pfil.c revision 1.19 1 1.19 thorpej /* $NetBSD: pfil.c,v 1.19 2000/12/28 21:40:59 thorpej Exp $ */
2 1.1 mrg
3 1.1 mrg /*
4 1.1 mrg * Copyright (c) 1996 Matthew R. Green
5 1.1 mrg * All rights reserved.
6 1.1 mrg *
7 1.1 mrg * Redistribution and use in source and binary forms, with or without
8 1.1 mrg * modification, are permitted provided that the following conditions
9 1.1 mrg * are met:
10 1.1 mrg * 1. Redistributions of source code must retain the above copyright
11 1.1 mrg * notice, this list of conditions and the following disclaimer.
12 1.1 mrg * 2. Redistributions in binary form must reproduce the above copyright
13 1.1 mrg * notice, this list of conditions and the following disclaimer in the
14 1.1 mrg * documentation and/or other materials provided with the distribution.
15 1.6 mrg * 3. The name of the author may not be used to endorse or promote products
16 1.1 mrg * derived from this software without specific prior written permission.
17 1.1 mrg *
18 1.1 mrg * THIS SOFTWARE IS PROVIDED BY THE AUTHOR ``AS IS'' AND ANY EXPRESS OR
19 1.1 mrg * IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES
20 1.1 mrg * OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED.
21 1.1 mrg * IN NO EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT,
22 1.1 mrg * INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING,
23 1.1 mrg * BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;
24 1.1 mrg * LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED
25 1.1 mrg * AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
26 1.1 mrg * OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
27 1.1 mrg * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
28 1.1 mrg * SUCH DAMAGE.
29 1.1 mrg */
30 1.1 mrg
31 1.1 mrg #include <sys/param.h>
32 1.1 mrg #include <sys/errno.h>
33 1.1 mrg #include <sys/malloc.h>
34 1.1 mrg #include <sys/socket.h>
35 1.1 mrg #include <sys/socketvar.h>
36 1.1 mrg #include <sys/systm.h>
37 1.1 mrg #include <sys/proc.h>
38 1.1 mrg #include <sys/queue.h>
39 1.1 mrg
40 1.1 mrg #include <net/if.h>
41 1.1 mrg #include <net/pfil.h>
42 1.1 mrg
43 1.13 darrenr static int pfil_list_add(pfil_list_t *,
44 1.16 thorpej int (*)(void *, struct mbuf **, struct ifnet *, int), void *, int);
45 1.16 thorpej
46 1.13 darrenr static int pfil_list_remove(pfil_list_t *,
47 1.16 thorpej int (*)(void *, struct mbuf **, struct ifnet *, int), void *);
48 1.16 thorpej
49 1.16 thorpej LIST_HEAD(, pfil_head) pfil_head_list =
50 1.16 thorpej LIST_HEAD_INITIALIZER(&pfil_head_list);
51 1.16 thorpej
52 1.16 thorpej /*
53 1.16 thorpej * pfil_run_hooks() runs the specified packet filter hooks.
54 1.16 thorpej */
55 1.16 thorpej int
56 1.16 thorpej pfil_run_hooks(struct pfil_head *ph, struct mbuf **mp, struct ifnet *ifp,
57 1.16 thorpej int dir)
58 1.16 thorpej {
59 1.16 thorpej struct packet_filter_hook *pfh;
60 1.16 thorpej struct mbuf *m = *mp;
61 1.16 thorpej int rv = 0;
62 1.16 thorpej
63 1.16 thorpej for (pfh = pfil_hook_get(dir, ph); pfh != NULL;
64 1.16 thorpej pfh = TAILQ_NEXT(pfh, pfil_link)) {
65 1.16 thorpej if (pfh->pfil_func != NULL) {
66 1.16 thorpej rv = (*pfh->pfil_func)(pfh->pfil_arg, &m, ifp, dir);
67 1.16 thorpej if (rv != 0 || m == NULL)
68 1.16 thorpej break;
69 1.16 thorpej }
70 1.16 thorpej }
71 1.16 thorpej
72 1.16 thorpej *mp = m;
73 1.16 thorpej return (rv);
74 1.16 thorpej }
75 1.1 mrg
76 1.16 thorpej /*
77 1.16 thorpej * pfil_head_register() registers a pfil_head with the packet filter
78 1.16 thorpej * hook mechanism.
