c80f10bc97
Instead of removing a empty list node that might be reintroduced soon
thereafter, tentatively place the empty list node on the list passed to
tree_nodes_free(), then re-check if the list is empty again before erasing
it from the tree.
[ Florian: rebase on top of pending nf_conncount fixes ]
Fixes: 5c789e131c ("netfilter: nf_conncount: Add list lock and gc worker, and RCU for init tree search")
Reviewed-by: Shawn Bohrer <sbohrer@cloudflare.com>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
37 lines
1 KiB
C
37 lines
1 KiB
C
#ifndef _NF_CONNTRACK_COUNT_H
|
|
#define _NF_CONNTRACK_COUNT_H
|
|
|
|
#include <linux/list.h>
|
|
|
|
struct nf_conncount_data;
|
|
|
|
struct nf_conncount_list {
|
|
spinlock_t list_lock;
|
|
struct list_head head; /* connections with the same filtering key */
|
|
unsigned int count; /* length of list */
|
|
};
|
|
|
|
struct nf_conncount_data *nf_conncount_init(struct net *net, unsigned int family,
|
|
unsigned int keylen);
|
|
void nf_conncount_destroy(struct net *net, unsigned int family,
|
|
struct nf_conncount_data *data);
|
|
|
|
unsigned int nf_conncount_count(struct net *net,
|
|
struct nf_conncount_data *data,
|
|
const u32 *key,
|
|
const struct nf_conntrack_tuple *tuple,
|
|
const struct nf_conntrack_zone *zone);
|
|
|
|
int nf_conncount_add(struct net *net, struct nf_conncount_list *list,
|
|
const struct nf_conntrack_tuple *tuple,
|
|
const struct nf_conntrack_zone *zone);
|
|
|
|
void nf_conncount_list_init(struct nf_conncount_list *list);
|
|
|
|
bool nf_conncount_gc_list(struct net *net,
|
|
struct nf_conncount_list *list);
|
|
|
|
void nf_conncount_cache_free(struct nf_conncount_list *list);
|
|
|
|
#endif
|