diff options
author | 2016-04-12 18:14:25 +0200 | |
---|---|---|
committer | 2016-04-18 20:39:48 +0200 | |
commit | adff6c65600000ec2bb71840c943ee12668080f5 (patch) | |
tree | 4d997d6be491c820c95302299034d62f55c8387d /net/netfilter/nft_ct.c | |
parent | netfilter: labels: don't emit ct event if labels were not changed (diff) | |
download | linux-adff6c65600000ec2bb71840c943ee12668080f5.tar.gz linux-adff6c65600000ec2bb71840c943ee12668080f5.tar.bz2 linux-adff6c65600000ec2bb71840c943ee12668080f5.zip |
netfilter: connlabels: change nf_connlabels_get bit arg to 'highest used'
nf_connlabel_set() takes the bit number that we would like to set.
nf_connlabels_get() however took the number of bits that we want to
support.
So e.g. nf_connlabels_get(32) support bits 0 to 31, but not 32.
This changes nf_connlabels_get() to take the highest bit that we want
to set.
Callers then don't have to cope with a potential integer wrap
when using nf_connlabels_get(bit + 1) anymore.
Current callers are fine, this change is only to make folloup
nft ct label set support simpler.
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nft_ct.c')
-rw-r--r-- | net/netfilter/nft_ct.c | 2 |
1 files changed, 2 insertions, 0 deletions
diff --git a/net/netfilter/nft_ct.c b/net/netfilter/nft_ct.c index d4a4619fcebc..25998facefd0 100644 --- a/net/netfilter/nft_ct.c +++ b/net/netfilter/nft_ct.c @@ -484,6 +484,8 @@ static struct nft_expr_type nft_ct_type __read_mostly = { static int __init nft_ct_module_init(void) { + BUILD_BUG_ON(NF_CT_LABELS_MAX_SIZE > NFT_REG_SIZE); + return nft_register_expr(&nft_ct_type); } |