linux-toradex.git/include/net/fib_rules.h, branch v2.6.24.4

[INET]: Small possible memory leak in FIB rules

2007-11-11T06:12:03+00:00

This patch fixes a small memory leak. Default fib rules can be deleted by
the user if the rule does not carry FIB_RULE_PERMANENT flag, f.e. by
	ip rule flush

Such a rule will not be freed as the ref-counter has 2 on start and becomes
clearly unreachable after removal.

Signed-off-by: Denis V. Lunev 
Acked-by: Alexey Kuznetsov 
Signed-off-by: David S. Miller

[IPV4/IPV6/DECNET]: Small cleanup for fib rules.

2007-10-10T23:51:22+00:00

This patch slightly cleanups FIB rules framework. rules_list as a pointer
on struct fib_rules_ops is useless. It is always assigned with a static
per/subsystem list in IPv4, IPv6 and DecNet.

Signed-off-by: Denis V. Lunev 
Acked-by: Alexey Kuznetsov 
Signed-off-by: David S. Miller

[NETLINK]: Mark netlink policies const

2007-06-07T20:40:10+00:00

Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NET] fib_rules: Flush route cache after rule modifications

2007-04-26T05:28:18+00:00

The results of FIB rules lookups are cached in the routing cache
except for IPv6 as no such cache exists. So far, it was the
responsibility of the user to flush the cache after modifying any
rules. This lead to many false bug reports due to misunderstanding
of this concept.

This patch automatically flushes the route cache after inserting
or deleting a rule.

Thanks to Muli Ben-Yehuda  for catching a bug
in the previous patch.

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[NET] fib_rules: goto rule action

2007-04-26T05:28:12+00:00

This patch adds a new rule action FR_ACT_GOTO which allows
to skip a set of rules by jumping to another rule. The rule
to jump to is specified via the FRA_GOTO attribute which
carries a rule preference.

Referring to a rule which doesn't exists is explicitely allowed.
Such goto rules are marked with the flag FIB_RULE_UNRESOLVED
and will act like a rule with a non-matching selector. The rule
will become functional as soon as its target is present.

The goto action enables performance optimizations by reducing
the average number of rules that have to be passed per lookup.

Example:
0:      from all lookup local
40:     not from all to 192.168.23.128 goto 32766
41:     from all fwmark 0xa blackhole
42:     from all fwmark 0xff blackhole
32766:  from all lookup main

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[NET] rules: Unified rules dumping

2007-04-26T05:27:17+00:00

Implements a unified, protocol independant rules dumping function
which is capable of both, dumping a specific protocol family or
all of them. This speeds up dumping as less lookups are required.

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[NET] rules: Use rtnl registration interface

2007-04-26T05:27:07+00:00

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller

[NET]: Fix fib_rules compatibility breakage

2007-03-26T01:48:00+00:00

Based upon a patch from Patrick McHardy.

The fib_rules netlink attribute policy introduced in 2.6.19 broke
userspace compatibilty. When specifying a rule with "from all"
or "to all", iproute adds a zero byte long netlink attribute,
but the policy requires all addresses to have a size equal to
sizeof(struct in_addr)/sizeof(struct in6_addr), resulting in a
validation error.

Check attribute length of FRA_SRC/FRA_DST in the generic framework
by letting the family specific rules implementation provide the
length of an address. Report an error if address length is non
zero but no address attribute is provided. Fix actual bug by
checking address length for non-zero instead of relying on
availability of attribute.

Signed-off-by: Thomas Graf 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

[NETLINK]: Do precise netlink message allocations where possible

2006-12-03T05:22:11+00:00

Account for the netlink message header size directly in nlmsg_new()
instead of relying on the caller calculate it correctly.

Replaces error handling of message construction functions when
constructing notifications with bug traps since a failure implies
a bug in calculating the size of the skb.

Signed-off-by: Thomas Graf 
Acked-by: Paul Moore 
Signed-off-by: David S. Miller

[NET] rules: Share common attribute validation policy

2006-12-03T05:21:41+00:00

Move the attribute policy for the non-specific attributes into
net/fib_rules.h and include it in the respective protocols.

Signed-off-by: Thomas Graf 
Signed-off-by: David S. Miller