| commit | 8d8890b7751387f58ce0a6428773de2fbc0fd596 | |
| author | Patrick McHardy <kaber@trash.net> | |
| Mon, 22 Jun 2009 12:14:41 +0000 (22 14:14 +0200) | ||
| committer | Patrick McHardy <kaber@trash.net> | |
| Mon, 22 Jun 2009 12:14:41 +0000 (22 14:14 +0200) | ||
| tree | 651b2f1da674823f386d4ba9165a6d81212e52cf | treesnapshot (tar.gz zip) |
| parent | 5c8ec910e789a92229978d8fd1fce7b62e8ac711 | commitdiff |
netfilter: nf_conntrack: fix conntrack lookup race
The RCU protected conntrack hash lookup only checks whether the entry
has a refcount of zero to decide whether it is stale. This is not
sufficient, entries are explicitly removed while there is at least
one reference left, possibly more. Explicitly check whether the entry
has been marked as dying to fix this.
Signed-off-by: Patrick McHardy <kaber@trash.net>
The RCU protected conntrack hash lookup only checks whether the entry
has a refcount of zero to decide whether it is stale. This is not
sufficient, entries are explicitly removed while there is at least
one reference left, possibly more. Explicitly check whether the entry
has been marked as dying to fix this.
Signed-off-by: Patrick McHardy <kaber@trash.net>
| net/netfilter/nf_conntrack_core.c | diffblobblamehistory |