Home | History | Annotate | Line # | Download | only in net
pfil.c revision 1.15
      1  1.15  mycroft /*	$NetBSD: pfil.c,v 1.15 2000/02/23 02:35:42 mycroft Exp $	*/
      2   1.1      mrg 
      3   1.1      mrg /*
      4   1.1      mrg  * Copyright (c) 1996 Matthew R. Green
      5   1.1      mrg  * All rights reserved.
      6   1.1      mrg  *
      7   1.1      mrg  * Redistribution and use in source and binary forms, with or without
      8   1.1      mrg  * modification, are permitted provided that the following conditions
      9   1.1      mrg  * are met:
     10   1.1      mrg  * 1. Redistributions of source code must retain the above copyright
     11   1.1      mrg  *    notice, this list of conditions and the following disclaimer.
     12   1.1      mrg  * 2. Redistributions in binary form must reproduce the above copyright
     13   1.1      mrg  *    notice, this list of conditions and the following disclaimer in the
     14   1.1      mrg  *    documentation and/or other materials provided with the distribution.
     15   1.6      mrg  * 3. The name of the author may not be used to endorse or promote products
     16   1.1      mrg  *    derived from this software without specific prior written permission.
     17   1.1      mrg  *
     18   1.1      mrg  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
     19   1.1      mrg  * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
     20   1.1      mrg  * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
     21   1.1      mrg  * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
     22   1.1      mrg  * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
     23   1.1      mrg  * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
     24   1.1      mrg  * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
     25   1.1      mrg  * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
     26   1.1      mrg  * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
     27   1.1      mrg  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
     28   1.1      mrg  * SUCH DAMAGE.
     29   1.1      mrg  */
     30   1.1      mrg 
     31   1.1      mrg #include <sys/param.h>
     32   1.1      mrg #include <sys/errno.h>
     33   1.1      mrg #include <sys/malloc.h>
     34   1.1      mrg #include <sys/socket.h>
     35   1.1      mrg #include <sys/socketvar.h>
     36   1.1      mrg #include <sys/systm.h>
     37   1.1      mrg #include <sys/proc.h>
     38   1.1      mrg #include <sys/queue.h>
     39   1.1      mrg 
     40   1.1      mrg #include <net/if.h>
     41   1.1      mrg #include <net/pfil.h>
     42   1.1      mrg 
     43  1.10  darrenr static void pfil_init __P((struct pfil_head *));
     44  1.13  darrenr static int pfil_list_add(pfil_list_t *,
     45   1.1      mrg     int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)), int);
     46  1.13  darrenr static int pfil_list_remove(pfil_list_t *,
     47   1.1      mrg     int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)));
     48   1.1      mrg 
     49   1.7      mrg static void
     50  1.10  darrenr pfil_init(ph)
     51  1.10  darrenr 	 struct pfil_head *ph;
     52   1.1      mrg {
     53   1.7      mrg 
     54  1.10  darrenr 	TAILQ_INIT(&ph->ph_in);
     55  1.10  darrenr 	TAILQ_INIT(&ph->ph_out);
     56  1.10  darrenr 	ph->ph_init = 1;
     57   1.1      mrg }
     58   1.1      mrg 
     59   1.1      mrg /*
     60   1.1      mrg  * pfil_add_hook() adds a function to the packet filter hook.  the
     61   1.1      mrg  * flags are:
     62   1.1      mrg  *	PFIL_IN		call me on incoming packets
     63   1.1      mrg  *	PFIL_OUT	call me on outgoing packets
     64   1.1      mrg  *	PFIL_ALL	call me on all of the above
     65   1.1      mrg  *	PFIL_WAITOK	OK to call malloc with M_WAITOK.
     66   1.1      mrg  */
     67  1.13  darrenr int
     68  1.11  darrenr pfil_add_hook(func, flags, ph)
     69   1.1      mrg 	int	(*func) __P((void *, int, struct ifnet *, int,
     70   1.1      mrg 			     struct mbuf **));
     71   1.1      mrg 	int	flags;
     72  1.11  darrenr 	struct	pfil_head	*ph;
     73   1.1      mrg {
     74  1.13  darrenr 	int err = 0;
     75   1.1      mrg 
     76  1.10  darrenr 	if (ph->ph_init == 0)
     77  1.10  darrenr 		pfil_init(ph);
     78   1.1      mrg 
     79   1.1      mrg 	if (flags & PFIL_IN)
     80  1.14  darrenr 		err = pfil_list_add(&ph->ph_in, func, flags & ~PFIL_OUT);
     81  1.15  mycroft 	if (err)
     82  1.15  mycroft 		return err;
     83  1.15  mycroft 	if (flags & PFIL_OUT)
     84  1.14  darrenr 		err = pfil_list_add(&ph->ph_out, func, flags & ~PFIL_IN);
     85  1.15  mycroft 	if (err) {
     86  1.15  mycroft 		if (flags & PFIL_IN)
     87  1.15  mycroft 			pfil_list_remove(&ph->ph_in, func);
     88  1.15  mycroft 		return err;
     89  1.15  mycroft 	}
     90  1.15  mycroft 	return 0;
     91   1.1      mrg }
     92   1.1      mrg 
     93  1.13  darrenr static int
     94   1.1      mrg pfil_list_add(list, func, flags)
     95   1.1      mrg 	pfil_list_t *list;
     96   1.1      mrg 	int	(*func) __P((void *, int, struct ifnet *, int,
     97   1.1      mrg 			     struct mbuf **));
     98  1.10  darrenr 	int flags;
     99   1.1      mrg {
    100   1.1      mrg 	struct packet_filter_hook *pfh;
    101   1.1      mrg 
    102   1.1      mrg 	pfh = (struct packet_filter_hook *)malloc(sizeof(*pfh), M_IFADDR,
    103   1.1      mrg 	    flags & PFIL_WAITOK ? M_WAITOK : M_NOWAIT);
    104   1.1      mrg 	if (pfh == NULL)
    105  1.13  darrenr 		return ENOMEM;
    106   1.1      mrg 	pfh->pfil_func = func;
    107   1.7      mrg 	/*
    108   1.7      mrg 	 * insert the input list in reverse order of the output list
    109   1.7      mrg 	 * so that the same path is followed in or out of the kernel.
