Commit 4ffcf5ca authored by Pablo Neira Ayuso's avatar Pablo Neira Ayuso

netfilter: nf_tables: use rcu chain hook list iterator from netlink dump path

Lockless iteration over hook list is possible from netlink dump path,
use rcu variant to iterate over the hook list as is done with flowtable
hooks.

Fixes: b9703ed4 ("netfilter: nf_tables: support for adding new devices to an existing netdev chain")
Reported-by: default avatarPhil Sutter <phil@nwl.cc>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent e1f1ee0e
...@@ -1849,7 +1849,7 @@ static int nft_dump_basechain_hook(struct sk_buff *skb, int family, ...@@ -1849,7 +1849,7 @@ static int nft_dump_basechain_hook(struct sk_buff *skb, int family,
if (!hook_list) if (!hook_list)
hook_list = &basechain->hook_list; hook_list = &basechain->hook_list;
list_for_each_entry(hook, hook_list, list) { list_for_each_entry_rcu(hook, hook_list, list) {
if (!first) if (!first)
first = hook; first = hook;
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment