Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1 | /* Copyright (C) 2013 Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> |
| 2 | * |
| 3 | * This program is free software; you can redistribute it and/or modify |
| 4 | * it under the terms of the GNU General Public License version 2 as |
| 5 | * published by the Free Software Foundation. |
| 6 | */ |
| 7 | |
| 8 | #ifndef _IP_SET_HASH_GEN_H |
| 9 | #define _IP_SET_HASH_GEN_H |
| 10 | |
| 11 | #include <linux/rcupdate.h> |
| 12 | #include <linux/jhash.h> |
| 13 | #include <linux/netfilter/ipset/ip_set_timeout.h> |
| 14 | #ifndef rcu_dereference_bh |
| 15 | #define rcu_dereference_bh(p) rcu_dereference(p) |
| 16 | #endif |
| 17 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 18 | #define rcu_dereference_bh_nfnl(p) rcu_dereference_bh_check(p, 1) |
| 19 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 20 | /* Hashing which uses arrays to resolve clashing. The hash table is resized |
| 21 | * (doubled) when searching becomes too long. |
| 22 | * Internally jhash is used with the assumption that the size of the |
| 23 | * stored data is a multiple of sizeof(u32). If storage supports timeout, |
| 24 | * the timeout field must be the last one in the data structure - that field |
| 25 | * is ignored when computing the hash key. |
| 26 | * |
| 27 | * Readers and resizing |
| 28 | * |
| 29 | * Resizing can be triggered by userspace command only, and those |
| 30 | * are serialized by the nfnl mutex. During resizing the set is |
| 31 | * read-locked, so the only possible concurrent operations are |
| 32 | * the kernel side readers. Those must be protected by proper RCU locking. |
| 33 | */ |
| 34 | |
| 35 | /* Number of elements to store in an initial array block */ |
| 36 | #define AHASH_INIT_SIZE 4 |
| 37 | /* Max number of elements to store in an array block */ |
| 38 | #define AHASH_MAX_SIZE (3*AHASH_INIT_SIZE) |
| 39 | |
| 40 | /* Max number of elements can be tuned */ |
| 41 | #ifdef IP_SET_HASH_WITH_MULTI |
| 42 | #define AHASH_MAX(h) ((h)->ahash_max) |
| 43 | |
| 44 | static inline u8 |
| 45 | tune_ahash_max(u8 curr, u32 multi) |
| 46 | { |
| 47 | u32 n; |
| 48 | |
| 49 | if (multi < curr) |
| 50 | return curr; |
| 51 | |
| 52 | n = curr + AHASH_INIT_SIZE; |
| 53 | /* Currently, at listing one hash bucket must fit into a message. |
| 54 | * Therefore we have a hard limit here. |
| 55 | */ |
| 56 | return n > curr && n <= 64 ? n : curr; |
| 57 | } |
| 58 | #define TUNE_AHASH_MAX(h, multi) \ |
| 59 | ((h)->ahash_max = tune_ahash_max((h)->ahash_max, multi)) |
| 60 | #else |
| 61 | #define AHASH_MAX(h) AHASH_MAX_SIZE |
| 62 | #define TUNE_AHASH_MAX(h, multi) |
| 63 | #endif |
| 64 | |
| 65 | /* A hash bucket */ |
| 66 | struct hbucket { |
| 67 | void *value; /* the array of the values */ |
| 68 | u8 size; /* size of the array */ |
| 69 | u8 pos; /* position of the first free entry */ |
| 70 | }; |
| 71 | |
| 72 | /* The hash table: the table size stored here in order to make resizing easy */ |
| 73 | struct htable { |
| 74 | u8 htable_bits; /* size of hash table == 2^htable_bits */ |
| 75 | struct hbucket bucket[0]; /* hashtable buckets */ |
| 76 | }; |
| 77 | |
| 78 | #define hbucket(h, i) (&((h)->bucket[i])) |
| 79 | |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 80 | #ifndef IPSET_NET_COUNT |
| 81 | #define IPSET_NET_COUNT 1 |
| 82 | #endif |
| 83 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 84 | /* Book-keeping of the prefixes added to the set */ |
| 85 | struct net_prefixes { |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 86 | u32 nets[IPSET_NET_COUNT]; /* number of elements per cidr */ |
| 87 | u8 cidr[IPSET_NET_COUNT]; /* the different cidr values in the set */ |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 88 | }; |
| 89 | |
| 90 | /* Compute the hash table size */ |
| 91 | static size_t |
| 92 | htable_size(u8 hbits) |
| 93 | { |
| 94 | size_t hsize; |
| 95 | |
| 96 | /* We must fit both into u32 in jhash and size_t */ |
| 97 | if (hbits > 31) |
| 98 | return 0; |
| 99 | hsize = jhash_size(hbits); |
| 100 | if ((((size_t)-1) - sizeof(struct htable))/sizeof(struct hbucket) |
| 101 | < hsize) |
| 102 | return 0; |
| 103 | |
| 104 | return hsize * sizeof(struct hbucket) + sizeof(struct htable); |
| 105 | } |
| 106 | |
| 107 | /* Compute htable_bits from the user input parameter hashsize */ |
| 108 | static u8 |
| 109 | htable_bits(u32 hashsize) |
| 110 | { |
| 111 | /* Assume that hashsize == 2^htable_bits */ |
| 112 | u8 bits = fls(hashsize - 1); |
| 113 | if (jhash_size(bits) != hashsize) |
| 114 | /* Round up to the first 2^n value */ |
| 115 | bits = fls(hashsize); |
| 116 | |
| 117 | return bits; |
| 118 | } |
| 119 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 120 | static int |
| 121 | hbucket_elem_add(struct hbucket *n, u8 ahash_max, size_t dsize) |
| 122 | { |
| 123 | if (n->pos >= n->size) { |
| 124 | void *tmp; |
| 125 | |
| 126 | if (n->size >= ahash_max) |
| 127 | /* Trigger rehashing */ |
| 128 | return -EAGAIN; |
| 129 | |
| 130 | tmp = kzalloc((n->size + AHASH_INIT_SIZE) * dsize, |
| 131 | GFP_ATOMIC); |
| 132 | if (!tmp) |
| 133 | return -ENOMEM; |
| 134 | if (n->size) { |
| 135 | memcpy(tmp, n->value, n->size * dsize); |
| 136 | kfree(n->value); |
| 137 | } |
| 138 | n->value = tmp; |
| 139 | n->size += AHASH_INIT_SIZE; |
| 140 | } |
| 141 | return 0; |
| 142 | } |
| 143 | |
| 144 | #ifdef IP_SET_HASH_WITH_NETS |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 145 | #if IPSET_NET_COUNT > 1 |
| 146 | #define __CIDR(cidr, i) (cidr[i]) |
| 147 | #else |
| 148 | #define __CIDR(cidr, i) (cidr) |
| 149 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 150 | #ifdef IP_SET_HASH_WITH_NETS_PACKED |
| 151 | /* When cidr is packed with nomatch, cidr - 1 is stored in the entry */ |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 152 | #define CIDR(cidr, i) (__CIDR(cidr, i) + 1) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 153 | #else |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 154 | #define CIDR(cidr, i) (__CIDR(cidr, i)) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 155 | #endif |
| 156 | |
| 157 | #define SET_HOST_MASK(family) (family == AF_INET ? 32 : 128) |
| 158 | |
| 159 | #ifdef IP_SET_HASH_WITH_MULTI |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 160 | #define NLEN(family) (SET_HOST_MASK(family) + 1) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 161 | #else |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 162 | #define NLEN(family) SET_HOST_MASK(family) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 163 | #endif |
| 164 | |
| 165 | #else |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 166 | #define NLEN(family) 0 |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 167 | #endif /* IP_SET_HASH_WITH_NETS */ |
| 168 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 169 | #endif /* _IP_SET_HASH_GEN_H */ |
| 170 | |
| 171 | /* Family dependent templates */ |
| 172 | |
| 173 | #undef ahash_data |
| 174 | #undef mtype_data_equal |
| 175 | #undef mtype_do_data_match |
| 176 | #undef mtype_data_set_flags |
| 177 | #undef mtype_data_reset_flags |
| 178 | #undef mtype_data_netmask |
| 179 | #undef mtype_data_list |
