netfilter: ipset: Fix calling ip_set() macro at dumping

Browse source

[ Upstream commit 8a02bdd50b ]

The ip_set() macro is called when either ip_set_ref_lock held only
or no lock/nfnl mutex is held at dumping. Take this into account
properly. Also, use Pablo's suggestion to use rcu_dereference_raw(),
the ref_netlink protects the set.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <sashal@kernel.org>

...

This commit is contained in:

Jozsef Kadlecsik 2018-10-30 22:43:42 +01:00 • committed by Greg Kroah-Hartman

parent e8b258ce87

commit 2f6bf7917f

1 changed files with 8 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

net/netfilter/ipset/ip_set_core.c

View file