Re: [PATCH iptables] nft-bridge: pass context structure to ops->add() to improve anonymous set support

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Wed, Jul 12, 2023 at 11:59:12AM +0200, Pablo Neira Ayuso wrote:
> diff --git a/iptables/nft.c b/iptables/nft.c
> index 1cb104e75ccc..59e3fa7079c4 100644
> --- a/iptables/nft.c
> +++ b/iptables/nft.c
[...]
> @@ -2878,6 +2888,9 @@ int nft_rule_zero_counters(struct nft_handle *h, const char *chain,
>  {
>  	struct iptables_command_state cs = {};
>  	struct nftnl_rule *r, *new_rule;
> +	struct nft_rule_ctx ctx = {
> +		.command = NFT_COMPAT_RULE_ZERO,

BTW. I changed this to:

                .command = NFT_COMPAT_RULE_APPEND,

before pushing it out, for the record.

> +	};
>  	struct nft_chain *c;
>  	int ret = 0;
>  



[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux