Linux Audio

Check our new training course

Loading...
v6.13.7
   1/* SPDX-License-Identifier: GPL-2.0 */
   2#ifndef __NET_PKT_CLS_H
   3#define __NET_PKT_CLS_H
   4
   5#include <linux/pkt_cls.h>
   6#include <linux/workqueue.h>
   7#include <net/sch_generic.h>
   8#include <net/act_api.h>
   9#include <net/net_namespace.h>
  10
  11/* TC action not accessible from user space */
  12#define TC_ACT_CONSUMED		(TC_ACT_VALUE_MAX + 1)
  13
  14/* Basic packet classifier frontend definitions. */
  15
  16struct tcf_walker {
  17	int	stop;
  18	int	skip;
  19	int	count;
  20	bool	nonempty;
  21	unsigned long cookie;
  22	int	(*fn)(struct tcf_proto *, void *node, struct tcf_walker *);
  23};
  24
  25int register_tcf_proto_ops(struct tcf_proto_ops *ops);
  26void unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
  27#define NET_CLS_ALIAS_PREFIX "net-cls-"
  28#define MODULE_ALIAS_NET_CLS(kind)	MODULE_ALIAS(NET_CLS_ALIAS_PREFIX kind)
  29
  30struct tcf_block_ext_info {
  31	enum flow_block_binder_type binder_type;
  32	tcf_chain_head_change_t *chain_head_change;
  33	void *chain_head_change_priv;
  34	u32 block_index;
  35};
  36
  37struct tcf_qevent {
  38	struct tcf_block	*block;
  39	struct tcf_block_ext_info info;
  40	struct tcf_proto __rcu *filter_chain;
  41};
  42
  43struct tcf_block_cb;
  44bool tcf_queue_work(struct rcu_work *rwork, work_func_t func);
  45
  46#ifdef CONFIG_NET_CLS
  47struct tcf_chain *tcf_chain_get_by_act(struct tcf_block *block,
  48				       u32 chain_index);
  49void tcf_chain_put_by_act(struct tcf_chain *chain);
  50struct tcf_chain *tcf_get_next_chain(struct tcf_block *block,
  51				     struct tcf_chain *chain);
  52struct tcf_proto *tcf_get_next_proto(struct tcf_chain *chain,
  53				     struct tcf_proto *tp);
  54void tcf_block_netif_keep_dst(struct tcf_block *block);
  55int tcf_block_get(struct tcf_block **p_block,
  56		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
  57		  struct netlink_ext_ack *extack);
  58int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
  59		      struct tcf_block_ext_info *ei,
  60		      struct netlink_ext_ack *extack);
  61void tcf_block_put(struct tcf_block *block);
  62void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
  63		       struct tcf_block_ext_info *ei);
  64int tcf_exts_init_ex(struct tcf_exts *exts, struct net *net, int action,
  65		     int police, struct tcf_proto *tp, u32 handle, bool used_action_miss);
  66
  67static inline bool tcf_block_shared(struct tcf_block *block)
  68{
  69	return block->index;
  70}
  71
  72static inline bool tcf_block_non_null_shared(struct tcf_block *block)
  73{
  74	return block && block->index;
  75}
  76
  77#ifdef CONFIG_NET_CLS_ACT
  78DECLARE_STATIC_KEY_FALSE(tcf_sw_enabled_key);
  79
  80static inline bool tcf_block_bypass_sw(struct tcf_block *block)
  81{
  82	return block && !atomic_read(&block->useswcnt);
  83}
  84#endif
  85
  86static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
  87{
  88	WARN_ON(tcf_block_shared(block));
  89	return block->q;
  90}
  91
  92int tcf_classify(struct sk_buff *skb,
  93		 const struct tcf_block *block,
  94		 const struct tcf_proto *tp, struct tcf_result *res,
  95		 bool compat_mode);
  96
  97static inline bool tc_cls_stats_dump(struct tcf_proto *tp,
  98				     struct tcf_walker *arg,
  99				     void *filter)
 100{
 101	if (arg->count >= arg->skip && arg->fn(tp, filter, arg) < 0) {
 102		arg->stop = 1;
 103		return false;
 104	}
 105
 106	arg->count++;
 107	return true;
 108}
 109
 110#else
 111static inline bool tcf_block_shared(struct tcf_block *block)
 112{
 113	return false;
 114}
 115
 116static inline bool tcf_block_non_null_shared(struct tcf_block *block)
 117{
 118	return false;
 119}
 120
 121static inline
 122int tcf_block_get(struct tcf_block **p_block,
 123		  struct tcf_proto __rcu **p_filter_chain, struct Qdisc *q,
 124		  struct netlink_ext_ack *extack)
 125{
 126	return 0;
 127}
 128
 129static inline
 130int tcf_block_get_ext(struct tcf_block **p_block, struct Qdisc *q,
 131		      struct tcf_block_ext_info *ei,
 132		      struct netlink_ext_ack *extack)
 133{
 134	return 0;
 135}
 136
 137static inline void tcf_block_put(struct tcf_block *block)
 138{
 139}
 140
 141static inline
 142void tcf_block_put_ext(struct tcf_block *block, struct Qdisc *q,
 143		       struct tcf_block_ext_info *ei)
 144{
 145}
 146
 147static inline struct Qdisc *tcf_block_q(struct tcf_block *block)
 148{
 149	return NULL;
 150}
 151
 152static inline int tcf_classify(struct sk_buff *skb,
 153			       const struct tcf_block *block,
 154			       const struct tcf_proto *tp,
 155			       struct tcf_result *res, bool compat_mode)
 156{
 157	return TC_ACT_UNSPEC;
 158}
 159
 160#endif
 161
 162static inline unsigned long
 163__cls_set_class(unsigned long *clp, unsigned long cl)
 164{
 165	return xchg(clp, cl);
 
 
 
 
 166}
 167
 168static inline void
 169__tcf_bind_filter(struct Qdisc *q, struct tcf_result *r, unsigned long base)
 
 170{
 171	unsigned long cl;
 172
 173	cl = q->ops->cl_ops->bind_tcf(q, base, r->classid);
 174	cl = __cls_set_class(&r->class, cl);
 175	if (cl)
 176		q->ops->cl_ops->unbind_tcf(q, cl);
 
