Skip to content

Commit 6d365ea

Browse files
committed
netfilter: nft_set_pipapo: stop GC iteration if GC transaction allocation fails
nft_trans_gc_queue_sync() enqueues the GC transaction and it allocates a new one. If this allocation fails, then stop this GC sync run and retry later. Fixes: 5f68718 ("netfilter: nf_tables: GC transaction API to avoid race with control plane") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
1 parent 4a9e12e commit 6d365ea

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

net/netfilter/nft_set_pipapo.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1596,7 +1596,7 @@ static void pipapo_gc(const struct nft_set *_set, struct nft_pipapo_match *m)
15961596

15971597
gc = nft_trans_gc_queue_sync(gc, GFP_ATOMIC);
15981598
if (!gc)
1599-
break;
1599+
return;
16001600

16011601
nft_pipapo_gc_deactivate(net, set, e);
16021602
pipapo_drop(m, rulemap);

0 commit comments

Comments
 (0)