bsd/net/pf_table.c

75 #define ACCEPT_FLAGS(flags, oklist)		\
77 		if ((flags & ~(oklist)) &	\
82 #define COPYIN(from, to, size, flags)				\
83 	((flags & PFR_FLAG_USERIOCTL) ?				\
87 #define COPYOUT(from, to, size, flags)				\
88 	((flags & PFR_FLAG_USERIOCTL) ?				\
240 pfr_clr_addrs(struct pfr_table *tbl, int *ndel, int flags)
245 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY);
246 	if (pfr_validate_table(tbl, 0, flags & PFR_FLAG_USERIOCTL))
255 	if (!(flags & PFR_FLAG_DUMMY)) {
268     int *nadd, int flags)
278 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY |
280 	if (pfr_validate_table(tbl, 0, flags & PFR_FLAG_USERIOCTL))
292 		if (COPYIN(addr, &ad, sizeof (ad), flags))
298 		if (flags & PFR_FLAG_FEEDBACK) {
310 			    !(flags & PFR_FLAG_USERIOCTL));
321 		if (flags & PFR_FLAG_FEEDBACK)
322 			if (COPYOUT(&ad, addr, sizeof (ad), flags))
326 	if (!(flags & PFR_FLAG_DUMMY)) {
337 	if (flags & PFR_FLAG_FEEDBACK)
338 		pfr_reset_feedback(_addr, size, flags);
345     int *ndel, int flags)
354 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY |
356 	if (pfr_validate_table(tbl, 0, flags & PFR_FLAG_USERIOCTL))
382 			if (COPYIN(addr, &ad, sizeof (ad), flags))
393 		if (COPYIN(addr, &ad, sizeof (ad), flags))
398 		if (flags & PFR_FLAG_FEEDBACK) {
414 		if (flags & PFR_FLAG_FEEDBACK)
415 			if (COPYOUT(&ad, addr, sizeof (ad), flags))
418 	if (!(flags & PFR_FLAG_DUMMY)) {
425 	if (flags & PFR_FLAG_FEEDBACK)
426 		pfr_reset_feedback(_addr, size, flags);
432     int *size2, int *nadd, int *ndel, int *nchange, int flags,
443 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY |
445 	if (pfr_validate_table(tbl, ignore_pfrt_flags, flags &
461 		if (COPYIN(addr, &ad, sizeof (ad), flags))
485 			    !(flags & PFR_FLAG_USERIOCTL));
498 		if (flags & PFR_FLAG_FEEDBACK)
499 			if (COPYOUT(&ad, addr, sizeof (ad), flags))
503 	if ((flags & PFR_FLAG_FEEDBACK) && *size2) {
513 			if (COPYOUT(&ad, addr, sizeof (ad), flags))
520 	if (!(flags & PFR_FLAG_DUMMY)) {
532 	if ((flags & PFR_FLAG_FEEDBACK) && size2)
539 	if (flags & PFR_FLAG_FEEDBACK)
540 		pfr_reset_feedback(_addr, size, flags);
547 	int *nmatch, int flags)
554 	ACCEPT_FLAGS(flags, PFR_FLAG_REPLACE);
562 		if (COPYIN(addr, &ad, sizeof (ad), flags))
569 		if (flags & PFR_FLAG_REPLACE)
575 		if (COPYOUT(&ad, addr, sizeof (ad), flags))
585 	int flags)
591 	ACCEPT_FLAGS(flags, 0);
606 	w.pfrw_flags = flags;
625 	int flags)
634 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC);
649 	w.pfrw_flags = flags;
654 	if (!rv && (flags & PFR_FLAG_CLSTATS)) {
672     int *nzero, int flags)
681 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY |
690 		if (COPYIN(addr, &ad, sizeof (ad), flags))
695 		if (flags & PFR_FLAG_FEEDBACK) {
698 			if (COPYOUT(&ad, addr, sizeof (ad), flags))
707 	if (!(flags & PFR_FLAG_DUMMY)) {
714 	if (flags & PFR_FLAG_FEEDBACK)
715 		pfr_reset_feedback(_addr, size, flags);
953 pfr_reset_feedback(user_addr_t addr, int size, int flags)
959 		if (COPYIN(addr, &ad, sizeof (ad), flags))
962 		if (COPYOUT(&ad, addr, sizeof (ad), flags))
