2 * test/set flag bits stored in conntrack extension area.
4 * (C) 2013 Astaro GmbH & Co KG
6 * This program is free software; you can redistribute it and/or modify
7 * it under the terms of the GNU General Public License version 2 as
8 * published by the Free Software Foundation.
11 #include <linux/export.h>
12 #include <linux/types.h>
14 #include <net/netfilter/nf_conntrack_ecache.h>
15 #include <net/netfilter/nf_conntrack_labels.h>
17 static spinlock_t nf_connlabels_lock;
19 int nf_connlabel_set(struct nf_conn *ct, u16 bit)
21 struct nf_conn_labels *labels = nf_ct_labels_find(ct);
23 if (!labels || BIT_WORD(bit) >= labels->words)
26 if (test_bit(bit, labels->bits))
29 if (!test_and_set_bit(bit, labels->bits))
30 nf_conntrack_event_cache(IPCT_LABEL, ct);
34 EXPORT_SYMBOL_GPL(nf_connlabel_set);
36 static int replace_u32(u32 *address, u32 mask, u32 new)
42 tmp = (old & mask) ^ new;
45 } while (cmpxchg(address, old, tmp) != old);
50 int nf_connlabels_replace(struct nf_conn *ct,
52 const u32 *mask, unsigned int words32)
54 struct nf_conn_labels *labels;
59 labels = nf_ct_labels_find(ct);
63 size = labels->words * sizeof(long);
64 if (size < (words32 * sizeof(u32)))
65 words32 = size / sizeof(u32);
67 dst = (u32 *) labels->bits;
68 for (i = 0; i < words32; i++)
69 changed |= replace_u32(&dst[i], mask ? ~mask[i] : 0, data[i]);
72 for (i = words32; i < size; i++) /* pad */
73 replace_u32(&dst[i], 0, 0);
76 nf_conntrack_event_cache(IPCT_LABEL, ct);
79 EXPORT_SYMBOL_GPL(nf_connlabels_replace);
81 int nf_connlabels_get(struct net *net, unsigned int bits)
85 words = BIT_WORD(bits) + 1;
86 if (words > NF_CT_LABELS_MAX_SIZE / sizeof(long))
89 spin_lock(&nf_connlabels_lock);
90 net->ct.labels_used++;
91 if (words > net->ct.label_words)
92 net->ct.label_words = words;
93 spin_unlock(&nf_connlabels_lock);
97 EXPORT_SYMBOL_GPL(nf_connlabels_get);
99 void nf_connlabels_put(struct net *net)
101 spin_lock(&nf_connlabels_lock);
102 net->ct.labels_used--;
103 if (net->ct.labels_used == 0)
104 net->ct.label_words = 0;
105 spin_unlock(&nf_connlabels_lock);
107 EXPORT_SYMBOL_GPL(nf_connlabels_put);
109 static struct nf_ct_ext_type labels_extend __read_mostly = {
110 .len = sizeof(struct nf_conn_labels),
111 .align = __alignof__(struct nf_conn_labels),
112 .id = NF_CT_EXT_LABELS,
115 int nf_conntrack_labels_init(void)
117 BUILD_BUG_ON(NF_CT_LABELS_MAX_SIZE / sizeof(long) >= U8_MAX);
119 spin_lock_init(&nf_connlabels_lock);
120 return nf_ct_extend_register(&labels_extend);
123 void nf_conntrack_labels_fini(void)
125 nf_ct_extend_unregister(&labels_extend);