1 #ifndef _LIBXT_SET_H
2 #define _LIBXT_SET_H
3
4 #include <unistd.h>
5 #include <sys/types.h>
6 #include <sys/socket.h>
7 #include <errno.h>
8
9 #ifdef DEBUG
10 #define DEBUGP(x, args...) fprintf(stderr, x , ## args)
11 #else
12 #define DEBUGP(x, args...)
13 #endif
14
15 static int
get_version(unsigned * version)16 get_version(unsigned *version)
17 {
18 int res, sockfd = socket(AF_INET, SOCK_RAW, IPPROTO_RAW);
19 struct ip_set_req_version req_version;
20 socklen_t size = sizeof(req_version);
21
22 if (sockfd < 0)
23 xtables_error(OTHER_PROBLEM,
24 "Can't open socket to ipset.\n");
25
26 req_version.op = IP_SET_OP_VERSION;
27 res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req_version, &size);
28 if (res != 0)
29 xtables_error(OTHER_PROBLEM,
30 "Kernel module xt_set is not loaded in.\n");
31
32 *version = req_version.version;
33
34 return sockfd;
35 }
36
37 static void
get_set_byid(char * setname,ip_set_id_t idx)38 get_set_byid(char *setname, ip_set_id_t idx)
39 {
40 struct ip_set_req_get_set req;
41 socklen_t size = sizeof(struct ip_set_req_get_set);
42 int res, sockfd;
43
44 sockfd = get_version(&req.version);
45 req.op = IP_SET_OP_GET_BYINDEX;
46 req.set.index = idx;
47 res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req, &size);
48 close(sockfd);
49
50 if (res != 0)
51 xtables_error(OTHER_PROBLEM,
52 "Problem when communicating with ipset, errno=%d.\n",
53 errno);
54 if (size != sizeof(struct ip_set_req_get_set))
55 xtables_error(OTHER_PROBLEM,
56 "Incorrect return size from kernel during ipset lookup, "
57 "(want %zu, got %zu)\n",
58 sizeof(struct ip_set_req_get_set), (size_t)size);
59 if (req.set.name[0] == '\0')
60 xtables_error(PARAMETER_PROBLEM,
61 "Set with index %i in kernel doesn't exist.\n", idx);
62
63 strncpy(setname, req.set.name, IPSET_MAXNAMELEN);
64 }
65
66 static void
get_set_byname(const char * setname,struct xt_set_info * info)67 get_set_byname(const char *setname, struct xt_set_info *info)
68 {
69 struct ip_set_req_get_set req;
70 socklen_t size = sizeof(struct ip_set_req_get_set);
71 int res, sockfd;
72
73 sockfd = get_version(&req.version);
74 req.op = IP_SET_OP_GET_BYNAME;
75 strncpy(req.set.name, setname, IPSET_MAXNAMELEN);
76 req.set.name[IPSET_MAXNAMELEN - 1] = '\0';
77 res = getsockopt(sockfd, SOL_IP, SO_IP_SET, &req, &size);
78 close(sockfd);
79
80 if (res != 0)
81 xtables_error(OTHER_PROBLEM,
82 "Problem when communicating with ipset, errno=%d.\n",
83 errno);
84 if (size != sizeof(struct ip_set_req_get_set))
85 xtables_error(OTHER_PROBLEM,
86 "Incorrect return size from kernel during ipset lookup, "
87 "(want %zu, got %zu)\n",
88 sizeof(struct ip_set_req_get_set), (size_t)size);
89 if (req.set.index == IPSET_INVALID_ID)
90 xtables_error(PARAMETER_PROBLEM,
91 "Set %s doesn't exist.\n", setname);
92
93 info->index = req.set.index;
94 }
95
96 static void
parse_dirs_v0(const char * opt_arg,struct xt_set_info_v0 * info)97 parse_dirs_v0(const char *opt_arg, struct xt_set_info_v0 *info)
98 {
99 char *saved = strdup(opt_arg);
100 char *ptr, *tmp = saved;
101 int i = 0;
102
103 while (i < (IPSET_DIM_MAX - 1) && tmp != NULL) {
104 ptr = strsep(&tmp, ",");
105 if (strncmp(ptr, "src", 3) == 0)
106 info->u.flags[i++] |= IPSET_SRC;
107 else if (strncmp(ptr, "dst", 3) == 0)
108 info->u.flags[i++] |= IPSET_DST;
109 else
110 xtables_error(PARAMETER_PROBLEM,
111 "You must spefify (the comma separated list of) 'src' or 'dst'.");
112 }
113
114 if (tmp)
115 xtables_error(PARAMETER_PROBLEM,
116 "Can't be more src/dst options than %i.",
117 IPSET_DIM_MAX);
118
119 free(saved);
120 }
121
122 static void
parse_dirs(const char * opt_arg,struct xt_set_info * info)123 parse_dirs(const char *opt_arg, struct xt_set_info *info)
124 {
125 char *saved = strdup(opt_arg);
126 char *ptr, *tmp = saved;
127
128 while (info->dim < IPSET_DIM_MAX && tmp != NULL) {
129 info->dim++;
130 ptr = strsep(&tmp, ",");
131 if (strncmp(ptr, "src", 3) == 0)
132 info->flags |= (1 << info->dim);
133 else if (strncmp(ptr, "dst", 3) != 0)
134 xtables_error(PARAMETER_PROBLEM,
135 "You must spefify (the comma separated list of) 'src' or 'dst'.");
136 }
137
138 if (tmp)
139 xtables_error(PARAMETER_PROBLEM,
140 "Can't be more src/dst options than %i.",
141 IPSET_DIM_MAX);
142
143 free(saved);
144 }
145
146 #endif /*_LIBXT_SET_H*/
147