Commit 1f48ff6c authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso

netfilter: nf_tables: add flush field to struct nft_set_iter

This provides context to walk callback iterator, thus, we know if the
walk happens from the set flush path. This is required by the new bitmap
set type coming in a follow up patch which has no real struct
nft_set_ext, so it has to allocate it based on the two bit compact
element representation.
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 1ba1c414
...@@ -203,6 +203,7 @@ struct nft_set_elem { ...@@ -203,6 +203,7 @@ struct nft_set_elem {
struct nft_set; struct nft_set;
struct nft_set_iter { struct nft_set_iter {
u8 genmask; u8 genmask;
bool flush;
unsigned int count; unsigned int count;
unsigned int skip; unsigned int skip;
int err; int err;
......
...@@ -3121,6 +3121,7 @@ int nf_tables_bind_set(const struct nft_ctx *ctx, struct nft_set *set, ...@@ -3121,6 +3121,7 @@ int nf_tables_bind_set(const struct nft_ctx *ctx, struct nft_set *set,
iter.count = 0; iter.count = 0;
iter.err = 0; iter.err = 0;
iter.fn = nf_tables_bind_check_setelem; iter.fn = nf_tables_bind_check_setelem;
iter.flush = false;
set->ops->walk(ctx, set, &iter); set->ops->walk(ctx, set, &iter);
if (iter.err < 0) if (iter.err < 0)
...@@ -3374,6 +3375,7 @@ static int nf_tables_dump_set(struct sk_buff *skb, struct netlink_callback *cb) ...@@ -3374,6 +3375,7 @@ static int nf_tables_dump_set(struct sk_buff *skb, struct netlink_callback *cb)
args.iter.count = 0; args.iter.count = 0;
args.iter.err = 0; args.iter.err = 0;
args.iter.fn = nf_tables_dump_setelem; args.iter.fn = nf_tables_dump_setelem;
args.iter.flush = false;
set->ops->walk(&ctx, set, &args.iter); set->ops->walk(&ctx, set, &args.iter);
nla_nest_end(skb, nest); nla_nest_end(skb, nest);
...@@ -3939,6 +3941,7 @@ static int nf_tables_delsetelem(struct net *net, struct sock *nlsk, ...@@ -3939,6 +3941,7 @@ static int nf_tables_delsetelem(struct net *net, struct sock *nlsk,
struct nft_set_iter iter = { struct nft_set_iter iter = {
.genmask = genmask, .genmask = genmask,
.fn = nft_flush_set, .fn = nft_flush_set,
.flush = true,
}; };
set->ops->walk(&ctx, set, &iter); set->ops->walk(&ctx, set, &iter);
...@@ -5089,6 +5092,7 @@ static int nf_tables_check_loops(const struct nft_ctx *ctx, ...@@ -5089,6 +5092,7 @@ static int nf_tables_check_loops(const struct nft_ctx *ctx,
iter.count = 0; iter.count = 0;
iter.err = 0; iter.err = 0;
iter.fn = nf_tables_loop_check_setelem; iter.fn = nf_tables_loop_check_setelem;
iter.flush = false;
set->ops->walk(ctx, set, &iter); set->ops->walk(ctx, set, &iter);
if (iter.err < 0) if (iter.err < 0)
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment