leandrof/linux
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

netfilter: nft_compat: use _safe version of list_for_each

Browse Source 
We need to use the _safe version of list_for_each_entry() here otherwise
we have a use after free bug.

Signed-off-by: Dan Carpenter <dan.carpenter@oracle.com>
Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org>
This commit is contained in:
Dan Carpenter 2013-11-04 15:58:56 +03:00 committed by Pablo Neira Ayuso
parent ca0e8bd68b
commit c359c4157c
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
net/netfilter/nft_compat.c
View File

@ -634,9 +634,9 @@ nft_match_select_ops(const struct nft_ctx *ctx,
static void nft_match_release(void)
{
struct nft_xt *nft_match;
struct nft_xt *nft_match, *tmp;
list_for_each_entry(nft_match, &nft_match_list, head)
list_for_each_entry_safe(nft_match, tmp, &nft_match_list, head)
kfree(nft_match);
}
@ -705,9 +705,9 @@ nft_target_select_ops(const struct nft_ctx *ctx,
static void nft_target_release(void)
{
struct nft_xt *nft_target;
struct nft_xt *nft_target, *tmp;
list_for_each_entry(nft_target, &nft_target_list, head)
list_for_each_entry_safe(nft_target, tmp, &nft_target_list, head)
kfree(nft_target);
}