diff options
author | Patrick McHardy <kaber@trash.net> | 2014-01-03 07:16:14 -0500 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2014-01-07 17:50:43 -0500 |
commit | c9484874e7596d6c890e4130336f5379f6a59c5f (patch) | |
tree | 137a798b9c7b87f4a817d22c795a22614f03be42 /net/netfilter | |
parent | 3b088c4bc0035da662faa81818ba217e34c4bba4 (diff) |
netfilter: nf_tables: add hook ops to struct nft_pktinfo
Multi-family tables need the AF from the hook ops. Add a pointer to the
hook ops and replace usage of the hooknum member in struct nft_pktinfo.
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter')
-rw-r--r-- | net/netfilter/nf_tables_core.c | 2 | ||||
-rw-r--r-- | net/netfilter/nft_log.c | 2 | ||||
-rw-r--r-- | net/netfilter/nft_reject.c | 6 |
3 files changed, 5 insertions, 5 deletions
diff --git a/net/netfilter/nf_tables_core.c b/net/netfilter/nf_tables_core.c index e8fcc343c2b9..5aae31772ff7 100644 --- a/net/netfilter/nf_tables_core.c +++ b/net/netfilter/nf_tables_core.c | |||
@@ -109,7 +109,7 @@ static inline void nft_trace_packet(const struct nft_pktinfo *pkt, | |||
109 | { | 109 | { |
110 | struct net *net = dev_net(pkt->in ? pkt->in : pkt->out); | 110 | struct net *net = dev_net(pkt->in ? pkt->in : pkt->out); |
111 | 111 | ||
112 | nf_log_packet(net, pkt->xt.family, pkt->hooknum, pkt->skb, pkt->in, | 112 | nf_log_packet(net, pkt->xt.family, pkt->ops->hooknum, pkt->skb, pkt->in, |
113 | pkt->out, &trace_loginfo, "TRACE: %s:%s:%s:%u ", | 113 | pkt->out, &trace_loginfo, "TRACE: %s:%s:%s:%u ", |
114 | chain->table->name, chain->name, comments[type], | 114 | chain->table->name, chain->name, comments[type], |
115 | rulenum); | 115 | rulenum); |
diff --git a/net/netfilter/nft_log.c b/net/netfilter/nft_log.c index 57cad072a13e..5af790123ad8 100644 --- a/net/netfilter/nft_log.c +++ b/net/netfilter/nft_log.c | |||
@@ -33,7 +33,7 @@ static void nft_log_eval(const struct nft_expr *expr, | |||
33 | const struct nft_log *priv = nft_expr_priv(expr); | 33 | const struct nft_log *priv = nft_expr_priv(expr); |
34 | struct net *net = dev_net(pkt->in ? pkt->in : pkt->out); | 34 | struct net *net = dev_net(pkt->in ? pkt->in : pkt->out); |
35 | 35 | ||
36 | nf_log_packet(net, priv->family, pkt->hooknum, pkt->skb, pkt->in, | 36 | nf_log_packet(net, priv->family, pkt->ops->hooknum, pkt->skb, pkt->in, |
37 | pkt->out, &priv->loginfo, "%s", priv->prefix); | 37 | pkt->out, &priv->loginfo, "%s", priv->prefix); |
38 | } | 38 | } |
39 | 39 | ||
diff --git a/net/netfilter/nft_reject.c b/net/netfilter/nft_reject.c index 7ae63cdad959..5e204711d704 100644 --- a/net/netfilter/nft_reject.c +++ b/net/netfilter/nft_reject.c | |||
@@ -44,15 +44,15 @@ static void nft_reject_eval(const struct nft_expr *expr, | |||
44 | #if IS_ENABLED(CONFIG_NF_TABLES_IPV6) | 44 | #if IS_ENABLED(CONFIG_NF_TABLES_IPV6) |
45 | else if (priv->family == NFPROTO_IPV6) | 45 | else if (priv->family == NFPROTO_IPV6) |
46 | nf_send_unreach6(net, pkt->skb, priv->icmp_code, | 46 | nf_send_unreach6(net, pkt->skb, priv->icmp_code, |
47 | pkt->hooknum); | 47 | pkt->ops->hooknum); |
48 | #endif | 48 | #endif |
49 | break; | 49 | break; |
50 | case NFT_REJECT_TCP_RST: | 50 | case NFT_REJECT_TCP_RST: |
51 | if (priv->family == NFPROTO_IPV4) | 51 | if (priv->family == NFPROTO_IPV4) |
52 | nf_send_reset(pkt->skb, pkt->hooknum); | 52 | nf_send_reset(pkt->skb, pkt->ops->hooknum); |
53 | #if IS_ENABLED(CONFIG_NF_TABLES_IPV6) | 53 | #if IS_ENABLED(CONFIG_NF_TABLES_IPV6) |
54 | else if (priv->family == NFPROTO_IPV6) | 54 | else if (priv->family == NFPROTO_IPV6) |
55 | nf_send_reset6(net, pkt->skb, pkt->hooknum); | 55 | nf_send_reset6(net, pkt->skb, pkt->ops->hooknum); |
56 | #endif | 56 | #endif |
57 | break; | 57 | break; |
58 | } | 58 | } |