diff options
Diffstat (limited to 'lib/libpfctl/libpfctl.c')
| -rw-r--r-- | lib/libpfctl/libpfctl.c | 98 | 
1 files changed, 98 insertions, 0 deletions
| diff --git a/lib/libpfctl/libpfctl.c b/lib/libpfctl/libpfctl.c index 8c4b26b98054..e739e55033e2 100644 --- a/lib/libpfctl/libpfctl.c +++ b/lib/libpfctl/libpfctl.c @@ -2597,6 +2597,101 @@ pfctl_table_del_addrs_h(struct pfctl_handle *h, struct pfr_table *tbl, struct pf  	return (ret);  } +struct pfctl_change { +	int add; +	int del; +	int change; +}; +#define	_OUT(_field)	offsetof(struct pfctl_change, _field) +static struct snl_attr_parser ap_table_set_addr[] = { +	{ .type = PF_TA_NBR_ADDED, .off = _OUT(add), .cb = snl_attr_get_uint32 }, +	{ .type = PF_TA_NBR_DELETED, .off = _OUT(del), .cb = snl_attr_get_uint32 }, +	{ .type = PF_TA_NBR_CHANGED, .off = _OUT(change), .cb = snl_attr_get_uint32 }, +}; +#undef _OUT +SNL_DECLARE_PARSER(table_set_addr_parser, struct genlmsghdr, snl_f_p_empty, ap_table_set_addr); + +static int +_pfctl_table_set_addrs_h(struct pfctl_handle *h, struct pfr_table *tbl, struct pfr_addr +    *addrs, int size, int *nadd, int *ndel, int *nchange, int flags) +{ +	struct snl_writer nw; +	struct snl_errmsg_data e = {}; +	struct nlmsghdr *hdr; +	struct pfctl_change change = { 0 }; +	uint32_t seq_id; +	int family_id; + +	family_id = snl_get_genl_family(&h->ss, PFNL_FAMILY_NAME); +	if (family_id == 0) +		return (ENOTSUP); + +	snl_init_writer(&h->ss, &nw); +	hdr = snl_create_genl_msg_request(&nw, family_id, PFNL_CMD_TABLE_SET_ADDR); + +	snl_add_msg_attr_table(&nw, PF_TA_TABLE, tbl); +	snl_add_msg_attr_u32(&nw, PF_TA_FLAGS, flags); +	for (int i = 0; i < size; i++) +		snl_add_msg_attr_pfr_addr(&nw, PF_TA_ADDR, &addrs[i]); + +	if ((hdr = snl_finalize_msg(&nw)) == NULL) +		return (ENXIO); +	seq_id = hdr->nlmsg_seq; + +	if (! snl_send_message(&h->ss, hdr)) +		return (ENXIO); + +	while ((hdr = snl_read_reply_multi(&h->ss, seq_id, &e)) != NULL) { +		if (! snl_parse_nlmsg(&h->ss, hdr, &table_set_addr_parser, &change)) +			continue; +	} + +	if (nadd) +		*nadd = change.add; +	if (ndel) +		*ndel = change.del; +	if (nchange) +		*nchange = change.change; + +	return (e.error); +} + +int +pfctl_table_set_addrs_h(struct pfctl_handle *h, struct pfr_table *tbl, +    struct pfr_addr *addr, int size, int *nadd, int *ndel, +    int *nchange, int flags) +{ +	int ret; +	int off = 0; +	int partial_add, partial_del, partial_change; +	int chunk_size; + +	do { +		flags &= ~(PFR_FLAG_START | PFR_FLAG_DONE); +		if (off == 0) +			flags |= PFR_FLAG_START; +		chunk_size = MIN(size - off, 256); +		if ((chunk_size + off) == size) +			flags |= PFR_FLAG_DONE; +		ret = _pfctl_table_set_addrs_h(h, tbl, &addr[off], chunk_size, +		    &partial_add, &partial_del, &partial_change, flags); +		if (ret != 0) +			break; +		if (! (flags & PFR_FLAG_DONE)) { +			assert(partial_del == 0); +		} +		if (nadd) +			*nadd += partial_add; +		if (ndel) +			*ndel += partial_del; +		if (nchange) +			*nchange += partial_change; +		off += chunk_size; +	} while (off < size); + +	return (ret); +} +  int  pfctl_table_set_addrs(int dev, struct pfr_table *tbl, struct pfr_addr      *addr, int size, int *size2, int *nadd, int *ndel, int *nchange, int flags) @@ -3202,6 +3297,9 @@ pfctl_get_ruleset(struct pfctl_handle *h, const char *path, uint32_t nr, struct  			continue;  	} +	rs->nr = nr; +	strlcpy(rs->path, path, sizeof(rs->path)); +  	return (e.error);  } | 
