Donate to e Foundation | Murena handsets with /e/OS | Own a part of Murena! Learn more

Commit 7047f9d0 authored by Patrick McHardy's avatar Patrick McHardy Committed by Pablo Neira Ayuso
Browse files

netfilter: nf_tables: take AF module reference when creating a table 



The table refers to data of the AF module, so we need to make sure the
module isn't unloaded while the table exists.

Signed-off-by: default avatarPatrick McHardy <kaber@trash.net>
Signed-off-by: default avatarPablo Neira Ayuso <pablo@netfilter.org>
parent c5c1f975

net/netfilter/nf_tables_api.c

+7 −1
Original line number Diff line number Diff line
@@ -430,9 +430,14 @@ static int nf_tables_newtable(struct sock *nlsk, struct sk_buff *skb, 
			return -EINVAL;

	}



	if (!try_module_get(afi->owner))

		return -EAFNOSUPPORT;



	table = kzalloc(sizeof(*table) + nla_len(name), GFP_KERNEL);

	if (table == NULL)

	if (table == NULL) {

		module_put(afi->owner);

		return -ENOMEM;

	}



	nla_strlcpy(table->name, name, nla_len(name));

	INIT_LIST_HEAD(&table->chains);
@@ -468,6 +473,7 @@ static int nf_tables_deltable(struct sock *nlsk, struct sk_buff *skb, 
	list_del(&table->list);

	nf_tables_table_notify(skb, nlh, table, NFT_MSG_DELTABLE, family);

	kfree(table);

	module_put(afi->owner);

	return 0;

}