netfilter: nf_tables_offload: add __nft_offload_get_chain function

Browse source

Add __nft_offload_get_chain function to get basechain from device. This
function requires that caller holds the per-netns nftables mutex. This
patch implicitly fixes missing offload flags check and proper mutex from
nft_indr_block_cb().

Fixes: 9a32669fec ("netfilter: nf_tables_offload: support indr block call")
Signed-off-by: wenxu <wenxu@ucloud.cn>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

wenxu 2019-09-11 12:53:21 +08:00 • committed by Pablo Neira Ayuso

parent be2861dc36

commit 504882db83

1 changed files with 34 additions and 18 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

50

net/netfilter/nf_tables_offload.c

View file