]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 14 Jan 2023 22:49:46 +0000 (23:49 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Mon, 6 Feb 2023 06:52:45 +0000 (07:52 +0100)
commite34d974f4e46e493ded8a2f8f9b1514b19f82e6f
treedb6f401a964d664eeab9c8a449d3698ed788e4e7
parentdbc28d171d1efa4fe46d8694b046dccad20eac22
netfilter: nft_set_rbtree: skip elements in transaction from garbage collection

[ Upstream commit 5d235d6ce75c12a7fdee375eb211e4116f7ab01b ]

Skip interference with an ongoing transaction, do not perform garbage
collection on inactive elements. Reset annotated previous end interval
if the expired element is marked as busy (control plane removed the
element right before expiration).

Fixes: de589f0d3172 ("netfilter: nft_set_rbtree: add timeout support")
Reviewed-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_set_rbtree.c