]> git.ipfire.org Git - thirdparty/kernel/stable.git/commit
netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 17 Sep 2024 21:07:46 +0000 (23:07 +0200)
committerGreg Kroah-Hartman <gregkh@linuxfoundation.org>
Fri, 4 Oct 2024 14:38:26 +0000 (16:38 +0200)
commit2223aa83c718acdbf9753fe6ad250070de11000c
treee0eaa24c40790884711d02c10a62dddc8069677a
parent81a33144aa45fdbc81ba9fa87cbbfe2dd97db186
netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path

[ Upstream commit 4ffcf5ca81c3b83180473eb0d3c010a1a7c6c4de ]

Lockless iteration over hook list is possible from netlink dump path,
use rcu variant to iterate over the hook list as is done with flowtable
hooks.

Fixes: b9703ed44ffb ("netfilter: nf_tables: support for adding new devices to an existing netdev chain")
Reported-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>
net/netfilter/nf_tables_api.c