History

netfilter: bitwise: add NFTA_BITWISE_DATA attribute.

Add a new bitwise netlink attribute that will be used by shift operations to store the size of the shift. It is not used by boolean operations.

Jeremy Sowden committed 6 years ago

Commit 779f7251 parent ed991d42 files · +8 −0Browse files

Unified · Split

2 files
  1. include/uapi/linux/netfilter/nf_tables.h +3 −0
  2. net/netfilter/nft_bitwise.c +5 −0
include/uapi/linux/netfilter/nf_tables.h+3−0
@@ -503,6 +503,8 @@ enum nft_bitwise_ops { · 502 unmodified lines
503503 * @NFTA_BITWISE_MASK: mask value (NLA_NESTED: nft_data_attributes)
504504 * @NFTA_BITWISE_XOR: xor value (NLA_NESTED: nft_data_attributes)
505505 * @NFTA_BITWISE_OP: type of operation (NLA_U32: nft_bitwise_ops)
506+ * @NFTA_BITWISE_DATA: argument for non-boolean operations
507+ * (NLA_NESTED: nft_data_attributes)
506508 *
507509 * The bitwise expression performs the following operation:
508510 *
@@ -524,6 +526,7 @@ enum nft_bitwise_attributes { · 15 unmodified lines
524526 NFTA_BITWISE_MASK,
525527 NFTA_BITWISE_XOR,
526528 NFTA_BITWISE_OP,
529+ NFTA_BITWISE_DATA,
527530 __NFTA_BITWISE_MAX
528531 };
529532 #define NFTA_BITWISE_MAX (__NFTA_BITWISE_MAX - 1)
net/netfilter/nft_bitwise.c+5−0
@@ -22,6 +22,7 @@ struct nft_bitwise { · 21 unmodified lines
2222 u8 len;
2323 struct nft_data mask;
2424 struct nft_data xor;
25+ struct nft_data data;
2526 };
2627
2728 static void nft_bitwise_eval_bool(u32 *dst, const u32 *src,
@@ -54,6 +55,7 @@ static const struct nla_policy nft_bitwise_policy[NFTA_BITWISE_MAX + 1] = { · 26 unmodified lines
5455 [NFTA_BITWISE_MASK] = { .type = NLA_NESTED },
5556 [NFTA_BITWISE_XOR] = { .type = NLA_NESTED },
5657 [NFTA_BITWISE_OP] = { .type = NLA_U32 },
58+ [NFTA_BITWISE_DATA] = { .type = NLA_NESTED },
5759 };
5860
5961 static int nft_bitwise_init_bool(struct nft_bitwise *priv,
@@ -62,6 +64,9 @@ static int nft_bitwise_init_bool(struct nft_bitwise *priv, · 2 unmodified lines
6264 struct nft_data_desc d1, d2;
6365 int err;
6466
67+ if (tb[NFTA_BITWISE_DATA])
68+ return -EINVAL;
69+
6570 if (!tb[NFTA_BITWISE_MASK] ||
6671 !tb[NFTA_BITWISE_XOR])
6772 return -EINVAL;