diff options
| author | Florian Westphal | 2016-02-25 10:08:38 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2016-03-02 20:05:26 +0100 |
| commit | af4610c39589d839551da104f7da342d86f23ea0 (patch) | |
| tree | dd1aa462199737434bccc9b2f54cb8595d4e1407 /net/ipv6/netfilter/nft_masq_ipv6.c | |
| parent | netfilter: bridge: register hooks only when bridge interface is added (diff) | |
| download | kernel-qcow2-linux-af4610c39589d839551da104f7da342d86f23ea0.tar.gz kernel-qcow2-linux-af4610c39589d839551da104f7da342d86f23ea0.tar.xz kernel-qcow2-linux-af4610c39589d839551da104f7da342d86f23ea0.zip | |
netfilter: don't call hooks unless needed
With the previous patches in place, a netns nf_hook_list might be empty,
even if e.g. init_net performs filtering.
Thus change nf_hook_thresh to check the hook_list as well before
initializing hook_state and calling nf_hook_slow().
We still make use of static keys; if no netfilter modules are loaded
list is guaranteed to be empty.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/ipv6/netfilter/nft_masq_ipv6.c')
0 files changed, 0 insertions, 0 deletions