netfilter: nft_dynset: honor stateful expressions in set definition
authorPablo Neira Ayuso <pablo@netfilter.org>
Sat, 16 Jan 2021 11:26:46 +0000 (12:26 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 16 Jan 2021 17:57:26 +0000 (18:57 +0100)
commitfca05d4d61e65fa573a3768f9019a42143c03349
treeeaa0f40aca7c42e0ed2f9ebb655ba4fcdfdfa07e
parentc8a8ead01736419a14c3106e1f26a79d74fc84c7
netfilter: nft_dynset: honor stateful expressions in set definition

If the set definition contains stateful expressions, allocate them for
the newly added entries from the packet path.

Fixes: 65038428b2c6 ("netfilter: nf_tables: allow to specify stateful expression in set definition")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netfilter/nf_tables.h
net/netfilter/nf_tables_api.c
net/netfilter/nft_dynset.c