netfilter: conntrack: Fix data-races around ct mark

Browse source

nf_conn:mark can be read from and written to in parallel. Use
READ_ONCE()/WRITE_ONCE() for reads and writes to prevent unwanted
compiler optimizations.

Fixes: 1da177e4c3 ("Linux-2.6.12-rc2")
Signed-off-by: Daniel Xu <dxu@dxuuu.xyz>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Daniel Xu 2022-11-09 12:39:07 -07:00 • committed by Pablo Neira Ayuso

parent 40b9d1ab63

commit 52d1aa8b82

11 changed files with 45 additions and 39 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

2

net/core/flow_dissector.c

View file

4

net/ipv4/netfilter/ipt_CLUSTERIP.c

View file

2

net/netfilter/nf_conntrack_core.c

View file

24

net/netfilter/nf_conntrack_netlink.c

View file

2

net/netfilter/nf_conntrack_standalone.c

View file

6

net/netfilter/nft_ct.c

View file

18

net/netfilter/xt_connmark.c

View file

8

net/openvswitch/conntrack.c

View file

4

net/sched/act_connmark.c

View file

8

net/sched/act_ct.c

View file

6

net/sched/act_ctinfo.c

View file