1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
|
/** @file
*
* Wireshark - Network traffic analyzer
* By Gerald Combs <gerald@wireshark.org>
* Copyright 2001 Gerald Combs
*
* SPDX-License-Identifier: GPL-2.0-or-later
*/
#ifndef DFVM_H
#define DFVM_H
#include <wsutil/regex.h>
#include <epan/proto.h>
#include "dfilter-int.h"
#include "syntax-tree.h"
#include "drange.h"
#include "dfunctions.h"
typedef enum {
EMPTY,
FVALUE,
HFINFO,
INSN_NUMBER,
REGISTER,
INTEGER,
DRANGE,
FUNCTION_DEF,
PCRE
} dfvm_value_type_t;
typedef struct {
dfvm_value_type_t type;
union {
fvalue_t *fvalue;
guint32 numeric;
drange_t *drange;
header_field_info *hfinfo;
df_func_def_t *funcdef;
ws_regex_t *pcre;
} value;
int ref_count;
} dfvm_value_t;
typedef enum {
IF_TRUE_GOTO,
IF_FALSE_GOTO,
CHECK_EXISTS,
NOT,
RETURN,
READ_TREE,
READ_REFERENCE,
PUT_FVALUE,
ALL_EQ,
ANY_EQ,
ALL_NE,
ANY_NE,
ANY_GT,
ANY_GE,
ANY_LT,
ANY_LE,
ANY_ZERO,
ALL_ZERO,
ANY_CONTAINS,
ANY_MATCHES,
MK_RANGE,
MK_BITWISE_AND,
MK_MINUS,
DFVM_ADD,
DFVM_SUBTRACT,
DFVM_MULTIPLY,
DFVM_DIVIDE,
DFVM_MODULO,
CALL_FUNCTION,
ANY_IN_RANGE
} dfvm_opcode_t;
typedef struct {
int id;
dfvm_opcode_t op;
dfvm_value_t *arg1;
dfvm_value_t *arg2;
dfvm_value_t *arg3;
dfvm_value_t *arg4;
} dfvm_insn_t;
dfvm_insn_t*
dfvm_insn_new(dfvm_opcode_t op);
void
dfvm_insn_free(dfvm_insn_t *insn);
dfvm_value_t*
dfvm_value_new(dfvm_value_type_t type);
dfvm_value_t*
dfvm_value_ref(dfvm_value_t *v);
void
dfvm_value_unref(dfvm_value_t *v);
dfvm_value_t*
dfvm_value_new_fvalue(fvalue_t *fv);
dfvm_value_t*
dfvm_value_new_hfinfo(header_field_info *hfinfo);
dfvm_value_t*
dfvm_value_new_register(int reg);
dfvm_value_t*
dfvm_value_new_drange(drange_t *dr);
dfvm_value_t*
dfvm_value_new_funcdef(df_func_def_t *funcdef);
dfvm_value_t*
dfvm_value_new_pcre(ws_regex_t *re);
void
dfvm_dump(FILE *f, dfilter_t *df);
char *
dfvm_dump_str(wmem_allocator_t *alloc, dfilter_t *df, gboolean print_references);
gboolean
dfvm_apply(dfilter_t *df, proto_tree *tree);
#endif
|
