17#include <linux/netfilter/nf_tables.h>
20#include <libmnl/libmnl.h>
21#include <libnftnl/expr.h>
22#include <libnftnl/rule.h>
27 enum nft_registers dreg;
31nftnl_expr_fib_set(
struct nftnl_expr *e, uint16_t result,
32 const void *data, uint32_t data_len)
37 case NFTNL_EXPR_FIB_RESULT:
38 memcpy(&fib->result, data, data_len);
40 case NFTNL_EXPR_FIB_DREG:
41 memcpy(&fib->dreg, data, data_len);
43 case NFTNL_EXPR_FIB_FLAGS:
44 memcpy(&fib->flags, data, data_len);
51nftnl_expr_fib_get(
const struct nftnl_expr *e, uint16_t result,
57 case NFTNL_EXPR_FIB_RESULT:
58 *data_len =
sizeof(fib->result);
60 case NFTNL_EXPR_FIB_DREG:
61 *data_len =
sizeof(fib->dreg);
63 case NFTNL_EXPR_FIB_FLAGS:
64 *data_len =
sizeof(fib->flags);
70static int nftnl_expr_fib_cb(
const struct nlattr *attr,
void *data)
72 const struct nlattr **tb = data;
73 int type = mnl_attr_get_type(attr);
75 if (mnl_attr_type_valid(attr, NFTA_FIB_MAX) < 0)
82 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
92nftnl_expr_fib_build(
struct nlmsghdr *nlh,
const struct nftnl_expr *e)
96 if (e->flags & (1 << NFTNL_EXPR_FIB_FLAGS))
97 mnl_attr_put_u32(nlh, NFTA_FIB_FLAGS, htonl(fib->flags));
98 if (e->flags & (1 << NFTNL_EXPR_FIB_RESULT))
99 mnl_attr_put_u32(nlh, NFTA_FIB_RESULT, htonl(fib->result));
100 if (e->flags & (1 << NFTNL_EXPR_FIB_DREG))
101 mnl_attr_put_u32(nlh, NFTA_FIB_DREG, htonl(fib->dreg));
105nftnl_expr_fib_parse(
struct nftnl_expr *e,
struct nlattr *attr)
108 struct nlattr *tb[NFTA_FIB_MAX+1] = {};
111 if (mnl_attr_parse_nested(attr, nftnl_expr_fib_cb, tb) < 0)
114 if (tb[NFTA_FIB_RESULT]) {
115 fib->result = ntohl(mnl_attr_get_u32(tb[NFTA_FIB_RESULT]));
116 e->flags |= (1 << NFTNL_EXPR_FIB_RESULT);
118 if (tb[NFTA_FIB_DREG]) {
119 fib->dreg = ntohl(mnl_attr_get_u32(tb[NFTA_FIB_DREG]));
120 e->flags |= (1 << NFTNL_EXPR_FIB_DREG);
122 if (tb[NFTA_FIB_FLAGS]) {
123 fib->flags = ntohl(mnl_attr_get_u32(tb[NFTA_FIB_FLAGS]));
124 e->flags |= (1 << NFTNL_EXPR_FIB_FLAGS);
129static const char *fib_type[NFT_FIB_RESULT_MAX + 1] = {
130 [NFT_FIB_RESULT_OIF] =
"oif",
131 [NFT_FIB_RESULT_OIFNAME] =
"oifname",
132 [NFT_FIB_RESULT_ADDRTYPE] =
"type",
135static const char *fib_type_str(
enum nft_fib_result r)
137 if (r <= NFT_FIB_RESULT_MAX)
144nftnl_expr_fib_snprintf(
char *buf,
size_t remain,
145 uint32_t printflags,
const struct nftnl_expr *e)
148 uint32_t flags = fib->flags & ~NFTA_FIB_F_PRESENT;
149 uint32_t present_flag = fib->flags & NFTA_FIB_F_PRESENT;
150 int offset = 0, ret, i;
151 static const struct {
155 { NFTA_FIB_F_SADDR,
"saddr" },
156 { NFTA_FIB_F_DADDR,
"daddr" },
157 { NFTA_FIB_F_MARK,
"mark" },
158 { NFTA_FIB_F_IIF,
"iif" },
159 { NFTA_FIB_F_OIF,
"oif" },
162 for (i = 0; i < (
sizeof(tab) /
sizeof(tab[0])); i++) {
163 if (flags & tab[i].bit) {
164 ret = snprintf(buf + offset, remain,
"%s ",
166 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
168 flags &= ~tab[i].bit;
170 ret = snprintf(buf + offset, remain,
". ");
171 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
177 ret = snprintf(buf + offset, remain,
"unknown 0x%" PRIx32,
179 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
182 ret = snprintf(buf + offset, remain,
"%s%s => reg %d ",
183 fib_type_str(fib->result),
184 present_flag ?
" present" :
"",
186 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
191static struct attr_policy fib_attr_policy[__NFTNL_EXPR_FIB_MAX] = {
192 [NFTNL_EXPR_FIB_DREG] = { .maxlen =
sizeof(uint32_t) },
193 [NFTNL_EXPR_FIB_RESULT] = { .maxlen =
sizeof(uint32_t) },
194 [NFTNL_EXPR_FIB_FLAGS] = { .maxlen =
sizeof(uint32_t) },
197struct expr_ops expr_ops_fib = {
200 .nftnl_max_attr = __NFTNL_EXPR_FIB_MAX - 1,
201 .attr_policy = fib_attr_policy,
202 .set = nftnl_expr_fib_set,
203 .get = nftnl_expr_fib_get,
204 .parse = nftnl_expr_fib_parse,
205 .build = nftnl_expr_fib_build,
206 .output = nftnl_expr_fib_snprintf,