netfilter: nft_set_pipapo: walk over current view on netlink dump

Browse source

The generation mask can be updated while netlink dump is in progress.
The pipapo set backend walk iterator cannot rely on it to infer what
view of the datastructure is to be used. Add notation to specify if user
wants to read/update the set.

Based on patch from Florian Westphal.

Fixes: 2b84e215f8 ("netfilter: nft_set_pipapo: .walk does not deal with generations")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2024-04-10 18:50:45 +02:00

parent 751de2012e

commit 29b359cf6d

3 changed files with 23 additions and 2 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

14

include/net/netfilter/nf_tables.h

View file

6

net/netfilter/nf_tables_api.c

View file

5

net/netfilter/nft_set_pipapo.c

View file