]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: flowtable_offload: add missing locking
authorFelix Fietkau <nbd@nbd.name>
Mon, 21 Nov 2022 18:26:15 +0000 (19:26 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 22 Nov 2022 21:17:12 +0000 (22:17 +0100)
commit2419e4cf74023a7007f1f2e03c58d5d204c5076c
treeb3503770b7ed644c786a86fa12a7247ffd81c0b7
parent114ddd19dcca20b9a224f47f3e4da07e9d0e5418
netfilter: flowtable_offload: add missing locking

nf_flow_table_block_setup and the driver TC_SETUP_FT call can modify the flow
block cb list while they are being traversed elsewhere, causing a crash.
Add a write lock around the calls to protect readers

Fixes: 3029814930c4 ("netfilter: nf_flow_table: hardware offload support")
Reported-by: Chad Monroe <chad.monroe@smartrg.com>
Signed-off-by: Felix Fietkau <nbd@nbd.name>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_flow_table_offload.c