| 180 | #undef mtype_data_next |
| 181 | #undef mtype_elem |
| 182 | |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 183 | #undef mtype_ahash_destroy |
| 184 | #undef mtype_ext_cleanup |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 185 | #undef mtype_add_cidr |
| 186 | #undef mtype_del_cidr |
| 187 | #undef mtype_ahash_memsize |
| 188 | #undef mtype_flush |
| 189 | #undef mtype_destroy |
| 190 | #undef mtype_gc_init |
| 191 | #undef mtype_same_set |
| 192 | #undef mtype_kadt |
| 193 | #undef mtype_uadt |
| 194 | #undef mtype |
| 195 | |
| 196 | #undef mtype_add |
| 197 | #undef mtype_del |
| 198 | #undef mtype_test_cidrs |
| 199 | #undef mtype_test |
| 200 | #undef mtype_expire |
| 201 | #undef mtype_resize |
| 202 | #undef mtype_head |
| 203 | #undef mtype_list |
| 204 | #undef mtype_gc |
| 205 | #undef mtype_gc_init |
| 206 | #undef mtype_variant |
| 207 | #undef mtype_data_match |
| 208 | |
| 209 | #undef HKEY |
| 210 | |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 211 | #define mtype_data_equal IPSET_TOKEN(MTYPE, _data_equal) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 212 | #ifdef IP_SET_HASH_WITH_NETS |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 213 | #define mtype_do_data_match IPSET_TOKEN(MTYPE, _do_data_match) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 214 | #else |
| 215 | #define mtype_do_data_match(d) 1 |
| 216 | #endif |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 217 | #define mtype_data_set_flags IPSET_TOKEN(MTYPE, _data_set_flags) |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 218 | #define mtype_data_reset_elem IPSET_TOKEN(MTYPE, _data_reset_elem) |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 219 | #define mtype_data_reset_flags IPSET_TOKEN(MTYPE, _data_reset_flags) |
| 220 | #define mtype_data_netmask IPSET_TOKEN(MTYPE, _data_netmask) |
| 221 | #define mtype_data_list IPSET_TOKEN(MTYPE, _data_list) |
| 222 | #define mtype_data_next IPSET_TOKEN(MTYPE, _data_next) |
| 223 | #define mtype_elem IPSET_TOKEN(MTYPE, _elem) |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 224 | #define mtype_ahash_destroy IPSET_TOKEN(MTYPE, _ahash_destroy) |
| 225 | #define mtype_ext_cleanup IPSET_TOKEN(MTYPE, _ext_cleanup) |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 226 | #define mtype_add_cidr IPSET_TOKEN(MTYPE, _add_cidr) |
| 227 | #define mtype_del_cidr IPSET_TOKEN(MTYPE, _del_cidr) |
| 228 | #define mtype_ahash_memsize IPSET_TOKEN(MTYPE, _ahash_memsize) |
| 229 | #define mtype_flush IPSET_TOKEN(MTYPE, _flush) |
| 230 | #define mtype_destroy IPSET_TOKEN(MTYPE, _destroy) |
| 231 | #define mtype_gc_init IPSET_TOKEN(MTYPE, _gc_init) |
| 232 | #define mtype_same_set IPSET_TOKEN(MTYPE, _same_set) |
| 233 | #define mtype_kadt IPSET_TOKEN(MTYPE, _kadt) |
| 234 | #define mtype_uadt IPSET_TOKEN(MTYPE, _uadt) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 235 | #define mtype MTYPE |
| 236 | |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 237 | #define mtype_add IPSET_TOKEN(MTYPE, _add) |
| 238 | #define mtype_del IPSET_TOKEN(MTYPE, _del) |
| 239 | #define mtype_test_cidrs IPSET_TOKEN(MTYPE, _test_cidrs) |
| 240 | #define mtype_test IPSET_TOKEN(MTYPE, _test) |
| 241 | #define mtype_expire IPSET_TOKEN(MTYPE, _expire) |
| 242 | #define mtype_resize IPSET_TOKEN(MTYPE, _resize) |
| 243 | #define mtype_head IPSET_TOKEN(MTYPE, _head) |
| 244 | #define mtype_list IPSET_TOKEN(MTYPE, _list) |
| 245 | #define mtype_gc IPSET_TOKEN(MTYPE, _gc) |
| 246 | #define mtype_variant IPSET_TOKEN(MTYPE, _variant) |
| 247 | #define mtype_data_match IPSET_TOKEN(MTYPE, _data_match) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 248 | |
| 249 | #ifndef HKEY_DATALEN |
| 250 | #define HKEY_DATALEN sizeof(struct mtype_elem) |
| 251 | #endif |
| 252 | |
| 253 | #define HKEY(data, initval, htable_bits) \ |
| 254 | (jhash2((u32 *)(data), HKEY_DATALEN/sizeof(u32), initval) \ |
| 255 | & jhash_mask(htable_bits)) |
| 256 | |
| 257 | #ifndef htype |
| 258 | #define htype HTYPE |
| 259 | |
| 260 | /* The generic hash structure */ |
| 261 | struct htype { |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 262 | struct htable __rcu *table; /* the hash table */ |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 263 | u32 maxelem; /* max elements in the hash */ |
| 264 | u32 elements; /* current element (vs timeout) */ |
| 265 | u32 initval; /* random jhash init value */ |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 266 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 267 | u32 markmask; /* markmask value for mark mask to store */ |
| 268 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 269 | struct timer_list gc; /* garbage collection when timeout enabled */ |
| 270 | struct mtype_elem next; /* temporary storage for uadd */ |
| 271 | #ifdef IP_SET_HASH_WITH_MULTI |
| 272 | u8 ahash_max; /* max elements in an array block */ |
| 273 | #endif |
| 274 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 275 | u8 netmask; /* netmask value for subnets to store */ |
| 276 | #endif |
| 277 | #ifdef IP_SET_HASH_WITH_RBTREE |
| 278 | struct rb_root rbtree; |
| 279 | #endif |
| 280 | #ifdef IP_SET_HASH_WITH_NETS |
| 281 | struct net_prefixes nets[0]; /* book-keeping of prefixes */ |
| 282 | #endif |
| 283 | }; |
| 284 | #endif |
| 285 | |
| 286 | #ifdef IP_SET_HASH_WITH_NETS |
| 287 | /* Network cidr size book keeping when the hash stores different |
| 288 | * sized networks */ |
| 289 | static void |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 290 | mtype_add_cidr(struct htype *h, u8 cidr, u8 nets_length, u8 n) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 291 | { |
| 292 | int i, j; |
| 293 | |
| 294 | /* Add in increasing prefix order, so larger cidr first */ |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 295 | for (i = 0, j = -1; i < nets_length && h->nets[i].nets[n]; i++) { |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 296 | if (j != -1) |
| 297 | continue; |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 298 | else if (h->nets[i].cidr[n] < cidr) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 299 | j = i; |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 300 | else if (h->nets[i].cidr[n] == cidr) { |
| 301 | h->nets[i].nets[n]++; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 302 | return; |
| 303 | } |
| 304 | } |
| 305 | if (j != -1) { |
| 306 | for (; i > j; i--) { |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 307 | h->nets[i].cidr[n] = h->nets[i - 1].cidr[n]; |
| 308 | h->nets[i].nets[n] = h->nets[i - 1].nets[n]; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 309 | } |
| 310 | } |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 311 | h->nets[i].cidr[n] = cidr; |
| 312 | h->nets[i].nets[n] = 1; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 313 | } |
| 314 | |
| 315 | static void |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 316 | mtype_del_cidr(struct htype *h, u8 cidr, u8 nets_length, u8 n) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 317 | { |
Oliver Smith | 2cf5512 | 2013-09-16 20:30:57 +0200 | [diff] [blame] | 318 | u8 i, j, net_end = nets_length - 1; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 319 | |
