xref: /freebsd/sys/kern/uipc_accf.c (revision 1ed716a1494b396708ab280c8f1032ea70d2f320)
19454b2d8SWarner Losh /*-
234b94e8bSAlfred Perlstein  * Copyright (c) 2000 Paycounter, Inc.
334b94e8bSAlfred Perlstein  * Author: Alfred Perlstein <alfred@paycounter.com>, <alfred@FreeBSD.org>
4a79b7128SAlfred Perlstein  * All rights reserved.
5a79b7128SAlfred Perlstein  *
6a79b7128SAlfred Perlstein  * Redistribution and use in source and binary forms, with or without
7a79b7128SAlfred Perlstein  * modification, are permitted provided that the following conditions
8a79b7128SAlfred Perlstein  * are met:
9a79b7128SAlfred Perlstein  * 1. Redistributions of source code must retain the above copyright
10a79b7128SAlfred Perlstein  *    notice, this list of conditions and the following disclaimer.
11a79b7128SAlfred Perlstein  * 2. Redistributions in binary form must reproduce the above copyright
12a79b7128SAlfred Perlstein  *    notice, this list of conditions and the following disclaimer in the
13a79b7128SAlfred Perlstein  *    documentation and/or other materials provided with the distribution.
14a79b7128SAlfred Perlstein  *
15a79b7128SAlfred Perlstein  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
16a79b7128SAlfred Perlstein  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
17a79b7128SAlfred Perlstein  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
18a79b7128SAlfred Perlstein  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
19a79b7128SAlfred Perlstein  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
20a79b7128SAlfred Perlstein  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
21a79b7128SAlfred Perlstein  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
22a79b7128SAlfred Perlstein  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
23a79b7128SAlfred Perlstein  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
24a79b7128SAlfred Perlstein  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
25a79b7128SAlfred Perlstein  * SUCH DAMAGE.
26a79b7128SAlfred Perlstein  */
27a79b7128SAlfred Perlstein 
28677b542eSDavid E. O'Brien #include <sys/cdefs.h>
29677b542eSDavid E. O'Brien __FBSDID("$FreeBSD$");
30677b542eSDavid E. O'Brien 
31a79b7128SAlfred Perlstein #define ACCEPT_FILTER_MOD
32a79b7128SAlfred Perlstein 
335b86eac4SJesper Skriver #include "opt_param.h"
34a79b7128SAlfred Perlstein #include <sys/param.h>
35a79b7128SAlfred Perlstein #include <sys/systm.h>
36a79b7128SAlfred Perlstein #include <sys/domain.h>
37a79b7128SAlfred Perlstein #include <sys/kernel.h>
38d087080cSRobert Watson #include <sys/lock.h>
39a79b7128SAlfred Perlstein #include <sys/malloc.h>
40a79b7128SAlfred Perlstein #include <sys/mbuf.h>
4141ee9f1cSPoul-Henning Kamp #include <sys/module.h>
42d087080cSRobert Watson #include <sys/mutex.h>
43a79b7128SAlfred Perlstein #include <sys/protosw.h>
4434b94e8bSAlfred Perlstein #include <sys/sysctl.h>
45a79b7128SAlfred Perlstein #include <sys/socket.h>
46a79b7128SAlfred Perlstein #include <sys/socketvar.h>
