| /net/netfilter/ |
| A D | nf_bpf_link.c | 44 if (!hook) { in get_proto_defrag_hook() 54 if (hook && try_module_get(hook->owner)) { in get_proto_defrag_hook() 56 hook = rcu_pointer_handoff(hook); in get_proto_defrag_hook() 63 if (!IS_ERR(hook)) { in get_proto_defrag_hook() 67 hook = ERR_PTR(err); in get_proto_defrag_hook() 71 return hook; in get_proto_defrag_hook() 83 if (IS_ERR(hook)) in bpf_nf_enable_defrag() 84 return PTR_ERR(hook); in bpf_nf_enable_defrag() 92 if (IS_ERR(hook)) in bpf_nf_enable_defrag() 93 return PTR_ERR(hook); in bpf_nf_enable_defrag() [all …]
|
| A D | utils.c | 10 __sum16 nf_ip_checksum(struct sk_buff *skb, unsigned int hook, in nf_ip_checksum() argument 18 if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN) in nf_ip_checksum() 53 return nf_ip_checksum(skb, hook, dataoff, protocol); in nf_ip_checksum_partial() 64 __sum16 nf_ip6_checksum(struct sk_buff *skb, unsigned int hook, in nf_ip6_checksum() argument 72 if (hook != NF_INET_PRE_ROUTING && hook != NF_INET_LOCAL_IN) in nf_ip6_checksum() 108 return nf_ip6_checksum(skb, hook, dataoff, protocol); in nf_ip6_checksum_partial() 123 __sum16 nf_checksum(struct sk_buff *skb, unsigned int hook, in nf_checksum() argument 131 csum = nf_ip_checksum(skb, hook, dataoff, protocol); in nf_checksum() 134 csum = nf_ip6_checksum(skb, hook, dataoff, protocol); in nf_checksum() 150 csum = nf_ip_checksum_partial(skb, hook, dataoff, len, in nf_checksum_partial() [all …]
|
| A D | nfnetlink_hook.c | 58 u8 hook; member 211 ret = snprintf(sym, sizeof(sym), "%ps", ops->hook); in nfnl_hook_dump_one() 288 if (hook >= ARRAY_SIZE(net->nf.hooks_ipv4)) in nfnl_hook_entries_head() 293 if (hook >= ARRAY_SIZE(net->nf.hooks_ipv6)) in nfnl_hook_entries_head() 299 if (hook >= ARRAY_SIZE(net->nf.hooks_arp)) in nfnl_hook_entries_head() 301 hook_head = rcu_dereference(net->nf.hooks_arp[hook]); in nfnl_hook_entries_head() 306 if (hook >= ARRAY_SIZE(net->nf.hooks_bridge)) in nfnl_hook_entries_head() 313 if (hook >= NF_NETDEV_NUMHOOKS) in nfnl_hook_entries_head() 324 if (hook == NF_NETDEV_INGRESS) in nfnl_hook_entries_head() 328 if (hook == NF_NETDEV_EGRESS) in nfnl_hook_entries_head() [all …]
|
| A D | nft_reject_netdev.c | 30 int hook) in nft_reject_netdev_send_v4_tcp_reset() argument 34 nskb = nf_reject_skb_v4_tcp_reset(net, oldskb, dev, hook); in nft_reject_netdev_send_v4_tcp_reset() 44 int hook, u8 code) in nft_reject_netdev_send_v4_unreach() argument 48 nskb = nf_reject_skb_v4_unreach(net, oldskb, dev, hook, code); in nft_reject_netdev_send_v4_unreach() 58 int hook) in nft_reject_netdev_send_v6_tcp_reset() argument 62 nskb = nf_reject_skb_v6_tcp_reset(net, oldskb, dev, hook); in nft_reject_netdev_send_v6_tcp_reset() 73 int hook, u8 code) in nft_reject_netdev_send_v6_unreach() argument 77 nskb = nf_reject_skb_v6_unreach(net, oldskb, dev, hook, code); in nft_reject_netdev_send_v6_unreach()
|
