[NETFILTER]: Convert x_tables matches/targets to centralized error checking
[deliverable/linux.git] / net / netfilter / xt_MARK.c
CommitLineData
1da177e4
LT
1/* This is a module which is used for setting the NFMARK field of an skb. */
2
3/* (C) 1999-2001 Marc Boucher <marc@mbsi.ca>
4 *
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 */
9
10#include <linux/module.h>
11#include <linux/skbuff.h>
12#include <linux/ip.h>
13#include <net/checksum.h>
14
2e4e6a17
HW
15#include <linux/netfilter/x_tables.h>
16#include <linux/netfilter/xt_MARK.h>
1da177e4
LT
17
18MODULE_LICENSE("GPL");
19MODULE_AUTHOR("Marc Boucher <marc@mbsi.ca>");
2e4e6a17
HW
20MODULE_DESCRIPTION("ip[6]tables MARK modification module");
21MODULE_ALIAS("ipt_MARK");
22MODULE_ALIAS("ip6t_MARK");
1da177e4
LT
23
24static unsigned int
25target_v0(struct sk_buff **pskb,
26 const struct net_device *in,
27 const struct net_device *out,
28 unsigned int hooknum,
29 const void *targinfo,
30 void *userinfo)
31{
2e4e6a17 32 const struct xt_mark_target_info *markinfo = targinfo;
1da177e4 33
6869c4d8 34 if((*pskb)->nfmark != markinfo->mark)
1da177e4 35 (*pskb)->nfmark = markinfo->mark;
6869c4d8 36
2e4e6a17 37 return XT_CONTINUE;
1da177e4
LT
38}
39
40static unsigned int
41target_v1(struct sk_buff **pskb,
42 const struct net_device *in,
43 const struct net_device *out,
44 unsigned int hooknum,
45 const void *targinfo,
46 void *userinfo)
47{
2e4e6a17 48 const struct xt_mark_target_info_v1 *markinfo = targinfo;
1da177e4
LT
49 int mark = 0;
50
51 switch (markinfo->mode) {
2e4e6a17 52 case XT_MARK_SET:
1da177e4
LT
53 mark = markinfo->mark;
54 break;
55
2e4e6a17 56 case XT_MARK_AND:
1da177e4
LT
57 mark = (*pskb)->nfmark & markinfo->mark;
58 break;
59
2e4e6a17 60 case XT_MARK_OR:
1da177e4
LT
61 mark = (*pskb)->nfmark | markinfo->mark;
62 break;
63 }
64
6869c4d8 65 if((*pskb)->nfmark != mark)
1da177e4 66 (*pskb)->nfmark = mark;
6869c4d8 67
2e4e6a17 68 return XT_CONTINUE;
1da177e4
LT
69}
70
71
72static int
73checkentry_v0(const char *tablename,
2e4e6a17 74 const void *entry,
1da177e4
LT
75 void *targinfo,
76 unsigned int targinfosize,
77 unsigned int hook_mask)
78{
2e4e6a17 79 struct xt_mark_target_info *markinfo = targinfo;
bf3a46aa 80
bf3a46aa
HW
81 if (markinfo->mark > 0xffffffff) {
82 printk(KERN_WARNING "MARK: Only supports 32bit wide mark\n");
83 return 0;
84 }
1da177e4
LT
85 return 1;
86}
87
88static int
89checkentry_v1(const char *tablename,
2e4e6a17 90 const void *entry,
1da177e4
LT
91 void *targinfo,
92 unsigned int targinfosize,
93 unsigned int hook_mask)
94{
2e4e6a17 95 struct xt_mark_target_info_v1 *markinfo = targinfo;
1da177e4 96
2e4e6a17
HW
97 if (markinfo->mode != XT_MARK_SET
98 && markinfo->mode != XT_MARK_AND
99 && markinfo->mode != XT_MARK_OR) {
1da177e4
LT
100 printk(KERN_WARNING "MARK: unknown mode %u\n",
101 markinfo->mode);
102 return 0;
103 }
bf3a46aa
HW
104 if (markinfo->mark > 0xffffffff) {
105 printk(KERN_WARNING "MARK: Only supports 32bit wide mark\n");
106 return 0;
107 }
1da177e4
LT
108 return 1;
109}
110
2e4e6a17 111static struct xt_target ipt_mark_reg_v0 = {
1da177e4
LT
112 .name = "MARK",
113 .target = target_v0,
5d04bff0
PM
114 .targetsize = sizeof(struct xt_mark_target_info),
115 .table = "mangle",
1da177e4
LT
116 .checkentry = checkentry_v0,
117 .me = THIS_MODULE,
118 .revision = 0,
119};
120
2e4e6a17 121static struct xt_target ipt_mark_reg_v1 = {
1da177e4
LT
122 .name = "MARK",
123 .target = target_v1,
5d04bff0
PM
124 .targetsize = sizeof(struct xt_mark_target_info_v1),
125 .table = "mangle",
1da177e4
LT
126 .checkentry = checkentry_v1,
127 .me = THIS_MODULE,
128 .revision = 1,
129};
130
2e4e6a17
HW
131static struct xt_target ip6t_mark_reg_v0 = {
132 .name = "MARK",
133 .target = target_v0,
5d04bff0
PM
134 .targetsize = sizeof(struct xt_mark_target_info),
135 .table = "mangle",
2e4e6a17
HW
136 .checkentry = checkentry_v0,
137 .me = THIS_MODULE,
138 .revision = 0,
139};
140
1da177e4
LT
141static int __init init(void)
142{
143 int err;
144
2e4e6a17
HW
145 err = xt_register_target(AF_INET, &ipt_mark_reg_v0);
146 if (err)
147 return err;
148
149 err = xt_register_target(AF_INET, &ipt_mark_reg_v1);
150 if (err)
151 xt_unregister_target(AF_INET, &ipt_mark_reg_v0);
152
153 err = xt_register_target(AF_INET6, &ip6t_mark_reg_v0);
154 if (err) {
155 xt_unregister_target(AF_INET, &ipt_mark_reg_v0);
156 xt_unregister_target(AF_INET, &ipt_mark_reg_v1);
1da177e4 157 }
2e4e6a17 158
1da177e4
LT
159 return err;
160}
161
162static void __exit fini(void)
163{
2e4e6a17
HW
164 xt_unregister_target(AF_INET, &ipt_mark_reg_v0);
165 xt_unregister_target(AF_INET, &ipt_mark_reg_v1);
166 xt_unregister_target(AF_INET6, &ip6t_mark_reg_v0);
1da177e4
LT
167}
168
169module_init(init);
170module_exit(fini);
This page took 0.105193 seconds and 5 git commands to generate.