forked from luck/tmp_suning_uos_patched
netfilter: netns nf_conntrack: unregister helper in every netns
Signed-off-by: Alexey Dobriyan <adobriyan@gmail.com> Signed-off-by: Patrick McHardy <kaber@trash.net>
This commit is contained in:
parent
b76a461f11
commit
6804793767
@ -123,13 +123,40 @@ int nf_conntrack_helper_register(struct nf_conntrack_helper *me)
|
|||||||
}
|
}
|
||||||
EXPORT_SYMBOL_GPL(nf_conntrack_helper_register);
|
EXPORT_SYMBOL_GPL(nf_conntrack_helper_register);
|
||||||
|
|
||||||
void nf_conntrack_helper_unregister(struct nf_conntrack_helper *me)
|
static void __nf_conntrack_helper_unregister(struct nf_conntrack_helper *me,
|
||||||
|
struct net *net)
|
||||||
{
|
{
|
||||||
struct nf_conntrack_tuple_hash *h;
|
struct nf_conntrack_tuple_hash *h;
|
||||||
struct nf_conntrack_expect *exp;
|
struct nf_conntrack_expect *exp;
|
||||||
const struct hlist_node *n, *next;
|
const struct hlist_node *n, *next;
|
||||||
unsigned int i;
|
unsigned int i;
|
||||||
|
|
||||||
|
/* Get rid of expectations */
|
||||||
|
for (i = 0; i < nf_ct_expect_hsize; i++) {
|
||||||
|
hlist_for_each_entry_safe(exp, n, next,
|
||||||
|
&net->ct.expect_hash[i], hnode) {
|
||||||
|
struct nf_conn_help *help = nfct_help(exp->master);
|
||||||
|
if ((help->helper == me || exp->helper == me) &&
|
||||||
|
del_timer(&exp->timeout)) {
|
||||||
|
nf_ct_unlink_expect(exp);
|
||||||
|
nf_ct_expect_put(exp);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
/* Get rid of expecteds, set helpers to NULL. */
|
||||||
|
hlist_for_each_entry(h, n, &net->ct.unconfirmed, hnode)
|
||||||
|
unhelp(h, me);
|
||||||
|
for (i = 0; i < nf_conntrack_htable_size; i++) {
|
||||||
|
hlist_for_each_entry(h, n, &net->ct.hash[i], hnode)
|
||||||
|
unhelp(h, me);
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
void nf_conntrack_helper_unregister(struct nf_conntrack_helper *me)
|
||||||
|
{
|
||||||
|
struct net *net;
|
||||||
|
|
||||||
mutex_lock(&nf_ct_helper_mutex);
|
mutex_lock(&nf_ct_helper_mutex);
|
||||||
hlist_del_rcu(&me->hnode);
|
hlist_del_rcu(&me->hnode);
|
||||||
nf_ct_helper_count--;
|
nf_ct_helper_count--;
|
||||||
@ -141,27 +168,8 @@ void nf_conntrack_helper_unregister(struct nf_conntrack_helper *me)
|
|||||||
synchronize_rcu();
|
synchronize_rcu();
|
||||||
|
|
||||||
spin_lock_bh(&nf_conntrack_lock);
|
spin_lock_bh(&nf_conntrack_lock);
|
||||||
|
for_each_net(net)
|
||||||
/* Get rid of expectations */
|
__nf_conntrack_helper_unregister(me, net);
|
||||||
for (i = 0; i < nf_ct_expect_hsize; i++) {
|
|
||||||
hlist_for_each_entry_safe(exp, n, next,
|
|
||||||
&init_net.ct.expect_hash[i], hnode) {
|
|
||||||
struct nf_conn_help *help = nfct_help(exp->master);
|
|
||||||
if ((help->helper == me || exp->helper == me) &&
|
|
||||||
del_timer(&exp->timeout)) {
|
|
||||||
nf_ct_unlink_expect(exp);
|
|
||||||
nf_ct_expect_put(exp);
|
|
||||||
}
|
|
||||||
}
|
|
||||||
}
|
|
||||||
|
|
||||||
/* Get rid of expecteds, set helpers to NULL. */
|
|
||||||
hlist_for_each_entry(h, n, &init_net.ct.unconfirmed, hnode)
|
|
||||||
unhelp(h, me);
|
|
||||||
for (i = 0; i < nf_conntrack_htable_size; i++) {
|
|
||||||
hlist_for_each_entry(h, n, &init_net.ct.hash[i], hnode)
|
|
||||||
unhelp(h, me);
|
|
||||||
}
|
|
||||||
spin_unlock_bh(&nf_conntrack_lock);
|
spin_unlock_bh(&nf_conntrack_lock);
|
||||||
}
|
}
|
||||||
EXPORT_SYMBOL_GPL(nf_conntrack_helper_unregister);
|
EXPORT_SYMBOL_GPL(nf_conntrack_helper_unregister);
|
||||||
|
Loading…
Reference in New Issue
Block a user