Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 6587af96 authored by Jozsef Kadlecsik's avatar Jozsef Kadlecsik Committed by Greg Kroah-Hartman
Browse files

netfilter: ipset: Missing gc cancellations fixed



commit 27c5a095e2518975e20a10102908ae8231699879 upstream.

The patch fdb8e12cc2cc ("netfilter: ipset: fix performance regression
in swap operation") missed to add the calls to gc cancellations
at the error path of create operations and at module unload. Also,
because the half of the destroy operations now executed by a
function registered by call_rcu(), neither NFNL_SUBSYS_IPSET mutex
or rcu read lock is held and therefore the checking of them results
false warnings.

Fixes: 97f7cf1cd80e ("netfilter: ipset: fix performance regression in swap operation")
Reported-by: default avatar <syzbot+52bbc0ad036f6f0d4a25@syzkaller.appspotmail.com>
Reported-by: default avatarBrad Spengler <spender@grsecurity.net>
Reported-by: default avatarСтас Ничипорович <stasn77@gmail.com>
Tested-by: default avatarBrad Spengler <spender@grsecurity.net>
Tested-by: default avatarСтас Ничипорович <stasn77@gmail.com>
Signed-off-by: default avatarJozsef Kadlecsik <kadlec@netfilter.org>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: default avatarGreg Kroah-Hartman <gregkh@linuxfoundation.org>
parent c7f2733e
Loading
Loading
Loading
Loading
0% Loading or .
You are about to add 0 people to the discussion. Proceed with caution.
Please register or to comment