nx_ipfilter_fetch.nx
buildroot/runtime/nx_ipfilter_fetch.nx
about
nx_ipfilter_fetch.nx -- compile a live plaintext CIDR blocklist into ipfilter.bin over sovereign TLS. Default
source = firehol_level1.netset (canonical "known-bad": hijacked netblocks, DROP, etc. -- plaintext CIDR, so
no gz-inflate needed). ⚠HONEST: this is a general malicious-IP list, NOT a torrent-monitor-specific list;
a P2P-monitor list (I-BlockList level1) is gzipped -> needs our gz inflater first (a later rung). Output:
8 bytes/entry [start u32 LE][end u32 LE]. argv[1]=out path (default ipfilter.bin), argv[2]=URL.
license_tier: ORIGINAL depends: syscalls, TLS stack, nx_ipfilter (ipf_ip/ipf_put_u32le)
dependencies 5 imports · 1 importers
imports: nx_syscalls.nxnx_x509_trust_store.nxnx_trust_store_load_from_certdata.nxnx_https_fetch_follow.nxnx_ipfilter.nx
imported by: nx_ipfilter_gate.nx
structs
| none |
consts
| 12 | const K_MAGIC_4194304: i64 = 4194304 |
| 13 | const K_MAGIC_12582912: i64 = 12582912 |
| 14 | const K_MAGIC_80000: i64 = 80000 |
functions
| 16 | func if_p(s: *u8) -> i64 { var n: i64=0; while s[n]!=(0 as u8){n=n+1} sys_write(1,s,n); return 0 } calls 1: sys_write |
| 17 | func if_n(v: i64) -> i64 { if v==0 { sys_write(1,"0" as *u8,1); return 0 } var m: i64=v; if m<0 { sys_write(1,"-" as *u8,1); m=0-m } let t: *u8=sys_mmap(28); var k: i64=0; while m>0 { t[k]=(48+(m%10)) as u8; m=m/10; k=k+1 } while k>0 { k=k-1; sys_write(1,(((t as i64)+k) as *u8),1) } return 0 } |
| 20 | func if_parse_cidr(buf: *u8, ls: i64, le: i64, oct: *i64, out: *i64) -> i64 |
| 46 | func main(argc: i64, argv: *i64) -> i64 |