netfilter: nf_tables: pass set description to ->privsize

The new non-resizable hashtable variant needs this to calculate the
size of the bucket array.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h
index f27012098846eee17887ba9d648a5db566b2bacf..bd5be0d691d51dfe7453db5a9fa6adf225b361dc 100644 (file)
--- a/include/net/netfilter/nf_tables.h
+++ b/include/net/netfilter/nf_tables.h
@@ -351,7 +351,8 @@ struct nft_set_ops {
                                                struct nft_set *set,
                                                struct nft_set_iter *iter);
 
-       unsigned int                    (*privsize)(const struct nlattr * const nla[]);
+       unsigned int                    (*privsize)(const struct nlattr * const nla[],
+                                                   const struct nft_set_desc *desc);
        bool                            (*estimate)(const struct nft_set_desc *desc,
                                                    u32 features,
                                                    struct nft_set_estimate *est);

diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
index c0b2b19607e11edb9e9fd6f67b728fc25c451dc4..2969016d8cad032834f2b5eded94347792229078 100644 (file)
--- a/net/netfilter/nf_tables_api.c
+++ b/net/netfilter/nf_tables_api.c
@@ -3052,7 +3052,7 @@ static int nf_tables_newset(struct net *net, struct sock *nlsk,
 
        size = 0;
        if (ops->privsize != NULL)
-               size = ops->privsize(nla);
+               size = ops->privsize(nla, &desc);
 
        err = -ENOMEM;
        set = kzalloc(sizeof(*set) + size + udlen, GFP_KERNEL);

diff --git a/net/netfilter/nft_set_bitmap.c b/net/netfilter/nft_set_bitmap.c
index 87d17691278fa5193c2ec2b8fe240455d5df809d..734989c40579ef4ac6a36f770517a89202fa6b8b 100644 (file)
--- a/net/netfilter/nft_set_bitmap.c
+++ b/net/netfilter/nft_set_bitmap.c
@@ -236,7 +236,8 @@ static inline u32 nft_bitmap_total_size(u32 klen)
        return sizeof(struct nft_bitmap) + nft_bitmap_size(klen);
 }
 
-static unsigned int nft_bitmap_privsize(const struct nlattr * const nla[])
+static unsigned int nft_bitmap_privsize(const struct nlattr * const nla[],
+                                       const struct nft_set_desc *desc)
 {
        u32 klen = ntohl(nla_get_be32(nla[NFTA_SET_KEY_LEN]));
 

diff --git a/net/netfilter/nft_set_hash.c b/net/netfilter/nft_set_hash.c
index 4ba0717408d979e32522128e05e49623426405b1..455a11ce8cd06be4b11fa5ead67b12a21cecea61 100644 (file)
--- a/net/netfilter/nft_set_hash.c
+++ b/net/netfilter/nft_set_hash.c
@@ -321,7 +321,8 @@ schedule:
                           nft_set_gc_interval(set));
 }
 
-static unsigned int nft_rhash_privsize(const struct nlattr * const nla[])
+static unsigned int nft_rhash_privsize(const struct nlattr * const nla[],
+                                      const struct nft_set_desc *desc)
 {
        return sizeof(struct nft_rhash);
 }

diff --git a/net/netfilter/nft_set_rbtree.c b/net/netfilter/nft_set_rbtree.c
index 29d41d3783392c304788c5a3f64d7a4ea072a7de..491e805d3ca27061705b36f4cc2faf04dc564216 100644 (file)
--- a/net/netfilter/nft_set_rbtree.c
+++ b/net/netfilter/nft_set_rbtree.c
@@ -251,7 +251,8 @@ cont:
        read_unlock_bh(&priv->lock);
 }
 
-static unsigned int nft_rbtree_privsize(const struct nlattr * const nla[])
+static unsigned int nft_rbtree_privsize(const struct nlattr * const nla[],
+                                       const struct nft_set_desc *desc)
 {
        return sizeof(struct nft_rbtree);
 }