diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-03-01 01:04:11 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-03-07 00:02:42 +0100 |
| commit | 5f4fc4bd5cddb4770ab120ce44f02695c4505562 (patch) | |
| tree | 15de7514528024fcce261d82e2afce4f7ca728db /tools/perf/scripts/python/bin | |
| parent | netfilter: nf_tables: disallow anonymous set with timeout flag (diff) | |
| download | linux-5f4fc4bd5cddb4770ab120ce44f02695c4505562.tar.gz linux-5f4fc4bd5cddb4770ab120ce44f02695c4505562.zip | |
netfilter: nf_tables: reject constant set with timeout
This set combination is weird: it allows for elements to be
added/deleted, but once bound to the rule it cannot be updated anymore.
Eventually, all elements expire, leading to an empty set which cannot
be updated anymore. Reject this flags combination.
Cc: stable@vger.kernel.org
Fixes: 761da2935d6e ("netfilter: nf_tables: add set timeout API support")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'tools/perf/scripts/python/bin')
0 files changed, 0 insertions, 0 deletions