[deliverable/linux.git] / net / sched / cls_fw.c

/*
 * net/sched/cls_fw.c	Classifier mapping ipchains' fwmark to traffic class.
 *
 *		This program is free software; you can redistribute it and/or
 *		modify it under the terms of the GNU General Public License
 *		as published by the Free Software Foundation; either version
 *		2 of the License, or (at your option) any later version.
 *
 * Authors:	Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
 *
 * Changes:
 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_walk off by one
 * Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_delete killed all the filter (and kernel).
 * Alex <alex@pilotsoft.com> : 2004xxyy: Added Action extension
 *
 * JHS: We should remove the CONFIG_NET_CLS_IND from here
 * eventually when the meta match extension is made available
 *
 */

#include <linux/module.h>
#include <linux/slab.h>
#include <linux/types.h>
#include <linux/kernel.h>
#include <linux/string.h>
#include <linux/errno.h>
#include <linux/skbuff.h>
#include <net/netlink.h>
#include <net/act_api.h>
#include <net/pkt_cls.h>

#define HTSIZE (PAGE_SIZE/sizeof(struct fw_filter *))

struct fw_head {
	struct fw_filter *ht[HTSIZE];
	u32 mask;
};

struct fw_filter {
	struct fw_filter	*next;
	u32			id;
	struct tcf_result	res;
#ifdef CONFIG_NET_CLS_IND
	char			indev[IFNAMSIZ];
#endif /* CONFIG_NET_CLS_IND */
	struct tcf_exts		exts;
};

static inline int fw_hash(u32 handle)
{
	if (HTSIZE == 4096)
		return ((handle >> 24) & 0xFFF) ^
		       ((handle >> 12) & 0xFFF) ^
		       (handle & 0xFFF);
	else if (HTSIZE == 2048)
		return ((handle >> 22) & 0x7FF) ^
		       ((handle >> 11) & 0x7FF) ^
		       (handle & 0x7FF);
	else if (HTSIZE == 1024)
		return ((handle >> 20) & 0x3FF) ^
		       ((handle >> 10) & 0x3FF) ^
		       (handle & 0x3FF);
	else if (HTSIZE == 512)
		return (handle >> 27) ^
		       ((handle >> 18) & 0x1FF) ^
		       ((handle >> 9) & 0x1FF) ^
		       (handle & 0x1FF);
	else if (HTSIZE == 256) {
		u8 *t = (u8 *) &handle;
		return t[0] ^ t[1] ^ t[2] ^ t[3];
	} else
		return handle & (HTSIZE - 1);
}

static int fw_classify(struct sk_buff *skb, const struct tcf_proto *tp,
			  struct tcf_result *res)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	struct fw_filter *f;
	int r;
	u32 id = skb->mark;

	if (head != NULL) {
		id &= head->mask;
		for (f = head->ht[fw_hash(id)]; f; f = f->next) {
			if (f->id == id) {
				*res = f->res;
#ifdef CONFIG_NET_CLS_IND
				if (!tcf_match_indev(skb, f->indev))
					continue;
#endif /* CONFIG_NET_CLS_IND */
				r = tcf_exts_exec(skb, &f->exts, res);
				if (r < 0)
					continue;

				return r;
			}
		}
	} else {
		/* old method */
		if (id && (TC_H_MAJ(id) == 0 ||
			   !(TC_H_MAJ(id ^ tp->q->handle)))) {
			res->classid = id;
			res->class = 0;
			return 0;
		}
	}

	return -1;
}

static unsigned long fw_get(struct tcf_proto *tp, u32 handle)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	struct fw_filter *f;

	if (head == NULL)
		return 0;

	for (f = head->ht[fw_hash(handle)]; f; f = f->next) {
		if (f->id == handle)
			return (unsigned long)f;
	}
	return 0;
}

static void fw_put(struct tcf_proto *tp, unsigned long f)
{
}

static int fw_init(struct tcf_proto *tp)
{
	return 0;
}

static void fw_delete_filter(struct tcf_proto *tp, struct fw_filter *f)
{
	tcf_unbind_filter(tp, &f->res);
	tcf_exts_destroy(tp, &f->exts);
	kfree(f);
}

static void fw_destroy(struct tcf_proto *tp)
{
	struct fw_head *head = tp->root;
	struct fw_filter *f;
	int h;

