linux-imx

/*

 * net/sched/act_ipt.c      iptables target interface

 *

 *TODO: Add other tables. For now we only support the ipv4 table targets

 *

 *      This program is free software; you can redistribute it and/or

 *      modify it under the terms of the GNU General Public License

 *      as published by the Free Software Foundation; either version

 *      2 of the License, or (at your option) any later version.

 *

 * Copyright:   Jamal Hadi Salim (2002-13)

 */

​

#include <linux/types.h>

#include <linux/kernel.h>

#include <linux/string.h>

#include <linux/errno.h>

#include <linux/skbuff.h>

#include <linux/rtnetlink.h>

#include <linux/module.h>

#include <linux/init.h>

#include <linux/slab.h>

#include <net/netlink.h>

#include <net/pkt_sched.h>

#include <linux/tc_act/tc_ipt.h>

#include <net/tc_act/tc_ipt.h>

​

#include <linux/netfilter_ipv4/ip_tables.h>

​

​

static unsigned int ipt_net_id;

static struct tc_action_ops act_ipt_ops;

​

static unsigned int xt_net_id;

static struct tc_action_ops act_xt_ops;

​

static int ipt_init_target(struct net *net, struct xt_entry_target *t,

               char *table, unsigned int hook)

{

    struct xt_tgchk_param par;

    struct xt_target *target;

    struct ipt_entry e = {};

    int ret = 0;

​

    target = xt_request_find_target(AF_INET, t->u.user.name,

                    t->u.user.revision);

    if (IS_ERR(target))

        return PTR_ERR(target);

​

    t->u.kernel.target = target;

    memset(&par, 0, sizeof(par));

    par.net       = net;

    par.table     = table;

    par.entryinfo = &e;

    par.target    = target;

    par.targinfo  = t->data;

    par.hook_mask = hook;

    par.family    = NFPROTO_IPV4;

​

    ret = xt_check_target(&par, t->u.target_size - sizeof(*t), 0, false);

    if (ret < 0) {

        module_put(t->u.kernel.target->me);

        return ret;