NET: pch, fix use after free
[linux-2.6/linux-acpi-2.6/ibm-acpi-2.6.git] / include / net / inet_frag.h
blob16ff29a7bb30cfbf5e1581c1388e321e9d9f2a1b
1 #ifndef __NET_FRAG_H__
2 #define __NET_FRAG_H__
4 struct netns_frags {
5 int nqueues;
6 atomic_t mem;
7 struct list_head lru_list;
9 /* sysctls */
10 int timeout;
11 int high_thresh;
12 int low_thresh;
15 struct inet_frag_queue {
16 struct hlist_node list;
17 struct netns_frags *net;
18 struct list_head lru_list; /* lru list member */
19 spinlock_t lock;
20 atomic_t refcnt;
21 struct timer_list timer; /* when will this queue expire? */
22 struct sk_buff *fragments; /* list of received fragments */
23 struct sk_buff *fragments_tail;
24 ktime_t stamp;
25 int len; /* total length of orig datagram */
26 int meat;
27 __u8 last_in; /* first/last segment arrived? */
29 #define INET_FRAG_COMPLETE 4
30 #define INET_FRAG_FIRST_IN 2
31 #define INET_FRAG_LAST_IN 1
34 #define INETFRAGS_HASHSZ 64
36 struct inet_frags {
37 struct hlist_head hash[INETFRAGS_HASHSZ];
38 rwlock_t lock;
39 u32 rnd;
40 int qsize;
41 int secret_interval;
42 struct timer_list secret_timer;
44 unsigned int (*hashfn)(struct inet_frag_queue *);
45 void (*constructor)(struct inet_frag_queue *q,
46 void *arg);
47 void (*destructor)(struct inet_frag_queue *);
48 void (*skb_free)(struct sk_buff *);
49 int (*match)(struct inet_frag_queue *q,
50 void *arg);
51 void (*frag_expire)(unsigned long data);
54 void inet_frags_init(struct inet_frags *);
55 void inet_frags_fini(struct inet_frags *);
57 void inet_frags_init_net(struct netns_frags *nf);
58 void inet_frags_exit_net(struct netns_frags *nf, struct inet_frags *f);
60 void inet_frag_kill(struct inet_frag_queue *q, struct inet_frags *f);
61 void inet_frag_destroy(struct inet_frag_queue *q,
62 struct inet_frags *f, int *work);
63 int inet_frag_evictor(struct netns_frags *nf, struct inet_frags *f);
64 struct inet_frag_queue *inet_frag_find(struct netns_frags *nf,
65 struct inet_frags *f, void *key, unsigned int hash)
66 __releases(&f->lock);
68 static inline void inet_frag_put(struct inet_frag_queue *q, struct inet_frags *f)
70 if (atomic_dec_and_test(&q->refcnt))
71 inet_frag_destroy(q, f, NULL);
74 #endif