netfilter: flowtable: consolidate skb_try_make_writable() call

Browse source

Fetch the layer 4 header size to be mangled by NAT when building the
tuple, then use it to make writable the network and the transport
headers. After this update, the NAT routines now assumes that the skbuff
area is writable. Do the pointer refetch only after the single
skb_try_make_writable() call.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2021-03-17 15:53:09 +01:00

parent d4a96be654

commit 2fc11745c3

2 changed files with 31 additions and 55 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

net/netfilter/nf_flow_table_core.c

View file

76

net/netfilter/nf_flow_table_ip.c

View file