bridge/netfilter/ebtables.c

28 /* needed for logical [in,out]-dev filtering */
31 /* Each cpu has its own set of counters, so there is no need for write_lock in
51 	/* called when table is needed in the given netns */
132 		const struct net_device *in, const struct net_device *out)
150 	if (NF_INVF(e, EBT_IIN, ebt_dev_check(e->in, in)))
155 	if (in && (p = br_port_get_rcu(in)) != NULL &&
227 		if (ebt_basic_match(point, skb, state->in, state->out))
599 	/* we're only interested in chain starts */
611 	/* these initialisations are depended on later in check_chainloops() */
872 	struct ebt_cl_stack *cl_s = NULL; /* used in the checking for chain loops */
883 	/* make sure chains are ordered after each other in same order
915 	/* get the location of the udc, put them in an array
919 		/* this will get free'd in do_replace()/ebt_register_table()
964 	 *  - the nr of entries in each chain is right
970 	 *    beginning of a chain. This can only occur in chains that
1053 	/* we have the mutex lock, so no danger in reading this pointer */
1078 		/* Silent error, can't fail, new table is already in place */
1102 	/* can be initialized in translate_table() */
1224 	/* fill in newinfo and parse the entries */
1911 	u32 buf_user_offset;	/* read position in userspace buffer */
2115 	/* pull in most part of ebt_entry, it does not need to be changed. */
2192 /* repl->entries_size is the size of the ebt_entry blob in userspace.
2193  * It might need more memory when copied to a 64 bit kernel in case
2262 		/* try real handler in case userland supplied needed padding */
2364 	/* try real handler in case userland supplied needed padding */
2421 		/* try real handler first in case of userland-side padding.
2422 		 * in case we are dealing with an 'ordinary' 32 bit binary
2456 	/* try real handler in case userland supplied needed padding */