path: root/include
diff options
authorVishwanath Pai <>2017-08-17 01:23:55 -0400
committerJozsef Kadlecsik <>2017-09-06 17:25:24 +0200
commit9ccbd1c6464cf62ad5531fd1a473703f4f472840 (patch)
treed83c07cc6a71d353cee7daf2593adf1109dec5aa /include
parente3c74c6a621ffa16749afed8354b9b491484ebf9 (diff)
netfilter: ipset: ipset list may return wrong member count for set with timeout
Simple testcase: $ ipset create test hash:ip timeout 5 $ ipset add test $ ipset add test $ sleep 5 $ ipset l Name: test Type: hash:ip Revision: 5 Header: family inet hashsize 1024 maxelem 65536 timeout 5 Size in memory: 296 References: 0 Number of entries: 2 Members: We return "Number of entries: 2" but no members are listed. That is because mtype_list runs "ip_set_timeout_expired" and does not list the expired entries, but set->elements is never upated (until mtype_gc cleans it up later). Reviewed-by: Joshua Hunt <> Signed-off-by: Vishwanath Pai <>
Diffstat (limited to 'include')
0 files changed, 0 insertions, 0 deletions