]> git.ipfire.org Git - thirdparty/kernel/linux.git/commit
netfilter: nf_tables: avoid usage of embedded nft_ctx
authorFlorian Westphal <fw@strlen.de>
Mon, 13 May 2024 13:00:47 +0000 (15:00 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 25 Jun 2024 18:40:47 +0000 (20:40 +0200)
commitd4f6f3994e133ff49e89d7e108500f45224a79e1
tree612674b6132580b0eab83e6e935c90d53776adea
parent0c2e0ee861de071c2e02c44dda5c44329ea8394d
netfilter: nf_tables: avoid usage of embedded nft_ctx

nft_ctx is stored in nft_trans object, but nft_ctx is large
(48 bytes on 64-bit platforms), it should not be embedded in
the transaction structures.

Reduce its usage so we can remove it eventually.

This replaces trans->ctx.chain with the chain pointer
already available in nft_trans_chain structure.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c
net/netfilter/nf_tables_offload.c