79 1.16 thorpej */
80 1.16 thorpej int
81 1.16 thorpej pfil_head_register(struct pfil_head *ph)
82 1.1 mrg {
83 1.16 thorpej struct pfil_head *lph;
84 1.16 thorpej
85 1.16 thorpej for (lph = LIST_FIRST(&pfil_head_list); lph != NULL;
86 1.16 thorpej lph = LIST_NEXT(lph, ph_list)) {
87 1.19 thorpej if (ph->ph_type == lph->ph_type &&
88 1.19 thorpej ph->ph_un.phu_val == lph->ph_un.phu_val)
89 1.16 thorpej return EEXIST;
90 1.16 thorpej }
91 1.7 mrg
92 1.10 darrenr TAILQ_INIT(&ph->ph_in);
93 1.10 darrenr TAILQ_INIT(&ph->ph_out);
94 1.16 thorpej
95 1.16 thorpej LIST_INSERT_HEAD(&pfil_head_list, ph, ph_list);
96 1.16 thorpej
97 1.16 thorpej return (0);
98 1.16 thorpej }
99 1.16 thorpej
100 1.16 thorpej /*
101 1.16 thorpej * pfil_head_unregister() removes a pfil_head from the packet filter
102 1.16 thorpej * hook mechanism.
103 1.16 thorpej */
104 1.16 thorpej int
105 1.16 thorpej pfil_head_unregister(struct pfil_head *pfh)
106 1.16 thorpej {
107 1.16 thorpej
108 1.16 thorpej LIST_REMOVE(pfh, ph_list);
109 1.16 thorpej return (0);
110 1.16 thorpej }
111 1.16 thorpej
112 1.16 thorpej /*
113 1.16 thorpej * pfil_head_get() returns the pfil_head for a given key/dlt.
114 1.16 thorpej */
115 1.16 thorpej struct pfil_head *
116 1.19 thorpej pfil_head_get(int type, u_long val)
117 1.16 thorpej {
118 1.16 thorpej struct pfil_head *ph;
119 1.16 thorpej
120 1.16 thorpej for (ph = LIST_FIRST(&pfil_head_list); ph != NULL;
121 1.16 thorpej ph = LIST_NEXT(ph, ph_list)) {
122 1.19 thorpej if (ph->ph_type == type &&
123 1.19 thorpej ph->ph_un.phu_val == val)
124 1.16 thorpej break;
125 1.16 thorpej }
126 1.16 thorpej
127 1.16 thorpej return (ph);
128 1.1 mrg }
129 1.1 mrg
130 1.1 mrg /*
131 1.1 mrg * pfil_add_hook() adds a function to the packet filter hook. the
132 1.1 mrg * flags are:
133 1.1 mrg * PFIL_IN call me on incoming packets
134 1.1 mrg * PFIL_OUT call me on outgoing packets
135 1.1 mrg * PFIL_ALL call me on all of the above
136 1.1 mrg * PFIL_WAITOK OK to call malloc with M_WAITOK.
137 1.1 mrg */
138 1.13 darrenr int
139 1.16 thorpej pfil_add_hook(int (*func)(void *, struct mbuf **, struct ifnet *, int),
140 1.16 thorpej void *arg, int flags, struct pfil_head *ph)
141 1.1 mrg {
142 1.13 darrenr int err = 0;
143 1.1 mrg
144 1.16 thorpej if (flags & PFIL_IN) {
145 1.16 thorpej err = pfil_list_add(&ph->ph_in, func, arg, flags & ~PFIL_OUT);
146 1.16 thorpej if (err)
147 1.16 thorpej return err;
148 1.16 thorpej }
149 1.16 thorpej if (flags & PFIL_OUT) {
150 1.16 thorpej err = pfil_list_add(&ph->ph_out, func, arg, flags & ~PFIL_IN);
151 1.16 thorpej if (err) {
152 1.16 thorpej if (flags & PFIL_IN)
153 1.16 thorpej pfil_list_remove(&ph->ph_in, func, arg);
154 1.16 thorpej return err;
155 1.16 thorpej }
156 1.15 mycroft }
157 1.15 mycroft return 0;
158 1.1 mrg }
159 1.1 mrg
160 1.13 darrenr static int
161 1.16 thorpej pfil_list_add(pfil_list_t *list,
162 1.16 thorpej int (*func)(void *, struct mbuf **, struct ifnet *, int), void *arg,
163 1.16 thorpej int flags)
164 1.1 mrg {
165 1.1 mrg struct packet_filter_hook *pfh;
166 1.1 mrg
167 1.16 thorpej /*
168 1.16 thorpej * First make sure the hook is not already there.
