]> git.ipfire.org Git - thirdparty/linux.git/commit
netfilter: nf_conncount: update last_gc only when GC has been performed
authorFernando Fernandez Mancera <fmancera@suse.de>
Wed, 17 Dec 2025 14:46:40 +0000 (15:46 +0100)
committerFlorian Westphal <fw@strlen.de>
Fri, 2 Jan 2026 09:44:28 +0000 (10:44 +0100)
commit7811ba452402d58628e68faedf38745b3d485e3c
tree381719fe1e03a1ac7aa6bd61fff328fdae6a676e
parentd077e8119ddbb4fca67540f1a52453631a47f221
netfilter: nf_conncount: update last_gc only when GC has been performed

Currently last_gc is being updated everytime a new connection is
tracked, that means that it is updated even if a GC wasn't performed.
With a sufficiently high packet rate, it is possible to always bypass
the GC, causing the list to grow infinitely.

Update the last_gc value only when a GC has been actually performed.

Fixes: d265929930e2 ("netfilter: nf_conncount: reduce unnecessary GC")
Signed-off-by: Fernando Fernandez Mancera <fmancera@suse.de>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nf_conncount.c