]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: nf_queue: Don't recompute the hook_list head
authorEric W. Biederman <ebiederm@xmission.com>
Fri, 19 Jun 2015 22:23:37 +0000 (17:23 -0500)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 2 Jul 2015 13:03:13 +0000 (15:03 +0200)
commit51496ea3dfad43a839a7ecd2674d7caab282308e
treea067197638084b8853d59ed6af1f0c5209f5ad9a
parentf3d11926d879fe7b6cad9c066c3ac3fe5828e811
netfilter: nf_queue: Don't recompute the hook_list head

If someone sends packets from one of the netdevice ingress hooks to
the a userspace queue, and then userspace later accepts the packet,
the netfilter code can enter an infinite loop as the list head will
never be found.

Pass in the saved list_head to avoid this.

Signed-off-by: "Eric W. Biederman" <ebiederm@xmission.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_queue.c