netfilter: ipset: Introduce the counter extension in the core

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

1 files changed, 10 insertions, 0 deletions

diff --git a/net/netfilter/ipset/ip_set_core.c b/net/netfilter/ipset/ip_set_core.c
index 4486285d10da..f6d878a46c43 100644
--- a/net/netfilter/ipset/ip_set_core.c
+++ b/net/netfilter/ipset/ip_set_core.c
@@ -324,6 +324,16 @@ ip_set_get_extensions(struct ip_set *set, struct nlattr *tb[],
                         return -IPSET_ERR_TIMEOUT;
                 ext->timeout = ip_set_timeout_uget(tb[IPSET_ATTR_TIMEOUT]);
         }
+        if (tb[IPSET_ATTR_BYTES] || tb[IPSET_ATTR_PACKETS]) {
+                if (!(set->extensions & IPSET_EXT_COUNTER))
+                        return -IPSET_ERR_COUNTER;
+                if (tb[IPSET_ATTR_BYTES])
+                        ext->bytes = be64_to_cpu(nla_get_be64(
+                                                 tb[IPSET_ATTR_BYTES]));
+                if (tb[IPSET_ATTR_PACKETS])
+                        ext->packets = be64_to_cpu(nla_get_be64(
+                                                   tb[IPSET_ATTR_PACKETS]));
+        }
         return 0;
 }
 EXPORT_SYMBOL_GPL(ip_set_get_extensions);