		break;
	}
	spin_unlock(&ipt->tcf_lock);
	return result;

}

Contributors
Person Tokens Prop Commits CommitProp
jamal hadi salim jamal hadi salim 106 47.75% 2 9.09%
jan engelhardt jan engelhardt 41 18.47% 3 13.64%
patrick mchardy patrick mchardy 27 12.16% 6 27.27%
david s. miller david s. miller 17 7.66% 1 4.55%
eric w. biederman eric w. biederman 11 4.95% 1 4.55%
phil sutter phil sutter 6 2.70% 1 4.55%
eric dumazet eric dumazet 6 2.70% 3 13.64%
americo wang americo wang 4 1.80% 2 9.09%
joe perches joe perches 2 0.90% 1 4.55%
jussi kivilinna jussi kivilinna 1 0.45% 1 4.55%
pravin b shelar pravin b shelar 1 0.45% 1 4.55%
Total 222 100.00% 22 100.00%



static int tcf_ipt_dump(struct sk_buff *skb, struct tc_action *a, int bind,
			int ref)
{
	unsigned char *b = skb_tail_pointer(skb);
	struct tcf_ipt *ipt = to_ipt(a);
	struct xt_entry_target *t;
	struct tcf_t tm;
	struct tc_cnt c;

	/* for simple targets kernel size == user size
         * user name = target name
         * for foolproof you need to not assume this
         */

	t = kmemdup(ipt->tcfi_t, ipt->tcfi_t->u.user.target_size, GFP_ATOMIC);
	if (unlikely(!t))
		goto nla_put_failure;

	c.bindcnt = ipt->tcf_bindcnt - bind;
	c.refcnt = ipt->tcf_refcnt - ref;
	strcpy(t->u.user.name, ipt->tcfi_t->u.kernel.target->name);

	if (nla_put(skb, TCA_IPT_TARG, ipt->tcfi_t->u.user.target_size, t) ||
	    nla_put_u32(skb, TCA_IPT_INDEX, ipt->tcf_index) ||
	    nla_put_u32(skb, TCA_IPT_HOOK, ipt->tcfi_hook) ||
	    nla_put(skb, TCA_IPT_CNT, sizeof(struct tc_cnt), &c) ||
	    nla_put_string(skb, TCA_IPT_TABLE, ipt->tcfi_tname))
		goto nla_put_failure;

	tcf_tm_dump(&tm, &ipt->tcf_tm);
	if (nla_put_64bit(skb, TCA_IPT_TM, sizeof(tm), &tm, TCA_IPT_PAD))
		goto nla_put_failure;

	kfree(t);
	return skb->len;

nla_put_failure:
	nlmsg_trim(skb, b);
	kfree(t);
	return -1;
}

Contributors
Person Tokens Prop Commits CommitProp
jamal hadi salim jamal hadi salim 175 66.04% 3 17.65%
david s. miller david s. miller 56 21.13% 2 11.76%
herbert xu herbert xu 10 3.77% 1 5.88%
arnaldo carvalho de melo arnaldo carvalho de melo 9 3.40% 3 17.65%
patrick mchardy patrick mchardy 7 2.64% 4 23.53%
americo wang americo wang 3 1.13% 1 5.88%
nicolas dichtel nicolas dichtel 3 1.13% 1 5.88%
eric dumazet eric dumazet 1 0.38% 1 5.88%
jan engelhardt jan engelhardt 1 0.38% 1 5.88%
Total 265 100.00% 17 100.00%



static int tcf_ipt_walker(struct net *net, struct sk_buff *skb,
			  struct netlink_callback *cb, int type,
			  const struct tc_action_ops *ops)
{
	struct tc_action_net *tn = net_generic(net, ipt_net_id);

	return tcf_generic_walker(tn, skb, cb, type, ops);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 56 100.00% 2 100.00%
Total 56 100.00% 2 100.00%



static int tcf_ipt_search(struct net *net, struct tc_action **a, u32 index)
{
	struct tc_action_net *tn = net_generic(net, ipt_net_id);

	return tcf_hash_search(tn, a, index);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 42 100.00% 2 100.00%
Total 42 100.00% 2 100.00%


static struct tc_action_ops act_ipt_ops = {
	.kind		=	"ipt",
	.type		=	TCA_ACT_IPT,
	.owner		=	THIS_MODULE,
	.act		=	tcf_ipt,
	.dump		=	tcf_ipt_dump,
	.cleanup	=	tcf_ipt_release,
	.init		=	tcf_ipt_init,
	.walk		=	tcf_ipt_walker,
	.lookup		=	tcf_ipt_search,
	.size		=	sizeof(struct tcf_ipt),
};



static __net_init int ipt_init_net(struct net *net)
{
	struct tc_action_net *tn = net_generic(net, ipt_net_id);

	return tc_action_net_init(tn, &act_ipt_ops, IPT_TAB_MASK);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 35 100.00% 1 100.00%
Total 35 100.00% 1 100.00%



static void __net_exit ipt_exit_net(struct net *net)
{
	struct tc_action_net *tn = net_generic(net, ipt_net_id);

	tc_action_net_exit(tn);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 29 100.00% 1 100.00%
Total 29 100.00% 1 100.00%


static struct pernet_operations ipt_net_ops = {
	.init = ipt_init_net,
	.exit = ipt_exit_net,
	.id   = &ipt_net_id,
	.size = sizeof(struct tc_action_net),
};



static int tcf_xt_walker(struct net *net, struct sk_buff *skb,
			 struct netlink_callback *cb, int type,
			 const struct tc_action_ops *ops)
{
	struct tc_action_net *tn = net_generic(net, xt_net_id);

