Home
last modified time | relevance | path

Searched refs:verdict (Results 1 – 51 of 51) sorted by relevance

/linux-4.1.27/net/netfilter/
Dcore.c127 unsigned int verdict; in nf_iterate() local
140 verdict = (*elemp)->hook(*elemp, skb, state); in nf_iterate()
141 if (verdict != NF_ACCEPT) { in nf_iterate()
143 if (unlikely((verdict & NF_VERDICT_MASK) in nf_iterate()
150 if (verdict != NF_REPEAT) in nf_iterate()
151 return verdict; in nf_iterate()
164 unsigned int verdict; in nf_hook_slow() local
173 verdict = nf_iterate(&nf_hooks[state->pf][state->hook], skb, state, in nf_hook_slow()
175 if (verdict == NF_ACCEPT || verdict == NF_STOP) { in nf_hook_slow()
177 } else if ((verdict & NF_VERDICT_MASK) == NF_DROP) { in nf_hook_slow()
[all …]
Dnf_queue.c189 void nf_reinject(struct nf_queue_entry *entry, unsigned int verdict) in nf_reinject() argument
201 if (verdict == NF_REPEAT) { in nf_reinject()
203 verdict = NF_ACCEPT; in nf_reinject()
206 if (verdict == NF_ACCEPT) { in nf_reinject()
209 verdict = NF_DROP; in nf_reinject()
214 if (verdict == NF_ACCEPT) { in nf_reinject()
216 verdict = nf_iterate(&nf_hooks[entry->state.pf][entry->state.hook], in nf_reinject()
220 switch (verdict & NF_VERDICT_MASK) { in nf_reinject()
229 verdict >> NF_VERDICT_QBITS); in nf_reinject()
234 (verdict & NF_VERDICT_FLAG_QUEUE_BYPASS)) in nf_reinject()
Dnf_tables_core.c75 regs->verdict.code = NFT_BREAK; in nft_cmp_fast_eval()
136 regs.verdict.code = NFT_CONTINUE; in nft_do_chain()
152 if (regs.verdict.code != NFT_CONTINUE) in nft_do_chain()
156 switch (regs.verdict.code) { in nft_do_chain()
158 regs.verdict.code = NFT_CONTINUE; in nft_do_chain()
167 switch (regs.verdict.code & NF_VERDICT_MASK) { in nft_do_chain()
172 return regs.verdict.code; in nft_do_chain()
175 switch (regs.verdict.code) { in nft_do_chain()
186 chain = regs.verdict.chain; in nft_do_chain()
Dnfnetlink_queue_core.c911 unsigned int verdict; in verdicthdr_get() local
917 verdict = ntohl(vhdr->verdict) & NF_VERDICT_MASK; in verdicthdr_get()
918 if (verdict > NF_MAX_VERDICT || verdict == NF_STOLEN) in verdicthdr_get()
935 unsigned int verdict, maxid; in nfqnl_recv_verdict_batch() local
953 verdict = ntohl(vhdr->verdict); in nfqnl_recv_verdict_batch()
973 nf_reinject(entry, verdict); in nfqnl_recv_verdict_batch()
988 unsigned int verdict; in nfqnl_recv_verdict() local
1007 verdict = ntohl(vhdr->verdict); in nfqnl_recv_verdict()
1028 verdict = NF_DROP; in nfqnl_recv_verdict()
1037 nf_reinject(entry, verdict); in nfqnl_recv_verdict()
Dnft_compat.c75 regs->verdict.code = NFT_CONTINUE; in nft_target_eval_xt()
78 regs->verdict.code = ret; in nft_target_eval_xt()
101 regs->verdict.code = NF_ACCEPT; in nft_target_eval_bridge()
104 regs->verdict.code = NF_DROP; in nft_target_eval_bridge()
107 regs->verdict.code = NFT_CONTINUE; in nft_target_eval_bridge()
110 regs->verdict.code = NFT_RETURN; in nft_target_eval_bridge()
113 regs->verdict.code = ret; in nft_target_eval_bridge()
320 regs->verdict.code = NF_DROP; in nft_match_eval()
326 regs->verdict.code = NFT_CONTINUE; in nft_match_eval()
329 regs->verdict.code = NFT_BREAK; in nft_match_eval()
Dnft_limit.c48 regs->verdict.code = NFT_BREAK; in nft_limit_eval()
