netfilter: decouple nf_hook_entry and nf_hook_ops
authorAaron Conole <aconole@redhat.com>
Tue, 15 Nov 2016 22:48:45 +0000 (17:48 -0500)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 6 Dec 2016 20:42:16 +0000 (21:42 +0100)
commitd415b9eb76fc55c03ef5451691170aa5771dcea3
tree9f410cdef78d6647ff5c8f2cf89d8b830ce43cf8
parent0aa8c57a04907a5d02068ff9f917629be97ea78d
netfilter: decouple nf_hook_entry and nf_hook_ops

During nfhook traversal we only need a very small subset of
nf_hook_ops members.

We need:
- next element
- hook function to call
- hook function priv argument

Bridge netfilter also needs 'thresh'; can be obtained via ->orig_ops.

nf_hook_entry struct is now 32 bytes on x86_64.

A followup patch will turn the run-time list into an array that only
stores hook functions plus their priv arguments, eliminating the ->next
element.

Suggested-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Aaron Conole <aconole@bytheb.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter.h