X-Git-Url: http://git.madism.org/?p=apps%2Fpfixtools.git;a=blobdiff_plain;f=postlicyd%2Ffilter.c;h=7aba638679e61d9b6bc766992290e15c786ffec3;hp=e5b8f35f14ab38e80c672fe0d55e48dae9857e1a;hb=59b8220d0227fe68537a563b3e5fa2e63e26bc0d;hpb=d8b00b7c6eb72ef123eeb85016649742932c38d9 diff --git a/postlicyd/filter.c b/postlicyd/filter.c index e5b8f35..7aba638 100644 --- a/postlicyd/filter.c +++ b/postlicyd/filter.c @@ -41,6 +41,14 @@ static filter_runner_t runners[FTK_count]; static filter_constructor_t constructors[FTK_count]; static filter_destructor_t destructors[FTK_count]; static bool hooks[FTK_count][HTK_count]; +static bool params[FTK_count][ATK_count]; + +static const filter_hook_t default_hook = { + .type = 0, + .value = (char*)"DUNNO", + .postfix = true, + .filter_id = 0 +}; filter_type_t filter_register(const char *type, filter_constructor_t constructor, filter_destructor_t destructor, filter_runner_t runner) @@ -48,8 +56,6 @@ filter_type_t filter_register(const char *type, filter_constructor_t constructor filter_token tok = filter_tokenize(type, m_strlen(type)); CHECK_FILTER(tok); - syslog(LOG_INFO, "filter type %s registered", type); - runners[tok] = runner; constructors[tok] = constructor; destructors[tok] = destructor; @@ -63,13 +69,21 @@ filter_result_t filter_hook_register(filter_type_t filter, CHECK_FILTER(filter); CHECK_HOOK(tok); - syslog(LOG_INFO, "hook %s registered for filter type %s", name, - ftokens[filter]); - hooks[filter][tok] = true; return tok; } +filter_param_id_t filter_param_register(filter_type_t filter, + const char *name) +{ + filter_param_id_t tok = param_tokenize(name, m_strlen(name)); + CHECK_FILTER(filter); + CHECK_PARAM(tok); + + params[filter][tok] = true; + return tok; +} + bool filter_build(filter_t *filter) { bool ret = true; @@ -97,8 +111,8 @@ bool filter_update_references(filter_t *filter, A(filter_t) *filter_list) if (!hook->postfix) { hook->filter_id = filter_find_with_name(filter_list, hook->value); if (hook->filter_id == -1) { - syslog(LOG_ERR, "invalid filter name %s for hook %s", - hook->value, htokens[hook->type]); + err("invalid filter name %s for hook %s", + hook->value, htokens[hook->type]); return false; } p_delete(&hook->value); @@ -107,6 +121,37 @@ bool filter_update_references(filter_t *filter, A(filter_t) *filter_list) return true; } +static inline bool filter_check_loop(filter_t *filter, A(filter_t) *array, int level) +{ + if (filter->last_seen == level) { + return true; + } + filter->last_seen = level; + foreach (filter_hook_t *hook, filter->hooks) { + if (hook->postfix) { + continue; + } + if (hook->filter_id == level) { + return false; + } + if (!filter_check_loop(array_ptr(*array, hook->filter_id), array, level)) { + return false; + } + }} + return true; +} + +bool filter_check_safety(A(filter_t) *array) +{ + foreach (filter_t *filter, *array) { + if (!filter_check_loop(filter, array, __Ai)) { + err("the filter tree contains a loop"); + return false; + } + }} + return true; +} + void filter_wipe(filter_t *filter) { filter_destructor_t destructor = destructors[filter->type]; @@ -118,46 +163,83 @@ void filter_wipe(filter_t *filter) p_delete(&filter->name); } -filter_result_t filter_run(const filter_t *filter, const query_t *query) +const filter_hook_t *filter_run(const filter_t *filter, const query_t *query) +{ + int start = 0; + int end = filter->hooks.len; + debug("running filter %s (%s)", filter->name, ftokens[filter->type]); + filter_result_t res = runners[filter->type](filter, query); + + if (res == HTK_ABORT) { + return NULL; + } + debug("filter run, result is %s", htokens[res]); + + while (start < end) { + int mid = (start + end) / 2; + filter_hook_t *hook = array_ptr(filter->hooks, mid); + if (hook->type == res) { + debug("return hook of type %s, value %s", + htokens[hook->type], hook->value); + return hook; + } else if (res < hook->type) { + end = mid; + } else { + start = mid + 1; + } + } + warn("missing hook %s for filter %s", htokens[res], filter->name); + return &default_hook; +} + +bool filter_test(const filter_t *filter, const query_t *query, filter_result_t result) { - return runners[filter->type](filter, query); + return !!(runners[filter->type](filter, query) == result); } -void filter_set_name(filter_t *filter, const char *name, ssize_t len) +void filter_set_name(filter_t *filter, const char *name, int len) { - filter->name = p_new(char, len + 1); - memcpy(filter->name, name, len); - filter->name[len] = '\0'; + filter->name = p_dupstr(name, len); } -bool filter_set_type(filter_t *filter, const char *type, ssize_t len) +bool filter_set_type(filter_t *filter, const char *type, int len) { filter->type = filter_tokenize(type, len); return filter->type != FTK_UNKNOWN; } -bool filter_add_param(filter_t *filter, const char *name, ssize_t name_len, - const char *value, ssize_t value_len) +bool filter_add_param(filter_t *filter, const char *name, int name_len, + const char *value, int value_len) { - filter_params_t param; - param.name = m_strdup(name); - param.value = m_strdup(value); + filter_param_t param; + param.type = param_tokenize(name, name_len); + if (param.type == ATK_UNKNOWN) { + err("unknown parameter %.*s", name_len, name); + return false; + } + if (!params[filter->type][param.type]) { + err("hook %s is not valid for filter %s", + atokens[param.type], ftokens[filter->type]); + return false; + } + param.value = p_dupstr(value, value_len); + param.value_len = value_len; array_add(filter->params, param); return true; } -bool filter_add_hook(filter_t *filter, const char *name, ssize_t name_len, - const char *value, ssize_t value_len) +bool filter_add_hook(filter_t *filter, const char *name, int name_len, + const char *value, int value_len) { filter_hook_t hook; hook.type = hook_tokenize(name, name_len); if (hook.type == HTK_UNKNOWN) { - syslog(LOG_ERR, "unknown hook type %.*s", name_len, name); + err("unknown hook type %.*s", name_len, name); return false; } - if (!hooks[filter->type][hook.type]) { - syslog(LOG_ERR, "hook %s is valid for filter %s", - htokens[hook.type], ftokens[filter->type]); + if (!hooks[filter->type][hook.type] || hook.type == HTK_ABORT) { + err("hook %s not is valid for filter %s", + htokens[hook.type], ftokens[filter->type]); return false; } hook.postfix = (strncmp(value, "postfix:", 8) == 0);