| A D | nf_conntrack_pptp.c | 92 const struct nf_nat_pptp_hook *hook; in pptp_expectfn() local 103 hook = rcu_dereference(nf_nat_pptp_hook); in pptp_expectfn() 105 hook->expectfn(ct, exp); in pptp_expectfn() 190 const struct nf_nat_pptp_hook *hook; in exp_gre() local 220 hook = rcu_dereference(nf_nat_pptp_hook); in exp_gre() 221 if (hook && ct->status & IPS_NAT_MASK) in exp_gre() 222 hook->exp_gre(exp_orig, exp_reply); in exp_gre() 260 const struct nf_nat_pptp_hook *hook; in pptp_inbound_pkt() local 365 if (hook && ct->status & IPS_NAT_MASK) in pptp_inbound_pkt() 387 const struct nf_nat_pptp_hook *hook; in pptp_outbound_pkt() local [all …]
|
| A D | nft_chain_filter.c | 174 ingress_state.hook = NF_INET_INGRESS; in nft_do_chain_inet_ingress() 182 ingress_state.hook = NF_INET_INGRESS; in nft_do_chain_inet_ingress() 326 struct nft_hook *hook; in nft_netdev_event() local 329 list_for_each_entry(hook, &basechain->hook_list, list) { in nft_netdev_event() 330 ops = nft_hook_find_ops(hook, dev); in nft_netdev_event() 331 match = !strncmp(hook->ifname, dev->name, hook->ifnamelen); in nft_netdev_event() 363 list_add_tail_rcu(&ops->list, &hook->ops_list); in nft_netdev_event()
|
| A D | nf_tables_api.c | 344 kfree(hook); in nft_netdev_hook_free() 1994 hook->ifnamelen, hook->ifname)) in nft_dump_basechain_hook() 2321 if (!hook) in nft_netdev_hook_alloc() 2337 if (strncmp(dev->name, hook->ifname, hook->ifnamelen)) in nft_netdev_hook_alloc() 2348 return hook; in nft_netdev_hook_alloc() 2598 ops->hook = hook->type->hooks[ops->hooknum]; in nft_basechain_hook_init() 2843 ops->hook = basechain->ops.hook; in nf_tables_updchain() 3134 if (!hook) { in nft_delchain_hook() 8917 ops->hook = flowtable->data.type->hook; in nft_flowtable_parse_hook() 9462 hook->ifnamelen, hook->ifname)) in nf_tables_fill_flowtable_info() [all …]
|
| A D | nf_tables_offload.c | 225 struct nft_hook *hook; in nft_chain_offload_support() local 230 list_for_each_entry(hook, &basechain->hook_list, list) { in nft_chain_offload_support() 231 list_for_each_entry(ops, &hook->ops_list, list) { in nft_chain_offload_support() 463 struct nft_hook *hook; in nft_flow_block_chain() local 466 list_for_each_entry(hook, &basechain->hook_list, list) { in nft_flow_block_chain() 467 list_for_each_entry(ops, &hook->ops_list, list) { in nft_flow_block_chain() 485 list_for_each_entry(hook, &basechain->hook_list, list) { in nft_flow_block_chain() 486 list_for_each_entry(ops, &hook->ops_list, list) { in nft_flow_block_chain() 632 struct nft_hook *hook, *found; in __nft_offload_get_chain() local 648 if (!nft_hook_find_ops(hook, dev)) in __nft_offload_get_chain() [all …]
|
| A D | nf_conntrack_proto.c | 124 if (state->hook == NF_INET_POST_ROUTING && in in_vrf_postrouting() 234 .hook = ipv4_conntrack_in, 240 .hook = ipv4_conntrack_local, 246 .hook = nf_confirm, 252 .hook = nf_confirm, 391 .hook = ipv6_conntrack_in, 397 .hook = ipv6_conntrack_local, 403 .hook = nf_confirm, 409 .hook = nf_confirm,
|
| A D | nf_flow_table_inet.c | 74 .hook = nf_flow_offload_inet_hook, 84 .hook = nf_flow_offload_ip_hook, 94 .hook = nf_flow_offload_ipv6_hook,
|
