kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated XDP program (not payload matching support).

Browse Source
This commit is contained in:
Christian Deacon
2020-05-06 03:27:09 +00:00
parent e4ad7212de
commit 7f6b5a0ef6
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/xdpfw_kern.c
View File

@@ -212,19 +212,20 @@ int xdp_prog_main(struct xdp_md *ctx)
}
// Payload match.
/*
if (filter[i]->payloadLen > 0)
{
uint8_t found = 1;
uint16_t len = filter[i]->payloadLen;
// Initialize packet data.
uint8_t *pcktData = (data + sizeof(struct ethhdr) + (iph->ihl * 4) + l4headerLen);
// Now check packet data and ensure we have enough to match.
if (pcktData + (filter[i]->payloadLen) > (uint8_t *)data_end)
if (pcktData + len > (uint8_t *)data_end)
{
continue;
}
uint8_t found = 1;
for (uint16_t j = 0; j < filter[i]->payloadLen; j++)
{
if ((*pcktData++) == filter[i]->payloadMatch[j])
@@ -242,6 +243,7 @@ int xdp_prog_main(struct xdp_md *ctx)
continue;
}
}
*/
// Check layer 4 filters.
if (iph->protocol == IPPROTO_TCP && !filter[i]->tcpopts.enabled)