 177}
 178
 179static inline void
 180tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
 181{
 182	struct Qdisc *q = tp->chain->block->q;
 183
 184	/* Check q as it is not set for shared blocks. In that case,
 185	 * setting class is not supported.
 186	 */
 187	if (!q)
 188		return;
 189	sch_tree_lock(q);
 190	__tcf_bind_filter(q, r, base);
 191	sch_tree_unlock(q);
 192}
 193
 194static inline void
 195__tcf_unbind_filter(struct Qdisc *q, struct tcf_result *r)
 196{
 197	unsigned long cl;
 198
 199	if ((cl = __cls_set_class(&r->class, 0)) != 0)
 200		q->ops->cl_ops->unbind_tcf(q, cl);
 
 
 201}
 202
 203static inline void
 204tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
 205{
 206	struct Qdisc *q = tp->chain->block->q;
 207
 208	if (!q)
 209		return;
 210	__tcf_unbind_filter(q, r);
 211}
 212
 213static inline void tc_cls_bind_class(u32 classid, unsigned long cl,
 214				     void *q, struct tcf_result *res,
 215				     unsigned long base)
 216{
 217	if (res->classid == classid) {
 218		if (cl)
 219			__tcf_bind_filter(q, res, base);
 220		else
 221			__tcf_unbind_filter(q, res);
 222	}
 223}
 224
 225struct tcf_exts {
 226#ifdef CONFIG_NET_CLS_ACT
 227	__u32	type; /* for backward compat(TCA_OLD_COMPAT) */
 228	int nr_actions;
 229	struct tc_action **actions;
 230	struct net	*net;
 231	netns_tracker	ns_tracker;
 232	struct tcf_exts_miss_cookie_node *miss_cookie_node;
 233#endif
 234	/* Map to export classifier specific extension TLV types to the
 235	 * generic extensions API. Unsupported extensions must be set to 0.
 236	 */
 
 
 
 237	int action;
 238	int police;
 239};
 240
 241static inline int tcf_exts_init(struct tcf_exts *exts, struct net *net,
 242				int action, int police)
 243{
 244#ifdef CONFIG_NET_CLS
 245	return tcf_exts_init_ex(exts, net, action, police, NULL, 0, false);
 246#else
 247	return -EOPNOTSUPP;
 248#endif
 249}
 250
 251/* Return false if the netns is being destroyed in cleanup_net(). Callers
 252 * need to do cleanup synchronously in this case, otherwise may race with
 253 * tc_action_net_exit(). Return true for other cases.
 254 */
 255static inline bool tcf_exts_get_net(struct tcf_exts *exts)
 
 256{
 257#ifdef CONFIG_NET_CLS_ACT
 258	exts->net = maybe_get_net(exts->net);
 259	if (exts->net)
 260		netns_tracker_alloc(exts->net, &exts->ns_tracker, GFP_KERNEL);
 261	return exts->net != NULL;
 262#else
 263	return true;
 264#endif
 265}
 266
 267static inline void tcf_exts_put_net(struct tcf_exts *exts)
 268{
 269#ifdef CONFIG_NET_CLS_ACT
 270	if (exts->net)
 271		put_net_track(exts->net, &exts->ns_tracker);
 272#endif
 273}
 274
 275#ifdef CONFIG_NET_CLS_ACT
 276#define tcf_exts_for_each_action(i, a, exts) \
 277	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = (exts)->actions[i]); i++)
 278#else
 279#define tcf_exts_for_each_action(i, a, exts) \
 280	for (; 0; (void)(i), (void)(a), (void)(exts))
 281#endif
 282
 283#define tcf_act_for_each_action(i, a, actions) \
 284	for (i = 0; i < TCA_ACT_MAX_PRIO && ((a) = actions[i]); i++)
 285
 286static inline bool tc_act_in_hw(struct tc_action *act)
 287{
 288	return !!act->in_hw_count;
 289}
 290
 291static inline void
 292tcf_exts_hw_stats_update(const struct tcf_exts *exts,
 293			 struct flow_stats *stats,
 294			 bool use_act_stats)
 295{
 296#ifdef CONFIG_NET_CLS_ACT
 297	int i;
 298
 299	for (i = 0; i < exts->nr_actions; i++) {
 300		struct tc_action *a = exts->actions[i];
 301
 302		if (use_act_stats || tc_act_in_hw(a)) {
 303			if (!tcf_action_update_hw_stats(a))
 304				continue;
 305		}
 306
 307		preempt_disable();
 308		tcf_action_stats_update(a, stats->bytes, stats->pkts, stats->drops,
 309					stats->lastused, true);
 310		preempt_enable();
 311
 312		a->used_hw_stats = stats->used_hw_stats;
 313		a->used_hw_stats_valid = stats->used_hw_stats_valid;
 314	}
 315#endif
 316}
 317
 318/**
 319 * tcf_exts_has_actions - check if at least one action is present
 320 * @exts: tc filter extensions handle
 321 *
 322 * Returns true if at least one action is present.
 323 */
 324static inline bool tcf_exts_has_actions(struct tcf_exts *exts)
 
 325{
 326#ifdef CONFIG_NET_CLS_ACT
 327	return exts->nr_actions;
 328#else
 329	return false;
 330#endif
 331}
 332
 333/**
 334 * tcf_exts_exec - execute tc filter extensions
 335 * @skb: socket buffer
 336 * @exts: tc filter extensions handle
 337 * @res: desired result
 338 *
 339 * Executes all configured extensions. Returns TC_ACT_OK on a normal execution,
 340 * a negative number if the filter must be considered unmatched or
 341 * a positive action code (TC_ACT_*) which must be returned to the
 342 * underlying layer.
 343 */
 344static inline int
 345tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
 346	      struct tcf_result *res)
 347{
 348#ifdef CONFIG_NET_CLS_ACT
 349	return tcf_action_exec(skb, exts->actions, exts->nr_actions, res);
 350#endif
 351	return TC_ACT_OK;
 352}
 353
 354static inline int
 355tcf_exts_exec_ex(struct sk_buff *skb, struct tcf_exts *exts, int act_index,
 356		 struct tcf_result *res)
 357{
 358#ifdef CONFIG_NET_CLS_ACT
 359	return tcf_action_exec(skb, exts->actions + act_index,
 360			       exts->nr_actions - act_index, res);
 361#else
 362	return TC_ACT_OK;
 363#endif
 
