iv/linux
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
linux/include/net/netfilter
History
Pablo Neira Ayuso b1a5983f56 netfilter: nf_tables_offload: incorrect flow offload action array size 
immediate verdict expression needs to allocate one slot in the flow offload
action array, however, immediate data expression does not need to do so.

fwd and dup expression need to allocate one slot, this is missing.

Add a new offload_action interface to report if this expression needs to
allocate one slot in the flow offload action array.

Fixes: be2861dc36d7 ("netfilter: nft_{fwd,dup}_netdev: add offload support")
Reported-and-tested-by: Nick Gregory <Nick.Gregory@Sophos.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2022-02-20 01:22:20 +01:00
..
ipv4
netfilter: disable defrag once its no longer needed
2021-04-26 03:20:07 +02:00
ipv6
netfilter: conntrack: fix boot failure with nf_conntrack.enable_hooks=1
2021-09-28 13:04:55 +02:00
br_netfilter.h
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
nf_conntrack_acct.h
netfilter: conntrack: add nf_ct_acct_add()
2020-03-30 02:05:39 +02:00
nf_conntrack_act_ct.h
net/sched: act_ct: Fill offloading tuple iifidx
2022-01-04 12:12:55 +00:00
nf_conntrack_bridge.h
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
nf_conntrack_core.h
netfilter: conntrack: nf_ct_gre_keymap_flush() removal
2021-07-02 02:07:01 +02:00
nf_conntrack_count.h
netfilter: add missing includes to a number of header-files.
2019-08-13 12:14:39 +02:00
nf_conntrack_ecache.h
netfilter: ecache: remove nf_exp_event_notifier structure
2021-08-25 12:50:38 +02:00
nf_conntrack_expect.h
netfilter: fix coding-style errors.
2019-09-13 11:39:38 +02:00
nf_conntrack_extend.h
net/sched: act_ct: Fill offloading tuple iifidx
2022-01-04 12:12:55 +00:00
nf_conntrack_helper.h
treewide: Use sizeof_field() macro
2019-12-09 10:36:44 -08:00
nf_conntrack_l4proto.h
netfilter: conntrack: pass hook state to log functions
2021-06-18 14:47:43 +02:00
nf_conntrack_labels.h
netfilter: fix include guards.
2019-09-13 11:39:38 +02:00
nf_conntrack_seqadj.h
License cleanup: add SPDX GPL-2.0 license identifier to files with no license
2017-11-02 11:10:55 +01:00
nf_conntrack_synproxy.h
netfilter: conntrack: wrap two inline functions in config checks.
2019-09-13 12:47:10 +02:00
nf_conntrack_timeout.h
netfilter: Replace zero-length array with flexible-array member
2020-03-15 15:20:16 +01:00
nf_conntrack_timestamp.h
netfilter: conntrack: remove two unused functions from nf_conntrack_timestamp.h.
2019-09-13 12:48:09 +02:00
nf_conntrack_tuple.h
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
nf_conntrack_zones.h
netfilter: conntrack: remove CONFIG_NF_CONNTRACK checks from nf_conntrack_zones.h.
2019-09-13 12:47:41 +02:00
nf_conntrack.h
netfilter: conntrack: avoid useless indirection during conntrack destruction
2022-01-09 23:30:13 +01:00
nf_dup_netdev.h
netfilter: nft_{fwd,dup}_netdev: add offload support
2019-09-10 22:44:29 +02:00
nf_flow_table.h
netfilter: flowtable: Set offload timeouts according to proto values
2021-06-07 12:23:38 +02:00
nf_hooks_lwtunnel.h
netfilter: add netfilter hooks to SRv6 data plane
2021-08-30 01:51:36 +02:00
nf_log.h
netfilter: nf_log_common: merge with nf_log_syslog
2021-03-31 22:34:10 +02:00
nf_nat_helper.h
netfilter: add missing includes to a number of header-files.
2019-08-13 12:14:39 +02:00
nf_nat_masquerade.h
netfilter: update include directives.
2019-09-13 12:33:06 +02:00
nf_nat_redirect.h
netfilter: add missing includes to a number of header-files.
2019-08-13 12:14:39 +02:00
nf_nat.h
netfilter: nat: move nf_xfrm_me_harder to where it is used
2021-04-26 03:20:07 +02:00
nf_queue.h
netfilter: nf_queue: move hookfn registration out of struct net
2021-08-10 17:32:00 +02:00
nf_reject.h
netfilter: add missing includes to a number of header-files.
2019-08-13 12:14:39 +02:00
nf_socket.h
netfilter: Decrease code duplication regarding transparent socket option
2018-06-03 00:02:01 +02:00
nf_synproxy.h
netfilter: remove CONFIG_NETFILTER checks from headers.
2019-09-13 12:47:36 +02:00
nf_tables_core.h
netfilter: nf_tables: make counter support built-in
2021-12-23 01:07:35 +01:00
nf_tables_ipv4.h
netfilter: nf_tables: convert pktinfo->tprot_set to flags field
2021-11-01 09:30:20 +01:00
nf_tables_ipv6.h
netfilter: nf_tables: convert pktinfo->tprot_set to flags field
2021-11-01 09:30:20 +01:00
nf_tables_offload.h
netfilter: nf_tables_offload: incorrect flow offload action array size
2022-02-20 01:22:20 +01:00
nf_tables.h
netfilter: nf_tables_offload: incorrect flow offload action array size
2022-02-20 01:22:20 +01:00
nf_tproxy.h
Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf-next
2018-07-20 22:28:28 -07:00
nft_fib.h
netfilter: nftables: add nft_parse_register_store() and use it
2021-01-27 23:16:02 +01:00
nft_meta.h
netfilter: nftables: add nft_parse_register_store() and use it
2021-01-27 23:16:02 +01:00
nft_reject.h
netfilter: add missing includes to a number of header-files.
2019-08-13 12:14:39 +02:00
xt_rateest.h
net: sched: Merge Qdisc::bstats and Qdisc::cpu_bstats data types
2021-10-18 12:54:41 +01:00