Liping Zhang 146561a3f1 netfilter: invoke synchronize_rcu after set the _hook_ to NULL ...

[ Upstream commit 3b7dabf029478bb80507a6c4500ca94132a2bc0b ]

Otherwise, another CPU may access the invalid pointer. For example:
    CPU0                CPU1
     -              rcu_read_lock();
     -              pfunc = _hook_;
  _hook_ = NULL;          -
  mod unload              -
     -                 pfunc(); // invalid, panic
     -             rcu_read_unlock();

So we must call synchronize_rcu() to wait the rcu reader to finish.

Also note, in nf_nat_snmp_basic_fini, synchronize_rcu() will be invoked
by later nf_conntrack_helper_unregister, but I'm inclined to add a
explicit synchronize_rcu after set the nf_nat_snmp_hook to NULL. Depend
on such obscure assumptions is not a good idea.

Last, in nfnetlink_cttimeout, we use kfree_rcu to free the time object,
so in cttimeout_exit, invoking rcu_barrier() is not necessary at all,
remove it too.

Signed-off-by: Liping Zhang <zlpnobody@gmail.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@verizon.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2017-10-08 10:26:09 +02:00

..

netfilter

netfilter: invoke synchronize_rcu after set the _hook_ to NULL

2017-10-08 10:26:09 +02:00

af_inet.c

igmp: Fix regression caused by igmp sysctl namespace code.

2017-08-12 19:31:22 -07:00

ah4.c

…

arp.c

NET: Fix /proc/net/arp for AX.25

2017-06-17 06:41:50 +02:00

cipso_ipv4.c

…

datagram.c

…

devinet.c

…

esp4.c

…

fib_frontend.c

ipv4: initialize fib_trie prior to register_netdev_notifier call.

2017-08-11 08:49:32 -07:00

fib_lookup.h

…

fib_rules.c

…

fib_semantics.c

ipv4: fix NULL dereference in free_fib_info_rcu()

2017-08-30 10:21:39 +02:00

fib_trie.c

net: Improve handling of failures on link and route dumps

2017-06-07 12:07:44 +02:00

fou.c

…

gre_demux.c

…

gre_offload.c

…

icmp.c

…

igmp.c

igmp: Fix regression caused by igmp sysctl namespace code.

2017-08-12 19:31:22 -07:00

inet_connection_sock.c

dccp/tcp: do not inherit mc_list from parent

2017-06-07 12:07:42 +02:00

inet_diag.c

…

inet_fragment.c

Revert "net: use lib/percpu_counter API for fragmentation mem accounting"

2017-09-20 08:19:55 +02:00

inet_hashtables.c

…

inet_timewait_sock.c

…

inetpeer.c

…

ip_forward.c

…

ip_fragment.c

Revert "net: fix percpu memory leaks"

2017-09-20 08:19:55 +02:00

ip_gre.c

…

ip_input.c

…

ip_options.c

…

ip_output.c

udp: consistently apply ufo or fragmentation

2017-08-12 19:31:22 -07:00

ip_sockglue.c

net-timestamp: avoid use-after-free in ip_recv_error

2017-05-03 08:36:36 -07:00

ip_tunnel_core.c

…

ip_tunnel.c

ip_tunnel: fix setting ttl and tos value in collect_md mode

2017-09-20 08:19:56 +02:00

ip_vti.c

…

ipcomp.c

…

ipconfig.c

…

ipip.c

…

ipmr.c

…

Kconfig

…

Makefile

…

netfilter.c

netfilter: use skb_to_full_sk in ip_route_me_harder

2017-07-05 14:40:28 +02:00

ping.c

…

proc.c

…

protocol.c

…

raw.c

ipv4, ipv6: ensure raw socket message is big enough to hold an IP header

2017-05-14 14:00:21 +02:00

route.c

ipv4: better IP_MAX_MTU enforcement

2017-08-30 10:21:40 +02:00

syncookies.c

ipv4: ipv6: initialize treq->txhash in cookie_v[46]_check()

2017-08-11 08:49:32 -07:00

sysctl_net_ipv4.c

ipv4: make tcp_notsent_lowat sysctl knob behave as true unsigned int

2017-08-11 08:49:35 -07:00

tcp_bbr.c

tcp_bbr: init pacing rate on first RTT sample

2017-08-11 08:49:32 -07:00

tcp_bic.c

…

tcp_cdg.c

…

tcp_cong.c

tcp: disallow cwnd undo when switching congestion control

2017-06-14 15:05:52 +02:00

tcp_cubic.c

…

tcp_dctcp.c

…

tcp_diag.c

…

tcp_fastopen.c

…

tcp_highspeed.c

…

tcp_htcp.c

…

tcp_hybla.c

…

tcp_illinois.c

…

tcp_input.c

tcp: when rearming RTO, if RTO time is in past then fire RTO ASAP

2017-08-30 10:21:42 +02:00

tcp_ipv4.c

…

tcp_lp.c

tcp: fix wraparound issue in tcp_lp

2017-05-14 14:00:21 +02:00

tcp_metrics.c

…

tcp_minisocks.c

tcp: do not inherit fastopen_req from parent

2017-05-14 14:00:21 +02:00

tcp_nv.c

…

tcp_offload.c

…

tcp_output.c

tcp: fastopen: tcp_connect() must refresh the route

2017-08-12 19:31:22 -07:00

tcp_probe.c

tcp: tcp_probe: use spin_lock_bh()

2017-06-17 06:41:49 +02:00

tcp_rate.c

…

tcp_recovery.c

…

tcp_scalable.c

…

tcp_timer.c

net: fix keepalive code vs TCP_FASTOPEN_CONNECT

2017-08-12 19:31:21 -07:00

tcp_vegas.c

…

tcp_vegas.h

…

tcp_veno.c

…

tcp_westwood.c

…

tcp_yeah.c

…

tcp.c

tcp: initialize rcv_mss to TCP_MIN_MSS instead of 0

2017-09-20 08:19:55 +02:00

tunnel4.c

…

udp_diag.c

…

udp_impl.h

…

udp_offload.c

udp: disable inner UDP checksum offloads in IPsec case

2017-10-08 10:26:08 +02:00

udp_tunnel.c

…

udp.c

udp: consistently apply ufo or fragmentation

2017-08-12 19:31:22 -07:00

udplite.c

…

xfrm4_input.c

…

xfrm4_mode_beet.c

…

xfrm4_mode_transport.c

…

xfrm4_mode_tunnel.c

…

xfrm4_output.c

…

xfrm4_policy.c

…

xfrm4_protocol.c

…

xfrm4_state.c

…

xfrm4_tunnel.c

…