sk-filter: Add ability to get socket filter program (v2)
The SO_ATTACH_FILTER option is set only. I propose to add the get ability by using SO_ATTACH_FILTER in getsockopt. To be less irritating to eyes the SO_GET_FILTER alias to it is declared. This ability is required by checkpoint-restore project to be able to save full state of a socket. There are two issues with getting filter back. First, kernel modifies the sock_filter->code on filter load, thus in order to return the filter element back to user we have to decode it into user-visible constants. Fortunately the modification in question is interconvertible. Second, the BPF_S_ALU_DIV_K code modifies the command argument k to speed up the run-time division by doing kernel_k = reciprocal(user_k). Bad news is that different user_k may result in same kernel_k, so we can't get the original user_k back. Good news is that we don't have to do it. What we need to is calculate a user2_k so, that reciprocal(user2_k) == reciprocal(user_k) == kernel_k i.e. if it's re-loaded back the compiled again value will be exactly the same as it was. That said, the user2_k can be calculated like this user2_k = reciprocal(kernel_k) with an exception, that if kernel_k == 0, then user2_k == 1. The optlen argument is treated like this -- when zero, kernel returns the amount of sock_fprog elements in filter, otherwise it should be large enough for the sock_fprog array. changes since v1: * Declared SO_GET_FILTER in all arch headers * Added decode of vlan-tag codes Signed-off-by:Pavel Emelyanov <xemul@parallels.com> Signed-off-by:
David S. Miller <davem@davemloft.net>
Showing
- arch/alpha/include/asm/socket.h 1 addition, 0 deletionsarch/alpha/include/asm/socket.h
- arch/avr32/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/avr32/include/uapi/asm/socket.h
- arch/cris/include/asm/socket.h 1 addition, 0 deletionsarch/cris/include/asm/socket.h
- arch/frv/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/frv/include/uapi/asm/socket.h
- arch/h8300/include/asm/socket.h 1 addition, 0 deletionsarch/h8300/include/asm/socket.h
- arch/ia64/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/ia64/include/uapi/asm/socket.h
- arch/m32r/include/asm/socket.h 1 addition, 0 deletionsarch/m32r/include/asm/socket.h
- arch/m68k/include/asm/socket.h 1 addition, 0 deletionsarch/m68k/include/asm/socket.h
- arch/mips/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/mips/include/uapi/asm/socket.h
- arch/mn10300/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/mn10300/include/uapi/asm/socket.h
- arch/parisc/include/asm/socket.h 1 addition, 0 deletionsarch/parisc/include/asm/socket.h
- arch/powerpc/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/powerpc/include/uapi/asm/socket.h
- arch/s390/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/s390/include/uapi/asm/socket.h
- arch/sparc/include/uapi/asm/socket.h 1 addition, 0 deletionsarch/sparc/include/uapi/asm/socket.h
- arch/xtensa/include/asm/socket.h 1 addition, 0 deletionsarch/xtensa/include/asm/socket.h
- include/linux/filter.h 1 addition, 0 deletionsinclude/linux/filter.h
- include/uapi/asm-generic/socket.h 1 addition, 0 deletionsinclude/uapi/asm-generic/socket.h
- net/core/filter.c 130 additions, 0 deletionsnet/core/filter.c
- net/core/sock.c 6 additions, 0 deletionsnet/core/sock.c
Loading
Please register or sign in to comment