Re: [PATCH] Last vestiges of NFC

[Peter Riley <Peter.Riley@hotpop.com>]

[-- Attachment #1: Type: text/plain, Size: 527 bytes --]

Peter Riley wrote:
> 
> p-o-m-ng probably needs patching now too.  I'll take a look...

A quick check found four occurrences.
These two are in old kernel code.

patchlets/TARPIT/linux/net/ipv4/netfilter/ipt_TARPIT.c
-	nskb->nfcache = 0;

patchlets/IPV4OPTSSTRIP/linux/net/ipv4/netfilter/ipt_IPV4OPTSSTRIP.c
-	skb->nfcache |= NFC_ALTERED;


But these two are in match extensions.  See patch.

patchlets/ipv4options/iptables/extensions/libipt_ipv4options.c
patchlets/u32/iptables/extensions/libipt_u32.c


Best Regards,
Peter




[-- Attachment #2: pom-ng-nfcache-enema2.patch --]
[-- Type: text/plain, Size: 1107 bytes --]

Index: patchlets/ipv4options/iptables/extensions/libipt_ipv4options.c
===================================================================
--- patchlets/ipv4options/iptables/extensions/libipt_ipv4options.c	(revision 7013)
+++ patchlets/ipv4options/iptables/extensions/libipt_ipv4options.c	(working copy)
@@ -40,7 +40,6 @@
 static int
 parse(int c, char **argv, int invert, unsigned int *flags,
       const struct ipt_entry *entry,
-      unsigned int *nfcache,
       struct ipt_entry_match **match)
 {
 	struct ipt_ipv4options_info *info = (struct ipt_ipv4options_info *)(*match)->data;
Index: patchlets/u32/iptables/extensions/libipt_u32.c
===================================================================
--- patchlets/u32/iptables/extensions/libipt_u32.c	(revision 7013)
+++ patchlets/u32/iptables/extensions/libipt_u32.c	(working copy)
@@ -93,7 +93,6 @@
 static int
 parse(int c, char **argv, int invert, unsigned int *flags,
       const struct ipt_entry *entry,
-      unsigned int *nfcache,
       struct ipt_entry_match **match)
 {
 	struct ipt_u32 *data = (struct ipt_u32 *)(*match)->data;