]> git.ipfire.org Git - people/ms/linux.git/commit
Avoid concurrent reader crash in layer 7 linux-3.10.y-layer7
authorSven Eckelmann <sven@narfation.org>
Fri, 18 Apr 2014 21:05:39 +0000 (23:05 +0200)
committerMichael Tremer <michael.tremer@ipfire.org>
Fri, 18 Apr 2014 21:08:08 +0000 (23:08 +0200)
commitd6ddbbfbac931c94f9818fce1ef69f90ff02ddcb
tree4532f22449bcac6dd9b555caaf5dcd601db9c0f2
parent9bb2555a000001d36cacfd5c8fa1a95254cc0497
Avoid concurrent reader crash in layer 7

The xt_match function for layer7 is not allowed to change the shared skb. This
is especially important when another passive reader is in the system that tries
to read the skb data when the layer7 function to linearized the data and
removed the previous data buffers at the same time.

http://sourceforge.net/p/l7-filter/mailman/message/29173488/
net/netfilter/xt_layer7.c