diff options
author | Liping Zhang <zlpnobody@gmail.com> | 2016-10-22 10:51:26 (GMT) |
---|---|---|
committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-10-27 16:22:02 (GMT) |
commit | dab45060a56a9732b027d2031c1b6100bc75eea2 (patch) | |
tree | 6eb28be6f001aac951f25ccf471d5ff21dfe9ada /Kconfig | |
parent | 61f9e2924f4981d626b3a931fed935f2fa3cb4de (diff) | |
download | linux-dab45060a56a9732b027d2031c1b6100bc75eea2.tar.xz |
netfilter: nf_tables: fix race when create new element in dynset
Packets may race when create the new element in nft_hash_update:
CPU0 CPU1
lookup_fast - fail lookup_fast - fail
new - ok new - ok
insert - ok insert - fail(EEXIST)
So when race happened, we reuse the existing element. Otherwise,
these *racing* packets will not be handled properly.
Fixes: 22fe54d5fefc ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'Kconfig')
0 files changed, 0 insertions, 0 deletions