pfil.c revision 1.15 1 1.15 mycroft /* $NetBSD: pfil.c,v 1.15 2000/02/23 02:35:42 mycroft Exp $ */
2 1.1 mrg
3 1.1 mrg /*
4 1.1 mrg * Copyright (c) 1996 Matthew R. Green
5 1.1 mrg * All rights reserved.
6 1.1 mrg *
7 1.1 mrg * Redistribution and use in source and binary forms, with or without
8 1.1 mrg * modification, are permitted provided that the following conditions
9 1.1 mrg * are met:
10 1.1 mrg * 1. Redistributions of source code must retain the above copyright
11 1.1 mrg * notice, this list of conditions and the following disclaimer.
12 1.1 mrg * 2. Redistributions in binary form must reproduce the above copyright
13 1.1 mrg * notice, this list of conditions and the following disclaimer in the
14 1.1 mrg * documentation and/or other materials provided with the distribution.
15 1.6 mrg * 3. The name of the author may not be used to endorse or promote products
16 1.1 mrg * derived from this software without specific prior written permission.
17 1.1 mrg *
18 1.1 mrg * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
19 1.1 mrg * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
20 1.1 mrg * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
21 1.1 mrg * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
22 1.1 mrg * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
23 1.1 mrg * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24 1.1 mrg * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
25 1.1 mrg * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
26 1.1 mrg * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27 1.1 mrg * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28 1.1 mrg * SUCH DAMAGE.
29 1.1 mrg */
30 1.1 mrg
31 1.1 mrg #include <sys/param.h>
32 1.1 mrg #include <sys/errno.h>
33 1.1 mrg #include <sys/malloc.h>
34 1.1 mrg #include <sys/socket.h>
35 1.1 mrg #include <sys/socketvar.h>
36 1.1 mrg #include <sys/systm.h>
37 1.1 mrg #include <sys/proc.h>
38 1.1 mrg #include <sys/queue.h>
39 1.1 mrg
40 1.1 mrg #include <net/if.h>
41 1.1 mrg #include <net/pfil.h>
42 1.1 mrg
43 1.10 darrenr static void pfil_init __P((struct pfil_head *));
44 1.13 darrenr static int pfil_list_add(pfil_list_t *,
45 1.1 mrg int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)), int);
46 1.13 darrenr static int pfil_list_remove(pfil_list_t *,
47 1.1 mrg int (*) __P((void *, int, struct ifnet *, int, struct mbuf **)));
48 1.1 mrg
49 1.7 mrg static void
50 1.10 darrenr pfil_init(ph)
51 1.10 darrenr struct pfil_head *ph;
52 1.1 mrg {
53 1.7 mrg
54 1.10 darrenr TAILQ_INIT(&ph->ph_in);
55 1.10 darrenr TAILQ_INIT(&ph->ph_out);
56 1.10 darrenr ph->ph_init = 1;
57 1.1 mrg }
58 1.1 mrg
59 1.1 mrg /*
60 1.1 mrg * pfil_add_hook() adds a function to the packet filter hook. the
61 1.1 mrg * flags are:
62 1.1 mrg * PFIL_IN call me on incoming packets
63 1.1 mrg * PFIL_OUT call me on outgoing packets
64 1.1 mrg * PFIL_ALL call me on all of the above
65 1.1 mrg * PFIL_WAITOK OK to call malloc with M_WAITOK.
