Home
last modified time | relevance | path

Searched refs:verdict (Results 1 – 52 of 52) sorted by relevance

/linux-4.4.14/net/netfilter/
Dnf_queue.c167 void nf_reinject(struct nf_queue_entry *entry, unsigned int verdict) in nf_reinject() argument
177 if (verdict == NF_REPEAT) in nf_reinject()
178 verdict = elem->hook(elem->priv, skb, &entry->state); in nf_reinject()
180 if (verdict == NF_ACCEPT) { in nf_reinject()
183 verdict = NF_DROP; in nf_reinject()
188 if (verdict == NF_ACCEPT) { in nf_reinject()
190 verdict = nf_iterate(entry->state.hook_list, in nf_reinject()
194 switch (verdict & NF_VERDICT_MASK) { in nf_reinject()
203 verdict >> NF_VERDICT_QBITS); in nf_reinject()
206 (verdict & NF_VERDICT_FLAG_QUEUE_BYPASS)) in nf_reinject()
Dcore.c261 unsigned int verdict; in nf_iterate() local
274 verdict = (*elemp)->hook((*elemp)->priv, skb, state); in nf_iterate()
275 if (verdict != NF_ACCEPT) { in nf_iterate()
277 if (unlikely((verdict & NF_VERDICT_MASK) in nf_iterate()
284 if (verdict != NF_REPEAT) in nf_iterate()
285 return verdict; in nf_iterate()
298 unsigned int verdict; in nf_hook_slow() local
306 verdict = nf_iterate(state->hook_list, skb, state, &elem); in nf_hook_slow()
307 if (verdict == NF_ACCEPT || verdict == NF_STOP) { in nf_hook_slow()
309 } else if ((verdict & NF_VERDICT_MASK) == NF_DROP) { in nf_hook_slow()
[all …]
Dnf_tables_core.c73 regs->verdict.code = NFT_BREAK; in nft_cmp_fast_eval()
129 regs.verdict.code = NFT_CONTINUE; in nft_do_chain()
145 if (regs.verdict.code != NFT_CONTINUE) in nft_do_chain()
149 switch (regs.verdict.code) { in nft_do_chain()
151 regs.verdict.code = NFT_CONTINUE; in nft_do_chain()
160 switch (regs.verdict.code & NF_VERDICT_MASK) { in nft_do_chain()
165 return regs.verdict.code; in nft_do_chain()
168 switch (regs.verdict.code) { in nft_do_chain()
179 chain = regs.verdict.chain; in nft_do_chain()
Dnfnetlink_queue.c943 unsigned int verdict; in verdicthdr_get() local
949 verdict = ntohl(vhdr->verdict) & NF_VERDICT_MASK; in verdicthdr_get()
950 if (verdict > NF_MAX_VERDICT || verdict == NF_STOLEN) in verdicthdr_get()
967 unsigned int verdict, maxid; in nfqnl_recv_verdict_batch() local
985 verdict = ntohl(vhdr->verdict); in nfqnl_recv_verdict_batch()
1005 nf_reinject(entry, verdict); in nfqnl_recv_verdict_batch()
1042 unsigned int verdict; in nfqnl_recv_verdict() local
1062 verdict = ntohl(vhdr->verdict); in nfqnl_recv_verdict()
1082 verdict = NF_DROP; in nfqnl_recv_verdict()
1091 nf_reinject(entry, verdict); in nfqnl_recv_verdict()
Dnft_compat.c75 regs->verdict.code = NFT_CONTINUE; in nft_target_eval_xt()
78 regs->verdict.code = ret; in nft_target_eval_xt()
101 regs->verdict.code = NF_ACCEPT; in nft_target_eval_bridge()
104 regs->verdict.code = NF_DROP; in nft_target_eval_bridge()
107 regs->verdict.code = NFT_CONTINUE; in nft_target_eval_bridge()
110 regs->verdict.code = NFT_RETURN; in nft_target_eval_bridge()
113 regs->verdict.code = ret; in nft_target_eval_bridge()
321 regs->verdict.code = NF_DROP; in nft_match_eval()
327 regs->verdict.code = NFT_CONTINUE; in nft_match_eval()
330 regs->verdict.code = NFT_BREAK; in nft_match_eval()
Dnft_limit.c115 regs->verdict.code = NFT_BREAK; in nft_limit_pkts_eval()
164 regs->verdict.code = NFT_BREAK; in nft_limit_pkt_bytes_eval()
