]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 14 Jan 2023 22:49:46 +0000 (23:49 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Feb 2023 07:34:44 +0000 (08:34 +0100)
commitc59edfaefed61f44f3658c587d94ab49ce7a52a5
treef188c6b0793bb4a4508197235b4937cf1b97c095
parent3ff526df1ab12464bb26dd528a93863eb20cea52
netfilter: nft_set_rbtree: skip elements in transaction from garbage collection

[ Upstream commit 5d235d6ce75c12a7fdee375eb211e4116f7ab01b ]

Skip interference with an ongoing transaction, do not perform garbage
collection on inactive elements. Reset annotated previous end interval
if the expired element is marked as busy (control plane removed the
element right before expiration).

Fixes: de589f0d3172 ("netfilter: nft_set_rbtree: add timeout support")
Reviewed-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_set_rbtree.c