From 64c74ba5795bbdd8c8080380bc1e66dec55cde65 Mon Sep 17 00:00:00 2001 From: Pablo Neira Ayuso Date: Mon, 18 Jul 2022 15:56:00 +0200 Subject: [PATCH] cache: prepare nft_cache_evaluate() to return error Move flags as parameter reference and add list of error messages to prepare for sanity checks. Signed-off-by: Pablo Neira Ayuso --- include/cache.h | 5 +++-- src/cache.c | 8 +++++--- src/libnftables.c | 5 ++++- 3 files changed, 12 insertions(+), 6 deletions(-) diff --git a/include/cache.h b/include/cache.h index b6c7d48bf..575381ef9 100644 --- a/include/cache.h +++ b/include/cache.h @@ -65,8 +65,9 @@ struct nft_cache_filter { struct nft_cache; enum cmd_ops; -unsigned int nft_cache_evaluate(struct nft_ctx *nft, struct list_head *cmds, - struct nft_cache_filter *filter); +int nft_cache_evaluate(struct nft_ctx *nft, struct list_head *cmds, + struct list_head *msgs, struct nft_cache_filter *filter, + unsigned int *flags); int nft_cache_update(struct nft_ctx *ctx, enum cmd_ops cmd, struct list_head *msgs, const struct nft_cache_filter *filter); diff --git a/src/cache.c b/src/cache.c index b6ae2310b..9e2fe950a 100644 --- a/src/cache.c +++ b/src/cache.c @@ -262,8 +262,9 @@ static unsigned int evaluate_cache_list(struct nft_ctx *nft, struct cmd *cmd, return flags; } -unsigned int nft_cache_evaluate(struct nft_ctx *nft, struct list_head *cmds, - struct nft_cache_filter *filter) +int nft_cache_evaluate(struct nft_ctx *nft, struct list_head *cmds, + struct list_head *msgs, struct nft_cache_filter *filter, + unsigned int *pflags) { unsigned int flags = NFT_CACHE_EMPTY; struct cmd *cmd; @@ -318,8 +319,9 @@ unsigned int nft_cache_evaluate(struct nft_ctx *nft, struct list_head *cmds, break; } } + *pflags = flags; - return flags; + return 0; } void table_cache_add(struct table *table, struct nft_cache *cache) diff --git a/src/libnftables.c b/src/libnftables.c index f2a1ef04e..a376825d7 100644 --- a/src/libnftables.c +++ b/src/libnftables.c @@ -506,7 +506,10 @@ static int nft_evaluate(struct nft_ctx *nft, struct list_head *msgs, int err = 0; filter = nft_cache_filter_init(); - flags = nft_cache_evaluate(nft, cmds, filter); + if (nft_cache_evaluate(nft, cmds, msgs, filter, &flags) < 0) { + nft_cache_filter_fini(filter); + return -1; + } if (nft_cache_update(nft, flags, msgs, filter) < 0) { nft_cache_filter_fini(filter); return -1; -- 2.47.3