diff mbox series

[nf-next,18/19] netfilter: nft_payload: save payload if needed

Message ID 20230503125552.41113-19-boris.sukholitko@broadcom.com
State Changes Requested
Delegated to: Pablo Neira
Headers show
Series netfilter: nftables: dscp modification offload | expand

Commit Message

Boris Sukholitko May 3, 2023, 12:55 p.m. UTC 
If we have NFT_PAYLOAD_CAN_OFFLOAD flag set, save the payload for
later application.

Signed-off-by: Boris Sukholitko <boris.sukholitko@broadcom.com>
---
 net/netfilter/nft_payload.c | 4 ++++
 1 file changed, 4 insertions(+)
diff mbox series

Patch

diff --git a/net/netfilter/nft_payload.c b/net/netfilter/nft_payload.c
index a633f851316e..b8cb33316506 100644
--- a/net/netfilter/nft_payload.c
+++ b/net/netfilter/nft_payload.c
@@ -867,6 +867,10 @@  static void nft_payload_set_eval(const struct nft_expr *expr,
 	if (nft_payload_mangle(priv, pkt, src))
 		goto err;
 
+	if ((priv->csum_flags & NFT_PAYLOAD_CAN_OFFLOAD) &&
+	    nf_flow_offload_save_payload(pkt->skb, priv, src))
+		goto err;
+
 	return;
 err:
 	regs->verdict.code = NFT_BREAK;