netfilter: nft_set_hash: bogus element self comparison from deactivation path
authorPablo Neira Ayuso <pablo@netfilter.org>
Mon, 25 Feb 2019 13:13:42 +0000 (14:13 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Wed, 27 Feb 2019 10:08:31 +0000 (11:08 +0100)
commita01cbae57ec29b161d42ee1caa4ffffda5d519c2
treed73a4f5a7f11b7fe454491b043fc9edc3729aef4
parent3b02b0adc242a72b5e46019b6a9e4f84823592f6
netfilter: nft_set_hash: bogus element self comparison from deactivation path

Use the element from the loop iteration, not the same element we want to
deactivate otherwise this branch always evaluates true.

Fixes: 6c03ae210ce3 ("netfilter: nft_set_hash: add non-resizable hashtable implementation")
Reported-by: Florian Westphal <fw@strlen.de>
Tested-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_set_hash.c