16 #include <arpa/inet.h>
18 #include <netinet/in.h>
20 #include <libmnl/libmnl.h>
21 #include <linux/netfilter.h>
22 #include <linux/netfilter/nf_tables.h>
23 #include <libnftnl/expr.h>
24 #include <libnftnl/rule.h>
28 static int nftnl_data_reg_verdict_json_parse(
union nftnl_data_reg *reg, json_t *data,
29 struct nftnl_parse_err *err)
32 const char *verdict_str;
35 verdict_str = nftnl_jansson_parse_str(data,
"verdict", err);
36 if (verdict_str == NULL)
39 if (nftnl_str2verdict(verdict_str, &verdict) != 0) {
40 err->node_name =
"verdict";
41 err->error = NFTNL_PARSE_EBADTYPE;
46 reg->verdict = (uint32_t)verdict;
48 if (nftnl_jansson_node_exist(data,
"chain")) {
49 chain = nftnl_jansson_parse_str(data,
"chain", err);
53 reg->chain = strdup(chain);
59 static int nftnl_data_reg_value_json_parse(
union nftnl_data_reg *reg, json_t *data,
60 struct nftnl_parse_err *err)
65 if (nftnl_jansson_parse_val(data,
"len", NFTNL_TYPE_U8, ®->len, err) < 0)
68 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
69 sprintf(node_name,
"data%d", i);
71 if (nftnl_jansson_str2num(data, node_name, BASE_HEX,
72 ®->val[i], NFTNL_TYPE_U32, err) != 0)
79 int nftnl_data_reg_json_parse(
union nftnl_data_reg *reg, json_t *data,
80 struct nftnl_parse_err *err)
85 type = nftnl_jansson_parse_str(data,
"type", err);
90 if (strcmp(type,
"value") == 0)
91 return nftnl_data_reg_value_json_parse(reg, data, err);
92 else if (strcmp(type,
"verdict") == 0)
93 return nftnl_data_reg_verdict_json_parse(reg, data, err);
100 static int nftnl_data_reg_verdict_xml_parse(
union nftnl_data_reg *reg,
102 struct nftnl_parse_err *err)
105 const char *verdict_str;
108 verdict_str = nftnl_mxml_str_parse(tree,
"verdict", MXML_DESCEND_FIRST,
109 NFTNL_XML_MAND, err);
110 if (verdict_str == NULL)
113 if (nftnl_str2verdict(verdict_str, &verdict) != 0) {
114 err->node_name =
"verdict";
115 err->error = NFTNL_PARSE_EBADTYPE;
120 reg->verdict = (uint32_t)verdict;
122 chain = nftnl_mxml_str_parse(tree,
"chain", MXML_DESCEND_FIRST,
128 reg->chain = strdup(chain);
134 static int nftnl_data_reg_value_xml_parse(
union nftnl_data_reg *reg,
136 struct nftnl_parse_err *err)
141 if (nftnl_mxml_num_parse(tree,
"len", MXML_DESCEND_FIRST, BASE_DEC,
142 ®->len, NFTNL_TYPE_U8, NFTNL_XML_MAND, err) != 0)
145 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
146 sprintf(node_name,
"data%d", i);
148 if (nftnl_mxml_num_parse(tree, node_name, MXML_DESCEND_FIRST,
149 BASE_HEX, ®->val[i], NFTNL_TYPE_U32,
150 NFTNL_XML_MAND, err) != 0)
157 int nftnl_data_reg_xml_parse(
union nftnl_data_reg *reg, mxml_node_t *tree,
158 struct nftnl_parse_err *err)
163 node = mxmlFindElement(tree, tree,
"reg",
"type", NULL,
168 type = mxmlElementGetAttr(node,
"type");
173 if (strcmp(type,
"value") == 0)
174 return nftnl_data_reg_value_xml_parse(reg, node, err);
175 else if (strcmp(type,
"verdict") == 0)
176 return nftnl_data_reg_verdict_xml_parse(reg, node, err);
181 err->node_name =
"reg";
182 err->error = NFTNL_PARSE_EMISSINGNODE;
188 nftnl_data_reg_value_snprintf_json(
char *buf,
size_t size,
189 union nftnl_data_reg *reg,
192 int len = size, offset = 0, ret, i, j;
196 ret = snprintf(buf, len,
"\"reg\":{\"type\":\"value\",");
