[NETFILTER 00/04]: Netfilter fixes

Patrick McHardy kaber at trash.net
Mon Nov 27 19:20:53 CET 2006


Hi Dave,

following are a few small netfilter fixes for 2.6.19, fixing multiple
refcount leaks and a nf_conntrack helper assignment race which can
lead to use-after-free.

Please apply, thanks.


 net/ipv4/netfilter/ip_conntrack_core.c    |    6 +++---
 net/ipv4/netfilter/ip_conntrack_netlink.c |    1 +
 net/netfilter/nf_conntrack_core.c         |   19 +++++++++----------
 net/netfilter/nf_conntrack_netlink.c      |    9 +++++++++
 4 files changed, 22 insertions(+), 13 deletions(-)

Patrick McHardy:
      [NETFILTER]: ctnetlink: fix reference count leak

Yasuyuki Kozakai:
      [NETFILTER]: nfctnetlink: assign helper to newly created conntrack
      [NETFILTER]: nf_conntrack: fix the race on assign helper to new conntrack
      [NETFILTER]: conntrack: fix refcount leak when finding expectation



More information about the netfilter-devel mailing list