diff options
| author | Liping Zhang <zlpnobody@gmail.com> | 2016-10-22 10:51:26 (GMT) |
|---|---|---|
| committer | Pablo Neira Ayuso <pablo@netfilter.org> | 2016-10-27 16:22:02 (GMT) |
| commit | dab45060a56a9732b027d2031c1b6100bc75eea2 (patch) | |
| tree | 6eb28be6f001aac951f25ccf471d5ff21dfe9ada /net/netfilter/nf_conntrack_sip.c | |
| parent | 61f9e2924f4981d626b3a931fed935f2fa3cb4de (diff) | |
| download | linux-dab45060a56a9732b027d2031c1b6100bc75eea2.tar.xz | |
netfilter: nf_tables: fix race when create new element in dynset
Packets may race when create the new element in nft_hash_update:
CPU0 CPU1
lookup_fast - fail lookup_fast - fail
new - ok new - ok
insert - ok insert - fail(EEXIST)
So when race happened, we reuse the existing element. Otherwise,
these *racing* packets will not be handled properly.
Fixes: 22fe54d5fefc ("netfilter: nf_tables: add support for dynamic set updates")
Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Diffstat (limited to 'net/netfilter/nf_conntrack_sip.c')
0 files changed, 0 insertions, 0 deletions