]> git.dujemihanovic.xyz Git - linux.git/commit
netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path
authorPablo Neira Ayuso <pablo@netfilter.org>
Tue, 17 Sep 2024 21:07:46 +0000 (23:07 +0200)
committerPablo Neira Ayuso <pablo@netfilter.org>
Thu, 26 Sep 2024 11:03:02 +0000 (13:03 +0200)
commit4ffcf5ca81c3b83180473eb0d3c010a1a7c6c4de
treef752f42cbb0a852ebb6a4492bf819c1a52864fbf
parente1f1ee0e9ad8cbe660f5c104e791c5f1a7cf4c31
netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path

Lockless iteration over hook list is possible from netlink dump path,
use rcu variant to iterate over the hook list as is done with flowtable
hooks.

Fixes: b9703ed44ffb ("netfilter: nf_tables: support for adding new devices to an existing netdev chain")
Reported-by: Phil Sutter <phil@nwl.cc>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
net/netfilter/nf_tables_api.c