netfilter: nft_dynset: relax superfluous check on set updates
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 25 Sep 2021 20:40:26 +0000 (22:40 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Thu, 18 Nov 2021 18:16:30 +0000 (19:16 +0100)
commit3ad069d68eea2bbdeec105dd6c386e177fd322a7
tree3758de51765603bfaded88772aad74681f9ab4b1
parentd846b69dc7ffca2042428cd46b323fed4ce6a801
netfilter: nft_dynset: relax superfluous check on set updates

[ Upstream commit 7b1394892de8d95748d05e3ee41e85edb4abbfa1 ]

Relax this condition to make add and update commands idempotent for sets
with no timeout. The eval function already checks if the set element
timeout is available and updates it if the update command is used.

Fixes: 22fe54d5fefc ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_dynset.c