Re: [PATCH nf] netfilter: nft_quota: make nft_overquota() really over the quota

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Thu, Apr 10, 2025 at 07:17:47AM +0000, Zhongqiu Duan wrote:
> Keep consistency with xt_quota and nfacct.

Where is the inconsistency?

> Fixes: 795595f68d6c ("netfilter: nft_quota: dump consumed quota")
> Signed-off-by: Zhongqiu Duan <dzq.aishenghu0@xxxxxxxxx>
> ---
>  net/netfilter/nft_quota.c | 2 +-
>  1 file changed, 1 insertion(+), 1 deletion(-)
> 
> diff --git a/net/netfilter/nft_quota.c b/net/netfilter/nft_quota.c
> index 9b2d7463d3d3..0bb43c723061 100644
> --- a/net/netfilter/nft_quota.c
> +++ b/net/netfilter/nft_quota.c
> @@ -21,7 +21,7 @@ struct nft_quota {
>  static inline bool nft_overquota(struct nft_quota *priv,
>  				 const struct sk_buff *skb)
>  {
> -	return atomic64_add_return(skb->len, priv->consumed) >=
> +	return atomic64_add_return(skb->len, priv->consumed) >
>  	       atomic64_read(&priv->quota);


[Index of Archives]     [Netfitler Users]     [Berkeley Packet Filter]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux