15 Apr, 2017

1 commit

• ab8bc7ed8   netfilter: remove nf_ct_is_untracked ... Browse Code »

  This function is now obsolete and always returns false.
  This change has no effect on generated code.

  Signed-off-by: Florian Westphal
  Signed-off-by: Pablo Neira Ayuso

  Florian Westphal

  2017-04-15 17:51:33 +0800  

24 Aug, 2014

1 commit

• 8fc54f689   net: use reciprocal_scale() helper ... Browse Code »

  Replace open codings of (((u64) * ) >> 32) with reciprocal_scale().

  Signed-off-by: Daniel Borkmann
  Cc: Hannes Frederic Sowa
  Signed-off-by: David S. Miller

  Daniel Borkmann

  2014-08-24 03:21:21 +0800  

10 Nov, 2012

1 commit

• f8f626754   ipv6: Move ipv6_find_hdr() out of Netfilter code. ... Browse Code »

  Open vSwitch will soon also use ipv6_find_hdr() so this moves it
  out of Netfilter-specific code into a more common location.

  Signed-off-by: Jesse Gross

  Jesse Gross

  2012-11-10 09:05:07 +0800  

07 Jun, 2012

1 commit

• d1992b169   netfilter: xt_HMARK: fix endianness and provide consistent hashing ... Browse Code »

  This patch addresses two issues:

  a) Fix usage of u32 and __be32 that causes endianess warnings via sparse.
  b) Ensure consistent hashing in a cluster that is composed of big and
  little endian systems. Thus, we obtain the same hash mark in an
  heterogeneous cluster.

  Reported-by: Dan Carpenter
  Signed-off-by: Hans Schillstrom
  Signed-off-by: Pablo Neira Ayuso

  Hans Schillstrom

  2012-06-07 20:53:01 +0800  

17 May, 2012

2 commits

• c44f5faa8   netfilter: xt_HMARK: modulus is expensive for hash calculation ... Browse Code »

  Use:

  ((u64)(HASH_VAL * HASH_SIZE)) >> 32

  as suggested by David S. Miller.

  Signed-off-by: Pablo Neira Ayuso

  Pablo Neira Ayuso

  2012-05-17 06:56:35 +0800  
• 586181154   netfilter: xt_HMARK: potential NULL dereference in get_inner_hdr() ... Browse Code »

  There is a typo in the error checking and "&&" was used instead of "||".
  If skb_header_pointer() returns NULL then it leads to a NULL
  dereference.

  Signed-off-by: Dan Carpenter
  Acked-by: Hans Schillstrom
  Signed-off-by: Pablo Neira Ayuso

  Dan Carpenter

  2012-05-17 06:56:33 +0800  

09 May, 2012

1 commit

• cf308a1fa   netfilter: add xt_hmark target for hash-based skb marking ... Browse Code »

  The target allows you to create rules in the "raw" and "mangle" tables
  which set the skbuff mark by means of hash calculation within a given
  range. The nfmark can influence the routing method (see "Use netfilter
  MARK value as routing key") and can also be used by other subsystems to
  change their behaviour.

  [ Part of this patch has been refactorized and modified by Pablo Neira Ayuso ]

  Signed-off-by: Hans Schillstrom
  Signed-off-by: Pablo Neira Ayuso

  Hans Schillstrom

  2012-05-09 18:54:05 +0800