net/netfilter/nfnetlink_queue.c

234 	unsigned int verdict, i = *index;
239 		verdict = nf_hook_entry_hookfn(hook, skb, state);
240 		if (verdict != NF_ACCEPT) {
242 			if (verdict != NF_REPEAT)
243 				return verdict;
310 static void nf_reinject(struct nf_queue_entry *entry, unsigned int verdict)
335 	if (verdict == NF_REPEAT)
336 		verdict = nf_hook_entry_hookfn(hook_entry, skb, &entry->state);
338 	if (verdict == NF_ACCEPT) {
340 			verdict = NF_DROP;
343 	if (verdict == NF_ACCEPT) {
346 		verdict = nf_iterate(skb, &entry->state, hooks, &i);
349 	switch (verdict & NF_VERDICT_MASK) {
357 		err = nf_queue(skb, &entry->state, i, verdict);
370 static void nfqnl_reinject(struct nf_queue_entry *entry, unsigned int verdict)
374 	if (verdict == NF_ACCEPT ||
375 	    verdict == NF_REPEAT ||
376 	    verdict == NF_STOP) {
377 		unsigned int ct_verdict = verdict;
387 			/* follow userspace verdict, could be REPEAT */
393 			verdict = ct_verdict & NF_VERDICT_MASK;
397 	nf_reinject(entry, verdict);
1236 	unsigned int verdict;
1242 	verdict = ntohl(vhdr->verdict) & NF_VERDICT_MASK;
1243 	if (verdict > NF_MAX_VERDICT || verdict == NF_STOLEN)
1262 	unsigned int verdict, maxid;
1274 	verdict = ntohl(vhdr->verdict);
1298 		nfqnl_reinject(entry, verdict);
1376 	unsigned int verdict;
1388 	verdict = ntohl(vhdr->verdict);
1415 			verdict = NF_DROP;
1427 	nfqnl_reinject(entry, verdict);