 364}
 365
 366int tcf_exts_validate(struct net *net, struct tcf_proto *tp,
 367		      struct nlattr **tb, struct nlattr *rate_tlv,
 368		      struct tcf_exts *exts, u32 flags,
 369		      struct netlink_ext_ack *extack);
 370int tcf_exts_validate_ex(struct net *net, struct tcf_proto *tp, struct nlattr **tb,
 371			 struct nlattr *rate_tlv, struct tcf_exts *exts,
 372			 u32 flags, u32 fl_flags, struct netlink_ext_ack *extack);
 373void tcf_exts_destroy(struct tcf_exts *exts);
 374void tcf_exts_change(struct tcf_exts *dst, struct tcf_exts *src);
 375int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts);
 376int tcf_exts_terse_dump(struct sk_buff *skb, struct tcf_exts *exts);
 377int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts);
 378
 379/**
 380 * struct tcf_pkt_info - packet information
 381 *
 382 * @ptr: start of the pkt data
 383 * @nexthdr: offset of the next header
 384 */
 385struct tcf_pkt_info {
 386	unsigned char *		ptr;
 387	int			nexthdr;
 388};
 389
 390#ifdef CONFIG_NET_EMATCH
 391
 392struct tcf_ematch_ops;
 393
 394/**
 395 * struct tcf_ematch - extended match (ematch)
 396 * 
 397 * @matchid: identifier to allow userspace to reidentify a match
 398 * @flags: flags specifying attributes and the relation to other matches
 399 * @ops: the operations lookup table of the corresponding ematch module
 400 * @datalen: length of the ematch specific configuration data
 401 * @data: ematch specific data
 402 * @net: the network namespace
 403 */
 404struct tcf_ematch {
 405	struct tcf_ematch_ops * ops;
 406	unsigned long		data;
 407	unsigned int		datalen;
 408	u16			matchid;
 409	u16			flags;
 410	struct net		*net;
 411};
 412
 413static inline int tcf_em_is_container(struct tcf_ematch *em)
 414{
 415	return !em->ops;
 416}
 417
 418static inline int tcf_em_is_simple(struct tcf_ematch *em)
 419{
 420	return em->flags & TCF_EM_SIMPLE;
 421}
 422
 423static inline int tcf_em_is_inverted(struct tcf_ematch *em)
 424{
 425	return em->flags & TCF_EM_INVERT;
 426}
 427
 428static inline int tcf_em_last_match(struct tcf_ematch *em)
 429{
 430	return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
 431}
 432
 433static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
 434{
 435	if (tcf_em_last_match(em))
 436		return 1;
 437
 438	if (result == 0 && em->flags & TCF_EM_REL_AND)
 439		return 1;
 440
 441	if (result != 0 && em->flags & TCF_EM_REL_OR)
 442		return 1;
 443
 444	return 0;
 445}
 446	
 447/**
 448 * struct tcf_ematch_tree - ematch tree handle
 449 *
 450 * @hdr: ematch tree header supplied by userspace
 451 * @matches: array of ematches
 452 */
 453struct tcf_ematch_tree {
 454	struct tcf_ematch_tree_hdr hdr;
 455	struct tcf_ematch *	matches;
 456	
 457};
 458
 459/**
 460 * struct tcf_ematch_ops - ematch module operations
 461 * 
 462 * @kind: identifier (kind) of this ematch module
 463 * @datalen: length of expected configuration data (optional)
 464 * @change: called during validation (optional)
 465 * @match: called during ematch tree evaluation, must return 1/0
 466 * @destroy: called during destroyage (optional)
 467 * @dump: called during dumping process (optional)
 468 * @owner: owner, must be set to THIS_MODULE
 469 * @link: link to previous/next ematch module (internal use)
 470 */
 471struct tcf_ematch_ops {
 472	int			kind;
 473	int			datalen;
 474	int			(*change)(struct net *net, void *,
 475					  int, struct tcf_ematch *);
 476	int			(*match)(struct sk_buff *, struct tcf_ematch *,
 477					 struct tcf_pkt_info *);
 478	void			(*destroy)(struct tcf_ematch *);
 
 479	int			(*dump)(struct sk_buff *, struct tcf_ematch *);
 480	struct module		*owner;
 481	struct list_head	link;
 482};
 483
 484int tcf_em_register(struct tcf_ematch_ops *);
 485void tcf_em_unregister(struct tcf_ematch_ops *);
 486int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
 487			 struct tcf_ematch_tree *);
 488void tcf_em_tree_destroy(struct tcf_ematch_tree *);
 489int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
 490int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
 491			struct tcf_pkt_info *);
 492
 493/**
 494 * tcf_em_tree_match - evaluate an ematch tree
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 495 *
 496 * @skb: socket buffer of the packet in question
 497 * @tree: ematch tree to be used for evaluation
 498 * @info: packet information examined by classifier
 499 *
 500 * This function matches @skb against the ematch tree in @tree by going
 501 * through all ematches respecting their logic relations returning
 502 * as soon as the result is obvious.
 503 *
 504 * Returns 1 if the ematch tree as-one matches, no ematches are configured
 505 * or ematch is not enabled in the kernel, otherwise 0 is returned.
 506 */
 507static inline int tcf_em_tree_match(struct sk_buff *skb,
 508				    struct tcf_ematch_tree *tree,
 509				    struct tcf_pkt_info *info)
 510{
 511	if (tree->hdr.nmatches)
 512		return __tcf_em_tree_match(skb, tree, info);
 513	else
 514		return 1;
 515}
 516
 517#define MODULE_ALIAS_TCF_EMATCH(kind)	MODULE_ALIAS("ematch-kind-" __stringify(kind))
 518
 519#else /* CONFIG_NET_EMATCH */
 520
 521struct tcf_ematch_tree {
 522};
 523
 524#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
 525#define tcf_em_tree_destroy(t) do { (void)(t); } while(0)
 526#define tcf_em_tree_dump(skb, t, tlv) (0)
 
 527#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
 528
 529#endif /* CONFIG_NET_EMATCH */
 530
 531static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
 532{
 533	switch (layer) {
 534		case TCF_LAYER_LINK:
 535			return skb_mac_header(skb);
 536		case TCF_LAYER_NETWORK:
 537			return skb_network_header(skb);
 538		case TCF_LAYER_TRANSPORT:
 539			return skb_transport_header(skb);
 540	}
 541
 542	return NULL;
 543}
 544
 545static inline int tcf_valid_offset(const struct sk_buff *skb,
 546				   const unsigned char *ptr, const int len)
 547{
 548	return likely((ptr + len) <= skb_tail_pointer(skb) &&
 549		      ptr >= skb->head &&
 550		      (ptr <= (ptr + len)));
 551}
 552
 
 
 
