[iptables PATCH v2 00/11] Share do_parse() between nft and legacy

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Patch 1 removes remains of an unused (and otherwise dropped) feature,
yet the change is necessary for the following ones. Patches 2-6 prepare
for patch 7 which moves do_parse() to xshared.c. Patches 8 and 9 prepare
for use of do_parse() from legacy code, Patches 10 and 11 finally drop
legacy ip(6)tables' rule parsing code.

Changes since v1:
- Introduce struct xt_cmd_parse_ops in patch 6
- Adjust patches 10 and 11 accordingly

Phil Sutter (11):
  xtables: Drop xtables' family on demand feature
  xtables: Pull table validity check out of do_parse()
  xtables: Move struct nft_xt_cmd_parse to xshared.h
  xtables: Pass xtables_args to check_empty_interface()
  xtables: Pass xtables_args to check_inverse()
  xtables: Do not pass nft_handle to do_parse()
  xshared: Move do_parse to shared space
  xshared: Store parsed wait and wait_interval in xtables_args
  nft: Move proto_parse and post_parse callbacks to xshared
  iptables: Use xtables' do_parse() function
  ip6tables: Use the shared do_parse, too

 iptables/ip6tables.c            | 502 ++---------------------
 iptables/iptables.c             | 487 ++---------------------
 iptables/nft-arp.c              |   2 +-
 iptables/nft-bridge.c           |   1 -
 iptables/nft-ipv4.c             |  61 +--
 iptables/nft-ipv6.c             |  78 +---
 iptables/nft-shared.h           |  54 +--
 iptables/xshared.c              | 684 ++++++++++++++++++++++++++++++++
 iptables/xshared.h              |  70 ++++
 iptables/xtables-eb-translate.c |   4 +-
 iptables/xtables-translate.c    |  12 +-
 iptables/xtables.c              | 572 +-------------------------
 12 files changed, 853 insertions(+), 1674 deletions(-)

-- 
2.34.1




[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux