aboutsummaryrefslogtreecommitdiffstats
path: root/net/ipv4/netfilter/ipt_rpfilter.c
diff options
context:
space:
mode:
authorDavid Ahern <dsahern@gmail.com>2018-09-20 13:50:48 -0700
committerDavid S. Miller <davem@davemloft.net>2018-09-20 20:01:52 -0700
commit91a178258aea08a42d67c04a303e1783c38217e6 (patch)
treee1dfa130245becd17d43ed70e07271f5a2cebc38 /net/ipv4/netfilter/ipt_rpfilter.c
parentnet/ipv4: Move device validation to helper (diff)
downloadlinux-dev-91a178258aea08a42d67c04a303e1783c38217e6.tar.xz
linux-dev-91a178258aea08a42d67c04a303e1783c38217e6.zip
netfilter: rpfilter: Convert rpfilter_lookup_reverse to new dev helper
Convert rpfilter_lookup_reverse to the new device checking helper and remove the duplicate code. Signed-off-by: David Ahern <dsahern@gmail.com> Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/ipv4/netfilter/ipt_rpfilter.c')
-rw-r--r--net/ipv4/netfilter/ipt_rpfilter.c17
1 files changed, 1 insertions, 16 deletions
diff --git a/net/ipv4/netfilter/ipt_rpfilter.c b/net/ipv4/netfilter/ipt_rpfilter.c
index 12843c9ef142..0b10d8812828 100644
--- a/net/ipv4/netfilter/ipt_rpfilter.c
+++ b/net/ipv4/netfilter/ipt_rpfilter.c
@@ -36,7 +36,6 @@ static bool rpfilter_lookup_reverse(struct net *net, struct flowi4 *fl4,
const struct net_device *dev, u8 flags)
{
struct fib_result res;
- bool dev_match;
int ret __maybe_unused;
if (fib_lookup(net, fl4, &res, FIB_LOOKUP_IGNORE_LINKSTATE))
@@ -46,21 +45,7 @@ static bool rpfilter_lookup_reverse(struct net *net, struct flowi4 *fl4,
if (res.type != RTN_LOCAL || !(flags & XT_RPFILTER_ACCEPT_LOCAL))
return false;
}
- dev_match = false;
-#ifdef CONFIG_IP_ROUTE_MULTIPATH
- for (ret = 0; ret < res.fi->fib_nhs; ret++) {
- struct fib_nh *nh = &res.fi->fib_nh[ret];
-
- if (nh->nh_dev == dev) {
- dev_match = true;
- break;
- }
- }
-#else
- if (FIB_RES_DEV(res) == dev)
- dev_match = true;
-#endif
- return dev_match || flags & XT_RPFILTER_LOOSE;
+ return fib_info_nh_uses_dev(res.fi, dev) || flags & XT_RPFILTER_LOOSE;
}
static bool