linux/net/netfilter/xt_set.c

// SPDX-License-Identifier: GPL-2.0-only
/* Copyright (C) 2000-2002 Joakim Axelsson <[email protected]>
 *                         Patrick Schaaf <[email protected]>
 *                         Martin Josefsson <[email protected]>
 * Copyright (C) 2003-2013 Jozsef Kadlecsik <[email protected]>
 */

/* Kernel module which implements the set match and SET target
 * for netfilter/iptables.
 */

#include <linux/module.h>
#include <linux/skbuff.h>

#include <linux/netfilter/x_tables.h>
#include <linux/netfilter/ipset/ip_set.h>
#include <uapi/linux/netfilter/xt_set.h>

MODULE_LICENSE(…) …;
MODULE_AUTHOR(…) …;
MODULE_DESCRIPTION(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;

static inline int
match_set(ip_set_id_t index, const struct sk_buff *skb,
	  const struct xt_action_param *par,
	  struct ip_set_adt_opt *opt, int inv)
{ … }

#define ADT_OPT(n, f, d, fs, cfs, t, p, b, po, bo) …

/* Revision 0 interface: backward compatible with netfilter/iptables */

static bool
set_match_v0(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static void
compat_flags(struct xt_set_info_v0 *info)
{ … }

static int
set_match_v0_checkentry(const struct xt_mtchk_param *par)
{ … }

static void
set_match_v0_destroy(const struct xt_mtdtor_param *par)
{ … }

/* Revision 1 match */

static bool
set_match_v1(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static int
set_match_v1_checkentry(const struct xt_mtchk_param *par)
{ … }

static void
set_match_v1_destroy(const struct xt_mtdtor_param *par)
{ … }

/* Revision 3 match */

static bool
set_match_v3(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

#define set_match_v3_checkentry …
#define set_match_v3_destroy …

/* Revision 4 match */

static bool
set_match_v4(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

#define set_match_v4_checkentry …
#define set_match_v4_destroy …

/* Revision 0 interface: backward compatible with netfilter/iptables */

static unsigned int
set_target_v0(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

static int
set_target_v0_checkentry(const struct xt_tgchk_param *par)
{ … }

static void
set_target_v0_destroy(const struct xt_tgdtor_param *par)
{ … }

/* Revision 1 target */

static unsigned int
set_target_v1(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

static int
set_target_v1_checkentry(const struct xt_tgchk_param *par)
{ … }

static void
set_target_v1_destroy(const struct xt_tgdtor_param *par)
{ … }

/* Revision 2 target */

static unsigned int
set_target_v2(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

#define set_target_v2_checkentry …
#define set_target_v2_destroy …

/* Revision 3 target */

#define MOPT(opt, member) …

static unsigned int
set_target_v3(struct sk_buff *skb, const struct xt_action_param *par)
{ … }

static int
set_target_v3_checkentry(const struct xt_tgchk_param *par)
{ … }

static void
set_target_v3_destroy(const struct xt_tgdtor_param *par)
{ … }

static struct xt_match set_matches[] __read_mostly = …;

static struct xt_target set_targets[] __read_mostly = …;

static int __init xt_set_init(void)
{ … }

static void __exit xt_set_fini(void)
{ … }

module_init(…) …;
module_exit(xt_set_fini);