netfilter: ipset: Fix calling ip_set() macro at dumping

Browse source

The ip_set() macro is called when either ip_set_ref_lock held only
or no lock/nfnl mutex is held at dumping. Take this into account
properly. Also, use Pablo's suggestion to use rcu_dereference_raw(),
the ref_netlink protects the set.

Signed-off-by: Jozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>

...

This commit is contained in:

Jozsef Kadlecsik 2018-10-30 22:43:42 +01:00 • committed by Pablo Neira Ayuso

parent 54451f60c8

commit 8a02bdd50b

1 changed files with 8 additions and 4 deletions

Show all changes Ignore whitespace when comparing lines Ignore changes in amount of whitespace Ignore changes in whitespace at EOL

Download patch file Download diff file Expand all files Collapse all files

12

net/netfilter/ipset/ip_set_core.c

View file