netfilter: x_tables: use GFP_KERNEL_ACCOUNT in match/target

Browse source

GFP_KERNEL_ACCOUNT is preferred these days for memcg, replace GFP_KERNEL
by GFP_KERNEL_ACCOUNT.

Use GFP_KERNEL_ACCOUNT for objects that are allocated in the xtables
.check path. This includes template ct object with extensions such as
helper and timeout.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2026-09-03 13:30:13 +02:00

parent 1b9c4f3f9c

commit ba100f6f2a

12 changed files with 21 additions and 19 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

net/netfilter/nf_conntrack_ovs.c

View file

6

net/netfilter/xt_CT.c

View file

8

net/netfilter/xt_IDLETIMER.c

View file

5

net/netfilter/xt_LED.c

View file

2

net/netfilter/xt_RATEEST.c

View file

2

net/netfilter/xt_TEE.c

View file

4

net/netfilter/xt_hashlimit.c

View file

2

net/netfilter/xt_limit.c

View file

2

net/netfilter/xt_quota.c

View file

3

net/netfilter/xt_recent.c

View file

2

net/netfilter/xt_statistic.c

View file

2

net/netfilter/xt_string.c

View file