Blame view
net/netfilter/nft_numgen.c
5.41 KB
d2912cb15
|
1 |
// SPDX-License-Identifier: GPL-2.0-only |
91dbc6be0
|
2 3 |
/* * Copyright (c) 2016 Laura Garcia <nevola@gmail.com> |
91dbc6be0
|
4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 |
*/ #include <linux/kernel.h> #include <linux/init.h> #include <linux/module.h> #include <linux/netlink.h> #include <linux/netfilter.h> #include <linux/netfilter/nf_tables.h> #include <linux/static_key.h> #include <net/netfilter/nf_tables.h> #include <net/netfilter/nf_tables_core.h> static DEFINE_PER_CPU(struct rnd_state, nft_numgen_prandom_state); struct nft_ng_inc { enum nft_registers dreg:8; |
0d9932b28
|
20 |
u32 modulus; |
91dbc6be0
|
21 |
atomic_t counter; |
2b03bf732
|
22 |
u32 offset; |
91dbc6be0
|
23 |
}; |
d734a2888
|
24 |
static u32 nft_ng_inc_gen(struct nft_ng_inc *priv) |
91dbc6be0
|
25 |
{ |
91dbc6be0
|
26 27 28 29 |
u32 nval, oval; do { oval = atomic_read(&priv->counter); |
0d9932b28
|
30 |
nval = (oval + 1 < priv->modulus) ? oval + 1 : 0; |
91dbc6be0
|
31 |
} while (atomic_cmpxchg(&priv->counter, oval, nval) != oval); |
d734a2888
|
32 33 34 35 36 37 38 39 40 41 42 |
return nval + priv->offset; } static void nft_ng_inc_eval(const struct nft_expr *expr, struct nft_regs *regs, const struct nft_pktinfo *pkt) { struct nft_ng_inc *priv = nft_expr_priv(expr); regs->data[priv->dreg] = nft_ng_inc_gen(priv); } |
91dbc6be0
|
43 44 |
static const struct nla_policy nft_ng_policy[NFTA_NG_MAX + 1] = { [NFTA_NG_DREG] = { .type = NLA_U32 }, |
0d9932b28
|
45 |
[NFTA_NG_MODULUS] = { .type = NLA_U32 }, |
91dbc6be0
|
46 |
[NFTA_NG_TYPE] = { .type = NLA_U32 }, |
2b03bf732
|
47 |
[NFTA_NG_OFFSET] = { .type = NLA_U32 }, |
91dbc6be0
|
48 49 50 51 52 53 54 |
}; static int nft_ng_inc_init(const struct nft_ctx *ctx, const struct nft_expr *expr, const struct nlattr * const tb[]) { struct nft_ng_inc *priv = nft_expr_priv(expr); |
2b03bf732
|
55 56 |
if (tb[NFTA_NG_OFFSET]) priv->offset = ntohl(nla_get_be32(tb[NFTA_NG_OFFSET])); |
0d9932b28
|
57 58 |
priv->modulus = ntohl(nla_get_be32(tb[NFTA_NG_MODULUS])); if (priv->modulus == 0) |
91dbc6be0
|
59 |
return -ERANGE; |
2b03bf732
|
60 61 |
if (priv->offset + priv->modulus - 1 < priv->offset) return -EOVERFLOW; |
91dbc6be0
|
62 |
priv->dreg = nft_parse_register(tb[NFTA_NG_DREG]); |
0ecba4d9d
|
63 |
atomic_set(&priv->counter, priv->modulus - 1); |
91dbc6be0
|
64 65 66 67 68 69 |
return nft_validate_register_store(ctx, priv->dreg, NULL, NFT_DATA_VALUE, sizeof(u32)); } static int nft_ng_dump(struct sk_buff *skb, enum nft_registers dreg, |
2b03bf732
|
70 |
u32 modulus, enum nft_ng_types type, u32 offset) |
91dbc6be0
|
71 72 73 |
{ if (nft_dump_register(skb, NFTA_NG_DREG, dreg)) goto nla_put_failure; |
0d9932b28
|
74 |
if (nla_put_be32(skb, NFTA_NG_MODULUS, htonl(modulus))) |
91dbc6be0
|
75 |
goto nla_put_failure; |
7073b16f3
|
76 |
if (nla_put_be32(skb, NFTA_NG_TYPE, htonl(type))) |
91dbc6be0
|
77 |
goto nla_put_failure; |
2b03bf732
|
78 79 |
if (nla_put_be32(skb, NFTA_NG_OFFSET, htonl(offset))) goto nla_put_failure; |
91dbc6be0
|
80 81 82 83 84 85 86 87 88 89 |
return 0; nla_put_failure: return -1; } static int nft_ng_inc_dump(struct sk_buff *skb, const struct nft_expr *expr) { const struct nft_ng_inc *priv = nft_expr_priv(expr); |
2b03bf732
|
90 91 |
return nft_ng_dump(skb, priv->dreg, priv->modulus, NFT_NG_INCREMENTAL, priv->offset); |
91dbc6be0
|
92 93 94 95 |
} struct nft_ng_random { enum nft_registers dreg:8; |
