diff options
-rw-r--r-- | include/linux/skbuff.h | 13 | ||||
-rw-r--r-- | net/ipv4/ip_output.c | 13 | ||||
-rw-r--r-- | net/ipv6/ip6_output.c | 18 |
3 files changed, 15 insertions, 29 deletions
diff --git a/include/linux/skbuff.h b/include/linux/skbuff.h index 62ab1ab07028..47c57be97d43 100644 --- a/include/linux/skbuff.h +++ b/include/linux/skbuff.h | |||
@@ -1514,9 +1514,22 @@ static inline void __nf_copy(struct sk_buff *dst, const struct sk_buff *src) | |||
1514 | #endif | 1514 | #endif |
1515 | } | 1515 | } |
1516 | 1516 | ||
1517 | static inline void nf_copy(struct sk_buff *dst, const struct sk_buff *src) | ||
1518 | { | ||
1519 | nf_conntrack_put(dst->nfct); | ||
1520 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) | ||
1521 | nf_conntrack_put_reasm(dst->nfct_reasm); | ||
1522 | #endif | ||
1523 | #ifdef CONFIG_BRIDGE_NETFILTER | ||
1524 | nf_bridge_put(dst->nf_bridge); | ||
1525 | #endif | ||
1526 | __nf_copy(dst, src); | ||
1527 | } | ||
1528 | |||
1517 | #else /* CONFIG_NETFILTER */ | 1529 | #else /* CONFIG_NETFILTER */ |
1518 | static inline void nf_reset(struct sk_buff *skb) {} | 1530 | static inline void nf_reset(struct sk_buff *skb) {} |
1519 | static inline void __nf_copy(struct sk_buff *dst, const struct sk_buff *src) {} | 1531 | static inline void __nf_copy(struct sk_buff *dst, const struct sk_buff *src) {} |
1532 | static inline void nf_copy(struct sk_buff *dst, const struct sk_buff *src) {} | ||
1520 | #endif /* CONFIG_NETFILTER */ | 1533 | #endif /* CONFIG_NETFILTER */ |
1521 | 1534 | ||
1522 | #ifdef CONFIG_NETWORK_SECMARK | 1535 | #ifdef CONFIG_NETWORK_SECMARK |
diff --git a/net/ipv4/ip_output.c b/net/ipv4/ip_output.c index 11029b9d4cf7..11ab100d6c6c 100644 --- a/net/ipv4/ip_output.c +++ b/net/ipv4/ip_output.c | |||
@@ -384,21 +384,10 @@ static void ip_copy_metadata(struct sk_buff *to, struct sk_buff *from) | |||
384 | #ifdef CONFIG_NET_SCHED | 384 | #ifdef CONFIG_NET_SCHED |
385 | to->tc_index = from->tc_index; | 385 | to->tc_index = from->tc_index; |
386 | #endif | 386 | #endif |
387 | #ifdef CONFIG_NETFILTER | 387 | nf_copy(to, from); |
388 | /* Connection association is same as pre-frag packet */ | ||
389 | nf_conntrack_put(to->nfct); | ||
390 | to->nfct = from->nfct; | ||
391 | nf_conntrack_get(to->nfct); | ||
392 | to->nfctinfo = from->nfctinfo; | ||
393 | #if defined(CONFIG_IP_VS) || defined(CONFIG_IP_VS_MODULE) | 388 | #if defined(CONFIG_IP_VS) || defined(CONFIG_IP_VS_MODULE) |
394 | to->ipvs_property = from->ipvs_property; | 389 | to->ipvs_property = from->ipvs_property; |
395 | #endif | 390 | #endif |
396 | #ifdef CONFIG_BRIDGE_NETFILTER | ||
397 | nf_bridge_put(to->nf_bridge); | ||
398 | to->nf_bridge = from->nf_bridge; | ||
399 | nf_bridge_get(to->nf_bridge); | ||
400 | #endif | ||
401 | #endif | ||
402 | skb_copy_secmark(to, from); | 391 | skb_copy_secmark(to, from); |
403 | } | 392 | } |
404 | 393 | ||
diff --git a/net/ipv6/ip6_output.c b/net/ipv6/ip6_output.c index 0f4434eff66a..49523c2a9f10 100644 --- a/net/ipv6/ip6_output.c +++ b/net/ipv6/ip6_output.c | |||
@@ -504,23 +504,7 @@ static void ip6_copy_metadata(struct sk_buff *to, struct sk_buff *from) | |||
504 | #ifdef CONFIG_NET_SCHED | 504 | #ifdef CONFIG_NET_SCHED |
505 | to->tc_index = from->tc_index; | 505 | to->tc_index = from->tc_index; |
506 | #endif | 506 | #endif |
507 | #ifdef CONFIG_NETFILTER | 507 | nf_copy(to, from); |
508 | /* Connection association is same as pre-frag packet */ | ||
509 | nf_conntrack_put(to->nfct); | ||
510 | to->nfct = from->nfct; | ||
511 | nf_conntrack_get(to->nfct); | ||
512 | to->nfctinfo = from->nfctinfo; | ||
513 | #if defined(CONFIG_NF_CONNTRACK) || defined(CONFIG_NF_CONNTRACK_MODULE) | ||
514 | nf_conntrack_put_reasm(to->nfct_reasm); | ||
515 | to->nfct_reasm = from->nfct_reasm; | ||
516 | nf_conntrack_get_reasm(to->nfct_reasm); | ||
517 | #endif | ||
518 | #ifdef CONFIG_BRIDGE_NETFILTER | ||
519 | nf_bridge_put(to->nf_bridge); | ||
520 | to->nf_bridge = from->nf_bridge; | ||
521 | nf_bridge_get(to->nf_bridge); | ||
522 | #endif | ||
523 | #endif | ||
524 | skb_copy_secmark(to, from); | 508 | skb_copy_secmark(to, from); |
525 | } | 509 | } |
526 | 510 | ||