projects / linux.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 1660360) | patch
netfilter: nf_tables: reject constant set with timeout
authorPablo Neira Ayuso <pablo@netfilter.org>
Fri, 1 Mar 2024 00:04:11 +0000 (01:04 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 6 Mar 2024 23:02:42 +0000 (00:02 +0100)
commit5f4fc4bd5cddb4770ab120ce44f02695c4505562
tree15de7514528024fcce261d82e2afce4f7ca728dbtree | snapshot
parent16603605b667b70da974bea8216c93e7db043bf1commit | diff
netfilter: nf_tables: reject constant set with timeout

This set combination is weird: it allows for elements to be
added/deleted, but once bound to the rule it cannot be updated anymore.
Eventually, all elements expire, leading to an empty set which cannot
be updated anymore. Reject this flags combination.

Cc: stable@vger.kernel.org
Fixes: 761da2935d6e ("netfilter: nf_tables: add set timeout API support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c diff | blob | history
ep93xx device tree rework repo: git://git.maquefel.me/linux.git