diff options
Diffstat (limited to '0002-netfilter-nf_tables-unbind-non-anonymous-set-if-rule.patch')
| -rw-r--r-- | 0002-netfilter-nf_tables-unbind-non-anonymous-set-if-rule.patch | 33 |
1 files changed, 0 insertions, 33 deletions
diff --git a/0002-netfilter-nf_tables-unbind-non-anonymous-set-if-rule.patch b/0002-netfilter-nf_tables-unbind-non-anonymous-set-if-rule.patch deleted file mode 100644 index c33b808a6e53..000000000000 --- a/0002-netfilter-nf_tables-unbind-non-anonymous-set-if-rule.patch +++ /dev/null @@ -1,33 +0,0 @@ -From 13bbcf64b256914e57dfe3ab6d16152304513c74 Mon Sep 17 00:00:00 2001 -From: Pablo Neira Ayuso <pablo@netfilter.org> -Date: Mon, 26 Jun 2023 00:42:18 +0200 -Subject: [PATCH 2/4] netfilter: nf_tables: unbind non-anonymous set if rule - construction fails - -Otherwise a dangling reference to a rule object that is gone remains -in the set binding list. - -Fixes: 26b5a5712eb8 ("netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain") -Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> -(cherry picked from commit 3e70489721b6c870252c9082c496703677240f53) -For: https://bugs.archlinux.org/task/78908 ---- - net/netfilter/nf_tables_api.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c -index 4c7937fd803f..1d64c163076a 100644 ---- a/net/netfilter/nf_tables_api.c -+++ b/net/netfilter/nf_tables_api.c -@@ -5343,6 +5343,8 @@ void nf_tables_deactivate_set(const struct nft_ctx *ctx, struct nft_set *set, - nft_set_trans_unbind(ctx, set); - if (nft_set_is_anonymous(set)) - nft_deactivate_next(ctx->net, set); -+ else -+ list_del_rcu(&binding->list); - - set->use--; - break; --- -2.41.0 - |