aboutsummaryrefslogtreecommitdiffstats
path: root/net/netfilter
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2015-12-14 14:29:00 -0500
committerPablo Neira Ayuso <pablo@netfilter.org>2015-12-14 14:31:16 -0500
commita4ec80082c82f3fda775d13b2a72aac38248ced6 (patch)
tree23affbe49c629cbbdb5553ca78aa444a7ccf2ead /net/netfilter
parent19576c9478682a398276c994ea0d2696474df32b (diff)
parentcb4396edd84ed73081635fb933d19c1410fafaf4 (diff)
Merge branch 'master' of git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next
Resolve conflict between commit 264640fc2c5f4f ("ipv6: distinguish frag queues by device for multicast and link-local packets") from the net tree and commit 029f7f3b8701c ("netfilter: ipv6: nf_defrag: avoid/free clone operations") from the nf-next tree. Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Conflicts: net/ipv6/netfilter/nf_conntrack_reasm.c
Diffstat (limited to 'net/netfilter')
-rw-r--r--net/netfilter/nft_meta.c2
-rw-r--r--net/netfilter/xt_cgroup.c3
2 files changed, 3 insertions, 2 deletions
diff --git a/net/netfilter/nft_meta.c b/net/netfilter/nft_meta.c
index 85a465b773e5..5bcd1b0cc2ec 100644
--- a/net/netfilter/nft_meta.c
+++ b/net/netfilter/nft_meta.c
@@ -176,7 +176,7 @@ void nft_meta_get_eval(const struct nft_expr *expr,
176 sk = skb_to_full_sk(skb); 176 sk = skb_to_full_sk(skb);
177 if (!sk || !sk_fullsock(sk)) 177 if (!sk || !sk_fullsock(sk))
178 goto err; 178 goto err;
179 *dest = sk->sk_classid; 179 *dest = sock_cgroup_classid(&sk->sk_cgrp_data);
180 break; 180 break;
181#endif 181#endif
182 default: 182 default:
diff --git a/net/netfilter/xt_cgroup.c b/net/netfilter/xt_cgroup.c
index a1d126f29463..54eaeb45ce99 100644
--- a/net/netfilter/xt_cgroup.c
+++ b/net/netfilter/xt_cgroup.c
@@ -42,7 +42,8 @@ cgroup_mt(const struct sk_buff *skb, struct xt_action_param *par)
42 if (skb->sk == NULL || !sk_fullsock(skb->sk)) 42 if (skb->sk == NULL || !sk_fullsock(skb->sk))
43 return false; 43 return false;
44 44
45 return (info->id == skb->sk->sk_classid) ^ info->invert; 45 return (info->id == sock_cgroup_classid(&skb->sk->sk_cgrp_data)) ^
46 info->invert;
46} 47}
47 48
48static struct xt_match cgroup_mt_reg __read_mostly = { 49static struct xt_match cgroup_mt_reg __read_mostly = {