3f356385e8
There are a couple of valid use cases for a minimal low-level bpf asm like tool, for example, using/linking to libpcap is not an option, the required BPF filters use Linux extensions that are not supported by libpcap's compiler, a filter might be more complex and not cleanly implementable with libpcap's compiler, particular filter codes should be optimized differently than libpcap's internal BPF compiler does, or for security audits of emitted BPF JIT code for prepared set of BPF instructions resp. BPF JIT compiler development in general. Then, in such cases writing such a filter in low-level syntax can be an good alternative, for example, xt_bpf and cls_bpf users might have requirements that could result in more complex filter code, or one that cannot be expressed with libpcap (e.g. different return codes in cls_bpf for flowids on various BPF code paths). Moreover, BPF JIT implementors may wish to manually write test cases in order to verify the resulting JIT image, and thus need low-level access to BPF code generation as well. Therefore, complete the available toolchain for BPF with this small bpf_asm helper tool for the tools/net/ directory. These 3 complementary minimal helper tools round up and facilitate BPF development. Signed-off-by: Daniel Borkmann <dborkman@redhat.com> Signed-off-by: David S. Miller <davem@davemloft.net>
53 lines
1.2 KiB
C
53 lines
1.2 KiB
C
/*
|
|
* Minimal BPF assembler
|
|
*
|
|
* Instead of libpcap high-level filter expressions, it can be quite
|
|
* useful to define filters in low-level BPF assembler (that is kept
|
|
* close to Steven McCanne and Van Jacobson's original BPF paper).
|
|
* In particular for BPF JIT implementors, JIT security auditors, or
|
|
* just for defining BPF expressions that contain extensions which are
|
|
* not supported by compilers.
|
|
*
|
|
* How to get into it:
|
|
*
|
|
* 1) read Documentation/networking/filter.txt
|
|
* 2) Run `bpf_asm [-c] <filter-prog file>` to translate into binary
|
|
* blob that is loadable with xt_bpf, cls_bpf et al. Note: -c will
|
|
* pretty print a C-like construct.
|
|
*
|
|
* Copyright 2013 Daniel Borkmann <borkmann@redhat.com>
|
|
* Licensed under the GNU General Public License, version 2.0 (GPLv2)
|
|
*/
|
|
|
|
#include <stdbool.h>
|
|
#include <stdio.h>
|
|
#include <string.h>
|
|
|
|
extern void bpf_asm_compile(FILE *fp, bool cstyle);
|
|
|
|
int main(int argc, char **argv)
|
|
{
|
|
FILE *fp = stdin;
|
|
bool cstyle = false;
|
|
int i;
|
|
|
|
for (i = 1; i < argc; i++) {
|
|
if (!strncmp("-c", argv[i], 2)) {
|
|
cstyle = true;
|
|
continue;
|
|
}
|
|
|
|
fp = fopen(argv[i], "r");
|
|
if (!fp) {
|
|
fp = stdin;
|
|
continue;
|
|
}
|
|
|
|
break;
|
|
}
|
|
|
|
bpf_asm_compile(fp, cstyle);
|
|
|
|
return 0;
|
|
}
|