Commit 0d3601d2 authored Mar 05, 2018 by Pablo Neira Ayuso

netfilter: nft_set_hash: skip fixed hash if timeout is specified



Fixed hash supports to timeouts, so skip it. Otherwise, userspace hits
EOPNOTSUPP.

Fixes: 6c03ae21 ("netfilter: nft_set_hash: add non-resizable hashtable implementation")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent ce380619

net/netfilter/nft_set_hash.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -674,7 +674,7 @@ static const struct nft_set_ops *
		nft_hash_select_ops(const struct nft_ctx ctx, const struct nft_set_desc desc,
		u32 flags)
		{
		if (desc->size) {
		if (desc->size && !(flags & NFT_SET_TIMEOUT)) {
		switch (desc->klen) {
		case 4:
		return &nft_hash_fast_ops;