]> git.karo-electronics.de Git - karo-tx-linux.git/commit
netfilter: make it safer during the inet6_dev->addr_list traversal
authorLiping Zhang <zlpnobody@gmail.com>
Sun, 2 Apr 2017 09:27:53 +0000 (17:27 +0800)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sat, 8 Apr 2017 21:52:16 +0000 (23:52 +0200)
commit0c7930e5763bdd189bd50035c025a9cbe5e82f23
treee050756cd08b43500bc7e2b8a6f803a9f0b376bb
parent3173d5b8c89e67fa3176292ff9af06f09f365348
netfilter: make it safer during the inet6_dev->addr_list traversal

inet6_dev->addr_list is protected by inet6_dev->lock, so only using
rcu_read_lock is not enough, we should acquire read_lock_bh(&idev->lock)
before the inet6_dev->addr_list traversal.

Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_nat_redirect.c
net/netfilter/xt_TPROXY.c