[nf-next PATCH v3 0/3] netfilter: bitwise: support boolean operations with variable RHS operands

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Currently bitwise boolean operations (AND, OR and XOR) can only have one
variable operand.  They are converted in user space into mask-and-xor
operations on one register and two immediate values which are evaluated
by the kernel.  We add support for evaluating these operations directly
in kernel space on one register and either an immediate value or a
second register.

We also add support for keeping track of the bit-length of boolean
expressions since this can be useful to user space during
delinearization.

* Patch 1 adds support for keeping track of the bit-length of
  boolean expressions.
* Patch 2 renames functions and an enum constant related to the current
  mask-and-xor implementation in anticipation of adding support for
  directly evaluating AND, OR and XOR operations.
* Patch 3 adds support for directly evaluating AND, OR and XOR
  operations.

Changes since v2

  * Increase size of `nbits` to `u16` and correct checking of maximum
    value (`U8_MAX * BITS_PER_BYTE`).

Changes since v1

  * Patch 1 was new.
  * In v1, all boolean operations were still expected to be
    mask-and-xor operations, but the mask and xor values could be
    passed in registers.

Jeremy Sowden (3):
  netfilter: bitwise: keep track of bit-length of expressions
  netfilter: bitwise: rename some boolean operation functions
  netfilter: bitwise: add support for doing AND, OR and XOR directly

 include/uapi/linux/netfilter/nf_tables.h |  21 ++-
 net/netfilter/nft_bitwise.c              | 174 +++++++++++++++++++----
 2 files changed, 166 insertions(+), 29 deletions(-)

-- 
2.35.1




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux