13#include <linux/netfilter/nf_tables.h>
16#include <libmnl/libmnl.h>
17#include <libnftnl/expr.h>
18#include <libnftnl/rule.h>
23 enum nft_registers dreg;
27nftnl_expr_fib_set(
struct nftnl_expr *e, uint16_t result,
28 const void *data, uint32_t data_len)
33 case NFTNL_EXPR_FIB_RESULT:
34 memcpy(&fib->result, data, data_len);
36 case NFTNL_EXPR_FIB_DREG:
37 memcpy(&fib->dreg, data, data_len);
39 case NFTNL_EXPR_FIB_FLAGS:
40 memcpy(&fib->flags, data, data_len);
47nftnl_expr_fib_get(
const struct nftnl_expr *e, uint16_t result,
53 case NFTNL_EXPR_FIB_RESULT:
54 *data_len =
sizeof(fib->result);
56 case NFTNL_EXPR_FIB_DREG:
57 *data_len =
sizeof(fib->dreg);
59 case NFTNL_EXPR_FIB_FLAGS:
60 *data_len =
sizeof(fib->flags);
66static int nftnl_expr_fib_cb(
const struct nlattr *attr,
void *data)
68 const struct nlattr **tb = data;
69 int type = mnl_attr_get_type(attr);
71 if (mnl_attr_type_valid(attr, NFTA_FIB_MAX) < 0)
78 if (mnl_attr_validate(attr, MNL_TYPE_U32) < 0)
88nftnl_expr_fib_build(
struct nlmsghdr *nlh,
const struct nftnl_expr *e)
92 if (e->flags & (1 << NFTNL_EXPR_FIB_FLAGS))
93 mnl_attr_put_u32(nlh, NFTA_FIB_FLAGS, htonl(fib->flags));
94 if (e->flags & (1 << NFTNL_EXPR_FIB_RESULT))
95 mnl_attr_put_u32(nlh, NFTA_FIB_RESULT, htonl(fib->result));
96 if (e->flags & (1 << NFTNL_EXPR_FIB_DREG))
97 mnl_attr_put_u32(nlh, NFTA_FIB_DREG, htonl(fib->dreg));
101nftnl_expr_fib_parse(
struct nftnl_expr *e,
struct nlattr *attr)
104 struct nlattr *tb[NFTA_FIB_MAX+1] = {};
107 if (mnl_attr_parse_nested(attr, nftnl_expr_fib_cb, tb) < 0)
110 if (tb[NFTA_FIB_RESULT]) {
111 fib->result = ntohl(mnl_attr_get_u32(tb[NFTA_FIB_RESULT]));
112 e->flags |= (1 << NFTNL_EXPR_FIB_RESULT);
114 if (tb[NFTA_FIB_DREG]) {
115 fib->dreg = ntohl(mnl_attr_get_u32(tb[NFTA_FIB_DREG]));
116 e->flags |= (1 << NFTNL_EXPR_FIB_DREG);
118 if (tb[NFTA_FIB_FLAGS]) {
119 fib->flags = ntohl(mnl_attr_get_u32(tb[NFTA_FIB_FLAGS]));
120 e->flags |= (1 << NFTNL_EXPR_FIB_FLAGS);
125static const char *fib_type[NFT_FIB_RESULT_MAX + 1] = {
126 [NFT_FIB_RESULT_OIF] =
"oif",
127 [NFT_FIB_RESULT_OIFNAME] =
"oifname",
128 [NFT_FIB_RESULT_ADDRTYPE] =
"type",
131static const char *fib_type_str(
enum nft_fib_result r)
133 if (r <= NFT_FIB_RESULT_MAX)
140nftnl_expr_fib_snprintf(
char *buf,
size_t remain,
141 uint32_t printflags,
const struct nftnl_expr *e)
144 uint32_t flags = fib->flags & ~NFTA_FIB_F_PRESENT;
145 uint32_t present_flag = fib->flags & NFTA_FIB_F_PRESENT;
146 int offset = 0, ret, i;
147 static const struct {
151 { NFTA_FIB_F_SADDR,
"saddr" },
152 { NFTA_FIB_F_DADDR,
"daddr" },
153 { NFTA_FIB_F_MARK,
"mark" },
154 { NFTA_FIB_F_IIF,
"iif" },
155 { NFTA_FIB_F_OIF,
"oif" },
158 for (i = 0; i < (
sizeof(tab) /
sizeof(tab[0])); i++) {
159 if (flags & tab[i].bit) {
160 ret = snprintf(buf + offset, remain,
"%s ",
162 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
164 flags &= ~tab[i].bit;
166 ret = snprintf(buf + offset, remain,
". ");
167 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
173 ret = snprintf(buf + offset, remain,
"unknown 0x%" PRIx32,
175 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
178 ret = snprintf(buf + offset, remain,
"%s%s => reg %d ",
179 fib_type_str(fib->result),
180 present_flag ?
" present" :
"",
182 SNPRINTF_BUFFER_SIZE(ret, remain, offset);
187static struct attr_policy fib_attr_policy[__NFTNL_EXPR_FIB_MAX] = {
188 [NFTNL_EXPR_FIB_DREG] = { .maxlen =
sizeof(uint32_t) },
189 [NFTNL_EXPR_FIB_RESULT] = { .maxlen =
sizeof(uint32_t) },
190 [NFTNL_EXPR_FIB_FLAGS] = { .maxlen =
sizeof(uint32_t) },
193struct expr_ops expr_ops_fib = {
196 .nftnl_max_attr = __NFTNL_EXPR_FIB_MAX - 1,
197 .attr_policy = fib_attr_policy,
198 .set = nftnl_expr_fib_set,
199 .get = nftnl_expr_fib_get,
200 .parse = nftnl_expr_fib_parse,
201 .build = nftnl_expr_fib_build,
202 .output = nftnl_expr_fib_snprintf,