/net/netfilter/ |
D | nf_queue.c | 254 const struct nf_hook_entries *hooks, in nf_iterate() argument 260 while (i < hooks->num_hook_entries) { in nf_iterate() 261 hook = &hooks->hooks[i]; in nf_iterate() 300 const struct nf_hook_entries *hooks; in nf_reinject() local 310 hooks = nf_hook_entries_head(net, pf, entry->state.hook); in nf_reinject() 313 if (WARN_ON_ONCE(!hooks || i >= hooks->num_hook_entries)) { in nf_reinject() 319 hook_entry = &hooks->hooks[i]; in nf_reinject() 333 verdict = nf_iterate(skb, &entry->state, hooks, &i); in nf_reinject()
|
D | nft_fib.c | 33 unsigned int hooks; in nft_fib_validate() local 38 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_fib_validate() 44 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_fib_validate() 48 hooks = (1 << NF_INET_LOCAL_OUT) | in nft_fib_validate() 52 hooks = (1 << NF_INET_LOCAL_IN) | in nft_fib_validate() 63 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_fib_validate()
|
D | xt_socket.c | 235 .hooks = (1 << NF_INET_PRE_ROUTING) | 247 .hooks = (1 << NF_INET_PRE_ROUTING) | 260 .hooks = (1 << NF_INET_PRE_ROUTING) | 273 .hooks = (1 << NF_INET_PRE_ROUTING) | 286 .hooks = (1 << NF_INET_PRE_ROUTING) | 299 .hooks = (1 << NF_INET_PRE_ROUTING) | 312 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
D | core.c | 156 new->hooks[nhooks] = old->hooks[i]; in nf_hook_entries_grow() 160 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow() 161 new->hooks[nhooks].priv = reg->priv; in nf_hook_entries_grow() 169 new->hooks[nhooks].hook = reg->hook; in nf_hook_entries_grow() 170 new->hooks[nhooks].priv = reg->priv; in nf_hook_entries_grow() 176 static void hooks_validate(const struct nf_hook_entries *hooks) in hooks_validate() argument 183 orig_ops = nf_hook_entries_get_hook_ops(hooks); in hooks_validate() 185 for (i = 0; i < hooks->num_hook_entries; i++) { in hooks_validate() 268 new->hooks[j] = old->hooks[i]; in __nf_hook_entries_try_shrink() 480 WRITE_ONCE(old->hooks[i].hook, accept_all); in nf_remove_net_hook() [all …]
|
D | nf_conntrack_sip.c | 863 const struct nf_nat_sip_hooks *hooks; in set_expected_rtp_rtcp() local 949 hooks = rcu_dereference(nf_nat_sip_hooks); in set_expected_rtp_rtcp() 950 if (hooks && in set_expected_rtp_rtcp() 951 !hooks->sdp_port(skb, protoff, dataoff, dptr, datalen, in set_expected_rtp_rtcp() 971 hooks = rcu_dereference(nf_nat_sip_hooks); in set_expected_rtp_rtcp() 972 if (hooks && ct->status & IPS_NAT_MASK && !direct_rtp) in set_expected_rtp_rtcp() 973 ret = hooks->sdp_media(skb, protoff, dataoff, dptr, in set_expected_rtp_rtcp() 1039 const struct nf_nat_sip_hooks *hooks; in process_sdp() local 1044 hooks = rcu_dereference(nf_nat_sip_hooks); in process_sdp() 1112 if (maddr_len && hooks && ct->status & IPS_NAT_MASK) { in process_sdp() [all …]
|
D | xt_nat.c | 160 .hooks = (1 << NF_INET_POST_ROUTING) | 173 .hooks = (1 << NF_INET_PRE_ROUTING) | 185 .hooks = (1 << NF_INET_POST_ROUTING) | 197 .hooks = (1 << NF_INET_PRE_ROUTING) | 209 .hooks = (1 << NF_INET_POST_ROUTING) | 221 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
