diff options
author | Florian Westphal <fw@strlen.de> | 2017-12-01 00:21:03 +0100 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2018-01-08 18:01:06 +0100 |
commit | 26888dfd7e7454686b8d3ea9ba5045d5f236e4d7 (patch) | |
tree | 61d1f7799b39dfa9a78de032d1efc12f1d96b2bd /net/netfilter/nf_queue.c | |
parent | 4e645b47c4f000a503b9c90163ad905786b9bc1d (diff) | |
download | linux-stable-26888dfd7e7454686b8d3ea9ba5045d5f236e4d7.tar.gz linux-stable-26888dfd7e7454686b8d3ea9ba5045d5f236e4d7.tar.bz2 linux-stable-26888dfd7e7454686b8d3ea9ba5045d5f236e4d7.zip |
netfilter: core: remove synchronize_net call if nfqueue is used
since commit 960632ece6949b ("netfilter: convert hook list to an array")
nfqueue no longer stores a pointer to the hook that caused the packet
to be queued. Therefore no extra synchronize_net() call is needed after
dropping the packets enqueued by the old rule blob.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_queue.c')
-rw-r--r-- | net/netfilter/nf_queue.c | 7 |
1 files changed, 2 insertions, 5 deletions
diff --git a/net/netfilter/nf_queue.c b/net/netfilter/nf_queue.c index f7e21953b1de..4e42a4a68a0b 100644 --- a/net/netfilter/nf_queue.c +++ b/net/netfilter/nf_queue.c @@ -96,18 +96,15 @@ void nf_queue_entry_get_refs(struct nf_queue_entry *entry) } EXPORT_SYMBOL_GPL(nf_queue_entry_get_refs); -unsigned int nf_queue_nf_hook_drop(struct net *net) +void nf_queue_nf_hook_drop(struct net *net) { const struct nf_queue_handler *qh; - unsigned int count = 0; rcu_read_lock(); qh = rcu_dereference(net->nf.queue_handler); if (qh) - count = qh->nf_hook_drop(net); + qh->nf_hook_drop(net); rcu_read_unlock(); - - return count; } EXPORT_SYMBOL_GPL(nf_queue_nf_hook_drop); |