linux-xiaomi-chiron/net/ipv6/netfilter
Pablo Neira Ayuso b408c5b04f netfilter: nf_tables: fix flowtable free
Every flow_offload entry is added into the table twice. Because of this,
rhashtable_free_and_destroy can't be used, since it would call kfree for
each flow_offload object twice.

This patch cleans up the flowtable via nf_flow_table_iterate() to
schedule removal of entries by setting on the dying bit, then there is
an explicitly invocation of the garbage collector to release resources.

Based on patch from Felix Fietkau.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2018-02-07 00:58:57 +01:00
..
ip6_tables.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net-next 2018-01-31 14:31:10 -08:00
ip6t_ah.c
ip6t_eui64.c
ip6t_frag.c
ip6t_hbh.c
ip6t_ipv6header.c
ip6t_MASQUERADE.c
ip6t_mh.c
ip6t_NPT.c
ip6t_REJECT.c
ip6t_rpfilter.c
ip6t_rt.c
ip6t_srh.c netfilter: add IPv6 segment routing header 'srh' match 2018-01-10 16:28:44 +01:00
ip6t_SYNPROXY.c
ip6table_filter.c
ip6table_mangle.c netfilter: remove defensive check on malformed packets from raw sockets 2018-01-08 18:11:04 +01:00
ip6table_nat.c netfilter: core: only allow one nat hook per hook point 2018-01-08 18:01:13 +01:00
ip6table_raw.c netfilter: nf_defrag: mark xt_table structures 'const' again 2018-01-16 01:52:07 +01:00
ip6table_security.c
Kconfig netfilter: flowtable infrastructure depends on NETFILTER_INGRESS 2018-02-02 13:21:48 +01:00
Makefile netfilter: add IPv6 segment routing header 'srh' match 2018-01-10 16:28:44 +01:00
nf_conntrack_l3proto_ipv6.c Merge git://git.kernel.org/pub/scm/linux/kernel/git/pablo/nf 2018-02-01 14:41:46 -05:00
nf_conntrack_proto_icmpv6.c netfilter: conntrack: timeouts can be const 2018-01-08 18:01:02 +01:00
nf_conntrack_reasm.c netfilter: ipv6: nf_defrag: Kill frag queue on RFC2460 failure 2018-02-02 12:45:17 +01:00
nf_defrag_ipv6_hooks.c netfilter: nf_defrag: move NF_CONNTRACK bits into #ifdef 2018-01-16 01:52:08 +01:00
nf_dup_ipv6.c
nf_flow_table_ipv6.c netfilter: nf_tables: fix flowtable free 2018-02-07 00:58:57 +01:00
nf_log_ipv6.c
nf_nat_l3proto_ipv6.c netfilter: remove defensive check on malformed packets from raw sockets 2018-01-08 18:11:04 +01:00
nf_nat_masquerade_ipv6.c
nf_nat_proto_icmpv6.c
nf_reject_ipv6.c
nf_socket_ipv6.c
nf_tables_ipv6.c netfilter: nf_tables: get rid of struct nft_af_info abstraction 2018-01-10 15:32:11 +01:00
nft_chain_nat_ipv6.c netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path 2018-01-08 18:01:15 +01:00
nft_chain_route_ipv6.c netfilter: nf_tables: explicit nft_set_pktinfo() call from hook path 2018-01-08 18:01:15 +01:00
nft_dup_ipv6.c
nft_fib_ipv6.c netfilter: move route indirection to struct nf_ipv6_ops 2018-01-08 18:01:26 +01:00
nft_masq_ipv6.c
nft_redir_ipv6.c
nft_reject_ipv6.c