This also adds NF_CT_LABELS_MAX_SIZE so it can be re-used as BUILD_BUG_ON in nft_ct. At this time, nft doesn't yet support writing to the label area; when this changes the label->words handling needs to be moved out of xt_connlabel.c into nf_conntrack_labels.c. Also removes a useless run-time check: words cannot grow beyond 4 (32 bit) or 2 (64bit) since xt_connlabel enforces a maximum of 128 labels.
Showing the changes to include/uapi/linux (1 of 4 files). Show all
Unified · Split
| @@ -601,6 +601,7 @@ enum nft_ct_keys { · 600 unmodified lines | |||
| 601 | NFT_CT_PROTOCOL, | 601 | NFT_CT_PROTOCOL, |
| 602 | NFT_CT_PROTO_SRC, | 602 | NFT_CT_PROTO_SRC, |
| 603 | NFT_CT_PROTO_DST, | 603 | NFT_CT_PROTO_DST, |
| 604 | NFT_CT_LABELS, | ||
| 604 | }; | 605 | }; |
| 605 | 606 | ||
| 606 | /** | 607 | /** |