16 #include <arpa/inet.h>
18 #include <netinet/in.h>
20 #include <libmnl/libmnl.h>
21 #include <linux/netfilter.h>
22 #include <linux/netfilter/nf_tables.h>
23 #include <libnftnl/expr.h>
24 #include <libnftnl/rule.h>
28 static int nftnl_data_reg_verdict_json_parse(
union nftnl_data_reg *reg, json_t *data,
29 struct nftnl_parse_err *err)
32 const char *verdict_str;
35 verdict_str = nftnl_jansson_parse_str(data,
"verdict", err);
36 if (verdict_str == NULL)
39 if (nftnl_str2verdict(verdict_str, &verdict) != 0) {
40 err->node_name =
"verdict";
41 err->error = NFTNL_PARSE_EBADTYPE;
46 reg->verdict = (uint32_t)verdict;
48 if (nftnl_jansson_node_exist(data,
"chain")) {
49 chain = nftnl_jansson_parse_str(data,
"chain", err);
53 reg->chain = strdup(chain);
59 static int nftnl_data_reg_value_json_parse(
union nftnl_data_reg *reg, json_t *data,
60 struct nftnl_parse_err *err)
65 if (nftnl_jansson_parse_val(data,
"len", NFTNL_TYPE_U8, ®->len, err) < 0)
68 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
69 sprintf(node_name,
"data%d", i);
71 if (nftnl_jansson_str2num(data, node_name, BASE_HEX,
72 ®->val[i], NFTNL_TYPE_U32, err) != 0)
79 int nftnl_data_reg_json_parse(
union nftnl_data_reg *reg, json_t *data,
80 struct nftnl_parse_err *err)
85 type = nftnl_jansson_parse_str(data,
"type", err);
90 if (strcmp(type,
"value") == 0)
91 return nftnl_data_reg_value_json_parse(reg, data, err);
92 else if (strcmp(type,
"verdict") == 0)
93 return nftnl_data_reg_verdict_json_parse(reg, data, err);
100 nftnl_data_reg_value_snprintf_json(
char *buf,
size_t size,
101 const union nftnl_data_reg *reg,
104 int remain = size, offset = 0, ret, i, j;
108 ret = snprintf(buf, remain,
"\"reg\":{\"type\":\"value\",");
109 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
111 ret = snprintf(buf + offset, remain,
"\"len\":%u,", reg->len);
112 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
114 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
115 ret = snprintf(buf + offset, remain,
"\"data%d\":\"0x", i);
116 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
118 utemp = htonl(reg->val[i]);
119 tmp = (uint8_t *)&utemp;
121 for (j = 0; j<
sizeof(uint32_t); j++) {
122 ret = snprintf(buf + offset, remain,
"%.02x", tmp[j]);
123 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
126 ret = snprintf(buf + offset, remain,
"\",");
127 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
130 ret = snprintf(buf + offset, remain,
"}");
131 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
137 nftnl_data_reg_value_snprintf_default(
char *buf,
size_t size,
138 const union nftnl_data_reg *reg,
141 int remain = size, offset = 0, ret, i;
143 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
144 ret = snprintf(buf + offset, remain,
"0x%.8x ", reg->val[i]);
145 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
152 nftnl_data_reg_verdict_snprintf_def(
char *buf,
size_t size,
153 const union nftnl_data_reg *reg,
156 int remain = size, offset = 0, ret = 0;
158 ret = snprintf(buf, size,
"%s ", nftnl_verdict2str(reg->verdict));
159 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
161 if (reg->chain != NULL) {
162 ret = snprintf(buf + offset, remain,
"-> %s ", reg->chain);
163 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
170 nftnl_data_reg_verdict_snprintf_json(
char *buf,
size_t size,
171 const union nftnl_data_reg *reg,
