netfilter: nf_tables: pass ctx to nf_tables_expr_destroy()
nft_set_elem_destroy() can be called from call_rcu context. Annotate
netns and table in set object so we can populate the context object.
Moreover, pass context object to nf_tables_set_elem_destroy() from the
commit phase, since it is already available from there.
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
(cherry picked from commit 3453c92731884bad7c4c3a0667228b964747f3d5)
[Harshit: 4.14.y had backport commit: 4e0dbab570de ("netfilter:
nf_tables: do not allow SET_ID to refer to another table") which does
add couple of things which this commit is supposed to add]
Signed-off-by: Harshit Mogalapalli <harshit.m.mogalapalli@oracle.com>
[Vegard: removed .family = set->table->family assignment in
nft_set_elem_destroy() as we're missing commit
36596dadf54a920d26286cf9f421fb4ef648b51f ("netfilter: nf_tables: add
single table list for all families").]
Signed-off-by: Vegard Nossum <vegard.nossum@oracle.com>
2 files changed