Oliver Smith | 2cf5512 | 2013-09-16 20:30:57 +0200 | [diff] [blame] | 320 | for (i = 0; i < nets_length; i++) { |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 321 | if (h->nets[i].cidr[n] != cidr) |
Oliver Smith | 2cf5512 | 2013-09-16 20:30:57 +0200 | [diff] [blame] | 322 | continue; |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 323 | if (h->nets[i].nets[n] > 1 || i == net_end || |
| 324 | h->nets[i + 1].nets[n] == 0) { |
| 325 | h->nets[i].nets[n]--; |
Oliver Smith | 2cf5512 | 2013-09-16 20:30:57 +0200 | [diff] [blame] | 326 | return; |
| 327 | } |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 328 | for (j = i; j < net_end && h->nets[j].nets[n]; j++) { |
| 329 | h->nets[j].cidr[n] = h->nets[j + 1].cidr[n]; |
| 330 | h->nets[j].nets[n] = h->nets[j + 1].nets[n]; |
Oliver Smith | 2cf5512 | 2013-09-16 20:30:57 +0200 | [diff] [blame] | 331 | } |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 332 | h->nets[j].nets[n] = 0; |
Oliver Smith | 2cf5512 | 2013-09-16 20:30:57 +0200 | [diff] [blame] | 333 | return; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 334 | } |
| 335 | } |
| 336 | #endif |
| 337 | |
| 338 | /* Calculate the actual memory size of the set data */ |
| 339 | static size_t |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 340 | mtype_ahash_memsize(const struct htype *h, const struct htable *t, |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 341 | u8 nets_length, size_t dsize) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 342 | { |
| 343 | u32 i; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 344 | size_t memsize = sizeof(*h) |
| 345 | + sizeof(*t) |
| 346 | #ifdef IP_SET_HASH_WITH_NETS |
| 347 | + sizeof(struct net_prefixes) * nets_length |
| 348 | #endif |
| 349 | + jhash_size(t->htable_bits) * sizeof(struct hbucket); |
| 350 | |
| 351 | for (i = 0; i < jhash_size(t->htable_bits); i++) |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 352 | memsize += t->bucket[i].size * dsize; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 353 | |
| 354 | return memsize; |
| 355 | } |
| 356 | |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 357 | /* Get the ith element from the array block n */ |
| 358 | #define ahash_data(n, i, dsize) \ |
| 359 | ((struct mtype_elem *)((n)->value + ((i) * (dsize)))) |
| 360 | |
| 361 | static void |
| 362 | mtype_ext_cleanup(struct ip_set *set, struct hbucket *n) |
| 363 | { |
| 364 | int i; |
| 365 | |
| 366 | for (i = 0; i < n->pos; i++) |
| 367 | ip_set_ext_destroy(set, ahash_data(n, i, set->dsize)); |
| 368 | } |
| 369 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 370 | /* Flush a hash type of set: destroy all elements */ |
| 371 | static void |
| 372 | mtype_flush(struct ip_set *set) |
| 373 | { |
| 374 | struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 375 | struct htable *t; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 376 | struct hbucket *n; |
| 377 | u32 i; |
| 378 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 379 | t = rcu_dereference_bh_nfnl(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 380 | for (i = 0; i < jhash_size(t->htable_bits); i++) { |
| 381 | n = hbucket(t, i); |
| 382 | if (n->size) { |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 383 | if (set->extensions & IPSET_EXT_DESTROY) |
| 384 | mtype_ext_cleanup(set, n); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 385 | n->size = n->pos = 0; |
| 386 | /* FIXME: use slab cache */ |
| 387 | kfree(n->value); |
| 388 | } |
| 389 | } |
| 390 | #ifdef IP_SET_HASH_WITH_NETS |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 391 | memset(h->nets, 0, sizeof(struct net_prefixes) * NLEN(set->family)); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 392 | #endif |
| 393 | h->elements = 0; |
| 394 | } |
| 395 | |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 396 | /* Destroy the hashtable part of the set */ |
| 397 | static void |
Jozsef Kadlecsik | 80571a9 | 2013-09-23 17:45:21 +0200 | [diff] [blame] | 398 | mtype_ahash_destroy(struct ip_set *set, struct htable *t, bool ext_destroy) |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 399 | { |
| 400 | struct hbucket *n; |
| 401 | u32 i; |
| 402 | |
| 403 | for (i = 0; i < jhash_size(t->htable_bits); i++) { |
| 404 | n = hbucket(t, i); |
| 405 | if (n->size) { |
Jozsef Kadlecsik | 80571a9 | 2013-09-23 17:45:21 +0200 | [diff] [blame] | 406 | if (set->extensions & IPSET_EXT_DESTROY && ext_destroy) |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 407 | mtype_ext_cleanup(set, n); |
| 408 | /* FIXME: use slab cache */ |
| 409 | kfree(n->value); |
| 410 | } |
| 411 | } |
| 412 | |
| 413 | ip_set_free(t); |
| 414 | } |
| 415 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 416 | /* Destroy a hash type of set */ |
| 417 | static void |
| 418 | mtype_destroy(struct ip_set *set) |
| 419 | { |
| 420 | struct htype *h = set->data; |
| 421 | |
| 422 | if (set->extensions & IPSET_EXT_TIMEOUT) |
| 423 | del_timer_sync(&h->gc); |
| 424 | |
Jozsef Kadlecsik | 80571a9 | 2013-09-23 17:45:21 +0200 | [diff] [blame] | 425 | mtype_ahash_destroy(set, rcu_dereference_bh_nfnl(h->table), true); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 426 | #ifdef IP_SET_HASH_WITH_RBTREE |
| 427 | rbtree_destroy(&h->rbtree); |
| 428 | #endif |
| 429 | kfree(h); |
| 430 | |
| 431 | set->data = NULL; |
| 432 | } |
| 433 | |
| 434 | static void |
| 435 | mtype_gc_init(struct ip_set *set, void (*gc)(unsigned long ul_set)) |
| 436 | { |
| 437 | struct htype *h = set->data; |
| 438 | |
| 439 | init_timer(&h->gc); |
| 440 | h->gc.data = (unsigned long) set; |
| 441 | h->gc.function = gc; |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 442 | h->gc.expires = jiffies + IPSET_GC_PERIOD(set->timeout) * HZ; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 443 | add_timer(&h->gc); |
| 444 | pr_debug("gc initialized, run in every %u\n", |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 445 | IPSET_GC_PERIOD(set->timeout)); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 446 | } |
| 447 | |
| 448 | static bool |
| 449 | mtype_same_set(const struct ip_set *a, const struct ip_set *b) |
| 450 | { |
| 451 | const struct htype *x = a->data; |
| 452 | const struct htype *y = b->data; |
| 453 | |
| 454 | /* Resizing changes htable_bits, so we ignore it */ |
| 455 | return x->maxelem == y->maxelem && |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 456 | a->timeout == b->timeout && |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 457 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 458 | x->netmask == y->netmask && |
| 459 | #endif |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 460 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 461 | x->markmask == y->markmask && |
| 462 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 463 | a->extensions == b->extensions; |
| 464 | } |
| 465 | |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 466 | /* Delete expired elements from the hashtable */ |
| 467 | static void |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 468 | mtype_expire(struct ip_set *set, struct htype *h, u8 nets_length, size_t dsize) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 469 | { |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 470 | struct htable *t; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 471 | struct hbucket *n; |
| 472 | struct mtype_elem *data; |
| 473 | u32 i; |
| 474 | int j; |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 475 | #ifdef IP_SET_HASH_WITH_NETS |
| 476 | u8 k; |
| 477 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 478 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 479 | rcu_read_lock_bh(); |
| 480 | t = rcu_dereference_bh(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 481 | for (i = 0; i < jhash_size(t->htable_bits); i++) { |
| 482 | n = hbucket(t, i); |
| 483 | for (j = 0; j < n->pos; j++) { |
| 484 | data = ahash_data(n, j, dsize); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 485 | if (ip_set_timeout_expired(ext_timeout(data, set))) { |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 486 | pr_debug("expired %u/%u\n", i, j); |
| 487 | #ifdef IP_SET_HASH_WITH_NETS |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 488 | for (k = 0; k < IPSET_NET_COUNT; k++) |
| 489 | mtype_del_cidr(h, CIDR(data->cidr, k), |
| 490 | nets_length, k); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 491 | #endif |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 492 | ip_set_ext_destroy(set, data); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 493 | if (j != n->pos - 1) |
| 494 | /* Not last one */ |
| 495 | memcpy(data, |
| 496 | ahash_data(n, n->pos - 1, dsize), |
| 497 | dsize); |
| 498 | n->pos--; |
| 499 | h->elements--; |
| 500 | } |
| 501 | } |
| 502 | if (n->pos + AHASH_INIT_SIZE < n->size) { |
| 503 | void *tmp = kzalloc((n->size - AHASH_INIT_SIZE) |
| 504 | * dsize, |
| 505 | GFP_ATOMIC); |
| 506 | if (!tmp) |
| 507 | /* Still try to delete expired elements */ |
| 508 | continue; |
| 509 | n->size -= AHASH_INIT_SIZE; |
| 510 | memcpy(tmp, n->value, n->size * dsize); |
| 511 | kfree(n->value); |
| 512 | n->value = tmp; |
| 513 | } |
| 514 | } |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 515 | rcu_read_unlock_bh(); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 516 | } |
| 517 | |
| 518 | static void |
| 519 | mtype_gc(unsigned long ul_set) |
| 520 | { |
| 521 | struct ip_set *set = (struct ip_set *) ul_set; |
| 522 | struct htype *h = set->data; |
| 523 | |
| 524 | pr_debug("called\n"); |
| 525 | write_lock_bh(&set->lock); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 526 | mtype_expire(set, h, NLEN(set->family), set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 527 | write_unlock_bh(&set->lock); |
| 528 | |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 529 | h->gc.expires = jiffies + IPSET_GC_PERIOD(set->timeout) * HZ; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 530 | add_timer(&h->gc); |
| 531 | } |
| 532 | |
| 533 | /* Resize a hash: create a new hash table with doubling the hashsize |
| 534 | * and inserting the elements to it. Repeat until we succeed or |
| 535 | * fail due to memory pressures. */ |
| 536 | static int |
| 537 | mtype_resize(struct ip_set *set, bool retried) |
| 538 | { |
| 539 | struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 540 | struct htable *t, *orig = rcu_dereference_bh_nfnl(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 541 | u8 htable_bits = orig->htable_bits; |
| 542 | #ifdef IP_SET_HASH_WITH_NETS |
| 543 | u8 flags; |
| 544 | #endif |
| 545 | struct mtype_elem *data; |
| 546 | struct mtype_elem *d; |
| 547 | struct hbucket *n, *m; |
| 548 | u32 i, j; |
| 549 | int ret; |
| 550 | |
| 551 | /* Try to cleanup once */ |
| 552 | if (SET_WITH_TIMEOUT(set) && !retried) { |
| 553 | i = h->elements; |
| 554 | write_lock_bh(&set->lock); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 555 | mtype_expire(set, set->data, NLEN(set->family), set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 556 | write_unlock_bh(&set->lock); |
| 557 | if (h->elements < i) |
| 558 | return 0; |
| 559 | } |
| 560 | |
| 561 | retry: |
| 562 | ret = 0; |
| 563 | htable_bits++; |
| 564 | pr_debug("attempt to resize set %s from %u to %u, t %p\n", |
| 565 | set->name, orig->htable_bits, htable_bits, orig); |
| 566 | if (!htable_bits) { |
| 567 | /* In case we have plenty of memory :-) */ |
Joe Perches | b167a37 | 2014-09-09 21:17:32 -0700 | [diff] [blame] | 568 | pr_warn("Cannot increase the hashsize of set %s further\n", |
| 569 | set->name); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 570 | return -IPSET_ERR_HASH_FULL; |
| 571 | } |
| 572 | t = ip_set_alloc(sizeof(*t) |
| 573 | + jhash_size(htable_bits) * sizeof(struct hbucket)); |
| 574 | if (!t) |
| 575 | return -ENOMEM; |
| 576 | t->htable_bits = htable_bits; |
| 577 | |
| 578 | read_lock_bh(&set->lock); |
| 579 | for (i = 0; i < jhash_size(orig->htable_bits); i++) { |
| 580 | n = hbucket(orig, i); |
| 581 | for (j = 0; j < n->pos; j++) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 582 | data = ahash_data(n, j, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 583 | #ifdef IP_SET_HASH_WITH_NETS |
| 584 | flags = 0; |
| 585 | mtype_data_reset_flags(data, &flags); |
| 586 | #endif |
| 587 | m = hbucket(t, HKEY(data, h->initval, htable_bits)); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 588 | ret = hbucket_elem_add(m, AHASH_MAX(h), set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 589 | if (ret < 0) { |
| 590 | #ifdef IP_SET_HASH_WITH_NETS |
| 591 | mtype_data_reset_flags(data, &flags); |
| 592 | #endif |
| 593 | read_unlock_bh(&set->lock); |
Jozsef Kadlecsik | 80571a9 | 2013-09-23 17:45:21 +0200 | [diff] [blame] | 594 | mtype_ahash_destroy(set, t, false); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 595 | if (ret == -EAGAIN) |
| 596 | goto retry; |
| 597 | return ret; |
| 598 | } |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 599 | d = ahash_data(m, m->pos++, set->dsize); |
| 600 | memcpy(d, data, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 601 | #ifdef IP_SET_HASH_WITH_NETS |
| 602 | mtype_data_reset_flags(d, &flags); |
| 603 | #endif |
| 604 | } |
| 605 | } |
| 606 | |
| 607 | rcu_assign_pointer(h->table, t); |
| 608 | read_unlock_bh(&set->lock); |
| 609 | |
| 610 | /* Give time to other readers of the set */ |
| 611 | synchronize_rcu_bh(); |
| 612 | |
| 613 | pr_debug("set %s resized from %u (%p) to %u (%p)\n", set->name, |
| 614 | orig->htable_bits, orig, t->htable_bits, t); |
Jozsef Kadlecsik | 80571a9 | 2013-09-23 17:45:21 +0200 | [diff] [blame] | 615 | mtype_ahash_destroy(set, orig, false); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 616 | |
| 617 | return 0; |
| 618 | } |
| 619 | |
| 620 | /* Add an element to a hash and update the internal counters when succeeded, |
| 621 | * otherwise report the proper error code. */ |
| 622 | static int |
| 623 | mtype_add(struct ip_set *set, void *value, const struct ip_set_ext *ext, |
| 624 | struct ip_set_ext *mext, u32 flags) |
| 625 | { |
| 626 | struct htype *h = set->data; |
| 627 | struct htable *t; |
| 628 | const struct mtype_elem *d = value; |
| 629 | struct mtype_elem *data; |
| 630 | struct hbucket *n; |
| 631 | int i, ret = 0; |
| 632 | int j = AHASH_MAX(h) + 1; |
| 633 | bool flag_exist = flags & IPSET_FLAG_EXIST; |
