]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nftables: relax check for stateful expressions in set definition
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 8 Feb 2021 12:20:47 +0000 (13:20 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 8 Feb 2021 23:50:14 +0000 (00:50 +0100)
commitfd1cd27541f3ace3d002dd90b141d4fc66fd1907
tree2f9749a0bb017e4ef4358bc18e6f2708bd616280
parent4df66e17a921418456c95e820836a3116d14f92a
netfilter: nftables: relax check for stateful expressions in set definition

Restore the original behaviour where users are allowed to add an element
with any stateful expression if the set definition specifies no stateful
expressions. Make sure upper maximum number of stateful expressions of
NFT_SET_EXPR_MAX is not reached.

Fixes: 03abf76334ec ("netfilter: nftables: generalize set expressions support")
Fixes: d80bab9effe1 ("netfilter: nftables: netlink support for several set element expressions")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c