| commit | 5f48846daf3321f8a1f8aa99cd6173e3980b7a29 | [log] [tgz] |
|---|---|---|
| author | Phil Sutter <phil@nwl.cc> | Fri Oct 02 15:50:56 2020 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Sun Oct 04 21:08:32 2020 +0200 |
| tree | 2c0ef0d3fbf4beaa4374d2857588192575b64a06 | |
| parent | ab6c41eefd46b92e4f5bcdbbc6c1ea39ed148274 [diff] |
netfilter: nf_tables: Enable fast nft_cmp for inverted matches Add a boolean indicating NFT_CMP_NEQ. To include it into the match decision, it is sufficient to XOR it with the data comparison's result. While being at it, store the mask that is calculated during expression init and free the eval routine from having to recalculate it each time. Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>