66 1.1 mrg */
67 1.13 darrenr int
68 1.11 darrenr pfil_add_hook(func, flags, ph)
69 1.1 mrg int (*func) __P((void *, int, struct ifnet *, int,
70 1.1 mrg struct mbuf **));
71 1.1 mrg int flags;
72 1.11 darrenr struct pfil_head *ph;
73 1.1 mrg {
74 1.13 darrenr int err = 0;
75 1.1 mrg
76 1.10 darrenr if (ph->ph_init == 0)
77 1.10 darrenr pfil_init(ph);
78 1.1 mrg
79 1.1 mrg if (flags & PFIL_IN)
80 1.14 darrenr err = pfil_list_add(&ph->ph_in, func, flags & ~PFIL_OUT);
81 1.15 mycroft if (err)
82 1.15 mycroft return err;
83 1.15 mycroft if (flags & PFIL_OUT)
84 1.14 darrenr err = pfil_list_add(&ph->ph_out, func, flags & ~PFIL_IN);
85 1.15 mycroft if (err) {
86 1.15 mycroft if (flags & PFIL_IN)
87 1.15 mycroft pfil_list_remove(&ph->ph_in, func);
88 1.15 mycroft return err;
89 1.15 mycroft }
90 1.15 mycroft return 0;
91 1.1 mrg }
92 1.1 mrg
93 1.13 darrenr static int
94 1.1 mrg pfil_list_add(list, func, flags)
95 1.1 mrg pfil_list_t *list;
96 1.1 mrg int (*func) __P((void *, int, struct ifnet *, int,
97 1.1 mrg struct mbuf **));
98 1.10 darrenr int flags;
99 1.1 mrg {
100 1.1 mrg struct packet_filter_hook *pfh;
101 1.1 mrg
102 1.1 mrg pfh = (struct packet_filter_hook *)malloc(sizeof(*pfh), M_IFADDR,
103 1.1 mrg flags & PFIL_WAITOK ? M_WAITOK : M_NOWAIT);
104 1.1 mrg if (pfh == NULL)
105 1.13 darrenr return ENOMEM;
106 1.1 mrg pfh->pfil_func = func;
107 1.7 mrg /*
108 1.7 mrg * insert the input list in reverse order of the output list
109 1.7 mrg * so that the same path is followed in or out of the kernel.
110 1.7 mrg */
111 1.12 darrenr
112 1.12 darrenr if (flags & PFIL_IN)
113 1.12 darrenr TAILQ_INSERT_HEAD(list, pfh, pfil_link);
114 1.12 darrenr else
115 1.12 darrenr TAILQ_INSERT_TAIL(list, pfh, pfil_link);
116 1.13 darrenr return 0;
117 1.1 mrg }
118 1.1 mrg
119 1.1 mrg /*
120 1.1 mrg * pfil_remove_hook removes a specific function from the packet filter
121 1.1 mrg * hook list.
122 1.1 mrg */
123 1.13 darrenr int
124 1.11 darrenr pfil_remove_hook(func, flags, ph)
125 1.1 mrg int (*func) __P((void *, int, struct ifnet *, int,
126 1.1 mrg struct mbuf **));
127 1.1 mrg int flags;
128 1.11 darrenr struct pfil_head *ph;
129 1.1 mrg {
130 1.13 darrenr int err = 0;
131 1.1 mrg
132 1.10 darrenr if (ph->ph_init == 0)
133 1.10 darrenr pfil_init(ph);
134 1.1 mrg
135 1.1 mrg if (flags & PFIL_IN)
136 1.13 darrenr err = pfil_list_remove(&ph->ph_in, func);
137 1.13 darrenr if ((err == 0) && (flags & PFIL_OUT))
138 1.13 darrenr err = pfil_list_remove(&ph->ph_out, func);
139 1.13 darrenr return err;
140 1.1 mrg }
141 1.1 mrg
142 1.1 mrg /*
143 1.1 mrg * pfil_list_remove is an internal function that takes a function off the
144 1.1 mrg * specified list.
145 1.1 mrg */
146 1.13 darrenr static int
147 1.1 mrg pfil_list_remove(list, func)
148 1.9 mrg pfil_list_t *list;
149 1.1 mrg int (*func) __P((void *, int, struct ifnet *, int,
150 1.1 mrg struct mbuf **));
151 1.1 mrg {
152 1.1 mrg struct packet_filter_hook *pfh;
153 1.1 mrg
154 1.9 mrg for (pfh = list->tqh_first; pfh; pfh = pfh->pfil_link.tqe_next)
155 1.1 mrg if (pfh->pfil_func == func) {
156 1.9 mrg TAILQ_REMOVE(list, pfh, pfil_link);
157 1.1 mrg free(pfh, M_IFADDR);
158 1.13 darrenr return 0;
159 1.1 mrg }
160 1.13 darrenr return ENOENT;
161 1.1 mrg }
162 1.1 mrg
163 1.1 mrg struct packet_filter_hook *
164 1.11 darrenr pfil_hook_get(flag, ph)
165 1.1 mrg int flag;
166 1.11 darrenr struct pfil_head *ph;
167 1.1 mrg {
168 1.10 darrenr if (ph->ph_init != 0)
169 1.1 mrg switch (flag) {
170 1.1 mrg case PFIL_IN:
171 1.10 darrenr return (ph->ph_in.tqh_first);
172 1.1 mrg case PFIL_OUT:
173 1.10 darrenr return (ph->ph_out.tqh_first);
174 1.1 mrg }
175 1.1 mrg return NULL;
176 1.1 mrg }
177