summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPablo Neira Ayuso <pablo@netfilter.org>2022-08-09 17:23:53 +0200
committerPablo Neira Ayuso <pablo@netfilter.org>2022-08-11 18:53:48 +0200
commit271c5ca826e0c3c53e0eb4032f8eaedea1ee391c (patch)
treea7147cb95cc7ae4519b3a7d3d8caaf9420204bca
parent0b2f3212b551a87fe936701fa0813032861a3308 (diff)
downloadlinux-stable-271c5ca826e0c3c53e0eb4032f8eaedea1ee391c.tar.gz
linux-stable-271c5ca826e0c3c53e0eb4032f8eaedea1ee391c.tar.bz2
linux-stable-271c5ca826e0c3c53e0eb4032f8eaedea1ee391c.zip
netfilter: nf_tables: really skip inactive sets when allocating name
While looping to build the bitmap of used anonymous set names, check the current set in the iteration, instead of the one that is being created. Fixes: 37a9cc525525 ("netfilter: nf_tables: add generation mask to sets") Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r--net/netfilter/nf_tables_api.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
index d90434eadc1b..1b9459a364ba 100644
--- a/net/netfilter/nf_tables_api.c
+++ b/net/netfilter/nf_tables_api.c
@@ -3907,7 +3907,7 @@ cont:
list_for_each_entry(i, &ctx->table->sets, list) {
int tmp;
- if (!nft_is_active_next(ctx->net, set))
+ if (!nft_is_active_next(ctx->net, i))
continue;
if (!sscanf(i->name, name, &tmp))
continue;