Message ID | 1579411110-3187-1-git-send-email-wenxu@ucloud.cn |
---|---|
State | Accepted |
Delegated to: | Pablo Neira |
Headers | show |
Series | [nf,v2] netfilter: nf_tables_offload: fix check the chain offload flag | expand |
On Sun, Jan 19, 2020 at 01:18:30PM +0800, wenxu@ucloud.cn wrote: > From: wenxu <wenxu@ucloud.cn> > > In the nft_indr_block_cb the chain should check the flag with > NFT_CHAIN_HW_OFFLOAD. Applied.
diff --git a/net/netfilter/nf_tables_offload.c b/net/netfilter/nf_tables_offload.c index a9ea29a..2bb2848 100644 --- a/net/netfilter/nf_tables_offload.c +++ b/net/netfilter/nf_tables_offload.c @@ -564,7 +564,7 @@ static void nft_indr_block_cb(struct net_device *dev, mutex_lock(&net->nft.commit_mutex); chain = __nft_offload_get_chain(dev); - if (chain) { + if (chain && chain->flags & NFT_CHAIN_HW_OFFLOAD) { struct nft_base_chain *basechain; basechain = nft_base_chain(chain);