| 634 | u32 key, multi = 0; |
| 635 | |
Josh Hunt | 07cf8f5 | 2014-02-28 22:14:57 -0500 | [diff] [blame] | 636 | if (h->elements >= h->maxelem && SET_WITH_FORCEADD(set)) { |
| 637 | rcu_read_lock_bh(); |
| 638 | t = rcu_dereference_bh(h->table); |
| 639 | key = HKEY(value, h->initval, t->htable_bits); |
| 640 | n = hbucket(t,key); |
| 641 | if (n->pos) { |
| 642 | /* Choosing the first entry in the array to replace */ |
| 643 | j = 0; |
| 644 | goto reuse_slot; |
| 645 | } |
| 646 | rcu_read_unlock_bh(); |
| 647 | } |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 648 | if (SET_WITH_TIMEOUT(set) && h->elements >= h->maxelem) |
| 649 | /* FIXME: when set is full, we slow down here */ |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 650 | mtype_expire(set, h, NLEN(set->family), set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 651 | |
| 652 | if (h->elements >= h->maxelem) { |
| 653 | if (net_ratelimit()) |
Joe Perches | b167a37 | 2014-09-09 21:17:32 -0700 | [diff] [blame] | 654 | pr_warn("Set %s is full, maxelem %u reached\n", |
| 655 | set->name, h->maxelem); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 656 | return -IPSET_ERR_HASH_FULL; |
| 657 | } |
| 658 | |
| 659 | rcu_read_lock_bh(); |
| 660 | t = rcu_dereference_bh(h->table); |
| 661 | key = HKEY(value, h->initval, t->htable_bits); |
| 662 | n = hbucket(t, key); |
| 663 | for (i = 0; i < n->pos; i++) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 664 | data = ahash_data(n, i, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 665 | if (mtype_data_equal(data, d, &multi)) { |
| 666 | if (flag_exist || |
| 667 | (SET_WITH_TIMEOUT(set) && |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 668 | ip_set_timeout_expired(ext_timeout(data, set)))) { |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 669 | /* Just the extensions could be overwritten */ |
| 670 | j = i; |
| 671 | goto reuse_slot; |
| 672 | } else { |
| 673 | ret = -IPSET_ERR_EXIST; |
| 674 | goto out; |
| 675 | } |
| 676 | } |
| 677 | /* Reuse first timed out entry */ |
| 678 | if (SET_WITH_TIMEOUT(set) && |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 679 | ip_set_timeout_expired(ext_timeout(data, set)) && |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 680 | j != AHASH_MAX(h) + 1) |
| 681 | j = i; |
| 682 | } |
| 683 | reuse_slot: |
| 684 | if (j != AHASH_MAX(h) + 1) { |
| 685 | /* Fill out reused slot */ |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 686 | data = ahash_data(n, j, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 687 | #ifdef IP_SET_HASH_WITH_NETS |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 688 | for (i = 0; i < IPSET_NET_COUNT; i++) { |
| 689 | mtype_del_cidr(h, CIDR(data->cidr, i), |
| 690 | NLEN(set->family), i); |
| 691 | mtype_add_cidr(h, CIDR(d->cidr, i), |
| 692 | NLEN(set->family), i); |
| 693 | } |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 694 | #endif |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 695 | ip_set_ext_destroy(set, data); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 696 | } else { |
| 697 | /* Use/create a new slot */ |
| 698 | TUNE_AHASH_MAX(h, multi); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 699 | ret = hbucket_elem_add(n, AHASH_MAX(h), set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 700 | if (ret != 0) { |
| 701 | if (ret == -EAGAIN) |
| 702 | mtype_data_next(&h->next, d); |
| 703 | goto out; |
| 704 | } |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 705 | data = ahash_data(n, n->pos++, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 706 | #ifdef IP_SET_HASH_WITH_NETS |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 707 | for (i = 0; i < IPSET_NET_COUNT; i++) |
| 708 | mtype_add_cidr(h, CIDR(d->cidr, i), NLEN(set->family), |
| 709 | i); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 710 | #endif |
| 711 | h->elements++; |
| 712 | } |
| 713 | memcpy(data, d, sizeof(struct mtype_elem)); |
| 714 | #ifdef IP_SET_HASH_WITH_NETS |
| 715 | mtype_data_set_flags(data, flags); |
| 716 | #endif |
| 717 | if (SET_WITH_TIMEOUT(set)) |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 718 | ip_set_timeout_set(ext_timeout(data, set), ext->timeout); |
Jozsef Kadlecsik | 00d71b2 | 2013-04-08 23:11:02 +0200 | [diff] [blame] | 719 | if (SET_WITH_COUNTER(set)) |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 720 | ip_set_init_counter(ext_counter(data, set), ext); |
Oliver Smith | fda75c6 | 2013-09-22 20:56:31 +0200 | [diff] [blame] | 721 | if (SET_WITH_COMMENT(set)) |
| 722 | ip_set_init_comment(ext_comment(data, set), ext); |
Anton Danilov | af33141 | 2014-08-28 10:11:29 +0400 | [diff] [blame] | 723 | if (SET_WITH_SKBINFO(set)) |
| 724 | ip_set_init_skbinfo(ext_skbinfo(data, set), ext); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 725 | |
| 726 | out: |
| 727 | rcu_read_unlock_bh(); |
| 728 | return ret; |
| 729 | } |
| 730 | |
| 731 | /* Delete an element from the hash: swap it with the last element |
| 732 | * and free up space if possible. |
| 733 | */ |
| 734 | static int |
| 735 | mtype_del(struct ip_set *set, void *value, const struct ip_set_ext *ext, |
| 736 | struct ip_set_ext *mext, u32 flags) |
| 737 | { |
| 738 | struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 739 | struct htable *t; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 740 | const struct mtype_elem *d = value; |
| 741 | struct mtype_elem *data; |
| 742 | struct hbucket *n; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 743 | int i, ret = -IPSET_ERR_EXIST; |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 744 | #ifdef IP_SET_HASH_WITH_NETS |
| 745 | u8 j; |
| 746 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 747 | u32 key, multi = 0; |
| 748 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 749 | rcu_read_lock_bh(); |
| 750 | t = rcu_dereference_bh(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 751 | key = HKEY(value, h->initval, t->htable_bits); |
| 752 | n = hbucket(t, key); |
| 753 | for (i = 0; i < n->pos; i++) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 754 | data = ahash_data(n, i, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 755 | if (!mtype_data_equal(data, d, &multi)) |
| 756 | continue; |
| 757 | if (SET_WITH_TIMEOUT(set) && |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 758 | ip_set_timeout_expired(ext_timeout(data, set))) |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 759 | goto out; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 760 | if (i != n->pos - 1) |
| 761 | /* Not last one */ |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 762 | memcpy(data, ahash_data(n, n->pos - 1, set->dsize), |
| 763 | set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 764 | |
| 765 | n->pos--; |
| 766 | h->elements--; |
| 767 | #ifdef IP_SET_HASH_WITH_NETS |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 768 | for (j = 0; j < IPSET_NET_COUNT; j++) |
| 769 | mtype_del_cidr(h, CIDR(d->cidr, j), NLEN(set->family), |
| 770 | j); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 771 | #endif |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 772 | ip_set_ext_destroy(set, data); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 773 | if (n->pos + AHASH_INIT_SIZE < n->size) { |
