Unverified Commit 0a251b5e authored by openeuler-ci-bot's avatar openeuler-ci-bot Committed by Gitee
Browse files

!7253 netfilter: nf_tables: disallow timeout for anonymous sets

parents 1df0d53c 6c483e6d
Loading
Loading
Loading
Loading
+7 −0
Original line number Diff line number Diff line
@@ -4399,6 +4399,9 @@ static int nf_tables_newset(struct net *net, struct sock *nlsk,
		if (!(flags & NFT_SET_TIMEOUT))
			return -EINVAL;

		if (flags & NFT_SET_ANONYMOUS)
			return -EOPNOTSUPP;

		err = nf_msecs_to_jiffies64(nla[NFTA_SET_TIMEOUT], &timeout);
		if (err)
			return err;
@@ -4407,6 +4410,10 @@ static int nf_tables_newset(struct net *net, struct sock *nlsk,
	if (nla[NFTA_SET_GC_INTERVAL] != NULL) {
		if (!(flags & NFT_SET_TIMEOUT))
			return -EINVAL;

		if (flags & NFT_SET_ANONYMOUS)
			return -EOPNOTSUPP;

		gc_int = ntohl(nla_get_be32(nla[NFTA_SET_GC_INTERVAL]));
	}