]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: conntrack: simplify early_drop
authorFlorian Westphal <fw@strlen.de>
Sun, 3 Jul 2016 18:44:01 +0000 (20:44 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 11 Jul 2016 09:46:22 +0000 (11:46 +0200)
commita87ff1bff0dc7b30810f7da87bf5151b690b7707
treea08105a2e0e42d5fd885cbc5e55bc9b6c86c1aea
parent9da73ca2785873680af04c2f25b6184f78dbfdae
netfilter: conntrack: simplify early_drop

We don't need to acquire the bucket lock during early drop, we can
use lockless traveral just like ____nf_conntrack_find.

The timer deletion serves as synchronization point, if another cpu
attempts to evict same entry, only one will succeed with timer deletion.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_conntrack.h
net/netfilter/nf_conntrack_core.c