diff options
| author |   Joe Stringer <joestringer@nicira.com> | 2015-08-26 11:31:51 -0700 |
|---|---|---|
| committer |   David S. Miller <davem@davemloft.net> | 2015-08-27 11:40:43 -0700 |
| commit | 86ca02e77408bb58ba596c1a411ec7f631733690 (patch) | |
| tree | 47c49fb6c16f6ea00844e48f9c7a8c9739d88334 /net/netfilter/xt_connlabel.c | |
| parent | netfilter: Always export nf_connlabels_replace() (diff) | |
| download | linux-dev-86ca02e77408bb58ba596c1a411ec7f631733690.tar.xz linux-dev-86ca02e77408bb58ba596c1a411ec7f631733690.zip | |
netfilter: connlabels: Export setting connlabel length
Add functions to change connlabel length into nf_conntrack_labels.c so
they may be reused by other modules like OVS and nftables without
needing to jump through xt_match_check() hoops.
Suggested-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Joe Stringer <joestringer@nicira.com>
Acked-by: Florian Westphal <fw@strlen.de>
Acked-by: Thomas Graf <tgraf@suug.ch>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter/xt_connlabel.c')
| -rw-r--r-- | net/netfilter/xt_connlabel.c | 16 |
1 files changed, 4 insertions, 12 deletions
diff --git a/net/netfilter/xt_connlabel.c b/net/netfilter/xt_connlabel.c index 9f8719df2001..bb9cbeb18868 100644 --- a/net/netfilter/xt_connlabel.c +++ b/net/netfilter/xt_connlabel.c @@ -42,10 +42,6 @@ static int connlabel_mt_check(const struct xt_mtchk_param *par) XT_CONNLABEL_OP_SET; struct xt_connlabel_mtinfo *info = par->matchinfo; int ret; - size_t words; - - if (info->bit > XT_CONNLABEL_MAXBIT) - return -ERANGE; if (info->options & ~options) { pr_err("Unknown options in mask %x\n", info->options); @@ -59,19 +55,15 @@ static int connlabel_mt_check(const struct xt_mtchk_param *par) return ret; } - par->net->ct.labels_used++; - words = BITS_TO_LONGS(info->bit+1); - if (words > par->net->ct.label_words) - par->net->ct.label_words = words; - + ret = nf_connlabels_get(par->net, info->bit + 1); + if (ret < 0) + nf_ct_l3proto_module_put(par->family); return ret; } static void connlabel_mt_destroy(const struct xt_mtdtor_param *par) { - par->net->ct.labels_used--; - if (par->net->ct.labels_used == 0) - par->net->ct.label_words = 0; + nf_connlabels_put(par->net); nf_ct_l3proto_module_put(par->family); } |