b2d306542ff935a4edf7a88ba8145c108193442a - linux

commit	b2d306542ff935a4edf7a88ba8145c108193442a	[log] [tgz]
author	Pablo Neira Ayuso <pablo@netfilter.org>	Mon Mar 14 18:23:00 2022 +0100
committer	Pablo Neira Ayuso <pablo@netfilter.org>	Sun Mar 20 00:29:46 2022 +0100
tree	4c02a42b60c7c6305d11ac1838127795238e18e7
parent	31d0bb9763efad30377505f3467f958d1ebe1e3d [diff]

netfilter: nf_tables: do not reduce read-only expressions

Skip register tracking for expressions that perform read-only operations
on the registers. Define and use a cookie pointer NFT_REDUCE_READONLY to
avoid defining stubs for these expressions.

This patch re-enables register tracking which was disabled in ed5f85d42290
("netfilter: nf_tables: disable register tracking"). Follow up patches
add remaining register tracking for existing expressions.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

include/net/netfilter/nf_tables.h[diff]
net/bridge/netfilter/nft_reject_bridge.c[diff]
net/ipv4/netfilter/nft_dup_ipv4.c[diff]
net/ipv4/netfilter/nft_reject_ipv4.c[diff]
net/ipv6/netfilter/nft_dup_ipv6.c[diff]
net/ipv6/netfilter/nft_reject_ipv6.c[diff]
net/netfilter/nf_tables_api.c[diff]
net/netfilter/nft_cmp.c[diff]
net/netfilter/nft_compat.c[diff]
net/netfilter/nft_connlimit.c[diff]
net/netfilter/nft_counter.c[diff]
net/netfilter/nft_ct.c[diff]
net/netfilter/nft_dup_netdev.c[diff]
net/netfilter/nft_dynset.c[diff]
net/netfilter/nft_flow_offload.c[diff]
net/netfilter/nft_fwd_netdev.c[diff]
net/netfilter/nft_last.c[diff]
net/netfilter/nft_limit.c[diff]
net/netfilter/nft_log.c[diff]
net/netfilter/nft_masq.c[diff]
net/netfilter/nft_nat.c[diff]
net/netfilter/nft_objref.c[diff]
net/netfilter/nft_queue.c[diff]
net/netfilter/nft_quota.c[diff]
net/netfilter/nft_range.c[diff]
net/netfilter/nft_redir.c[diff]
net/netfilter/nft_reject_inet.c[diff]
net/netfilter/nft_reject_netdev.c[diff]
net/netfilter/nft_rt.c[diff]
net/netfilter/nft_synproxy.c[diff]
net/netfilter/nft_tproxy.c[diff]

31 files changed

tree: 4c02a42b60c7c6305d11ac1838127795238e18e7