diff options
author | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-04-29 17:49:25 +0200 |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2021-05-02 23:30:35 +0200 |
commit | 745e51d0b8f0512156bccc345e69ccb48338faf6 (patch) | |
tree | 14e089491e96998a10f53e192cde756f44cd394b | |
parent | c6896c340231c00ee3f4134dcdf76f018ff20b7e (diff) |
evaluate: remove set from cache on delete set command
Update the cache to remove this set from the evaluation phase.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
-rw-r--r-- | src/evaluate.c | 24 |
1 files changed, 24 insertions, 0 deletions
diff --git a/src/evaluate.c b/src/evaluate.c index 49d47d0b..19bf7387 100644 --- a/src/evaluate.c +++ b/src/evaluate.c @@ -4389,12 +4389,36 @@ static void chain_del_cache(struct eval_ctx *ctx, struct cmd *cmd) chain_free(chain); } +static void set_del_cache(struct eval_ctx *ctx, struct cmd *cmd) +{ + struct table *table; + struct set *set; + + if (!cmd->handle.set.name) + return; + + table = table_cache_find(&ctx->nft->cache.table_cache, + cmd->handle.table.name, + cmd->handle.family); + if (!table) + return; + + set = set_cache_find(table, cmd->handle.set.name); + if (!set) + return; + + set_cache_del(set); + set_free(set); +} + static int cmd_evaluate_delete(struct eval_ctx *ctx, struct cmd *cmd) { switch (cmd->obj) { case CMD_OBJ_ELEMENTS: return setelem_evaluate(ctx, cmd); case CMD_OBJ_SET: + set_del_cache(ctx, cmd); + return 0; case CMD_OBJ_RULE: return 0; case CMD_OBJ_CHAIN: |