	if (head == NULL)
		return;

	for (h = 0; h < HTSIZE; h++) {
		while ((f = head->ht[h]) != NULL) {
			head->ht[h] = f->next;
			fw_delete_filter(tp, f);
		}
	}
	kfree(head);
}

static int fw_delete(struct tcf_proto *tp, unsigned long arg)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	struct fw_filter *f = (struct fw_filter *)arg;
	struct fw_filter **fp;

	if (head == NULL || f == NULL)
		goto out;

	for (fp = &head->ht[fw_hash(f->id)]; *fp; fp = &(*fp)->next) {
		if (*fp == f) {
			tcf_tree_lock(tp);
			*fp = f->next;
			tcf_tree_unlock(tp);
			fw_delete_filter(tp, f);
			return 0;
		}
	}
out:
	return -EINVAL;
}

static const struct nla_policy fw_policy[TCA_FW_MAX + 1] = {
	[TCA_FW_CLASSID]	= { .type = NLA_U32 },
	[TCA_FW_INDEV]		= { .type = NLA_STRING, .len = IFNAMSIZ },
	[TCA_FW_MASK]		= { .type = NLA_U32 },
};

static int
fw_change_attrs(struct net *net, struct tcf_proto *tp, struct fw_filter *f,
	struct nlattr **tb, struct nlattr **tca, unsigned long base)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	struct tcf_exts e;
	u32 mask;
	int err;

	tcf_exts_init(&e, TCA_FW_ACT, TCA_FW_POLICE);
	err = tcf_exts_validate(net, tp, tb, tca[TCA_RATE], &e);
	if (err < 0)
		return err;

	if (tb[TCA_FW_CLASSID]) {
		f->res.classid = nla_get_u32(tb[TCA_FW_CLASSID]);
		tcf_bind_filter(tp, &f->res, base);
	}

#ifdef CONFIG_NET_CLS_IND
	if (tb[TCA_FW_INDEV]) {
		err = tcf_change_indev(tp, f->indev, tb[TCA_FW_INDEV]);
		if (err < 0)
			goto errout;
	}
#endif /* CONFIG_NET_CLS_IND */

	err = -EINVAL;
	if (tb[TCA_FW_MASK]) {
		mask = nla_get_u32(tb[TCA_FW_MASK]);
		if (mask != head->mask)
			goto errout;
	} else if (head->mask != 0xFFFFFFFF)
		goto errout;

	tcf_exts_change(tp, &f->exts, &e);

	return 0;
errout:
	tcf_exts_destroy(tp, &e);
	return err;
}

static int fw_change(struct net *net, struct sk_buff *in_skb,
		     struct tcf_proto *tp, unsigned long base,
		     u32 handle,
		     struct nlattr **tca,
		     unsigned long *arg)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	struct fw_filter *f = (struct fw_filter *) *arg;
	struct nlattr *opt = tca[TCA_OPTIONS];
	struct nlattr *tb[TCA_FW_MAX + 1];
	int err;

	if (!opt)
		return handle ? -EINVAL : 0;

	err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
	if (err < 0)
		return err;

	if (f != NULL) {
		if (f->id != handle && handle)
			return -EINVAL;
		return fw_change_attrs(net, tp, f, tb, tca, base);
	}

	if (!handle)
		return -EINVAL;

	if (head == NULL) {
		u32 mask = 0xFFFFFFFF;
		if (tb[TCA_FW_MASK])
			mask = nla_get_u32(tb[TCA_FW_MASK]);

		head = kzalloc(sizeof(struct fw_head), GFP_KERNEL);
		if (head == NULL)
			return -ENOBUFS;
		head->mask = mask;

		tcf_tree_lock(tp);
		tp->root = head;
		tcf_tree_unlock(tp);
	}

	f = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
	if (f == NULL)
		return -ENOBUFS;

	tcf_exts_init(&f->exts, TCA_FW_ACT, TCA_FW_POLICE);
	f->id = handle;

	err = fw_change_attrs(net, tp, f, tb, tca, base);
	if (err < 0)
		goto errout;

	f->next = head->ht[fw_hash(handle)];
	tcf_tree_lock(tp);
	head->ht[fw_hash(handle)] = f;
	tcf_tree_unlock(tp);

