Florian Westphal 84fc57f472 netfilter: ipt_CLUSTERIP: put config instead of freeing it ...

[ Upstream commit 1a9da59373 ]

Once struct is added to per-netns list it becomes visible to other cpus,
so we cannot use kfree().

Also delay setting entries refcount to 1 until after everything is
initialised so that when we call clusterip_config_put() in this spot
entries is still zero.

Signed-off-by: Florian Westphal <fw@strlen.de>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
Signed-off-by: Sasha Levin <alexander.levin@microsoft.com>
Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>

2018-05-30 07:52:03 +02:00

..

arp_tables.c

netfilter: compat: prepare xt_compat_init_offsets to return errors

2018-04-26 11:02:21 +02:00

arpt_mangle.c

…

arptable_filter.c

…

ip_tables.c

netfilter: compat: prepare xt_compat_init_offsets to return errors

2018-04-26 11:02:21 +02:00

ipt_ah.c

…

ipt_CLUSTERIP.c

netfilter: ipt_CLUSTERIP: put config instead of freeing it

2018-05-30 07:52:03 +02:00

ipt_ECN.c

…

ipt_MASQUERADE.c

netfilter: nat: add dependencies on conntrack module

2016-12-04 21:16:51 +01:00

ipt_REJECT.c

netfilter: x_tables: move hook state into xt_action_param structure

2016-11-03 10:56:21 +01:00

ipt_rpfilter.c

netfilter: rpfilter: fix incorrect loopback packet judgment

2017-01-16 14:23:01 +01:00

ipt_SYNPROXY.c

netfilter: SYNPROXY: skip non-tcp packet in {ipv4, ipv6}_synproxy_hook

2017-10-09 13:08:39 +02:00

iptable_filter.c

…

iptable_mangle.c

…

iptable_nat.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

iptable_raw.c

…

iptable_security.c

…

Kconfig

netfilter: move socket lookup infrastructure to nf_socket_ipv{4,6}.c

2016-11-01 20:50:31 +01:00

Makefile

License cleanup: add SPDX GPL-2.0 license identifier to files with no license

2017-11-02 11:10:55 +01:00

nf_conntrack_l3proto_ipv4.c

netfilter: drop template ct when conntrack is skipped.

2018-04-08 14:26:29 +02:00

nf_conntrack_proto_icmp.c

net: Replace NF_CT_ASSERT() with WARN_ON().

2017-09-04 13:25:19 +02:00

nf_defrag_ipv4.c

netfilter: nf_hook_ops structs can be const

2017-07-31 19:10:44 +02:00

nf_dup_ipv4.c

netfilter: kill the fake untracked conntrack objects

2017-04-15 11:47:57 +02:00

nf_log_arp.c

netfilter: constify nf_loginfo structures

2017-08-02 14:25:59 +02:00

nf_log_ipv4.c

netfilter: constify nf_loginfo structures

2017-08-02 14:25:59 +02:00

nf_nat_h323.c

netfilter: nf_nat_h323: fix logical-not-parentheses warning

2017-08-24 18:48:05 +02:00

nf_nat_l3proto_ipv4.c

net: Replace NF_CT_ASSERT() with WARN_ON().

2017-09-04 13:25:19 +02:00

nf_nat_masquerade_ipv4.c

net: Replace NF_CT_ASSERT() with WARN_ON().

2017-09-04 13:25:19 +02:00

nf_nat_pptp.c

netfilter: pptp: attach nat extension when needed

2017-04-26 09:30:22 +02:00

nf_nat_proto_gre.c

netfilter: gre: Use consistent GRE and PTTP header structure instead of the ones defined by netfilter

2016-09-07 10:36:52 +02:00

nf_nat_proto_icmp.c

…

nf_nat_snmp_basic.c

netfilter: snmp: avoid stack size warning

2017-05-01 11:43:58 +02:00

nf_reject_ipv4.c

netfilter: nf_reject_ipv4: Fix use-after-free in send_reset

2017-11-01 12:15:29 +01:00

nf_socket_ipv4.c

netfilter: nf_socket: Fix out of bounds access in nf_sk_lookup_slow_v{4,6}

2018-05-22 18:53:58 +02:00

nf_tables_arp.c

netfilter: nf_tables: only allow in/output for arp packets

2017-07-17 17:02:44 +02:00

nf_tables_ipv4.c

netfilter: Add the missed return value check of nft_register_chain_type

2016-09-12 19:54:45 +02:00

nft_chain_nat_ipv4.c

…

nft_chain_route_ipv4.c

…

nft_dup_ipv4.c

Merge git://git.kernel.org/pub/scm/linux/kernel/git/davem/net

2016-11-15 10:54:36 -05:00

nft_fib_ipv4.c

netfilter: nf_tables: fib: use skb_header_pointer

2017-07-31 19:01:39 +02:00

nft_masq_ipv4.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_redir_ipv4.c

netfilter: nf_tables: fix mismatch in big-endian system

2017-03-13 13:30:28 +01:00

nft_reject_ipv4.c

netfilter: nf_tables: use hook state from xt_action_param structure

2016-11-03 11:52:34 +01:00