]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nft_dynset: dump expressions when set definition contains no expressions
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 16 Jan 2021 18:50:34 +0000 (19:50 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 16 Jan 2021 18:54:42 +0000 (19:54 +0100)
commitce5379963b2884e9d23bea0c5674a7251414c84b
tree71893cd0bbf6b281045f158164c1c818230a2c83
parent0c5b7a501e7400869ee905b4f7af3d6717802bcb
netfilter: nft_dynset: dump expressions when set definition contains no expressions

If the set definition provides no stateful expressions, then include the
stateful expression in the ruleset listing. Without this fix, the dynset
rule listing shows the stateful expressions provided by the set
definition.

Fixes: 65038428b2c6 ("netfilter: nf_tables: allow to specify stateful expression in set definition")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_dynset.c