diff options
| author |   Cong Wang <xiyou.wangcong@gmail.com> | 2018-02-05 14:41:45 -0800 |
|---|---|---|
| committer |   Pablo Neira Ayuso <pablo@netfilter.org> | 2018-02-07 00:58:57 +0100 |
| commit | 7dc68e98757a8eccf8ca7a53a29b896f1eef1f76 (patch) | |
| tree | d7ccfe10125fd7b843b55579d7ff5b8d11744850 /net/netfilter/nf_flow_table.c | |
| parent | netfilter: nft_flow_offload: no need to flush entries on module removal (diff) | |
| download | linux-dev-7dc68e98757a8eccf8ca7a53a29b896f1eef1f76.tar.xz linux-dev-7dc68e98757a8eccf8ca7a53a29b896f1eef1f76.zip | |
netfilter: xt_RATEEST: acquire xt_rateest_mutex for hash insert
rateest_hash is supposed to be protected by xt_rateest_mutex,
and, as suggested by Eric, lookup and insert should be atomic,
so we should acquire the xt_rateest_mutex once for both.
So introduce a non-locking helper for internal use and keep the
locking one for external.
Reported-by: <syzbot+5cb189720978275e4c75@syzkaller.appspotmail.com>
Fixes: 5859034d7eb8 ("[NETFILTER]: x_tables: add RATEEST target")
Signed-off-by: Cong Wang <xiyou.wangcong@gmail.com>
Reviewed-by: Florian Westphal <fw@strlen.de>
Reviewed-by: Eric Dumazet <edumazet@google.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_flow_table.c')
0 files changed, 0 insertions, 0 deletions