]> git.ipfire.org Git - thirdparty/linux.git/blame - net/netfilter/nf_conntrack_labels.c
fs: indicate request originates from old mount API
[thirdparty/linux.git] / net / netfilter / nf_conntrack_labels.c
CommitLineData
d2912cb1 1// SPDX-License-Identifier: GPL-2.0-only
c539f017
FW
2/*
3 * test/set flag bits stored in conntrack extension area.
4 *
5 * (C) 2013 Astaro GmbH & Co KG
c539f017
FW
6 */
7
c539f017 8#include <linux/export.h>
c539f017 9#include <linux/types.h>
c539f017
FW
10
11#include <net/netfilter/nf_conntrack_ecache.h>
12#include <net/netfilter/nf_conntrack_labels.h>
13
5a8145f7 14static int replace_u32(u32 *address, u32 mask, u32 new)
9b21f6a9
FW
15{
16 u32 old, tmp;
17
18 do {
19 old = *address;
20 tmp = (old & mask) ^ new;
5a8145f7
FW
21 if (old == tmp)
22 return 0;
9b21f6a9 23 } while (cmpxchg(address, old, tmp) != old);
5a8145f7
FW
24
25 return 1;
9b21f6a9
FW
26}
27
28int nf_connlabels_replace(struct nf_conn *ct,
29 const u32 *data,
30 const u32 *mask, unsigned int words32)
31{
32 struct nf_conn_labels *labels;
33 unsigned int size, i;
5a8145f7 34 int changed = 0;
9b21f6a9
FW
35 u32 *dst;
36
37 labels = nf_ct_labels_find(ct);
38 if (!labels)
39 return -ENOSPC;
40
23014011 41 size = sizeof(labels->bits);
9b21f6a9
FW
42 if (size < (words32 * sizeof(u32)))
43 words32 = size / sizeof(u32);
44
45 dst = (u32 *) labels->bits;
5a8145f7
FW
46 for (i = 0; i < words32; i++)
47 changed |= replace_u32(&dst[i], mask ? ~mask[i] : 0, data[i]);
9b21f6a9
FW
48
49 size /= sizeof(u32);
50 for (i = words32; i < size; i++) /* pad */
51 replace_u32(&dst[i], 0, 0);
52
5a8145f7
FW
53 if (changed)
54 nf_conntrack_event_cache(IPCT_LABEL, ct);
9b21f6a9
FW
55 return 0;
56}
57EXPORT_SYMBOL_GPL(nf_connlabels_replace);
9b21f6a9 58
adff6c65 59int nf_connlabels_get(struct net *net, unsigned int bits)
86ca02e7 60{
643d1260
FW
61 int v;
62
23014011 63 if (BIT_WORD(bits) >= NF_CT_LABELS_MAX_SIZE / sizeof(long))
86ca02e7
JS
64 return -ERANGE;
65
1015c3de
FW
66 BUILD_BUG_ON(NF_CT_LABELS_MAX_SIZE / sizeof(long) >= U8_MAX);
67
643d1260
FW
68 v = atomic_inc_return_relaxed(&net->ct.labels_used);
69 WARN_ON_ONCE(v <= 0);
70
86ca02e7
JS
71 return 0;
72}
73EXPORT_SYMBOL_GPL(nf_connlabels_get);
74
75void nf_connlabels_put(struct net *net)
76{
643d1260
FW
77 int v = atomic_dec_return_relaxed(&net->ct.labels_used);
78
79 WARN_ON_ONCE(v < 0);
86ca02e7
JS
80}
81EXPORT_SYMBOL_GPL(nf_connlabels_put);