Thomas Graf 8ed40c1229 netfilter: Can't fail and free after table replacement ... commit c58dd2dd44 upstream. All xtables variants suffer from the defect that the copy_to_user() to copy the counters to user memory may fail after the table has already been exchanged and thus exposed. Return an error at this point will result in freeing the already exposed table. Any subsequent packet processing will result in a kernel panic. We can't copy the counters before exposing the new tables as we want provide the counter state after the old table has been unhooked. Therefore convert this into a silent error. Cc: Florian Westphal <fw@strlen.de> Signed-off-by: Thomas Graf <tgraf@suug.ch> Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org>		2014-05-18 05:25:56 -07:00
..
Kconfig	netfilter: ebtables: fix ebtables build dependency	2011-07-29 16:40:30 +02:00
Makefile	…
ebt_802_3.c	…
ebt_among.c	…
ebt_arp.c	…
ebt_arpreply.c	…
ebt_dnat.c	…
ebt_ip.c	…
ebt_ip6.c	ipv6: Add fragment reporting to ipv6_skip_exthdr().	2011-12-03 09:35:10 -08:00
ebt_limit.c	…
ebt_log.c	net:bridge: use IS_ENABLED	2011-12-16 15:49:52 -05:00
ebt_mark.c	…
ebt_mark_m.c	…
ebt_nflog.c	…
ebt_pkttype.c	…
ebt_redirect.c	…
ebt_snat.c	…
ebt_stp.c	…
ebt_ulog.c	netfilter: Remove unnecessary OOM logging messages	2011-11-01 09:19:49 +01:00
ebt_vlan.c	…
ebtable_broute.c	rcu: convert uses of rcu_assign_pointer(x, NULL) to RCU_INIT_POINTER	2011-08-02 04:29:23 -07:00
ebtable_filter.c	…
ebtable_nat.c	…
ebtables.c	netfilter: Can't fail and free after table replacement	2014-05-18 05:25:56 -07:00