[PATCH] netfilter: avoid double free in nf_reinject

STALE5545d

3 messages, 3 authors, 2011-08-08 · open the first message on its own page

[PATCH] netfilter: avoid double free in nf_reinject

From: Julian Anastasov <ja@ssi.bg>
Date: 2011-08-05 10:32:00

	NF_STOLEN means skb was already freed

Signed-off-by: Julian Anastasov <ja@ssi.bg>
---

	May be fixes IPVS+ip_queue problem reported by Kumar Swamy:

	http://marc.info/?l=linux-virtual-server&m=131098073717449&w=2

diff -urp v3.0/linux/net/netfilter/nf_queue.c linux/net/netfilter/nf_queue.c
--- v3.0/linux/net/netfilter/nf_queue.c	2011-05-20 10:38:08.000000000 +0300
+++ linux/net/netfilter/nf_queue.c	2011-08-05 13:18:29.755962759 +0300
@@ -312,6 +312,7 @@ void nf_reinject(struct nf_queue_entry *
 		}
 		break;
 	case NF_STOLEN:
+		break;
 	default:
 		kfree_skb(skb);
 	}

Re: [PATCH] netfilter: avoid double free in nf_reinject

From: David Miller <davem@davemloft.net>
Date: 2011-08-08 05:11:58

From: Julian Anastasov <ja@ssi.bg>
Date: Fri, 5 Aug 2011 13:36:28 +0300 (EEST)
	NF_STOLEN means skb was already freed

Signed-off-by: Julian Anastasov <ja@ssi.bg>
---

	May be fixes IPVS+ip_queue problem reported by Kumar Swamy:

	http://marc.info/?l=linux-virtual-server&m=131098073717449&w=2
Since the netfilter maintainers are taking too damn long to integrate
bug fixes (and this has been happening for months), I'm going to apply
this directly.

Thanks Julian.

Re: [PATCH] netfilter: avoid double free in nf_reinject

From: Jan Engelhardt <hidden>
Date: 2011-08-08 10:13:04

On Monday 2011-08-08 07:11, David Miller wrote:
From: Julian Anastasov <ja@ssi.bg>
Date: Fri, 5 Aug 2011 13:36:28 +0300 (EEST)
quoted
	NF_STOLEN means skb was already freed

Signed-off-by: Julian Anastasov <ja@ssi.bg>
---

	May be fixes IPVS+ip_queue problem reported by Kumar Swamy:

	http://marc.info/?l=linux-virtual-server&m=131098073717449&w=2
Since the netfilter maintainers are taking too damn long to integrate
bug fixes (and this has been happening for months), I'm going to apply
this directly.
I am offering myself as a candidate for a substitute.
Keyboard shortcuts
hback out one level
jnext message in thread
kprevious message in thread
ldrill in
Escclose help / fold thread tree
?toggle this help