]> git.ipfire.org Git - thirdparty/linux.git/commit
netfilter: nf_tables: remove catchall element in GC sync path
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 6 Nov 2023 09:53:09 +0000 (10:53 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 8 Nov 2023 12:52:32 +0000 (13:52 +0100)
commit93995bf4af2c5a99e2a87f0cd5ce547d31eb7630
treea7b456ba275401b182c0e4ab1ddcb8ef71fdba72
parent94090b23f3f71c150359a2e0716855a4037ad45a
netfilter: nf_tables: remove catchall element in GC sync path

The expired catchall element is not deactivated and removed from GC sync
path. This path holds mutex so just call nft_setelem_data_deactivate()
and nft_setelem_catchall_remove() before queueing the GC work.

Fixes: 4a9e12ea7e70 ("netfilter: nft_set_pipapo: call nft_trans_gc_queue_sync() in catchall GC")
Reported-by: lonial con <kongln9170@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c