0d9932b28
|
96 |
u32 modulus; |
2b03bf732
|
97 |
u32 offset; |
91dbc6be0
|
98 |
}; |
978d8f905
|
99 100 101 102 103 104 105 |
static u32 nft_ng_random_gen(struct nft_ng_random *priv) { struct rnd_state *state = this_cpu_ptr(&nft_numgen_prandom_state); return reciprocal_scale(prandom_u32_state(state), priv->modulus) + priv->offset; } |
91dbc6be0
|
106 107 108 109 110 |
static void nft_ng_random_eval(const struct nft_expr *expr, struct nft_regs *regs, const struct nft_pktinfo *pkt) { struct nft_ng_random *priv = nft_expr_priv(expr); |
91dbc6be0
|
111 |
|
978d8f905
|
112 113 |
regs->data[priv->dreg] = nft_ng_random_gen(priv); } |
91dbc6be0
|
114 115 116 117 118 |
static int nft_ng_random_init(const struct nft_ctx *ctx, const struct nft_expr *expr, const struct nlattr * const tb[]) { struct nft_ng_random *priv = nft_expr_priv(expr); |
2b03bf732
|
119 120 |
if (tb[NFTA_NG_OFFSET]) priv->offset = ntohl(nla_get_be32(tb[NFTA_NG_OFFSET])); |
0d9932b28
|
121 122 |
priv->modulus = ntohl(nla_get_be32(tb[NFTA_NG_MODULUS])); if (priv->modulus == 0) |
91dbc6be0
|
123 |
return -ERANGE; |
2b03bf732
|
124 125 |
if (priv->offset + priv->modulus - 1 < priv->offset) return -EOVERFLOW; |
91dbc6be0
|
126 127 128 129 130 131 132 133 134 135 136 |
prandom_init_once(&nft_numgen_prandom_state); priv->dreg = nft_parse_register(tb[NFTA_NG_DREG]); return nft_validate_register_store(ctx, priv->dreg, NULL, NFT_DATA_VALUE, sizeof(u32)); } static int nft_ng_random_dump(struct sk_buff *skb, const struct nft_expr *expr) { const struct nft_ng_random *priv = nft_expr_priv(expr); |
2b03bf732
|
137 138 |
return nft_ng_dump(skb, priv->dreg, priv->modulus, NFT_NG_RANDOM, priv->offset); |
91dbc6be0
|
139 140 141 142 143 144 145 146 147 148 149 150 151 152 153 154 155 156 157 158 159 160 161 |
} static struct nft_expr_type nft_ng_type; static const struct nft_expr_ops nft_ng_inc_ops = { .type = &nft_ng_type, .size = NFT_EXPR_SIZE(sizeof(struct nft_ng_inc)), .eval = nft_ng_inc_eval, .init = nft_ng_inc_init, .dump = nft_ng_inc_dump, }; static const struct nft_expr_ops nft_ng_random_ops = { .type = &nft_ng_type, .size = NFT_EXPR_SIZE(sizeof(struct nft_ng_random)), .eval = nft_ng_random_eval, .init = nft_ng_random_init, .dump = nft_ng_random_dump, }; static const struct nft_expr_ops * nft_ng_select_ops(const struct nft_ctx *ctx, const struct nlattr * const tb[]) { u32 type; |
0d9932b28
|
162 163 |
if (!tb[NFTA_NG_DREG] || !tb[NFTA_NG_MODULUS] || |
91dbc6be0
|
164 165 166 167 168 169 170 171 172 173 174 175 176 177 178 179 180 |
!tb[NFTA_NG_TYPE]) return ERR_PTR(-EINVAL); type = ntohl(nla_get_be32(tb[NFTA_NG_TYPE])); switch (type) { case NFT_NG_INCREMENTAL: return &nft_ng_inc_ops; case NFT_NG_RANDOM: return &nft_ng_random_ops; } return ERR_PTR(-EINVAL); } static struct nft_expr_type nft_ng_type __read_mostly = { .name = "numgen", |
d4ef38354
|
181 |
.select_ops = nft_ng_select_ops, |
91dbc6be0
|
182 183 184 185 186 187 188 189 190 191 192 193 194 195 196 197 198 199 200 201 202 |
.policy = nft_ng_policy, .maxattr = NFTA_NG_MAX, .owner = THIS_MODULE, }; static int __init nft_ng_module_init(void) { return nft_register_expr(&nft_ng_type); } static void __exit nft_ng_module_exit(void) { nft_unregister_expr(&nft_ng_type); } module_init(nft_ng_module_init); module_exit(nft_ng_module_exit); MODULE_LICENSE("GPL"); MODULE_AUTHOR("Laura Garcia <nevola@gmail.com>"); MODULE_ALIAS_NFT_EXPR("numgen"); |