]> git.baikalelectronics.ru Git - kernel.git/commit
projects / kernel.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: a9ab870) | patch
netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 11 Jun 2018 15:18:29 +0000 (17:18 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 12 Jun 2018 17:12:48 +0000 (19:12 +0200)
commitf23902b1098992f2284be790b2f2bcbae09f675a
tree997446c43106f7d0bf1ddfdbad73a9bfa17f2371tree | snapshot
parenta9ab8709d06df292a16db77af8ade55fff1d46d6commit | diff
netfilter: nft_dynset: do not reject set updates with NFT_SET_EVAL

NFT_SET_EVAL is signalling the kernel that this sets can be updated from
the evaluation path, even if there are no expressions attached to the
element. Otherwise, set updates with no expressions fail. Update
description to describe the right semantics.

Fixes: 442306e18704 ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/uapi/linux/netfilter/nf_tables.h diff | blob | history
net/netfilter/nft_dynset.c diff | blob | history
Linux Kernel Source Tree.