	*arg = (unsigned long)f;
	return 0;

errout:
	kfree(f);
	return err;
}

static void fw_walk(struct tcf_proto *tp, struct tcf_walker *arg)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	int h;

	if (head == NULL)
		arg->stop = 1;

	if (arg->stop)
		return;

	for (h = 0; h < HTSIZE; h++) {
		struct fw_filter *f;

		for (f = head->ht[h]; f; f = f->next) {
			if (arg->count < arg->skip) {
				arg->count++;
				continue;
			}
			if (arg->fn(tp, (unsigned long)f, arg) < 0) {
				arg->stop = 1;
				return;
			}
			arg->count++;
		}
	}
}

static int fw_dump(struct tcf_proto *tp, unsigned long fh,
		   struct sk_buff *skb, struct tcmsg *t)
{
	struct fw_head *head = (struct fw_head *)tp->root;
	struct fw_filter *f = (struct fw_filter *)fh;
	unsigned char *b = skb_tail_pointer(skb);
	struct nlattr *nest;

	if (f == NULL)
		return skb->len;

	t->tcm_handle = f->id;

	if (!f->res.classid && !tcf_exts_is_available(&f->exts))
		return skb->len;

	nest = nla_nest_start(skb, TCA_OPTIONS);
	if (nest == NULL)
		goto nla_put_failure;

	if (f->res.classid &&
	    nla_put_u32(skb, TCA_FW_CLASSID, f->res.classid))
		goto nla_put_failure;
#ifdef CONFIG_NET_CLS_IND
	if (strlen(f->indev) &&
	    nla_put_string(skb, TCA_FW_INDEV, f->indev))
		goto nla_put_failure;
#endif /* CONFIG_NET_CLS_IND */
	if (head->mask != 0xFFFFFFFF &&
	    nla_put_u32(skb, TCA_FW_MASK, head->mask))
		goto nla_put_failure;

	if (tcf_exts_dump(skb, &f->exts) < 0)
		goto nla_put_failure;

	nla_nest_end(skb, nest);

	if (tcf_exts_dump_stats(skb, &f->exts) < 0)
		goto nla_put_failure;

	return skb->len;

nla_put_failure:
	nlmsg_trim(skb, b);
	return -1;
}

static struct tcf_proto_ops cls_fw_ops __read_mostly = {
	.kind		=	"fw",
	.classify	=	fw_classify,
	.init		=	fw_init,
	.destroy	=	fw_destroy,
	.get		=	fw_get,
	.put		=	fw_put,
	.change		=	fw_change,
	.delete		=	fw_delete,
	.walk		=	fw_walk,
	.dump		=	fw_dump,
	.owner		=	THIS_MODULE,
};

