Commit 2a0aa8a0 authored Sep 02, 2019 by Pablo Neira Ayuso Committed by Greg Kroah-Hartman Sep 21, 2019

netfilter: nf_flow_table: set default timeout after successful insertion

commit 110e48725db6262f260f10727d0fb2d3d25895e4 upstream.

Set up the default timeout for this new entry otherwise the garbage
collector might quickly remove it right after the flowtable insertion.

Fixes: ac2a6666 ("netfilter: add generic flow table infrastructure")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

parent dbc29aff

net/netfilter/nf_flow_table_core.c

+1 −1

Original line number	Original line	Diff line number	Diff line
	@@ -203,7 +203,7 @@ int flow_offload_add(struct nf_flowtable flow_table, struct flow_offload flow)
	return err;		return err;
	}		}

	flow->timeout = (u32)jiffies;		flow->timeout = (u32)jiffies + NF_FLOW_TIMEOUT;
	return 0;		return 0;
	}		}
	EXPORT_SYMBOL_GPL(flow_offload_add);		EXPORT_SYMBOL_GPL(flow_offload_add);