netfilter: nft_set_rbtree: skip elements in transaction from garbage collection
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 14 Jan 2023 22:49:46 +0000 (23:49 +0100)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Wed, 1 Feb 2023 07:27:26 +0000 (08:27 +0100)
commit8a13595600f7a66c3598bd74ad1c17e2d7ce0a9f
treedc2c0a8c27572fceb5ae8fce26f944ad8e689b4d
parent2bf1435fa19d2c58054391b3bba40d5510a5758c
netfilter: nft_set_rbtree: skip elements in transaction from garbage collection

[ Upstream commit 5d235d6ce75c12a7fdee375eb211e4116f7ab01b ]

Skip interference with an ongoing transaction, do not perform garbage
collection on inactive elements. Reset annotated previous end interval
if the expired element is marked as busy (control plane removed the
element right before expiration).

Fixes: 8d8540c4f5e0 ("netfilter: nft_set_rbtree: add timeout support")
Reviewed-by: Stefano Brivio <sbrivio@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nft_set_rbtree.c