ip_pool.c revision de22af4e795d4c10cbff9a60ec725aab46c03afe
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Copyright (C) 1993-2001, 2003 by Darren Reed.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * See the IPFILTER.LICENCE file for details on licencing.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Copyright (c) 2003, 2010, Oracle and/or its affiliates. All rights reserved.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse# if defined(NetBSD) && (__NetBSD_Version__ >= 104000000)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#if defined(_KERNEL) && (!defined(__SVR4) && !defined(__svr4__))
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#if defined(__FreeBSD_version) && (__FreeBSD_version >= 300000)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#if defined(_KERNEL) && (defined(__osf__) || defined(AIX) || \
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#if defined(IPFILTER_LOOKUP) && defined(_KERNEL) && \
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagassestatic int rn_freenode __P((struct radix_node *, void *));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* END OF INCLUDES */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagassestatic const char sccsid[] = "@(#)ip_fil.c 2.41 6/5/96 (C) 1993-2000 Darren Reed";
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagassestatic const char rcsid[] = "@(#)$Id: ip_pool.c,v 2.55.2.14 2005/06/12 07:18:26 darrenr Exp $";
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Binary tree routines from Sedgewick and enhanced to do ranges of addresses.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * NOTE: Insertion *MUST* be from greatest range to least for it to work!
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * These should be replaced, eventually, by something else - most notably a
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * interval searching method. The important feature is to be able to find
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * the best match.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * So why not use a radix tree for this? As the first line implies, it
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * has been written to work with a _range_ of addresses. A range is not
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * necessarily a match with any given netmask so what we end up dealing
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * with is an interval tree. Implementations of these are hard to find
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * and the one herein is far from bug free.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Sigh, in the end I became convinced that the bugs the code contained did
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * not make it worthwhile not using radix trees. For now the radix tree from
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * 4.4 BSD is used, but this is not viewed as a long term solution.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bzero((char *)&a, sizeof(a));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bzero((char *)&b, sizeof(b));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (0)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (0)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (0)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (1)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (1)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (0)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (1)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (1)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("search(%#x) = %d (-1)\n", ip.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (c = ipo->ipo_list; c != NULL; c = c->ipn_next)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse printf("Node %p(%s) (%#x/%#x) = %d hits %lu\n",
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse c, c->ipn_name, c->ipn_addr.adf_addr.in4.s_addr,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#endif /* TEST_POOL */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_init */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Initialise the routing table data structures where required. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bzero(&ifs->ifs_ipoolstat, sizeof (ip_pool_stat_t));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#if !defined(_KERNEL) || ((BSD < 199306) && (SOLARIS2 < 10))
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_fini */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ipf_global) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Clean up all the pool data structures allocated and call the cleanup */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* function for the radix tree that supports the pools. ip_pool_destroy() is*/
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* used to delete the pools one by one to ensure they're properly freed up. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ASSERT(rw_read_locked(&ifs->ifs_ipf_global.ipf_lk) == 0);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (i = 0; i <= IPL_LOGMAX; i++) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (q = ifs->ifs_ip_pool_list[i]; (p = q) != NULL; ) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#if !defined(_KERNEL) || ((BSD < 199306) && (SOLARIS2 < 10))
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_statistics */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: op(I) - pointer to lookup operation arguments */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Copy the current statistics out into user space, collecting pool list */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* pointers as appropriate for later use. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bcopy((char *)&ifs->ifs_ipoolstat, (char *)&stats, sizeof(stats));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (i = 0; i < IPL_LOGSIZE; i++)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse stats.ipls_list[i] = ifs->ifs_ip_pool_list[i];
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse stats.ipls_list[unit] = ifs->ifs_ip_pool_list[unit];
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse err = COPYOUT(&stats, op->iplo_struct, sizeof(stats));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_find */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: ipo(I) - pointer to the pool getting the new node. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Find a matching pool inside the collection of pools for a particular */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* device, indicated by the unit number. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (p = ifs->ifs_ip_pool_list[unit]; p != NULL; p = p->ipo_next)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse if (strncmp(p->ipo_name, name, sizeof(p->ipo_name)) == 0)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_findeq */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: ipo(I) - pointer to the pool getting the new node. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* addr(I) - pointer to address information to delete */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* mask(I) - */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Searches for an exact match of an entry in the pool. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasseip_pool_node_t *ip_pool_findeq(ipo, addr, mask)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse n = ipo->ipo_head->rnh_lookup(addr, mask, ipo->ipo_head);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_search */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 == +ve match, -1 == error, 1 == -ve/no match */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: tptr(I) - pointer to the pool to search */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* version(I) - IP protocol version (4 or 6) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* dptr(I) - pointer to address information */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* fin - pointer to packet information */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ifs - ipf stack instance */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Search the pool for a given address and return a search result. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasseint ip_pool_search(tptr, version, dptr, fin, ifs)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bzero(&v, sizeof(v));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse rn = ipo->ipo_head->rnh_matchaddr(&v, ipo->ipo_head);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse if ((rn != NULL) && ((rn->rn_flags & RNF_ROOT) == 0)) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_insert */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: ipo(I) - pointer to the pool getting the new node. