netfilter: ipv6: use NFPROTO values for NF_HOOK invocation
The semantic patch that was used: // <smpl> @@ @@ (NF_HOOK |NF_HOOK_THRESH |nf_hook )( -PF_INET6, +NFPROTO_IPV6, ...) // </smpl> Signed-off-by: Jan Engelhardt <jengelh@medozas.de>
This commit is contained in:
@@ -142,7 +142,7 @@ int ipv6_rcv(struct sk_buff *skb, struct net_device *dev, struct packet_type *pt
|
|||||||
/* Must drop socket now because of tproxy. */
|
/* Must drop socket now because of tproxy. */
|
||||||
skb_orphan(skb);
|
skb_orphan(skb);
|
||||||
|
|
||||||
return NF_HOOK(PF_INET6, NF_INET_PRE_ROUTING, skb, dev, NULL,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_PRE_ROUTING, skb, dev, NULL,
|
||||||
ip6_rcv_finish);
|
ip6_rcv_finish);
|
||||||
err:
|
err:
|
||||||
IP6_INC_STATS_BH(net, idev, IPSTATS_MIB_INHDRERRORS);
|
IP6_INC_STATS_BH(net, idev, IPSTATS_MIB_INHDRERRORS);
|
||||||
@@ -235,7 +235,7 @@ discard:
|
|||||||
|
|
||||||
int ip6_input(struct sk_buff *skb)
|
int ip6_input(struct sk_buff *skb)
|
||||||
{
|
{
|
||||||
return NF_HOOK(PF_INET6, NF_INET_LOCAL_IN, skb, skb->dev, NULL,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_IN, skb, skb->dev, NULL,
|
||||||
ip6_input_finish);
|
ip6_input_finish);
|
||||||
}
|
}
|
||||||
|
|
||||||
|
@@ -66,8 +66,8 @@ int __ip6_local_out(struct sk_buff *skb)
|
|||||||
len = 0;
|
len = 0;
|
||||||
ipv6_hdr(skb)->payload_len = htons(len);
|
ipv6_hdr(skb)->payload_len = htons(len);
|
||||||
|
|
||||||
return nf_hook(PF_INET6, NF_INET_LOCAL_OUT, skb, NULL, skb_dst(skb)->dev,
|
return nf_hook(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL,
|
||||||
dst_output);
|
skb_dst(skb)->dev, dst_output);
|
||||||
}
|
}
|
||||||
|
|
||||||
int ip6_local_out(struct sk_buff *skb)
|
int ip6_local_out(struct sk_buff *skb)
|
||||||
@@ -134,8 +134,8 @@ static int ip6_output2(struct sk_buff *skb)
|
|||||||
is not supported in any case.
|
is not supported in any case.
|
||||||
*/
|
*/
|
||||||
if (newskb)
|
if (newskb)
|
||||||
NF_HOOK(PF_INET6, NF_INET_POST_ROUTING, newskb,
|
NF_HOOK(NFPROTO_IPV6, NF_INET_POST_ROUTING,
|
||||||
NULL, newskb->dev,
|
newskb, NULL, newskb->dev,
|
||||||
ip6_dev_loopback_xmit);
|
ip6_dev_loopback_xmit);
|
||||||
|
|
||||||
if (ipv6_hdr(skb)->hop_limit == 0) {
|
if (ipv6_hdr(skb)->hop_limit == 0) {
|
||||||
@@ -150,7 +150,7 @@ static int ip6_output2(struct sk_buff *skb)
|
|||||||
skb->len);
|
skb->len);
|
||||||
}
|
}
|
||||||
|
|
||||||
return NF_HOOK(PF_INET6, NF_INET_POST_ROUTING, skb, NULL, skb->dev,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_POST_ROUTING, skb, NULL, skb->dev,
|
||||||
ip6_output_finish);
|
ip6_output_finish);
|
||||||
}
|
}
|
||||||
|
|
||||||
@@ -260,8 +260,8 @@ int ip6_xmit(struct sock *sk, struct sk_buff *skb, struct flowi *fl,
|
|||||||
if ((skb->len <= mtu) || skb->local_df || skb_is_gso(skb)) {
|
if ((skb->len <= mtu) || skb->local_df || skb_is_gso(skb)) {
