From: Pablo Neira Ayuso <pablo@netfilter.org>
To: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Cc: netfilter-devel@vger.kernel.org
Subject: Re: [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func
Date: Wed, 26 Feb 2014 17:49:35 +0100 [thread overview]
Message-ID: <20140226164935.GB22731@localhost> (raw)
In-Reply-To: <20140226161005.18974.74871.stgit@nfdev.cica.es>
On Wed, Feb 26, 2014 at 05:10:05PM +0100, Arturo Borrero Gonzalez wrote:
> Let's make this code reusable.
>
> Also, this patch fixes a hidden bug: the table in the chain's handle was being
> set to the chain name.
>
> Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
> ---
> src/netlink.c | 48 ++++++++++++++++++++++--------------------------
> 1 file changed, 22 insertions(+), 26 deletions(-)
>
> diff --git a/src/netlink.c b/src/netlink.c
> index 74372bf..d2a7804 100644
> --- a/src/netlink.c
> +++ b/src/netlink.c
> @@ -496,25 +496,16 @@ int netlink_delete_chain(struct netlink_ctx *ctx, const struct handle *h,
> return err;
> }
>
> -static int list_chain_cb(struct nft_chain *nlc, void *arg)
> +static struct chain *netlink_delinearize_chain(struct netlink_ctx *ctx,
> + struct nft_chain *nlc)
> {
> - struct netlink_ctx *ctx = arg;
> - const struct handle *h = ctx->data;
> struct chain *chain;
>
> - if ((h->family != nft_chain_attr_get_u32(nlc, NFT_CHAIN_ATTR_FAMILY)) ||
> - strcmp(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_TABLE), h->table) != 0)
> - return 0;
> -
> - if (h->chain &&
> - strcmp(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_NAME), h->chain) != 0)
> - return 0;
> -
> chain = chain_alloc(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_NAME));
> chain->handle.family =
> nft_chain_attr_get_u32(nlc, NFT_CHAIN_ATTR_FAMILY);
> chain->handle.table =
> - xstrdup(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_NAME));
> + xstrdup(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_TABLE));
Would be good to have a separated fix for this. This can come as the
first patch of the stack.
> chain->handle.handle =
> nft_chain_attr_get_u64(nlc, NFT_CHAIN_ATTR_HANDLE);
>
> @@ -531,6 +522,24 @@ static int list_chain_cb(struct nft_chain *nlc, void *arg)
> }
> list_add_tail(&chain->list, &ctx->list);
>
> + return chain;
> +}
> +
> +static int list_chain_cb(struct nft_chain *nlc, void *arg)
> +{
> + struct netlink_ctx *ctx = arg;
> + const struct handle *h = ctx->data;
> + const char *table = nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_TABLE);
> + const char *name = nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_NAME);
> +
> + if ((h->family != nft_chain_attr_get_u32(nlc, NFT_CHAIN_ATTR_FAMILY)) ||
> + strcmp(table, h->table) != 0)
> + return 0;
> +
> + if (h->chain && strcmp(name, h->chain) != 0)
> + return 0;
> +
> + netlink_delinearize_chain(ctx, nlc);
> return 0;
> }
>
> @@ -570,25 +579,12 @@ int netlink_get_chain(struct netlink_ctx *ctx, const struct handle *h,
> const struct location *loc)
> {
> struct nft_chain *nlc;
> - struct chain *chain;
> int err;
>
> nlc = alloc_nft_chain(h);
> err = mnl_nft_chain_get(nf_sock, nlc, 0);
>
> - chain = chain_alloc(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_NAME));
> - chain->handle.family = nft_chain_attr_get_u32(nlc, NFT_CHAIN_ATTR_FAMILY);
> - chain->handle.table = xstrdup(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_TABLE));
> - chain->handle.handle = nft_chain_attr_get_u64(nlc, NFT_CHAIN_ATTR_HANDLE);
> - if (nft_chain_attr_is_set(nlc, NFT_CHAIN_ATTR_TYPE) &&
> - nft_chain_attr_is_set(nlc, NFT_CHAIN_ATTR_HOOKNUM) &&
> - nft_chain_attr_is_set(nlc, NFT_CHAIN_ATTR_PRIO)) {
> - chain->hooknum = nft_chain_attr_get_u32(nlc, NFT_CHAIN_ATTR_HOOKNUM);
> - chain->priority = nft_chain_attr_get_u32(nlc, NFT_CHAIN_ATTR_PRIO);
> - chain->type = xstrdup(nft_chain_attr_get_str(nlc, NFT_CHAIN_ATTR_TYPE));
> - }
> - list_add_tail(&chain->list, &ctx->list);
> -
> + netlink_delinearize_chain(ctx, nlc);
> nft_chain_free(nlc);
>
> if (err < 0)
>
next prev parent reply other threads:[~2014-02-26 16:49 UTC|newest]
Thread overview: 14+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-02-26 16:09 [RFC PATCH v2 0/6] nft events reporting Arturo Borrero Gonzalez
2014-02-26 16:09 ` [RFC PATCH v2 1/6] rule: allow to print sets in plain format Arturo Borrero Gonzalez
2014-02-26 16:44 ` Pablo Neira Ayuso
2014-02-26 16:09 ` [RFC PATCH v2 2/6] netlink: add netlink_delinearize_set() func Arturo Borrero Gonzalez
2014-02-26 16:10 ` [RFC PATCH v2 3/6] rule: generalize chain_print() Arturo Borrero Gonzalez
2014-02-26 16:10 ` [RFC PATCH v2 4/6] netlink: add netlink_delinearize_chain() func Arturo Borrero Gonzalez
2014-02-26 16:49 ` Pablo Neira Ayuso [this message]
2014-02-26 16:10 ` [RFC PATCH v2 5/6] netlink: add netlink_delinearize_table() func Arturo Borrero Gonzalez
2014-02-26 16:10 ` [RFC PATCH v2 6/6] src: add events reporting Arturo Borrero Gonzalez
2014-02-26 17:17 ` Arturo Borrero Gonzalez
2014-02-26 17:27 ` Pablo Neira Ayuso
2014-02-26 17:36 ` Arturo Borrero Gonzalez
2014-02-26 17:19 ` Pablo Neira Ayuso
2014-02-27 14:09 ` [RFC PATCH v2 0/6] nft " Patrick McHardy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20140226164935.GB22731@localhost \
--to=pablo@netfilter.org \
--cc=arturo.borrero.glez@gmail.com \
--cc=netfilter-devel@vger.kernel.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox;
as well as URLs for NNTP newsgroup(s).