Return to nftset.c CVS log

Up to [ELWIX - Embedded LightWeight unIX -] / embedaddon / dnsmasq / src

Annotation of embedaddon/dnsmasq/src/nftset.c, revision 1.1.1.1

1.1       misho       1: /* dnsmasq is Copyright (c) 2000-2022 Simon Kelley
                      2: 
                      3:    This program is free software; you can redistribute it and/or modify
                      4:    it under the terms of the GNU General Public License as published by
                      5:    the Free Software Foundation; version 2 dated June, 1991, or
                      6:    (at your option) version 3 dated 29 June, 2007.
                      7:  
                      8:    This program is distributed in the hope that it will be useful,
                      9:    but WITHOUT ANY WARRANTY; without even the implied warranty of
                     10:    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
                     11:    GNU General Public License for more details.
                     12:      
                     13:    You should have received a copy of the GNU General Public License
                     14:    along with this program.  If not, see <http://www.gnu.org/licenses/>.
                     15: */
                     16: 
                     17: 
                     18: #include "dnsmasq.h"
                     19: 
                     20: #if defined (HAVE_NFTSET) && defined (HAVE_LINUX_NETWORK)
                     21: 
                     22: #include <nftables/libnftables.h>
                     23: 
                     24: #include <string.h>
                     25: #include <arpa/inet.h>
                     26: 
                     27: static struct nft_ctx *ctx = NULL;
                     28: static const char *cmd_add = "add element %s { %s }";
                     29: static const char *cmd_del = "delete element %s { %s }";
                     30: 
                     31: void nftset_init()
                     32: {
                     33:   ctx = nft_ctx_new(NFT_CTX_DEFAULT);
                     34:   if (ctx == NULL)
                     35:     die(_("failed to create nftset context"), NULL, EC_MISC);
                     36: 
                     37:   /* disable libnftables output */
                     38:   nft_ctx_buffer_error(ctx);
                     39: }
                     40: 
                     41: int add_to_nftset(const char *setname, const union all_addr *ipaddr, int flags, int remove)
                     42: {
                     43:   const char *cmd = remove ? cmd_del : cmd_add;
                     44:   int ret, af = (flags & F_IPV4) ? AF_INET : AF_INET6;
                     45:   size_t new_sz;
                     46:   char *new, *err, *nl;
                     47:   static char *cmd_buf = NULL;
                     48:   static size_t cmd_buf_sz = 0;
                     49: 
                     50:   inet_ntop(af, ipaddr, daemon->addrbuff, ADDRSTRLEN);
                     51: 
                     52:   if (setname[1] == ' ' && (setname[0] == '4' || setname[0] == '6'))
                     53:     {
                     54:       if (setname[0] == '4' && !(flags & F_IPV4))
                     55:        return -1;
                     56: 
                     57:       if (setname[0] == '6' && !(flags & F_IPV6))
                     58:        return -1;
                     59: 
                     60:       setname += 2;
                     61:     }
                     62:   
                     63:   if (cmd_buf_sz == 0)
                     64:     new_sz = 150; /* initial allocation */
                     65:   else
                     66:     new_sz = snprintf(cmd_buf, cmd_buf_sz, cmd, setname, daemon->addrbuff);
                     67:   
                     68:   if (new_sz > cmd_buf_sz)
                     69:     {
                     70:       if (!(new = whine_malloc(new_sz + 10)))
                     71:        return 0;
                     72: 
                     73:       if (cmd_buf)
                     74:        free(cmd_buf);
                     75:       cmd_buf = new;
                     76:       cmd_buf_sz = new_sz + 10;
                     77:       snprintf(cmd_buf, cmd_buf_sz, cmd, setname, daemon->addrbuff);
                     78:     }
                     79: 
                     80:   ret = nft_run_cmd_from_buffer(ctx, cmd_buf);
                     81:   err = (char *)nft_ctx_get_error_buffer(ctx);
                     82: 
                     83:   if (ret != 0)
                     84:     {
                     85:       /* Log only first line of error return. */
                     86:       if ((nl = strchr(err, '\n')))
                     87:        *nl = 0;
                     88:       my_syslog(LOG_ERR,  "nftset %s %s", setname, err);
                     89:     }
                     90:   
                     91:   return ret;
                     92: }
                     93: 
                     94: #endif