Dnft_queue.c54 regs->verdict.code = ret; in nft_queue_eval()
Dnft_reject_inet.c62 regs->verdict.code = NF_DROP; in nft_reject_inet_eval()
Dnft_exthdr.c47 regs->verdict.code = NFT_BREAK; in nft_exthdr_eval()
Dnf_tables_api.c4110 switch (data->verdict.code) { in nf_tables_loop_check_setelem()
4113 return nf_tables_check_loops(ctx, data->verdict.chain); in nf_tables_loop_check_setelem()
4146 switch (data->verdict.code) { in nf_tables_check_loops()
4150 data->verdict.chain); in nf_tables_check_loops()
4277 (data->verdict.code == NFT_GOTO || in nft_validate_register_store()
4278 data->verdict.code == NFT_JUMP)) { in nft_validate_register_store()
4279 err = nf_tables_check_loops(ctx, data->verdict.chain); in nft_validate_register_store()
4284 data->verdict.chain->level) { in nft_validate_register_store()
4287 data->verdict.chain->level = ctx->chain->level + 1; in nft_validate_register_store()
4327 data->verdict.code = ntohl(nla_get_be32(tb[NFTA_VERDICT_CODE])); in nft_verdict_init()
[all …]
Dnft_payload.c51 regs->verdict.code = NFT_BREAK; in nft_payload_eval()
Dnft_lookup.c42 regs->verdict.code = NFT_BREAK; in nft_lookup_eval()
Dnft_cmp.c62 regs->verdict.code = NFT_BREAK; in nft_cmp_eval()
Dnft_nat.c77 regs->verdict.code = nf_nat_setup_info(ct, &range, priv->type); in nft_nat_eval()
Dnft_dynset.c87 regs->verdict.code = NFT_BREAK; in nft_dynset_eval()
Dnft_meta.c181 regs->verdict.code = NFT_BREAK; in nft_meta_get_eval()
Dnft_ct.c149 regs->verdict.code = NFT_BREAK; in nft_ct_get_eval()
/linux-4.1.27/net/bridge/netfilter/
Debt_arp.c68 uint8_t verdict, i; in ebt_arp_mt() local
77 verdict = 0; in ebt_arp_mt()
79 verdict |= (mp[i] ^ info->smaddr[i]) & in ebt_arp_mt()
81 if (FWINV(verdict != 0, EBT_ARP_SRC_MAC)) in ebt_arp_mt()
91 verdict = 0; in ebt_arp_mt()
93 verdict |= (mp[i] ^ info->dmaddr[i]) & in ebt_arp_mt()
95 if (FWINV(verdict != 0, EBT_ARP_DST_MAC)) in ebt_arp_mt()
Debt_stp.c49 int verdict, i; in ebt_filter_config() local
62 verdict = 0; in ebt_filter_config()
64 verdict |= (stpc->root[2+i] ^ c->root_addr[i]) & in ebt_filter_config()
66 if (FWINV(verdict != 0, EBT_STP_ROOTADDR)) in ebt_filter_config()
82 verdict = 0; in ebt_filter_config()
84 verdict |= (stpc->sender[2+i] ^ c->sender_addr[i]) & in ebt_filter_config()
86 if (FWINV(verdict != 0, EBT_STP_SENDERADDR)) in ebt_filter_config()
Debtables.c134 int verdict, i; in ebt_basic_match() local
161 verdict = 0; in ebt_basic_match()
163 verdict |= (h->h_source[i] ^ e->sourcemac[i]) & in ebt_basic_match()
165 if (FWINV2(verdict != 0, EBT_ISOURCE) ) in ebt_basic_match()
169 verdict = 0; in ebt_basic_match()
171 verdict |= (h->h_dest[i] ^ e->destmac[i]) & in ebt_basic_match()
173 if (FWINV2(verdict != 0, EBT_IDEST) ) in ebt_basic_match()
194 int verdict, sp = 0; in ebt_do_table() local
245 verdict = ((struct ebt_standard_target *)t)->verdict; in ebt_do_table()
249 verdict = t->u.target->target(skb, &acpar); in ebt_do_table()
[all …]
Dnft_meta_bridge.c48 regs->verdict.code = NFT_BREAK; in nft_meta_bridge_get_eval()
Dnft_reject_bridge.c313 regs->verdict.code = NF_DROP; in nft_reject_bridge_eval()
/linux-4.1.27/drivers/w1/slaves/
Dw1_therm.c212 u8 rom[9], crc, verdict, external_power; in w1_slave_show() local
