m68knommu: remove local gettimeofday code
[wrt350n-kernel.git] / net / ipv6 / netfilter / ip6t_rt.c
blob12a9efe9886e86e7fa726722f5d2a4fc64bbd28e
1 /* Kernel module to match ROUTING parameters. */
3 /* (C) 2001-2002 Andras Kis-Szabo <kisza@sch.bme.hu>
5 * This program is free software; you can redistribute it and/or modify
6 * it under the terms of the GNU General Public License version 2 as
7 * published by the Free Software Foundation.
8 */
10 #include <linux/module.h>
11 #include <linux/skbuff.h>
12 #include <linux/ipv6.h>
13 #include <linux/types.h>
14 #include <net/checksum.h>
15 #include <net/ipv6.h>
17 #include <asm/byteorder.h>
19 #include <linux/netfilter/x_tables.h>
20 #include <linux/netfilter_ipv6/ip6_tables.h>
21 #include <linux/netfilter_ipv6/ip6t_rt.h>
23 MODULE_LICENSE("GPL");
24 MODULE_DESCRIPTION("Xtables: IPv6 Routing Header match");
25 MODULE_AUTHOR("Andras Kis-Szabo <kisza@sch.bme.hu>");
27 /* Returns 1 if the id is matched by the range, 0 otherwise */
28 static inline bool
29 segsleft_match(u_int32_t min, u_int32_t max, u_int32_t id, bool invert)
31 bool r;
32 pr_debug("rt segsleft_match:%c 0x%x <= 0x%x <= 0x%x",
33 invert ? '!' : ' ', min, id, max);
34 r = (id >= min && id <= max) ^ invert;
35 pr_debug(" result %s\n", r ? "PASS" : "FAILED");
36 return r;
39 static bool
40 rt_mt6(const struct sk_buff *skb, const struct net_device *in,
41 const struct net_device *out, const struct xt_match *match,
42 const void *matchinfo, int offset, unsigned int protoff, bool *hotdrop)
44 struct ipv6_rt_hdr _route;
45 const struct ipv6_rt_hdr *rh;
46 const struct ip6t_rt *rtinfo = matchinfo;
47 unsigned int temp;
48 unsigned int ptr;
49 unsigned int hdrlen = 0;
50 bool ret = false;
51 struct in6_addr _addr;
52 const struct in6_addr *ap;
53 int err;
55 err = ipv6_find_hdr(skb, &ptr, NEXTHDR_ROUTING, NULL);
56 if (err < 0) {
57 if (err != -ENOENT)
58 *hotdrop = true;
59 return false;
62 rh = skb_header_pointer(skb, ptr, sizeof(_route), &_route);
63 if (rh == NULL) {
64 *hotdrop = true;
65 return false;
68 hdrlen = ipv6_optlen(rh);
69 if (skb->len - ptr < hdrlen) {
70 /* Pcket smaller than its length field */
71 return false;
74 pr_debug("IPv6 RT LEN %u %u ", hdrlen, rh->hdrlen);
75 pr_debug("TYPE %04X ", rh->type);
76 pr_debug("SGS_LEFT %u %02X\n", rh->segments_left, rh->segments_left);
78 pr_debug("IPv6 RT segsleft %02X ",
79 segsleft_match(rtinfo->segsleft[0], rtinfo->segsleft[1],
80 rh->segments_left,
81 !!(rtinfo->invflags & IP6T_RT_INV_SGS)));
82 pr_debug("type %02X %02X %02X ",
83 rtinfo->rt_type, rh->type,
84 (!(rtinfo->flags & IP6T_RT_TYP) ||
85 ((rtinfo->rt_type == rh->type) ^
86 !!(rtinfo->invflags & IP6T_RT_INV_TYP))));
87 pr_debug("len %02X %04X %02X ",
88 rtinfo->hdrlen, hdrlen,
89 !(rtinfo->flags & IP6T_RT_LEN) ||
90 ((rtinfo->hdrlen == hdrlen) ^
91 !!(rtinfo->invflags & IP6T_RT_INV_LEN)));
92 pr_debug("res %02X %02X %02X ",
93 rtinfo->flags & IP6T_RT_RES,
94 ((const struct rt0_hdr *)rh)->reserved,
95 !((rtinfo->flags & IP6T_RT_RES) &&
96 (((const struct rt0_hdr *)rh)->reserved)));
98 ret = (rh != NULL)
100 (segsleft_match(rtinfo->segsleft[0], rtinfo->segsleft[1],
101 rh->segments_left,
