Commit 4a8678ef authored Apr 05, 2015 by Patrick McHardy Committed by Pablo Neira Ayuso Apr 08, 2015

netfilter: nf_tables: fix set selection when timeouts are requested



The NFT_SET_TIMEOUT flag is ignore in nft_select_set_ops, which may
lead to selection of a set implementation that doesn't actually
support timeouts.

Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

parent a1e67951

net/netfilter/nf_tables_api.c

+1 −1

Original line number	Diff line number	Diff line
		@@ -2159,7 +2159,7 @@ nft_select_set_ops(const struct nlattr * const nla[],
		features = 0;
		if (nla[NFTA_SET_FLAGS] != NULL) {
		features = ntohl(nla_get_be32(nla[NFTA_SET_FLAGS]));
		features &= NFT_SET_INTERVAL \| NFT_SET_MAP;
		features &= NFT_SET_INTERVAL \| NFT_SET_MAP \| NFT_SET_TIMEOUT;
		}

		bops = NULL;