projects / GitHub / MotorolaMobilityLLC / kernel-slsi.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 87e94db) | patch
netfilter: nf_tables: can't assume lock is acquired when dumping set elems
authorLiping Zhang <zlpnobody@gmail.com>
Sun, 14 May 2017 13:35:22 +0000 (21:35 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 15 May 2017 10:51:39 +0000 (12:51 +0200)
commitfa803605eef39372e53d7813002d73a3fcf10c88
tree7e3e452796daa0e76cd98d2fcb97134dbedd98fatree | snapshot (tar.gz zip)
parent87e94dbc210a720a34be5c1174faee5c84be963ecommit | diff
netfilter: nf_tables: can't assume lock is acquired when dumping set elems

When dumping the elements related to a specified set, we may invoke the
nf_tables_dump_set with the NFNL_SUBSYS_NFTABLES lock not acquired. So
we should use the proper rcu operation to avoid race condition, just
like other nft dump operations.

Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c diff | blob | blame | history
net/netfilter/nft_set_hash.c diff | blob | blame | history
Motorola kernel-slsi