Am 18.03.2011 18:05, schrieb Eric Dumazet: > commit f3c5c1bfd4308 (make ip_tables reentrant) introduced a race in > handling the stackptr restore, at the end of ipt_do_table() > > We should do it before the call to xt_info_rdunlock_bh(), or we allow > cpu preemption and another cpu overwrites stackptr of original one. > > A second fix is to change the underflow test to check the origptr value > instead of 0 to detect underflow, or else we allow a jump from different > hooks. Applied, thanks Eric. -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
