xref: /openbmc/linux/net/bridge/netfilter/ebt_802_3.c (revision f7108a20)
11da177e4SLinus Torvalds /*
21da177e4SLinus Torvalds  * 802_3
31da177e4SLinus Torvalds  *
41da177e4SLinus Torvalds  * Author:
51da177e4SLinus Torvalds  * Chris Vitale csv@bluetail.com
61da177e4SLinus Torvalds  *
71da177e4SLinus Torvalds  * May 2003
81da177e4SLinus Torvalds  *
91da177e4SLinus Torvalds  */
1018219d3fSJan Engelhardt #include <linux/module.h>
1118219d3fSJan Engelhardt #include <linux/netfilter/x_tables.h>
121da177e4SLinus Torvalds #include <linux/netfilter_bridge/ebtables.h>
131da177e4SLinus Torvalds #include <linux/netfilter_bridge/ebt_802_3.h>
141da177e4SLinus Torvalds 
152d06d4a5SJan Engelhardt static bool
16f7108a20SJan Engelhardt ebt_802_3_mt(const struct sk_buff *skb, const struct xt_match_param *par)
171da177e4SLinus Torvalds {
18f7108a20SJan Engelhardt 	const struct ebt_802_3_info *info = par->matchinfo;
19abfdf1c4SJan Engelhardt 	const struct ebt_802_3_hdr *hdr = ebt_802_3_hdr(skb);
2047c183faSAl Viro 	__be16 type = hdr->llc.ui.ctrl & IS_UI ? hdr->llc.ui.type : hdr->llc.ni.type;
211da177e4SLinus Torvalds 
221da177e4SLinus Torvalds 	if (info->bitmask & EBT_802_3_SAP) {
231da177e4SLinus Torvalds 		if (FWINV(info->sap != hdr->llc.ui.ssap, EBT_802_3_SAP))
248cc784eeSJan Engelhardt 			return false;
251da177e4SLinus Torvalds 		if (FWINV(info->sap != hdr->llc.ui.dsap, EBT_802_3_SAP))
268cc784eeSJan Engelhardt 			return false;
271da177e4SLinus Torvalds 	}
281da177e4SLinus Torvalds 
291da177e4SLinus Torvalds 	if (info->bitmask & EBT_802_3_TYPE) {
301da177e4SLinus Torvalds 		if (!(hdr->llc.ui.dsap == CHECK_TYPE && hdr->llc.ui.ssap == CHECK_TYPE))
318cc784eeSJan Engelhardt 			return false;
321da177e4SLinus Torvalds 		if (FWINV(info->type != type, EBT_802_3_TYPE))
338cc784eeSJan Engelhardt 			return false;
341da177e4SLinus Torvalds 	}
351da177e4SLinus Torvalds 
368cc784eeSJan Engelhardt 	return true;
371da177e4SLinus Torvalds }
381da177e4SLinus Torvalds 
392d06d4a5SJan Engelhardt static bool
402d06d4a5SJan Engelhardt ebt_802_3_mt_check(const char *table, const void *entry,
412d06d4a5SJan Engelhardt 		   const struct xt_match *match, void *data,
422d06d4a5SJan Engelhardt 		   unsigned int hook_mask)
431da177e4SLinus Torvalds {
44abfdf1c4SJan Engelhardt 	const struct ebt_802_3_info *info = data;
451da177e4SLinus Torvalds 
461da177e4SLinus Torvalds 	if (info->bitmask & ~EBT_802_3_MASK || info->invflags & ~EBT_802_3_MASK)
4719eda879SJan Engelhardt 		return false;
481da177e4SLinus Torvalds 
4919eda879SJan Engelhardt 	return true;
501da177e4SLinus Torvalds }
511da177e4SLinus Torvalds 
52043ef46cSJan Engelhardt static struct xt_match ebt_802_3_mt_reg __read_mostly = {
53043ef46cSJan Engelhardt 	.name		= "802_3",
54001a18d3SJan Engelhardt 	.revision	= 0,
55001a18d3SJan Engelhardt 	.family		= NFPROTO_BRIDGE,
562d06d4a5SJan Engelhardt 	.match		= ebt_802_3_mt,
572d06d4a5SJan Engelhardt 	.checkentry	= ebt_802_3_mt_check,
5818219d3fSJan Engelhardt 	.matchsize	= XT_ALIGN(sizeof(struct ebt_802_3_info)),
591da177e4SLinus Torvalds 	.me		= THIS_MODULE,
601da177e4SLinus Torvalds };
611da177e4SLinus Torvalds 
6265b4b4e8SAndrew Morton static int __init ebt_802_3_init(void)
631da177e4SLinus Torvalds {
64043ef46cSJan Engelhardt 	return xt_register_match(&ebt_802_3_mt_reg);
651da177e4SLinus Torvalds }
661da177e4SLinus Torvalds 
6765b4b4e8SAndrew Morton static void __exit ebt_802_3_fini(void)
681da177e4SLinus Torvalds {
69043ef46cSJan Engelhardt 	xt_unregister_match(&ebt_802_3_mt_reg);
701da177e4SLinus Torvalds }
711da177e4SLinus Torvalds 
7265b4b4e8SAndrew Morton module_init(ebt_802_3_init);
7365b4b4e8SAndrew Morton module_exit(ebt_802_3_fini);
74f776c4cdSJan Engelhardt MODULE_DESCRIPTION("Ebtables: DSAP/SSAP field and SNAP type matching");
751da177e4SLinus Torvalds MODULE_LICENSE("GPL");
76