]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: do not remove elements if set backend implements .abort
authorPablo Neira Ayuso <pablo@netfilter.org>
Wed, 4 Oct 2023 11:12:58 +0000 (13:12 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 25 Oct 2023 09:58:57 +0000 (11:58 +0200)
commitcc19daa037f53830ea31c63eb5868b913382633c
tree31930160b7fcfc8648d9dbd54759d8a152f9276f
parentdb33720697c873b88d53c4b4d4f0eeba82a101ca
netfilter: nf_tables: do not remove elements if set backend implements .abort

commit ebd032fa881882fef2acb9da1bbde48d8233241d upstream.

pipapo set backend maintains two copies of the datastructure, removing
the elements from the copy that is going to be discarded slows down
the abort path significantly, from several minutes to few seconds after
this patch.

Fixes: 212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>
net/netfilter/nf_tables_api.c