projects / openwrt / staging / blogic.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 54ab49f) | patch
netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 11 May 2020 09:54:31 +0000 (11:54 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 12 May 2020 11:19:08 +0000 (13:19 +0200)
commit9ed81c8e0deb7bd2aa0d69371e4a0f9a7b31205d
treeedf44038ddceba9388e404f91af49c3c0636621btree | snapshot
parent54ab49fde95605a1077f759ce454d94e84b5ca45commit | diff
netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration

If the flow timer expires, the gc sets on the NF_FLOW_TEARDOWN flag.
Otherwise, the flowtable software path might race to refresh the
timeout, leaving the state machine in inconsistent state.

Fixes: c29f74e0df7a ("netfilter: nf_flow_table: hardware offload support")
Reported-by: Paul Blakey <paulb@mellanox.com>
Reviewed-by: Roi Dayan <roid@mellanox.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_core.c diff | blob | history
John Crispins staging tree