Florian Westphal 11fe5a82e5 netfilter: nf_tables: make nft_set_do_lookup available unconditionally ...

This function was added for retpoline mitigation and is replaced by a
static inline helper if mitigations are not enabled.

Enable this helper function unconditionally so next patch can add a lookup
restart mechanism to fix possible false negatives while transactions are
in progress.

Adding lookup restarts in nft_lookup_eval doesn't work as nft_objref would
then need the same copypaste loop.

This patch is separate to ease review of the actual bug fix.

Suggested-by: Pablo Neira Ayuso <[email protected]>
Signed-off-by: Florian Westphal <[email protected]>

2025-09-10 20:30:37 +02:00

..

ipv4

netfilter: conntrack: remove DCCP protocol support

2025-07-03 13:51:39 +02:00

ipv6

…

br_netfilter.h

…

nf_bpf_link.h

…

nf_conntrack_acct.h

…

nf_conntrack_act_ct.h

…

nf_conntrack_bpf.h

…

nf_conntrack_bridge.h

…

nf_conntrack_core.h

…

nf_conntrack_count.h

…

nf_conntrack_ecache.h

netfilter: conntrack: add conntrack event timestamp

2025-01-09 14:42:16 +01:00

nf_conntrack_expect.h

…

nf_conntrack_extend.h

…

nf_conntrack_helper.h

…

nf_conntrack_l4proto.h

netfilter: conntrack: remove DCCP protocol support

2025-07-03 13:51:39 +02:00

nf_conntrack_labels.h

…

nf_conntrack_seqadj.h

…

nf_conntrack_synproxy.h

…

nf_conntrack_timeout.h

…

nf_conntrack_timestamp.h

…

nf_conntrack_tuple.h

…

nf_conntrack_zones.h

…

nf_conntrack.h

Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net

2025-07-17 11:00:33 -07:00

nf_dup_netdev.h

…

nf_flow_table.h

netfilter: flowtable: account for Ethernet header in nf_flow_pppoe_proto()

2025-07-10 17:12:28 -07:00

nf_hooks_lwtunnel.h

…

nf_log.h

netfilter: load nf_log_syslog on enabling nf_conntrack_log_invalid

2025-07-25 18:35:41 +02:00

nf_nat_helper.h

…

nf_nat_masquerade.h

…

nf_nat_redirect.h

…

nf_nat.h

…

nf_queue.h

…

nf_reject.h

netfilter: conntrack: remove DCCP protocol support

2025-07-03 13:51:39 +02:00

nf_socket.h

…

nf_synproxy.h

…

nf_tables_core.h

netfilter: nf_tables: make nft_set_do_lookup available unconditionally

2025-09-10 20:30:37 +02:00

nf_tables_ipv4.h

…

nf_tables_ipv6.h

…

nf_tables_offload.h

…

nf_tables.h

netfilter: nf_tables: place base_seq in struct net

2025-09-10 20:30:37 +02:00

nf_tproxy.h

…

nft_fib.h

netfilter: nf_tables: nft_fib: consistent l3mdev handling

2025-05-23 13:57:09 +02:00

nft_meta.h

…

nft_reject.h

…

xt_rateest.h

…