kaffa/XDP-Firewall
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Updated XDP program (not payload matching support).

Browse Source
This commit is contained in:
Christian Deacon
2020-05-06 03:27:09 +00:00
parent e4ad7212de
commit 7f6b5a0ef6
1 changed files with 6 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

10
src/xdpfw_kern.c
View File

@@ -212,19 +212,20 @@ int xdp_prog_main(struct xdp_md *ctx)
} }
// Payload match. // Payload match.
/*
if (filter[i]->payloadLen > 0) if (filter[i]->payloadLen > 0)
{ {
uint8_t found = 1;
uint16_t len = filter[i]->payloadLen;
// Initialize packet data. // Initialize packet data.
uint8_t *pcktData = (data + sizeof(struct ethhdr) + (iph->ihl * 4) + l4headerLen); uint8_t *pcktData = (data + sizeof(struct ethhdr) + (iph->ihl * 4) + l4headerLen);
// Now check packet data and ensure we have enough to match. if (pcktData + len > (uint8_t *)data_end)
if (pcktData + (filter[i]->payloadLen) > (uint8_t *)data_end)
{ {
continue; continue;
} }
uint8_t found = 1;
for (uint16_t j = 0; j < filter[i]->payloadLen; j++) for (uint16_t j = 0; j < filter[i]->payloadLen; j++)
{ {
if ((*pcktData++) == filter[i]->payloadMatch[j]) if ((*pcktData++) == filter[i]->payloadMatch[j])
@@ -242,6 +243,7 @@ int xdp_prog_main(struct xdp_md *ctx)
continue; continue;
} }
} }
*/
// Check layer 4 filters. // Check layer 4 filters.
if (iph->protocol == IPPROTO_TCP && !filter[i]->tcpopts.enabled) if (iph->protocol == IPPROTO_TCP && !filter[i]->tcpopts.enabled)