LXR linux/include/net/netfilter/nf_conntrack

   1#include <linux/types.h>
   2#include <net/net_namespace.h>
   3#include <linux/netfilter/nf_conntrack_common.h>
   4#include <linux/netfilter/nf_conntrack_tuple_common.h>
   5#include <net/netfilter/nf_conntrack.h>
   6#include <net/netfilter/nf_conntrack_extend.h>
   7
   8#include <uapi/linux/netfilter/xt_connlabel.h>
   9
  10#define NF_CT_LABELS_MAX_SIZE ((XT_CONNLABEL_MAXBIT + 1) / BITS_PER_BYTE)
  11
  12struct nf_conn_labels {
  13        u8 words;
  14        unsigned long bits[];
  15};
  16
  17static inline struct nf_conn_labels *nf_ct_labels_find(const struct nf_conn *ct)
  18{
  19#ifdef CONFIG_NF_CONNTRACK_LABELS
  20        return nf_ct_ext_find(ct, NF_CT_EXT_LABELS);
  21#else
  22        return NULL;
  23#endif
  24}
  25
  26static inline struct nf_conn_labels *nf_ct_labels_ext_add(struct nf_conn *ct)
  27{
  28#ifdef CONFIG_NF_CONNTRACK_LABELS
  29        struct nf_conn_labels *cl_ext;
  30        struct net *net = nf_ct_net(ct);
  31        u8 words;
  32
  33        words = ACCESS_ONCE(net->ct.label_words);
  34        if (words == 0)
  35                return NULL;
  36
  37        cl_ext = nf_ct_ext_add_length(ct, NF_CT_EXT_LABELS,
  38                                      words * sizeof(long), GFP_ATOMIC);
  39        if (cl_ext != NULL)
  40                cl_ext->words = words;
  41
  42        return cl_ext;
  43#else
  44        return NULL;
  45#endif
  46}
  47
  48bool nf_connlabel_match(const struct nf_conn *ct, u16 bit);
  49int nf_connlabel_set(struct nf_conn *ct, u16 bit);
  50
  51int nf_connlabels_replace(struct nf_conn *ct,
  52                          const u32 *data, const u32 *mask, unsigned int words);
  53
  54#ifdef CONFIG_NF_CONNTRACK_LABELS
  55int nf_conntrack_labels_init(void);
  56void nf_conntrack_labels_fini(void);
  57int nf_connlabels_get(struct net *net, unsigned int n_bits);
  58void nf_connlabels_put(struct net *net);
  59#else
  60static inline int nf_conntrack_labels_init(void) { return 0; }
  61static inline void nf_conntrack_labels_fini(void) {}
  62static inline int nf_connlabels_get(struct net *net, unsigned int n_bits) { return 0; }
  63static inline void nf_connlabels_put(struct net *net) {}
  64#endif
  65