commit | 340eaff651160234bdbce07ef34b92a8e45cd540 | [log] [tgz] |
---|---|---|
author | Phil Sutter <phil@nwl.cc> | Mon May 11 15:31:41 2020 +0200 |
committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue May 12 13:19:34 2020 +0200 |
tree | e5a5f497661d53c6078e57c9adc351d3aad9dedb | |
parent | 9ed81c8e0deb7bd2aa0d69371e4a0f9a7b31205d [diff] |
netfilter: nft_set_rbtree: Add missing expired checks Expired intervals would still match and be dumped to user space until garbage collection wiped them out. Make sure they stop matching and disappear (from users' perspective) as soon as they expire. Fixes: 8d8540c4f5e03 ("netfilter: nft_set_rbtree: add timeout support") Signed-off-by: Phil Sutter <phil@nwl.cc> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>