You've already forked linux-apfs
mirror of
https://github.com/linux-apfs/linux-apfs.git
synced 2026-05-01 15:00:59 -07:00
[NETFILTER]: x_tables: switch hotdrop to bool
Switch the "hotdrop" variables to boolean Signed-off-by: Jan Engelhardt <jengelh@gmx.de> Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: David S. Miller <davem@davemloft.net>
This commit is contained in:
committed by
David S. Miller
parent
7bfe246116
commit
cff533ac12
@@ -102,7 +102,7 @@ ip6_packet_match(const struct sk_buff *skb,
|
||||
const char *outdev,
|
||||
const struct ip6t_ip6 *ip6info,
|
||||
unsigned int *protoff,
|
||||
int *fragoff, int *hotdrop)
|
||||
int *fragoff, bool *hotdrop)
|
||||
{
|
||||
size_t i;
|
||||
unsigned long ret;
|
||||
@@ -162,7 +162,7 @@ ip6_packet_match(const struct sk_buff *skb,
|
||||
protohdr = ipv6_find_hdr(skb, protoff, -1, &_frag_off);
|
||||
if (protohdr < 0) {
|
||||
if (_frag_off == 0)
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
*fragoff = _frag_off;
|
||||
@@ -225,7 +225,7 @@ int do_match(struct ip6t_entry_match *m,
|
||||
const struct net_device *out,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
/* Stop iteration if it doesn't match */
|
||||
if (!m->u.kernel.match->match(skb, in, out, m->u.kernel.match, m->data,
|
||||
@@ -252,7 +252,7 @@ ip6t_do_table(struct sk_buff **pskb,
|
||||
static const char nulldevname[IFNAMSIZ] __attribute__((aligned(sizeof(long))));
|
||||
int offset = 0;
|
||||
unsigned int protoff = 0;
|
||||
int hotdrop = 0;
|
||||
bool hotdrop = false;
|
||||
/* Initializing verdict to NF_DROP keeps gcc happy. */
|
||||
unsigned int verdict = NF_DROP;
|
||||
const char *indev, *outdev;
|
||||
@@ -1299,7 +1299,7 @@ icmp6_match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
struct icmp6hdr _icmp, *ic;
|
||||
const struct ip6t_icmp *icmpinfo = matchinfo;
|
||||
@@ -1313,7 +1313,7 @@ icmp6_match(const struct sk_buff *skb,
|
||||
/* We've been asked to examine this packet, and we
|
||||
can't. Hence, no choice but to drop. */
|
||||
duprintf("Dropping evil ICMP tinygram.\n");
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -49,7 +49,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
struct ip_auth_hdr *ah, _ah;
|
||||
const struct ip6t_ah *ahinfo = matchinfo;
|
||||
@@ -60,13 +60,13 @@ match(const struct sk_buff *skb,
|
||||
err = ipv6_find_hdr(skb, &ptr, NEXTHDR_AUTH, NULL);
|
||||
if (err < 0) {
|
||||
if (err != -ENOENT)
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
ah = skb_header_pointer(skb, ptr, sizeof(_ah), &_ah);
|
||||
if (ah == NULL) {
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -27,7 +27,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
unsigned char eui64[8];
|
||||
int i = 0;
|
||||
@@ -35,7 +35,7 @@ match(const struct sk_buff *skb,
|
||||
if (!(skb_mac_header(skb) >= skb->head &&
|
||||
(skb_mac_header(skb) + ETH_HLEN) <= skb->data) &&
|
||||
offset != 0) {
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -48,7 +48,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
struct frag_hdr _frag, *fh;
|
||||
const struct ip6t_frag *fraginfo = matchinfo;
|
||||
@@ -58,13 +58,13 @@ match(const struct sk_buff *skb,
|
||||
err = ipv6_find_hdr(skb, &ptr, NEXTHDR_FRAGMENT, NULL);
|
||||
if (err < 0) {
|
||||
if (err != -ENOENT)
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
fh = skb_header_pointer(skb, ptr, sizeof(_frag), &_frag);
|
||||
if (fh == NULL) {
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -55,7 +55,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
struct ipv6_opt_hdr _optsh, *oh;
|
||||
const struct ip6t_opts *optinfo = matchinfo;
|
||||
@@ -71,13 +71,13 @@ match(const struct sk_buff *skb,
|
||||
err = ipv6_find_hdr(skb, &ptr, match->data, NULL);
|
||||
if (err < 0) {
|
||||
if (err != -ENOENT)
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
oh = skb_header_pointer(skb, ptr, sizeof(_optsh), &_optsh);
|
||||
if (oh == NULL) {
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -22,7 +22,7 @@ MODULE_LICENSE("GPL");
|
||||
static int match(const struct sk_buff *skb,
|
||||
const struct net_device *in, const struct net_device *out,
|
||||
const struct xt_match *match, const void *matchinfo,
|
||||
int offset, unsigned int protoff, int *hotdrop)
|
||||
int offset, unsigned int protoff, bool *hotdrop)
|
||||
{
|
||||
const struct ip6t_hl_info *info = matchinfo;
|
||||
const struct ipv6hdr *ip6h = ipv6_hdr(skb);
|
||||
|
||||
@@ -34,7 +34,7 @@ ipv6header_match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
const struct ip6t_ipv6header_info *info = matchinfo;
|
||||
unsigned int temp;
|
||||
|
||||
@@ -48,7 +48,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
struct ip6_mh _mh, *mh;
|
||||
const struct ip6t_mh *mhinfo = matchinfo;
|
||||
@@ -62,14 +62,14 @@ match(const struct sk_buff *skb,
|
||||
/* We've been asked to examine this packet, and we
|
||||
can't. Hence, no choice but to drop. */
|
||||
duprintf("Dropping evil MH tinygram.\n");
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
if (mh->ip6mh_proto != IPPROTO_NONE) {
|
||||
duprintf("Dropping invalid MH Payload Proto: %u\n",
|
||||
mh->ip6mh_proto);
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
@@ -31,7 +31,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
const struct ip6t_owner_info *info = matchinfo;
|
||||
|
||||
|
||||
@@ -50,7 +50,7 @@ match(const struct sk_buff *skb,
|
||||
const void *matchinfo,
|
||||
int offset,
|
||||
unsigned int protoff,
|
||||
int *hotdrop)
|
||||
bool *hotdrop)
|
||||
{
|
||||
struct ipv6_rt_hdr _route, *rh;
|
||||
const struct ip6t_rt *rtinfo = matchinfo;
|
||||
@@ -64,13 +64,13 @@ match(const struct sk_buff *skb,
|
||||
err = ipv6_find_hdr(skb, &ptr, NEXTHDR_ROUTING, NULL);
|
||||
if (err < 0) {
|
||||
if (err != -ENOENT)
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
rh = skb_header_pointer(skb, ptr, sizeof(_route), &_route);
|
||||
if (rh == NULL) {
|
||||
*hotdrop = 1;
|
||||
*hotdrop = true;
|
||||
return 0;
|
||||
}
|
||||
|
||||
|
||||
Reference in New Issue
Block a user