| 774 | void *tmp = kzalloc((n->size - AHASH_INIT_SIZE) |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 775 | * set->dsize, |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 776 | GFP_ATOMIC); |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 777 | if (!tmp) { |
| 778 | ret = 0; |
| 779 | goto out; |
| 780 | } |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 781 | n->size -= AHASH_INIT_SIZE; |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 782 | memcpy(tmp, n->value, n->size * set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 783 | kfree(n->value); |
| 784 | n->value = tmp; |
| 785 | } |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 786 | ret = 0; |
| 787 | goto out; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 788 | } |
| 789 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 790 | out: |
| 791 | rcu_read_unlock_bh(); |
| 792 | return ret; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 793 | } |
| 794 | |
| 795 | static inline int |
| 796 | mtype_data_match(struct mtype_elem *data, const struct ip_set_ext *ext, |
| 797 | struct ip_set_ext *mext, struct ip_set *set, u32 flags) |
| 798 | { |
Jozsef Kadlecsik | 00d71b2 | 2013-04-08 23:11:02 +0200 | [diff] [blame] | 799 | if (SET_WITH_COUNTER(set)) |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 800 | ip_set_update_counter(ext_counter(data, set), |
Jozsef Kadlecsik | 00d71b2 | 2013-04-08 23:11:02 +0200 | [diff] [blame] | 801 | ext, mext, flags); |
Anton Danilov | af33141 | 2014-08-28 10:11:29 +0400 | [diff] [blame] | 802 | if (SET_WITH_SKBINFO(set)) |
| 803 | ip_set_get_skbinfo(ext_skbinfo(data, set), |
| 804 | ext, mext, flags); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 805 | return mtype_do_data_match(data); |
| 806 | } |
| 807 | |
| 808 | #ifdef IP_SET_HASH_WITH_NETS |
| 809 | /* Special test function which takes into account the different network |
| 810 | * sizes added to the set */ |
| 811 | static int |
| 812 | mtype_test_cidrs(struct ip_set *set, struct mtype_elem *d, |
| 813 | const struct ip_set_ext *ext, |
| 814 | struct ip_set_ext *mext, u32 flags) |
| 815 | { |
| 816 | struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 817 | struct htable *t = rcu_dereference_bh(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 818 | struct hbucket *n; |
| 819 | struct mtype_elem *data; |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 820 | #if IPSET_NET_COUNT == 2 |
| 821 | struct mtype_elem orig = *d; |
| 822 | int i, j = 0, k; |
| 823 | #else |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 824 | int i, j = 0; |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 825 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 826 | u32 key, multi = 0; |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 827 | u8 nets_length = NLEN(set->family); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 828 | |
| 829 | pr_debug("test by nets\n"); |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 830 | for (; j < nets_length && h->nets[j].nets[0] && !multi; j++) { |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 831 | #if IPSET_NET_COUNT == 2 |
| 832 | mtype_data_reset_elem(d, &orig); |
| 833 | mtype_data_netmask(d, h->nets[j].cidr[0], false); |
| 834 | for (k = 0; k < nets_length && h->nets[k].nets[1] && !multi; |
| 835 | k++) { |
| 836 | mtype_data_netmask(d, h->nets[k].cidr[1], true); |
| 837 | #else |
Jozsef Kadlecsik | a04d8b6 | 2013-09-30 09:05:54 +0200 | [diff] [blame] | 838 | mtype_data_netmask(d, h->nets[j].cidr[0]); |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 839 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 840 | key = HKEY(d, h->initval, t->htable_bits); |
| 841 | n = hbucket(t, key); |
| 842 | for (i = 0; i < n->pos; i++) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 843 | data = ahash_data(n, i, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 844 | if (!mtype_data_equal(data, d, &multi)) |
| 845 | continue; |
| 846 | if (SET_WITH_TIMEOUT(set)) { |
| 847 | if (!ip_set_timeout_expired( |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 848 | ext_timeout(data, set))) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 849 | return mtype_data_match(data, ext, |
| 850 | mext, set, |
| 851 | flags); |
| 852 | #ifdef IP_SET_HASH_WITH_MULTI |
| 853 | multi = 0; |
| 854 | #endif |
| 855 | } else |
| 856 | return mtype_data_match(data, ext, |
| 857 | mext, set, flags); |
| 858 | } |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 859 | #if IPSET_NET_COUNT == 2 |
| 860 | } |
| 861 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 862 | } |
| 863 | return 0; |
| 864 | } |
| 865 | #endif |
| 866 | |
| 867 | /* Test whether the element is added to the set */ |
| 868 | static int |
| 869 | mtype_test(struct ip_set *set, void *value, const struct ip_set_ext *ext, |
| 870 | struct ip_set_ext *mext, u32 flags) |
| 871 | { |
| 872 | struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 873 | struct htable *t; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 874 | struct mtype_elem *d = value; |
| 875 | struct hbucket *n; |
| 876 | struct mtype_elem *data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 877 | int i, ret = 0; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 878 | u32 key, multi = 0; |
| 879 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 880 | rcu_read_lock_bh(); |
| 881 | t = rcu_dereference_bh(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 882 | #ifdef IP_SET_HASH_WITH_NETS |
| 883 | /* If we test an IP address and not a network address, |
| 884 | * try all possible network sizes */ |
Oliver Smith | ea53ac5 | 2013-09-20 10:13:53 +0200 | [diff] [blame] | 885 | for (i = 0; i < IPSET_NET_COUNT; i++) |
| 886 | if (CIDR(d->cidr, i) != SET_HOST_MASK(set->family)) |
| 887 | break; |
| 888 | if (i == IPSET_NET_COUNT) { |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 889 | ret = mtype_test_cidrs(set, d, ext, mext, flags); |
| 890 | goto out; |
| 891 | } |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 892 | #endif |
| 893 | |
| 894 | key = HKEY(d, h->initval, t->htable_bits); |
| 895 | n = hbucket(t, key); |
| 896 | for (i = 0; i < n->pos; i++) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 897 | data = ahash_data(n, i, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 898 | if (mtype_data_equal(data, d, &multi) && |
| 899 | !(SET_WITH_TIMEOUT(set) && |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 900 | ip_set_timeout_expired(ext_timeout(data, set)))) { |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 901 | ret = mtype_data_match(data, ext, mext, set, flags); |
| 902 | goto out; |
| 903 | } |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 904 | } |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 905 | out: |
| 906 | rcu_read_unlock_bh(); |
| 907 | return ret; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 908 | } |
| 909 | |
| 910 | /* Reply a HEADER request: fill out the header part of the set */ |
| 911 | static int |
| 912 | mtype_head(struct ip_set *set, struct sk_buff *skb) |
| 913 | { |
| 914 | const struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 915 | const struct htable *t; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 916 | struct nlattr *nested; |
