Pablo Neira Ayuso e4382ad0d8 netfilter: nf_tables: pass ctx to nf_tables_expr_destroy()
nft_set_elem_destroy() can be called from call_rcu context. Annotate
netns and table in set object so we can populate the context object.
Moreover, pass context object to nf_tables_set_elem_destroy() from the
commit phase, since it is already available from there.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
(cherry picked from commit 3453c92731884bad7c4c3a0667228b964747f3d5)
[Harshit: 4.14.y had backport commit: 4e0dbab570de ("netfilter:
 nf_tables: do not allow SET_ID to refer to another table") which does
 add couple of things which this commit is supposed to add]
Signed-off-by: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
[Vegard: removed .family = set->table->family assignment in
 nft_set_elem_destroy() as we're missing commit
 36596dadf54a920d26286cf9f421fb4ef648b51f ("netfilter: nf_tables: add
 single table list for all families").]
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>
2024-07-15 18:30:23 +00:00
..
2017-07-11 06:08:58 -04:00
2021-06-10 12:43:51 +02:00
2019-03-23 14:35:16 +01:00
2022-01-05 12:33:49 +01:00
2017-08-31 14:42:19 -07:00
2019-11-10 11:25:37 +01:00
2018-05-16 10:10:23 +02:00