| commit | 9ed81c8e0deb7bd2aa0d69371e4a0f9a7b31205d | [log] [tgz] |
|---|---|---|
| author | Pablo Neira Ayuso <pablo@netfilter.org> | Mon May 11 11:54:31 2020 +0200 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Tue May 12 13:19:08 2020 +0200 |
| tree | edf44038ddceba9388e404f91af49c3c0636621b | |
| parent | 54ab49fde95605a1077f759ce454d94e84b5ca45 [diff] |
netfilter: flowtable: set NF_FLOW_TEARDOWN flag on entry expiration
If the flow timer expires, the gc sets on the NF_FLOW_TEARDOWN flag.
Otherwise, the flowtable software path might race to refresh the
timeout, leaving the state machine in inconsistent state.
Fixes: c29f74e0df7a ("netfilter: nf_flow_table: hardware offload support")
Reported-by: Paul Blakey <paulb@mellanox.com>
Reviewed-by: Roi Dayan <roid@mellanox.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>