1 // SPDX-License-Identifier: GPL-2.0-only
2 /*
3 * ebt_mark_m
4 *
5 * Authors:
6 * Bart De Schuymer <bdschuym@pandora.be>
7 *
8 * July, 2002
9 *
10 */
11 #include <linux/module.h>
12 #include <linux/netfilter/x_tables.h>
13 #include <linux/netfilter_bridge/ebtables.h>
14 #include <linux/netfilter_bridge/ebt_mark_m.h>
15
16 static bool
17 ebt_mark_mt(const struct sk_buff *skb, struct xt_action_param *par)
18 {
19 const struct ebt_mark_m_info *info = par->matchinfo;
20
21 if (info->bitmask & EBT_MARK_OR)
22 return !!(skb->mark & info->mask) ^ info->invert;
23 return ((skb->mark & info->mask) == info->mark) ^ info->invert;
24 }
25
26 static int ebt_mark_mt_check(const struct xt_mtchk_param *par)
27 {
28 const struct ebt_mark_m_info *info = par->matchinfo;
29
30 if (info->bitmask & ~EBT_MARK_MASK)
31 return -EINVAL;
32 if ((info->bitmask & EBT_MARK_OR) && (info->bitmask & EBT_MARK_AND))
33 return -EINVAL;
34 if (!info->bitmask)
35 return -EINVAL;
36 return 0;
37 }
38
39
40 #ifdef CONFIG_NETFILTER_XTABLES_COMPAT
41 struct compat_ebt_mark_m_info {
42 compat_ulong_t mark, mask;
43 uint8_t invert, bitmask;
44 };
45
46 static void mark_mt_compat_from_user(void *dst, const void *src)
47 {
48 const struct compat_ebt_mark_m_info *user = src;
49 struct ebt_mark_m_info *kern = dst;
50
51 kern->mark = user->mark;
52 kern->mask = user->mask;
53 kern->invert = user->invert;
54 kern->bitmask = user->bitmask;
55 }
56
57 static int mark_mt_compat_to_user(void __user *dst, const void *src)
58 {
59 struct compat_ebt_mark_m_info __user *user = dst;
60 const struct ebt_mark_m_info *kern = src;
61
62 if (put_user(kern->mark, &user->mark) ||
63 put_user(kern->mask, &user->mask) ||
64 put_user(kern->invert, &user->invert) ||
65 put_user(kern->bitmask, &user->bitmask))
66 return -EFAULT;
67 return 0;
68 }
69 #endif
70
71 static struct xt_match ebt_mark_mt_reg __read_mostly = {
72 .name = "mark_m",
73 .revision = 0,
74 .family = NFPROTO_BRIDGE,
75 .match = ebt_mark_mt,
76 .checkentry = ebt_mark_mt_check,
77 .matchsize = sizeof(struct ebt_mark_m_info),
78 #ifdef CONFIG_NETFILTER_XTABLES_COMPAT
79 .compatsize = sizeof(struct compat_ebt_mark_m_info),
80 .compat_from_user = mark_mt_compat_from_user,
81 .compat_to_user = mark_mt_compat_to_user,
82 #endif
83 .me = THIS_MODULE,
84 };
85
86 static int __init ebt_mark_m_init(void)
87 {
88 return xt_register_match(&ebt_mark_mt_reg);
89 }
90
91 static void __exit ebt_mark_m_fini(void)
92 {
93 xt_unregister_match(&ebt_mark_mt_reg);
94 }
95
96 module_init(ebt_mark_m_init);
97 module_exit(ebt_mark_m_fini);
98 MODULE_DESCRIPTION("Ebtables: Packet mark match");
99 MODULE_LICENSE("GPL");
100
Linux® is a registered trademark of Linus Torvalds in the United States and other countries.
TOMOYO® is a registered trademark of NTT DATA CORPORATION.