47a79b7128SAlfred Perlstein #include <sys/queue.h>
48a79b7128SAlfred Perlstein 
49d087080cSRobert Watson static struct mtx accept_filter_mtx;
50d087080cSRobert Watson MTX_SYSINIT(accept_filter, &accept_filter_mtx, "accept_filter_mtx",
51d087080cSRobert Watson 	MTX_DEF);
52d087080cSRobert Watson #define	ACCEPT_FILTER_LOCK()	mtx_lock(&accept_filter_mtx)
53d087080cSRobert Watson #define	ACCEPT_FILTER_UNLOCK()	mtx_unlock(&accept_filter_mtx)
54d087080cSRobert Watson 
55a79b7128SAlfred Perlstein static SLIST_HEAD(, accept_filter) accept_filtlsthd =
56a79b7128SAlfred Perlstein 	SLIST_HEAD_INITIALIZER(&accept_filtlsthd);
57a79b7128SAlfred Perlstein 
58a79b7128SAlfred Perlstein MALLOC_DEFINE(M_ACCF, "accf", "accept filter data");
59a79b7128SAlfred Perlstein 
6034b94e8bSAlfred Perlstein static int unloadable = 0;
6134b94e8bSAlfred Perlstein 
6234b94e8bSAlfred Perlstein SYSCTL_DECL(_net_inet);	/* XXX: some header should do this for me */
6334b94e8bSAlfred Perlstein SYSCTL_NODE(_net_inet, OID_AUTO, accf, CTLFLAG_RW, 0, "Accept filters");
6434b94e8bSAlfred Perlstein SYSCTL_INT(_net_inet_accf, OID_AUTO, unloadable, CTLFLAG_RW, &unloadable, 0,
6534b94e8bSAlfred Perlstein 	"Allow unload of accept filters (not recommended)");
6634b94e8bSAlfred Perlstein 
67a79b7128SAlfred Perlstein /*
681ed716a1SRobert Watson  * Must be passed a malloc'd structure so we don't explode if the kld is
691ed716a1SRobert Watson  * unloaded, we leak the struct on deallocation to deal with this, but if a
701ed716a1SRobert Watson  * filter is loaded with the same name as a leaked one we re-use the entry.
71a79b7128SAlfred Perlstein  */
72a79b7128SAlfred Perlstein int
73a79b7128SAlfred Perlstein accept_filt_add(struct accept_filter *filt)
74a79b7128SAlfred Perlstein {
75a79b7128SAlfred Perlstein 	struct accept_filter *p;
76a79b7128SAlfred Perlstein 
77d087080cSRobert Watson 	ACCEPT_FILTER_LOCK();
78a79b7128SAlfred Perlstein 	SLIST_FOREACH(p, &accept_filtlsthd, accf_next)
79a79b7128SAlfred Perlstein 		if (strcmp(p->accf_name, filt->accf_name) == 0)  {
80a79b7128SAlfred Perlstein 			if (p->accf_callback != NULL) {
81d087080cSRobert Watson 				ACCEPT_FILTER_UNLOCK();
82a79b7128SAlfred Perlstein 				return (EEXIST);
83a79b7128SAlfred Perlstein 			} else {
84a79b7128SAlfred Perlstein 				p->accf_callback = filt->accf_callback;
85d087080cSRobert Watson 				ACCEPT_FILTER_UNLOCK();
86a79b7128SAlfred Perlstein 				FREE(filt, M_ACCF);
87a79b7128SAlfred Perlstein 				return (0);
88a79b7128SAlfred Perlstein 			}
89a79b7128SAlfred Perlstein 		}
90a79b7128SAlfred Perlstein 
91a79b7128SAlfred Perlstein 	if (p == NULL)
92a79b7128SAlfred Perlstein 		SLIST_INSERT_HEAD(&accept_filtlsthd, filt, accf_next);
93d087080cSRobert Watson 	ACCEPT_FILTER_UNLOCK();
94a79b7128SAlfred Perlstein 	return (0);
95a79b7128SAlfred Perlstein }
96a79b7128SAlfred Perlstein 
97a79b7128SAlfred Perlstein int
98a79b7128SAlfred Perlstein accept_filt_del(char *name)
99a79b7128SAlfred Perlstein {