|
||||||
IP6_UPD_PO_STATS(net, ip6_dst_idev(skb_dst(skb)),
|
IP6_UPD_PO_STATS(net, ip6_dst_idev(skb_dst(skb)),
|
||||||
IPSTATS_MIB_OUT, skb->len);
|
IPSTATS_MIB_OUT, skb->len);
|
||||||
return NF_HOOK(PF_INET6, NF_INET_LOCAL_OUT, skb, NULL, dst->dev,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL,
|
||||||
dst_output);
|
dst->dev, dst_output);
|
||||||
}
|
}
|
||||||
|
|
||||||
if (net_ratelimit())
|
if (net_ratelimit())
|
||||||
@@ -537,7 +537,7 @@ int ip6_forward(struct sk_buff *skb)
|
|||||||
hdr->hop_limit--;
|
hdr->hop_limit--;
|
||||||
|
|
||||||
IP6_INC_STATS_BH(net, ip6_dst_idev(dst), IPSTATS_MIB_OUTFORWDATAGRAMS);
|
IP6_INC_STATS_BH(net, ip6_dst_idev(dst), IPSTATS_MIB_OUTFORWDATAGRAMS);
|
||||||
return NF_HOOK(PF_INET6, NF_INET_FORWARD, skb, skb->dev, dst->dev,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_FORWARD, skb, skb->dev, dst->dev,
|
||||||
ip6_forward_finish);
|
ip6_forward_finish);
|
||||||
|
|
||||||
error:
|
error:
|
||||||
|
@@ -1566,7 +1566,7 @@ static int ip6mr_forward2(struct sk_buff *skb, struct mfc6_cache *c, int vifi)
|
|||||||
|
|
||||||
IP6CB(skb)->flags |= IP6SKB_FORWARDED;
|
IP6CB(skb)->flags |= IP6SKB_FORWARDED;
|
||||||
|
|
||||||
return NF_HOOK(PF_INET6, NF_INET_FORWARD, skb, skb->dev, dev,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_FORWARD, skb, skb->dev, dev,
|
||||||
ip6mr_forward2_finish);
|
ip6mr_forward2_finish);
|
||||||
|
|
||||||
out_free:
|
out_free:
|
||||||
|
@@ -1479,7 +1479,7 @@ static void mld_sendpack(struct sk_buff *skb)
|
|||||||
|
|
||||||
payload_len = skb->len;
|
payload_len = skb->len;
|
||||||
|
|
||||||
err = NF_HOOK(PF_INET6, NF_INET_LOCAL_OUT, skb, NULL, skb->dev,
|
err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL, skb->dev,
|
||||||
dst_output);
|
dst_output);
|
||||||
out:
|
out:
|
||||||
if (!err) {
|
if (!err) {
|
||||||
@@ -1847,7 +1847,7 @@ static void igmp6_send(struct in6_addr *addr, struct net_device *dev, int type)
|
|||||||
goto err_out;
|
goto err_out;
|
||||||
|
|
||||||
skb_dst_set(skb, dst);
|
skb_dst_set(skb, dst);
|
||||||
err = NF_HOOK(PF_INET6, NF_INET_LOCAL_OUT, skb, NULL, skb->dev,
|
err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL, skb->dev,
|
||||||
dst_output);
|
dst_output);
|
||||||
out:
|
out:
|
||||||
if (!err) {
|
if (!err) {
|
||||||
|
@@ -535,7 +535,7 @@ void ndisc_send_skb(struct sk_buff *skb,
|
|||||||
idev = in6_dev_get(dst->dev);
|
idev = in6_dev_get(dst->dev);
|
||||||
IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUT, skb->len);
|
IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUT, skb->len);
|
||||||
|
|
||||||
err = NF_HOOK(PF_INET6, NF_INET_LOCAL_OUT, skb, NULL, dst->dev,
|
err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL, dst->dev,
|
||||||
dst_output);
|
dst_output);
|
||||||
if (!err) {
|
if (!err) {
|
||||||
ICMP6MSGOUT_INC_STATS(net, idev, type);
