summaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter/arp_tables.c
diff options
context:
space:
mode:
authorFlorian Westphal <fw@strlen.de>2021-04-21 09:51:07 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2021-04-26 03:20:46 +0200
commitae689334225ff0e4ef112459ecd24aea932c2b00 (patch)
treec1bc1091f9f95be7de8745d578d95ed8368f730e /net/ipv4/netfilter/arp_tables.c
parenta4aeafa28cf706f65f763026c26d83e7e8c96592 (diff)
downloadlinux-ae689334225ff0e4ef112459ecd24aea932c2b00.tar.gz
linux-ae689334225ff0e4ef112459ecd24aea932c2b00.tar.bz2
linux-ae689334225ff0e4ef112459ecd24aea932c2b00.zip
netfilter: ip_tables: pass table pointer via nf_hook_ops
iptable_x modules rely on 'struct net' to contain a pointer to the table that should be evaluated. In order to remove these pointers from struct net, pass them via the 'priv' pointer in a similar fashion as nf_tables passes the rule data. To do that, duplicate the nf_hook_info array passed in from the iptable_x modules, update the ops->priv pointers of the copy to refer to the table and then change the hookfn implementations to just pass the 'priv' argument to the traverser. After this patch, the xt_table pointers can already be removed from struct net. However, changes to struct net result in re-compile of the entire network stack, so do the removal after arptables and ip6tables have been converted as well. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv4/netfilter/arp_tables.c')
0 files changed, 0 insertions, 0 deletions