diff options
| author | Liping Zhang <zlpnobody@gmail.com> | 2017-04-01 15:55:44 +0300 |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2017-04-09 00:52:16 +0300 |
| commit | 3173d5b8c89e67fa3176292ff9af06f09f365348 (patch) | |
| tree | 003c7716e5989830dfe5d1fff85718929d852a39 /net/netfilter/xt_TPROXY.c | |
| parent | 8b5995d0633b04f9a0d321a7cc77e386440730cf (diff) | |
| download | linux-3173d5b8c89e67fa3176292ff9af06f09f365348.tar.xz | |
netfilter: ctnetlink: make it safer when checking the ct helper name
One CPU is doing ctnetlink_change_helper(), while another CPU is doing
unhelp() at the same time. So even if help->helper is not NULL at first,
the later statement strcmp(help->helper->name, ...) may still access
the NULL pointer.
So we must use rcu_read_lock and rcu_dereference to avoid such _bad_
thing happen.
Fixes: f95d7a46bc57 ("netfilter: ctnetlink: Fix regression in CTA_HELP processing")
Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/xt_TPROXY.c')
0 files changed, 0 insertions, 0 deletions