16 #include <arpa/inet.h>
18 #include <netinet/in.h>
20 #include <libmnl/libmnl.h>
21 #include <linux/netfilter.h>
22 #include <linux/netfilter/nf_tables.h>
23 #include <libnftnl/expr.h>
24 #include <libnftnl/rule.h>
28 nftnl_data_reg_value_snprintf_default(
char *buf,
size_t size,
29 const union nftnl_data_reg *reg,
32 const char *pfx = flags & DATA_F_NOPFX ?
"" :
"0x";
33 int remain = size, offset = 0, ret, i;
37 for (i = 0; i < div_round_up(reg->len,
sizeof(uint32_t)); i++) {
38 ret = snprintf(buf + offset, remain,
39 "%s%.8x ", pfx, reg->val[i]);
40 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
47 nftnl_data_reg_verdict_snprintf_def(
char *buf,
size_t size,
48 const union nftnl_data_reg *reg,
51 int remain = size, offset = 0, ret = 0;
53 ret = snprintf(buf, size,
"%s ", nftnl_verdict2str(reg->verdict));
54 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
56 if (reg->chain != NULL) {
57 ret = snprintf(buf + offset, remain,
"-> %s ", reg->chain);
58 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
64 int nftnl_data_reg_snprintf(
char *buf,
size_t size,
65 const union nftnl_data_reg *reg,
66 uint32_t output_format, uint32_t flags,
71 switch(output_format) {
72 case NFTNL_OUTPUT_DEFAULT:
73 return nftnl_data_reg_value_snprintf_default(buf, size,
75 case NFTNL_OUTPUT_JSON:
76 case NFTNL_OUTPUT_XML:
83 switch(output_format) {
84 case NFTNL_OUTPUT_DEFAULT:
85 return nftnl_data_reg_verdict_snprintf_def(buf, size,
87 case NFTNL_OUTPUT_JSON:
88 case NFTNL_OUTPUT_XML:
100 static int nftnl_data_parse_cb(
const struct nlattr *attr,
void *data)
102 const struct nlattr **tb = data;
103 int type = mnl_attr_get_type(attr);
105 if (mnl_attr_type_valid(attr, NFTA_DATA_MAX) < 0)
109 case NFTA_DATA_VALUE:
110 if (mnl_attr_validate(attr, MNL_TYPE_BINARY) < 0)
113 case NFTA_DATA_VERDICT:
114 if (mnl_attr_validate(attr, MNL_TYPE_NESTED) < 0)
122 static int nftnl_verdict_parse_cb(
const struct nlattr *attr,
void *data)
124 const struct nlattr **tb = data;
125 int type = mnl_attr_get_type(attr);
127 if (mnl_attr_type_valid(attr, NFTA_VERDICT_MAX) < 0)
131 case NFTA_VERDICT_CODE:
132 case NFTA_VERDICT_CHAIN_ID:
133 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
136 case NFTA_VERDICT_CHAIN:
137 if (mnl_attr_validate(attr, MNL_TYPE_STRING) < 0)
146 nftnl_parse_verdict(
union nftnl_data_reg *data,
const struct nlattr *attr,
int *type)
148 struct nlattr *tb[NFTA_VERDICT_MAX+1];
150 if (mnl_attr_parse_nested(attr, nftnl_verdict_parse_cb, tb) < 0)
153 if (!tb[NFTA_VERDICT_CODE])
156 data->verdict = ntohl(mnl_attr_get_u32(tb[NFTA_VERDICT_CODE]));
158 switch(data->verdict) {
166 *type = DATA_VERDICT;
167 data->len =
sizeof(data->verdict);
171 if (!tb[NFTA_VERDICT_CHAIN])
174 data->chain = strdup(mnl_attr_get_str(tb[NFTA_VERDICT_CHAIN]));
189 __nftnl_parse_data(
union nftnl_data_reg *data,
const struct nlattr *attr)
191 void *orig = mnl_attr_get_payload(attr);
192 uint32_t data_len = mnl_attr_get_payload_len(attr);
197 if (data_len >
sizeof(data->val))
200 memcpy(data->val, orig, data_len);
201 data->len = data_len;
206 int nftnl_parse_data(
union nftnl_data_reg *data,
struct nlattr *attr,
int *type)
208 struct nlattr *tb[NFTA_DATA_MAX+1] = {};
211 if (mnl_attr_parse_nested(attr, nftnl_data_parse_cb, tb) < 0)
214 if (tb[NFTA_DATA_VALUE]) {
218 ret = __nftnl_parse_data(data, tb[NFTA_DATA_VALUE]);
222 if (tb[NFTA_DATA_VERDICT])
223 ret = nftnl_parse_verdict(data, tb[NFTA_DATA_VERDICT], type);
228 void nftnl_free_verdict(
const union nftnl_data_reg *data)
230 switch(data->verdict) {