diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-11-03 10:55:54 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-11-03 10:55:54 +0100 |
commit | b250a7fc3bbec80a3c4717a262863d93f4146b88 (patch) | |
tree | 515670ac90049c640dc57f9a0eea41509f5b7456 /net/netfilter/core.c | |
parent | 17197236d62c44da127be461c63ac5cc2cce1e53 (diff) | |
download | linux-stable-b250a7fc3bbec80a3c4717a262863d93f4146b88.tar.gz linux-stable-b250a7fc3bbec80a3c4717a262863d93f4146b88.tar.bz2 linux-stable-b250a7fc3bbec80a3c4717a262863d93f4146b88.zip |
netfilter: get rid of useless debugging from core
This patch remove compile time code to catch inconventional verdicts.
We have better ways to handle this case these days, eg. pr_debug() but
even though I don't think this is useful at all, so let's remove this.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/core.c')
-rw-r--r-- | net/netfilter/core.c | 9 |
1 files changed, 0 insertions, 9 deletions
diff --git a/net/netfilter/core.c b/net/netfilter/core.c index 004af030ef1a..3d4aa96cb219 100644 --- a/net/netfilter/core.c +++ b/net/netfilter/core.c @@ -323,15 +323,6 @@ unsigned int nf_iterate(struct sk_buff *skb, repeat: verdict = (*entryp)->ops.hook((*entryp)->ops.priv, skb, state); if (verdict != NF_ACCEPT) { -#ifdef CONFIG_NETFILTER_DEBUG - if (unlikely((verdict & NF_VERDICT_MASK) - > NF_MAX_VERDICT)) { - NFDEBUG("Evil return from %p(%u).\n", - (*entryp)->ops.hook, state->hook); - *entryp = rcu_dereference((*entryp)->next); - continue; - } -#endif if (verdict != NF_REPEAT) return verdict; goto repeat; |