11 #include <linux/netfilter/nf_tables.h>
14 #include <libmnl/libmnl.h>
15 #include <libnftnl/expr.h>
16 #include <libnftnl/rule.h>
19 enum nft_registers dreg;
21 enum nft_ng_types type;
26 nftnl_expr_ng_set(
struct nftnl_expr *e, uint16_t type,
27 const void *data, uint32_t data_len)
32 case NFTNL_EXPR_NG_DREG:
33 memcpy(&ng->dreg, data, data_len);
35 case NFTNL_EXPR_NG_MODULUS:
36 memcpy(&ng->modulus, data, data_len);
38 case NFTNL_EXPR_NG_TYPE:
39 memcpy(&ng->type, data, data_len);
41 case NFTNL_EXPR_NG_OFFSET:
42 memcpy(&ng->offset, data, data_len);
51 nftnl_expr_ng_get(
const struct nftnl_expr *e, uint16_t type,
57 case NFTNL_EXPR_NG_DREG:
58 *data_len =
sizeof(ng->dreg);
60 case NFTNL_EXPR_NG_MODULUS:
61 *data_len =
sizeof(ng->modulus);
63 case NFTNL_EXPR_NG_TYPE:
64 *data_len =
sizeof(ng->type);
66 case NFTNL_EXPR_NG_OFFSET:
67 *data_len =
sizeof(ng->offset);
73 static int nftnl_expr_ng_cb(
const struct nlattr *attr,
void *data)
75 const struct nlattr **tb = data;
76 int type = mnl_attr_get_type(attr);
78 if (mnl_attr_type_valid(attr, NFTA_NG_MAX) < 0)
86 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
96 nftnl_expr_ng_build(
struct nlmsghdr *nlh,
const struct nftnl_expr *e)
100 if (e->flags & (1 << NFTNL_EXPR_NG_DREG))
101 mnl_attr_put_u32(nlh, NFTA_NG_DREG, htonl(ng->dreg));
102 if (e->flags & (1 << NFTNL_EXPR_NG_MODULUS))
103 mnl_attr_put_u32(nlh, NFTA_NG_MODULUS, htonl(ng->modulus));
104 if (e->flags & (1 << NFTNL_EXPR_NG_TYPE))
105 mnl_attr_put_u32(nlh, NFTA_NG_TYPE, htonl(ng->type));
106 if (e->flags & (1 << NFTNL_EXPR_NG_OFFSET))
107 mnl_attr_put_u32(nlh, NFTA_NG_OFFSET, htonl(ng->offset));
111 nftnl_expr_ng_parse(
struct nftnl_expr *e,
struct nlattr *attr)
114 struct nlattr *tb[NFTA_NG_MAX+1] = {};
117 if (mnl_attr_parse_nested(attr, nftnl_expr_ng_cb, tb) < 0)
120 if (tb[NFTA_NG_DREG]) {
121 ng->dreg = ntohl(mnl_attr_get_u32(tb[NFTA_NG_DREG]));
122 e->flags |= (1 << NFTNL_EXPR_NG_DREG);
124 if (tb[NFTA_NG_MODULUS]) {
125 ng->modulus = ntohl(mnl_attr_get_u32(tb[NFTA_NG_MODULUS]));
126 e->flags |= (1 << NFTNL_EXPR_NG_MODULUS);
128 if (tb[NFTA_NG_TYPE]) {
129 ng->type = ntohl(mnl_attr_get_u32(tb[NFTA_NG_TYPE]));
130 e->flags |= (1 << NFTNL_EXPR_NG_TYPE);
132 if (tb[NFTA_NG_OFFSET]) {
133 ng->offset = ntohl(mnl_attr_get_u32(tb[NFTA_NG_OFFSET]));
134 e->flags |= (1 << NFTNL_EXPR_NG_OFFSET);
141 nftnl_expr_ng_snprintf(
char *buf,
size_t remain,
142 uint32_t flags,
const struct nftnl_expr *e)
148 case NFT_NG_INCREMENTAL:
149 ret = snprintf(buf, remain,
"reg %u = inc mod %u ",
150 ng->dreg, ng->modulus);
151 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
154 ret = snprintf(buf, remain,
"reg %u = random mod %u ",
155 ng->dreg, ng->modulus);
156 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
163 ret = snprintf(buf + offset, remain,
"offset %u ", ng->offset);
164 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
170 static struct attr_policy numgen_attr_policy[__NFTNL_EXPR_NG_MAX] = {
171 [NFTNL_EXPR_NG_DREG] = { .maxlen =
sizeof(uint32_t) },
172 [NFTNL_EXPR_NG_MODULUS] = { .maxlen =
sizeof(uint32_t) },
173 [NFTNL_EXPR_NG_TYPE] = { .maxlen =
sizeof(uint32_t) },
174 [NFTNL_EXPR_NG_OFFSET] = { .maxlen =
sizeof(uint32_t) },
177 struct expr_ops expr_ops_ng = {
180 .nftnl_max_attr = __NFTNL_EXPR_NG_MAX - 1,
181 .attr_policy = numgen_attr_policy,
182 .set = nftnl_expr_ng_set,
183 .get = nftnl_expr_ng_get,
184 .parse = nftnl_expr_ng_parse,
185 .build = nftnl_expr_ng_build,
186 .output = nftnl_expr_ng_snprintf,