]> git.ipfire.org Git - thirdparty/linux.git/commit
netfilter: nft_ct: expectation timeouts are passed in milliseconds
authorFlorian Westphal <fw@strlen.de>
Tue, 23 Jun 2026 05:30:34 +0000 (07:30 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 23 Jun 2026 11:10:47 +0000 (13:10 +0200)
commit6fb421bd07f156cdf0cdede062d31f1c21def326
tree3d7f9901199028504945fb327353310d4a2c848b
parentbe57dd9c1c1796e368582313af2b3849f78ac224
netfilter: nft_ct: expectation timeouts are passed in milliseconds

Userspace passes '5000' in case user asks for 5 seconds.

Allowing for sub-second expectation lifetimes makes sense to me. so
fix up the kernel side instead of munging nft to send a value rounded
up to next second.

Also note that this violates nft convention of passing integers in
network byte order, but we can't change this anymore.

Fixes: 857b46027d6f ("netfilter: nft_ct: add ct expectations support")
Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_ct.c