| A D | nf_conntrack_proto_udp.c | 73 if (state->hook == NF_INET_PRE_ROUTING && in udp_error() 75 nf_checksum(skb, state->hook, dataoff, IPPROTO_UDP, state->pf)) { in udp_error() 171 if (state->hook == NF_INET_PRE_ROUTING && in udplite_error() 173 nf_checksum_partial(skb, state->hook, dataoff, cscov, IPPROTO_UDP, in udplite_error()
|
| /net/ipv4/netfilter/ |
| A D | ipt_REJECT.c | 34 int hook = xt_hooknum(par); in reject_tg() local 38 nf_send_unreach(skb, ICMP_NET_UNREACH, hook); in reject_tg() 41 nf_send_unreach(skb, ICMP_HOST_UNREACH, hook); in reject_tg() 44 nf_send_unreach(skb, ICMP_PROT_UNREACH, hook); in reject_tg() 47 nf_send_unreach(skb, ICMP_PORT_UNREACH, hook); in reject_tg() 50 nf_send_unreach(skb, ICMP_NET_ANO, hook); in reject_tg() 53 nf_send_unreach(skb, ICMP_HOST_ANO, hook); in reject_tg() 56 nf_send_unreach(skb, ICMP_PKT_FILTERED, hook); in reject_tg() 59 nf_send_reset(xt_net(par), par->state->sk, skb, hook); in reject_tg()
|
| A D | nf_reject_ipv4.c | 42 int hook) in nf_reject_skb_v4_tcp_reset() argument 52 oth = nf_reject_ip_tcphdr_get(oldskb, &_oth, hook); in nf_reject_skb_v4_tcp_reset() 77 int hook, u8 code) in nf_reject_skb_v4_unreach() argument 108 nf_ip_checksum(oldskb, hook, ip_hdrlen(oldskb), proto)) in nf_reject_skb_v4_unreach() 140 struct tcphdr *_oth, int hook) in nf_reject_ip_tcphdr_get() argument 240 int hook) in nf_send_reset() argument 246 oth = nf_reject_ip_tcphdr_get(oldskb, &_oth, hook); in nf_send_reset() 250 if ((hook == NF_INET_PRE_ROUTING || hook == NF_INET_INGRESS) && in nf_send_reset() 315 void nf_send_unreach(struct sk_buff *skb_in, int code, int hook) in nf_send_unreach() argument 324 if ((hook == NF_INET_PRE_ROUTING || hook == NF_INET_INGRESS) && in nf_send_unreach() [all …]
|
| A D | iptable_nat.c | 34 .hook = ipt_do_table, 40 .hook = ipt_do_table, 46 .hook = ipt_do_table, 52 .hook = ipt_do_table,
|
| A D | ip_tables.c | 187 unsigned int hook, in trace_packet() argument 201 hookname = chainname = hooknames[hook]; in trace_packet() 228 unsigned int hook = state->hook; in ipt_do_table() local 257 WARN_ON(!(table->valid_hooks & (1 << hook))); in ipt_do_table() 306 trace_packet(state->net, skb, hook, state->in, in ipt_do_table() 322 private->underflow[hook]); in ipt_do_table() 371 unsigned int hook; in mark_source_chains() local 375 for (hook = 0; hook < NF_INET_NUMHOOKS; hook++) { in mark_source_chains() 376 unsigned int pos = newinfo->hook_entry[hook]; in mark_source_chains() 379 if (!(valid_hooks & (1 << hook))) in mark_source_chains() [all …]
|
| A D | nf_defrag_ipv4.c | 85 nf_ct_defrag_user(state->hook, skb); in ipv4_conntrack_defrag() 95 .hook = ipv4_conntrack_defrag, 101 .hook = ipv4_conntrack_defrag,
|
| /net/ipv6/netfilter/ |
| A D | nf_reject_ipv6.c | 15 static bool nf_reject_v6_csum_ok(struct sk_buff *skb, int hook) in nf_reject_v6_csum_ok() argument 37 return nf_ip6_checksum(skb, hook, thoff, proto) == 0; in nf_reject_v6_csum_ok() 62 int hook) in nf_reject_skb_v6_tcp_reset() argument 97 int hook, u8 code) in nf_reject_skb_v6_unreach() argument 115 if (!nf_reject_v6_csum_ok(oldskb, hook)) in nf_reject_skb_v6_unreach() 151 unsigned int *otcplen, int hook) in nf_reject_ip6_tcphdr_get() argument 188 if (nf_ip6_checksum(oldskb, hook, tcphoff, IPPROTO_TCP)) { in nf_reject_ip6_tcphdr_get() 269 int hook) in nf_send_reset6() argument 296 if (hook == NF_INET_PRE_ROUTING || hook == NF_INET_INGRESS) { in nf_send_reset6() 369 static bool reject6_csum_ok(struct sk_buff *skb, int hook) in reject6_csum_ok() argument [all …]
