genetlink: optionally validate strictly/dumps
Add options to strictly validate messages and dump messages, sometimes perhaps validating dump messages non-strictly may be required, so add an option for that as well. Since none of this can really be applied to existing commands, set the options everwhere using the following spatch: @@ identifier ops; expression X; @@ struct genl_ops ops[] = { ..., { .cmd = X, + .validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP, ... }, ... }; For new commands one should just not copy the .validate 'opt-out' flags and thus get strict validation. Signed-off-by: Johannes Berg <johannes.berg@intel.com> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:

zatwierdzone przez
David S. Miller

rodzic
56738f4608
commit
ef6243acb4
@@ -398,11 +398,13 @@ static struct pernet_operations ip6_segments_ops = {
|
||||
static const struct genl_ops seg6_genl_ops[] = {
|
||||
{
|
||||
.cmd = SEG6_CMD_SETHMAC,
|
||||
.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
|
||||
.doit = seg6_genl_sethmac,
|
||||
.flags = GENL_ADMIN_PERM,
|
||||
},
|
||||
{
|
||||
.cmd = SEG6_CMD_DUMPHMAC,
|
||||
.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
|
||||
.start = seg6_genl_dumphmac_start,
|
||||
.dumpit = seg6_genl_dumphmac,
|
||||
.done = seg6_genl_dumphmac_done,
|
||||
@@ -410,11 +412,13 @@ static const struct genl_ops seg6_genl_ops[] = {
|
||||
},
|
||||
{
|
||||
.cmd = SEG6_CMD_SET_TUNSRC,
|
||||
.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
|
||||
.doit = seg6_genl_set_tunsrc,
|
||||
.flags = GENL_ADMIN_PERM,
|
||||
},
|
||||
{
|
||||
.cmd = SEG6_CMD_GET_TUNSRC,
|
||||
.validate = GENL_DONT_VALIDATE_STRICT | GENL_DONT_VALIDATE_DUMP,
|
||||
.doit = seg6_genl_get_tunsrc,
|
||||
.flags = GENL_ADMIN_PERM,
|
||||
},
|
||||
|
Reference in New Issue
Block a user