From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.4.0 (2014-02-07) on aws-us-west-2-korg-lkml-1.web.codeaurora.org X-Spam-Level: X-Spam-Status: No, score=-9.0 required=3.0 tests=HEADER_FROM_DIFFERENT_DOMAINS, INCLUDES_PATCH,MAILING_LIST_MULTI,SIGNED_OFF_BY,SPF_PASS,URIBL_BLOCKED, USER_AGENT_GIT autolearn=ham autolearn_force=no version=3.4.0 Received: from mail.kernel.org (mail.kernel.org [198.145.29.99]) by smtp.lore.kernel.org (Postfix) with ESMTP id 011FBC43387 for ; Wed, 2 Jan 2019 20:42:58 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id CD0C220874 for ; Wed, 2 Jan 2019 20:42:57 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1727557AbfABUm5 (ORCPT ); Wed, 2 Jan 2019 15:42:57 -0500 Received: from youngberry.canonical.com ([91.189.89.112]:43800 "EHLO youngberry.canonical.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1727548AbfABUm4 (ORCPT ); Wed, 2 Jan 2019 15:42:56 -0500 Received: from mail-qt1-f199.google.com ([209.85.160.199]) by youngberry.canonical.com with esmtps (TLS1.0:RSA_AES_128_CBC_SHA1:16) (Exim 4.76) (envelope-from ) id 1genLq-0002bG-I9 for stable@vger.kernel.org; Wed, 02 Jan 2019 20:42:54 +0000 Received: by mail-qt1-f199.google.com with SMTP id w1so39517390qta.12 for ; Wed, 02 Jan 2019 12:42:54 -0800 (PST) X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:date:message-id:in-reply-to :references; bh=7hsB4K/KXe1k3QlsGyVqMxbvu2djv1itGQLn7RbJ1+Q=; b=R2ZbXPKdbqzWJuYS9N3Z/C5OC4JCj/ZPAR8yGUX8zC0C22jdKTfqgFbnNH97A0EU3/ Wv0NKqDL7kFWksReKbdXdjj40IVBYtQgT5XnjogfwHsn2tCjzpU5EjRQOwgiBFJBse9j B3Itui5CEvhG+IJvob/B90Db2V8OaM6L6zxIlVQB/3yXJ1iocluyuMQ/hW+4kyXBZmXD n1ypUv67mMmZnCTXT5CNVfqxdaT/KABNwJCD1B53L+l3UgvEcmG3CHjiMo7LRUwllh+n k9C0ZSqgaznk77xLDzudpLE4oFtZnvERsae2g2ZmiY0V8VsWH/25cZwDKBgxiFrDIwxR 5BkA== X-Gm-Message-State: AJcUukd+APE/RG1gBj7eHqQJf8AwgsMJE9V4JPAqhWWjV4z8pS4CV2qR cl+vp3iLBC/X/MAsUfehgcl8F/eOugjMYPnRg400FubYkwIGEAB2w1ybOUSad+7xhLpBa/Fco+m 5L05aE7NP9olvNX/E11N/fUkEV9WkfQTWpg== X-Received: by 2002:a0c:aee1:: with SMTP id n33mr43836989qvd.169.1546461773611; Wed, 02 Jan 2019 12:42:53 -0800 (PST) X-Google-Smtp-Source: ALg8bN6wVP7agKnkx64dMcH7Onb0oAAlZWLmm0AML+djlkN1rzPk0QITqgyVxutpKdVMvcclEZFRIw== X-Received: by 2002:a0c:aee1:: with SMTP id n33mr43836985qvd.169.1546461773461; Wed, 02 Jan 2019 12:42:53 -0800 (PST) Received: from localhost.localdomain ([179.159.56.118]) by smtp.gmail.com with ESMTPSA id e17sm26679381qte.12.2019.01.02.12.42.50 (version=TLS1_2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Wed, 02 Jan 2019 12:42:53 -0800 (PST) From: Mauricio Faria de Oliveira To: stable@vger.kernel.org, netdev@vger.kernel.org, Florian Westphal Cc: Alakesh Haloi , nivedita.singhvi@canonical.com, Pablo Neira Ayuso , Jozsef Kadlecsik , "David S. Miller" , Yi-Hung Wei Subject: [PATCH v2 4.14 1/5] netfilter: xt_connlimit: don't store address in the conn nodes Date: Wed, 2 Jan 2019 18:42:00 -0200 Message-Id: <20190102204204.12389-2-mfo@canonical.com> X-Mailer: git-send-email 2.17.1 In-Reply-To: <20190102204204.12389-1-mfo@canonical.com> References: <20190102204204.12389-1-mfo@canonical.com> Sender: stable-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: stable@vger.kernel.org From: Florian Westphal commit ce49480dba8666cba0106e8e31a942c9ce4c438a upstream. Only stored, never read. This is a leftover from commit 7d08487777c8 ("netfilter: connlimit: use rbtree for per-host conntrack obj storage"), which added the rbtree node struct that stores the address instead. Signed-off-by: Florian Westphal Signed-off-by: Pablo Neira Ayuso [mfo: backport: refresh context lines and use older symbol/file names: - nf_conncount.c -> xt_connlimit.c. - nf_conncount_rb -> xt_connlimit_rb - nf_conncount_tuple -> xt_connlimit_conn - additionally, remove the add_hlist() 'addr' parameter that isn't used and removed later upstream with commit 625c556118f3 ("netfilter: connlimit: split xt_connlimit into front and backend") in the rename from 'xt_connlimit.c' to 'nf_conncount.c', a big refactor, so do it here, while still here in this related patch.] Signed-off-by: Mauricio Faria de Oliveira --- net/netfilter/xt_connlimit.c | 8 ++------ 1 file changed, 2 insertions(+), 6 deletions(-) diff --git a/net/netfilter/xt_connlimit.c b/net/netfilter/xt_connlimit.c index ffa8eec..79d4151 100644 --- a/net/netfilter/xt_connlimit.c +++ b/net/netfilter/xt_connlimit.c @@ -46,7 +46,6 @@ struct xt_connlimit_conn { struct hlist_node node; struct nf_conntrack_tuple tuple; - union nf_inet_addr addr; }; struct xt_connlimit_rb { @@ -116,8 +115,7 @@ same_source_net(const union nf_inet_addr *addr, } static bool add_hlist(struct hlist_head *head, - const struct nf_conntrack_tuple *tuple, - const union nf_inet_addr *addr) + const struct nf_conntrack_tuple *tuple) { struct xt_connlimit_conn *conn; @@ -125,7 +123,6 @@ static bool add_hlist(struct hlist_head *head, if (conn == NULL) return false; conn->tuple = *tuple; - conn->addr = *addr; hlist_add_head(&conn->node, head); return true; } @@ -231,7 +228,7 @@ count_tree(struct net *net, struct rb_root *root, if (!addit) return count; - if (!add_hlist(&rbconn->hhead, tuple, addr)) + if (!add_hlist(&rbconn->hhead, tuple)) return 0; /* hotdrop */ return count + 1; @@ -270,7 +267,6 @@ count_tree(struct net *net, struct rb_root *root, } conn->tuple = *tuple; - conn->addr = *addr; rbconn->addr = *addr; INIT_HLIST_HEAD(&rbconn->hhead); -- 2.7.4