netfilter: ipset: Add list flush to cancel_gc
authorAlexander Maltsev <keltar.gw@gmail.com>
Wed, 17 Apr 2024 13:51:41 +0000 (18:51 +0500)
committerSalvatore Bonaccorso <carnil@debian.org>
Sat, 10 Aug 2024 06:09:03 +0000 (08:09 +0200)
commitaa56e0ee8db20dba1e4e7ac54a8c4bd1d809e626
tree41bbaef90d708698a3bd8de278188071e37a8ebf
parentf605e7e214cb13f548b935bf063f97064456bf8e
netfilter: ipset: Add list flush to cancel_gc

Origin: https://git.kernel.org/linus/c1193d9bbbd379defe9be3c6de566de684de8a6f

Flushing list in cancel_gc drops references to other lists right away,
without waiting for RCU to destroy list. Fixes race when referenced
ipsets can't be destroyed while referring list is scheduled for destroy.

Fixes: 97f7cf1cd80e ("netfilter: ipset: fix performance regression in swap operation")
Signed-off-by: Alexander Maltsev <keltar.gw@gmail.com>
Acked-by: Jozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Gbp-Pq: Topic bugfix/all
Gbp-Pq: Name netfilter-ipset-Add-list-flush-to-cancel_gc.patch
net/netfilter/ipset/ip_set_list_set.c