61 lines
2.1 KiB
Diff
61 lines
2.1 KiB
Diff
From 014b6acbb382f42dd20577fa1ff6e013526a57d5 Mon Sep 17 00:00:00 2001
|
|
From: Phil Sutter <phil@nwl.cc>
|
|
Date: Thu, 20 Dec 2018 16:09:02 +0100
|
|
Subject: [PATCH] nft: Simplify nftnl_rule_list_chain_save()
|
|
|
|
Since there are per table chain caches, The chain list passed to that
|
|
function is comprised of chains belonging to the right table only.
|
|
Therefore the table name check can safely be skipped.
|
|
|
|
Signed-off-by: Phil Sutter <phil@nwl.cc>
|
|
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
|
|
(cherry picked from commit 71f9e474d467dd59582d7a3920eded9613b99000)
|
|
Signed-off-by: Phil Sutter <psutter@redhat.com>
|
|
---
|
|
iptables/nft.c | 10 +++-------
|
|
1 file changed, 3 insertions(+), 7 deletions(-)
|
|
|
|
diff --git a/iptables/nft.c b/iptables/nft.c
|
|
index 7b6fb2b10686d..9d20eb0eac2db 100644
|
|
--- a/iptables/nft.c
|
|
+++ b/iptables/nft.c
|
|
@@ -2381,8 +2381,7 @@ list_save(struct nftnl_rule *r, unsigned int num, unsigned int format)
|
|
|
|
static int
|
|
nftnl_rule_list_chain_save(struct nft_handle *h, const char *chain,
|
|
- const char *table, struct nftnl_chain_list *list,
|
|
- int counters)
|
|
+ struct nftnl_chain_list *list, int counters)
|
|
{
|
|
struct nftnl_chain_list_iter *iter;
|
|
struct nftnl_chain *c;
|
|
@@ -2393,15 +2392,12 @@ nftnl_rule_list_chain_save(struct nft_handle *h, const char *chain,
|
|
|
|
c = nftnl_chain_list_iter_next(iter);
|
|
while (c != NULL) {
|
|
- const char *chain_table =
|
|
- nftnl_chain_get_str(c, NFTNL_CHAIN_TABLE);
|
|
const char *chain_name =
|
|
nftnl_chain_get_str(c, NFTNL_CHAIN_NAME);
|
|
uint32_t policy =
|
|
nftnl_chain_get_u32(c, NFTNL_CHAIN_POLICY);
|
|
|
|
- if (strcmp(table, chain_table) != 0 ||
|
|
- (chain && strcmp(chain, chain_name) != 0))
|
|
+ if (chain && strcmp(chain, chain_name) != 0)
|
|
goto next;
|
|
|
|
/* this is a base chain */
|
|
@@ -2458,7 +2454,7 @@ int nft_rule_list_save(struct nft_handle *h, const char *chain,
|
|
|
|
/* Dump policies and custom chains first */
|
|
if (!rulenum)
|
|
- nftnl_rule_list_chain_save(h, chain, table, list, counters);
|
|
+ nftnl_rule_list_chain_save(h, chain, list, counters);
|
|
|
|
/* Now dump out rules in this table */
|
|
iter = nftnl_chain_list_iter_create(list);
|
|
--
|
|
2.21.0
|
|
|