	return tcf_generic_walker(tn, skb, cb, type, ops);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 56 100.00% 2 100.00%
Total 56 100.00% 2 100.00%



static int tcf_xt_search(struct net *net, struct tc_action **a, u32 index)
{
	struct tc_action_net *tn = net_generic(net, xt_net_id);

	return tcf_hash_search(tn, a, index);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 42 100.00% 2 100.00%
Total 42 100.00% 2 100.00%


static struct tc_action_ops act_xt_ops = {
	.kind		=	"xt",
	.type		=	TCA_ACT_XT,
	.owner		=	THIS_MODULE,
	.act		=	tcf_ipt,
	.dump		=	tcf_ipt_dump,
	.cleanup	=	tcf_ipt_release,
	.init		=	tcf_xt_init,
	.walk		=	tcf_xt_walker,
	.lookup		=	tcf_xt_search,
	.size		=	sizeof(struct tcf_ipt),
};



static __net_init int xt_init_net(struct net *net)
{
	struct tc_action_net *tn = net_generic(net, xt_net_id);

	return tc_action_net_init(tn, &act_xt_ops, IPT_TAB_MASK);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 35 100.00% 1 100.00%
Total 35 100.00% 1 100.00%



static void __net_exit xt_exit_net(struct net *net)
{
	struct tc_action_net *tn = net_generic(net, xt_net_id);

	tc_action_net_exit(tn);
}

Contributors
Person Tokens Prop Commits CommitProp
americo wang americo wang 29 100.00% 1 100.00%
Total 29 100.00% 1 100.00%


static struct pernet_operations xt_net_ops = {
	.init = xt_init_net,
	.exit = xt_exit_net,
	.id   = &xt_net_id,
	.size = sizeof(struct tc_action_net),
};

MODULE_AUTHOR("Jamal Hadi Salim(2002-13)");
MODULE_DESCRIPTION("Iptables target actions");
MODULE_LICENSE("GPL");
MODULE_ALIAS("act_xt");



static int __init ipt_init_module(void)
{
	int ret1, ret2;

	ret1 = tcf_register_action(&act_xt_ops, &xt_net_ops);
	if (ret1 < 0)
		pr_err("Failed to load xt action\n");

	ret2 = tcf_register_action(&act_ipt_ops, &ipt_net_ops);
	if (ret2 < 0)
		pr_err("Failed to load ipt action\n");

	if (ret1 < 0 && ret2 < 0) {
		return ret1;
	} else
		return 0;
}

Contributors
Person Tokens Prop Commits CommitProp
jamal hadi salim jamal hadi salim 67 87.01% 2 40.00%
americo wang americo wang 10 12.99% 3 60.00%
Total 77 100.00% 5 100.00%



static void __exit ipt_cleanup_module(void)
{
	tcf_unregister_action(&act_ipt_ops, &ipt_net_ops);
	tcf_unregister_action(&act_xt_ops, &xt_net_ops);
}

Contributors
Person Tokens Prop Commits CommitProp
jamal hadi salim jamal hadi salim 19 70.37% 2 66.67%
americo wang americo wang 8 29.63% 1 33.33%
Total 27 100.00% 3 100.00%


module_init(ipt_init_module);

module_exit(ipt_cleanup_module);
Overall Contributors
Person Tokens Prop Commits CommitProp
jamal hadi salim jamal hadi salim 826 37.32% 8 12.12%
americo wang americo wang 670 30.28% 11 16.67%
patrick mchardy patrick mchardy 371 16.76% 15 22.73%
jan engelhardt jan engelhardt 136 6.15% 10 15.15%
david s. miller david s. miller 107 4.84% 2 3.03%
rusty russell rusty russell 20 0.90% 1 1.52%
arnaldo carvalho de melo arnaldo carvalho de melo 15 0.68% 3 4.55%
eric dumazet eric dumazet 13 0.59% 4 6.06%
phil sutter phil sutter 11 0.50% 1 1.52%
eric w. biederman eric w. biederman 11 0.50% 1 1.52%
herbert xu herbert xu 10 0.45% 1 1.52%
hiroaki shimoda hiroaki shimoda 7 0.32% 1 1.52%
nicolas dichtel nicolas dichtel 3 0.14% 1 1.52%
benjamin lahaise benjamin lahaise 3 0.14% 1 1.52%
tejun heo tejun heo 3 0.14% 1 1.52%
joe perches joe perches 2 0.09% 1 1.52%
harald welte harald welte 2 0.09% 1 1.52%
jussi kivilinna jussi kivilinna 1 0.05% 1 1.52%
pravin b shelar pravin b shelar 1 0.05% 1 1.52%
jiri pirko jiri pirko 1 0.05% 1 1.52%
Total 2213 100.00% 66 100.00%
  Directory: net/sched

Information contained on this website is for historical information purposes only and does not indicate or represent copyright ownership.
	Person	Tokens	Prop	Commits	CommitProp
jan engelhardt	jan engelhardt	63	37.50%	6	50.00%
jamal hadi salim	jamal hadi salim	54	32.14%	1	8.33%
patrick mchardy	patrick mchardy	29	17.26%	3	25.00%
rusty russell	rusty russell	20	11.90%	1	8.33%
harald welte	harald welte	2	1.19%	1	8.33%
	Total	168	100.00%	12	100.00%
cregit-Linux how code gets into the kernel

Release 4.8 net/sched/act_ipt.c

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Contributors

Overall Contributors
