e240cd0df4
This patch disallows rbtree with single elements, which is causing problems with the recent timeout support. Before this patch, you could opt out individual set representations per module, which is just adding extra complexity. Fixes: 8d8540c4f5e0("netfilter: nft_set_rbtree: add timeout support") Reported-by: Taehee Yoo <ap420073@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
29 lines
753 B
C
29 lines
753 B
C
/* SPDX-License-Identifier: GPL-2.0 */
|
|
#include <net/netfilter/nf_tables_core.h>
|
|
|
|
static int __init nf_tables_set_module_init(void)
|
|
{
|
|
nft_register_set(&nft_set_hash_fast_type);
|
|
nft_register_set(&nft_set_hash_type);
|
|
nft_register_set(&nft_set_rhash_type);
|
|
nft_register_set(&nft_set_bitmap_type);
|
|
nft_register_set(&nft_set_rbtree_type);
|
|
|
|
return 0;
|
|
}
|
|
|
|
static void __exit nf_tables_set_module_exit(void)
|
|
{
|
|
nft_unregister_set(&nft_set_rbtree_type);
|
|
nft_unregister_set(&nft_set_bitmap_type);
|
|
nft_unregister_set(&nft_set_rhash_type);
|
|
nft_unregister_set(&nft_set_hash_type);
|
|
nft_unregister_set(&nft_set_hash_fast_type);
|
|
}
|
|
|
|
module_init(nf_tables_set_module_init);
|
|
module_exit(nf_tables_set_module_exit);
|
|
|
|
MODULE_LICENSE("GPL");
|
|
MODULE_ALIAS_NFT_SET();
|