diff options
| author | Patrick McHardy <kaber@trash.net> | 2008-06-17 15:51:47 -0700 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2008-06-17 15:51:47 -0700 |
| commit | 68b80f11380889996aa7eadba29dbbb5c29a5864 (patch) | |
| tree | e6425d1ee4d15713678e60cd03bd5f514385e6e5 /block/elevator.c | |
| parent | 65c3e4715b1b934f8dcc002d9f46b4371ca7a9b1 (diff) | |
| download | kernel-crypto-68b80f11380889996aa7eadba29dbbb5c29a5864.tar.gz kernel-crypto-68b80f11380889996aa7eadba29dbbb5c29a5864.tar.xz kernel-crypto-68b80f11380889996aa7eadba29dbbb5c29a5864.zip | |
netfilter: nf_nat: fix RCU races
Fix three ct_extend/NAT extension related races:
- When cleaning up the extension area and removing it from the bysource hash,
the nat->ct pointer must not be set to NULL since it may still be used in
a RCU read side
- When replacing a NAT extension area in the bysource hash, the nat->ct
pointer must be assigned before performing the replacement
- When reallocating extension storage in ct_extend, the old memory must
not be freed immediately since it may still be used by a RCU read side
Possibly fixes https://bugzilla.redhat.com/show_bug.cgi?id=449315
and/or http://bugzilla.kernel.org/show_bug.cgi?id=10875
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'block/elevator.c')
0 files changed, 0 insertions, 0 deletions