netfilter: move checksum indirection to struct nf_ipv6_ops
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 27 Nov 2017 20:55:14 +0000 (21:55 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 8 Jan 2018 17:01:23 +0000 (18:01 +0100)
commitef71fe27ec2f1607e38af160ab261a8d8ef8e121
treea1ca3ce2d168dc58db17fd0c4f1beefe36685f0c
parent625c556118f3c2fd28bb8ef6da18c53bd4037be4
netfilter: move checksum indirection to struct nf_ipv6_ops

We cannot make a direct call to nf_ip6_checksum() because that would
result in autoloading the 'ipv6' module because of symbol dependencies.
Therefore, define checksum indirection in nf_ipv6_ops where this really
belongs to.

For IPv4, we can indeed make a direct function call, which is faster,
given IPv4 is built-in in the networking code by default. Still,
CONFIG_INET=n and CONFIG_NETFILTER=y is possible, so define empty inline
stub for IPv4 in such case.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter.h
include/linux/netfilter_ipv4.h
include/linux/netfilter_ipv6.h
net/bridge/netfilter/nf_tables_bridge.c
net/ipv4/netfilter.c
net/ipv6/netfilter.c
net/netfilter/Makefile
net/netfilter/utils.c [new file with mode: 0644]