    110   1.7      mrg 	 */
    111  1.12  darrenr 
    112  1.12  darrenr 	if (flags & PFIL_IN)
    113  1.12  darrenr 		TAILQ_INSERT_HEAD(list, pfh, pfil_link);
    114  1.12  darrenr 	else
    115  1.12  darrenr 		TAILQ_INSERT_TAIL(list, pfh, pfil_link);
    116  1.13  darrenr 	return 0;
    117   1.1      mrg }
    118   1.1      mrg 
    119   1.1      mrg /*
    120   1.1      mrg  * pfil_remove_hook removes a specific function from the packet filter
    121   1.1      mrg  * hook list.
    122   1.1      mrg  */
    123  1.13  darrenr int
    124  1.11  darrenr pfil_remove_hook(func, flags, ph)
    125   1.1      mrg 	int	(*func) __P((void *, int, struct ifnet *, int,
    126   1.1      mrg 			     struct mbuf **));
    127   1.1      mrg 	int	flags;
    128  1.11  darrenr 	struct	pfil_head	*ph;
    129   1.1      mrg {
    130  1.13  darrenr 	int err = 0;
    131   1.1      mrg 
    132  1.10  darrenr 	if (ph->ph_init == 0)
    133  1.10  darrenr 		pfil_init(ph);
    134   1.1      mrg 
    135   1.1      mrg 	if (flags & PFIL_IN)
    136  1.13  darrenr 		err = pfil_list_remove(&ph->ph_in, func);
    137  1.13  darrenr 	if ((err == 0) && (flags & PFIL_OUT))
    138  1.13  darrenr 		err = pfil_list_remove(&ph->ph_out, func);
    139  1.13  darrenr 	return err;
    140   1.1      mrg }
    141   1.1      mrg 
    142   1.1      mrg /*
    143   1.1      mrg  * pfil_list_remove is an internal function that takes a function off the
    144   1.1      mrg  * specified list.
    145   1.1      mrg  */
    146  1.13  darrenr static int
    147   1.1      mrg pfil_list_remove(list, func)
    148   1.9      mrg 	pfil_list_t *list;
    149   1.1      mrg 	int	(*func) __P((void *, int, struct ifnet *, int,
    150   1.1      mrg 			     struct mbuf **));
    151   1.1      mrg {
    152   1.1      mrg 	struct packet_filter_hook *pfh;
    153   1.1      mrg 
    154   1.9      mrg 	for (pfh = list->tqh_first; pfh; pfh = pfh->pfil_link.tqe_next)
    155   1.1      mrg 		if (pfh->pfil_func == func) {
    156   1.9      mrg 			TAILQ_REMOVE(list, pfh, pfil_link);
    157   1.1      mrg 			free(pfh, M_IFADDR);
    158  1.13  darrenr 			return 0;
    159   1.1      mrg 		}
    160  1.13  darrenr 	return ENOENT;
    161   1.1      mrg }
    162   1.1      mrg 
    163   1.1      mrg struct packet_filter_hook *
    164  1.11  darrenr pfil_hook_get(flag, ph)
    165   1.1      mrg 	int flag;
    166  1.11  darrenr 	struct	pfil_head	*ph;
    167   1.1      mrg {
    168  1.10  darrenr 	if (ph->ph_init != 0)
    169   1.1      mrg 		switch (flag) {
    170   1.1      mrg 		case PFIL_IN:
    171  1.10  darrenr 			return (ph->ph_in.tqh_first);
    172   1.1      mrg 		case PFIL_OUT:
    173  1.10  darrenr 			return (ph->ph_out.tqh_first);
    174   1.1      mrg 		}
    175   1.1      mrg 	return NULL;
    176   1.1      mrg }
    177