OSDN Git Service

netfilter: nf_tables: can't assume lock is acquired when dumping set elems
authorLiping Zhang <zlpnobody@gmail.com>
Sun, 14 May 2017 13:35:22 +0000 (21:35 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Mon, 15 May 2017 10:51:39 +0000 (12:51 +0200)
commitfa803605eef39372e53d7813002d73a3fcf10c88
tree7e3e452796daa0e76cd98d2fcb97134dbedd98fa
parent87e94dbc210a720a34be5c1174faee5c84be963e
netfilter: nf_tables: can't assume lock is acquired when dumping set elems

When dumping the elements related to a specified set, we may invoke the
nf_tables_dump_set with the NFNL_SUBSYS_NFTABLES lock not acquired. So
we should use the proper rcu operation to avoid race condition, just
like other nft dump operations.

Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c
net/netfilter/nft_set_hash.c