netfilter: xt_bpf: add mising opaque struct sk_filter definition

This structure is not exposed to userspace, so fix this by defining struct sk_filter; so we skip the casting in kernelspace. This is safe since userspace has no way to lurk with that internal pointer.

Pablo Neira committed 12 years ago

Commit e10038a1 parent 5160ee91 file · +2 −0Browse files

Showing the changes to include/uapi/linux (1 of 1 file). Show all

Unified · Split

include/uapi/linux/netfilter/xt_bpf.h+2−0

@@ -6,6 +6,8 @@ · 5 unmodified lines
6		6
7	#define XT_BPF_MAX_NUM_INSTR 64	7	#define XT_BPF_MAX_NUM_INSTR 64
8		8
		9	struct sk_filter;
		10
9	struct xt_bpf_info {	11	struct xt_bpf_info {
10	__u16 bpf_program_num_elem;	12	__u16 bpf_program_num_elem;
11	struct sock_filter bpf_program[XT_BPF_MAX_NUM_INSTR];	13	struct sock_filter bpf_program[XT_BPF_MAX_NUM_INSTR];