]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed
authorFlorian Westphal <fw@strlen.de>
Tue, 20 Sep 2022 16:31:30 +0000 (18:31 +0200)
committerFlorian Westphal <fw@strlen.de>
Tue, 20 Sep 2022 21:50:03 +0000 (23:50 +0200)
commitba5678026bff73f4ba781782f0c00a0e9e5e777d
treebca64dc14c6152bc59d66cf092b67b32c38061e2
parent05c68f40d2b08abe63e82fe6a660888b8698c99b
netfilter: nf_ct_ftp: fix deadlock when nat rewrite is needed

We can't use ct->lock, this is already used by the seqadj internals.
When using ftp helper + nat, seqadj will attempt to acquire ct->lock
again.

Revert back to a global lock for now.

Fixes: 18761816df86 ("netfilter: nf_ct_ftp: prefer skb_linearize")
Reported-by: Bruno de Paula Larini <bruno.larini@riosoft.com.br>
Signed-off-by: Florian Westphal <fw@strlen.de>
net/netfilter/nf_conntrack_ftp.c