netfilter: nf_tables: skip dead set elements in netlink dump

[platform/kernel/linux-rpi.git] / net / netfilter / nf_tables_api.c

diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c
index 5730f9a..1f6d5ff 100644 (file)
--- a/net/netfilter/nf_tables_api.c
+++ b/net/netfilter/nf_tables_api.c
@@ -5662,7 +5662,7 @@ static int nf_tables_dump_setelem(const struct nft_ctx *ctx,
        const struct nft_set_ext *ext = nft_set_elem_ext(set, elem->priv);
        struct nft_set_dump_args *args;
 
-       if (nft_set_elem_expired(ext))
+       if (nft_set_elem_expired(ext) || nft_set_elem_is_dead(ext))
                return 0;
 
        args = container_of(iter, struct nft_set_dump_args, iter);