Home
last modified time | relevance | path

Searched refs:verdict (Results 1 – 25 of 72) sorted by relevance

123

/Linux-v4.19/net/netfilter/
Dnf_queue.c213 unsigned int verdict) in nf_queue() argument
217 ret = __nf_queue(skb, state, entries, index, verdict >> NF_VERDICT_QBITS); in nf_queue()
220 (verdict & NF_VERDICT_FLAG_QUEUE_BYPASS)) in nf_queue()
234 unsigned int verdict, i = *index; in nf_iterate() local
239 verdict = nf_hook_entry_hookfn(hook, skb, state); in nf_iterate()
240 if (verdict != NF_ACCEPT) { in nf_iterate()
241 if (verdict != NF_REPEAT) in nf_iterate()
242 return verdict; in nf_iterate()
272 void nf_reinject(struct nf_queue_entry *entry, unsigned int verdict) in nf_reinject() argument
299 if (verdict == NF_REPEAT) in nf_reinject()
[all …]
Dnft_fwd_netdev.c34 regs->verdict.code = NF_STOLEN; in nft_fwd_netdev_eval()
84 unsigned int verdict = NF_STOLEN; in nft_fwd_neigh_eval() local
94 verdict = NFT_BREAK; in nft_fwd_neigh_eval()
98 verdict = NF_DROP; in nft_fwd_neigh_eval()
110 verdict = NFT_BREAK; in nft_fwd_neigh_eval()
114 verdict = NF_DROP; in nft_fwd_neigh_eval()
123 verdict = NFT_BREAK; in nft_fwd_neigh_eval()
134 regs->verdict.code = verdict; in nft_fwd_neigh_eval()
Dnf_tables_core.c60 regs->verdict.code = NFT_BREAK; in nft_cmp_fast_eval()
153 nft_trace_init(&info, pkt, &regs.verdict, basechain); in nft_do_chain()
162 regs.verdict.code = NFT_CONTINUE; in nft_do_chain()
172 if (regs.verdict.code != NFT_CONTINUE) in nft_do_chain()
176 switch (regs.verdict.code) { in nft_do_chain()
178 regs.verdict.code = NFT_CONTINUE; in nft_do_chain()
188 switch (regs.verdict.code & NF_VERDICT_MASK) { in nft_do_chain()
195 return regs.verdict.code; in nft_do_chain()
198 switch (regs.verdict.code) { in nft_do_chain()
210 chain = regs.verdict.chain; in nft_do_chain()
Dnf_tables_trace.c157 info->verdict->code == NFT_CONTINUE) in nf_trace_fill_rule_info()
175 switch (info->verdict->code) { in nft_trace_have_verdict_chain()
218 size += nla_total_size(strlen(info->verdict->chain->name)); /* jump target */ in nft_trace_notify()
258 if (nft_verdict_dump(skb, NFTA_TRACE_VERDICT, info->verdict)) in nft_trace_notify()
291 const struct nft_verdict *verdict, in nft_trace_init() argument
298 info->verdict = verdict; in nft_trace_init()
Dnft_socket.c41 regs->verdict.code = NFT_BREAK; in nft_socket_eval()
46 regs->verdict.code = NFT_BREAK; in nft_socket_eval()
61 regs->verdict.code = NFT_BREAK; in nft_socket_eval()
67 regs->verdict.code = NFT_BREAK; in nft_socket_eval()
Dnft_tproxy.c35 regs->verdict.code = NFT_BREAK; in nft_tproxy_eval_v4()
74 regs->verdict.code = NFT_BREAK; in nft_tproxy_eval_v4()
95 regs->verdict.code = NFT_BREAK; in nft_tproxy_eval_v6()
102 regs->verdict.code = NFT_BREAK; in nft_tproxy_eval_v6()
146 regs->verdict.code = NFT_BREAK; in nft_tproxy_eval_v6()
175 regs->verdict.code = NFT_BREAK; in nft_tproxy_eval()
Dnfnetlink_queue.c230 static void nfqnl_reinject(struct nf_queue_entry *entry, unsigned int verdict) in nfqnl_reinject() argument
235 if (verdict == NF_ACCEPT || in nfqnl_reinject()
236 verdict == NF_REPEAT || in nfqnl_reinject()
237 verdict == NF_STOP) { in nfqnl_reinject()
243 verdict = NF_DROP; in nfqnl_reinject()
247 nf_reinject(entry, verdict); in nfqnl_reinject()
1047 unsigned int verdict; in verdicthdr_get() local
