]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: ipset: autoload set type modules safely
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Tue, 17 Jan 2012 09:39:05 +0000 (10:39 +0100)
committerPablo Neira Ayuso <pablo@netfilter.org>
Tue, 17 Jan 2012 09:52:46 +0000 (10:52 +0100)
commit8de01e8e70b1a24d3648999cf1c3cb7d0568f591
tree1be34b941c1671b70834212d2188f8ce6b1c1f45
parent1d94ac7c02ad7a2cccf457dc9289c2afce4edc73
netfilter: ipset: autoload set type modules safely

Jan Engelhardt noticed when userspace requests a set type unknown
to the kernel, it can lead to a loop due to the unsafe type module
loading. The issue is fixed in this patch.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/ipset/ip_set_core.c