static int __init init_fw(void)
{
	return register_tcf_proto_ops(&cls_fw_ops);
}

static void __exit exit_fw(void)
{
	unregister_tcf_proto_ops(&cls_fw_ops);
}

module_init(init_fw)
module_exit(exit_fw)
MODULE_LICENSE("GPL");
Commit	Line	Data
	1	/*
	2	* net/sched/cls_fw.c Classifier mapping ipchains' fwmark to traffic class.
	3	*
	4	* This program is free software; you can redistribute it and/or
	5	* modify it under the terms of the GNU General Public License
	6	* as published by the Free Software Foundation; either version
	7	* 2 of the License, or (at your option) any later version.
	8	*
	9	* Authors: Alexey Kuznetsov, <kuznet@ms2.inr.ac.ru>
	10	*
	11	* Changes:
	12	* Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_walk off by one
	13	* Karlis Peisenieks <karlis@mt.lv> : 990415 : fw_delete killed all the filter (and kernel).
	14	* Alex <alex@pilotsoft.com> : 2004xxyy: Added Action extension
	15	*
	16	* JHS: We should remove the CONFIG_NET_CLS_IND from here
	17	* eventually when the meta match extension is made available
	18	*
	19	*/
	20
	21	#include <linux/module.h>
	22	#include <linux/slab.h>
	23	#include <linux/types.h>
	24	#include <linux/kernel.h>
	25	#include <linux/string.h>
	26	#include <linux/errno.h>
	27	#include <linux/skbuff.h>
	28	#include <net/netlink.h>
	29	#include <net/act_api.h>
	30	#include <net/pkt_cls.h>
	31
	32	#define HTSIZE (PAGE_SIZE/sizeof(struct fw_filter *))
	33
	34	struct fw_head {
	35	struct fw_filter *ht[HTSIZE];
	36	u32 mask;
	37	};
	38
	39	struct fw_filter {
	40	struct fw_filter *next;
	41	u32 id;
	42	struct tcf_result res;
	43	#ifdef CONFIG_NET_CLS_IND
	44	char indev[IFNAMSIZ];
	45	#endif /* CONFIG_NET_CLS_IND */
	46	struct tcf_exts exts;
	47	};
	48
	49	static inline int fw_hash(u32 handle)
	50	{
	51	if (HTSIZE == 4096)
	52	return ((handle >> 24) & 0xFFF) ^
	53	((handle >> 12) & 0xFFF) ^
	54	(handle & 0xFFF);
	55	else if (HTSIZE == 2048)
	56	return ((handle >> 22) & 0x7FF) ^
	57	((handle >> 11) & 0x7FF) ^
	58	(handle & 0x7FF);
	59	else if (HTSIZE == 1024)
	60	return ((handle >> 20) & 0x3FF) ^
	61	((handle >> 10) & 0x3FF) ^
	62	(handle & 0x3FF);
	63	else if (HTSIZE == 512)
	64	return (handle >> 27) ^
	65	((handle >> 18) & 0x1FF) ^
	66	((handle >> 9) & 0x1FF) ^
	67	(handle & 0x1FF);
	68	else if (HTSIZE == 256) {
	69	u8 t = (u8 ) &handle;
	70	return t[0] ^ t[1] ^ t[2] ^ t[3];
	71	} else
	72	return handle & (HTSIZE - 1);
	73	}
	74
	75	static int fw_classify(struct sk_buff skb, const struct tcf_proto tp,
	76	struct tcf_result *res)
	77	{
	78	struct fw_head head = (struct fw_head )tp->root;
	79	struct fw_filter *f;
	80	int r;
	81	u32 id = skb->mark;
	82
	83	if (head != NULL) {
	84	id &= head->mask;
	85	for (f = head->ht[fw_hash(id)]; f; f = f->next) {
	86	if (f->id == id) {
	87	*res = f->res;
	88	#ifdef CONFIG_NET_CLS_IND
	89	if (!tcf_match_indev(skb, f->indev))
	90	continue;
	91	#endif /* CONFIG_NET_CLS_IND */
	92	r = tcf_exts_exec(skb, &f->exts, res);
	93	if (r < 0)
	94	continue;
	95
	96	return r;
	97	}
	98	}
	99	} else {
	100	/* old method */
	101	if (id && (TC_H_MAJ(id) == 0 \|\|
	102	!(TC_H_MAJ(id ^ tp->q->handle)))) {
	103	res->classid = id;
	104	res->class = 0;
	105	return 0;
	106	}
	107	}
	108
	109	return -1;
	110	}
	111
	112	static unsigned long fw_get(struct tcf_proto *tp, u32 handle)
	113	{
	114	struct fw_head head = (struct fw_head )tp->root;
	115	struct fw_filter *f;
	116
	117	if (head == NULL)
