]> git.ipfire.org Git - thirdparty/nftables.git/commit
tests: add test case for flowtable with owner flag
authorFlorian Westphal <fw@strlen.de>
Tue, 22 Feb 2022 12:51:09 +0000 (13:51 +0100)
committerFlorian Westphal <fw@strlen.de>
Tue, 22 Feb 2022 13:06:14 +0000 (14:06 +0100)
commit9eb98b3bd5cf21fcbef04c46cfc078579e56ff17
tree8184dbe78bef32844c45560fef804dc7ce7f33f9
parent18a08fb7f0443f8bde83393bd6f69e23a04246b3
tests: add test case for flowtable with owner flag

BUG: KASAN: use-after-free in nf_hook_entries_grow+0x675/0x980
Read of size 4 at ... nft/19662
 nf_hook_entries_grow+0x675/0x980

This is fixed by kernel commit 6069da443bf
("netfilter: nf_tables: unregister flowtable hooks on netns exit").

The test case here uses owner flag, netlink event handler doesn't
release the flowtable, next attempt to add one then causes uaf because
of dangling ingress hook reference.

Signed-off-by: Florian Westphal <fw@strlen.de>
tests/shell/testcases/owner/0001-flowtable-uaf [new file with mode: 0755]