Re: [PATCH v2 nf-next] netfilter: conntrack: avoid use-after free on rmmod

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On Fri, Aug 03, 2018 at 06:40:21PM +0200, Florian Westphal wrote:
> When the conntrack module is removed, we call nf_ct_iterate_destroy via
> nf_ct_l4proto_unregister().
> 
> Problem is that nf_conntrack_proto_fini() gets called after the
> conntrack hash table has already been freed.
> 
> Just remove the l4proto unregister call, its unecessary as the
> nf_ct_protos[] array gets free'd right after anyway.

Applied, thanks!
--
To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html



[Index of Archives]     [Netfitler Users]     [LARTC]     [Bugtraq]     [Yosemite Forum]

  Powered by Linux