19 #include <netinet/in.h>
21 #include <libmnl/libmnl.h>
22 #include <linux/netfilter/nfnetlink.h>
23 #include <linux/netfilter/nf_tables.h>
25 #include <libnftnl/expr.h>
27 struct nftnl_expr *nftnl_expr_alloc(
const char *name)
29 struct nftnl_expr *expr;
32 ops = nftnl_expr_ops_lookup(name);
36 expr = calloc(1,
sizeof(
struct nftnl_expr) + ops->alloc_len);
41 expr->flags |= (1 << NFTNL_EXPR_NAME);
46 EXPORT_SYMBOL_ALIAS(nftnl_expr_alloc, nft_rule_expr_alloc);
48 void nftnl_expr_free(
const struct nftnl_expr *expr)
51 expr->ops->free(expr);
55 EXPORT_SYMBOL_ALIAS(nftnl_expr_free, nft_rule_expr_free);
57 bool nftnl_expr_is_set(
const struct nftnl_expr *expr, uint16_t type)
59 return expr->flags & (1 << type);
61 EXPORT_SYMBOL_ALIAS(nftnl_expr_is_set, nft_rule_expr_is_set);
64 nftnl_expr_set(
struct nftnl_expr *expr, uint16_t type,
65 const void *data, uint32_t data_len)
71 if (expr->ops->set(expr, type, data, data_len) < 0)
74 expr->flags |= (1 << type);
76 EXPORT_SYMBOL_ALIAS(nftnl_expr_set, nft_rule_expr_set);
79 nftnl_expr_set_u8(
struct nftnl_expr *expr, uint16_t type, uint8_t data)
81 nftnl_expr_set(expr, type, &data,
sizeof(uint8_t));
83 EXPORT_SYMBOL_ALIAS(nftnl_expr_set_u8, nft_rule_expr_set_u8);
86 nftnl_expr_set_u16(
struct nftnl_expr *expr, uint16_t type, uint16_t data)
88 nftnl_expr_set(expr, type, &data,
sizeof(uint16_t));
90 EXPORT_SYMBOL_ALIAS(nftnl_expr_set_u16, nft_rule_expr_set_u16);
93 nftnl_expr_set_u32(
struct nftnl_expr *expr, uint16_t type, uint32_t data)
95 nftnl_expr_set(expr, type, &data,
sizeof(uint32_t));
97 EXPORT_SYMBOL_ALIAS(nftnl_expr_set_u32, nft_rule_expr_set_u32);
100 nftnl_expr_set_u64(
struct nftnl_expr *expr, uint16_t type, uint64_t data)
102 nftnl_expr_set(expr, type, &data,
sizeof(uint64_t));
104 EXPORT_SYMBOL_ALIAS(nftnl_expr_set_u64, nft_rule_expr_set_u64);
107 nftnl_expr_set_str(
struct nftnl_expr *expr, uint16_t type,
const char *str)
109 nftnl_expr_set(expr, type, str, strlen(str)+1);
111 EXPORT_SYMBOL_ALIAS(nftnl_expr_set_str, nft_rule_expr_set_str);
113 const void *nftnl_expr_get(
const struct nftnl_expr *expr,
114 uint16_t type, uint32_t *data_len)
118 if (!(expr->flags & (1 << type)))
122 case NFTNL_EXPR_NAME:
123 ret = expr->ops->name;
126 ret = expr->ops->get(expr, type, data_len);
132 EXPORT_SYMBOL_ALIAS(nftnl_expr_get, nft_rule_expr_get);
134 uint8_t nftnl_expr_get_u8(
const struct nftnl_expr *expr, uint16_t type)
139 data = nftnl_expr_get(expr, type, &data_len);
143 if (data_len !=
sizeof(uint8_t))
146 return *((uint8_t *)data);
148 EXPORT_SYMBOL_ALIAS(nftnl_expr_get_u8, nft_rule_expr_get_u8);
150 uint16_t nftnl_expr_get_u16(
const struct nftnl_expr *expr, uint16_t type)
155 data = nftnl_expr_get(expr, type, &data_len);
159 if (data_len !=
sizeof(uint16_t))
162 return *((uint16_t *)data);
164 EXPORT_SYMBOL_ALIAS(nftnl_expr_get_u16, nft_rule_expr_get_u16);
166 uint32_t nftnl_expr_get_u32(
const struct nftnl_expr *expr, uint16_t type)
171 data = nftnl_expr_get(expr, type, &data_len);
175 if (data_len !=
sizeof(uint32_t))
178 return *((uint32_t *)data);
180 EXPORT_SYMBOL_ALIAS(nftnl_expr_get_u32, nft_rule_expr_get_u32);
182 uint64_t nftnl_expr_get_u64(
const struct nftnl_expr *expr, uint16_t type)
187 data = nftnl_expr_get(expr, type, &data_len);
191 if (data_len !=
sizeof(uint64_t))
194 return *((uint64_t *)data);
196 EXPORT_SYMBOL_ALIAS(nftnl_expr_get_u64, nft_rule_expr_get_u64);
198 const char *nftnl_expr_get_str(
const struct nftnl_expr *expr, uint16_t type)
202 return (
const char *)nftnl_expr_get(expr, type, &data_len);
204 EXPORT_SYMBOL_ALIAS(nftnl_expr_get_str, nft_rule_expr_get_str);
207 nftnl_expr_build_payload(
struct nlmsghdr *nlh,
struct nftnl_expr *expr)
211 mnl_attr_put_strz(nlh, NFTA_EXPR_NAME, expr->ops->name);
213 nest = mnl_attr_nest_start(nlh, NFTA_EXPR_DATA);
214 expr->ops->build(nlh, expr);
215 mnl_attr_nest_end(nlh, nest);
218 static int nftnl_rule_parse_expr_cb(
const struct nlattr *attr,
void *data)
220 const struct nlattr **tb = data;
221 int type = mnl_attr_get_type(attr);
223 if (mnl_attr_type_valid(attr, NFTA_EXPR_MAX) < 0)
228 if (mnl_attr_validate(attr, MNL_TYPE_STRING) < 0)
232 if (mnl_attr_validate(attr, MNL_TYPE_NESTED) < 0)
241 struct nftnl_expr *nftnl_expr_parse(
struct nlattr *attr)
243 struct nlattr *tb[NFTA_EXPR_MAX+1] = {};
244 struct nftnl_expr *expr;
246 if (mnl_attr_parse_nested(attr, nftnl_rule_parse_expr_cb, tb) < 0)
249 expr = nftnl_expr_alloc(mnl_attr_get_str(tb[NFTA_EXPR_NAME]));
253 if (tb[NFTA_EXPR_DATA] &&
254 expr->ops->parse(expr, tb[NFTA_EXPR_DATA]) < 0)
265 int nftnl_expr_snprintf(
char *buf,
size_t size,
const struct nftnl_expr *expr,
266 uint32_t type, uint32_t flags)
269 unsigned int offset = 0, len = size;
271 ret = expr->ops->snprintf(buf+offset, len, type, flags, expr);
272 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
276 EXPORT_SYMBOL_ALIAS(nftnl_expr_snprintf, nft_rule_expr_snprintf);