1067 	int			 flags = w->pfrw_flags;
1105 			if (COPYOUT(&as, w->pfrw_astats, sizeof (as), flags))
1142 pfr_clr_tables(struct pfr_table *filter, int *ndel, int flags)
1150 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY |
1154 	if (pfr_table_count(filter, flags) < 0)
1159 		if (pfr_skip_table(filter, p, flags))
1169 	if (!(flags & PFR_FLAG_DUMMY)) {
1178 pfr_add_tables(user_addr_t tbl, int size, int *nadd, int flags)
1187 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY);
1191 		if (COPYIN(tbl, &key.pfrkt_t, sizeof (key.pfrkt_t), flags))
1195 		    flags & PFR_FLAG_USERIOCTL))
1243 	if (!(flags & PFR_FLAG_DUMMY)) {
1257 pfr_del_tables(user_addr_t tbl, int size, int *ndel, int flags)
1265 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY);
1268 		if (COPYIN(tbl, &key.pfrkt_t, sizeof (key.pfrkt_t), flags))
1272 		    flags & PFR_FLAG_USERIOCTL))
1287 	if (!(flags & PFR_FLAG_DUMMY)) {
1297 	int flags)
1302 	ACCEPT_FLAGS(flags, PFR_FLAG_ALLRSETS);
1305 	n = nn = pfr_table_count(filter, flags);
1313 		if (pfr_skip_table(filter, p, flags))
1317 		if (COPYOUT(&p->pfrkt_t, tbl, sizeof (p->pfrkt_t), flags))
1331 	int flags)
1341 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_ALLRSETS);
1344 	n = nn = pfr_table_count(filter, flags);
1353 		if (pfr_skip_table(filter, p, flags))
1357 		if (COPYOUT(&p->pfrkt_ts, tbl, sizeof (p->pfrkt_ts), flags)) {
1363 	if (flags & PFR_FLAG_CLSTATS)
1365 		    flags & PFR_FLAG_ADDRSTOO);
1375 pfr_clr_tstats(user_addr_t tbl, int size, int *nzero, int flags)
1384 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY |
1388 		if (COPYIN(tbl, &key.pfrkt_t, sizeof (key.pfrkt_t), flags))
1399 	if (!(flags & PFR_FLAG_DUMMY)) {
1400 		pfr_clstats_ktables(&workq, tzero, flags & PFR_FLAG_ADDRSTOO);
1409 	int *nchange, int *ndel, int flags)
1417 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY);
1424 		if (COPYIN(tbl, &key.pfrkt_t, sizeof (key.pfrkt_t), flags))
1428 		    flags & PFR_FLAG_USERIOCTL))
1450 	if (!(flags & PFR_FLAG_DUMMY)) {
1461 pfr_ina_begin(struct pfr_table *trs, u_int32_t *ticket, int *ndel, int flags)
1470 	ACCEPT_FLAGS(flags, PFR_FLAG_DUMMY);
1483 	if (!(flags & PFR_FLAG_DUMMY)) {
1497     int *nadd, int *naddr, u_int32_t ticket, int flags)
1509 	ACCEPT_FLAGS(flags, PFR_FLAG_DUMMY | PFR_FLAG_ADDRSTOO);
1510 	if (size && !(flags & PFR_FLAG_ADDRSTOO))
1513 	    flags & PFR_FLAG_USERIOCTL))
1556 		if (COPYIN(addr, &ad, sizeof (ad), flags))
1572 	if (!(flags & PFR_FLAG_DUMMY)) {
1577 		shadow->pfrkt_cnt = (flags & PFR_FLAG_ADDRSTOO) ?
1599 pfr_ina_rollback(struct pfr_table *trs, u_int32_t ticket, int *ndel, int flags)
1608 	ACCEPT_FLAGS(flags, PFR_FLAG_DUMMY);
1621 	if (!(flags & PFR_FLAG_DUMMY)) {
1633     int *nchange, int flags)
1643 	ACCEPT_FLAGS(flags, PFR_FLAG_ATOMIC | PFR_FLAG_DUMMY);
1660 	if (!(flags & PFR_FLAG_DUMMY)) {
1795 pfr_table_count(struct pfr_table *filter, int flags)
1799 	if (flags & PFR_FLAG_ALLRSETS)
1809 pfr_skip_table(struct pfr_table *filter, struct pfr_ktable *kt, int flags)
1811 	if (flags & PFR_FLAG_ALLRSETS)