netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path

Browse source

Instead of calling this function from the family specific variant, this
reduces the code size in the fast path for the netdev, bridge and inet
families. After this change, we must call nft_set_pktinfo() upfront from
the chain hook indirection.

Before:

   text    data     bss     dec     hex filename
   2145     208       0    2353     931 net/netfilter/nf_tables_netdev.o

After:

   text    data     bss     dec     hex filename
   2125     208       0    2333     91d net/netfilter/nf_tables_netdev.o

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2017-12-10 01:43:14 +01:00

parent fa45a76021

commit 7a4473a31a

12 changed files with 43 additions and 58 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

include/net/netfilter/nf_tables.h

View file

25

include/net/netfilter/nf_tables_ipv4.h

View file

27

include/net/netfilter/nf_tables_ipv6.h

View file

8

net/bridge/netfilter/nf_tables_bridge.c

View file

3

net/ipv4/netfilter/nf_tables_arp.c

View file

3

net/ipv4/netfilter/nf_tables_ipv4.c

View file

3

net/ipv4/netfilter/nft_chain_nat_ipv4.c

View file

3

net/ipv4/netfilter/nft_chain_route_ipv4.c

View file

3

net/ipv6/netfilter/nf_tables_ipv6.c

View file

3

net/ipv6/netfilter/nft_chain_nat_ipv6.c

View file

3

net/ipv6/netfilter/nft_chain_route_ipv6.c

View file

8

net/netfilter/nf_tables_netdev.c

View file