diff options
author | Phil Sutter <phil@nwl.cc> | 2020-05-01 07:59:36 +0200 |
---|---|---|
committer | Phil Sutter <phil@nwl.cc> | 2020-05-11 14:28:29 +0200 |
commit | f42bfb344af82d10615420a96d088f11a0f78065 (patch) | |
tree | 65da8f72536451419e44d084ec26dbc517213380 /extensions/libip6t_HL.man | |
parent | 7b3558f16035eb13bdbb481bea1e4672f3679236 (diff) |
nft: cache: Re-establish cache consistency check
Restore code ensuring __nft_build_cache() returns a consistent cache in
which all ruleset elements belong to the same generation.
This check was removed by commit 200bc39965149 ("nft: cache: Fix
iptables-save segfault under stress") as it could lead to segfaults if a
partial cache fetch was done while cache's chain list was traversed.
With the new cache fetch logic, __nft_build_cache() is never called
while holding references to cache entries.
Signed-off-by: Phil Sutter <phil@nwl.cc>
Diffstat (limited to 'extensions/libip6t_HL.man')
0 files changed, 0 insertions, 0 deletions