diff options
author | Dmitry Mishin <dim@openvz.org> | 2007-06-05 12:56:09 -0700 |
---|---|---|
committer | David S. Miller <davem@sunset.davemloft.net> | 2007-06-07 13:40:32 -0700 |
commit | 4c1b52bc7a2f5ee01ea3fc248a8748a1c6843f7c (patch) | |
tree | 4176d06988ff65fa3c5d060642523093a88c7a64 /net/netfilter/nf_conntrack_amanda.c | |
parent | 3c158f7f57601bc27eab82f0dc4fd3fad314d845 (diff) |
[NETFILTER]: ip_tables: fix compat related crash
check_compat_entry_size_and_hooks iterates over the matches and calls
compat_check_calc_match, which loads the match and calculates the
compat offsets, but unlike the non-compat version, doesn't call
->checkentry yet. On error however it calls cleanup_matches, which in
turn calls ->destroy, which can result in crashes if the destroy
function (validly) expects to only get called after the checkentry
function.
Add a compat_release_match function that only drops the module reference
on error and rename compat_check_calc_match to compat_find_calc_match to
reflect the fact that it doesn't call the checkentry function.
Reported by Jan Engelhardt <jengelh@linux01.gwdg.de>
Signed-off-by: Dmitry Mishin <dim@openvz.org>
Signed-off-by: Patrick McHardy <kaber@trash.net>
Signed-off-by: David S. Miller <davem@davemloft.net>
Diffstat (limited to 'net/netfilter/nf_conntrack_amanda.c')
0 files changed, 0 insertions, 0 deletions