 553static inline int
 554tcf_change_indev(struct net *net, struct nlattr *indev_tlv,
 555		 struct netlink_ext_ack *extack)
 556{
 557	char indev[IFNAMSIZ];
 558	struct net_device *dev;
 559
 560	if (nla_strscpy(indev, indev_tlv, IFNAMSIZ) < 0) {
 561		NL_SET_ERR_MSG_ATTR(extack, indev_tlv,
 562				    "Interface name too long");
 563		return -EINVAL;
 564	}
 565	dev = __dev_get_by_name(net, indev);
 566	if (!dev) {
 567		NL_SET_ERR_MSG_ATTR(extack, indev_tlv,
 568				    "Network device not found");
 569		return -ENODEV;
 570	}
 571	return dev->ifindex;
 572}
 573
 574static inline bool
 575tcf_match_indev(struct sk_buff *skb, int ifindex)
 576{
 577	if (!ifindex)
 578		return true;
 579	if  (!skb->skb_iif)
 580		return false;
 581	return ifindex == skb->skb_iif;
 582}
 583
 584int tc_setup_offload_action(struct flow_action *flow_action,
 585			    const struct tcf_exts *exts,
 586			    struct netlink_ext_ack *extack);
 587void tc_cleanup_offload_action(struct flow_action *flow_action);
 588int tc_setup_action(struct flow_action *flow_action,
 589		    struct tc_action *actions[],
 590		    u32 miss_cookie_base,
 591		    struct netlink_ext_ack *extack);
 592
 593int tc_setup_cb_call(struct tcf_block *block, enum tc_setup_type type,
 594		     void *type_data, bool err_stop, bool rtnl_held);
 595int tc_setup_cb_add(struct tcf_block *block, struct tcf_proto *tp,
 596		    enum tc_setup_type type, void *type_data, bool err_stop,
 597		    u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
 598int tc_setup_cb_replace(struct tcf_block *block, struct tcf_proto *tp,
 599			enum tc_setup_type type, void *type_data, bool err_stop,
 600			u32 *old_flags, unsigned int *old_in_hw_count,
 601			u32 *new_flags, unsigned int *new_in_hw_count,
 602			bool rtnl_held);
 603int tc_setup_cb_destroy(struct tcf_block *block, struct tcf_proto *tp,
 604			enum tc_setup_type type, void *type_data, bool err_stop,
 605			u32 *flags, unsigned int *in_hw_count, bool rtnl_held);
 606int tc_setup_cb_reoffload(struct tcf_block *block, struct tcf_proto *tp,
 607			  bool add, flow_setup_cb_t *cb,
 608			  enum tc_setup_type type, void *type_data,
 609			  void *cb_priv, u32 *flags, unsigned int *in_hw_count);
 610unsigned int tcf_exts_num_actions(struct tcf_exts *exts);
 611
 612#ifdef CONFIG_NET_CLS_ACT
 613int tcf_qevent_init(struct tcf_qevent *qe, struct Qdisc *sch,
 614		    enum flow_block_binder_type binder_type,
 615		    struct nlattr *block_index_attr,
 616		    struct netlink_ext_ack *extack);
 617void tcf_qevent_destroy(struct tcf_qevent *qe, struct Qdisc *sch);
 618int tcf_qevent_validate_change(struct tcf_qevent *qe, struct nlattr *block_index_attr,
 619			       struct netlink_ext_ack *extack);
 620struct sk_buff *tcf_qevent_handle(struct tcf_qevent *qe, struct Qdisc *sch, struct sk_buff *skb,
 621				  struct sk_buff **to_free, int *ret);
 622int tcf_qevent_dump(struct sk_buff *skb, int attr_name, struct tcf_qevent *qe);
 623#else
 624static inline int tcf_qevent_init(struct tcf_qevent *qe, struct Qdisc *sch,
 625				  enum flow_block_binder_type binder_type,
 626				  struct nlattr *block_index_attr,
 627				  struct netlink_ext_ack *extack)
 628{
 629	return 0;
 630}
 631
 632static inline void tcf_qevent_destroy(struct tcf_qevent *qe, struct Qdisc *sch)
 633{
 634}
 635
 636static inline int tcf_qevent_validate_change(struct tcf_qevent *qe, struct nlattr *block_index_attr,
 637					     struct netlink_ext_ack *extack)
 638{
 639	return 0;
 640}
 641
 642static inline struct sk_buff *
 643tcf_qevent_handle(struct tcf_qevent *qe, struct Qdisc *sch, struct sk_buff *skb,
 644		  struct sk_buff **to_free, int *ret)
 645{
 646	return skb;
 647}
 648
 649static inline int tcf_qevent_dump(struct sk_buff *skb, int attr_name, struct tcf_qevent *qe)
 650{
 651	return 0;
 652}
 653#endif
 654
 655struct tc_cls_u32_knode {
 656	struct tcf_exts *exts;
 657	struct tcf_result *res;
 658	struct tc_u32_sel *sel;
 659	u32 handle;
 660	u32 val;
 661	u32 mask;
 662	u32 link_handle;
 663	u8 fshift;
 664};
 665
 666struct tc_cls_u32_hnode {
 667	u32 handle;
 668	u32 prio;
 669	unsigned int divisor;
 670};
 671
 672enum tc_clsu32_command {
 673	TC_CLSU32_NEW_KNODE,
 674	TC_CLSU32_REPLACE_KNODE,
 675	TC_CLSU32_DELETE_KNODE,
 676	TC_CLSU32_NEW_HNODE,
 677	TC_CLSU32_REPLACE_HNODE,
 678	TC_CLSU32_DELETE_HNODE,
 679};
 680
 681struct tc_cls_u32_offload {
 682	struct flow_cls_common_offload common;
 683	/* knode values */
 684	enum tc_clsu32_command command;
 685	union {
 686		struct tc_cls_u32_knode knode;
 687		struct tc_cls_u32_hnode hnode;
 688	};
 689};
 690
 691static inline bool tc_can_offload(const struct net_device *dev)
 692{
 693	return dev->features & NETIF_F_HW_TC;
 694}
 695
 696static inline bool tc_can_offload_extack(const struct net_device *dev,
