2 * Linux Socket Filter Data Structures
4 #ifndef __LINUX_FILTER_H__
5 #define __LINUX_FILTER_H__
7 #include <linux/atomic.h>
8 #include <linux/compat.h>
9 #include <uapi/linux/filter.h>
13 * A struct sock_filter is architecture independent.
15 struct compat_sock_fprog {
17 compat_uptr_t filter; /* struct sock_filter * */
27 unsigned int len; /* Number of filter blocks */
28 unsigned int (*bpf_func)(const struct sk_buff *skb,
29 const struct sock_filter *filter);
31 struct sock_filter insns[0];
34 static inline unsigned int sk_filter_len(const struct sk_filter *fp)
36 return fp->len * sizeof(struct sock_filter) + sizeof(*fp);
39 extern int sk_filter(struct sock *sk, struct sk_buff *skb);
40 extern unsigned int sk_run_filter(const struct sk_buff *skb,
41 const struct sock_filter *filter);
42 extern int sk_unattached_filter_create(struct sk_filter **pfp,
43 struct sock_fprog *fprog);
44 extern void sk_unattached_filter_destroy(struct sk_filter *fp);
45 extern int sk_attach_filter(struct sock_fprog *fprog, struct sock *sk);
46 extern int sk_detach_filter(struct sock *sk);
47 extern int sk_chk_filter(struct sock_filter *filter, unsigned int flen);
50 extern void bpf_jit_compile(struct sk_filter *fp);
51 extern void bpf_jit_free(struct sk_filter *fp);
52 #define SK_RUN_FILTER(FILTER, SKB) (*FILTER->bpf_func)(SKB, FILTER->insns)
54 static inline void bpf_jit_compile(struct sk_filter *fp)
57 static inline void bpf_jit_free(struct sk_filter *fp)
60 #define SK_RUN_FILTER(FILTER, SKB) sk_run_filter(SKB, FILTER->insns)
118 BPF_S_ANC_NLATTR_NEST,
125 BPF_S_ANC_SECCOMP_LD_W,
128 #endif /* __LINUX_FILTER_H__ */