16 #include <arpa/inet.h>
17 #include <libmnl/libmnl.h>
18 #include <linux/netfilter/nf_tables.h>
19 #include <libnftnl/rule.h>
20 #include <libnftnl/expr.h>
25 enum nft_registers sreg_key;
26 enum nft_registers sreg_data;
27 enum nft_dynset_ops op;
29 struct nftnl_expr *expr;
35 nftnl_expr_dynset_set(
struct nftnl_expr *e, uint16_t type,
36 const void *data, uint32_t data_len)
41 case NFTNL_EXPR_DYNSET_SREG_KEY:
42 memcpy(&dynset->sreg_key, data,
sizeof(dynset->sreg_key));
44 case NFTNL_EXPR_DYNSET_SREG_DATA:
45 memcpy(&dynset->sreg_data, data,
sizeof(dynset->sreg_data));
47 case NFTNL_EXPR_DYNSET_OP:
48 memcpy(&dynset->op, data,
sizeof(dynset->op));
50 case NFTNL_EXPR_DYNSET_TIMEOUT:
51 memcpy(&dynset->timeout, data,
sizeof(dynset->timeout));
53 case NFTNL_EXPR_DYNSET_SET_NAME:
54 dynset->set_name = strdup((
const char *)data);
55 if (!dynset->set_name)
58 case NFTNL_EXPR_DYNSET_SET_ID:
59 memcpy(&dynset->set_id, data,
sizeof(dynset->set_id));
61 case NFTNL_EXPR_DYNSET_EXPR:
62 dynset->expr = (
void *)data;
71 nftnl_expr_dynset_get(
const struct nftnl_expr *e, uint16_t type,
77 case NFTNL_EXPR_DYNSET_SREG_KEY:
78 *data_len =
sizeof(dynset->sreg_key);
79 return &dynset->sreg_key;
80 case NFTNL_EXPR_DYNSET_SREG_DATA:
81 *data_len =
sizeof(dynset->sreg_data);
82 return &dynset->sreg_data;
83 case NFTNL_EXPR_DYNSET_OP:
84 *data_len =
sizeof(dynset->op);
86 case NFTNL_EXPR_DYNSET_TIMEOUT:
87 *data_len =
sizeof(dynset->timeout);
88 return &dynset->timeout;
89 case NFTNL_EXPR_DYNSET_SET_NAME:
90 *data_len = strlen(dynset->set_name) + 1;
91 return dynset->set_name;
92 case NFTNL_EXPR_DYNSET_SET_ID:
93 *data_len =
sizeof(dynset->set_id);
94 return &dynset->set_id;
95 case NFTNL_EXPR_DYNSET_EXPR:
101 static int nftnl_expr_dynset_cb(
const struct nlattr *attr,
void *data)
103 const struct nlattr **tb = data;
104 int type = mnl_attr_get_type(attr);
106 if (mnl_attr_type_valid(attr, NFTA_SET_MAX) < 0)
110 case NFTA_DYNSET_SREG_KEY:
111 case NFTA_DYNSET_SREG_DATA:
112 case NFTA_DYNSET_SET_ID:
114 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
117 case NFTA_DYNSET_TIMEOUT:
118 if (mnl_attr_validate(attr, MNL_TYPE_U64) < 0)
121 case NFTA_DYNSET_SET_NAME:
122 if (mnl_attr_validate(attr, MNL_TYPE_STRING) < 0)
125 case NFTA_DYNSET_EXPR:
126 if (mnl_attr_validate(attr, MNL_TYPE_NESTED) < 0)
136 nftnl_expr_dynset_build(
struct nlmsghdr *nlh,
const struct nftnl_expr *e)
141 if (e->flags & (1 << NFTNL_EXPR_DYNSET_SREG_KEY))
142 mnl_attr_put_u32(nlh, NFTA_DYNSET_SREG_KEY, htonl(dynset->sreg_key));
143 if (e->flags & (1 << NFTNL_EXPR_DYNSET_SREG_DATA))
144 mnl_attr_put_u32(nlh, NFTA_DYNSET_SREG_DATA, htonl(dynset->sreg_data));
145 if (e->flags & (1 << NFTNL_EXPR_DYNSET_OP))
146 mnl_attr_put_u32(nlh, NFTA_DYNSET_OP, htonl(dynset->op));
147 if (e->flags & (1 << NFTNL_EXPR_DYNSET_TIMEOUT))
148 mnl_attr_put_u64(nlh, NFTA_DYNSET_TIMEOUT, htobe64(dynset->timeout));
149 if (e->flags & (1 << NFTNL_EXPR_DYNSET_SET_NAME))
150 mnl_attr_put_strz(nlh, NFTA_DYNSET_SET_NAME, dynset->set_name);
151 if (e->flags & (1 << NFTNL_EXPR_DYNSET_SET_ID))
152 mnl_attr_put_u32(nlh, NFTA_DYNSET_SET_ID, htonl(dynset->set_id));
153 if (e->flags & (1 << NFTNL_EXPR_DYNSET_EXPR)) {
154 nest = mnl_attr_nest_start(nlh, NFTA_DYNSET_EXPR);
155 nftnl_expr_build_payload(nlh, dynset->expr);
156 mnl_attr_nest_end(nlh, nest);
161 nftnl_expr_dynset_parse(