197 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
199 ret = snprintf(buf+offset, len,
"\"len\":%u,", reg->len);
200 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
202 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
203 ret = snprintf(buf+offset, len,
"\"data%d\":\"0x", i);
204 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
206 utemp = htonl(reg->val[i]);
207 tmp = (uint8_t *)&utemp;
209 for (j = 0; j<
sizeof(uint32_t); j++) {
210 ret = snprintf(buf+offset, len,
"%.02x", tmp[j]);
211 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
214 ret = snprintf(buf+offset, len,
"\",");
215 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
218 ret = snprintf(buf+offset, len,
"}");
219 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
225 int nftnl_data_reg_value_snprintf_xml(
char *buf,
size_t size,
226 union nftnl_data_reg *reg, uint32_t flags)
228 int len = size, offset = 0, ret, i, j;
232 ret = snprintf(buf, len,
"<reg type=\"value\">");
233 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
235 ret = snprintf(buf+offset, len,
"<len>%u</len>", reg->len);
236 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
238 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
239 ret = snprintf(buf+offset, len,
"<data%d>0x", i);
240 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
242 be = htonl(reg->val[i]);
243 tmp = (uint8_t *)&be;
245 for (j = 0; j <
sizeof(uint32_t); j++) {
246 ret = snprintf(buf+offset, len,
"%.02x", tmp[j]);
247 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
250 ret = snprintf(buf+offset, len,
"</data%d>", i);
251 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
254 ret = snprintf(buf+offset, len,
"</reg>");
255 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
261 nftnl_data_reg_value_snprintf_default(
char *buf,
size_t size,
262 union nftnl_data_reg *reg, uint32_t flags)
264 int len = size, offset = 0, ret, i;
266 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
267 ret = snprintf(buf+offset, len,
"0x%.8x ", reg->val[i]);
268 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
275 nftnl_data_reg_verdict_snprintf_def(
char *buf,
size_t size,
276 union nftnl_data_reg *reg, uint32_t flags)
278 int len = size, offset = 0, ret = 0;
280 ret = snprintf(buf, size,
"%s ", nftnl_verdict2str(reg->verdict));
281 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
283 if (reg->chain != NULL) {
284 ret = snprintf(buf+offset, len,
"-> %s ", reg->chain);
285 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
292 nftnl_data_reg_verdict_snprintf_xml(
char *buf,
size_t size,
293 union nftnl_data_reg *reg, uint32_t flags)
295 int len = size, offset = 0, ret = 0;
297 ret = snprintf(buf, size,
"<reg type=\"verdict\">"
298 "<verdict>%s</verdict>", nftnl_verdict2str(reg->verdict));
299 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
301 if (reg->chain != NULL) {
302 ret = snprintf(buf+offset, len,
"<chain>%s</chain>",
304 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
307 ret = snprintf(buf+offset, len,
"</reg>");
308 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
314 nftnl_data_reg_verdict_snprintf_json(
char *buf,
size_t size,
315 union nftnl_data_reg *reg, uint32_t flags)
317 int len = size, offset = 0, ret = 0;
