netfilter: nft_dynset: honor stateful expressions in set definition

Browse source

If the set definition contains stateful expressions, allocate them for
the newly added entries from the packet path.

Fixes: 65038428b2 ("netfilter: nf_tables: allow to specify stateful expression in set definition")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Pablo Neira Ayuso 2021-01-16 12:26:46 +01:00

parent c8a8ead017

commit fca05d4d61

3 changed files with 10 additions and 3 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

include/net/netfilter/nf_tables.h

View file

5

net/netfilter/nf_tables_api.c

View file

6

net/netfilter/nft_dynset.c

View file