Eric Dumazet 711bdde6a8 netfilter: x_tables: remove XT_TABLE_INFO_SZ and a dereference.
After Florian patches, there is no need for XT_TABLE_INFO_SZ anymore :
Only one copy of table is kept, instead of one copy per cpu.

We also can avoid a dereference if we put table data right after
xt_table_info. It reduces register pressure and helps compiler.

Then, we attempt a kmalloc() if total size is under order-3 allocation,
to reduce TLB pressure, as in many cases, rules fit in 32 KB.

Signed-off-by: Eric Dumazet <edumazet@google.com>
Cc: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
2015-06-15 20:19:20 +02:00
..
2015-05-25 13:25:35 -04:00
2015-05-03 21:58:01 -04:00
2015-06-08 12:13:17 -07:00
2015-05-30 23:48:36 -07:00
2015-05-25 13:25:35 -04:00
2015-06-07 01:55:01 -07:00
2015-02-28 16:56:51 -05:00
2015-05-31 21:42:18 -07:00
2014-05-23 16:28:53 -04:00