linux-kernelorg-stable/include
Florian Westphal 4c34625f7d netfilter: nf_tables: make nft_set_do_lookup available unconditionally
[ Upstream commit 11fe5a82e5 ]

This function was added for retpoline mitigation and is replaced by a
static inline helper if mitigations are not enabled.

Enable this helper function unconditionally so next patch can add a lookup
restart mechanism to fix possible false negatives while transactions are
in progress.

Adding lookup restarts in nft_lookup_eval doesn't work as nft_objref would
then need the same copypaste loop.

This patch is separate to ease review of the actual bug fix.

Suggested-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Florian Westphal <fw@strlen.de>
Stable-dep-of: b2f742c846 ("netfilter: nf_tables: restart set lookup on base_seq change")
Signed-off-by: Sasha Levin <sashal@kernel.org>
2025-09-19 16:35:50 +02:00
..
acpi
asm-generic
clocksource
crypto
cxl
drm drm/tests: Do not use drm_fb_blit() in format-helper tests 2025-08-28 16:31:12 +02:00
dt-bindings
keys
kunit
kvm
linux compiler-clang.h: define __SANITIZE_*__ macros only when undefined 2025-09-19 16:35:45 +02:00
math-emu
media
memory
misc
net netfilter: nf_tables: make nft_set_do_lookup available unconditionally 2025-09-19 16:35:50 +02:00
pcmcia
ras
rdma
rv
scsi
soc
sound ASoC: tas2781: Fix the wrong step for TLV on tas2781 2025-08-15 12:14:06 +02:00
target
trace dma-mapping: trace more error paths 2025-09-19 16:35:42 +02:00
uapi netlink: specs: mptcp: replace underscores with dashes in names 2025-09-19 16:35:47 +02:00
ufs
vdso
video
xen