1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
|
/*
* Copyright (C) 2002 by Darren Reed.
*
* See the IPFILTER.LICENCE file for details on licencing.
*
* $Id: load_hash.c,v 1.11.2.2 2005/02/01 02:44:05 darrenr Exp $
*
* Copyright 2006 Sun Microsystems, Inc. All rights reserved.
* Use is subject to license terms.
*
* Copyright (c) 2014, Joyent, Inc. All rights reserved.
*/
#include <fcntl.h>
#include <sys/ioctl.h>
#include "ipf.h"
#include "netinet/ip_lookup.h"
#include "netinet/ip_htable.h"
#include "ipfzone.h"
static int hashfd = -1;
int load_hash(iphp, list, iocfunc)
iphtable_t *iphp;
iphtent_t *list;
ioctlfunc_t iocfunc;
{
iplookupop_t op;
iphtable_t iph;
iphtent_t *a;
size_t size;
int n;
if ((hashfd == -1) && ((opts & OPT_DONOTHING) == 0))
hashfd = open(IPLOOKUP_NAME, O_RDWR);
if ((hashfd == -1) && ((opts & OPT_DONOTHING) == 0))
return -1;
if (setzone(hashfd) != 0) {
close(hashfd);
return -1;
}
for (n = 0, a = list; a != NULL; a = a->ipe_next)
n++;
op.iplo_arg = 0;
op.iplo_type = IPLT_HASH;
op.iplo_unit = iphp->iph_unit;
strncpy(op.iplo_name, iphp->iph_name, sizeof(op.iplo_name));
if (*op.iplo_name == '\0')
op.iplo_arg = IPHASH_ANON;
op.iplo_size = sizeof(iph);
op.iplo_struct = &iph;
iph.iph_unit = iphp->iph_unit;
iph.iph_type = iphp->iph_type;
strncpy(iph.iph_name, iphp->iph_name, sizeof(iph.iph_name));
iph.iph_flags = iphp->iph_flags;
if (n <= 0)
n = 1;
if (iphp->iph_size == 0)
size = n * 2 - 1;
else
size = iphp->iph_size;
if ((list == NULL) && (size == 1)) {
fprintf(stderr,
"WARNING: empty hash table %s, recommend setting %s\n",
iphp->iph_name, "size to match expected use");
}
iph.iph_size = size;
iph.iph_seed = iphp->iph_seed;
iph.iph_table = NULL;
iph.iph_ref = 0;
if ((opts & OPT_REMOVE) == 0) {
if ((*iocfunc)(hashfd, SIOCLOOKUPADDTABLE, &op))
if ((opts & OPT_DONOTHING) == 0) {
perror("load_hash:SIOCLOOKUPADDTABLE");
return -1;
}
}
strncpy(op.iplo_name, iph.iph_name, sizeof(op.iplo_name));
strncpy(iphp->iph_name, iph.iph_name, sizeof(op.iplo_name));
if (opts & OPT_VERBOSE) {
for (a = list; a != NULL; a = a->ipe_next) {
if (a->ipe_family == AF_INET) {
a->ipe_addr.in4_addr = ntohl(a->ipe_addr.in4_addr);
a->ipe_mask.in4_addr = ntohl(a->ipe_mask.in4_addr);
}
}
iph.iph_table = calloc(size, sizeof(*iph.iph_table));
if (iph.iph_table == NULL) {
perror("calloc(size, sizeof(*iph.iph_table))");
return -1;
}
iph.iph_table[0] = list;
printhash(&iph, bcopywrap, iph.iph_name, opts);
free(iph.iph_table);
for (a = list; a != NULL; a = a->ipe_next) {
if (a->ipe_family == AF_INET) {
a->ipe_addr.in4_addr = htonl(a->ipe_addr.in4_addr);
a->ipe_mask.in4_addr = htonl(a->ipe_mask.in4_addr);
}
}
}
if (opts & OPT_DEBUG)
printf("Hash %s:\n", iph.iph_name);
for (a = list; a != NULL; a = a->ipe_next)
load_hashnode(iphp->iph_unit, iph.iph_name, a, iocfunc);
if ((opts & OPT_REMOVE) != 0) {
if ((*iocfunc)(hashfd, SIOCLOOKUPDELTABLE, &op))
if ((opts & OPT_DONOTHING) == 0) {
perror("load_hash:SIOCLOOKUPDELTABLE");
return -1;
}
}
return 0;
}
|