kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Use unlikely with checking layer-4 headers.

Browse Source
This commit is contained in:
Christian Deacon
2024-06-13 19:29:50 -04:00
parent e213b5c231
commit 1dad5509a4
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
src/xdpfw_kern.c
View File

@@ -257,7 +257,7 @@ int xdp_prog_main(struct xdp_md *ctx)
tcph = (data + sizeof(struct ethhdr) + sizeof(struct ipv6hdr)); tcph = (data + sizeof(struct ethhdr) + sizeof(struct ipv6hdr));
// Check TCP header. // Check TCP header.
if (tcph + 1 > (struct tcphdr *)data_end) if (unlikely(tcph + 1 > (struct tcphdr *)data_end))
{ {
return XDP_DROP; return XDP_DROP;
} }
@@ -269,7 +269,7 @@ int xdp_prog_main(struct xdp_md *ctx)
udph = (data + sizeof(struct ethhdr) + sizeof(struct ipv6hdr)); udph = (data + sizeof(struct ethhdr) + sizeof(struct ipv6hdr));
// Check TCP header. // Check TCP header.
if (udph + 1 > (struct udphdr *)data_end) if (unlikely(udph + 1 > (struct udphdr *)data_end))
{ {
return XDP_DROP; return XDP_DROP;
} }
@@ -281,7 +281,7 @@ int xdp_prog_main(struct xdp_md *ctx)
icmp6h = (data + sizeof(struct ethhdr) + sizeof(struct ipv6hdr)); icmp6h = (data + sizeof(struct ethhdr) + sizeof(struct ipv6hdr));
// Check ICMPv6 header. // Check ICMPv6 header.
if (icmp6h + 1 > (struct icmp6hdr *)data_end) if (unlikely(icmp6h + 1 > (struct icmp6hdr *)data_end))
{ {
return XDP_DROP; return XDP_DROP;
} }
@@ -298,7 +298,7 @@ int xdp_prog_main(struct xdp_md *ctx)
tcph = (data + sizeof(struct ethhdr) + (iph->ihl * 4)); tcph = (data + sizeof(struct ethhdr) + (iph->ihl * 4));
// Check TCP header. // Check TCP header.
if (tcph + 1 > (struct tcphdr *)data_end) if (unlikely(tcph + 1 > (struct tcphdr *)data_end))
{ {
return XDP_DROP; return XDP_DROP;
} }
@@ -310,7 +310,7 @@ int xdp_prog_main(struct xdp_md *ctx)
udph = (data + sizeof(struct ethhdr) + (iph->ihl * 4)); udph = (data + sizeof(struct ethhdr) + (iph->ihl * 4));
// Check TCP header. // Check TCP header.
if (udph + 1 > (struct udphdr *)data_end) if (unlikely(udph + 1 > (struct udphdr *)data_end))
{ {
return XDP_DROP; return XDP_DROP;
} }
@@ -322,7 +322,7 @@ int xdp_prog_main(struct xdp_md *ctx)
icmph = (data + sizeof(struct ethhdr) + (iph->ihl * 4)); icmph = (data + sizeof(struct ethhdr) + (iph->ihl * 4));
// Check ICMP header. // Check ICMP header.
if (icmph + 1 > (struct icmphdr *)data_end) if (unlikely(icmph + 1 > (struct icmphdr *)data_end))
{ {
return XDP_DROP; return XDP_DROP;
} }