netfilter: nf_tables: make validation state per table
authorFlorian Westphal <fw@strlen.de>
Thu, 13 Apr 2023 15:13:20 +0000 (17:13 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 21 Apr 2023 23:39:40 +0000 (01:39 +0200)
commit00c320f9b75560628e840bef027a27c746706759
tree6da08133efe9c273e23a892f3eb7282351cecb14
parent9a32e9850686599ed194ccdceb6cd3dd56b2d9b9
netfilter: nf_tables: make validation state per table

We only need to validate tables that saw changes in the current
transaction.

The existing code revalidates all tables, but this isn't needed as
cross-table jumps are not allowed (chains have table scope).

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c