319 ret = snprintf(buf, size,
"\"reg\":{\"type\":\"verdict\","
320 "\"verdict\":\"%s\"", nftnl_verdict2str(reg->verdict));
321 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
323 if (reg->chain != NULL) {
324 ret = snprintf(buf+offset, len,
",\"chain\":\"%s\"",
326 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
329 ret = snprintf(buf+offset, len,
"}");
330 SNPRINTF_BUFFER_SIZE(ret, size, len, offset);
335 int nftnl_data_reg_snprintf(
char *buf,
size_t size,
union nftnl_data_reg *reg,
336 uint32_t output_format, uint32_t flags,
int reg_type)
340 switch(output_format) {
341 case NFTNL_OUTPUT_DEFAULT:
342 return nftnl_data_reg_value_snprintf_default(buf, size,
344 case NFTNL_OUTPUT_XML:
345 return nftnl_data_reg_value_snprintf_xml(buf, size,
347 case NFTNL_OUTPUT_JSON:
348 return nftnl_data_reg_value_snprintf_json(buf, size,
355 switch(output_format) {
356 case NFTNL_OUTPUT_DEFAULT:
357 return nftnl_data_reg_verdict_snprintf_def(buf, size,
359 case NFTNL_OUTPUT_XML:
360 return nftnl_data_reg_verdict_snprintf_xml(buf, size,
362 case NFTNL_OUTPUT_JSON:
363 return nftnl_data_reg_verdict_snprintf_json(buf, size,
375 static int nftnl_data_parse_cb(
const struct nlattr *attr,
void *data)
377 const struct nlattr **tb = data;
378 int type = mnl_attr_get_type(attr);
380 if (mnl_attr_type_valid(attr, NFTA_DATA_MAX) < 0)
384 case NFTA_DATA_VALUE:
385 if (mnl_attr_validate(attr, MNL_TYPE_BINARY) < 0)
388 case NFTA_DATA_VERDICT:
389 if (mnl_attr_validate(attr, MNL_TYPE_NESTED) < 0)
397 static int nftnl_verdict_parse_cb(
const struct nlattr *attr,
void *data)
399 const struct nlattr **tb = data;
400 int type = mnl_attr_get_type(attr);
402 if (mnl_attr_type_valid(attr, NFTA_VERDICT_MAX) < 0)
406 case NFTA_VERDICT_CODE:
407 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
410 case NFTA_VERDICT_CHAIN:
411 if (mnl_attr_validate(attr, MNL_TYPE_STRING) < 0)
420 nftnl_parse_verdict(
union nftnl_data_reg *data,
const struct nlattr *attr,
int *type)
422 struct nlattr *tb[NFTA_VERDICT_MAX+1];
424 if (mnl_attr_parse_nested(attr, nftnl_verdict_parse_cb, tb) < 0) {
425 perror(
"mnl_attr_parse_nested");
429 if (!tb[NFTA_VERDICT_CODE])
432 data->verdict = ntohl(mnl_attr_get_u32(tb[NFTA_VERDICT_CODE]));
434 switch(data->verdict) {
442 *type = DATA_VERDICT;
443 data->len =
sizeof(data->verdict);
447 if (!tb[NFTA_VERDICT_CHAIN])
450 data->chain = strdup(mnl_attr_get_str(tb[NFTA_VERDICT_CHAIN]));
462 __nftnl_parse_data(
union nftnl_data_reg *data,
const struct nlattr *attr)
464 void *orig = mnl_attr_get_payload(attr);
465 uint32_t data_len = mnl_attr_get_payload_len(attr);
470 if (data_len >
sizeof(data->val))
473 memcpy(data->val, orig, data_len);
474 data->len = data_len;
479 int nftnl_parse_data(
union nftnl_data_reg *data,
struct nlattr *attr,
int *type)
481 struct nlattr *tb[NFTA_DATA_MAX+1] = {};
484 if (mnl_attr_parse_nested(attr, nftnl_data_parse_cb, tb) < 0) {
485 perror(
"mnl_attr_parse_nested");
488 if (tb[NFTA_DATA_VALUE]) {
492 ret = __nftnl_parse_data(data, tb[NFTA_DATA_VALUE]);
496 if (tb[NFTA_DATA_VERDICT])
497 ret = nftnl_parse_verdict(data, tb[NFTA_DATA_VERDICT], type);
502 void nftnl_free_verdict(
union nftnl_data_reg *data)
504 switch(data->verdict) {