Florian Westphal cf5000a778 netfilter: nf_tables: fix memleak when more than 255 elements expired ... When more than 255 elements expired we're supposed to switch to a new gc container structure. This never happens: u8 type will wrap before reaching the boundary and nft_trans_gc_space() always returns true. This means we recycle the initial gc container structure and lose track of the elements that came before. While at it, don't deref 'gc' after we've passed it to call_rcu. Fixes: 5f68718b34 ("netfilter: nf_tables: GC transaction API to avoid race with control plane") Reported-by: Pablo Neira Ayuso <pablo@netfilter.org> Signed-off-by: Florian Westphal <fw@strlen.de>		2023-09-20 10:35:23 +02:00
..
ipv4	…
ipv6	…
br_netfilter.h	…
nf_bpf_link.h	bpf: minimal support for programs hooked into netfilter framework	2023-04-21 11:34:14 -07:00
nf_conntrack.h	netfilter: conntrack: Remove unused function declarations	2023-08-08 13:02:00 +02:00
nf_conntrack_acct.h	netfilter: conntrack: Remove unused function declarations	2023-08-08 13:02:00 +02:00
nf_conntrack_act_ct.h	…
nf_conntrack_bpf.h	net: netfilter: move bpf_ct_set_nat_info kfunc in nf_nat_bpf.c	2022-10-03 09:17:32 -07:00
nf_conntrack_bridge.h	…
nf_conntrack_core.h	netfilter: conntrack: fix wrong ct->timeout value	2023-04-19 12:08:38 +02:00
nf_conntrack_count.h	…
nf_conntrack_ecache.h	…
nf_conntrack_expect.h	netfilter: allow exp not to be removed in nf_ct_find_expectation	2023-07-20 10:06:36 +02:00
nf_conntrack_extend.h	…
nf_conntrack_helper.h	netfilter: helper: Remove unused function declarations	2023-08-08 13:01:59 +02:00
nf_conntrack_l4proto.h	…
nf_conntrack_labels.h	netfilter: conntrack: Remove unused function declarations	2023-08-08 13:02:00 +02:00
nf_conntrack_seqadj.h	…
nf_conntrack_synproxy.h	…
nf_conntrack_timeout.h	…
nf_conntrack_timestamp.h	…
nf_conntrack_tuple.h	netfilter: conntrack: don't fold port numbers into addresses before hashing	2023-07-05 14:42:16 +02:00
nf_conntrack_zones.h	…
nf_dup_netdev.h	…
nf_flow_table.h	Merge git://git.kernel.org/pub/scm/linux/kernel/git/netdev/net	2023-06-15 22:19:41 -07:00
nf_hooks_lwtunnel.h	…
nf_log.h	…
nf_nat.h	net: move the nat function to nf_nat_ovs for ovs and tc	2022-12-12 10:14:03 +00:00
nf_nat_helper.h	netfilter: nat: move repetitive nat port reserve loop to a helper	2022-09-07 16:46:04 +02:00
nf_nat_masquerade.h	…
nf_nat_redirect.h	netfilter: nft_redir: use `struct nf_nat_range2` throughout and deduplicate eval call-backs	2023-03-22 21:48:59 +01:00
nf_queue.h	treewide: use get_random_u32() when possible	2022-10-11 17:42:58 -06:00
nf_reject.h	…
nf_socket.h	…
nf_synproxy.h	…
nf_tables.h	netfilter: nf_tables: fix memleak when more than 255 elements expired	2023-09-20 10:35:23 +02:00
nf_tables_core.h	netfilter: nf_tables: avoid retpoline overhead for some ct expression calls	2023-01-18 13:05:25 +01:00
nf_tables_ipv4.h	netfilter: use skb_ip_totlen and iph_totlen	2023-02-01 20:54:27 -08:00
nf_tables_ipv6.h	netfilter: nf_tables: reduce nft_pktinfo by 8 bytes	2022-10-25 13:44:14 +02:00
nf_tables_offload.h	…
nf_tproxy.h	netfilter: tproxy: fix deadlock due to missing BH disable	2023-03-06 12:09:48 +01:00
nft_fib.h	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_meta.h	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
nft_reject.h	netfilter: nf_tables: Extend nft_expr_ops::dump callback parameters	2022-11-15 10:46:34 +01:00
xt_rateest.h	…