]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_tables: place all set backends in one single module
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Jul 2018 17:06:43 +0000 (19:06 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 6 Jul 2018 17:31:53 +0000 (19:31 +0200)
commit094a879d45be47887d4f54088c08e5da157bcd1f
tree7e480025afd8ed7f00b22e35f63ff434e853a634
parent289707a3ac86f6798adcc293c72ee6f95043c882
netfilter: nf_tables: place all set backends in one single module

This patch disallows rbtree with single elements, which is causing
problems with the recent timeout support. Before this patch, you
could opt out individual set representations per module, which is
just adding extra complexity.

Fixes: de589f0d3172("netfilter: nft_set_rbtree: add timeout support")
Reported-by: Taehee Yoo <ap420073@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables_core.h
net/netfilter/Kconfig
net/netfilter/Makefile
net/netfilter/nf_tables_set_core.c [new file with mode: 0644]
net/netfilter/nft_set_bitmap.c
net/netfilter/nft_set_hash.c
net/netfilter/nft_set_rbtree.c