移去rt

hc

2023-12-08 01573e231f18eb2d99162747186f59511f56b64d

 kernel/net/netfilter/nfnetlink.c
..
..
@@ -33,6 +33,7 @@
33
33
 MODULE_LICENSE("GPL");
34
34
 MODULE_AUTHOR("Harald Welte <laforge@netfilter.org>");
35
35
 MODULE_ALIAS_NET_PF_PROTO(PF_NETLINK, NETLINK_NETFILTER);
36
+MODULE_DESCRIPTION("Netfilter messages via netlink socket");
36
37
 
37
38
 #define nfnl_dereference_protected(id) \
38
39
 	rcu_dereference_protected(table[(id)].subsys, \
..
..
@@ -44,6 +45,23 @@
44
45
 	struct mutex				mutex;
45
46
 	const struct nfnetlink_subsystem __rcu	*subsys;
46
47
 } table[NFNL_SUBSYS_COUNT];
48
+
49
+static struct lock_class_key nfnl_lockdep_keys[NFNL_SUBSYS_COUNT];
50
+
51
+static const char *const nfnl_lockdep_names[NFNL_SUBSYS_COUNT] = {
52
+	[NFNL_SUBSYS_NONE] = "nfnl_subsys_none",
53
+	[NFNL_SUBSYS_CTNETLINK] = "nfnl_subsys_ctnetlink",
54
+	[NFNL_SUBSYS_CTNETLINK_EXP] = "nfnl_subsys_ctnetlink_exp",
55
+	[NFNL_SUBSYS_QUEUE] = "nfnl_subsys_queue",
56
+	[NFNL_SUBSYS_ULOG] = "nfnl_subsys_ulog",
57
+	[NFNL_SUBSYS_OSF] = "nfnl_subsys_osf",
58
+	[NFNL_SUBSYS_IPSET] = "nfnl_subsys_ipset",
59
+	[NFNL_SUBSYS_ACCT] = "nfnl_subsys_acct",
60
+	[NFNL_SUBSYS_CTNETLINK_TIMEOUT] = "nfnl_subsys_cttimeout",
61
+	[NFNL_SUBSYS_CTHELPER] = "nfnl_subsys_cthelper",
62
+	[NFNL_SUBSYS_NFTABLES] = "nfnl_subsys_nftables",
63
+	[NFNL_SUBSYS_NFT_COMPAT] = "nfnl_subsys_nftcompat",
64
+};
47
65
 
48
66
 static const int nfnl_group2type[NFNLGRP_MAX+1] = {
49
67
 	[NFNLGRP_CONNTRACK_NEW]		= NFNL_SUBSYS_CTNETLINK,
..
..
@@ -211,8 +229,9 @@
211
229
 			return -ENOMEM;
212
230
 		}
213
231
 
214
-		err = nla_parse(cda, ss->cb[cb_id].attr_count, attr, attrlen,
215
-				ss->cb[cb_id].policy, extack);
232
+		err = nla_parse_deprecated(cda, ss->cb[cb_id].attr_count,
233
+					   attr, attrlen,
234
+					   ss->cb[cb_id].policy, extack);
216
235
 		if (err < 0) {
217
236
 			rcu_read_unlock();
218
237
 			return err;
..
..
@@ -314,7 +333,7 @@
314
333
 		return netlink_ack(skb, nlh, -EINVAL, NULL);
315
334
 replay:
316
335
 	status = 0;
317
-
336
+replay_abort:
318
337
 	skb = netlink_skb_clone(oskb, GFP_KERNEL);
319
338
 	if (!skb)
320
339
 		return netlink_ack(oskb, nlh, -ENOMEM, NULL);
..
..
@@ -426,8 +445,10 @@
426
445
 				goto ack;
427
446
 			}
428
447
 
429
-			err = nla_parse(cda, ss->cb[cb_id].attr_count, attr,
430
-					attrlen, ss->cb[cb_id].policy, NULL);
448
+			err = nla_parse_deprecated(cda,
449
+						   ss->cb[cb_id].attr_count,
450
+						   attr, attrlen,
451
+						   ss->cb[cb_id].policy, NULL);
431
452
 			if (err < 0)
432
453
 				goto ack;
433
454
 
..
..
@@ -478,7 +499,7 @@
478
499
 	}
479
500
 done:
480
501
 	if (status & NFNL_BATCH_REPLAY) {
481
-		ss->abort(net, oskb);
502
+		ss->abort(net, oskb, NFNL_ABORT_AUTOLOAD);
482
503
 		nfnl_err_reset(&err_list);
483
504
 		kfree_skb(skb);
484
505
 		module_put(ss->owner);
..
..
@@ -489,11 +510,25 @@
489
510
 			status |= NFNL_BATCH_REPLAY;
490
511
 			goto done;
491
512
 		} else if (err) {
492
-			ss->abort(net, oskb);
513
+			ss->abort(net, oskb, NFNL_ABORT_NONE);
493
514
 			netlink_ack(oskb, nlmsg_hdr(oskb), err, NULL);
494
515
 		}
495
516
 	} else {
496
-		ss->abort(net, oskb);
517
+		enum nfnl_abort_action abort_action;
518
+
519
+		if (status & NFNL_BATCH_FAILURE)
520
+			abort_action = NFNL_ABORT_NONE;
521
+		else
522
+			abort_action = NFNL_ABORT_VALIDATE;
523
+
524
+		err = ss->abort(net, oskb, abort_action);
525
+		if (err == -EAGAIN) {
526
+			nfnl_err_reset(&err_list);
527
+			kfree_skb(skb);
528
+			module_put(ss->owner);
529
+			status |= NFNL_BATCH_FAILURE;
530
+			goto replay_abort;
531
+		}
497
532
 	}
498
533
 	if (ss->cleanup)
499
534
 		ss->cleanup(net);
..
..
@@ -525,8 +560,8 @@
525
560
 	if (skb->len < NLMSG_HDRLEN + sizeof(struct nfgenmsg))
526
561
 		return;
527
562
 
528
-	err = nla_parse(cda, NFNL_BATCH_MAX, attr, attrlen, nfnl_batch_policy,
529
-			NULL);
563
+	err = nla_parse_deprecated(cda, NFNL_BATCH_MAX, attr, attrlen,
564
+				   nfnl_batch_policy, NULL);
530
565
 	if (err < 0) {
531
566
 		netlink_ack(skb, nlh, err, NULL);
532
567
 		return;
..
..
@@ -628,7 +663,7 @@
628
663
 		BUG_ON(nfnl_group2type[i] == NFNL_SUBSYS_NONE);
629
664
 
630
665
 	for (i=0; i<NFNL_SUBSYS_COUNT; i++)
631
-		mutex_init(&table[i].mutex);
666
+		__mutex_init(&table[i].mutex, nfnl_lockdep_names[i], &nfnl_lockdep_keys[i]);
632
667
 
633
668
 	return register_pernet_subsys(&nfnetlink_net_ops);
634
669
 }