netfilter: nft_set_rbtree: check for inactive element after flag mismatch
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 12 Mar 2019 11:10:59 +0000 (12:10 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 18 Mar 2019 15:21:09 +0000 (16:21 +0100)
commit05b7639da55f5555b9866a1f4b7e8995232a6323
treedf3665a858a7ea9ab7e82d7cc87cac105522a29c
parent29b0b5d56589d66bd5793f1e09211ce7d7d3cd36
netfilter: nft_set_rbtree: check for inactive element after flag mismatch

Otherwise, we hit bogus ENOENT when removing elements.

Fixes: e701001e7cbe ("netfilter: nft_rbtree: allow adjacent intervals with dynamic updates")
Reported-by: Václav Zindulka <vaclav.zindulka@tlapnet.cz>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_set_rbtree.c