]> git.proxmox.com Git - mirror_ubuntu-kernels.git/commit
netfilter: flowtable: consolidate skb_try_make_writable() call
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 17 Mar 2021 14:53:09 +0000 (15:53 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 17 Mar 2021 23:43:59 +0000 (00:43 +0100)
commit2fc11745c3ffa324643c1e6d8cf8f5273d9f9571
tree1e9c1580e2b8eabeb2946ad9e81a29da365f02e3
parentd4a96be65423296e42091b0b79973b8d446e7798
netfilter: flowtable: consolidate skb_try_make_writable() call

Fetch the layer 4 header size to be mangled by NAT when building the
tuple, then use it to make writable the network and the transport
headers. After this update, the NAT routines now assumes that the skbuff
area is writable. Do the pointer refetch only after the single
skb_try_make_writable() call.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_core.c
net/netfilter/nf_flow_table_ip.c