diff options
| author | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-09-03 01:08:58 +0200 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2024-09-03 18:18:41 +0200 |
| commit | 73d3c04b710f0c144ce873dfe4f173a55c749539 (patch) | |
| tree | b576262a106232c7208cde4c22d455209c3aedc0 /include | |
| parent | c5ad8ed61fa8410b272c077ec167c593602b4542 (diff) | |
| download | linux-73d3c04b710f0c144ce873dfe4f173a55c749539.tar.gz linux-73d3c04b710f0c144ce873dfe4f173a55c749539.tar.bz2 linux-73d3c04b710f0c144ce873dfe4f173a55c749539.zip | |
netfilter: nf_tables: annotate data-races around element expiration
element expiration can be read-write locklessly, it can be written by
dynset and read from netlink dump, add annotation.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'include')
| -rw-r--r-- | include/net/netfilter/nf_tables.h | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/include/net/netfilter/nf_tables.h b/include/net/netfilter/nf_tables.h index c302b396e1a7..1528af3fe26f 100644 --- a/include/net/netfilter/nf_tables.h +++ b/include/net/netfilter/nf_tables.h @@ -835,7 +835,7 @@ static inline bool __nft_set_elem_expired(const struct nft_set_ext *ext, u64 tstamp) { return nft_set_ext_exists(ext, NFT_SET_EXT_EXPIRATION) && - time_after_eq64(tstamp, *nft_set_ext_expiration(ext)); + time_after_eq64(tstamp, READ_ONCE(*nft_set_ext_expiration(ext))); } static inline bool nft_set_elem_expired(const struct nft_set_ext *ext) |