net/netfilter/nf_conntrack_bpf.c

255 	struct nf_conn *nfct;
257 	nfct = __bpf_nf_ct_alloc_entry(dev_net(ctx->rxq->dev), bpf_tuple, tuple__sz,
259 	if (IS_ERR(nfct)) {
261 			opts->error = PTR_ERR(nfct);
265 	return (struct nf_conn___init *)nfct;
290 	struct nf_conn *nfct;
293 	nfct = __bpf_nf_ct_lookup(caller_net, bpf_tuple, tuple__sz, opts, opts__sz);
294 	if (IS_ERR(nfct)) {
296 			opts->error = PTR_ERR(nfct);
299 	return nfct;
322 	struct nf_conn *nfct;
326 	nfct = __bpf_nf_ct_alloc_entry(net, bpf_tuple, tuple__sz, opts, opts__sz, 10);
327 	if (IS_ERR(nfct)) {
329 			opts->error = PTR_ERR(nfct);
333 	return (struct nf_conn___init *)nfct;
358 	struct nf_conn *nfct;
361 	nfct = __bpf_nf_ct_lookup(caller_net, bpf_tuple, tuple__sz, opts, opts__sz);
362 	if (IS_ERR(nfct)) {
364 			opts->error = PTR_ERR(nfct);
367 	return nfct;
374  * @nfct	 - Pointer to referenced nf_conn___init object, obtained
379 	struct nf_conn *nfct = (struct nf_conn *)nfct_i;
382 	if (!nf_ct_is_confirmed(nfct))
383 		nfct->timeout += nfct_time_stamp;
384 	nfct->status |= IPS_CONFIRMED;
385 	err = nf_conntrack_hash_check_insert(nfct);
387 		nf_conntrack_free(nfct);
390 	return nfct;
403 __bpf_kfunc void bpf_ct_release(struct nf_conn *nfct)
405 	nf_ct_put(nfct);
414  * @nfct	 - Pointer to referenced nf_conn object, obtained using
418 __bpf_kfunc void bpf_ct_set_timeout(struct nf_conn___init *nfct, u32 timeout)
420 	__nf_ct_set_timeout((struct nf_conn *)nfct, msecs_to_jiffies(timeout));
429  * @nfct	 - Pointer to referenced nf_conn object, obtained using
433 __bpf_kfunc int bpf_ct_change_timeout(struct nf_conn *nfct, u32 timeout)
435 	return __nf_ct_change_timeout(nfct, msecs_to_jiffies(timeout));
444  * @nfct	 - Pointer to referenced nf_conn object, obtained using
448 __bpf_kfunc int bpf_ct_set_status(const struct nf_conn___init *nfct, u32 status)
450 	return nf_ct_change_status_common((struct nf_conn *)nfct, status);
459  * @nfct	 - Pointer to referenced nf_conn object, obtained using
463 __bpf_kfunc int bpf_ct_change_status(struct nf_conn *nfct, u32 status)
465 	return nf_ct_change_status_common(nfct, status);