	118	return 0;
	119
	120	for (f = head->ht[fw_hash(handle)]; f; f = f->next) {
	121	if (f->id == handle)
	122	return (unsigned long)f;
	123	}
	124	return 0;
	125	}
	126
	127	static void fw_put(struct tcf_proto *tp, unsigned long f)
	128	{
	129	}
	130
	131	static int fw_init(struct tcf_proto *tp)
	132	{
	133	return 0;
	134	}
	135
	136	static void fw_delete_filter(struct tcf_proto tp, struct fw_filter f)
	137	{
	138	tcf_unbind_filter(tp, &f->res);
	139	tcf_exts_destroy(tp, &f->exts);
	140	kfree(f);
	141	}
	142
	143	static void fw_destroy(struct tcf_proto *tp)
	144	{
	145	struct fw_head *head = tp->root;
	146	struct fw_filter *f;
	147	int h;
	148
	149	if (head == NULL)
	150	return;
	151
	152	for (h = 0; h < HTSIZE; h++) {
	153	while ((f = head->ht[h]) != NULL) {
	154	head->ht[h] = f->next;
	155	fw_delete_filter(tp, f);
	156	}
	157	}
	158	kfree(head);
	159	}
	160
	161	static int fw_delete(struct tcf_proto *tp, unsigned long arg)
	162	{
	163	struct fw_head head = (struct fw_head )tp->root;
	164	struct fw_filter f = (struct fw_filter )arg;
	165	struct fw_filter **fp;
	166
	167	if (head == NULL \|\| f == NULL)
	168	goto out;
	169
	170	for (fp = &head->ht[fw_hash(f->id)]; fp; fp = &(fp)->next) {
	171	if (*fp == f) {
	172	tcf_tree_lock(tp);
	173	*fp = f->next;
	174	tcf_tree_unlock(tp);
	175	fw_delete_filter(tp, f);
	176	return 0;
	177	}
	178	}
	179	out:
	180	return -EINVAL;
	181	}
	182
	183	static const struct nla_policy fw_policy[TCA_FW_MAX + 1] = {
	184	[TCA_FW_CLASSID] = { .type = NLA_U32 },
	185	[TCA_FW_INDEV] = { .type = NLA_STRING, .len = IFNAMSIZ },
	186	[TCA_FW_MASK] = { .type = NLA_U32 },
	187	};
	188
	189	static int
	190	fw_change_attrs(struct net net, struct tcf_proto tp, struct fw_filter *f,
	191	struct nlattr tb, struct nlattr tca, unsigned long base)
	192	{
	193	struct fw_head head = (struct fw_head )tp->root;
	194	struct tcf_exts e;
	195	u32 mask;
	196	int err;
	197
	198	tcf_exts_init(&e, TCA_FW_ACT, TCA_FW_POLICE);
	199	err = tcf_exts_validate(net, tp, tb, tca[TCA_RATE], &e);
	200	if (err < 0)
	201	return err;
	202
	203	if (tb[TCA_FW_CLASSID]) {
	204	f->res.classid = nla_get_u32(tb[TCA_FW_CLASSID]);
	205	tcf_bind_filter(tp, &f->res, base);
	206	}
	207
	208	#ifdef CONFIG_NET_CLS_IND
	209	if (tb[TCA_FW_INDEV]) {
	210	err = tcf_change_indev(tp, f->indev, tb[TCA_FW_INDEV]);
	211	if (err < 0)
	212	goto errout;
	213	}
	214	#endif /* CONFIG_NET_CLS_IND */
	215
	216	err = -EINVAL;
	217	if (tb[TCA_FW_MASK]) {
	218	mask = nla_get_u32(tb[TCA_FW_MASK]);
	219	if (mask != head->mask)
	220	goto errout;
	221	} else if (head->mask != 0xFFFFFFFF)
	222	goto errout;
	223
	224	tcf_exts_change(tp, &f->exts, &e);
	225
	226	return 0;
	227	errout:
	228	tcf_exts_destroy(tp, &e);
	229	return err;
	230	}
	231
	232	static int fw_change(struct net net, struct sk_buff in_skb,
	233	struct tcf_proto *tp, unsigned long base,
	234	u32 handle,
	235	struct nlattr **tca,
	236	unsigned long *arg)
	237	{
	238	struct fw_head head = (struct fw_head )tp->root;
	239	struct fw_filter f = (struct fw_filter ) *arg;
	240	struct nlattr *opt = tca[TCA_OPTIONS];
	241	struct nlattr *tb[TCA_FW_MAX + 1];
	242	int err;
	243
	244	if (!opt)
	245	return handle ? -EINVAL : 0;
	246
	247	err = nla_parse_nested(tb, TCA_FW_MAX, opt, fw_policy);
	248	if (err < 0)
	249	return err;
	250
	251	if (f != NULL) {
	252	if (f->id != handle && handle)
	253	return -EINVAL;