1053 verdict = ntohl(vhdr->verdict) & NF_VERDICT_MASK; in verdicthdr_get()
1054 if (verdict > NF_MAX_VERDICT || verdict == NF_STOLEN) in verdicthdr_get()
1072 unsigned int verdict, maxid; in nfqnl_recv_verdict_batch() local
[all …]
Dnft_osf.c28 regs->verdict.code = NFT_BREAK; in nft_osf_eval()
32 regs->verdict.code = NFT_BREAK; in nft_osf_eval()
Dnft_compat.c107 regs->verdict.code = NFT_CONTINUE; in nft_target_eval_xt()
110 regs->verdict.code = ret; in nft_target_eval_xt()
133 regs->verdict.code = NF_ACCEPT; in nft_target_eval_bridge()
136 regs->verdict.code = NF_DROP; in nft_target_eval_bridge()
139 regs->verdict.code = NFT_CONTINUE; in nft_target_eval_bridge()
142 regs->verdict.code = NFT_RETURN; in nft_target_eval_bridge()
145 regs->verdict.code = ret; in nft_target_eval_bridge()
348 regs->verdict.code = NF_DROP; in __nft_match_eval()
354 regs->verdict.code = NFT_CONTINUE; in __nft_match_eval()
357 regs->verdict.code = NFT_BREAK; in __nft_match_eval()
Dnft_lookup.c41 regs->verdict.code = NFT_BREAK; in nft_lookup_eval()
167 switch (data->verdict.code) { in nft_lookup_validate_setelem()
171 err = nft_chain_validate(ctx, data->verdict.chain); in nft_lookup_validate_setelem()
Dnft_limit.c139 regs->verdict.code = NFT_BREAK; in nft_limit_pkts_eval()
189 regs->verdict.code = NFT_BREAK; in nft_limit_bytes_eval()
249 regs->verdict.code = NFT_BREAK; in nft_limit_obj_pkts_eval()
293 regs->verdict.code = NFT_BREAK; in nft_limit_obj_bytes_eval()
Dnft_immediate.c110 switch (data->verdict.code) { in nft_immediate_validate()
114 err = nft_chain_validate(ctx, data->verdict.chain); in nft_immediate_validate()
Dnft_connlimit.c43 regs->verdict.code = NF_DROP; in nft_connlimit_do_eval()
55 regs->verdict.code = NF_DROP; in nft_connlimit_do_eval()
62 regs->verdict.code = NFT_BREAK; in nft_connlimit_do_eval()
Dnft_range.c38 regs->verdict.code = NFT_BREAK; in nft_range_eval()
42 regs->verdict.code = NFT_BREAK; in nft_range_eval()
Dnf_internals.h12 unsigned int verdict);
/Linux-v4.19/samples/bpf/
Dtest_cgrp2_attach.c42 static int prog_load(int map_fd, int verdict) in prog_load() argument
69 BPF_MOV64_IMM(BPF_REG_0, verdict), /* r0 = verdict */ in prog_load()
87 static int attach_filter(int cg_fd, int type, int verdict) in attach_filter() argument
100 prog_fd = prog_load(map_fd, verdict); in attach_filter()
131 int detach_only = 0, verdict = 1; in main() local
138 verdict = 0; in main()
169 ret = attach_filter(cg_fd, type, verdict); in main()
Dtest_cgrp2_attach2.c42 static int prog_load(int verdict) in prog_load() argument
46 BPF_MOV64_IMM(BPF_REG_0, verdict), /* r0 = verdict */ in prog_load()
210 static int prog_load_cnt(int verdict, int val) in prog_load_cnt() argument
243 BPF_MOV64_IMM(BPF_REG_0, verdict), /* r0 = verdict */ in prog_load_cnt()
/Linux-v4.19/net/netfilter/ipvs/
Dip_vs_core.c858 unsigned int verdict = NF_DROP; in handle_response_icmp() local
897 verdict = NF_ACCEPT; in handle_response_icmp()
902 return verdict; in handle_response_icmp()
1356 int verdict = ip_vs_out_icmp_v6(ipvs, skb, &related, in ip_vs_out() local
1360 return verdict; in ip_vs_out()
1366 int verdict = ip_vs_out_icmp(ipvs, skb, &related, hooknum); in ip_vs_out() local
1369 return verdict; in ip_vs_out()
1520 int *verdict, struct ip_vs_conn **cpp, in ip_vs_try_to_schedule() argument
1531 if (!pp->conn_schedule(ipvs, af, skb, pd, verdict, cpp, iph)) in ip_vs_try_to_schedule()