 697					 struct netlink_ext_ack *extack)
 698{
 699	bool can = tc_can_offload(dev);
 700
 701	if (!can)
 702		NL_SET_ERR_MSG(extack, "TC offload is disabled on net device");
 703
 704	return can;
 705}
 706
 707static inline bool
 708tc_cls_can_offload_and_chain0(const struct net_device *dev,
 709			      struct flow_cls_common_offload *common)
 710{
 711	if (!tc_can_offload_extack(dev, common->extack))
 712		return false;
 713	if (common->chain_index) {
 714		NL_SET_ERR_MSG(common->extack,
 715			       "Driver supports only offload of chain 0");
 716		return false;
 717	}
 718	return true;
 719}
 720
 721static inline bool tc_skip_hw(u32 flags)
 722{
 723	return (flags & TCA_CLS_FLAGS_SKIP_HW) ? true : false;
 724}
 725
 726static inline bool tc_skip_sw(u32 flags)
 727{
 728	return (flags & TCA_CLS_FLAGS_SKIP_SW) ? true : false;
 729}
 730
 731/* SKIP_HW and SKIP_SW are mutually exclusive flags. */
 732static inline bool tc_flags_valid(u32 flags)
 733{
 734	if (flags & ~(TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW |
 735		      TCA_CLS_FLAGS_VERBOSE))
 736		return false;
 737
 738	flags &= TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW;
 739	if (!(flags ^ (TCA_CLS_FLAGS_SKIP_HW | TCA_CLS_FLAGS_SKIP_SW)))
 740		return false;
 741
 742	return true;
 743}
 744
 745static inline bool tc_in_hw(u32 flags)
 746{
 747	return (flags & TCA_CLS_FLAGS_IN_HW) ? true : false;
 748}
 749
 750static inline void
 751tc_cls_common_offload_init(struct flow_cls_common_offload *cls_common,
 752			   const struct tcf_proto *tp, u32 flags,
 753			   struct netlink_ext_ack *extack)
 754{
 755	cls_common->chain_index = tp->chain->index;
 756	cls_common->protocol = tp->protocol;
 757	cls_common->prio = tp->prio >> 16;
 758	cls_common->skip_sw = tc_skip_sw(flags);
 759	if (tc_skip_sw(flags) || flags & TCA_CLS_FLAGS_VERBOSE)
 760		cls_common->extack = extack;
 761}
 762
 763static inline void tcf_proto_update_usesw(struct tcf_proto *tp, u32 flags)
 764{
 765	if (tp->usesw)
 766		return;
 767	if (tc_skip_sw(flags) && tc_in_hw(flags))
 768		return;
 769	tp->usesw = true;
 770}
 771
 772#if IS_ENABLED(CONFIG_NET_TC_SKB_EXT)
 773static inline struct tc_skb_ext *tc_skb_ext_alloc(struct sk_buff *skb)
 774{
 775	struct tc_skb_ext *tc_skb_ext = skb_ext_add(skb, TC_SKB_EXT);
 776
 777	if (tc_skb_ext)
 778		memset(tc_skb_ext, 0, sizeof(*tc_skb_ext));
 779	return tc_skb_ext;
 780}
 781#endif
 782
 783enum tc_matchall_command {
 784	TC_CLSMATCHALL_REPLACE,
 785	TC_CLSMATCHALL_DESTROY,
 786	TC_CLSMATCHALL_STATS,
 787};
 788
 789struct tc_cls_matchall_offload {
 790	struct flow_cls_common_offload common;
 791	enum tc_matchall_command command;
 792	struct flow_rule *rule;
 793	struct flow_stats stats;
 794	bool use_act_stats;
 795	unsigned long cookie;
 796};
 797
 798enum tc_clsbpf_command {
 799	TC_CLSBPF_OFFLOAD,
 800	TC_CLSBPF_STATS,
 801};
 802
 803struct tc_cls_bpf_offload {
 804	struct flow_cls_common_offload common;
 805	enum tc_clsbpf_command command;
 806	struct tcf_exts *exts;
 807	struct bpf_prog *prog;
 808	struct bpf_prog *oldprog;
 809	const char *name;
 810	bool exts_integrated;
 811};
 812
 813/* This structure holds cookie structure that is passed from user
 814 * to the kernel for actions and classifiers
 815 */
 816struct tc_cookie {
 817	u8  *data;
 818	u32 len;
 819	struct rcu_head rcu;
 820};
 821
 822struct tc_qopt_offload_stats {
 823	struct gnet_stats_basic_sync *bstats;
 824	struct gnet_stats_queue *qstats;
 825};
 826
 827enum tc_mq_command {
 828	TC_MQ_CREATE,
 829	TC_MQ_DESTROY,
 830	TC_MQ_STATS,
 831	TC_MQ_GRAFT,
 832};
 833
 834struct tc_mq_opt_offload_graft_params {
 835	unsigned long queue;
 836	u32 child_handle;
 837};
 838
 839struct tc_mq_qopt_offload {
 840	enum tc_mq_command command;
 841	u32 handle;
 842	union {
 843		struct tc_qopt_offload_stats stats;
 844		struct tc_mq_opt_offload_graft_params graft_params;
 845	};
 846};
 847
 848enum tc_htb_command {
 849	/* Root */
 850	TC_HTB_CREATE, /* Initialize HTB offload. */
 851	TC_HTB_DESTROY, /* Destroy HTB offload. */
 852
 853	/* Classes */
 854	/* Allocate qid and create leaf. */
 855	TC_HTB_LEAF_ALLOC_QUEUE,
 856	/* Convert leaf to inner, preserve and return qid, create new leaf. */
 857	TC_HTB_LEAF_TO_INNER,
 858	/* Delete leaf, while siblings remain. */
 859	TC_HTB_LEAF_DEL,
 860	/* Delete leaf, convert parent to leaf, preserving qid. */
 861	TC_HTB_LEAF_DEL_LAST,
 862	/* TC_HTB_LEAF_DEL_LAST, but delete driver data on hardware errors. */
 863	TC_HTB_LEAF_DEL_LAST_FORCE,
 864	/* Modify parameters of a node. */
 865	TC_HTB_NODE_MODIFY,
 866
 867	/* Class qdisc */
 868	TC_HTB_LEAF_QUERY_QUEUE, /* Query qid by classid. */
 869};
 870
 871struct tc_htb_qopt_offload {
 872	struct netlink_ext_ack *extack;
 873	enum tc_htb_command command;
 874	u32 parent_classid;
 875	u16 classid;
