diff options
| author | Patrick McHardy <[email protected]> | 2011-02-14 16:35:07 +0000 |
|---|---|---|
| committer | Patrick McHardy <[email protected]> | 2011-02-14 16:35:07 +0000 |
| commit | de9963f0f2dfad128b26ae7bf6005f5948416a6d (patch) | |
| tree | 73b45541d33e86600cd10e4be43298864f2b6a1a /net/ipv4/tcp_output.c | |
| parent | netfilter: nf_conntrack: set conntrack templates again if we return NF_REPEAT (diff) | |
| download | kernel-de9963f0f2dfad128b26ae7bf6005f5948416a6d.tar.gz kernel-de9963f0f2dfad128b26ae7bf6005f5948416a6d.zip | |
netfilter: nf_iterate: fix incorrect RCU usage
As noticed by Eric, nf_iterate doesn't use RCU correctly by
accessing the prev pointer of a RCU protected list element when
a verdict of NF_REPEAT is issued.
Fix by jumping backwards to the hook invocation directly instead
of loading the previous list element before continuing the list
iteration.
Reported-by: Eric Dumazet <[email protected]>
Acked-by: Eric Dumazet <[email protected]>
Signed-off-by: Patrick McHardy <[email protected]>
Diffstat (limited to 'net/ipv4/tcp_output.c')
0 files changed, 0 insertions, 0 deletions