Commit fc1266a0 authored by Ido Schimmel's avatar Ido Schimmel Committed by Jakub Kicinski
Browse files

ipv6: fib_rules: Add port mask matching 



Extend IPv6 FIB rules to match on source and destination ports using a
mask. Note that the mask is only set when not matching on a range.

Reviewed-by: default avatarPetr Machata <petrm@nvidia.com>
Signed-off-by: default avatarIdo Schimmel <idosch@nvidia.com>
Reviewed-by: default avatarGuillaume Nault <gnault@redhat.com>
Reviewed-by: default avatarDavid Ahern <dsahern@kernel.org>
Link: https://patch.msgid.link/20250217134109.311176-5-idosch@nvidia.com


Signed-off-by: default avatarJakub Kicinski <kuba@kernel.org>
parent 79a4e215

net/ipv6/fib6_rules.c

+4 −4
Original line number Diff line number Diff line
@@ -340,12 +340,12 @@ INDIRECT_CALLABLE_SCOPE int fib6_rule_match(struct fib_rule *rule, 
	if (rule->ip_proto && (rule->ip_proto != fl6->flowi6_proto))

		return 0;



	if (fib_rule_port_range_set(&rule->sport_range) &&

	    !fib_rule_port_inrange(&rule->sport_range, fl6->fl6_sport))

	if (!fib_rule_port_match(&rule->sport_range, rule->sport_mask,

				 fl6->fl6_sport))

		return 0;



	if (fib_rule_port_range_set(&rule->dport_range) &&

	    !fib_rule_port_inrange(&rule->dport_range, fl6->fl6_dport))

	if (!fib_rule_port_match(&rule->dport_range, rule->dport_mask,

				 fl6->fl6_dport))

		return 0;



	return 1;