| 917 | size_t memsize; |
| 918 | |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 919 | t = rcu_dereference_bh_nfnl(h->table); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 920 | memsize = mtype_ahash_memsize(h, t, NLEN(set->family), set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 921 | |
| 922 | nested = ipset_nest_start(skb, IPSET_ATTR_DATA); |
| 923 | if (!nested) |
| 924 | goto nla_put_failure; |
| 925 | if (nla_put_net32(skb, IPSET_ATTR_HASHSIZE, |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 926 | htonl(jhash_size(t->htable_bits))) || |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 927 | nla_put_net32(skb, IPSET_ATTR_MAXELEM, htonl(h->maxelem))) |
| 928 | goto nla_put_failure; |
| 929 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 930 | if (h->netmask != HOST_MASK && |
| 931 | nla_put_u8(skb, IPSET_ATTR_NETMASK, h->netmask)) |
| 932 | goto nla_put_failure; |
| 933 | #endif |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 934 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 935 | if (nla_put_u32(skb, IPSET_ATTR_MARKMASK, h->markmask)) |
| 936 | goto nla_put_failure; |
| 937 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 938 | if (nla_put_net32(skb, IPSET_ATTR_REFERENCES, htonl(set->ref - 1)) || |
Oliver Smith | fda75c6 | 2013-09-22 20:56:31 +0200 | [diff] [blame] | 939 | nla_put_net32(skb, IPSET_ATTR_MEMSIZE, htonl(memsize))) |
| 940 | goto nla_put_failure; |
| 941 | if (unlikely(ip_set_put_flags(skb, set))) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 942 | goto nla_put_failure; |
| 943 | ipset_nest_end(skb, nested); |
| 944 | |
| 945 | return 0; |
| 946 | nla_put_failure: |
| 947 | return -EMSGSIZE; |
| 948 | } |
| 949 | |
| 950 | /* Reply a LIST/SAVE request: dump the elements of the specified set */ |
| 951 | static int |
| 952 | mtype_list(const struct ip_set *set, |
| 953 | struct sk_buff *skb, struct netlink_callback *cb) |
| 954 | { |
| 955 | const struct htype *h = set->data; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 956 | const struct htable *t = rcu_dereference_bh_nfnl(h->table); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 957 | struct nlattr *atd, *nested; |
| 958 | const struct hbucket *n; |
| 959 | const struct mtype_elem *e; |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 960 | u32 first = cb->args[IPSET_CB_ARG0]; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 961 | /* We assume that one hash bucket fills into one page */ |
| 962 | void *incomplete; |
| 963 | int i; |
| 964 | |
| 965 | atd = ipset_nest_start(skb, IPSET_ATTR_ADT); |
| 966 | if (!atd) |
| 967 | return -EMSGSIZE; |
| 968 | pr_debug("list hash set %s\n", set->name); |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 969 | for (; cb->args[IPSET_CB_ARG0] < jhash_size(t->htable_bits); |
| 970 | cb->args[IPSET_CB_ARG0]++) { |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 971 | incomplete = skb_tail_pointer(skb); |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 972 | n = hbucket(t, cb->args[IPSET_CB_ARG0]); |
| 973 | pr_debug("cb->arg bucket: %lu, t %p n %p\n", |
| 974 | cb->args[IPSET_CB_ARG0], t, n); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 975 | for (i = 0; i < n->pos; i++) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 976 | e = ahash_data(n, i, set->dsize); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 977 | if (SET_WITH_TIMEOUT(set) && |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 978 | ip_set_timeout_expired(ext_timeout(e, set))) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 979 | continue; |
| 980 | pr_debug("list hash %lu hbucket %p i %u, data %p\n", |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 981 | cb->args[IPSET_CB_ARG0], n, i, e); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 982 | nested = ipset_nest_start(skb, IPSET_ATTR_DATA); |
| 983 | if (!nested) { |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 984 | if (cb->args[IPSET_CB_ARG0] == first) { |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 985 | nla_nest_cancel(skb, atd); |
| 986 | return -EMSGSIZE; |
| 987 | } else |
| 988 | goto nla_put_failure; |
| 989 | } |
| 990 | if (mtype_data_list(skb, e)) |
| 991 | goto nla_put_failure; |
Jozsef Kadlecsik | 3fd986b | 2013-09-25 17:44:35 +0200 | [diff] [blame] | 992 | if (ip_set_put_extensions(skb, set, e, true)) |
Oliver Smith | fda75c6 | 2013-09-22 20:56:31 +0200 | [diff] [blame] | 993 | goto nla_put_failure; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 994 | ipset_nest_end(skb, nested); |
| 995 | } |
| 996 | } |
| 997 | ipset_nest_end(skb, atd); |
| 998 | /* Set listing finished */ |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 999 | cb->args[IPSET_CB_ARG0] = 0; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1000 | |
| 1001 | return 0; |
| 1002 | |
| 1003 | nla_put_failure: |
| 1004 | nlmsg_trim(skb, incomplete); |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 1005 | if (unlikely(first == cb->args[IPSET_CB_ARG0])) { |
Joe Perches | b167a37 | 2014-09-09 21:17:32 -0700 | [diff] [blame] | 1006 | pr_warn("Can't list set %s: one bucket does not fit into a message. Please report it!\n", |
| 1007 | set->name); |
Jozsef Kadlecsik | 9330288 | 2013-10-18 11:41:55 +0200 | [diff] [blame] | 1008 | cb->args[IPSET_CB_ARG0] = 0; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1009 | return -EMSGSIZE; |
| 1010 | } |
Jozsef Kadlecsik | 122ebbf | 2013-04-27 21:02:59 +0200 | [diff] [blame] | 1011 | ipset_nest_end(skb, atd); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1012 | return 0; |
| 1013 | } |
| 1014 | |
| 1015 | static int |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 1016 | IPSET_TOKEN(MTYPE, _kadt)(struct ip_set *set, const struct sk_buff *skb, |
| 1017 | const struct xt_action_param *par, |
| 1018 | enum ipset_adt adt, struct ip_set_adt_opt *opt); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1019 | |
| 1020 | static int |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 1021 | IPSET_TOKEN(MTYPE, _uadt)(struct ip_set *set, struct nlattr *tb[], |
| 1022 | enum ipset_adt adt, u32 *lineno, u32 flags, bool retried); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1023 | |
| 1024 | static const struct ip_set_type_variant mtype_variant = { |
| 1025 | .kadt = mtype_kadt, |
| 1026 | .uadt = mtype_uadt, |
| 1027 | .adt = { |
| 1028 | [IPSET_ADD] = mtype_add, |
| 1029 | [IPSET_DEL] = mtype_del, |
| 1030 | [IPSET_TEST] = mtype_test, |
| 1031 | }, |
| 1032 | .destroy = mtype_destroy, |
| 1033 | .flush = mtype_flush, |
| 1034 | .head = mtype_head, |
| 1035 | .list = mtype_list, |
| 1036 | .resize = mtype_resize, |
| 1037 | .same_set = mtype_same_set, |
| 1038 | }; |
| 1039 | |
| 1040 | #ifdef IP_SET_EMIT_CREATE |
| 1041 | static int |
Vitaly Lavrov | 1785e8f | 2013-09-30 17:07:02 +0200 | [diff] [blame] | 1042 | IPSET_TOKEN(HTYPE, _create)(struct net *net, struct ip_set *set, |
| 1043 | struct nlattr *tb[], u32 flags) |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1044 | { |
| 1045 | u32 hashsize = IPSET_DEFAULT_HASHSIZE, maxelem = IPSET_DEFAULT_MAXELEM; |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 1046 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 1047 | u32 markmask; |