|
ICMP6MSGOUT_INC_STATS(net, idev, type);
|
||||||
@@ -1617,7 +1617,7 @@ void ndisc_send_redirect(struct sk_buff *skb, struct neighbour *neigh,
|
|||||||
skb_dst_set(buff, dst);
|
skb_dst_set(buff, dst);
|
||||||
idev = in6_dev_get(dst->dev);
|
idev = in6_dev_get(dst->dev);
|
||||||
IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUT, skb->len);
|
IP6_UPD_PO_STATS(net, idev, IPSTATS_MIB_OUT, skb->len);
|
||||||
err = NF_HOOK(PF_INET6, NF_INET_LOCAL_OUT, buff, NULL, dst->dev,
|
err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, buff, NULL, dst->dev,
|
||||||
dst_output);
|
dst_output);
|
||||||
if (!err) {
|
if (!err) {
|
||||||
ICMP6MSGOUT_INC_STATS(net, idev, NDISC_REDIRECT);
|
ICMP6MSGOUT_INC_STATS(net, idev, NDISC_REDIRECT);
|
||||||
|
@@ -643,7 +643,7 @@ void nf_ct_frag6_output(unsigned int hooknum, struct sk_buff *skb,
|
|||||||
s2 = s->next;
|
s2 = s->next;
|
||||||
s->next = NULL;
|
s->next = NULL;
|
||||||
|
|
||||||
NF_HOOK_THRESH(PF_INET6, hooknum, s, in, out, okfn,
|
NF_HOOK_THRESH(NFPROTO_IPV6, hooknum, s, in, out, okfn,
|
||||||
NF_IP6_PRI_CONNTRACK_DEFRAG + 1);
|
NF_IP6_PRI_CONNTRACK_DEFRAG + 1);
|
||||||
s = s2;
|
s = s2;
|
||||||
}
|
}
|
||||||
|
@@ -636,8 +636,8 @@ static int rawv6_send_hdrinc(struct sock *sk, void *from, int length,
|
|||||||
goto error_fault;
|
goto error_fault;
|
||||||
|
|
||||||
IP6_UPD_PO_STATS(sock_net(sk), rt->rt6i_idev, IPSTATS_MIB_OUT, skb->len);
|
IP6_UPD_PO_STATS(sock_net(sk), rt->rt6i_idev, IPSTATS_MIB_OUT, skb->len);
|
||||||
err = NF_HOOK(PF_INET6, NF_INET_LOCAL_OUT, skb, NULL, rt->u.dst.dev,
|
err = NF_HOOK(NFPROTO_IPV6, NF_INET_LOCAL_OUT, skb, NULL,
|
||||||
dst_output);
|
rt->u.dst.dev, dst_output);
|
||||||
if (err > 0)
|
if (err > 0)
|
||||||
err = net_xmit_errno(err);
|
err = net_xmit_errno(err);
|
||||||
if (err)
|
if (err)
|
||||||
|
@@ -42,7 +42,7 @@ int xfrm6_transport_finish(struct sk_buff *skb, int async)
|
|||||||
ipv6_hdr(skb)->payload_len = htons(skb->len);
|
ipv6_hdr(skb)->payload_len = htons(skb->len);
|
||||||
__skb_push(skb, skb->data - skb_network_header(skb));
|
__skb_push(skb, skb->data - skb_network_header(skb));
|
||||||
|
|
||||||
NF_HOOK(PF_INET6, NF_INET_PRE_ROUTING, skb, skb->dev, NULL,
|
NF_HOOK(NFPROTO_IPV6, NF_INET_PRE_ROUTING, skb, skb->dev, NULL,
|
||||||
ip6_rcv_finish);
|
ip6_rcv_finish);
|
||||||
return -1;
|
return -1;
|
||||||
}
|
}
|
||||||
|
@@ -90,6 +90,6 @@ static int xfrm6_output_finish(struct sk_buff *skb)
|
|||||||
|
|
||||||
int xfrm6_output(struct sk_buff *skb)
|
int xfrm6_output(struct sk_buff *skb)
|
||||||
{
|
{
|
||||||
return NF_HOOK(PF_INET6, NF_INET_POST_ROUTING, skb, NULL, skb_dst(skb)->dev,
|
return NF_HOOK(NFPROTO_IPV6, NF_INET_POST_ROUTING, skb, NULL,
|
||||||
xfrm6_output_finish);
|
skb_dst(skb)->dev, xfrm6_output_finish);
|
||||||
}
|
}
|
||||||
|
Reference in New Issue
Block a user