]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_ct: Remove confirmation check for NFT_CT_ID
authorBrett Mastbergen <brett.mastbergen@gmail.com>
Tue, 8 Dec 2020 21:39:24 +0000 (16:39 -0500)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 9 Dec 2020 09:31:58 +0000 (10:31 +0100)
commit645432ba163d71296e9c9a89caf0dc693e92c2a2
treeb90bed322948a1eb53823d2b4d293f0224445d17
parent222b6e764d025dd85fb81a5905728f698374458f
netfilter: nft_ct: Remove confirmation check for NFT_CT_ID

Since commit f83d89b7fcc3 ("netfilter: conntrack: Use consistent ct id
hash calculation") the ct id will not change from initialization to
confirmation.  Removing the confirmation check allows for things like
adding an element to a 'typeof ct id' set in prerouting upon reception
of the first packet of a new connection, and then being able to
reference that set consistently both before and after the connection
is confirmed.

Fixes: f83d89b7fcc3 ("netfilter: conntrack: Use consistent ct id hash calculation")
Signed-off-by: Brett Mastbergen <brett.mastbergen@gmail.com>
Acked-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_ct.c