1/* SPDX-License-Identifier: GPL-2.0 */ 2#include <linux/types.h> 3#include <net/net_namespace.h> 4#include <linux/netfilter/nf_conntrack_common.h> 5#include <linux/netfilter/nf_conntrack_tuple_common.h> 6#include <net/netfilter/nf_conntrack.h> 7#include <net/netfilter/nf_conntrack_extend.h> 8 9#include <uapi/linux/netfilter/xt_connlabel.h> 10 11#define NF_CT_LABELS_MAX_SIZE ((XT_CONNLABEL_MAXBIT + 1) / BITS_PER_BYTE) 12 13struct nf_conn_labels { 14 unsigned long bits[NF_CT_LABELS_MAX_SIZE / sizeof(long)]; 15}; 16 17static inline struct nf_conn_labels *nf_ct_labels_find(const struct nf_conn *ct) 18{ 19#ifdef CONFIG_NF_CONNTRACK_LABELS 20 return nf_ct_ext_find(ct, NF_CT_EXT_LABELS); 21#else 22 return NULL; 23#endif 24} 25 26static inline struct nf_conn_labels *nf_ct_labels_ext_add(struct nf_conn *ct) 27{ 28#ifdef CONFIG_NF_CONNTRACK_LABELS 29 struct net *net = nf_ct_net(ct); 30 31 if (net->ct.labels_used == 0) 32 return NULL; 33 34 return nf_ct_ext_add(ct, NF_CT_EXT_LABELS, GFP_ATOMIC); 35#else 36 return NULL; 37#endif 38} 39 40int nf_connlabels_replace(struct nf_conn *ct, 41 const u32 *data, const u32 *mask, unsigned int words); 42 43#ifdef CONFIG_NF_CONNTRACK_LABELS 44int nf_conntrack_labels_init(void); 45void nf_conntrack_labels_fini(void); 46int nf_connlabels_get(struct net *net, unsigned int bit); 47void nf_connlabels_put(struct net *net); 48#else 49static inline int nf_conntrack_labels_init(void) { return 0; } 50static inline void nf_conntrack_labels_fini(void) {} 51static inline int nf_connlabels_get(struct net *net, unsigned int bit) { return 0; } 52static inline void nf_connlabels_put(struct net *net) {} 53#endif 54