netfilter: nft_set_rbtree: Add missing expired checks
authorPhil Sutter <phil@nwl.cc>
Mon, 11 May 2020 13:31:41 +0000 (15:31 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 12 May 2020 11:19:34 +0000 (13:19 +0200)
commit340eaff651160234bdbce07ef34b92a8e45cd540
treee5a5f497661d53c6078e57c9adc351d3aad9dedb
parent9ed81c8e0deb7bd2aa0d69371e4a0f9a7b31205d
netfilter: nft_set_rbtree: Add missing expired checks

Expired intervals would still match and be dumped to user space until
garbage collection wiped them out. Make sure they stop matching and
disappear (from users' perspective) as soon as they expire.

Fixes: 8d8540c4f5e03 ("netfilter: nft_set_rbtree: add timeout support")
Signed-off-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nft_set_rbtree.c