Dnft_queue.c54 regs->verdict.code = ret; in nft_queue_eval()
Dnft_reject_inet.c61 regs->verdict.code = NF_DROP; in nft_reject_inet_eval()
Dnft_exthdr.c47 regs->verdict.code = NFT_BREAK; in nft_exthdr_eval()
Dnf_tables_api.c4179 switch (data->verdict.code) { in nf_tables_loop_check_setelem()
4182 return nf_tables_check_loops(ctx, data->verdict.chain); in nf_tables_loop_check_setelem()
4215 switch (data->verdict.code) { in nf_tables_check_loops()
4219 data->verdict.chain); in nf_tables_check_loops()
4346 (data->verdict.code == NFT_GOTO || in nft_validate_register_store()
4347 data->verdict.code == NFT_JUMP)) { in nft_validate_register_store()
4348 err = nf_tables_check_loops(ctx, data->verdict.chain); in nft_validate_register_store()
4353 data->verdict.chain->level) { in nft_validate_register_store()
4356 data->verdict.chain->level = ctx->chain->level + 1; in nft_validate_register_store()
4396 data->verdict.code = ntohl(nla_get_be32(tb[NFTA_VERDICT_CODE])); in nft_verdict_init()
[all …]
Dnft_lookup.c42 regs->verdict.code = NFT_BREAK; in nft_lookup_eval()
Dnft_payload.c106 regs->verdict.code = NFT_BREAK; in nft_payload_eval()
Dnft_cmp.c62 regs->verdict.code = NFT_BREAK; in nft_cmp_eval()
Dnft_nat.c77 regs->verdict.code = nf_nat_setup_info(ct, &range, priv->type); in nft_nat_eval()
Dnft_dynset.c88 regs->verdict.code = NFT_BREAK; in nft_dynset_eval()
Dnft_meta.c187 regs->verdict.code = NFT_BREAK; in nft_meta_get_eval()
Dnft_ct.c149 regs->verdict.code = NFT_BREAK; in nft_ct_get_eval()
Dx_tables.c589 compat_uint_t verdict; member
/linux-4.4.14/net/bridge/netfilter/
Debt_arp.c68 uint8_t verdict, i; in ebt_arp_mt() local
77 verdict = 0; in ebt_arp_mt()
79 verdict |= (mp[i] ^ info->smaddr[i]) & in ebt_arp_mt()
81 if (FWINV(verdict != 0, EBT_ARP_SRC_MAC)) in ebt_arp_mt()
91 verdict = 0; in ebt_arp_mt()
93 verdict |= (mp[i] ^ info->dmaddr[i]) & in ebt_arp_mt()
95 if (FWINV(verdict != 0, EBT_ARP_DST_MAC)) in ebt_arp_mt()
Debt_stp.c49 int verdict, i; in ebt_filter_config() local
62 verdict = 0; in ebt_filter_config()
64 verdict |= (stpc->root[2+i] ^ c->root_addr[i]) & in ebt_filter_config()
66 if (FWINV(verdict != 0, EBT_STP_ROOTADDR)) in ebt_filter_config()
82 verdict = 0; in ebt_filter_config()
84 verdict |= (stpc->sender[2+i] ^ c->sender_addr[i]) & in ebt_filter_config()
86 if (FWINV(verdict != 0, EBT_STP_SENDERADDR)) in ebt_filter_config()
Debtables.c134 int verdict, i; in ebt_basic_match() local
161 verdict = 0; in ebt_basic_match()
163 verdict |= (h->h_source[i] ^ e->sourcemac[i]) & in ebt_basic_match()
165 if (FWINV2(verdict != 0, EBT_ISOURCE) ) in ebt_basic_match()
169 verdict = 0; in ebt_basic_match()
171 verdict |= (h->h_dest[i] ^ e->destmac[i]) & in ebt_basic_match()
173 if (FWINV2(verdict != 0, EBT_IDEST) ) in ebt_basic_match()
195 int verdict, sp = 0; in ebt_do_table() local
247 verdict = ((struct ebt_standard_target *)t)->verdict; in ebt_do_table()
251 verdict = t->u.target->target(skb, &acpar); in ebt_do_table()
[all …]
Dnft_meta_bridge.c48 regs->verdict.code = NFT_BREAK; in nft_meta_bridge_get_eval()
Dnft_reject_bridge.c312 regs->verdict.code = NF_DROP; in nft_reject_bridge_eval()
/linux-4.4.14/drivers/w1/slaves/
Dw1_therm.c229 u8 rom[9], crc, verdict, external_power; in w1_slave_show() local
250 verdict = 0; in w1_slave_show()
303 verdict = 1; in w1_slave_show()
307 if (verdict) in w1_slave_show()
314 crc, (verdict) ? "YES" : "NO"); in w1_slave_show()
315 if (verdict) in w1_slave_show()
/linux-4.4.14/net/netfilter/ipvs/
Dip_vs_core.c846 unsigned int verdict = NF_DROP; in handle_response_icmp() local
885 verdict = NF_ACCEPT; in handle_response_icmp()
890 return verdict; in handle_response_icmp()
1207 int verdict = ip_vs_out_icmp_v6(ipvs, skb, &related, in ip_vs_out() local
1211 return verdict; in ip_vs_out()
1217 int verdict = ip_vs_out_icmp(ipvs, skb, &related, hooknum); in ip_vs_out() local
1220 return verdict; in ip_vs_out()
1346 int *verdict, struct ip_vs_conn **cpp, in ip_vs_try_to_schedule() argument
1357 if (!pp->conn_schedule(ipvs, af, skb, pd, verdict, cpp, iph)) in ip_vs_try_to_schedule()
1373 *verdict = NF_ACCEPT; in ip_vs_try_to_schedule()
[all …]
Dip_vs_proto_udp.c34 int *verdict, struct ip_vs_conn **cpp, in udp_conn_schedule() argument
52 *verdict = NF_DROP; in udp_conn_schedule()
73 *verdict = NF_DROP; in udp_conn_schedule()
84 *verdict = ip_vs_leave(svc, skb, pd, iph); in udp_conn_schedule()
86 *verdict = NF_DROP; in udp_conn_schedule()
Dip_vs_proto_ah_esp.c109 int *verdict, struct ip_vs_conn **cpp, in ah_esp_conn_schedule() argument
115 *verdict = NF_ACCEPT; in ah_esp_conn_schedule()
Dip_vs_proto_sctp.c14 int *verdict, struct ip_vs_conn **cpp, in sctp_conn_schedule() argument
38 *verdict = NF_DROP; in sctp_conn_schedule()
58 *verdict = NF_DROP; in sctp_conn_schedule()
68 *verdict = ip_vs_leave(svc, skb, pd, iph); in sctp_conn_schedule()
70 *verdict = NF_DROP; in sctp_conn_schedule()
Dip_vs_proto_tcp.c37 int *verdict, struct ip_vs_conn **cpp, in tcp_conn_schedule() argument
61 *verdict = NF_DROP; in tcp_conn_schedule()
84 *verdict = NF_DROP; in tcp_conn_schedule()
95 *verdict = ip_vs_leave(svc, skb, pd, iph); in tcp_conn_schedule()
97 *verdict = NF_DROP; in tcp_conn_schedule()
/linux-4.4.14/net/ipv4/netfilter/
Darp_tables.c255 unsigned int verdict = NF_DROP; in arpt_do_table() local
314 v = ((struct xt_standard_target *)t)->verdict; in arpt_do_table()
318 verdict = (unsigned int)(-v) - 1; in arpt_do_table()
341 verdict = t->u.kernel.target->target(skb, &acpar); in arpt_do_table()
346 if (verdict == XT_CONTINUE) in arpt_do_table()
358 return verdict; in arpt_do_table()
421 t->verdict < 0) || visited) { in mark_source_chains()
426 t->verdict < -NF_MAX_VERDICT - 1) { in mark_source_chains()
429 t->verdict); in mark_source_chains()
459 int newpos = t->verdict; in mark_source_chains()
[all …]
Dip_tables.c236 t->verdict < 0) { in get_chainname_rulenum()
295 unsigned int verdict = NF_DROP; in ipt_do_table() local
389 v = ((struct xt_standard_target *)t)->verdict; in ipt_do_table()
393 verdict = (unsigned int)(-v) - 1; in ipt_do_table()
423 verdict = t->u.kernel.target->target(skb, &acpar); in ipt_do_table()
426 if (verdict == XT_CONTINUE) in ipt_do_table()
442 else return verdict; in ipt_do_table()
494 t->verdict < 0) || visited) { in mark_source_chains()
499 t->verdict < -NF_MAX_VERDICT - 1) { in mark_source_chains()
502 t->verdict); in mark_source_chains()
[all …]
Dnft_reject_ipv4.c39 regs->verdict.code = NF_DROP; in nft_reject_ipv4_eval()
