| commit | 0150ffbac78318549bf4818ddee3481d87100928 | [log] [tgz] |
|---|---|---|
| author | Florian Westphal <fw@strlen.de> | Wed Sep 12 15:19:10 2018 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Thu Sep 20 18:02:42 2018 +0200 |
| tree | 99435093499e13fa60cdef49b4044c6642b88828 | |
| parent | 83d213fd9d1a56108584cd812333462caa39a747 [diff] |
netfilter: conntrack: avoid using ->error callback if possible The error() handler gets called before allocating or looking up a connection tracking entry. We can instead use direct calls from the ->packet() handlers which get invoked for every packet anyway. Only exceptions are icmp and icmpv6, these two special cases will be handled in the next patch. Signed-off-by: Florian Westphal <fw@strlen.de> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>