netfilter: xtables: add and use xt_request_find_table_lock

Browse source

currently we always return -ENOENT to userspace if we can't find
a particular table, or if the table initialization fails.

Followup patch will make nat table init fail in case nftables already
registered a nat hook so this change makes xt_find_table_lock return
an ERR_PTR to return the errno value reported from the table init
function.

Add xt_request_find_table_lock as try_then_request_module replacement
and use it where needed.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Florian Westphal 2017-12-08 17:01:53 +01:00 • committed by Pablo Neira Ayuso

parent 256d94ba33

commit 03d13b6868

5 changed files with 65 additions and 51 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

include/linux/netfilter/x_tables.h

View file

26

net/ipv4/netfilter/arp_tables.c

View file

26

net/ipv4/netfilter/ip_tables.c

View file

26

net/ipv6/netfilter/ip6_tables.c

View file

36

net/netfilter/x_tables.c

View file