| commit | 088067f4f14d6ee5c6a196b015a560cbe7744224 | |
| author | Jozsef Kadlecsik <kadlec@blackhole.kfki.hu> | |
| Tue, 17 Jan 2012 09:39:05 +0000 (17 10:39 +0100) | ||
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | |
| Tue, 17 Jan 2012 09:52:46 +0000 (17 10:52 +0100) | ||
| tree | 1be34b941c1671b70834212d2188f8ce6b1c1f45 | treesnapshot (tar.gz zip) |
| parent | 9bf04646b0b41c5438ed8a27c5f8dbe0ff40d756 | commitdiff |
netfilter: ipset: autoload set type modules safely
Jan Engelhardt noticed when userspace requests a set type unknown
to the kernel, it can lead to a loop due to the unsafe type module
loading. The issue is fixed in this patch.
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Jan Engelhardt noticed when userspace requests a set type unknown
to the kernel, it can lead to a loop due to the unsafe type module
loading. The issue is fixed in this patch.
Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
| net/netfilter/ipset/ip_set_core.c | diffblobblamehistory |