linux.git/net/bridge/netfilter, branch v2.6.29

netfilter 05/09: ebtables: fix inversion in match code

2009-01-13T05:18:35+00:00

Commit 8cc784ee (netfilter: change return types of match functions
for ebtables extensions) broke ebtables matches by inverting the
sense of match/nomatch.

Reported-by: Matt Cross 
Signed-off-by: Jan Engelhardt 
Signed-off-by: Patrick McHardy 
Signed-off-by: David S. Miller

net/bridge/netfilter: move a dereference below a NULL test

2009-01-11T08:06:33+00:00

In each case, if the NULL test is necessary, then the dereference should be
moved below the NULL test.

The semantic patch that makes this change is as follows:
(http://www.emn.fr/x-info/coccinelle/)

// 
@@
type T;
expression E;
identifier i,fld;
statement S;
@@

- T i = E->fld;
+ T i;
  ... when != E
      when != i
  if (E == NULL) S
+ i = E->fld;
// 

Signed-off-by: Julia Lawall 
Signed-off-by: Andrew Morton 
Signed-off-by: David S. Miller

netfilter: netns ebtables: ebtable_nat in netns

2008-11-04T13:30:46+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netfilter: netns ebtables: ebtable_filter in netns

2008-11-04T13:29:58+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netfilter: netns ebtables: ebtable_broute in netns

2008-11-04T13:29:03+00:00

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netfilter: netns ebtables: more cleanup during ebt_unregister_table()

2008-11-04T13:28:04+00:00

Now that ebt_unregister_table() can be called during netns stop, and module
pinning scheme can't prevent netns stop, do table cleanup by hand.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netfilter: netns ebtables: part 2

2008-11-04T13:27:15+00:00

* return ebt_table from ebt_register_table(), module code will save it into
  per-netns data for unregistration
* duplicate ebt_table at the very beginning of registration -- it's added into
  list, so one ebt_table wouldn't end up in many lists (and each netns has
  different one)
* introduce underscored tables in individial modules, this is temporary to not
  break bisection.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

netfilter: netns ebtables: part 1

2008-11-04T13:22:55+00:00

* propagate netns from userspace, register table in passed netns
* remporarily register every ebt_table in init_net

P. S.: one needs to add ".netns_ok = 1" to igmp_protocol to test with
ebtables(8) in netns.

Signed-off-by: Alexey Dobriyan 
Signed-off-by: Patrick McHardy

net: replace NIPQUAD() in net/*/

2008-10-31T07:54:56+00:00

Using NIPQUAD() with NIPQUAD_FMT, %d.%d.%d.%d or %u.%u.%u.%u
can be replaced with %pI4

Signed-off-by: Harvey Harrison 
Signed-off-by: David S. Miller

net: replace %p6 with %pI6

2008-10-29T19:52:50+00:00

Signed-off-by: Harvey Harrison 
Signed-off-by: David S. Miller