 876	u16 qid;
 877	u32 quantum;
 878	u64 rate;
 879	u64 ceil;
 880	u8 prio;
 881};
 882
 883#define TC_HTB_CLASSID_ROOT U32_MAX
 884
 885enum tc_red_command {
 886	TC_RED_REPLACE,
 887	TC_RED_DESTROY,
 888	TC_RED_STATS,
 889	TC_RED_XSTATS,
 890	TC_RED_GRAFT,
 891};
 892
 893struct tc_red_qopt_offload_params {
 894	u32 min;
 895	u32 max;
 896	u32 probability;
 897	u32 limit;
 898	bool is_ecn;
 899	bool is_harddrop;
 900	bool is_nodrop;
 901	struct gnet_stats_queue *qstats;
 902};
 903
 904struct tc_red_qopt_offload {
 905	enum tc_red_command command;
 906	u32 handle;
 907	u32 parent;
 908	union {
 909		struct tc_red_qopt_offload_params set;
 910		struct tc_qopt_offload_stats stats;
 911		struct red_stats *xstats;
 912		u32 child_handle;
 913	};
 914};
 915
 916enum tc_gred_command {
 917	TC_GRED_REPLACE,
 918	TC_GRED_DESTROY,
 919	TC_GRED_STATS,
 920};
 921
 922struct tc_gred_vq_qopt_offload_params {
 923	bool present;
 924	u32 limit;
 925	u32 prio;
 926	u32 min;
 927	u32 max;
 928	bool is_ecn;
 929	bool is_harddrop;
 930	u32 probability;
 931	/* Only need backlog, see struct tc_prio_qopt_offload_params */
 932	u32 *backlog;
 933};
 934
 935struct tc_gred_qopt_offload_params {
 936	bool grio_on;
 937	bool wred_on;
 938	unsigned int dp_cnt;
 939	unsigned int dp_def;
 940	struct gnet_stats_queue *qstats;
 941	struct tc_gred_vq_qopt_offload_params tab[MAX_DPs];
 942};
 943
 944struct tc_gred_qopt_offload_stats {
 945	struct gnet_stats_basic_sync bstats[MAX_DPs];
 946	struct gnet_stats_queue qstats[MAX_DPs];
 947	struct red_stats *xstats[MAX_DPs];
 948};
 949
 950struct tc_gred_qopt_offload {
 951	enum tc_gred_command command;
 952	u32 handle;
 953	u32 parent;
 954	union {
 955		struct tc_gred_qopt_offload_params set;
 956		struct tc_gred_qopt_offload_stats stats;
 957	};
 958};
 959
 960enum tc_prio_command {
 961	TC_PRIO_REPLACE,
 962	TC_PRIO_DESTROY,
 963	TC_PRIO_STATS,
 964	TC_PRIO_GRAFT,
 965};
 966
 967struct tc_prio_qopt_offload_params {
 968	int bands;
 969	u8 priomap[TC_PRIO_MAX + 1];
 970	/* At the point of un-offloading the Qdisc, the reported backlog and
 971	 * qlen need to be reduced by the portion that is in HW.
 972	 */
 973	struct gnet_stats_queue *qstats;
 974};
 975
 976struct tc_prio_qopt_offload_graft_params {
 977	u8 band;
 978	u32 child_handle;
 979};
 980
 981struct tc_prio_qopt_offload {
 982	enum tc_prio_command command;
 983	u32 handle;
 984	u32 parent;
 985	union {
 986		struct tc_prio_qopt_offload_params replace_params;
 987		struct tc_qopt_offload_stats stats;
 988		struct tc_prio_qopt_offload_graft_params graft_params;
 989	};
 990};
 991
 992enum tc_root_command {
 993	TC_ROOT_GRAFT,
 994};
 995
 996struct tc_root_qopt_offload {
 997	enum tc_root_command command;
 998	u32 handle;
 999	bool ingress;
1000};
1001
1002enum tc_ets_command {
1003	TC_ETS_REPLACE,
1004	TC_ETS_DESTROY,
1005	TC_ETS_STATS,
1006	TC_ETS_GRAFT,
1007};
1008
1009struct tc_ets_qopt_offload_replace_params {
1010	unsigned int bands;
1011	u8 priomap[TC_PRIO_MAX + 1];
1012	unsigned int quanta[TCQ_ETS_MAX_BANDS];	/* 0 for strict bands. */
1013	unsigned int weights[TCQ_ETS_MAX_BANDS];
1014	struct gnet_stats_queue *qstats;
1015};
1016
1017struct tc_ets_qopt_offload_graft_params {
1018	u8 band;
1019	u32 child_handle;
1020};
1021
1022struct tc_ets_qopt_offload {
1023	enum tc_ets_command command;
1024	u32 handle;
1025	u32 parent;
1026	union {
1027		struct tc_ets_qopt_offload_replace_params replace_params;
1028		struct tc_qopt_offload_stats stats;
1029		struct tc_ets_qopt_offload_graft_params graft_params;
1030	};
1031};
1032
1033enum tc_tbf_command {
1034	TC_TBF_REPLACE,
1035	TC_TBF_DESTROY,
1036	TC_TBF_STATS,
1037	TC_TBF_GRAFT,
1038};
1039
1040struct tc_tbf_qopt_offload_replace_params {
1041	struct psched_ratecfg rate;
1042	u32 max_size;
1043	struct gnet_stats_queue *qstats;
1044};
1045
1046struct tc_tbf_qopt_offload {
1047	enum tc_tbf_command command;
1048	u32 handle;
1049	u32 parent;
1050	union {
1051		struct tc_tbf_qopt_offload_replace_params replace_params;
1052		struct tc_qopt_offload_stats stats;
1053		u32 child_handle;
1054	};
1055};
1056
1057enum tc_fifo_command {
1058	TC_FIFO_REPLACE,
1059	TC_FIFO_DESTROY,
1060	TC_FIFO_STATS,
1061};
1062
1063struct tc_fifo_qopt_offload {
1064	enum tc_fifo_command command;
1065	u32 handle;
1066	u32 parent;
1067	union {
1068		struct tc_qopt_offload_stats stats;
1069	};
1070};
1071
1072#ifdef CONFIG_NET_CLS_ACT
1073DECLARE_STATIC_KEY_FALSE(tc_skb_ext_tc);
1074void tc_skb_ext_tc_enable(void);
1075void tc_skb_ext_tc_disable(void);
1076#define tc_skb_ext_tc_enabled() static_branch_unlikely(&tc_skb_ext_tc)
1077#else /* CONFIG_NET_CLS_ACT */
1078static inline void tc_skb_ext_tc_enable(void) { }
1079static inline void tc_skb_ext_tc_disable(void) { }
1080#define tc_skb_ext_tc_enabled() false
1081#endif
1082
1083#endif
v3.1
 
  1#ifndef __NET_PKT_CLS_H
  2#define __NET_PKT_CLS_H
  3
  4#include <linux/pkt_cls.h>
 
  5#include <net/sch_generic.h>
  6#include <net/act_api.h>
 
 
 
 
  7
  8/* Basic packet classifier frontend definitions. */
  9
 10struct tcf_walker {
 11	int	stop;
 12	int	skip;
 13	int	count;
 14	int	(*fn)(struct tcf_proto *, unsigned long node, struct tcf_walker *);
 
 
 15};
 16
 17extern int register_tcf_proto_ops(struct tcf_proto_ops *ops);
 18extern int unregister_tcf_proto_ops(struct tcf_proto_ops *ops);
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 19
 20static inline unsigned long
 21__cls_set_class(unsigned long *clp, unsigned long cl)
 22{
 23	unsigned long old_cl;
 24 
 25	old_cl = *clp;
 26	*clp = cl;
 27	return old_cl;
 28}
 29
 30static inline unsigned long
 31cls_set_class(struct tcf_proto *tp, unsigned long *clp, 
 32	unsigned long cl)
 33{
 34	unsigned long old_cl;
 35	
 36	tcf_tree_lock(tp);
 37	old_cl = __cls_set_class(clp, cl);
 38	tcf_tree_unlock(tp);
 39 
 40	return old_cl;
 41}
 42
 43static inline void
 44tcf_bind_filter(struct tcf_proto *tp, struct tcf_result *r, unsigned long base)
 45{
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 46	unsigned long cl;
 47
 48	cl = tp->q->ops->cl_ops->bind_tcf(tp->q, base, r->classid);
 49	cl = cls_set_class(tp, &r->class, cl);
 50	if (cl)
 51		tp->q->ops->cl_ops->unbind_tcf(tp->q, cl);
 52}
 53
 54static inline void
 55tcf_unbind_filter(struct tcf_proto *tp, struct tcf_result *r)
 56{
 57	unsigned long cl;
 
 
 
 
 
 58
 59	if ((cl = __cls_set_class(&r->class, 0)) != 0)
 60		tp->q->ops->cl_ops->unbind_tcf(tp->q, cl);
 
 
 
 
 
 
 
 
 61}
 62
 63struct tcf_exts {
 64#ifdef CONFIG_NET_CLS_ACT
 65	struct tc_action *action;
 
 
 
 
 
 66#endif
 67};
 68
 69/* Map to export classifier specific extension TLV types to the
 70 * generic extensions API. Unsupported extensions must be set to 0.
 71 */
 72struct tcf_ext_map {
 73	int action;
 74	int police;
 75};
 76
 77/**
 78 * tcf_exts_is_predicative - check if a predicative extension is present
 79 * @exts: tc filter extensions handle
 80 *
 81 * Returns 1 if a predicative extension is present, i.e. an extension which
 82 * might cause further actions and thus overrule the regular tcf_result.
 
 
 
 
 
 
 
 83 */
 84static inline int
 85tcf_exts_is_predicative(struct tcf_exts *exts)
 86{
 87#ifdef CONFIG_NET_CLS_ACT
 88	return !!exts->action;
 
 
 
 89#else
 90	return 0;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 91#endif
 92}
 93
 94/**
 95 * tcf_exts_is_available - check if at least one extension is present
 96 * @exts: tc filter extensions handle
 97 *
 98 * Returns 1 if at least one extension is present.
 99 */
100static inline int
101tcf_exts_is_available(struct tcf_exts *exts)
102{
103	/* All non-predicative extensions must be added here. */
104	return tcf_exts_is_predicative(exts);
 
 
 
105}
106
107/**
108 * tcf_exts_exec - execute tc filter extensions
109 * @skb: socket buffer
110 * @exts: tc filter extensions handle
111 * @res: desired result
112 *
113 * Executes all configured extensions. Returns 0 on a normal execution,
114 * a negative number if the filter must be considered unmatched or
115 * a positive action code (TC_ACT_*) which must be returned to the
116 * underlying layer.
117 */
118static inline int
119tcf_exts_exec(struct sk_buff *skb, struct tcf_exts *exts,
120	       struct tcf_result *res)
 
 
 
 
 
 
 
 
 
 
121{
122#ifdef CONFIG_NET_CLS_ACT
123	if (exts->action)
124		return tcf_action_exec(skb, exts->action, res);
 
 
125#endif
126	return 0;
127}
128
129extern int tcf_exts_validate(struct tcf_proto *tp, struct nlattr **tb,
130	                     struct nlattr *rate_tlv, struct tcf_exts *exts,
131	                     const struct tcf_ext_map *map);
132extern void tcf_exts_destroy(struct tcf_proto *tp, struct tcf_exts *exts);
133extern void tcf_exts_change(struct tcf_proto *tp, struct tcf_exts *dst,
134	                     struct tcf_exts *src);
135extern int tcf_exts_dump(struct sk_buff *skb, struct tcf_exts *exts,
136	                 const struct tcf_ext_map *map);
137extern int tcf_exts_dump_stats(struct sk_buff *skb, struct tcf_exts *exts,
138	                       const struct tcf_ext_map *map);
 
 
139
140/**
141 * struct tcf_pkt_info - packet information
 
 
 
142 */
143struct tcf_pkt_info {
144	unsigned char *		ptr;
145	int			nexthdr;
146};
147
148#ifdef CONFIG_NET_EMATCH
149
150struct tcf_ematch_ops;
151
152/**
153 * struct tcf_ematch - extended match (ematch)
154 * 
155 * @matchid: identifier to allow userspace to reidentify a match
156 * @flags: flags specifying attributes and the relation to other matches
157 * @ops: the operations lookup table of the corresponding ematch module
158 * @datalen: length of the ematch specific configuration data
159 * @data: ematch specific data
 
160 */
161struct tcf_ematch {
162	struct tcf_ematch_ops * ops;
163	unsigned long		data;
164	unsigned int		datalen;
165	u16			matchid;
166	u16			flags;
 
167};
168
169static inline int tcf_em_is_container(struct tcf_ematch *em)
170{
171	return !em->ops;
172}
173
174static inline int tcf_em_is_simple(struct tcf_ematch *em)
175{
176	return em->flags & TCF_EM_SIMPLE;
177}
178
179static inline int tcf_em_is_inverted(struct tcf_ematch *em)
180{
181	return em->flags & TCF_EM_INVERT;
182}
183
184static inline int tcf_em_last_match(struct tcf_ematch *em)
185{
186	return (em->flags & TCF_EM_REL_MASK) == TCF_EM_REL_END;
187}
188
189static inline int tcf_em_early_end(struct tcf_ematch *em, int result)
190{
191	if (tcf_em_last_match(em))
192		return 1;
193
194	if (result == 0 && em->flags & TCF_EM_REL_AND)
195		return 1;
196
197	if (result != 0 && em->flags & TCF_EM_REL_OR)
198		return 1;
199
200	return 0;
201}
202	
203/**
204 * struct tcf_ematch_tree - ematch tree handle
205 *
206 * @hdr: ematch tree header supplied by userspace
207 * @matches: array of ematches
208 */
209struct tcf_ematch_tree {
210	struct tcf_ematch_tree_hdr hdr;
211	struct tcf_ematch *	matches;
212	
213};
214
215/**
216 * struct tcf_ematch_ops - ematch module operations
217 * 
218 * @kind: identifier (kind) of this ematch module
219 * @datalen: length of expected configuration data (optional)
220 * @change: called during validation (optional)
221 * @match: called during ematch tree evaluation, must return 1/0
222 * @destroy: called during destroyage (optional)
223 * @dump: called during dumping process (optional)
224 * @owner: owner, must be set to THIS_MODULE
225 * @link: link to previous/next ematch module (internal use)
226 */
227struct tcf_ematch_ops {
228	int			kind;
229	int			datalen;
230	int			(*change)(struct tcf_proto *, void *,
231					  int, struct tcf_ematch *);
232	int			(*match)(struct sk_buff *, struct tcf_ematch *,
233					 struct tcf_pkt_info *);
234	void			(*destroy)(struct tcf_proto *,
235					   struct tcf_ematch *);
236	int			(*dump)(struct sk_buff *, struct tcf_ematch *);
237	struct module		*owner;
238	struct list_head	link;
239};
240
241extern int tcf_em_register(struct tcf_ematch_ops *);
242extern void tcf_em_unregister(struct tcf_ematch_ops *);
243extern int tcf_em_tree_validate(struct tcf_proto *, struct nlattr *,
244				struct tcf_ematch_tree *);
245extern void tcf_em_tree_destroy(struct tcf_proto *, struct tcf_ematch_tree *);
246extern int tcf_em_tree_dump(struct sk_buff *, struct tcf_ematch_tree *, int);
247extern int __tcf_em_tree_match(struct sk_buff *, struct tcf_ematch_tree *,
248			       struct tcf_pkt_info *);
249
250/**
251 * tcf_em_tree_change - replace ematch tree of a running classifier
252 *
253 * @tp: classifier kind handle
254 * @dst: destination ematch tree variable
255 * @src: source ematch tree (temporary tree from tcf_em_tree_validate)
256 *
257 * This functions replaces the ematch tree in @dst with the ematch
258 * tree in @src. The classifier in charge of the ematch tree may be
259 * running.
260 */
261static inline void tcf_em_tree_change(struct tcf_proto *tp,
262				      struct tcf_ematch_tree *dst,
263				      struct tcf_ematch_tree *src)
264{
265	tcf_tree_lock(tp);
266	memcpy(dst, src, sizeof(*dst));
267	tcf_tree_unlock(tp);
268}
269
270/**
271 * tcf_em_tree_match - evaulate an ematch tree
272 *
273 * @skb: socket buffer of the packet in question
274 * @tree: ematch tree to be used for evaluation
275 * @info: packet information examined by classifier
276 *
277 * This function matches @skb against the ematch tree in @tree by going
278 * through all ematches respecting their logic relations returning
279 * as soon as the result is obvious.
280 *
281 * Returns 1 if the ematch tree as-one matches, no ematches are configured
282 * or ematch is not enabled in the kernel, otherwise 0 is returned.
283 */
284static inline int tcf_em_tree_match(struct sk_buff *skb,
285				    struct tcf_ematch_tree *tree,
286				    struct tcf_pkt_info *info)
287{
288	if (tree->hdr.nmatches)
289		return __tcf_em_tree_match(skb, tree, info);
290	else
291		return 1;
292}
293
294#define MODULE_ALIAS_TCF_EMATCH(kind)	MODULE_ALIAS("ematch-kind-" __stringify(kind))
295
296#else /* CONFIG_NET_EMATCH */
297
298struct tcf_ematch_tree {
299};
300
301#define tcf_em_tree_validate(tp, tb, t) ((void)(t), 0)
302#define tcf_em_tree_destroy(tp, t) do { (void)(t); } while(0)
303#define tcf_em_tree_dump(skb, t, tlv) (0)
304#define tcf_em_tree_change(tp, dst, src) do { } while(0)
305#define tcf_em_tree_match(skb, t, info) ((void)(info), 1)
306
307#endif /* CONFIG_NET_EMATCH */
308
309static inline unsigned char * tcf_get_base_ptr(struct sk_buff *skb, int layer)
310{
311	switch (layer) {
312		case TCF_LAYER_LINK:
313			return skb->data;
314		case TCF_LAYER_NETWORK:
315			return skb_network_header(skb);
316		case TCF_LAYER_TRANSPORT:
317			return skb_transport_header(skb);
318	}
319
320	return NULL;
321}
322
323static inline int tcf_valid_offset(const struct sk_buff *skb,
324				   const unsigned char *ptr, const int len)
325{
326	return likely((ptr + len) <= skb_tail_pointer(skb) &&
327		      ptr >= skb->head &&
328		      (ptr <= (ptr + len)));
329}
330
331#ifdef CONFIG_NET_CLS_IND
332#include <net/net_namespace.h>
333
334static inline int
335tcf_change_indev(struct tcf_proto *tp, char *indev, struct nlattr *indev_tlv)
 
336{
337	if (nla_strlcpy(indev, indev_tlv, IFNAMSIZ) >= IFNAMSIZ)
 
 
 
 
 
338		return -EINVAL;
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
339	return 0;
340}
341
342static inline int
343tcf_match_indev(struct sk_buff *skb, char *indev)
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
344{
345	struct net_device *dev;
 
 
 
 
 
 
346
347	if (indev[0]) {
348		if  (!skb->skb_iif)
349			return 0;
350		dev = __dev_get_by_index(dev_net(skb->dev), skb->skb_iif);
351		if (!dev || strcmp(indev, dev->name))
352			return 0;
 
 
 
 
353	}
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
354
355	return 1;
 
 
 
 
 
 
 
 
 
 
356}
357#endif /* CONFIG_NET_CLS_IND */
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
358
359#endif