struct nftnl_expr *e,
struct nlattr *attr)
164 struct nlattr *tb[NFTA_SET_MAX+1] = {};
167 if (mnl_attr_parse_nested(attr, nftnl_expr_dynset_cb, tb) < 0)
170 if (tb[NFTA_DYNSET_SREG_KEY]) {
171 dynset->sreg_key = ntohl(mnl_attr_get_u32(tb[NFTA_DYNSET_SREG_KEY]));
172 e->flags |= (1 << NFTNL_EXPR_DYNSET_SREG_KEY);
174 if (tb[NFTA_DYNSET_SREG_DATA]) {
175 dynset->sreg_data = ntohl(mnl_attr_get_u32(tb[NFTA_DYNSET_SREG_DATA]));
176 e->flags |= (1 << NFTNL_EXPR_DYNSET_SREG_DATA);
178 if (tb[NFTA_DYNSET_OP]) {
179 dynset->op = ntohl(mnl_attr_get_u32(tb[NFTA_DYNSET_OP]));
180 e->flags |= (1 << NFTNL_EXPR_DYNSET_OP);
182 if (tb[NFTA_DYNSET_TIMEOUT]) {
183 dynset->timeout = be64toh(mnl_attr_get_u64(tb[NFTA_DYNSET_TIMEOUT]));
184 e->flags |= (1 << NFTNL_EXPR_DYNSET_TIMEOUT);
186 if (tb[NFTA_DYNSET_SET_NAME]) {
188 strdup(mnl_attr_get_str(tb[NFTA_DYNSET_SET_NAME]));
189 if (!dynset->set_name)
191 e->flags |= (1 << NFTNL_EXPR_DYNSET_SET_NAME);
193 if (tb[NFTA_DYNSET_SET_ID]) {
194 dynset->set_id = ntohl(mnl_attr_get_u32(tb[NFTA_DYNSET_SET_ID]));
195 e->flags |= (1 << NFTNL_EXPR_DYNSET_SET_ID);
197 if (tb[NFTA_DYNSET_EXPR]) {
198 e->flags |= (1 << NFTNL_EXPR_DYNSET_EXPR);
199 dynset->expr = nftnl_expr_parse(tb[NFTA_DYNSET_EXPR]);
200 if (dynset->expr == NULL)
207 static const char *op2str_array[] = {
208 [NFT_DYNSET_OP_ADD] =
"add",
209 [NFT_DYNSET_OP_UPDATE] =
"update",
210 [NFT_DYNSET_OP_DELETE] =
"delete",
213 static const char *op2str(
enum nft_dynset_ops op)
215 if (op > NFT_DYNSET_OP_DELETE)
217 return op2str_array[op];
221 nftnl_expr_dynset_snprintf_default(
char *buf,
size_t size,
222 const struct nftnl_expr *e)
225 struct nftnl_expr *expr;
226 int remain = size, offset = 0, ret;
228 ret = snprintf(buf, remain,
"%s reg_key %u set %s ",
229 op2str(dynset->op), dynset->sreg_key, dynset->set_name);
230 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
232 if (e->flags & (1 << NFTNL_EXPR_DYNSET_SREG_DATA)) {
233 ret = snprintf(buf + offset, remain,
"sreg_data %u ",
235 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
237 if (e->flags & (1 << NFTNL_EXPR_DYNSET_TIMEOUT)) {
238 ret = snprintf(buf + offset, remain,
"timeout %"PRIu64
"ms ",
240 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
242 if (e->flags & (1 << NFTNL_EXPR_DYNSET_EXPR)) {
244 ret = snprintf(buf + offset, remain,
"expr [ %s ",
246 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
248 ret = nftnl_expr_snprintf(buf + offset, remain, expr,
249 NFTNL_OUTPUT_DEFAULT,
251 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
253 ret = snprintf(buf + offset, remain,
"] ");
254 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
261 nftnl_expr_dynset_snprintf(
char *buf,
size_t size, uint32_t type,
262 uint32_t flags,
const struct nftnl_expr *e)
265 case NFTNL_OUTPUT_DEFAULT:
266 return nftnl_expr_dynset_snprintf_default(buf, size, e);
267 case NFTNL_OUTPUT_XML:
268 case NFTNL_OUTPUT_JSON:
275 static void nftnl_expr_dynset_free(
const struct nftnl_expr *e)
279 xfree(dynset->set_name);
281 nftnl_expr_free(dynset->expr);
284 struct expr_ops expr_ops_dynset = {
287 .max_attr = NFTA_DYNSET_MAX,
288 .free = nftnl_expr_dynset_free,
289 .set = nftnl_expr_dynset_set,
290 .get = nftnl_expr_dynset_get,
291 .parse = nftnl_expr_dynset_parse,
292 .build = nftnl_expr_dynset_build,
293 .snprintf = nftnl_expr_dynset_snprintf,