Home » Mailing list archives » linux-netdev » 2010 » April » 22

Re: [PATCH] Socket filter ancilliary data access for skb->dev->type

Previous thread: [PATCH] NIU support for skb->rxhash by David Miller on Thursday, April 22, 2010 - 4:21 am. (12 messages)

Next thread: [PATCH NEXT 5/8] qlcnic: fix pci semaphore checks by Amit Kumar Salecha on Thursday, April 22, 2010 - 5:51 am. (1 message)
[view original message]
From: Paul LeoNerd Evans
Subject: [PATCH] Socket filter ancilliary data access for skb->dev->type
Date: Thursday, April 22, 2010 - 5:12 am

Add an SKF_AD_HATYPE field to the packet ancilliary data area, giving
access to skb->dev->type, as reported in the sll_hatype field.

When capturing packets on a PF_PACKET/SOCK_RAW socket bound to all
interfaces, there doesn't appear to be a way for the filter program to
actually find out the underlying hardware type the packet was captured
on. This patch adds such ability.

Signed-off-by: Paul Evans <leonerd@leonerd.org.uk>

---

diff -ur linux-2.6.33.2.orig/include/linux/filter.h linux-2.6.33.2/include/linux/filter.h
--- linux-2.6.33.2.orig/include/linux/filter.h	2010-04-02 00:02:33.000000000 +0100
+++ linux-2.6.33.2/include/linux/filter.h	2010-04-20 22:40:25.000000000 +0100
@@ -123,7 +123,8 @@
 #define SKF_AD_NLATTR_NEST	16
 #define SKF_AD_MARK 	20
 #define SKF_AD_QUEUE	24
-#define SKF_AD_MAX	28
+#define SKF_AD_HATYPE	28
+#define SKF_AD_MAX	32
 #define SKF_NET_OFF   (-0x100000)
 #define SKF_LL_OFF    (-0x200000)
 
diff -ur linux-2.6.33.2.orig/net/core/filter.c linux-2.6.33.2/net/core/filter.c
--- linux-2.6.33.2.orig/net/core/filter.c	2010-04-02 00:02:33.000000000 +0100
+++ linux-2.6.33.2/net/core/filter.c	2010-04-20 22:41:01.000000000 +0100
@@ -309,6 +309,9 @@
 		case SKF_AD_QUEUE:
 			A = skb->queue_mapping;
 			continue;
+		case SKF_AD_HATYPE:
+			A = skb->dev->type;
+			continue;
 		case SKF_AD_NLATTR: {
 			struct nlattr *nla;

[ message continues ]
[view original message]
From: Patrick McHardy
Subject: Re: [PATCH] Socket filter ancilliary data access for skb->dev->type
Date: Thursday, April 22, 2010 - 5:28 am

I think we should be adding a check whether skb->dev is non-NULL here
since filters can also be attached to netlink sockets. The same applies
to SKF_AD_IFINDEX.
--


[ message continues ]
[view original message]
From: Paul LeoNerd Evans
Subject: Re: [PATCH] Socket filter ancilliary data access for skb->dev->type
Date: Thursday, April 22, 2010 - 6:11 am

What should the appropriate behaviour be here? Set A to some rogue value
- 0 or -1 seem appropriate? Or, abort the filter entirely (such as in
e.g. divide-by-zero, or invalid memory buffer access)?

Either way that sounds simple enough, I can hack that in and resubmit.

-- 
Paul "LeoNerd" Evans

leonerd@leonerd.org.uk
ICQ# 4135350       |  Registered Linux# 179460
http://www.leonerd.org.uk/

[ message continues ]
[view original message]
From: Patrick McHardy
Subject: Re: [PATCH] Socket filter ancilliary data access for skb->dev->type
Date: Thursday, April 22, 2010 - 6:13 am

I'd say we should abort execution.
--


[ message continues ]
Previous thread: [PATCH] NIU support for skb->rxhash by David Miller on Thursday, April 22, 2010 - 4:21 am. (12 messages)

Next thread: [PATCH NEXT 5/8] qlcnic: fix pci semaphore checks by Amit Kumar Salecha on Thursday, April 22, 2010 - 5:51 am. (1 message)