net/netfilter/nf_conntrack_helper.c
Source file repositories/reference/linux-study-clean/net/netfilter/nf_conntrack_helper.c
File Facts
- System
- Linux kernel
- Corpus path
net/netfilter/nf_conntrack_helper.c- Extension
.c- Size
- 15095 bytes
- Lines
- 593
- Domain
- Networking Core
- Bucket
- Sockets, Protocols, Packet Path, And Network Policy
- Inferred role
- Networking Core: exported/initcall integration point
- Status
- integration implementation candidate
Why This File Exists
Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.
- Networking stack implementation surface: socket APIs, protocol dispatch, packet flow, routing, filtering, and network namespaces.
- Exports symbols or registers init work; inspect boot/module ordering and who consumes the exported contract.
- Uses kernel synchronization; read lock ordering, sleepability, and interrupt context assumptions before translating.
- Allocates kernel memory; connect allocation flags and lifetime to context constraints.
- Defines or uses C structs; map object ownership, embedded links, reference counts, and lock ownership.
Dependency Surface
linux/types.hlinux/netfilter.hlinux/module.hlinux/skbuff.hlinux/vmalloc.hlinux/stddef.hlinux/random.hlinux/err.hlinux/kernel.hlinux/netdevice.hlinux/rculist.hlinux/rtnetlink.hnet/netfilter/nf_conntrack.hnet/netfilter/nf_conntrack_core.hnet/netfilter/nf_conntrack_ecache.hnet/netfilter/nf_conntrack_extend.hnet/netfilter/nf_conntrack_helper.hnet/netfilter/nf_conntrack_l4proto.hnet/netfilter/nf_conntrack_seqadj.hnet/netfilter/nf_log.hnet/ip.h
Detected Declarations
function helper_hashfunction __nf_conntrack_helper_findfunction hlist_for_each_entry_rcufunction nf_conntrack_helper_try_module_getfunction nf_conntrack_helper_putfunction nf_conntrack_nat_helper_findfunction list_for_each_entry_rcufunction nf_nat_helper_try_module_getfunction nf_nat_helper_putfunction nf_ct_helper_ext_addfunction __nf_ct_try_assign_helperfunction nf_ct_helper_destroyfunction nf_ct_helper_expectfn_registerfunction nf_ct_helper_expectfn_unregisterfunction expect_iter_expectfnfunction nf_ct_helper_expectfn_destroyfunction nf_ct_helper_expectfn_find_by_namefunction list_for_each_entry_rcufunction nf_ct_helper_expectfn_find_by_symbolfunction list_for_each_entry_rcufunction nf_ct_helper_logfunction __nf_conntrack_helper_registerfunction hlist_for_each_entryfunction hlist_for_each_entryfunction nf_conntrack_helper_registerfunction expect_iter_mefunction nf_conntrack_helper_unregisterfunction nf_ct_helper_initfunction nf_conntrack_helpers_registerfunction nf_conntrack_helpers_unregisterfunction nf_nat_helper_registerfunction nf_nat_helper_unregisterfunction nf_conntrack_helper_initfunction nf_conntrack_helper_finiexport nf_ct_helper_hashexport nf_ct_helper_hsizeexport __nf_conntrack_helper_findexport nf_conntrack_helper_try_module_getexport nf_conntrack_helper_putexport nf_nat_helper_try_module_getexport nf_nat_helper_putexport nf_ct_helper_ext_addexport __nf_ct_try_assign_helperexport nf_ct_helper_expectfn_registerexport nf_ct_helper_expectfn_unregisterexport nf_ct_helper_expectfn_destroyexport nf_ct_helper_expectfn_find_by_nameexport nf_ct_helper_expectfn_find_by_symbol
Annotated Snippet
hlist_for_each_entry_rcu(h, &nf_ct_helper_hash[i], hnode) {
if (strcmp(h->name, name))
continue;
if (h->tuple.src.l3num != NFPROTO_UNSPEC &&
h->tuple.src.l3num != l3num)
continue;
if (h->tuple.dst.protonum == protonum)
return h;
}
}
return NULL;
}
EXPORT_SYMBOL_GPL(__nf_conntrack_helper_find);
struct nf_conntrack_helper *
nf_conntrack_helper_try_module_get(const char *name, u16 l3num, u8 protonum)
{
struct nf_conntrack_helper *h;
rcu_read_lock();
h = __nf_conntrack_helper_find(name, l3num, protonum);
#ifdef CONFIG_MODULES
if (h == NULL) {
rcu_read_unlock();
if (request_module("nfct-helper-%s", name) == 0) {
rcu_read_lock();
h = __nf_conntrack_helper_find(name, l3num, protonum);
} else {
return h;
}
}
#endif
if (h != NULL && !try_module_get(h->me))
h = NULL;
if (h != NULL && !refcount_inc_not_zero(&h->ct_refcnt)) {
module_put(h->me);
h = NULL;
}
rcu_read_unlock();
return h;
}
EXPORT_SYMBOL_GPL(nf_conntrack_helper_try_module_get);
void nf_conntrack_helper_put(struct nf_conntrack_helper *helper)
{
module_put(helper->me);
if (refcount_dec_and_test(&helper->ct_refcnt))
kfree_rcu(helper, rcu);
}
EXPORT_SYMBOL_GPL(nf_conntrack_helper_put);
static struct nf_conntrack_nat_helper *
nf_conntrack_nat_helper_find(const char *mod_name)
{
struct nf_conntrack_nat_helper *cur;
bool found = false;
list_for_each_entry_rcu(cur, &nf_ct_nat_helpers, list) {
if (!strcmp(cur->mod_name, mod_name)) {
found = true;
break;
}
}
return found ? cur : NULL;
}
int
nf_nat_helper_try_module_get(const char *name, u16 l3num, u8 protonum)
{
struct nf_conntrack_helper *h;
struct nf_conntrack_nat_helper *nat;
char mod_name[NF_CT_HELPER_NAME_LEN];
int ret = 0;
rcu_read_lock();
h = __nf_conntrack_helper_find(name, l3num, protonum);
if (!h) {
rcu_read_unlock();
return -ENOENT;
}
nat = nf_conntrack_nat_helper_find(h->nat_mod_name);
if (!nat) {
snprintf(mod_name, sizeof(mod_name), "%s", h->nat_mod_name);
rcu_read_unlock();
Annotation
- Immediate include surface: `linux/types.h`, `linux/netfilter.h`, `linux/module.h`, `linux/skbuff.h`, `linux/vmalloc.h`, `linux/stddef.h`, `linux/random.h`, `linux/err.h`.
- Detected declarations: `function helper_hash`, `function __nf_conntrack_helper_find`, `function hlist_for_each_entry_rcu`, `function nf_conntrack_helper_try_module_get`, `function nf_conntrack_helper_put`, `function nf_conntrack_nat_helper_find`, `function list_for_each_entry_rcu`, `function nf_nat_helper_try_module_get`, `function nf_nat_helper_put`, `function nf_ct_helper_ext_add`.
- Atlas domain: Networking Core / Sockets, Protocols, Packet Path, And Network Policy.
- Implementation status: integration implementation candidate.
- Synchronization appears in or near this file; preserve lock ordering, sleepability, and interrupt-context constraints.
Implementation Notes
- This generated page is the file-by-file coverage layer; curated subsystem chapters should link here when they synthesize a multi-file control flow.
- Core OS pages should be promoted from atlas-only to deep-reviewed when they explain data structures, invariants, locking, lifecycle, and C implementation snippets.
- Driver-family pages are intentionally pattern-oriented unless they are part of the selected PCIe/NVMe representative device path.