On Wed, Jun 03, 2020 at 01:51:20AM +0200, Stefano Brivio wrote:
> Mike Dillinger reported issues with insertion of entries into sets
> supporting intervals that were denied because of false conflicts with
> elements that were already expired. Partial failures would occur to,
> leading to the generation of new intervals the user didn't specify,
> as only the opening or the closing elements wouldn't be inserted.
>
> The reproducer provided by Mike looks like this:
>
> #!/bin/bash
> nft list set ip filter blacklist4-ip-1m
> for ((i=1;i<=10;i++)); do
> nft add element filter blacklist4-ip-1m {$i.$i.$i.$i}
> sleep 1
> done
> nft list set ip filter blacklist4-ip-1m
>
> which, run in a loop at different intervals, show the different kind
> of failures.
>
> Extend the existing test case for overlapping and non-overlapping
> intervals to systematically cover sets with a configured timeout.
Also applied, thanks.
