| commit | fa803605eef39372e53d7813002d73a3fcf10c88 | [log] [tgz] |
|---|---|---|
| author | Liping Zhang <zlpnobody@gmail.com> | Sun May 14 21:35:22 2017 +0800 |
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | Mon May 15 12:51:39 2017 +0200 |
| tree | 7e3e452796daa0e76cd98d2fcb97134dbedd98fa | |
| parent | 87e94dbc210a720a34be5c1174faee5c84be963e [diff] |
netfilter: nf_tables: can't assume lock is acquired when dumping set elems When dumping the elements related to a specified set, we may invoke the nf_tables_dump_set with the NFNL_SUBSYS_NFTABLES lock not acquired. So we should use the proper rcu operation to avoid race condition, just like other nft dump operations. Signed-off-by: Liping Zhang <zlpnobody@gmail.com> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>