netfilter: ebtables: do centralized size checking

Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
Signed-off-by: Patrick McHardy <kaber@trash.net>

1 files changed, 3 insertions, 0 deletions

diff --git a/include/linux/netfilter_bridge/ebtables.h b/include/linux/netfilter_bridge/ebtables.h
index 892f5b7771c7..fd085af8962d 100644
--- a/include/linux/netfilter_bridge/ebtables.h
+++ b/include/linux/netfilter_bridge/ebtables.h
@@ -215,6 +215,7 @@ struct ebt_match
         int (*check)(const char *tablename, unsigned int hookmask,
            const struct ebt_entry *e, void *matchdata, unsigned int datalen);
         void (*destroy)(void *matchdata, unsigned int datalen);
+        unsigned int matchsize;
         struct module *me;
 };
 
@@ -229,6 +230,7 @@ struct ebt_watcher
         int (*check)(const char *tablename, unsigned int hookmask,
            const struct ebt_entry *e, void *watcherdata, unsigned int datalen);
         void (*destroy)(void *watcherdata, unsigned int datalen);
+        unsigned int targetsize;
         struct module *me;
 };
 
@@ -244,6 +246,7 @@ struct ebt_target
         int (*check)(const char *tablename, unsigned int hookmask,
            const struct ebt_entry *e, void *targetdata, unsigned int datalen);
         void (*destroy)(void *targetdata, unsigned int datalen);
+        unsigned int targetsize;
         struct module *me;
 };