diff options
| author | Eric Dumazet <eric.dumazet@gmail.com> | 2010-09-21 23:17:32 +0200 |
|---|---|---|
| committer | David S. Miller <davem@davemloft.net> | 2010-09-22 22:13:33 +0200 |
| commit | 15cdeadaa5d76009e20c7792aed69f5a73808f97 (patch) | |
| tree | 11eb05f550c046b3099d52df146948dce0c12635 /net/llc | |
| parent | netfilter: fix ipt_REJECT TCP RST routing for indev == outdev (diff) | |
| download | linux-15cdeadaa5d76009e20c7792aed69f5a73808f97.tar.xz linux-15cdeadaa5d76009e20c7792aed69f5a73808f97.zip | |
netfilter: fix a race in nf_ct_ext_create()
As soon as rcu_read_unlock() is called, there is no guarantee current
thread can safely derefence t pointer, rcu protected.
Fix is to copy t->alloc_size in a temporary variable.
Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Reviewed-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/llc')
0 files changed, 0 insertions, 0 deletions