102 !!(rtinfo->invflags & IP6T_RT_INV_SGS)))
104 (!(rtinfo->flags & IP6T_RT_LEN) ||
105 ((rtinfo->hdrlen == hdrlen) ^
106 !!(rtinfo->invflags & IP6T_RT_INV_LEN)))
108 (!(rtinfo->flags & IP6T_RT_TYP) ||
109 ((rtinfo->rt_type == rh->type) ^
110 !!(rtinfo->invflags & IP6T_RT_INV_TYP)));
112 if (ret && (rtinfo->flags & IP6T_RT_RES)) {
113 u_int32_t *rp, _reserved;
114 rp = skb_header_pointer(skb,
115 ptr + offsetof(struct rt0_hdr,
116 reserved),
117 sizeof(_reserved),
118 &_reserved);
120 ret = (*rp == 0);
123 pr_debug("#%d ", rtinfo->addrnr);
124 if (!(rtinfo->flags & IP6T_RT_FST)) {
125 return ret;
126 } else if (rtinfo->flags & IP6T_RT_FST_NSTRICT) {
127 pr_debug("Not strict ");
128 if (rtinfo->addrnr > (unsigned int)((hdrlen - 8) / 16)) {
129 pr_debug("There isn't enough space\n");
130 return false;
131 } else {
132 unsigned int i = 0;
134 pr_debug("#%d ", rtinfo->addrnr);
135 for (temp = 0;
136 temp < (unsigned int)((hdrlen - 8) / 16);
137 temp++) {
138 ap = skb_header_pointer(skb,
140 + sizeof(struct rt0_hdr)
141 + temp * sizeof(_addr),
142 sizeof(_addr),
143 &_addr);
145 BUG_ON(ap == NULL);
147 if (ipv6_addr_equal(ap, &rtinfo->addrs[i])) {
148 pr_debug("i=%d temp=%d;\n", i, temp);
149 i++;
151 if (i == rtinfo->addrnr)
152 break;
154 pr_debug("i=%d #%d\n", i, rtinfo->addrnr);
155 if (i == rtinfo->addrnr)
156 return ret;
157 else
158 return false;
160 } else {
161 pr_debug("Strict ");
162 if (rtinfo->addrnr > (unsigned int)((hdrlen - 8) / 16)) {
163 pr_debug("There isn't enough space\n");
164 return false;
165 } else {
166 pr_debug("#%d ", rtinfo->addrnr);
167 for (temp = 0; temp < rtinfo->addrnr; temp++) {
168 ap = skb_header_pointer(skb,
170 + sizeof(struct rt0_hdr)
171 + temp * sizeof(_addr),
172 sizeof(_addr),
173 &_addr);
174 BUG_ON(ap == NULL);
176 if (!ipv6_addr_equal(ap, &rtinfo->addrs[temp]))
177 break;
179 pr_debug("temp=%d #%d\n", temp, rtinfo->addrnr);
180 if (temp == rtinfo->addrnr &&
181 temp == (unsigned int)((hdrlen - 8) / 16))
182 return ret;
183 else
184 return false;
188 return false;
191 /* Called when user tries to insert an entry of this type. */
192 static bool
193 rt_mt6_check(const char *tablename, const void *entry,
194 const struct xt_match *match, void *matchinfo,
195 unsigned int hook_mask)
197 const struct ip6t_rt *rtinfo = matchinfo;
199 if (rtinfo->invflags & ~IP6T_RT_INV_MASK) {
200 pr_debug("ip6t_rt: unknown flags %X\n", rtinfo->invflags);
201 return false;
203 if ((rtinfo->flags & (IP6T_RT_RES | IP6T_RT_FST_MASK)) &&
204 (!(rtinfo->flags & IP6T_RT_TYP) ||
205 (rtinfo->rt_type != 0) ||
206 (rtinfo->invflags & IP6T_RT_INV_TYP))) {
207 pr_debug("`--rt-type 0' required before `--rt-0-*'");
208 return false;
211 return true;
214 static struct xt_match rt_mt6_reg __read_mostly = {
215 .name = "rt",
216 .family = AF_INET6,
217 .match = rt_mt6,
218 .matchsize = sizeof(struct ip6t_rt),
219 .checkentry = rt_mt6_check,
220 .me = THIS_MODULE,
223 static int __init rt_mt6_init(void)
225 return xt_register_match(&rt_mt6_reg);
228 static void __exit rt_mt6_exit(void)
230 xt_unregister_match(&rt_mt6_reg);
233 module_init(rt_mt6_init);
234 module_exit(rt_mt6_exit);