tree 5f72b4aa9048eb367d9d61f58c5b3018330b6d82
parent 9c6a59543a3965071d65b0f9ea43aa396ce2ed14
author Pablo Neira Ayuso <pablo@netfilter.org> 1710061361 +0100
committer Pablo Neira Ayuso <pablo@netfilter.org> 1710976914 +0100

netfilter: nft_set_pipapo: release elements in clone only from destroy path

Clone already always provides a current view of the lookup table, use it
to destroy the set, otherwise it is possible to destroy elements twice.

This fix requires:

 212ed75dc5fb ("netfilter: nf_tables: integrate pipapo into commit protocol")

which came after:

 9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path").

Fixes: 9827a0e6e23b ("netfilter: nft_set_pipapo: release elements in clone from abort path")
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>