diff options
Diffstat (limited to '0102-netfilter-nf_tables-unbind_non-anonymous.patch')
| -rw-r--r-- | 0102-netfilter-nf_tables-unbind_non-anonymous.patch | 30 |
1 files changed, 0 insertions, 30 deletions
diff --git a/0102-netfilter-nf_tables-unbind_non-anonymous.patch b/0102-netfilter-nf_tables-unbind_non-anonymous.patch deleted file mode 100644 index 77b52a94aba9..000000000000 --- a/0102-netfilter-nf_tables-unbind_non-anonymous.patch +++ /dev/null @@ -1,30 +0,0 @@ -From 50c597f3cc8dc4de0f0b6153a0ff1bd0b2dc6f56 Mon Sep 17 00:00:00 2001 -From: Pablo Neira Ayuso <pablo@netfilter.org> -Date: Mon, 26 Jun 2023 00:42:18 +0200 -Subject: [PATCH] netfilter: nf_tables: unbind non-anonymous set if rule - construction fails - -Otherwise a dangling reference to a rule object that is gone remains -in the set binding list. - -Fixes: 26b5a5712eb8 ("netfilter: nf_tables: add NFT_TRANS_PREPARE_ERROR to deal with bound set/chain") -Signed-off-by: Pablo Neira Ayuso <pablo@netfilter.org> -(cherry picked from commit 3e70489721b6c870252c9082c496703677240f53) -For: https://bugs.archlinux.org/task/78908 ---- - net/netfilter/nf_tables_api.c | 2 ++ - 1 file changed, 2 insertions(+) - -diff --git a/net/netfilter/nf_tables_api.c b/net/netfilter/nf_tables_api.c -index 4c7937fd803f9f..1d64c163076a12 100644 ---- a/net/netfilter/nf_tables_api.c -+++ b/net/netfilter/nf_tables_api.c -@@ -5343,6 +5343,8 @@ void nf_tables_deactivate_set(const struct nft_ctx *ctx, struct nft_set *set, - nft_set_trans_unbind(ctx, set); - if (nft_set_is_anonymous(set)) - nft_deactivate_next(ctx->net, set); -+ else -+ list_del_rcu(&binding->list); - - set->use--; - break; |