	254	return fw_change_attrs(net, tp, f, tb, tca, base);
	255	}
	256
	257	if (!handle)
	258	return -EINVAL;
	259
	260	if (head == NULL) {
	261	u32 mask = 0xFFFFFFFF;
	262	if (tb[TCA_FW_MASK])
	263	mask = nla_get_u32(tb[TCA_FW_MASK]);
	264
	265	head = kzalloc(sizeof(struct fw_head), GFP_KERNEL);
	266	if (head == NULL)
	267	return -ENOBUFS;
	268	head->mask = mask;
	269
	270	tcf_tree_lock(tp);
	271	tp->root = head;
	272	tcf_tree_unlock(tp);
	273	}
	274
	275	f = kzalloc(sizeof(struct fw_filter), GFP_KERNEL);
	276	if (f == NULL)
	277	return -ENOBUFS;
	278
	279	tcf_exts_init(&f->exts, TCA_FW_ACT, TCA_FW_POLICE);
	280	f->id = handle;
	281
	282	err = fw_change_attrs(net, tp, f, tb, tca, base);
	283	if (err < 0)
	284	goto errout;
	285
	286	f->next = head->ht[fw_hash(handle)];
	287	tcf_tree_lock(tp);
	288	head->ht[fw_hash(handle)] = f;
	289	tcf_tree_unlock(tp);
	290
	291	*arg = (unsigned long)f;
	292	return 0;
	293
	294	errout:
	295	kfree(f);
	296	return err;
	297	}
	298
	299	static void fw_walk(struct tcf_proto tp, struct tcf_walker arg)
	300	{
	301	struct fw_head head = (struct fw_head )tp->root;
	302	int h;
	303
	304	if (head == NULL)
	305	arg->stop = 1;
	306
	307	if (arg->stop)
	308	return;
	309
	310	for (h = 0; h < HTSIZE; h++) {
	311	struct fw_filter *f;
	312
	313	for (f = head->ht[h]; f; f = f->next) {
	314	if (arg->count < arg->skip) {
	315	arg->count++;
	316	continue;
	317	}
	318	if (arg->fn(tp, (unsigned long)f, arg) < 0) {
	319	arg->stop = 1;
	320	return;
	321	}
	322	arg->count++;
	323	}
	324	}
	325	}
	326
	327	static int fw_dump(struct tcf_proto *tp, unsigned long fh,
	328	struct sk_buff skb, struct tcmsg t)
	329	{
	330	struct fw_head head = (struct fw_head )tp->root;
	331	struct fw_filter f = (struct fw_filter )fh;
	332	unsigned char *b = skb_tail_pointer(skb);
	333	struct nlattr *nest;
	334
	335	if (f == NULL)
	336	return skb->len;
	337
	338	t->tcm_handle = f->id;
	339
	340	if (!f->res.classid && !tcf_exts_is_available(&f->exts))
	341	return skb->len;
	342
	343	nest = nla_nest_start(skb, TCA_OPTIONS);
	344	if (nest == NULL)
	345	goto nla_put_failure;
	346
	347	if (f->res.classid &&
	348	nla_put_u32(skb, TCA_FW_CLASSID, f->res.classid))
	349	goto nla_put_failure;
	350	#ifdef CONFIG_NET_CLS_IND
	351	if (strlen(f->indev) &&
	352	nla_put_string(skb, TCA_FW_INDEV, f->indev))
	353	goto nla_put_failure;
	354	#endif /* CONFIG_NET_CLS_IND */
	355	if (head->mask != 0xFFFFFFFF &&
	356	nla_put_u32(skb, TCA_FW_MASK, head->mask))
	357	goto nla_put_failure;
	358
	359	if (tcf_exts_dump(skb, &f->exts) < 0)
	360	goto nla_put_failure;
	361
	362	nla_nest_end(skb, nest);
	363
	364	if (tcf_exts_dump_stats(skb, &f->exts) < 0)
	365	goto nla_put_failure;
	366
	367	return skb->len;
	368
	369	nla_put_failure:
	370	nlmsg_trim(skb, b);
	371	return -1;
	372	}
	373
	374	static struct tcf_proto_ops cls_fw_ops __read_mostly = {
	375	.kind = "fw",
	376	.classify = fw_classify,
	377	.init = fw_init,
	378	.destroy = fw_destroy,
	379	.get = fw_get,
	380	.put = fw_put,
	381	.change = fw_change,
	382	.delete = fw_delete,
	383	.walk = fw_walk,
	384	.dump = fw_dump,
	385	.owner = THIS_MODULE,
	386	};
	387
	388	static int __init init_fw(void)
	389	{
	390	return register_tcf_proto_ops(&cls_fw_ops);
	391	}
	392
	393	static void __exit exit_fw(void)
	394	{
	395	unregister_tcf_proto_ops(&cls_fw_ops);
	396	}
	397
	398	module_init(init_fw)
	399	module_exit(exit_fw)
	400	MODULE_LICENSE("GPL");