Linux kernel mirror (for testing)
git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git
tjh.dev
kernel
os
linux
1/*
2 * Linux Socket Filter Data Structures
3 */
4#ifndef __LINUX_FILTER_H__
5#define __LINUX_FILTER_H__
6
7#include <linux/atomic.h>
8#include <linux/compat.h>
9#include <uapi/linux/filter.h>
10
11#ifdef CONFIG_COMPAT
12/*
13 * A struct sock_filter is architecture independent.
14 */
15struct compat_sock_fprog {
16 u16 len;
17 compat_uptr_t filter; /* struct sock_filter * */
18};
19#endif
20
21struct sk_buff;
22struct sock;
23
24struct sk_filter
25{
26 atomic_t refcnt;
27 unsigned int len; /* Number of filter blocks */
28 unsigned int (*bpf_func)(const struct sk_buff *skb,
29 const struct sock_filter *filter);
30 struct rcu_head rcu;
31 struct sock_filter insns[0];
32};
33
34static inline unsigned int sk_filter_len(const struct sk_filter *fp)
35{
36 return fp->len * sizeof(struct sock_filter) + sizeof(*fp);
37}
38
39extern int sk_filter(struct sock *sk, struct sk_buff *skb);
40extern unsigned int sk_run_filter(const struct sk_buff *skb,
41 const struct sock_filter *filter);
42extern int sk_unattached_filter_create(struct sk_filter **pfp,
43 struct sock_fprog *fprog);
44extern void sk_unattached_filter_destroy(struct sk_filter *fp);
45extern int sk_attach_filter(struct sock_fprog *fprog, struct sock *sk);
46extern int sk_detach_filter(struct sock *sk);
47extern int sk_chk_filter(struct sock_filter *filter, unsigned int flen);
48extern int sk_get_filter(struct sock *sk, struct sock_filter __user *filter, unsigned len);
49extern void sk_decode_filter(struct sock_filter *filt, struct sock_filter *to);
50
51#ifdef CONFIG_BPF_JIT
52#include <stdarg.h>
53#include <linux/linkage.h>
54#include <linux/printk.h>
55
56extern void bpf_jit_compile(struct sk_filter *fp);
57extern void bpf_jit_free(struct sk_filter *fp);
58
59static inline void bpf_jit_dump(unsigned int flen, unsigned int proglen,
60 u32 pass, void *image)
61{
62 pr_err("flen=%u proglen=%u pass=%u image=%pK\n",
63 flen, proglen, pass, image);
64 if (image)
65 print_hex_dump(KERN_ERR, "JIT code: ", DUMP_PREFIX_OFFSET,
66 16, 1, image, proglen, false);
67}
68#define SK_RUN_FILTER(FILTER, SKB) (*FILTER->bpf_func)(SKB, FILTER->insns)
69#else
70static inline void bpf_jit_compile(struct sk_filter *fp)
71{
72}
73static inline void bpf_jit_free(struct sk_filter *fp)
74{
75}
76#define SK_RUN_FILTER(FILTER, SKB) sk_run_filter(SKB, FILTER->insns)
77#endif
78
79enum {
80 BPF_S_RET_K = 1,
81 BPF_S_RET_A,
82 BPF_S_ALU_ADD_K,
83 BPF_S_ALU_ADD_X,
84 BPF_S_ALU_SUB_K,
85 BPF_S_ALU_SUB_X,
86 BPF_S_ALU_MUL_K,
87 BPF_S_ALU_MUL_X,
88 BPF_S_ALU_DIV_X,
89 BPF_S_ALU_MOD_K,
90 BPF_S_ALU_MOD_X,
91 BPF_S_ALU_AND_K,
92 BPF_S_ALU_AND_X,
93 BPF_S_ALU_OR_K,
94 BPF_S_ALU_OR_X,
95 BPF_S_ALU_XOR_K,
96 BPF_S_ALU_XOR_X,
97 BPF_S_ALU_LSH_K,
98 BPF_S_ALU_LSH_X,
99 BPF_S_ALU_RSH_K,
100 BPF_S_ALU_RSH_X,
101 BPF_S_ALU_NEG,
102 BPF_S_LD_W_ABS,
103 BPF_S_LD_H_ABS,
104 BPF_S_LD_B_ABS,
105 BPF_S_LD_W_LEN,
106 BPF_S_LD_W_IND,
107 BPF_S_LD_H_IND,
108 BPF_S_LD_B_IND,
109 BPF_S_LD_IMM,
110 BPF_S_LDX_W_LEN,
111 BPF_S_LDX_B_MSH,
112 BPF_S_LDX_IMM,
113 BPF_S_MISC_TAX,
114 BPF_S_MISC_TXA,
115 BPF_S_ALU_DIV_K,
116 BPF_S_LD_MEM,
117 BPF_S_LDX_MEM,
118 BPF_S_ST,
119 BPF_S_STX,
120 BPF_S_JMP_JA,
121 BPF_S_JMP_JEQ_K,
122 BPF_S_JMP_JEQ_X,
123 BPF_S_JMP_JGE_K,
124 BPF_S_JMP_JGE_X,
125 BPF_S_JMP_JGT_K,
126 BPF_S_JMP_JGT_X,
127 BPF_S_JMP_JSET_K,
128 BPF_S_JMP_JSET_X,
129 /* Ancillary data */
130 BPF_S_ANC_PROTOCOL,
131 BPF_S_ANC_PKTTYPE,
132 BPF_S_ANC_IFINDEX,
133 BPF_S_ANC_NLATTR,
134 BPF_S_ANC_NLATTR_NEST,
135 BPF_S_ANC_MARK,
136 BPF_S_ANC_QUEUE,
137 BPF_S_ANC_HATYPE,
138 BPF_S_ANC_RXHASH,
139 BPF_S_ANC_CPU,
140 BPF_S_ANC_ALU_XOR_X,
141 BPF_S_ANC_SECCOMP_LD_W,
142 BPF_S_ANC_VLAN_TAG,
143 BPF_S_ANC_VLAN_TAG_PRESENT,
144 BPF_S_ANC_PAY_OFFSET,
145};
146
147#endif /* __LINUX_FILTER_H__ */