]> git.baikalelectronics.ru Git - kernel.git/commit
netfilter: xt_CT: fix crash while destroy ct templates
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 11 Dec 2012 04:07:42 +0000 (04:07 +0000)
committerPablo Neira Ayuso <pablo@netfilter.org>
Sun, 16 Dec 2012 22:44:12 +0000 (23:44 +0100)
commitd52eef2c22239603570f167a35e4c4b40a8fca5b
tree369400efc56df50e5fa1467ffd84fbe43f264f40
parent2a338b9c79d02f461a4873185d9323f9d407bad6
netfilter: xt_CT: fix crash while destroy ct templates

In (0a5fc42 netfilter: ctnetlink: dump entries from the dying and
unconfirmed lists), we assume that all conntrack objects are
inserted in any of the existing lists. However, template conntrack
objects were not. This results in hitting BUG_ON in the
destroy_conntrack path while removing a rule that uses the CT target.

This patch fixes the situation by adding the template lists, which
is where template conntrack objects reside now.

Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
include/net/netns/conntrack.h
net/netfilter/nf_conntrack_core.c
net/netfilter/xt_CT.c