Hitherto, the kernel has required that AND, OR and XOR operations be
converted in user space to mask-and-xor operations on one register and
two immediate values. Now, however, it has support for performing these
operations directly on one register and an immediate value, or on two
registers. Support has also been added for keeping track of the
bit-length of boolean expressions since this can be useful to user space
during delinearization. This patch-set makes this new functionality
available to user space.
* Patch 1 updates kernel UAPI header to 5.17-rc7.
* Patches 2 & 3 add support for keeping track of the bit-length of
boolean expressions.
* Patches 4-7 implement the new operations.
* Patches 8 & 9 refactor the existing bitwise tests and add new ones.
Changes since v1
* Patches 1-3 are new.
* In v1, boolean operations were still converted to mask-and-xor form,
but the mask and xor values were allowed to be passed in registers.
Jeremy Sowden (9):
include: update nf_tables.h
include: add new bitwise bit-length attribute to nf_tables.h
expr: bitwise: pass bit-length to and from the kernel
include: add new bitwise boolean attributes to nf_tables.h
expr: bitwise: fix a couple of white-space mistakes
expr: bitwise: rename some boolean operation functions
expr: bitwise: add support for kernel space AND, OR and XOR operations
tests: bitwise: refactor shift tests
tests: bitwise: add tests for new boolean operations
include/libnftnl/expr.h | 2 +
include/linux/netfilter/nf_tables.h | 27 +++-
src/expr/bitwise.c | 86 ++++++++++-
tests/nft-expr_bitwise-test.c | 230 +++++++++++++++++-----------
4 files changed, 244 insertions(+), 101 deletions(-)
--
2.35.1
