LXR linux/net/bridge/netfilter/ebt_mark

   1// SPDX-License-Identifier: GPL-2.0-only
   2/*
   3 *  ebt_mark_m
   4 *
   5 *      Authors:
   6 *      Bart De Schuymer <bdschuym@pandora.be>
   7 *
   8 *  July, 2002
   9 *
  10 */
  11#include <linux/module.h>
  12#include <linux/netfilter/x_tables.h>
  13#include <linux/netfilter_bridge/ebtables.h>
  14#include <linux/netfilter_bridge/ebt_mark_m.h>
  15
  16static bool
  17ebt_mark_mt(const struct sk_buff *skb, struct xt_action_param *par)
  18{
  19        const struct ebt_mark_m_info *info = par->matchinfo;
  20
  21        if (info->bitmask & EBT_MARK_OR)
  22                return !!(skb->mark & info->mask) ^ info->invert;
  23        return ((skb->mark & info->mask) == info->mark) ^ info->invert;
  24}
  25
  26static int ebt_mark_mt_check(const struct xt_mtchk_param *par)
  27{
  28        const struct ebt_mark_m_info *info = par->matchinfo;
  29
  30        if (info->bitmask & ~EBT_MARK_MASK)
  31                return -EINVAL;
  32        if ((info->bitmask & EBT_MARK_OR) && (info->bitmask & EBT_MARK_AND))
  33                return -EINVAL;
  34        if (!info->bitmask)
  35                return -EINVAL;
  36        return 0;
  37}
  38
  39
  40#ifdef CONFIG_NETFILTER_XTABLES_COMPAT
  41struct compat_ebt_mark_m_info {
  42        compat_ulong_t mark, mask;
  43        uint8_t invert, bitmask;
  44};
  45
  46static void mark_mt_compat_from_user(void *dst, const void *src)
  47{
  48        const struct compat_ebt_mark_m_info *user = src;
  49        struct ebt_mark_m_info *kern = dst;
  50
  51        kern->mark = user->mark;
  52        kern->mask = user->mask;
  53        kern->invert = user->invert;
  54        kern->bitmask = user->bitmask;
  55}
  56
  57static int mark_mt_compat_to_user(void __user *dst, const void *src)
  58{
  59        struct compat_ebt_mark_m_info __user *user = dst;
  60        const struct ebt_mark_m_info *kern = src;
  61
  62        if (put_user(kern->mark, &user->mark) ||
  63            put_user(kern->mask, &user->mask) ||
  64            put_user(kern->invert, &user->invert) ||
  65            put_user(kern->bitmask, &user->bitmask))
  66                return -EFAULT;
  67        return 0;
  68}
  69#endif
  70
  71static struct xt_match ebt_mark_mt_reg __read_mostly = {
  72        .name           = "mark_m",
  73        .revision       = 0,
  74        .family         = NFPROTO_BRIDGE,
  75        .match          = ebt_mark_mt,
  76        .checkentry     = ebt_mark_mt_check,
  77        .matchsize      = sizeof(struct ebt_mark_m_info),
  78#ifdef CONFIG_NETFILTER_XTABLES_COMPAT
  79        .compatsize     = sizeof(struct compat_ebt_mark_m_info),
  80        .compat_from_user = mark_mt_compat_from_user,
  81        .compat_to_user = mark_mt_compat_to_user,
  82#endif
  83        .me             = THIS_MODULE,
  84};
  85
  86static int __init ebt_mark_m_init(void)
  87{
  88        return xt_register_match(&ebt_mark_mt_reg);
  89}
  90
  91static void __exit ebt_mark_m_fini(void)
  92{
  93        xt_unregister_match(&ebt_mark_mt_reg);
  94}
  95
  96module_init(ebt_mark_m_init);
  97module_exit(ebt_mark_m_fini);
  98MODULE_DESCRIPTION("Ebtables: Packet mark match");
  99MODULE_LICENSE("GPL");
 100