Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit b250a7fc authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso
Browse files

netfilter: get rid of useless debugging from core 



This patch remove compile time code to catch inconventional verdicts.
We have better ways to handle this case these days, eg. pr_debug() but
even though I don't think this is useful at all, so let's remove this.

Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent 17197236

net/netfilter/core.c

+0 −9
Original line number Diff line number Diff line
@@ -323,15 +323,6 @@ unsigned int nf_iterate(struct sk_buff *skb, 
repeat:

		verdict = (*entryp)->ops.hook((*entryp)->ops.priv, skb, state);

		if (verdict != NF_ACCEPT) {

#ifdef CONFIG_NETFILTER_DEBUG

			if (unlikely((verdict & NF_VERDICT_MASK)

							> NF_MAX_VERDICT)) {

				NFDEBUG("Evil return from %p(%u).\n",

					(*entryp)->ops.hook, state->hook);

				*entryp = rcu_dereference((*entryp)->next);

				continue;

			}

#endif

			if (verdict != NF_REPEAT)

				return verdict;

			goto repeat;