]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx
authorFlorian Westphal <fw@strlen.de>
Mon, 19 May 2025 23:35:13 +0000 (01:35 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 22 May 2025 12:08:27 +0000 (14:08 +0200)
commitba674db81a154ad32f1ddcd5c5fbd67b7873ee32
treea9a1dd33c4b7cb63900c076a66145052add2211b
parent7170875083254b51fcc5d67f96640977083f481e
netfilter: nf_tables: pass nft_chain to destroy function, not nft_ctx

commit 8965d42bcf54d42cbc72fe34a9d0ec3f8527debd upstream.

It would be better to not store nft_ctx inside nft_trans object,
the netlink ctx strucutre is huge and most of its information is
never needed in places that use trans->ctx.

Avoid/reduce its usage if possible, no runtime behaviour change
intended.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
include/net/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c
net/netfilter/nft_immediate.c