233 verdict = 0; in w1_slave_show()
286 verdict = 1; in w1_slave_show()
290 if (verdict) in w1_slave_show()
297 crc, (verdict) ? "YES" : "NO"); in w1_slave_show()
298 if (verdict) in w1_slave_show()
/linux-4.1.27/net/netfilter/ipvs/
Dip_vs_core.c823 unsigned int verdict = NF_DROP; in handle_response_icmp() local
862 verdict = NF_ACCEPT; in handle_response_icmp()
867 return verdict; in handle_response_icmp()
1194 int verdict = ip_vs_out_icmp_v6(skb, &related, in ip_vs_out() local
1198 return verdict; in ip_vs_out()
1204 int verdict = ip_vs_out_icmp(skb, &related, hooknum); in ip_vs_out() local
1207 return verdict; in ip_vs_out()
1347 unsigned int offset, offset2, ihl, verdict; in ip_vs_in_icmp() local
1429 verdict = NF_DROP; in ip_vs_in_icmp()
1492 verdict = NF_STOLEN; in ip_vs_in_icmp()
[all …]
Dip_vs_proto_udp.c33 int *verdict, struct ip_vs_conn **cpp, in udp_conn_schedule() argument
43 *verdict = NF_DROP; in udp_conn_schedule()
59 *verdict = NF_DROP; in udp_conn_schedule()
70 *verdict = ip_vs_leave(svc, skb, pd, iph); in udp_conn_schedule()
72 *verdict = NF_DROP; in udp_conn_schedule()
Dip_vs_proto_ah_esp.c111 int *verdict, struct ip_vs_conn **cpp, in ah_esp_conn_schedule() argument
117 *verdict = NF_ACCEPT; in ah_esp_conn_schedule()
Dip_vs_proto_sctp.c13 int *verdict, struct ip_vs_conn **cpp, in sctp_conn_schedule() argument
24 *verdict = NF_DROP; in sctp_conn_schedule()
31 *verdict = NF_DROP; in sctp_conn_schedule()
49 *verdict = NF_DROP; in sctp_conn_schedule()
59 *verdict = ip_vs_leave(svc, skb, pd, iph); in sctp_conn_schedule()
61 *verdict = NF_DROP; in sctp_conn_schedule()
Dip_vs_proto_tcp.c36 int *verdict, struct ip_vs_conn **cpp, in tcp_conn_schedule() argument
46 *verdict = NF_DROP; in tcp_conn_schedule()
64 *verdict = NF_DROP; in tcp_conn_schedule()
75 *verdict = ip_vs_leave(svc, skb, pd, iph); in tcp_conn_schedule()
77 *verdict = NF_DROP; in tcp_conn_schedule()
/linux-4.1.27/net/ipv4/netfilter/
Darp_tables.c255 unsigned int verdict = NF_DROP; in arpt_do_table() local
306 v = ((struct xt_standard_target *)t)->verdict; in arpt_do_table()
310 verdict = (unsigned int)(-v) - 1; in arpt_do_table()
336 verdict = t->u.kernel.target->target(skb, &acpar); in arpt_do_table()
341 if (verdict == XT_CONTINUE) in arpt_do_table()
353 return verdict; in arpt_do_table()
403 t->verdict < 0 && unconditional(&e->arp)) || in mark_source_chains()
409 t->verdict < -NF_MAX_VERDICT - 1) { in mark_source_chains()
412 t->verdict); in mark_source_chains()
440 int newpos = t->verdict; in mark_source_chains()
[all …]
Dip_tables.c235 t->verdict < 0 && in get_chainname_rulenum()
297 unsigned int verdict = NF_DROP; in ipt_do_table() local
379 v = ((struct xt_standard_target *)t)->verdict; in ipt_do_table()
383 verdict = (unsigned int)(-v) - 1; in ipt_do_table()
402 verdict = NF_DROP; in ipt_do_table()
417 verdict = t->u.kernel.target->target(skb, &acpar); in ipt_do_table()
420 if (verdict == XT_CONTINUE) in ipt_do_table()
437 else return verdict; in ipt_do_table()
477 t->verdict < 0 && unconditional(&e->ip)) || in mark_source_chains()
483 t->verdict < -NF_MAX_VERDICT - 1) { in mark_source_chains()
[all …]
Dnft_reject_ipv4.c40 regs->verdict.code = NF_DROP; in nft_reject_ipv4_eval()