174 int remain = size, offset = 0, ret = 0;
176 ret = snprintf(buf, size,
"\"reg\":{\"type\":\"verdict\","
177 "\"verdict\":\"%s\"", nftnl_verdict2str(reg->verdict));
178 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
180 if (reg->chain != NULL) {
181 ret = snprintf(buf + offset, remain,
",\"chain\":\"%s\"",
183 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
186 ret = snprintf(buf + offset, remain,
"}");
187 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
192 int nftnl_data_reg_snprintf(
char *buf,
size_t size,
193 const union nftnl_data_reg *reg,
194 uint32_t output_format, uint32_t flags,
199 switch(output_format) {
200 case NFTNL_OUTPUT_DEFAULT:
201 return nftnl_data_reg_value_snprintf_default(buf, size,
203 case NFTNL_OUTPUT_JSON:
204 return nftnl_data_reg_value_snprintf_json(buf, size,
206 case NFTNL_OUTPUT_XML:
212 switch(output_format) {
213 case NFTNL_OUTPUT_DEFAULT:
214 return nftnl_data_reg_verdict_snprintf_def(buf, size,
216 case NFTNL_OUTPUT_JSON:
217 return nftnl_data_reg_verdict_snprintf_json(buf, size,
219 case NFTNL_OUTPUT_XML:
230 bool nftnl_data_reg_cmp(
const union nftnl_data_reg *r1,
231 const union nftnl_data_reg *r2,
int reg_type)
235 return r1->len == r2->len &&
236 !memcmp(r1->val, r2->val, r1->len);
238 return r1->verdict == r2->verdict;
240 return r1->verdict == r2->verdict &&
241 !strcmp(r1->chain, r2->chain);
247 static int nftnl_data_parse_cb(
const struct nlattr *attr,
void *data)
249 const struct nlattr **tb = data;
250 int type = mnl_attr_get_type(attr);
252 if (mnl_attr_type_valid(attr, NFTA_DATA_MAX) < 0)
256 case NFTA_DATA_VALUE:
257 if (mnl_attr_validate(attr, MNL_TYPE_BINARY) < 0)
260 case NFTA_DATA_VERDICT:
261 if (mnl_attr_validate(attr, MNL_TYPE_NESTED) < 0)
269 static int nftnl_verdict_parse_cb(
const struct nlattr *attr,
void *data)
271 const struct nlattr **tb = data;
272 int type = mnl_attr_get_type(attr);
274 if (mnl_attr_type_valid(attr, NFTA_VERDICT_MAX) < 0)
278 case NFTA_VERDICT_CODE:
279 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
282 case NFTA_VERDICT_CHAIN:
283 if (mnl_attr_validate(attr, MNL_TYPE_STRING) < 0)
292 nftnl_parse_verdict(
union nftnl_data_reg *data,
const struct nlattr *attr,
int *type)
294 struct nlattr *tb[NFTA_VERDICT_MAX+1];
296 if (mnl_attr_parse_nested(attr, nftnl_verdict_parse_cb, tb) < 0)
299 if (!tb[NFTA_VERDICT_CODE])
302 data->verdict = ntohl(mnl_attr_get_u32(tb[NFTA_VERDICT_CODE]));
304 switch(data->verdict) {
312 *type = DATA_VERDICT;
313 data->len =
sizeof(data->verdict);
317 if (!tb[NFTA_VERDICT_CHAIN])
320 data->chain = strdup(mnl_attr_get_str(tb[NFTA_VERDICT_CHAIN]));
335 __nftnl_parse_data(
union nftnl_data_reg *data,
const struct nlattr *attr)
337 void *orig = mnl_attr_get_payload(attr);
338 uint32_t data_len = mnl_attr_get_payload_len(attr);
343 if (data_len >
sizeof(data->val))
346 memcpy(data->val, orig, data_len);
347 data->len = data_len;
352 int nftnl_parse_data(
union nftnl_data_reg *data,
struct nlattr *attr,
int *type)
354 struct nlattr *tb[NFTA_DATA_MAX+1] = {};
357 if (mnl_attr_parse_nested(attr, nftnl_data_parse_cb, tb) < 0)
360 if (tb[NFTA_DATA_VALUE]) {
364 ret = __nftnl_parse_data(data, tb[NFTA_DATA_VALUE]);
368 if (tb[NFTA_DATA_VERDICT])
369 ret = nftnl_parse_verdict(data, tb[NFTA_DATA_VERDICT], type);
374 void nftnl_free_verdict(
const union nftnl_data_reg *data)
376 switch(data->verdict) {