Dnft_masq_ipv4.c29 regs->verdict.code = nf_nat_masquerade_ipv4(pkt->skb, pkt->hook, in nft_masq_ipv4_eval()
Dnft_redir_ipv4.c38 regs->verdict.code = nf_nat_redirect_ipv4(pkt->skb, &mr, in nft_redir_ipv4_eval()
Diptable_filter.c62 ((struct ipt_standard *)repl->entries)[1].target.verdict = in iptable_filter_net_init()
/linux-4.4.14/net/ipv6/netfilter/
Dip6_tables.c265 t->verdict < 0) { in get_chainname_rulenum()
323 unsigned int verdict = NF_DROP; in ip6t_do_table() local
412 v = ((struct xt_standard_target *)t)->verdict; in ip6t_do_table()
416 verdict = (unsigned int)(-v) - 1; in ip6t_do_table()
438 verdict = t->u.kernel.target->target(skb, &acpar); in ip6t_do_table()
439 if (verdict == XT_CONTINUE) in ip6t_do_table()
454 else return verdict; in ip6t_do_table()
506 t->verdict < 0) || visited) { in mark_source_chains()
511 t->verdict < -NF_MAX_VERDICT - 1) { in mark_source_chains()
514 t->verdict); in mark_source_chains()
[all …]
Dnft_reject_ipv6.c40 regs->verdict.code = NF_DROP; in nft_reject_ipv6_eval()
Dnft_masq_ipv6.c30 regs->verdict.code = nf_nat_masquerade_ipv6(pkt->skb, &range, pkt->out); in nft_masq_ipv6_eval()
Dnft_redir_ipv6.c38 regs->verdict.code = nf_nat_redirect_ipv6(pkt->skb, &range, pkt->hook); in nft_redir_ipv6_eval()
Dip6table_filter.c55 ((struct ip6t_standard *)repl->entries)[1].target.verdict = in ip6table_filter_net_init()
/linux-4.4.14/include/linux/netfilter_arp/
Darp_tables.h39 .target.verdict = -(__verdict) - 1, \
/linux-4.4.14/include/linux/netfilter_ipv4/
Dip_tables.h54 .target.verdict = -(__verdict) - 1, \
/linux-4.4.14/include/uapi/linux/netfilter/
Dnfnetlink_queue.h59 __be32 verdict; member
Dx_tables.h66 int verdict; member
/linux-4.4.14/include/net/netfilter/
Dnf_queue.h33 void nf_reinject(struct nf_queue_entry *entry, unsigned int verdict);
Dnf_tables.h55 struct nft_verdict verdict; member
70 struct nft_verdict verdict; member
/linux-4.4.14/drivers/ata/
Dlibata-eh.c1981 unsigned int verdict = 0; in ata_eh_speed_down_verdict() local
1990 verdict |= ATA_EH_SPDN_SPEED_DOWN | in ata_eh_speed_down_verdict()
1995 verdict |= ATA_EH_SPDN_NCQ_OFF | ATA_EH_SPDN_KEEP_ERRORS; in ata_eh_speed_down_verdict()
2000 verdict |= ATA_EH_SPDN_FALLBACK_TO_PIO; in ata_eh_speed_down_verdict()
2009 verdict |= ATA_EH_SPDN_NCQ_OFF; in ata_eh_speed_down_verdict()
2014 verdict |= ATA_EH_SPDN_SPEED_DOWN; in ata_eh_speed_down_verdict()
2016 return verdict; in ata_eh_speed_down_verdict()
2041 unsigned int verdict; in ata_eh_speed_down() local
2050 verdict = ata_eh_speed_down_verdict(dev); in ata_eh_speed_down()
2053 if ((verdict & ATA_EH_SPDN_NCQ_OFF) && in ata_eh_speed_down()
[all …]
/linux-4.4.14/include/uapi/linux/netfilter_ipv6/
Dip6_tables.h151 .target.verdict = -(__verdict) - 1, \
/linux-4.4.14/include/uapi/linux/netfilter_bridge/
Debtables.h151 int verdict; member
/linux-4.4.14/include/linux/
Dnetfilter.h18 static inline int NF_DROP_GETERR(int verdict) in NF_DROP_GETERR() argument
20 return -(verdict >> NF_VERDICT_QBITS); in NF_DROP_GETERR()
/linux-4.4.14/include/net/
Dip_vs.h440 int *verdict, struct ip_vs_conn **cpp,
784 int *verdict, struct ip_vs_conn **cpp);
/linux-4.4.14/Documentation/scsi/
Dscsi_eh.txt363 of which scsi_check_sense()'s verdict is FAILED,