Changes in xt_esp.c

d2912cb1 - treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500

Tue, 04 Jun 2019 08:11:33 +0000

treewide: Replace GPLv2 boilerplate/reference with SPDX - rule 500Based on 2 normalized pattern(s): this program is free software you can redistribute it and or modify it under the terms of the gnu general public license version 2 as published by the free software foundation this program is free software you can redistribute it and or modify it under the terms of the gnu general public license version 2 as published by the free software foundation #extracted by the scancode license scanner the SPDX license identifier GPL-2.0-onlyhas been chosen to replace the boilerplate/reference in 4122 file(s).Signed-off-by: Thomas Gleixner Reviewed-by: Enrico Weigelt Reviewed-by: Kate Stewart Reviewed-by: Allison Randal Cc: linux-spdx@vger.kernel.orgLink: https://lkml.kernel.org/r/20190604081206.933168790@linutronix.deSigned-off-by: Greg Kroah-Hartman List of files: /linux-6.15/net/netfilter/xt_esp.c

b4ba2611 - netfilter: xtables: change hotdrop pointer to direct modification

Tue, 07 Jul 2009 18:54:30 +0000

netfilter: xtables: change hotdrop pointer to direct modificationSince xt_action_param is writable, let's use it. The pointer to'bool hotdrop' always worried (8 bytes (64-bit) to write 1 byte!).Surprisingly results in a reduction in size: text data bss filename5457066 692730 357892 vmlinux.o-prev5456554 692730 357892 vmlinux.oSigned-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

62fc8051 - netfilter: xtables: deconstify struct xt_action_param for matches

Tue, 07 Jul 2009 18:42:08 +0000

netfilter: xtables: deconstify struct xt_action_param for matchesIn future, layer-3 matches will be an xt module of their own, andneed to set the fragoff and thoff fields. Adding more pointers wouldneedlessy increase memory requirements (esp. so for 64-bit, wherepointers are wider).Signed-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

4b560b44 - netfilter: xtables: substitute temporary defines by final name

Sun, 05 Jul 2009 17:43:26 +0000

netfilter: xtables: substitute temporary defines by final nameSigned-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

bd414ee6 - netfilter: xtables: change matches to return error code

Tue, 23 Mar 2010 15:35:56 +0000

netfilter: xtables: change matches to return error codeThe following semantic patch does part of the transformation:// @ rule1 @struct xt_match ops;identifier check;@@ ops.checkentry = check;@@identifier rule1.check;@@ check(...) { <...-return true;+return 0; ...> }@@identifier rule1.check;@@ check(...) { <...-return false;+return -EINVAL; ...> }// Signed-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

b0f38452 - netfilter: xtables: change xt_match.checkentry return type

Fri, 19 Mar 2010 16:16:42 +0000

netfilter: xtables: change xt_match.checkentry return typeRestore function signatures from bool to int so that we can reportmemory allocation failures or similar using -ENOMEM rather thanalways having to pass -EINVAL back.This semantic patch may not be too precise (checking for functionsthat use xt_mtchk_param rather than functions referenced byxt_match.checkentry), but reviewed, it produced the intended result.// @@type bool;identifier check, par;@@-bool check+int check (struct xt_mtchk_param *par) { ... }// Signed-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

ff67e4e4 - netfilter: xt extensions: use pr_ (2)

Fri, 19 Mar 2010 20:08:16 +0000

netfilter: xt extensions: use pr_ (2)Supplement to 1159683ef48469de71dc26f0ee1a9c30d131cf89.Downgrade the log level to INFO for most checkentry messages as theyare, IMO, just an extra information to the -EINVAL code that isreturned as part of a parameter "constraint violation". Leave errorsto real errors, such as being unable to create a LED trigger.Signed-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

be91fd5e - netfilter: xtables: replace custom duprintf with pr_debug

Thu, 18 Mar 2010 01:22:32 +0000

netfilter: xtables: replace custom duprintf with pr_debugSigned-off-by: Jan Engelhardt List of files: /linux-6.15/net/netfilter/xt_esp.c

