|
|
Log in / Subscribe / Register

netfilter: ipset: gc, backlog and cidr patches

From:  Jozsef Kadlecsik <kadlec-AT-netfilter.org>
To:  netfilter-devel-AT-vger.kernel.org
Subject:  [PATCH 0/5] netfilter: ipset: gc, backlog and cidr patches
Date:  Thu, 02 Jul 2026 15:46:56 +0200
Message-ID:  <20260702134701.207721-1-kadlec@netfilter.org>
Cc:  Pablo Neira Ayuso <pablo-AT-netfilter.org>
Archive-link:  Article

Hi Pablo,

Here follows three patches which addresses the gc-resize clashing
in the comment extension, the add/del backlog cleanup in the
error path and a fairly large rewriting of the cidr bookkeeping.
The two other patches could be squeezed into the next ones on
the list but I think they are a bit independent cleanups and
clarifications.

The batch does not address the issue Florian pointed out about
sashiko's complains about possible missing rcu locking and the
possible torn reads, also from sashiko reports.

Best regards,
Jozsef

Jozsef Kadlecsik (5):
  netfilter: ipset: mark the rcu locked areas properly
  netfilter: ipset: exlude gc when resize is in progress
  netfilter: ipset: cleanup the add/del backlog when resize failed
  netfilter: ipset: allocate the proper memory for the generic hash
    structure
  netfilter: ipset: rework cidr bookkeeping

 net/netfilter/ipset/ip_set_hash_gen.h        | 311 ++++++++++++-------
 net/netfilter/ipset/ip_set_hash_ipportnet.c  |   4 +-
 net/netfilter/ipset/ip_set_hash_net.c        |   4 +-
 net/netfilter/ipset/ip_set_hash_netiface.c   |   4 +-
 net/netfilter/ipset/ip_set_hash_netnet.c     |  12 +-
 net/netfilter/ipset/ip_set_hash_netport.c    |   4 +-
 net/netfilter/ipset/ip_set_hash_netportnet.c |  12 +-
 7 files changed, 230 insertions(+), 121 deletions(-)

-- 
2.39.5




Copyright © 2026, Eklektix, Inc.
Comments and public postings are copyrighted by their creators.
Linux is a registered trademark of Linus Torvalds