netfilter: nf_tables: fix set selection when timeouts are requested
The NFT_SET_TIMEOUT flag is ignore in nft_select_set_ops, which may lead to selection of a set implementation that doesn't actually support timeouts. Signed-off-by: Patrick McHardy <kaber@trash.net> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
parent
a1e67951e6
commit
4a8678efbe
|
@ -2159,7 +2159,7 @@ nft_select_set_ops(const struct nlattr * const nla[],
|
||||||
features = 0;
|
features = 0;
|
||||||
if (nla[NFTA_SET_FLAGS] != NULL) {
|
if (nla[NFTA_SET_FLAGS] != NULL) {
|
||||||
features = ntohl(nla_get_be32(nla[NFTA_SET_FLAGS]));
|
features = ntohl(nla_get_be32(nla[NFTA_SET_FLAGS]));
|
||||||
features &= NFT_SET_INTERVAL | NFT_SET_MAP;
|
features &= NFT_SET_INTERVAL | NFT_SET_MAP | NFT_SET_TIMEOUT;
|
||||||
}
|
}
|
||||||
|
|
||||||
bops = NULL;
|
bops = NULL;
|
||||||
|
|
Loading…
Reference in a new issue