|
| A D | ip6table_nat.c | 36 .hook = ip6t_do_table, 42 .hook = ip6t_do_table, 48 .hook = ip6t_do_table, 54 .hook = ip6t_do_table,
|
| A D | ip6_tables.c | 212 unsigned int hook, in trace_packet() argument 226 hookname = chainname = hooknames[hook]; in trace_packet() 252 unsigned int hook = state->hook; in ip6t_do_table() local 278 WARN_ON(!(table->valid_hooks & (1 << hook))); in ip6t_do_table() 329 trace_packet(state->net, skb, hook, state->in, in ip6t_do_table() 345 private->underflow[hook]); in ip6t_do_table() 389 unsigned int hook; in mark_source_chains() local 393 for (hook = 0; hook < NF_INET_NUMHOOKS; hook++) { in mark_source_chains() 394 unsigned int pos = newinfo->hook_entry[hook]; in mark_source_chains() 397 if (!(valid_hooks & (1 << hook))) in mark_source_chains() [all …]
|
| A D | nf_defrag_ipv6_hooks.c | 68 nf_ct6_defrag_user(state->hook, skb)); in ipv6_defrag() 78 .hook = ipv6_defrag, 84 .hook = ipv6_defrag,
|
| /net/bridge/netfilter/ |
| A D | nft_reject_bridge.c | 48 int hook) in nft_reject_br_send_v4_tcp_reset() argument 52 nskb = nf_reject_skb_v4_tcp_reset(net, oldskb, NULL, hook); in nft_reject_br_send_v4_tcp_reset() 64 int hook, u8 code) in nft_reject_br_send_v4_unreach() argument 68 nskb = nf_reject_skb_v4_unreach(net, oldskb, NULL, hook, code); in nft_reject_br_send_v4_unreach() 80 int hook) in nft_reject_br_send_v6_tcp_reset() argument 84 nskb = nf_reject_skb_v6_tcp_reset(net, oldskb, NULL, hook); in nft_reject_br_send_v6_tcp_reset() 97 int hook, u8 code) in nft_reject_br_send_v6_unreach() argument 101 nskb = nf_reject_skb_v6_unreach(net, oldskb, NULL, hook, code); in nft_reject_br_send_v6_unreach()
|
| A D | ebtable_filter.c | 55 .hook = ebt_do_table, 61 .hook = ebt_do_table, 67 .hook = ebt_do_table,
|
| A D | ebtable_nat.c | 55 .hook = ebt_do_table, 61 .hook = ebt_do_table, 67 .hook = ebt_do_table,
|
| /net/sched/ |
| A D | em_ipt.c | 23 u32 hook; member 52 mtpar.hook_mask = 1 << im->hook; in check_match() 167 im->hook = nla_get_u32(tb[TCA_EM_IPT_HOOK]); in em_ipt_change() 237 nf_hook_state_init(&state, im->hook, nfproto, in em_ipt_match() 256 if (nla_put_u32(skb, TCA_EM_IPT_HOOK, im->hook) < 0) in em_ipt_dump()
|
| /net/bridge/ |
| A D | br_netfilter_hooks.c | 1054 .hook = br_nf_pre_routing, 1061 .hook = br_nf_local_in, 1068 .hook = br_nf_forward, 1074 .hook = br_nf_post_routing, 1080 .hook = ip_sabotage_in, 1086 .hook = ip_sabotage_in, 1128 int br_nf_hook_thresh(unsigned int hook, struct net *net, in br_nf_hook_thresh() argument 1141 e = rcu_dereference(net->nf.hooks_bridge[hook]); in br_nf_hook_thresh() 1156 if (ops[i]->hook == br_nf_pre_routing) { in br_nf_hook_thresh() 1165 nf_hook_state_init(&state, hook, NFPROTO_BRIDGE, indev, outdev, in br_nf_hook_thresh()
|