Commit 92fb1551 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: flowtable: remove nf_ct_l4proto_find() call 



TCP and UDP are built-in conntrack protocol trackers and the flowtable
only supports for TCP and UDP, remove this call.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 241d1af4

net/netfilter/nf_flow_table_core.c

+0 −10
Original line number Diff line number Diff line
@@ -180,15 +180,10 @@ static void flow_offload_fixup_tcp(struct ip_ct_tcp *tcp) 


static void flow_offload_fixup_ct_timeout(struct nf_conn *ct)

{

	const struct nf_conntrack_l4proto *l4proto;

	struct net *net = nf_ct_net(ct);

	int l4num = nf_ct_protonum(ct);

	unsigned int timeout;



	l4proto = nf_ct_l4proto_find(l4num);

	if (!l4proto)

		return;



	if (l4num == IPPROTO_TCP) {

		struct nf_tcp_net *tn = nf_tcp_pernet(net);
@@ -273,15 +268,10 @@ static const struct rhashtable_params nf_flow_offload_rhash_params = { 


unsigned long flow_offload_get_timeout(struct flow_offload *flow)

{

	const struct nf_conntrack_l4proto *l4proto;

	unsigned long timeout = NF_FLOW_TIMEOUT;

	struct net *net = nf_ct_net(flow->ct);

	int l4num = nf_ct_protonum(flow->ct);



	l4proto = nf_ct_l4proto_find(l4num);

	if (!l4proto)

		return timeout;



	if (l4num == IPPROTO_TCP) {

		struct nf_tcp_net *tn = nf_tcp_pernet(net);