On Sunday 2012-11-25 00:07, pablo@xxxxxxxxxxxxx wrote:
>From: Pablo Neira Ayuso <pablo@xxxxxxxxxxxxx>
>
>IPVS uses ipv6_find_hdr, but this function is defined in ip6_tables.c,
>to avoid such a dependency, move the function definition to the
>generic IPv6 netfilter infrastructure.
Could we move this in a different way, such that the "ipv6_find_hdr"
function and functions from exthdrs_core.c end up in a separate
module (or even built-in code), such that modules like xt_socket.c
can drop their dependency on ipv6.ko?
>index 429089c..d25f2d9 100644
>--- a/net/ipv6/netfilter.c
>+++ b/net/ipv6/netfilter.c
>@@ -60,6 +60,109 @@ int ip6_route_me_harder(struct sk_buff *skb)
> EXPORT_SYMBOL(ip6_route_me_harder);
>
>+int nf_ip6_find_hdr(const struct sk_buff *skb, unsigned int *offset,
>+ int target, unsigned short *fragoff, int *flags)
>+{
>[...]
>+}
>+EXPORT_SYMBOL(nf_ip6_find_hdr);
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