D | nft_meta.c | 541 unsigned int hooks; in nft_meta_get_validate_sdif() local 547 hooks = (1 << NF_INET_LOCAL_IN) | in nft_meta_get_validate_sdif() 554 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_get_validate_sdif() 560 unsigned int hooks; in nft_meta_get_validate_xfrm() local 564 hooks = 1 << NF_NETDEV_INGRESS; in nft_meta_get_validate_xfrm() 569 hooks = (1 << NF_INET_PRE_ROUTING) | in nft_meta_get_validate_xfrm() 577 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_get_validate_xfrm() 607 unsigned int hooks; in nft_meta_set_validate() local 614 hooks = 1 << NF_BR_PRE_ROUTING; in nft_meta_set_validate() 617 hooks = 1 << NF_NETDEV_INGRESS; in nft_meta_set_validate() [all …]
|
D | nft_chain_filter.c | 35 .hooks = { 77 .hooks = { 119 .hooks = { 205 .hooks = { 263 .hooks = { 315 .hooks = {
|
D | nft_chain_nat.c | 45 .hooks = { 66 .hooks = { 97 .hooks = {
|
D | nft_chain_route.c | 58 .hooks = { 108 .hooks = { 139 .hooks = {
|
D | xt_CLASSIFY.c | 42 .hooks = (1 << NF_INET_LOCAL_OUT) | (1 << NF_INET_FORWARD) | 52 .hooks = (1 << NF_ARP_OUT) | (1 << NF_ARP_FORWARD),
|
D | nft_xfrm.c | 236 unsigned int hooks; in nft_xfrm_validate() local 245 hooks = (1 << NF_INET_FORWARD) | in nft_xfrm_validate() 250 hooks = (1 << NF_INET_FORWARD) | in nft_xfrm_validate() 259 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_xfrm_validate()
|
D | nft_osf.c | 119 unsigned int hooks; in nft_osf_validate() local 125 hooks = (1 << NF_INET_LOCAL_IN) | in nft_osf_validate() 133 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_osf_validate()
|
D | nft_rt.c | 167 unsigned int hooks; in nft_rt_validate() local 181 hooks = (1 << NF_INET_FORWARD) | in nft_rt_validate() 189 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_rt_validate()
|
D | xt_cgroup.c | 174 .hooks = (1 << NF_INET_LOCAL_OUT) | 188 .hooks = (1 << NF_INET_LOCAL_OUT) | 202 .hooks = (1 << NF_INET_LOCAL_OUT) |
|
D | xt_REDIRECT.c | 87 .hooks = (1 << NF_INET_PRE_ROUTING) | 100 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
D | xt_TPROXY.c | 221 .hooks = 1 << NF_INET_PRE_ROUTING, 233 .hooks = 1 << NF_INET_PRE_ROUTING, 246 .hooks = 1 << NF_INET_PRE_ROUTING,
|
D | xt_MASQUERADE.c | 80 .hooks = 1 << NF_INET_POST_ROUTING, 91 .hooks = 1 << NF_INET_POST_ROUTING,
|
D | xt_NETMAP.c | 127 .hooks = (1 << NF_INET_PRE_ROUTING) | 142 .hooks = (1 << NF_INET_PRE_ROUTING) |
|
D | xt_l2tp.c | 321 .hooks = ((1 << NF_INET_PRE_ROUTING) | 335 .hooks = ((1 << NF_INET_PRE_ROUTING) |
|
D | xt_realm.c | 34 .hooks = (1 << NF_INET_POST_ROUTING) | (1 << NF_INET_FORWARD) |
|
D | xt_osf.c | 39 .hooks = (1 << NF_INET_LOCAL_IN) |
|
D | xt_mac.c | 47 .hooks = (1 << NF_INET_PRE_ROUTING) | (1 << NF_INET_LOCAL_IN) |
|
/net/bridge/netfilter/ |
D | nft_meta_bridge.c | 175 unsigned int hooks; in nft_meta_bridge_set_validate() local 179 hooks = 1 << NF_BR_PRE_ROUTING; in nft_meta_bridge_set_validate() 185 return nft_chain_validate_hooks(ctx->chain, hooks); in nft_meta_bridge_set_validate()
|
/net/ipv6/netfilter/ |
D | ip6t_NPT.c | 154 .hooks = (1 << NF_INET_LOCAL_IN) | 166 .hooks = (1 << NF_INET_PRE_ROUTING) |
|