100a79b7128SAlfred Perlstein 	struct accept_filter *p;
101a79b7128SAlfred Perlstein 
102a79b7128SAlfred Perlstein 	p = accept_filt_get(name);
103a79b7128SAlfred Perlstein 	if (p == NULL)
104a79b7128SAlfred Perlstein 		return (ENOENT);
105a79b7128SAlfred Perlstein 
106a79b7128SAlfred Perlstein 	p->accf_callback = NULL;
107a79b7128SAlfred Perlstein 	return (0);
108a79b7128SAlfred Perlstein }
109a79b7128SAlfred Perlstein 
110a79b7128SAlfred Perlstein struct accept_filter *
111a79b7128SAlfred Perlstein accept_filt_get(char *name)
112a79b7128SAlfred Perlstein {
113a79b7128SAlfred Perlstein 	struct accept_filter *p;
114a79b7128SAlfred Perlstein 
115d087080cSRobert Watson 	ACCEPT_FILTER_LOCK();
116a79b7128SAlfred Perlstein 	SLIST_FOREACH(p, &accept_filtlsthd, accf_next)
117a79b7128SAlfred Perlstein 		if (strcmp(p->accf_name, name) == 0)
118d087080cSRobert Watson 			break;
119d087080cSRobert Watson 	ACCEPT_FILTER_UNLOCK();
120a79b7128SAlfred Perlstein 
121d087080cSRobert Watson 	return (p);
122a79b7128SAlfred Perlstein }
123a79b7128SAlfred Perlstein 
124a79b7128SAlfred Perlstein int
125a79b7128SAlfred Perlstein accept_filt_generic_mod_event(module_t mod, int event, void *data)
126a79b7128SAlfred Perlstein {
127a79b7128SAlfred Perlstein 	struct accept_filter *p;
128a79b7128SAlfred Perlstein 	struct accept_filter *accfp = (struct accept_filter *) data;
129d087080cSRobert Watson 	int	error;
130a79b7128SAlfred Perlstein 
131a79b7128SAlfred Perlstein 	switch (event) {
132a79b7128SAlfred Perlstein 	case MOD_LOAD:
1331ed716a1SRobert Watson 		MALLOC(p, struct accept_filter *, sizeof(*p), M_ACCF,
1341ed716a1SRobert Watson 		    M_WAITOK);
135a79b7128SAlfred Perlstein 		bcopy(accfp, p, sizeof(*p));
136a79b7128SAlfred Perlstein 		error = accept_filt_add(p);
137a79b7128SAlfred Perlstein 		break;
138a79b7128SAlfred Perlstein 
139a79b7128SAlfred Perlstein 	case MOD_UNLOAD:
14085f5e7f0SAlfred Perlstein 		/*
1411ed716a1SRobert Watson 		 * Do not support unloading yet. we don't keep track of
1421ed716a1SRobert Watson 		 * refcounts and unloading an accept filter callback and then
1431ed716a1SRobert Watson 		 * having it called is a bad thing.  A simple fix would be to
1441ed716a1SRobert Watson 		 * track the refcount in the struct accept_filter.
14585f5e7f0SAlfred Perlstein 		 */
14634b94e8bSAlfred Perlstein 		if (unloadable != 0) {
147a79b7128SAlfred Perlstein 			error = accept_filt_del(accfp->accf_name);
14834b94e8bSAlfred Perlstein 		} else
14985f5e7f0SAlfred Perlstein 			error = EOPNOTSUPP;
150a79b7128SAlfred Perlstein 		break;
151a79b7128SAlfred Perlstein 
152a79b7128SAlfred Perlstein 	case MOD_SHUTDOWN:
153a79b7128SAlfred Perlstein 		error = 0;
154a79b7128SAlfred Perlstein 		break;
155a79b7128SAlfred Perlstein 
156a79b7128SAlfred Perlstein 	default:
157a79b7128SAlfred Perlstein 		error = EOPNOTSUPP;
158a79b7128SAlfred Perlstein 		break;
159a79b7128SAlfred Perlstein 	}
160a79b7128SAlfred Perlstein 
161a79b7128SAlfred Perlstein 	return (error);
162a79b7128SAlfred Perlstein }
163