Commit 6e57ccc2 authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso Committed by Lee Jones
Browse files

UPSTREAM: netfilter: nft_set_hash: mark set element as dead when deleting from packet path



commit c92db303 upstream.

Set on the NFT_SET_ELEM_DEAD_BIT flag on this element, instead of
performing element removal which might race with an ongoing transaction.
Enable gc when dynamic flag is set on since dynset deletion requires
garbage collection after this patch.

Bug: 299922216
Fixes: d0a8d877 ("netfilter: nft_dynset: support for element deletion")
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
(cherry picked from commit 85520a1f)
Signed-off-by: default avatarLee Jones <joneslee@google.com>
Change-Id: I285953a36189d474d668b2ebdc9a3c27fa3f918c
parent 08c2cbb7
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please to comment