diff options
| author |   Arturo Borrero <arturo.borrero.glez@gmail.com> | 2016-06-23 12:24:08 +0200 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2016-06-24 11:03:29 +0200 |
| commit | 0071e184a535e40ce487528cb04f4690cb0da881 (patch) | |
| tree | 6267df19373697d545ba080be1f3ababaf9e6d5b /net/ipv6/netfilter | |
| parent | netfilter: nf_tables: get rid of NFT_BASECHAIN_DISABLED (diff) | |
| download | linux-dev-0071e184a535e40ce487528cb04f4690cb0da881.tar.xz linux-dev-0071e184a535e40ce487528cb04f4690cb0da881.zip | |
netfilter: nf_tables: add support for inverted logic in nft_lookup
Introduce a new configuration option for this expression, which allows users
to invert the logic of set lookups.
In _init() we will now return EINVAL if NFT_LOOKUP_F_INV is in anyway
related to a map lookup.
The code in the _eval() function has been untangled and updated to sopport the
XOR of options, as we should consider 4 cases:
* lookup false, invert false -> NFT_BREAK
* lookup false, invert true -> return w/o NFT_BREAK
* lookup true, invert false -> return w/o NFT_BREAK
* lookup true, invert true -> NFT_BREAK
Signed-off-by: Arturo Borrero Gonzalez <arturo.borrero.glez@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv6/netfilter')
0 files changed, 0 insertions, 0 deletions