]> granicus.if.org Git - ipset/commit
Dumping error triggered removing references twice and lead to kernel BUG
authorJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Wed, 31 Aug 2011 10:32:55 +0000 (12:32 +0200)
committerJozsef Kadlecsik <kadlec@blackhole.kfki.hu>
Wed, 31 Aug 2011 10:32:55 +0000 (12:32 +0200)
commited9c6570aa746bdfc4e006e3fdd25b69f04cd6a2
tree05f09c45f48277c79b36b8344f4bb61b058dfa2a
parent10bdb94d4a6448b70c887cc38e0c87d3b11c2a09
Dumping error triggered removing references twice and lead to kernel BUG

If there was a dumping error in the middle, the set-specific variable was
not zeroed out and thus the 'done' function of the dumping wrongly tried
to release the already released reference of the set. The already released
reference was caught by __ip_set_put and triggered a kernel BUG message.
The issue was reported by Jean-Philippe Menil.
kernel/net/netfilter/ipset/ip_set_core.c