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* addr(I) - IPv4/6 address being added as a node */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* mask(I) - IPv4/6 netmask to with the node being added */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* info(I) - extra information to store in this node. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Add another node to the pool given by ipo. The three parameters passed */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* in (addr, mask, info) shold all be stored in the node. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ASSERT(rw_read_locked(&ifs->ifs_ip_poolrw.ipf_lk) == 0);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bzero(x, sizeof(*x));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse (void)strncpy(x->ipn_name, ipo->ipo_name, sizeof(x->ipn_name));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse rn = ipo->ipo_head->rnh_addaddr(&x->ipn_addr, &x->ipn_mask,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_create */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: op(I) - pointer to iplookup struct with call details */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Creates a new group according to the paramters passed in via the */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* iplookupop structure. Does not check to see if the group already exists */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* when being inserted - assume this has already been done. If the pool is */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* marked as being anonymous, give it a new, unique, identifier. Call any */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* other functions required to initialise the structure. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ASSERT(rw_read_locked(&ifs->ifs_ip_poolrw.ipf_lk) == 0);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse bzero(h, sizeof(*h));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse offsetof(addrfamily_t, adf_addr) << 3) == 0) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse (void)SNPRINTF(name, sizeof(name), "%x", poolnum);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (p = ifs->ifs_ip_pool_list[unit]; p != NULL; ) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse sizeof(p->ipo_name)) == 0) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse (void)SNPRINTF(name, sizeof(name), "%x", poolnum);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse (void)strncpy(h->ipo_name, name, sizeof(h->ipo_name));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse (void) strncpy(h->ipo_name, op->iplo_name, sizeof(h->ipo_name));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ifs->ifs_ip_pool_list[unit]->ipo_pnext = &h->ipo_next;
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_remove */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: ipo(I) - pointer to the pool to remove the node from. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ipe(I) - address being deleted as a node */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Add another node to the pool given by ipo. The three parameters passed */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* in (addr, mask, info) shold all be stored in the node. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ASSERT(rw_read_locked(&ifs->ifs_ip_poolrw.ipf_lk) == 0);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (ipp = &ipo->ipo_list; (n = *ipp) != NULL; ipp = &n->ipn_next) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ipo->ipo_head->rnh_deladdr(&n->ipn_addr, &n->ipn_mask,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_destroy */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - 0 = success, else error */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: op(I) - information about the pool to remove */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) or WRITE(ipf_global) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Search for a pool using paramters passed in and if it's not otherwise */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* busy, free it. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* NOTE: Because this function is called out of ipldetach() where ip_poolrw */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* may not be initialised, we can't use an ASSERT to enforce the locking */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* assertion that one of the two (ip_poolrw,ipf_global) is held. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ipo = ip_pool_find(op->iplo_unit, op->iplo_name, ifs);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_flush */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: int - number of pools deleted */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: fp(I) - which pool(s) to flush */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) or WRITE(ipf_global) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Free all pools associated with the device that matches the unit number */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* passed in with operation. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* NOTE: Because this function is called out of ipldetach() where ip_poolrw */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* may not be initialised, we can't use an ASSERT to enforce the locking */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* assertion that one of the two (ip_poolrw,ipf_global) is held. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (i = 0; i <= IPL_LOGMAX; i++) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse for (q = ifs->ifs_ip_pool_list[i]; (p = q) != NULL; ) {
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_free */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: void */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: ipo(I) - pointer to pool structure */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) or WRITE(ipf_global) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Deletes the pool strucutre passed in from the list of pools and deletes */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* all of the address information stored in it, including any tree data */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* structures also allocated. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* NOTE: Because this function is called out of ipldetach() where ip_poolrw */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* may not be initialised, we can't use an ASSERT to enforce the locking */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* assertion that one of the two (ip_poolrw,ipf_global) is held. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ipo->ipo_head->rnh_deladdr(&n->ipn_addr, &n->ipn_mask,
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Function: ip_pool_deref */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Returns: void */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Parameters: ipo(I) - pointer to pool structure */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Locks: WRITE(ip_poolrw) */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* Drop the number of known references to this pool structure by one and if */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* we arrive at zero known references, free it. */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse/* ------------------------------------------------------------------------ */
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ASSERT(rw_read_locked(&ifs->ifs_ip_poolrw.ipf_lk) == 0);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Get "previous" entry from the token and find the next entry.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * If we found an entry, add a reference to it and update the token.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Otherwise, zero out data to be returned and NULL out token.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse nextipo = ifs->ifs_ip_pool_list[(int)ilp->ili_unit];
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ipo = ip_pool_find(ilp->ili_unit, ilp->ili_name, ifs);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Now that we have ref, it's save to give up lock.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse * Copy out the data and update the references and token as needed.
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse err = COPYOUT(nextipo, ilp->ili_data, sizeof(*nextipo));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse err = COPYOUT(nextnode, ilp->ili_data, sizeof(*nextnode));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse ip_pool_node_deref((ip_pool_node_t *)data, ifs);
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse# if defined(_KERNEL) && ((BSD >= 198911) && !defined(__osf__) && \
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagassern_freenode(struct radix_node *n, void *p, ipf_stack_t *ifs)
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse FreeS(d, ifs->ifs_max_keylen + 2 * sizeof (*d));
f169c0eae91b2ee787cf8d6dcf8edd9159d4c9e2Glenn Lagasse#endif /* IPFILTER_LOOKUP */