]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: do not remove elements if set backend implements .abort
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 4 Oct 2023 11:12:58 +0000 (13:12 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 25 Oct 2023 10:03:07 +0000 (12:03 +0200)
commitc2eaa8319f991a9857210785c394a7f92dfebb5b
treed1f7777113d5fe28e530ce8724666b40af60dc0b
parent0e8cdddf010be6131628f499003e8ee8cc7de0f5
netfilter: nf_tables: do not remove elements if set backend implements .abort

commit ebd032fa881882fef2acb9da1bbde48d8233241d upstream.

pipapo set backend maintains two copies of the datastructure, removing
the elements from the copy that is going to be discarded slows down
the abort path significantly, from several minutes to few seconds after
this patch.

Fixes: 212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_tables_api.c