| 1048 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1049 | u8 hbits; |
| 1050 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 1051 | u8 netmask; |
| 1052 | #endif |
| 1053 | size_t hsize; |
| 1054 | struct HTYPE *h; |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 1055 | struct htable *t; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1056 | |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1057 | #ifndef IP_SET_PROTO_UNDEF |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1058 | if (!(set->family == NFPROTO_IPV4 || set->family == NFPROTO_IPV6)) |
| 1059 | return -IPSET_ERR_INVALID_FAMILY; |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1060 | #endif |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 1061 | |
| 1062 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 1063 | markmask = 0xffffffff; |
| 1064 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1065 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 1066 | netmask = set->family == NFPROTO_IPV4 ? 32 : 128; |
| 1067 | pr_debug("Create set %s with family %s\n", |
| 1068 | set->name, set->family == NFPROTO_IPV4 ? "inet" : "inet6"); |
| 1069 | #endif |
| 1070 | |
| 1071 | if (unlikely(!ip_set_optattr_netorder(tb, IPSET_ATTR_HASHSIZE) || |
| 1072 | !ip_set_optattr_netorder(tb, IPSET_ATTR_MAXELEM) || |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 1073 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 1074 | !ip_set_optattr_netorder(tb, IPSET_ATTR_MARKMASK) || |
| 1075 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1076 | !ip_set_optattr_netorder(tb, IPSET_ATTR_TIMEOUT) || |
| 1077 | !ip_set_optattr_netorder(tb, IPSET_ATTR_CADT_FLAGS))) |
| 1078 | return -IPSET_ERR_PROTOCOL; |
| 1079 | |
| 1080 | if (tb[IPSET_ATTR_HASHSIZE]) { |
| 1081 | hashsize = ip_set_get_h32(tb[IPSET_ATTR_HASHSIZE]); |
| 1082 | if (hashsize < IPSET_MIMINAL_HASHSIZE) |
| 1083 | hashsize = IPSET_MIMINAL_HASHSIZE; |
| 1084 | } |
| 1085 | |
| 1086 | if (tb[IPSET_ATTR_MAXELEM]) |
| 1087 | maxelem = ip_set_get_h32(tb[IPSET_ATTR_MAXELEM]); |
| 1088 | |
| 1089 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 1090 | if (tb[IPSET_ATTR_NETMASK]) { |
| 1091 | netmask = nla_get_u8(tb[IPSET_ATTR_NETMASK]); |
| 1092 | |
| 1093 | if ((set->family == NFPROTO_IPV4 && netmask > 32) || |
| 1094 | (set->family == NFPROTO_IPV6 && netmask > 128) || |
| 1095 | netmask == 0) |
| 1096 | return -IPSET_ERR_INVALID_NETMASK; |
| 1097 | } |
| 1098 | #endif |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 1099 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 1100 | if (tb[IPSET_ATTR_MARKMASK]) { |
| 1101 | markmask = ntohl(nla_get_u32(tb[IPSET_ATTR_MARKMASK])); |
| 1102 | |
Vytas Dauksa | ecc245c | 2014-04-04 16:10:14 +0100 | [diff] [blame] | 1103 | if (markmask == 0) |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 1104 | return -IPSET_ERR_INVALID_MARKMASK; |
| 1105 | } |
| 1106 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1107 | |
| 1108 | hsize = sizeof(*h); |
| 1109 | #ifdef IP_SET_HASH_WITH_NETS |
| 1110 | hsize += sizeof(struct net_prefixes) * |
| 1111 | (set->family == NFPROTO_IPV4 ? 32 : 128); |
| 1112 | #endif |
| 1113 | h = kzalloc(hsize, GFP_KERNEL); |
| 1114 | if (!h) |
| 1115 | return -ENOMEM; |
| 1116 | |
| 1117 | h->maxelem = maxelem; |
| 1118 | #ifdef IP_SET_HASH_WITH_NETMASK |
| 1119 | h->netmask = netmask; |
| 1120 | #endif |
Vytas Dauksa | 4d0e5c0 | 2013-12-17 14:01:44 +0000 | [diff] [blame] | 1121 | #ifdef IP_SET_HASH_WITH_MARKMASK |
| 1122 | h->markmask = markmask; |
| 1123 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1124 | get_random_bytes(&h->initval, sizeof(h->initval)); |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 1125 | set->timeout = IPSET_NO_TIMEOUT; |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1126 | |
| 1127 | hbits = htable_bits(hashsize); |
| 1128 | hsize = htable_size(hbits); |
| 1129 | if (hsize == 0) { |
| 1130 | kfree(h); |
| 1131 | return -ENOMEM; |
| 1132 | } |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 1133 | t = ip_set_alloc(hsize); |
| 1134 | if (!t) { |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1135 | kfree(h); |
| 1136 | return -ENOMEM; |
| 1137 | } |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 1138 | t->htable_bits = hbits; |
| 1139 | rcu_assign_pointer(h->table, t); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1140 | |
| 1141 | set->data = h; |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1142 | #ifndef IP_SET_PROTO_UNDEF |
Jozsef Kadlecsik | 40cd63b | 2013-09-09 14:44:29 +0200 | [diff] [blame] | 1143 | if (set->family == NFPROTO_IPV4) { |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1144 | #endif |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 1145 | set->variant = &IPSET_TOKEN(HTYPE, 4_variant); |
Jozsef Kadlecsik | 03c8b23 | 2013-09-07 00:43:52 +0200 | [diff] [blame] | 1146 | set->dsize = ip_set_elem_len(set, tb, |
| 1147 | sizeof(struct IPSET_TOKEN(HTYPE, 4_elem))); |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1148 | #ifndef IP_SET_PROTO_UNDEF |
Jozsef Kadlecsik | 03c8b23 | 2013-09-07 00:43:52 +0200 | [diff] [blame] | 1149 | } else { |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 1150 | set->variant = &IPSET_TOKEN(HTYPE, 6_variant); |
Jozsef Kadlecsik | 03c8b23 | 2013-09-07 00:43:52 +0200 | [diff] [blame] | 1151 | set->dsize = ip_set_elem_len(set, tb, |
| 1152 | sizeof(struct IPSET_TOKEN(HTYPE, 6_elem))); |
| 1153 | } |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1154 | #endif |
Jozsef Kadlecsik | 03c8b23 | 2013-09-07 00:43:52 +0200 | [diff] [blame] | 1155 | if (tb[IPSET_ATTR_TIMEOUT]) { |
Jozsef Kadlecsik | ca134ce | 2013-09-07 00:10:07 +0200 | [diff] [blame] | 1156 | set->timeout = ip_set_timeout_uget(tb[IPSET_ATTR_TIMEOUT]); |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1157 | #ifndef IP_SET_PROTO_UNDEF |
Jozsef Kadlecsik | 03c8b23 | 2013-09-07 00:43:52 +0200 | [diff] [blame] | 1158 | if (set->family == NFPROTO_IPV4) |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1159 | #endif |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 1160 | IPSET_TOKEN(HTYPE, 4_gc_init)(set, |
| 1161 | IPSET_TOKEN(HTYPE, 4_gc)); |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1162 | #ifndef IP_SET_PROTO_UNDEF |
Jozsef Kadlecsik | 03c8b23 | 2013-09-07 00:43:52 +0200 | [diff] [blame] | 1163 | else |
Jozsef Kadlecsik | 35b8dcf | 2013-04-30 23:02:43 +0200 | [diff] [blame] | 1164 | IPSET_TOKEN(HTYPE, 6_gc_init)(set, |
| 1165 | IPSET_TOKEN(HTYPE, 6_gc)); |
Jozsef Kadlecsik | 07034ae | 2014-09-15 17:36:06 +0200 | [diff] [blame^] | 1166 | #endif |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1167 | } |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1168 | pr_debug("create %s hashsize %u (%u) maxelem %u: %p(%p)\n", |
Jozsef Kadlecsik | a0f28dc | 2013-04-30 21:23:18 +0200 | [diff] [blame] | 1169 | set->name, jhash_size(t->htable_bits), |
| 1170 | t->htable_bits, h->maxelem, set->data, t); |
Jozsef Kadlecsik | 1feab10 | 2013-04-08 21:05:44 +0200 | [diff] [blame] | 1171 | |
| 1172 | return 0; |
| 1173 | } |
| 1174 | #endif /* IP_SET_EMIT_CREATE */ |