Re: 7/7 [NETFILTER]: Implement NFPROTO_UNSPEC as a wildcard for extensions

[Patrick McHardy <kaber@trash.net>]

[-- Attachment #1: Type: text/plain, Size: 600 bytes --]

Jan Engelhardt wrote:
> [NETFILTER]: Implement NFPROTO_UNSPEC as a wildcard for extensions
> 
> When a match or target is looked up using xt_find_{match,target},
> Xtables will also search the NFPROTO_UNSPEC module list. This allows
> for protocol-independent extensions (like xt_time) to be reused from
> other components (e.g. arptables, ebtables).
> 
> Extensions that take different codepaths depending on match->family
> or target->family of course cannot use NFPROTO_UNSPEC within the
> registration structure (e.g. xt_pkttype).

Nice work. You should have compile tested it though.

Applied.


[-- Attachment #2: x --]
[-- Type: text/plain, Size: 484 bytes --]

diff --git a/net/netfilter/xt_string.c b/net/netfilter/xt_string.c
index 9365a49..18d8884 100644
--- a/net/netfilter/xt_string.c
+++ b/net/netfilter/xt_string.c
@@ -81,7 +81,7 @@ static void string_mt_destroy(const struct xt_match *match, void *matchinfo)
 	textsearch_destroy(STRING_TEXT_PRIV(matchinfo)->config);
 }
 
-static struct xt_match string_mt_reg[] __read_mostly = {
+static struct xt_match xt_string_mt_reg[] __read_mostly = {
 	{
 		.name 		= "string",
 		.revision	= 0,