]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ebtables: fix race condition in frame_filter_net_init()
authorArtem Savkov <asavkov@redhat.com>
Tue, 26 Sep 2017 16:35:45 +0000 (18:35 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Fri, 29 Sep 2017 11:36:06 +0000 (13:36 +0200)
commit47ad9fd270b4cf868b619ecded0f7bafc6e09613
tree6b3cafcc56342070fa0da916ddbb9672138411f1
parent43b46687f5b2bc118bd7a3417e7050621d4f02e4
netfilter: ebtables: fix race condition in frame_filter_net_init()

It is possible for ebt_in_hook to be triggered before ebt_table is assigned
resulting in a NULL-pointer dereference. Make sure hooks are
registered as the last step.

Fixes: e714a2eaf937 ("ebtables: remove nf_hook_register usage")
Signed-off-by: Artem Savkov <asavkov@redhat.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/linux/netfilter_bridge/ebtables.h
net/bridge/netfilter/ebtable_broute.c
net/bridge/netfilter/ebtable_filter.c
net/bridge/netfilter/ebtable_nat.c
net/bridge/netfilter/ebtables.c