19 #include <netinet/in.h>
21 #include <libmnl/libmnl.h>
22 #include <linux/netfilter/nfnetlink.h>
23 #include <linux/netfilter/nf_tables.h>
25 #include <libnftnl/expr.h>
27 #include "linux_list.h"
29 struct nft_rule_expr *nft_rule_expr_alloc(
const char *name)
31 struct nft_rule_expr *expr;
34 ops = nft_expr_ops_lookup(name);
38 expr = calloc(1,
sizeof(
struct nft_rule_expr) + ops->alloc_len);
43 expr->flags |= (1 << NFT_RULE_EXPR_ATTR_NAME);
48 EXPORT_SYMBOL(nft_rule_expr_alloc);
50 void nft_rule_expr_free(
struct nft_rule_expr *expr)
53 expr->ops->free(expr);
57 EXPORT_SYMBOL(nft_rule_expr_free);
59 bool nft_rule_expr_is_set(
const struct nft_rule_expr *expr, uint16_t type)
61 return expr->flags & (1 << type);
63 EXPORT_SYMBOL(nft_rule_expr_is_set);
66 nft_rule_expr_set(
struct nft_rule_expr *expr, uint16_t type,
67 const void *data, uint32_t data_len)
70 case NFT_RULE_EXPR_ATTR_NAME:
73 if (expr->ops->set(expr, type, data, data_len) < 0)
76 expr->flags |= (1 << type);
78 EXPORT_SYMBOL(nft_rule_expr_set);
81 nft_rule_expr_set_u8(
struct nft_rule_expr *expr, uint16_t type, uint8_t data)
83 nft_rule_expr_set(expr, type, &data,
sizeof(uint8_t));
85 EXPORT_SYMBOL(nft_rule_expr_set_u8);
88 nft_rule_expr_set_u16(
struct nft_rule_expr *expr, uint16_t type, uint16_t data)
90 nft_rule_expr_set(expr, type, &data,
sizeof(uint16_t));
92 EXPORT_SYMBOL(nft_rule_expr_set_u16);
95 nft_rule_expr_set_u32(
struct nft_rule_expr *expr, uint16_t type, uint32_t data)
97 nft_rule_expr_set(expr, type, &data,
sizeof(uint32_t));
99 EXPORT_SYMBOL(nft_rule_expr_set_u32);
102 nft_rule_expr_set_u64(
struct nft_rule_expr *expr, uint16_t type, uint64_t data)
104 nft_rule_expr_set(expr, type, &data,
sizeof(uint64_t));
106 EXPORT_SYMBOL(nft_rule_expr_set_u64);
109 nft_rule_expr_set_str(
struct nft_rule_expr *expr, uint16_t type,
const char *str)
111 nft_rule_expr_set(expr, type, str, strlen(str)+1);
113 EXPORT_SYMBOL(nft_rule_expr_set_str);
115 const void *nft_rule_expr_get(
const struct nft_rule_expr *expr,
116 uint16_t type, uint32_t *data_len)
120 if (!(expr->flags & (1 << type)))
124 case NFT_RULE_EXPR_ATTR_NAME:
125 ret = expr->ops->name;
128 ret = expr->ops->get(expr, type, data_len);
134 EXPORT_SYMBOL(nft_rule_expr_get);
136 uint8_t nft_rule_expr_get_u8(
const struct nft_rule_expr *expr, uint16_t type)
141 data = nft_rule_expr_get(expr, type, &data_len);
145 if (data_len !=
sizeof(uint8_t))
148 return *((uint8_t *)data);
150 EXPORT_SYMBOL(nft_rule_expr_get_u8);
152 uint16_t nft_rule_expr_get_u16(
const struct nft_rule_expr *expr, uint16_t type)
157 data = nft_rule_expr_get(expr, type, &data_len);
161 if (data_len !=
sizeof(uint16_t))
164 return *((uint16_t *)data);
166 EXPORT_SYMBOL(nft_rule_expr_get_u16);
168 uint32_t nft_rule_expr_get_u32(
const struct nft_rule_expr *expr, uint16_t type)
173 data = nft_rule_expr_get(expr, type, &data_len);
177 if (data_len !=
sizeof(uint32_t))
180 return *((uint32_t *)data);
182 EXPORT_SYMBOL(nft_rule_expr_get_u32);
184 uint64_t nft_rule_expr_get_u64(
const struct nft_rule_expr *expr, uint16_t type)
189 data = nft_rule_expr_get(expr, type, &data_len);
193 if (data_len !=
sizeof(uint64_t))
196 return *((uint64_t *)data);
198 EXPORT_SYMBOL(nft_rule_expr_get_u64);
200 const char *nft_rule_expr_get_str(
const struct nft_rule_expr *expr, uint16_t type)
204 return (
const char *)nft_rule_expr_get(expr, type, &data_len);
206 EXPORT_SYMBOL(nft_rule_expr_get_str);
209 nft_rule_expr_build_payload(
struct nlmsghdr *nlh,
struct nft_rule_expr *expr)
211 struct nlattr *nest1, *nest2;
213 nest1 = mnl_attr_nest_start(nlh, NFTA_LIST_ELEM);
214 mnl_attr_put_strz(nlh, NFTA_EXPR_NAME, expr->ops->name);
216 nest2 = mnl_attr_nest_start(nlh, NFTA_EXPR_DATA);
217 expr->ops->build(nlh, expr);
218 mnl_attr_nest_end(nlh, nest2);
220 mnl_attr_nest_end(nlh, nest1);
222 EXPORT_SYMBOL(nft_rule_expr_build_payload);
224 int nft_rule_expr_snprintf(
char *buf,
size_t size,
struct nft_rule_expr *expr,
225 uint32_t type, uint32_t flags)
228 unsigned int offset = 0, len = size;
230 ret = expr->ops->snprintf(buf+offset, len, type, flags, expr);
231 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
235 EXPORT_SYMBOL(nft_rule_expr_snprintf);