9b4fce7a - netfilter: xtables: move extension arguments into compound structure (2/6)

Wed, 08 Oct 2008 09:35:18 +0000

netfilter: xtables: move extension arguments into compound structure (2/6)This patch does this for match extensions' checkentry functions.Signed-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/xt_esp.c

f7108a20 - netfilter: xtables: move extension arguments into compound structure (1/6)

Wed, 08 Oct 2008 09:35:18 +0000

netfilter: xtables: move extension arguments into compound structure (1/6)The function signatures for Xtables extensions have grown over time.It involves a lot of typing/replication, and also a bit of stack spaceeven if they are not used. Realize an NFWS2008 idea and pack them intostructs. The skb remains outside of the struct so gcc can continue toapply its optimizations.This patch does this for match extensions' match functions.A few ambiguities have also been addressed. The "offset" parameter forexample has been renamed to "fragoff" (there are so many differentoffsets already) and "protoff" to "thoff" (there is more than just oneprotocol here, so clarify).Signed-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/xt_esp.c

ee999d8b - netfilter: x_tables: use NFPROTO_* in extensions

Wed, 08 Oct 2008 09:35:01 +0000

netfilter: x_tables: use NFPROTO_* in extensionsSigned-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/xt_esp.c

3cf93c96 - [NETFILTER]: annotate xtables targets with const and remove casts

Mon, 14 Apr 2008 07:56:05 +0000

[NETFILTER]: annotate xtables targets with const and remove castsSigned-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy List of files: /linux-6.15/net/netfilter/xt_esp.c

2ae15b64 - [NETFILTER]: Update modules' descriptions

Tue, 15 Jan 2008 07:42:28 +0000

[NETFILTER]: Update modules' descriptionsUpdates the MODULE_DESCRIPTION() tags for all Netfilter modules,actually describing what the module does and not just"netfilter XYZ target".Signed-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

d3c5ee6d - [NETFILTER]: x_tables: consistent and unique symbol names

Wed, 05 Dec 2007 07:24:03 +0000

[NETFILTER]: x_tables: consistent and unique symbol namesGive all Netfilter modules consistent and unique symbol names.Signed-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

9f15c530 - [NETFILTER]: x_tables: mark matches and targets __read_mostly

Sun, 08 Jul 2007 05:22:02 +0000

[NETFILTER]: x_tables: mark matches and targets __read_mostlySigned-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

ccb79bdc - [NETFILTER]: x_tables: switch xt_match->checkentry to bool

Sun, 08 Jul 2007 05:16:00 +0000

[NETFILTER]: x_tables: switch xt_match->checkentry to boolSwitch the return type of match functions to booleanSigned-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

1d93a9cb - [NETFILTER]: x_tables: switch xt_match->match to bool

Sun, 08 Jul 2007 05:15:35 +0000

[NETFILTER]: x_tables: switch xt_match->match to boolSwitch the return type of match functions to booleanSigned-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

cff533ac - [NETFILTER]: x_tables: switch hotdrop to bool

Sun, 08 Jul 2007 05:15:12 +0000

[NETFILTER]: x_tables: switch hotdrop to boolSwitch the "hotdrop" variables to booleanSigned-off-by: Jan Engelhardt Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

efa74165 - [NETFILTER]: x_tables: remove unused size argument to check/destroy functions

Tue, 22 Aug 2006 07:36:37 +0000

[NETFILTER]: x_tables: remove unused size argument to check/destroy functionsThe size is verified by x_tables and isn't needed by the modules anymore.Signed-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c

4470bbc7 - [NETFILTER]: x_tables: make use of mass registation helpers

Tue, 22 Aug 2006 07:34:04 +0000

[NETFILTER]: x_tables: make use of mass registation helpersSigned-off-by: Patrick McHardy Signed-off-by: David S. Miller List of files: /linux-6.15/net/netfilter/xt_esp.c