netfilter: nf_tables: all transaction allocations can now sleep

Browse source

[ Upstream commit 3d95a2e016 ]

Now that nft_setelem_flush is not called with rcu read lock held or
disabled softinterrupts anymore this can now use GFP_KERNEL too.

This is the last atomic allocation of transaction elements, so remove
all gfp_t arguments and the wrapper function.

This makes attempts to delete large sets much more reliable, before
this was prone to transient memory allocation failures.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Florian Westphal 2025-08-22 10:15:38 +02:00 • committed by Greg Kroah-Hartman

parent cada05ac8f

commit 81be30dfde

1 changed files with 19 additions and 28 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

47

net/netfilter/nf_tables_api.c

View file