1547 *verdict = NF_ACCEPT; in ip_vs_try_to_schedule()
[all …]
Dip_vs_proto_udp.c34 int *verdict, struct ip_vs_conn **cpp, in udp_conn_schedule() argument
52 *verdict = NF_DROP; in udp_conn_schedule()
71 *verdict = NF_DROP; in udp_conn_schedule()
82 *verdict = ip_vs_leave(svc, skb, pd, iph); in udp_conn_schedule()
84 *verdict = NF_DROP; in udp_conn_schedule()
Dip_vs_proto_ah_esp.c109 int *verdict, struct ip_vs_conn **cpp, in ah_esp_conn_schedule() argument
115 *verdict = NF_ACCEPT; in ah_esp_conn_schedule()
/Linux-v4.19/net/ipv4/netfilter/
Darp_tables.c187 unsigned int verdict = NF_DROP; in arpt_do_table() local
237 v = ((struct xt_standard_target *)t)->verdict; in arpt_do_table()
241 verdict = (unsigned int)(-v) - 1; in arpt_do_table()
256 verdict = NF_DROP; in arpt_do_table()
268 verdict = t->u.kernel.target->target(skb, &acpar); in arpt_do_table()
270 if (verdict == XT_CONTINUE) { in arpt_do_table()
285 return verdict; in arpt_do_table()
334 t->verdict < 0) || visited) { in mark_source_chains()
361 int newpos = t->verdict; in mark_source_chains()
436 unsigned int verdict; in check_underflow() local
[all …]
Dip_tables.c177 t->verdict < 0) { in get_chainname_rulenum()
236 unsigned int verdict = NF_DROP; in ipt_do_table() local
317 v = ((struct xt_standard_target *)t)->verdict; in ipt_do_table()
321 verdict = (unsigned int)(-v) - 1; in ipt_do_table()
336 verdict = NF_DROP; in ipt_do_table()
349 verdict = t->u.kernel.target->target(skb, &acpar); in ipt_do_table()
350 if (verdict == XT_CONTINUE) { in ipt_do_table()
365 else return verdict; in ipt_do_table()
403 t->verdict < 0) || visited) { in mark_source_chains()
429 int newpos = t->verdict; in mark_source_chains()
[all …]
/Linux-v4.19/drivers/w1/slaves/
Dw1_therm.c66 u8 verdict; member
511 info->verdict = 0; in read_therm()
565 info->verdict = 1; in read_therm()
569 if (info->verdict) in read_therm()
598 info.crc, (info.verdict) ? "YES" : "NO"); in w1_slave_show()
599 if (info.verdict) in w1_slave_show()
629 if (!info.verdict) { in w1_read_temp()
/Linux-v4.19/net/ipv6/netfilter/
Dip6_tables.c202 t->verdict < 0) { in get_chainname_rulenum()
260 unsigned int verdict = NF_DROP; in ip6t_do_table() local
340 v = ((struct xt_standard_target *)t)->verdict; in ip6t_do_table()
344 verdict = (unsigned int)(-v) - 1; in ip6t_do_table()
357 verdict = NF_DROP; in ip6t_do_table()
370 verdict = t->u.kernel.target->target(skb, &acpar); in ip6t_do_table()
371 if (verdict == XT_CONTINUE) in ip6t_do_table()
383 else return verdict; in ip6t_do_table()
421 t->verdict < 0) || visited) { in mark_source_chains()
447 int newpos = t->verdict; in mark_source_chains()
[all …]
/Linux-v4.19/kernel/bpf/
Dsockmap.c655 goto verdict; in smap_do_tx_msg()
677 goto verdict; in smap_do_tx_msg()
681 verdict: in smap_do_tx_msg()
1555 struct bpf_prog *verdict, in smap_init_progs() argument
1561 orig_verdict = xchg(&psock->bpf_verdict, verdict); in smap_init_progs()
1873 struct bpf_prog *verdict, *parse, *tx_msg; in __sock_map_ctx_update_elem() local
1882 verdict = READ_ONCE(progs->bpf_verdict); in __sock_map_ctx_update_elem()
1886 if (parse && verdict) { in __sock_map_ctx_update_elem()
1892 verdict = bpf_prog_inc_not_zero(verdict); in __sock_map_ctx_update_elem()
1893 if (IS_ERR(verdict)) in __sock_map_ctx_update_elem()
[all …]

123