linux/net/netfilter
Eric Dumazet 15cdeadaa5 netfilter: fix a race in nf_ct_ext_create()
As soon as rcu_read_unlock() is called, there is no guarantee current
thread can safely derefence t pointer, rcu protected.

Fix is to copy t->alloc_size in a temporary variable.

Signed-off-by: Eric Dumazet <eric.dumazet@gmail.com>
Reviewed-by: Paul E. McKenney <paulmck@linux.vnet.ibm.com>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
2010-09-22 13:13:33 -07:00
..
2010-09-08 10:39:57 -07:00
2010-07-23 12:59:36 +02:00
2010-07-23 12:59:36 +02:00
2010-05-17 17:18:50 -07:00
2010-05-13 15:02:08 +02:00
2010-07-15 17:20:46 +02:00
2010-07-23 12:59:36 +02:00
2010-06-15 11:56:19 -07:00