netfilter: nf_tables: make validation state per table

[platform/kernel/linux-starfive.git] / include / net / netfilter / nf_tables.h

diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h
index f476fd0..ec347d9 100644 (file)
--- a/include/net/netfilter/nf_tables.h
+++ b/include/net/netfilter/nf_tables.h
@@ -1209,6 +1209,7 @@ unsigned int nft_do_chain(struct nft_pktinfo *pkt, void *priv);
  *     @genmask: generation mask
  *     @afinfo: address family info
  *     @name: name of the table
+ *     @validate_state: internal, set when transaction adds jumps
  */
 struct nft_table {
        struct list_head                list;
@@ -1227,6 +1228,7 @@ struct nft_table {
        char                            *name;
        u16                             udlen;
        u8                              *udata;
+       u8                              validate_state;
 };
 
 static inline bool nft_table_has_owner(const struct nft_table *table)
@@ -1698,7 +1700,6 @@ struct nftables_pernet {
        struct mutex            commit_mutex;
        u64                     table_handle;
        unsigned int            base_seq;
-       u8                      validate_state;
 };
 
 extern unsigned int nf_tables_net_id;