169 1.16 thorpej */
170 1.16 thorpej for (pfh = TAILQ_FIRST(list); pfh != NULL;
171 1.16 thorpej pfh = TAILQ_NEXT(pfh, pfil_link)) {
172 1.16 thorpej if (pfh->pfil_func == func &&
173 1.16 thorpej pfh->pfil_arg == arg)
174 1.16 thorpej return EEXIST;
175 1.16 thorpej }
176 1.16 thorpej
177 1.1 mrg pfh = (struct packet_filter_hook *)malloc(sizeof(*pfh), M_IFADDR,
178 1.16 thorpej (flags & PFIL_WAITOK) ? M_WAITOK : M_NOWAIT);
179 1.1 mrg if (pfh == NULL)
180 1.13 darrenr return ENOMEM;
181 1.16 thorpej
182 1.1 mrg pfh->pfil_func = func;
183 1.16 thorpej pfh->pfil_arg = arg;
184 1.16 thorpej
185 1.7 mrg /*
186 1.7 mrg * insert the input list in reverse order of the output list
187 1.7 mrg * so that the same path is followed in or out of the kernel.
188 1.7 mrg */
189 1.12 darrenr if (flags & PFIL_IN)
190 1.12 darrenr TAILQ_INSERT_HEAD(list, pfh, pfil_link);
191 1.12 darrenr else
192 1.12 darrenr TAILQ_INSERT_TAIL(list, pfh, pfil_link);
193 1.16 thorpej
194 1.13 darrenr return 0;
195 1.1 mrg }
196 1.1 mrg
197 1.1 mrg /*
198 1.1 mrg * pfil_remove_hook removes a specific function from the packet filter
199 1.1 mrg * hook list.
200 1.1 mrg */
201 1.13 darrenr int
202 1.16 thorpej pfil_remove_hook(int (*func)(void *, struct mbuf **, struct ifnet *, int),
203 1.16 thorpej void *arg, int flags, struct pfil_head *ph)
204 1.1 mrg {
205 1.13 darrenr int err = 0;
206 1.1 mrg
207 1.1 mrg if (flags & PFIL_IN)
208 1.16 thorpej err = pfil_list_remove(&ph->ph_in, func, arg);
209 1.13 darrenr if ((err == 0) && (flags & PFIL_OUT))
210 1.16 thorpej err = pfil_list_remove(&ph->ph_out, func, arg);
211 1.13 darrenr return err;
212 1.1 mrg }
213 1.1 mrg
214 1.1 mrg /*
215 1.1 mrg * pfil_list_remove is an internal function that takes a function off the
216 1.1 mrg * specified list.
217 1.1 mrg */
218 1.13 darrenr static int
219 1.16 thorpej pfil_list_remove(pfil_list_t *list,
220 1.16 thorpej int (*func)(void *, struct mbuf **, struct ifnet *, int), void *arg)
221 1.1 mrg {
222 1.1 mrg struct packet_filter_hook *pfh;
223 1.1 mrg
224 1.16 thorpej for (pfh = TAILQ_FIRST(list); pfh != NULL;
225 1.16 thorpej pfh = TAILQ_NEXT(pfh, pfil_link)) {
226 1.16 thorpej if (pfh->pfil_func == func && pfh->pfil_arg == arg) {
227 1.9 mrg TAILQ_REMOVE(list, pfh, pfil_link);
228 1.1 mrg free(pfh, M_IFADDR);
229 1.13 darrenr return 0;
230 1.1 mrg }
231 1.16 thorpej }
232 1.13 darrenr return ENOENT;
233 1.1 mrg }
234