Dnft_masq_ipv4.c29 regs->verdict.code = nf_nat_masquerade_ipv4(pkt->skb, pkt->ops->hooknum, in nft_masq_ipv4_eval()
Dnft_redir_ipv4.c38 regs->verdict.code = nf_nat_redirect_ipv4(pkt->skb, &mr, in nft_redir_ipv4_eval()
Diptable_filter.c65 ((struct ipt_standard *)repl->entries)[1].target.verdict = in iptable_filter_net_init()
/linux-4.1.27/net/ipv6/netfilter/
Dip6_tables.c264 t->verdict < 0 && in get_chainname_rulenum()
325 unsigned int verdict = NF_DROP; in ip6t_do_table() local
402 v = ((struct xt_standard_target *)t)->verdict; in ip6t_do_table()
406 verdict = (unsigned int)(-v) - 1; in ip6t_do_table()
419 verdict = NF_DROP; in ip6t_do_table()
432 verdict = t->u.kernel.target->target(skb, &acpar); in ip6t_do_table()
433 if (verdict == XT_CONTINUE) in ip6t_do_table()
450 else return verdict; in ip6t_do_table()
490 t->verdict < 0 && in mark_source_chains()
496 t->verdict < -NF_MAX_VERDICT - 1) { in mark_source_chains()
[all …]
Dnft_masq_ipv6.c30 regs->verdict.code = nf_nat_masquerade_ipv6(pkt->skb, &range, pkt->out); in nft_masq_ipv6_eval()
Dnft_reject_ipv6.c41 regs->verdict.code = NF_DROP; in nft_reject_ipv6_eval()
Dnft_redir_ipv6.c38 regs->verdict.code = nf_nat_redirect_ipv6(pkt->skb, &range, in nft_redir_ipv6_eval()
Dip6table_filter.c57 ((struct ip6t_standard *)repl->entries)[1].target.verdict = in ip6table_filter_net_init()
/linux-4.1.27/include/linux/netfilter_arp/
Darp_tables.h39 .target.verdict = -(__verdict) - 1, \
/linux-4.1.27/include/linux/netfilter_ipv4/
Dip_tables.h54 .target.verdict = -(__verdict) - 1, \
/linux-4.1.27/include/uapi/linux/netfilter/
Dnfnetlink_queue.h58 __be32 verdict; member
Dx_tables.h66 int verdict; member
/linux-4.1.27/include/net/netfilter/
Dnf_queue.h33 void nf_reinject(struct nf_queue_entry *entry, unsigned int verdict);
Dnf_tables.h54 struct nft_verdict verdict; member
69 struct nft_verdict verdict; member
/linux-4.1.27/drivers/ata/
Dlibata-eh.c1973 unsigned int verdict = 0; in ata_eh_speed_down_verdict() local
1982 verdict |= ATA_EH_SPDN_SPEED_DOWN | in ata_eh_speed_down_verdict()
1987 verdict |= ATA_EH_SPDN_NCQ_OFF | ATA_EH_SPDN_KEEP_ERRORS; in ata_eh_speed_down_verdict()
1992 verdict |= ATA_EH_SPDN_FALLBACK_TO_PIO; in ata_eh_speed_down_verdict()
2001 verdict |= ATA_EH_SPDN_NCQ_OFF; in ata_eh_speed_down_verdict()
2006 verdict |= ATA_EH_SPDN_SPEED_DOWN; in ata_eh_speed_down_verdict()
2008 return verdict; in ata_eh_speed_down_verdict()
2033 unsigned int verdict; in ata_eh_speed_down() local
2042 verdict = ata_eh_speed_down_verdict(dev); in ata_eh_speed_down()
2045 if ((verdict & ATA_EH_SPDN_NCQ_OFF) && in ata_eh_speed_down()
[all …]
/linux-4.1.27/include/uapi/linux/netfilter_ipv6/
Dip6_tables.h151 .target.verdict = -(__verdict) - 1, \
/linux-4.1.27/include/linux/
Dnetfilter.h15 static inline int NF_DROP_GETERR(int verdict) in NF_DROP_GETERR() argument
17 return -(verdict >> NF_VERDICT_QBITS); in NF_DROP_GETERR()
/linux-4.1.27/include/uapi/linux/netfilter_bridge/
Debtables.h151 int verdict; member
/linux-4.1.27/include/net/
Dip_vs.h446 int *verdict, struct ip_vs_conn **cpp,
819 int *verdict, struct ip_vs_conn **cpp);
/linux-4.1.27/Documentation/scsi/
Dscsi_eh.txt363 of which scsi_check_sense()'s verdict is FAILED,