aboutsummaryrefslogtreecommitdiffstats
path: root/net
diff options
context:
space:
mode:
Diffstat (limited to 'net')
-rw-r--r--net/ipv6/netfilter/ip6_queue.c101
1 files changed, 37 insertions, 64 deletions
diff --git a/net/ipv6/netfilter/ip6_queue.c b/net/ipv6/netfilter/ip6_queue.c
index 243a00bcd3df..7d0780d02d0b 100644
--- a/net/ipv6/netfilter/ip6_queue.c
+++ b/net/ipv6/netfilter/ip6_queue.c
@@ -75,52 +75,6 @@ __ipq_enqueue_entry(struct ipq_queue_entry *entry)
75 queue_total++; 75 queue_total++;
76} 76}
77 77
78/*
79 * Find and return a queued entry matched by cmpfn, or return the last
80 * entry if cmpfn is NULL.
81 */
82static inline struct ipq_queue_entry *
83__ipq_find_entry(ipq_cmpfn cmpfn, unsigned long data)
84{
85 struct ipq_queue_entry *entry;
86
87 list_for_each_entry(entry, &queue_list, list) {
88 if (!cmpfn || cmpfn(entry, data))
89 return entry;
90 }
91 return NULL;
92}
93
94static inline void
95__ipq_dequeue_entry(struct ipq_queue_entry *entry)
96{
97 list_del(&entry->list);
98 queue_total--;
99}
100
101static inline struct ipq_queue_entry *
102__ipq_find_dequeue_entry(ipq_cmpfn cmpfn, unsigned long data)
103{
104 struct ipq_queue_entry *entry;
105
106 entry = __ipq_find_entry(cmpfn, data);
107 if (entry == NULL)
108 return NULL;
109
110 __ipq_dequeue_entry(entry);
111 return entry;
112}
113
114
115static inline void
116__ipq_flush(int verdict)
117{
118 struct ipq_queue_entry *entry;
119
120 while ((entry = __ipq_find_dequeue_entry(NULL, 0)))
121 ipq_issue_verdict(entry, verdict);
122}
123
124static inline int 78static inline int
125__ipq_set_mode(unsigned char mode, unsigned int range) 79__ipq_set_mode(unsigned char mode, unsigned int range)
126{ 80{
@@ -147,31 +101,59 @@ __ipq_set_mode(unsigned char mode, unsigned int range)
147 return status; 101 return status;
148} 102}
149 103
104static void __ipq_flush(ipq_cmpfn cmpfn, unsigned long data);
105
150static inline void 106static inline void
151__ipq_reset(void) 107__ipq_reset(void)
152{ 108{
153 peer_pid = 0; 109 peer_pid = 0;
154 net_disable_timestamp(); 110 net_disable_timestamp();
155 __ipq_set_mode(IPQ_COPY_NONE, 0); 111 __ipq_set_mode(IPQ_COPY_NONE, 0);
156 __ipq_flush(NF_DROP); 112 __ipq_flush(NULL, 0);
157} 113}
158 114
159static struct ipq_queue_entry * 115static struct ipq_queue_entry *
160ipq_find_dequeue_entry(ipq_cmpfn cmpfn, unsigned long data) 116ipq_find_dequeue_entry(unsigned long id)
161{ 117{
162 struct ipq_queue_entry *entry; 118 struct ipq_queue_entry *entry = NULL, *i;
163 119
164 write_lock_bh(&queue_lock); 120 write_lock_bh(&queue_lock);
165 entry = __ipq_find_dequeue_entry(cmpfn, data); 121
122 list_for_each_entry(i, &queue_list, list) {
123 if ((unsigned long)i == id) {
124 entry = i;
125 break;
126 }
127 }
128
129 if (entry) {
130 list_del(&entry->list);
131 queue_total--;
132 }
133
166 write_unlock_bh(&queue_lock); 134 write_unlock_bh(&queue_lock);
167 return entry; 135 return entry;
168} 136}
169 137
170static void 138static void
171ipq_flush(int verdict) 139__ipq_flush(ipq_cmpfn cmpfn, unsigned long data)
140{
141 struct ipq_queue_entry *entry, *next;
142
143 list_for_each_entry_safe(entry, next, &queue_list, list) {
144 if (!cmpfn || cmpfn(entry, data)) {
145 list_del(&entry->list);
146 queue_total--;
147 ipq_issue_verdict(entry, NF_DROP);
148 }
149 }
150}
151
152static void
153ipq_flush(ipq_cmpfn cmpfn, unsigned long data)
172{ 154{
173 write_lock_bh(&queue_lock); 155 write_lock_bh(&queue_lock);
174 __ipq_flush(verdict); 156 __ipq_flush(cmpfn, data);
175 write_unlock_bh(&queue_lock); 157 write_unlock_bh(&queue_lock);
176} 158}
177 159
@@ -364,12 +346,6 @@ ipq_mangle_ipv6(ipq_verdict_msg_t *v, struct ipq_queue_entry *e)
364 return 0; 346 return 0;
365} 347}
366 348
367static inline int
368id_cmp(struct ipq_queue_entry *e, unsigned long id)
369{
370 return (id == (unsigned long )e);
371}
372
373static int 349static int
374ipq_set_verdict(struct ipq_verdict_msg *vmsg, unsigned int len) 350ipq_set_verdict(struct ipq_verdict_msg *vmsg, unsigned int len)
375{ 351{
@@ -378,7 +354,7 @@ ipq_set_verdict(struct ipq_verdict_msg *vmsg, unsigned int len)
378 if (vmsg->value > NF_MAX_VERDICT) 354 if (vmsg->value > NF_MAX_VERDICT)
379 return -EINVAL; 355 return -EINVAL;
380 356
381 entry = ipq_find_dequeue_entry(id_cmp, vmsg->id); 357 entry = ipq_find_dequeue_entry(vmsg->id);
382 if (entry == NULL) 358 if (entry == NULL)
383 return -ENOENT; 359 return -ENOENT;
384 else { 360 else {
@@ -449,10 +425,7 @@ dev_cmp(struct ipq_queue_entry *entry, unsigned long ifindex)
449static void 425static void
450ipq_dev_drop(int ifindex) 426ipq_dev_drop(int ifindex)
451{ 427{
452 struct ipq_queue_entry *entry; 428 ipq_flush(dev_cmp, ifindex);
453
454 while ((entry = ipq_find_dequeue_entry(dev_cmp, ifindex)) != NULL)
455 ipq_issue_verdict(entry, NF_DROP);
456} 429}
457 430
458#define RCV_SKB_FAIL(err) do { netlink_ack(skb, nlh, (err)); return; } while (0) 431#define RCV_SKB_FAIL(err) do { netlink_ack(skb, nlh, (err)); return; } while (0)
@@ -689,7 +662,7 @@ static void __exit ip6_queue_fini(void)
689{ 662{
690 nf_unregister_queue_handlers(&nfqh); 663 nf_unregister_queue_handlers(&nfqh);
691 synchronize_net(); 664 synchronize_net();
692 ipq_flush(NF_DROP); 665 ipq_flush(NULL, 0);
693 666
694 unregister_sysctl_table(ipq_sysctl_header); 667 unregister_sysctl_table(ipq_sysctl_header);
695 unregister_netdevice_notifier(&ipq_dev_notifier); 668 unregister_netdevice_notifier(&ipq_dev_notifier);