[PATCH 8/8] netfilter: xtables2: execute targets in live rule traversal

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Signed-off-by: Jan Engelhardt <jengelh@xxxxxxx>
---
 net/netfilter/xt_core.c |    8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/net/netfilter/xt_core.c b/net/netfilter/xt_core.c
index 8615fe4..830260c 100644
--- a/net/netfilter/xt_core.c
+++ b/net/netfilter/xt_core.c
@@ -111,6 +111,14 @@ xt2_do_rule(struct sk_buff *skb, const struct xt2_packed_rule *rule,
 			acpar->matchinfo = pa->data;
 			if (!pa->match_ext->match(skb, acpar))
 				break;
+		} else if (pa->type == NFXT_ACTION_TARGET) {
+			unsigned int verdict;
+
+			acpar->target   = pa->target_ext;
+			acpar->targinfo = pa->data;
+			verdict = pa->target_ext->target(skb, acpar);
+			if (verdict != XT_CONTINUE)
+				return verdict;
 		}
 
 	return XT_CONTINUE;
-- 
1.7.10.4

--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html


[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux