linux/net/netfilter/xt_bpf.c

// SPDX-License-Identifier: GPL-2.0-only
/* Xtables module to match packets using a BPF filter.
 * Copyright 2013 Google Inc.
 * Written by Willem de Bruijn <[email protected]>
 */

#define pr_fmt(fmt) …

#include <linux/module.h>
#include <linux/syscalls.h>
#include <linux/skbuff.h>
#include <linux/filter.h>
#include <linux/bpf.h>

#include <linux/netfilter/xt_bpf.h>
#include <linux/netfilter/x_tables.h>

MODULE_AUTHOR(…) …;
MODULE_DESCRIPTION(…) …;
MODULE_LICENSE(…) …;
MODULE_ALIAS(…) …;
MODULE_ALIAS(…) …;

static int __bpf_mt_check_bytecode(struct sock_filter *insns, __u16 len,
				   struct bpf_prog **ret)
{ … }

static int __bpf_mt_check_fd(int fd, struct bpf_prog **ret)
{ … }

static int __bpf_mt_check_path(const char *path, struct bpf_prog **ret)
{ … }

static int bpf_mt_check(const struct xt_mtchk_param *par)
{ … }

static int bpf_mt_check_v1(const struct xt_mtchk_param *par)
{ … }

static bool bpf_mt(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static bool bpf_mt_v1(const struct sk_buff *skb, struct xt_action_param *par)
{ … }

static void bpf_mt_destroy(const struct xt_mtdtor_param *par)
{ … }

static void bpf_mt_destroy_v1(const struct xt_mtdtor_param *par)
{ … }

static struct xt_match bpf_mt_reg[] __read_mostly = …;

static int __init bpf_mt_init(void)
{ … }

static void __exit bpf_mt_exit(void)
{ … }

module_init(…) …;
module_exit(bpf_mt_exit);