diff options
| author | Felix Fietkau | 2018-02-26 10:15:22 +0100 |
|---|---|---|
| committer | Pablo Neira Ayuso | 2018-04-24 10:28:57 +0200 |
| commit | ba03137f4c0c96d1f1f498632f868a2b743b155a (patch) | |
| tree | 034af48715cd14c86ac9848f17088ad62f30e199 /net/netfilter/nf_flow_table_core.c | |
| parent | netfilter: nf_flow_table: add a new flow state for tearing down offloading (diff) | |
| download | kernel-qcow2-linux-ba03137f4c0c96d1f1f498632f868a2b743b155a.tar.gz kernel-qcow2-linux-ba03137f4c0c96d1f1f498632f868a2b743b155a.tar.xz kernel-qcow2-linux-ba03137f4c0c96d1f1f498632f868a2b743b155a.zip | |
netfilter: nf_flow_table: in flow_offload_lookup, skip entries being deleted
Preparation for sending flows back to the slow path
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_flow_table_core.c')
| -rw-r--r-- | net/netfilter/nf_flow_table_core.c | 17 |
1 files changed, 15 insertions, 2 deletions
diff --git a/net/netfilter/nf_flow_table_core.c b/net/netfilter/nf_flow_table_core.c index 5a81e4f771e9..ff5e17a15963 100644 --- a/net/netfilter/nf_flow_table_core.c +++ b/net/netfilter/nf_flow_table_core.c @@ -184,8 +184,21 @@ struct flow_offload_tuple_rhash * flow_offload_lookup(struct nf_flowtable *flow_table, struct flow_offload_tuple *tuple) { - return rhashtable_lookup_fast(&flow_table->rhashtable, tuple, - nf_flow_offload_rhash_params); + struct flow_offload_tuple_rhash *tuplehash; + struct flow_offload *flow; + int dir; + + tuplehash = rhashtable_lookup_fast(&flow_table->rhashtable, tuple, + nf_flow_offload_rhash_params); + if (!tuplehash) + return NULL; + + dir = tuplehash->tuple.dir; + flow = container_of(tuplehash, struct flow_offload, tuplehash[dir]); + if (flow->flags & (FLOW_OFFLOAD_DYING | FLOW_OFFLOAD_TEARDOWN)) + return NULL; + + return tuplehash; } EXPORT_SYMBOL_GPL(flow_offload_lookup); |