]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: conntrack: fix IPV6=n builds
authorFlorian Westphal <fw@strlen.de>
Mon, 21 Jan 2019 13:46:47 +0000 (14:46 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 22 Jan 2019 22:28:24 +0000 (23:28 +0100)
commit2a3acde2cce02b18e08163102ce33a884d8992ae
tree79c941085f96261fef9d6d7e8c4a44ed9c03e7c8
parente0eb6f0bc602552cfcd7f93ebb417ec39b1b8f38
netfilter: conntrack: fix IPV6=n builds

Stephen Rothwell reports:
 After merging the netfilter-next tree, today's linux-next build
 (powerpc ppc64_defconfig) failed like this:

 ERROR: "nf_conntrack_invert_icmpv6_tuple" [nf_conntrack.ko] undefined!
 ERROR: "nf_conntrack_icmpv6_packet" [nf_conntrack.ko] undefined!
 ERROR: "nf_conntrack_icmpv6_init_net" [nf_conntrack.ko] undefined!
 ERROR: "icmpv6_pkt_to_tuple" [nf_conntrack.ko] undefined!
 ERROR: "nf_ct_gre_keymap_destroy" [nf_conntrack.ko] undefined!

icmpv6 related errors are due to lack of IS_ENABLED(CONFIG_IPV6) (no
icmpv6 support is builtin if kernel has CONFIG_IPV6=n), the
nf_ct_gre_keymap_destroy error is due to lack of PROTO_GRE check.

Fixes: d10eef833847 ("netfilter: conntrack: handle builtin l4proto packet functions via direct calls")
Fixes: cf1749445075 ("netfilter: conntrack: handle icmp pkt_to_tuple helper via direct calls")
Fixes: 83704e84c18e ("netfilter: conntrack: remove invert_tuple callback")
Fixes: 2f361aab17ca ("netfilter: conntrack: remove l4proto init and get_net callbacks")
Fixes: be566cf66b49 ("netfilter: conntrack: remove l4proto destroy hook")
Reported-by: Stephen Rothwell <sfr@canb.auug.org.au>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_conntrack_core.c
net/netfilter/nf_conntrack_proto.c